Is there a way to get a list of what alerts/triggers are set for a specific Node/Interface?
You can create a custom SQL report that will provide this information. If you use the following SQL query I threw together, it will provide you the information you're looking for. It's not pretty but it should work for the most part.
select alertdefinitions.alertname as Alert, alertdefinitions.alertdescription as Description, actiondefinitions.triggeraction as TriggerAction, actiondefinitions.title as Actionfrom alertdefinitions inner join actiondefinitions on (alertdefinitions.alertdefid = actiondefinitions.alertdefid )where alertdefinitions.enabled = 1 order by Alert
You'll probably want to add a report group for Alert. Also, for some reason, TriggerAction appears as a -1 and 0 in the report. -1 represents a trigger action whereas 0 represents a reset action. Finally, this will only show active alerts. If you want a report for all alerts, active or not, simply remove the where alertdefinitions.enabled = 1 condition. Hope this helps.
Because the triggers are dynamic and evaluated against your inventory, regardless of what's in it (that's the power, right?) there's no specific correlation between them and the nodes/interfaces. If you have a node down alert triggering against your production nodes and you had 50 more production nodes, the matching number increases accordingly.
Why do you need the list? Maybe there's another way to go about it.
Sorry, been so long to reply to this...been put on many other projects. Maybe I should clarify what I'm looking for. After much reading the last couple days, I believe what I am looking for, is more of an inventory list that give whats being monitored (interfaces, volumes, etc.) and what will alert for that node/interface.
Am I asking too much? I could probably do without the alerting aspect, but if possible would be helpful. I have several different people installing hardware/adding into SolarWinds, and I need to tell if they are setting up everything correctly. Basically my boss doesn't want things dropping and asking why SolarWinds didn't report that, then me going back to add what should have been done in the first place.
I agree, there may be a different way to go about this, so I'm open for suggestions.
Thanks All,
Dave
I can see the value in that.
something like this? (abbreviating some of the alerts, but...)
Node Name Alert
Node1 Ping, CPU %, Disk Space, Interface 1, interface 2
Yes...
This may need to be moved to Report Lab or elsewhere possibly, to get proper exposure.
I am looking for pretty much the same thing. A competitor of SW has a place where all of the nodes are listed on the left, with a row for each action that is taken. That web display is available as a printable item, which can then be saved in MS Office format.
I would be happy with a list of alerts and their matching actions that could be exported as text or csv. I can see the alert list on the web interface, a cool thing in NPM 10.2, thank-you v. much, but I cannot see all of alerts, not can I export them as a readable list. It would be useful to have such a list that shows the alert name, description, and the human language description of the action. For example:
Action name: Email router-heads when a node in dept. router is down
Alert description: This alert will email Jon's tier2 people and page the on-call person
Alert Trigger action: Email jwest@myco.com, snewber@myco.com, 9255559919@airmail.com
Alert Reset action:
Thanks,
esamurai
Thank-you, Quang! That works great and is exactly what i was looking for. How would I find the table and field names, if I wished to expand upon this?
For others reading this, I went to Orion report writer and selected File : New Report. In that list there is Advanced SQL, where I clicked OK. I typed what was specified by username "gle", above, and now have a report where I can view the Alert name, description, and what actions are taken on trigger and on reset. This report is available on my Orion NPM website, so the other team members can view all of the currently enabled alerts and actions without having to drill down into each one.
esam
As you as see from the SQL query, it's a combination of the AlertDefinitions and ActionDefinitions tables. If you peruse the tables, you should see any relevant columns that you'd like to add to this report. I'm glad I was able to help!
