One email notification for all down nodes in an alert

Question

hello,

I have created alert for a specific device type that

if <Node> devicetype is equal to XYZ , and Node status is down , generate an alert

I am looking to send an email notification in such a way that it does not send individual email for each node that is down which is what i am getting right now.

Is there a way to collate all down nodes in one email and then send the notification.

how can i create an alert or email notification to take this into effect

Thanks in advance

mesverrum · Answer

There is an OOTB alert that actually works as a pretty good example of how to do a single alert for multiple objects, it's the one called "Polling rate limit exceeded" On your alert trigger conditions screen jump to the bottom and expand the advanced options > Check the box for enable complex conditions > Check the box for "alert can be triggered if ..." and set the number to 1, this way there will be a single incident of the alert when 1 or more objects match those criteria. Assuming you are sending out some kind of notification about these triggers you will also need to do some editing there to deal with the fact that instead of a single target you could have multiples. You can see the syntax from that example alert I mentioned <<<${N=SwisEntity;M=Engine.DisplayName} ( ${N=SwisEntity;M=ScaleFactor} ${N=SwisEntity;M=CurrentUsage}% >>> Wrapping the variables you want to use inside the <<< >>> will tell Orion to repeat those values for each object that triggered.

neomatrix1217 · Answer

Is there a way to collate all down nodes in one email and then send the notification?

I'm not understanding your question do you want an alert to capture all the nodes that are currently down and send and email?