Advanced Alert

Question

Good day to all.  I'm new to Solarwinds Orion and just recently upgraded to 8.0.2  I would like to supress the alert from downline switches that are connected to their particular router.  I know that from the Alert Supression tab I need to lines e.g.

Supress alert when ALL of the following apply

NodeName isequalto carenet-alton
NodeStatus isequalto down

My question is this...I have 33 other routers with down stream switches that need the same alert supression.  Do I put in the same two lines for each router ? And which do I use ALL, ANY,NONE or NOT AT ALL. Or is there an easier way.  It's alot easier to do this from the Basic Alerts but I find that it is not as granular as Advanced Alerts.  Thank you all for your time.

stoned26 · Answer

Actually you will need to setup an alert for each of the other 33 routers.  If you use the "all" argument then the alert will not suppress until all 34 router are down.  Then with the "any" argument if site_a fails then site_b fails the alert for site_b will be suppressed since one router in the suppression list has already failed.   I found it is best to create a template this way you can copy the same alert and only change the trigger, reset and suppression arguments and not have to change the alert action and reset action, which doubles the work involved.  I have opened a case with Solarwinds to see if there was a workaround of some kind.  They were not aware of one and said they will send it to the development team.  I would also suggest if you are using an email or paging action send to a distribution list.  This way if you need to make changes to who receives these messages; you only need to change the distribution list and not each alert and reset action.

Good luck!

David S.