Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

variable in email to display current value of critical sam alert and the critical threshold.

ewk.jr

this is what i have that is working currently:

email subject -

Windows Server Application Monitor on ${N=SwisEntity;M=Node.Caption} is in ${N=SwisEntity;M=Status;F=Status} state

email body -

An issue on an object you are monitoring occurred at ${N=Alerting;M=AlertTriggerTime;F=DateTime}.

${N=SwisEntity;M=ApplicationAlert.ComponentsWithProblems}

I need the variable to display the current value of the application alert and what the critical threshold is.

I tried these but i didnt get any values when simulating:

${N=SwisEntity;M=ComponentAlert.StatisticData} i thought this would tell me the current value of the alert
${N=SwisEntity;M=ComponentAlertThresholds.ThresholdStatisticCritical} i though this would be what the critical threshold is

Also I would like the description of the alert from this for example:

Find more posts tagged with

Accepted answers

All comments

monitoringlife

If your using scripts, try:

${N=SwisEntity;M=MultipleStatisticData.StringData}

ewk.jr

I'm adding the variable within the trigger email action. I'm not sure how to do it another way.

monitoringlife

Is this an application or component alert (as configured on 'trigger condition > I want to alert on:"?

ewk.jr

I want to alert on: Application

monitoringlife

I poked around a little. The alert engine does not make it easy to link between applications and components despite the links being available in SWQL. Hopefully someone more familiar with SAM can help out.

ewk.jr

hopefully. i'm still looking into it.

adam.beedell

Monitoringlife is on two correct tracks below, you can try repurposing these below for an application level alert looking for component-level details

(Top 1)
Statistic: ${N=SWQL;M=Select top 1 concat(a.Components.CurrentStatistics.ComponentStatisticData, '') as data
--, a.Components.CurrentStatistics.ErrorMessage
from orion.apm.Application A
where a.ApplicationID = '${N=SwisEntity;M=ApplicationID}'
UNION
(select top 1 'zzCouldNotFind' as stopserrors from orion.apm.Application A)
Order by data asc}
Message: ${N=SWQL;M=Select top 1 concat(a.Components.CurrentStatistics.ErrorMessage, '') as data
from orion.apm.Application A
where a.ApplicationID ='${N=SwisEntity;M=ApplicationID}'
UNION
(select top 1 'zzCouldNotFind' as stopserrors from orion.apm.Application A)
Order by data asc}

Super sketchy code but it'll do

A nicer version would be a SQL macro including FOR XML PATH, which would round multiple potential issues into the top right 'cell' of the response. I dont have that to hand though