Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Looking for report that will show all enabled Alerts actions:

snorfolk

Trigger condition
All trigger actions
Who's being notified
On Reset, who's being notified

I'm hoping that one already exists or that someone can lay it out for me. Usiing SWQL syntax. Thanks

Find more posts tagged with

Report alert actions

Accepted answers

marcrobinson

(+) Enabled Alert Query Details - Reports - The Orion Platform - THWACK (solarwinds.com) Check this report out. I think this is the one I was looking for. I believe some of the actions were added to it.

All comments

marcrobinson

this is not everything you wanted but it is what I found. I know that someone else posted a report this year that broke down the xml file with even more details.

All Configured Alerts Inventory Report - Reports - The Orion Platform - THWACK (solarwinds.com)

Here is a quick swql to grab actions and link them to alerts in swql.

SELECT oa.ActionID, oa.ActionTypeID, oa.Title, oa.Description, oa.Enabled, ac.DisplayName as AlertName, ac.Enabled as IsAlertEnabled FROM Orion.Actions oa JOIN ORION.ActionsAssignments aa on oa.ActionID = aa.ActionID JOIN Orion.AlertConfigurations ac ON aa.ParentID = ac.AlertID

This is not as clean as you were asking, and I cannot find the link to the above-mentioned report that someone created.

snorfolk

Thanks, marcrobinson

This looks very promising! This is very close if not exactly what I' m looking for.

I have two questions:

What's the difference between Enabled and Enabled 1?

I'm assuming that it shows the action for all alerts can it be streamed lined to report only enabled alerts (shortens the report)?

marcrobinson

I am assuming that the AS statement was not in the one of queries. If you have the same field from different entities in a query they will show up as Enabled, Enabled1. Try the following, enabled is reported on from two separate entities.

SELECT oa.Enabled, ac.Enabled

FROM Orion.Actions oa JOIN ORION.ActionsAssignments aa on oa.ActionID = aa.ActionID JOIN Orion.AlertConfigurations ac ON aa.ParentID = ac.AlertID

The report out is two fields: Enabled and Enabled1. They are in order, so ac.Enabled is Enabled1.

Now try the following

SELECT oa.Enabled, ac.Enabled as IsAlertEnabled

FROM Orion.Actions oa JOIN ORION.ActionsAssignments aa on oa.ActionID = aa.ActionID JOIN Orion.AlertConfigurations ac ON aa.ParentID = ac.AlertID

You get Enabled and IsAlertEnabled. Not doing this and created a web report will have you hating your keyboard as to which is which.

marcrobinson

hmmm i dont see a where clause to look for only enabled alerts. Try this:

Note the where clause and that it is looking for enabled alerts in the ac (alertconfigurations) entity.