How the usage of duration in the trigger for SolarWinds Platform alerts are working

I have set up an alerts for CPU utilization. The trigger condition is when over 95%. I have also placed a duration of 15 minute on trigger action which means, if the utilization is 95% or above for 15 minutes then the alert should trigger.

The polling for node statistics is 10 minutes so the data will be polled once in every 10 minutes. Now I want to understand how the usage of duration in the trigger for SolarWinds Platform alerts are working. Once SolarWinds find the CPU utilization as above the configured threshold does that will poll on the 15th minute again to check the current utilization or that will just check on the available last polled data to trigger.

Find more posts tagged with

Alert

advanced_alert_setup_question

alert triggers

alert_condition

Alerting

Accepted answers

monitoringlife

There are 3 major timers to be mindful of.

Polling interval (every 10 minutes you get a snapshot in time of CPU at that exact second)

Evaluation interval (How often the alert with query data)

Condition must exist for: (how long the condition must return true for during the evaluation window (note, it must return true for every interval).

I generally set my condition must exist for equal to the desired number of polling intervals +1 minute to account for delays and processing.

In for example, your alert will review and trigger off two polls worth of data initial and the 10 minute one. The alert will fire 5 minutes after the 2nd poll.

All comments

monitoringlife

There are 3 major timers to be mindful of.

Polling interval (every 10 minutes you get a snapshot in time of CPU at that exact second)

Evaluation interval (How often the alert with query data)

Condition must exist for: (how long the condition must return true for during the evaluation window (note, it must return true for every interval).

I generally set my condition must exist for equal to the desired number of polling intervals +1 minute to account for delays and processing.

In for example, your alert will review and trigger off two polls worth of data initial and the 10 minute one. The alert will fire 5 minutes after the 2nd poll.

AbhijithMohanan552

Yeah! my thought was also similar. But I just wanted to confirm whether SolarWinds will poll according to time interval that we set for the condition must exist.

Thanks for the response!

monitoringlife

Alerting and monitoring are completely decoupled. The alert engine will not enforce new polling intervals to match the alerts configuration. The alert engine (for lack of a better phrase and to keep this short) just SQL queries on a timer against the collected data for matches.