Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Active alerts - Need active alerts dashboard to contain only the alerts triggered in last 30 days

Hi All,

We have the older alerts (almost year ago ) lying in the dashboard so we don't want those alerts , if we clear it , it will trigger again.

So we want to create a dashboard which has active alerts only from 30 days.

Any help is appreciated. Thanks in advance.

Find more posts tagged with

Accepted answers

vandu

@sguido

Can you please provide me the complete query

All comments

vinay.by

There are several threads on the same, create your own dashboard and use these queries on the dashboard to modify it accordingly.

https://thwack.solarwinds.com/product-forums/the-orion-platform/f/alert-lab/90926/alerts-weekly-report

https://thwack.solarwinds.com/product-forums/server-application-monitor-sam/f/forum/43696/all-active-alerts-sql-query

https://thwack.solarwinds.com/product-forums/the-orion-platform/f/forum/94390/custom-query-for-fetching-active-alerts

https://thwack.solarwinds.com/product-forums/the-orion-platform/f/orion-sdk/94636/how-to-query-active-alert-for-weekly-basis

__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT

vandu

@vinay.by

Thanks for your reply.

I went through these links but my requirement i need only the active alerts which are present in the dashboard from past 30 days

sguido

I use the following query to make this dashboard. You could use something similar and create a WHERE condition for day (D in the query) is less than 30. Note - currently this query only returns active alerts but you can change that as well.

(MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))) AS Seconds, AlertActive.TriggeredDateTime, ToLocal(AlertActive.TriggeredDateTime) AS LocalTriggerTime,AlertActive.TriggeredMessage,Nodes.Caption,Nodes.IP, Nodes.DetailsURL,AlertConfigurations.Severity AS Severity,
CONCAT('solarwinds.clemson.edu/.../ActiveAlertDetails.aspx AS AlertURL,
CONCAT(CASE
    WHEN (MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))%1440)<720 THEN (MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))/1440)
    ELSE ((MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))/1440)-1)
END,'D ',
CASE
    WHEN (MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))%1440%60)<30 THEN ((MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))%1440)/60)
    ELSE (((MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))%1440)/60)-1)
END,'H ',
(MinuteDiff(AlertActive.TriggeredDateTime,ToUtc(GetDate()))%1440%60),'M'
) AS Duration

FROM Orion.AlertActive AS AlertActive
INNER JOIN Orion.AlertObjects AS AlertObjects ON AlertActive.InstanceSiteId=AlertObjects.InstanceSiteId AND AlertActive.AlertObjectID=AlertObjects.AlertObjectID
LEFT JOIN Orion.Nodes AS Nodes ON AlertObjects.RelatedNodeId = Nodes.NodeID
INNER JOIN Orion.AlertConfigurations AS AlertConfigurations ON AlertObjects.AlertID=AlertConfigurations.AlertID
WHERE AlertActive.Acknowledged IS NULL
ORDER BY Seconds ASC

vandu

@sguido

Can you please provide me the complete query

vandu

@sguido

Please provide me the complete query as i need to create a dashboard for the alerts triggered in last 30 days.

sguido

Since I store the Days of the duration in D, I think you need to just add a where statement for D. Something like.

WHERE D < 31