Elevate alert severity based on thresholds

mvpramod022

Hi All,

I was wondering if there is an option in solarwinds alerting for automatically elevating the severity of an based on thresholds . 

Example : In case of disk utilization monitoring, i have created 2 alerts :

- alert with Warning for > 90% 

- alert with Critical for > 95%

Problem : For each of the alert , an action is configured to sent email to our incident management tool , which automatically creates email based incidents . As the disk utilization progresses from 90% to 95% , solarwinds would  generate 2 different alerts and thus creating 2 tickets for the same incident  

If there is a possibility of elevating the severity of the alert from "Warning" to "Critical" on the same alert as the disk utilization progresses , it would avoid multiple incidents for the same "incident" ?

Please share your thoughts and suggestions .

brscott

The base answer is No.  Not the way you are thinking.  Most handle this inside the ticketing system, yes it creates two tickets, but this is generally considered good.  Either way, the tech working on it needs to get notified that the system went from warning to critical levels.

I'm guessing that you are using simple "Volume" or "Volume Capacity Forecasting" to generate the alert.  Would you be willing to switch to a custom SWQL alert that would probably be very complex and not be understandable to future you?  We might be able to come up with something.  But I just have to say it again... it will be very ugly and unreadable, and would probably still have wierd issues.

For now, please create a feature request.  This is how solarwinds knows what we want to see from them.  You want an escalation condition.  They already have to a condition to escalate after a time, you are looking to add a condition section just like the trigger condition.  If you create the request, then please post it back here, so we will notice it and upvote it.

https://thwack.solarwinds.com/t5/NPM-Feature-Requests/idb-p/npm-feature-requests