Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Advanced Alert using Interface Custom Properties... HELP!!!

I have created 4 different alerts to alert on 4 different scenarios regarding the primary and secondary interfaces for our network routers. All of our WAN interfaces have been given a Custom Properties of Primary_VPN_Tunnel, Secondary_VPN_Tunnel, Public_internet_Primary, or Public_internet_Secondary. Each Interface should be True for 2 of the previously mentioned conditions.

I have set up the alert as follows:

-----Trigger Conditions for Alert 1-----

Trigger Alert when all of the following apply

InterfaceName is equal to *

OperationalStatus is equal to Down

Primary_VPN_Tunnel is equal to Yes

Public_internet_Primary is equal to Yes

-----Alert Suppression-----

Node Status is equal to Down

I have set up alerts where any of the 4 combinations of these may be true. However, I am not getting alerted on this. I am new to Orion and setting up these alert conditions. I could really use some help on this. Thanks in advance for your help.

Find more posts tagged with

Accepted answers

FormerMember

I finally got it figured out. I had to get really specific to make it work. Here is the final product for the first alert.

-----Trigger Conditions for Alert 1-----

Trigger Alert when all of the following apply

InterfaceStatus is equal to Down

Trigger Alert when all of the following apply

Primary_VPN_Tunnel is equal to Yes

Public_internet_Primary is equal to Yes

Secondary_VPN_Tunnel is equal to No

Public_internet_Secondary is equal to No

It works like I charm. I now get an alert when we lose a line that says, "Services for SiteName are degraded. InterfaceName is down.

Thanks for the assistance. I really appreciate it.

All comments

byrona

You don't want to use that Alert Suppression. Alert suppression looks through the database and if ANYTHING matches it, the alert will be suppressed. In this case if there is any node that is down it will suppress the alert.

A better way to accomplish this would be to put a statement in the Alert Trigger that says "Node Status not equal to Down".

Hope this helps.

P.S. A great technical reference on Alerting can be located HERE.

FormerMember

Thanks, I'll give it a try.

FormerMember

It is still not working. I had a serial interface with the same designations for VPN and Internet traffic as the example I gave and it did not alert on it. It alerted that the node was down but not that the interface. Should I change this to query the node?

byrona

On the first condition you have "InterfaceName is equal to *", unless you have that specified as a value you may want to remove that.

FormerMember

I had that in there so it knew it was looking for an interface. Does the condition querying for the custom interface cover that? Thank you for taking the time to answer me. I really do appreciate that. I will try deleting that line and see if it will trigger the alert.

FormerMember

Also, I have deleted the condition InterfaceName is equal to. Here is what I am seeing as an issue. Please correct me if I am wrong. When you specify a Custom Property it asks for these 4 conditions: True, False, 0, or 1. When you specify the data you are looking for in the custom property, for example: VPN_Primary, it gives a drop down menu for either yes or no. I believe this is the problem but I don't know how to fix it. I am reviewing the documentation now.

FormerMember

I finally got it figured out. I had to get really specific to make it work. Here is the final product for the first alert.

-----Trigger Conditions for Alert 1-----

Trigger Alert when all of the following apply

InterfaceStatus is equal to Down

Trigger Alert when all of the following apply

Primary_VPN_Tunnel is equal to Yes

Public_internet_Primary is equal to Yes

Secondary_VPN_Tunnel is equal to No

Public_internet_Secondary is equal to No

It works like I charm. I now get an alert when we lose a line that says, "Services for SiteName are degraded. InterfaceName is down.

Thanks for the assistance. I really appreciate it.