Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

suppress/mute alerts using swispowershell and node names in a text file

I found this using google search on a post from years ago.

I am quite a beginner when it comes to swispowershell and coding.

I appreciate the talent on this forum.

What I would like a is a swispowershell script that with mute and unmute alerts for a period of time using node names that I provide in a text file. Can anyone help me?

This is what I have found so far:

Import-Module SwisPowerShell

$OrionServer = ''
$Username = ''
$Password = ''

$swis = Connect-Swis -Hostname $OrionServer -Username $Username -Password $Password

##Place the name of the node you want to mute in the nodename field
$entityUris = Get-SwisData $swis "SELECT Uri FROM Orion.Nodes WHERE caption LIKE 'nodenane'"
$entityUris = @( $entityUris |% {[string]$_} )

# Begin Alert Suppresion
Invoke-SwisVerb $swis Orion.AlertSuppression SuppressAlerts @($entityUris, [DateTime]::UtcNow) | Out-Null

# End alert suppression - uncomment, and comment supression line above
#Invoke-SwisVerb $swis Orion.AlertSuppression ResumeAlerts @(,$entityUris) | Out-Null

Thank you in advance

Find more posts tagged with

Accepted answers

All comments

jm_sysadmin

How far do you get? What part are you looking for help with? Is there an error?

solarwinds_beginner

The entire script works if I do 1 node at a time.

is there a way to have the script read a text file full of multiple nodenames?

thank you.

also how can i modify the script so it ask to enter the date/time and duration for suppression.

thank you in advance..im slowly learning this. Im a hardware guy and this is a steep learning curve for me.

bobmarley

Here is how to unmanage, you can change the script to mute instead

How To: Powershell - Unmanage Nodes with future unmanage and remanage time/dates - Forum - Network Performance Monitor (NPM) - THWACK (solarwinds.com)

solarwinds_beginner

that is a great find.

What I am looking for is something similar for muting and unmuting alerts.

bobmarley

I didn't get to play with it a lot but this partially works. It will mute nodes from a list of IP's. The Unmute uses a different verb and I wasn't able to figure out how to get that one working at the same time. If you comment/uncomment the mute and unmute lines they both work independently, but not at the same time. At the very bottom is a SWQL query you can use in SQWL studio to verify your work. If I get time later in the week I can look at it some more.

CLS
Add-PSSnapin SwisSnapin
$swis = Connect-Swis -host YOURORIONSERVERHERE -Trusted

$now =[DateTime]::Now
$later =$now.AddMinutes(3)

$entityUris = Get-SwisData $swis "SELECT Uri FROM Orion.Nodes WHERE IPAddress IN @IPAddress" @{IPAddress=(Get-Content C:\PowershellScripts\nodelist.txt)} #Nodelist contains a list of IP addresses, change directory to fit your environment. Ensure you have no spaces after the last IP or you will get some ghost nodes.
$entityUris = @( $entityUris | % {[string]$_} )

    #Looks like it should work but doesn't work. It does set the start time, the end time appears to be set but the node does not become unmuted when the time frame elapses
    #Invoke-SwisVerb $swis Orion.AlertSuppression SuppressAlerts @($entityUris, $now, $later ) | Out-Null

#Will mute a node beginning now. Comment of uncomment to use
Invoke-SwisVerb $swis Orion.AlertSuppression SuppressAlerts @($entityUris, $now ) | Out-Null

#Will UnMute a node beginning now. Comment of uncomment to use
#Invoke-SwisVerb $swis Orion.AlertSuppression ResumeAlerts @($entityUris, $now ) | Out-Null


<#Query to view results

select
n.nodeid,
n.status,
n.caption as [Device], n.DetailsURL as [_LinkFor_Device]

,'/Orion/images/StatusIcons/Small-' + StatusIcon AS [_IconFor_Device]

,n.IP_Address as [IP], n.DetailsURL as [_LinkFor_IP]

--, Alerts.SuppressFrom as [Mute from], Alerts.SuppressUntil as [Mute Until]
, ToLocal(Alerts.SuppressFrom) as [Mute from], ToLocal(Alerts.SuppressUntil) as [Mute Until]


from Orion.AlertSuppression Alerts

join Orion.nodes n on n.uri = AlertS.EntityURI

--Where Device LIKE '%vmmsoriont01%'

Order by SuppressFrom DESC



#>

bobmarley

(+) How to mute node with Powershell - Orion SDK - The Orion Platform - THWACK (solarwinds.com)

solarwinds_beginner

so I understand the following variable names:

$now =[DateTime]::Now
$later =$now.AddMinutes(3)

do I substitute the value Now for a specific date and time? and if so in what format?

I figure I change the later variable to whatever minutes I wish for duration?

Thank you