Orion not logging or alerting on deleted node

The canned alert stopped working and look at table AuditingEvents and it shows things suddenly stopped logging 3 weeks ago. Message Center still knows about deletions but seems like in some other table or something. Or this function was turned off in Orion but I can't see to find where that is on/off.

Anyone else had this issue? I am on 2020.2.6 HF1

Thanks
Zak

Find more posts tagged with

alerts_do_not_work

Alerting

Accepted answers

All comments

KMSigma.SWI

What's the name of the canned alert that is no longer behaving?

There's a very old one (flagged as deprecated) and a newer one. I want to be clear that we are talking about the report where you are seeing the problem.

zkahl

Thanks for reply, no I am not talking about report. I would think the report is also affected with my issue since these aren't getting logged in AuditingEvents table. I think an option was accidently changed, I will look to see if I can find it. Or open case if needed.

zkahl

Here is an update. I did open a case and we found could have been related to last upgrade when was problematic. I tried this under web console settings,

uncheck "Enable Audit Trails", and re-enabled. About 30 mins later started working. Wanted to post this incase someone else have has same issue I had.

KMSigma.SWI

Ah - understood. I was curious because this was posted in the Alert lab and not the general Orion forum.

shuth

I've occasionally seen this in various instances and have never been able to find a root cause. Occasionally the Auditing will just stop working - no audit events at all. Restarting the SolarWinds services sometimes fixes it, or disabling/reenabling the auditing, or a full blown repair with the Config Wizard.