GENERATE A REPORT WHICH TELLS YOU NODE AND ALERT(NAME AND MESSAGE) CONFIGURED FOR ALL NODE : NOTE REPORT SHOULD NOT INCLUDE ACTIVE ALERT(NAME AND MESSAGE)?
Caps lock aside, are you looking for a report that tells you all the possible alerts for each node? or all alerts that can trigger on any node? When you say "message", which one do you want? The Alert Description, or what the trigger action writes out to the Event Log or to an e-mail? When you specify alerts that are configured for all node, but not active alerts, do you imply Enabled (triggerable) alerts as "active" alerts, or do you mean currently "active" alerts (currently triggered)?
You haven't gotten any response up to now because there are too many ways to interpret your question. Try writing out a simple example of what you want to see using a spreadsheet. What columns are there? What kind of data is in each row? Give us this, and it'll help us figure out exactly what you are looking for.
Thanks for your reply!
Sorry about the caps lock - I did not realize that earlier and I am new to solarwinds and thwack community.
So my simple question is - I need list of alerts for each node.
Thanks
KP.
this should get you in the right direction:
you can use the web report writer to create a custom SQL report and then use this query.
selecta.name as 'ALERT',o.entitycaption as 'ALERT OBJECT',o.entitytype as 'ALERT OBJECT TYPE',o.relatednodecaption as 'RELATED NODE'from alertobjects ojoin alertconfigurations a on a.alertid = o.alertidwhere a.enabled = 1order by a.name, o.entitycaption
-ZackM
Loop1 Systems: SolarWinds Training and Professional Services
I have performed following steps in report writer but when i select preview - get an SQL error:
- open report writer
- select new
- select advance SQL
- select SQL tab and copy and paste your query
- run preview
SQL Error : Invalid object name 'alertobjects'
What are your installed software modules and versions? (You should be able to get a full list at the footer of your SolarWinds website)
Below are the modules and versions:
NPM 11.0.1
SAM 6.1.0
NTA 3.11.0
IVIM 1.10.0
It's going to be harder to configure something like this in 11.0.1 especially if you're using Advanced Alerts. The alerts themselves usually aren't set up on a per node basis and will usually cover everything in the database. Also, with the way the table and the conditions are built, there's nothing to relate a specific device to a node until the alert triggers. Now, if you have alerts set to trigger on specific nodes, then there would be ways to do that, but you'd have to parse out the trigger query field from the database of find anything that contains a node name within it.
Select
AlertStatus.AlertDefID,AlertStatus.ObjectName,
Events.EventID,Nodes.Vendor,Nodes.NodeID,Nodes.Status,Nodes.Caption as "Node Name",hw.ServiceTag as Serial,Message,AlertStatus.ObjectType as "Alert Type",EventTime,Nodes.IP_Address,Nodes.CRM_Account
from AlertStatus WITH(NOLOCK)
inner join Events WITH(NOLOCK) ON DATEADD(MINUTE,DATEDIFF(MINUTE,0,AlertStatus.TriggerTimeStamp),0) = DATEADD(MINUTE,DATEDIFF(MINUTE,0,Events.EventTime),0) AND CONVERT(varchar(255), AlertStatus.ActiveObject) = convert(varchar(255), Events.NetObjectID)
INNER JOIN Nodes WITH(NOLOCK) on Nodes.NodeID = Events.NetworkNode
Left outer join APM_HardwareInfo as hw WITH(NOLOCK) on hw.NodeID = Nodes.NodeID
WHERE Nodes.Status <> 9
AND AlertStatus.Acknowledged <> 1
AND Events.EventType = 5000
UNION
left outer join CustomPollerStatusTable as cps WITH(NOLOCK) on cps.UniqueID = AlertStatus.ActiveObject
Left outer join CustomPollerAssignmentView as cpa WITH(NOLOCK) on convert(varchar(255),cpa.CustomPollerAssignmentID) = AlertStatus.ActiveObject
inner join Events WITH(NOLOCK) ON DATEADD(MINUTE,DATEDIFF(MINUTE,0,AlertStatus.TriggerTimeStamp),0) = DATEADD(MINUTE,DATEDIFF(MINUTE,0,Events.EventTime),0) AN
( cps.NodeID = Events.NetworkNode
OR
cpa.NodeID = Events.NetworkNode
)
Thanks for your reply.
I really appreciate your help!
I have tried this query - it's returning results for few nodes but not exactly what I am looking for.
Thanks.
This might be because the alerts that you create also have to write to netperf as well so that it creates a message with the alert.
I wrote this up as well Some Things Solarwinds Admins Can't Live Without some of that might help you.
Please let me know if i can help any further!
Is there a version of SW that this type of report would be available?
Version 11.5 gets closer to this being able to use some of the queries provided. As well, with the latest version, there is a new resource in the node details page that allows you to see what alerts the node could potentially trigger. Along with that, when creating an alert in the new web based alerting system, there is an option to click on a summary list should there be devices/nodes that would trigger an alert prior to creating it. If there are, there is a link the link to select that will allow you to see the devices that meet the trigger condition you create.
Thank you.
This was in a post from a Question I posted and I ran the query and go the results I wanted and needed for management.
