Variables in Alert Trigger Actions

drattee

Hello,

I am trying to see what I may be missing in regards to how the email message is built.

Some Background:

We are currently using the "send an email" action in our alerts to email SalesForce and have it auto generate trouble tickets.

The message body is currently below:

SUBJECT
Alert ${N=Alerting;M=AlertName} at ${N=Alerting;M=AlertTriggerTime;F=DateTime}

message body
${N=SwisEntity;M=Name}|
${N=Alerting;M=AlertTriggerTime}|
${N=Generic;M=Date;F=Date}|
${N=SwisEntity;M=IPAddress}|
${N=SwisEntity;M=DetailsUrl}|
${N=Alerting;M=AlertDetailsUrl}|
${N=Alerting;M=AcknowledgeUrl}|
${N=Alerting;M=AlertName}|

However, it seems to only work correctly when it is involved in an alert from a VM. see the email contents below:

SFLF-cam-server01|
Wednesday, March 16, 2022 10:50 AM|
Wednesday, March 16, 2022|
*correct IP address*|

*CorrectLinkRemoved*|

*CorrectLinkRemoved*|

*CorrectLinkRemoved*|

TECHOPS - Memory Usage Serious - Virtual Machines|

Now, for example, we have the response from when a Juniper MX5 triggers the alert:

${N=SwisEntity;M=Name}|
Tuesday, March 15, 2022 2:29 PM|
Tuesday, March 15, 2022|
${N=SwisEntity;M=IPAddress}|
*CorrectLinkRemoved*|

*CorrectLinkRemoved*|

*CorrectLinkRemoved*|

Juniper MX5 - Network Infrastructure- High Mem / TECHOPS|

 I'm trying to figure out why it is working correct with one alert profile and not the other.

I have played around and created the following on the Juniper alert:

${N=SwisEntity;M=Caption}|
${N=SwisEntity;M=SwitchPortEntriesAsMapped.MappedInterfaces.Caption}|
${N=Generic;M=Date;F=Date}|
${N=SwisEntity;M=IP_Address}|
${N=Alerting;M=AlertTriggerTime;F=DateTime}|
${N=Alerting;M=AlertDetailsUrl}|
${N=Alerting;M=AlertName}|

and it produces:

MRQTMIMN-MX5-01|
ge-1/1/0 · MRQTMN.EX4300.01.41-ge-1/0/0|
Wednesday, March 16, 2022|
*CorrectIP*|
Never|
|
Juniper MX5 - Network Infrastructure- High Mem / TECHOPS|
|

the pipes are for delimiting in SalesForce.

Thanks. The end goal is to have them all look (and act) like that very first VM alert up top. Any insight would be appriciated.

marlief22

Hi there, 

When you used the 'Insert Variable' menu, you have selected a property that only has a value for your server machines and not for your network machines. It can be quite confusing as the same data can show up in multiple different device properties, as we can see below: 

${N=SwisEntity;M=Name} is especially standing out to me, as there is no 'Name' column in the Nodes table:

I would assume this is most likely referencing the following property, which would only fill in if the device is polling using the agent:

This is why for the Juniper alert using ${N=SwisEntity;M=Caption} it works fine. 

My recommendation would be to rejig your variables so they are only from the Nodes table (basically nothing that has parentheses after it)

Hope that helps! 

Kind regards,

Marlie Fancourt | SolarWinds Pre-Sales Manager

Prosperon Networks | SolarWinds Partner since 2006

If this helps answer your question please mark my answer as confirmed to help other users, thank you!