Create an "Active Alerts" view based only on critical alerts

Question

Hello,

I was attempting to create a new view for a NOC time. Within this view, I wanted to include an "Active Alerts" view, but I wanted the view to only show alerts with a severity of critical. Is there any way to filter the alerts down to only critical alerts?

Thanks

zackm · Accepted Answer

Not natively, but you can create a report using SWQL that should meet your needs: SWQL - Active Alerts Report To limit by severity to only Critical alerts, try this: (note the addition of line 19) SELECT o.AlertConfigurations.Name AS [ALERT NAME] ,'/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:' + ToString(o.AlertObjectID) AS [_LinkFor_ALERT NAME] ,o.EntityCaption AS [ALERT OBJECT] ,o.EntityDetailsURL AS [_LinkFor_ALERT OBJECT] ,o.RelatedNodeCaption AS [RELATED NODE] ,o.RelatedNodeDetailsURL AS [_LinkFor_RELATED NODE] ,ToLocal(o.AlertActive.TriggeredDateTime) AS [ALERT TRIGGER TIME] ,o.AlertActive.TriggeredMessage AS [ALERT MESSAGE] ,CASE WHEN o.AlertConfigurations.Severity = 1 then 'Critical' WHEN o.AlertConfigurations.Severity = 2 then 'Serious' WHEN o.AlertConfigurations.Severity = 3 then 'Warning' WHEN o.AlertConfigurations.Severity = 4 then 'Informational' WHEN o.AlertConfigurations.Severity = 5 then 'Notice' END AS [Severity] FROM Orion.AlertObjects o WHERE o.AlertActive.TriggeredMessage <> '' AND o.AlertConfigurations.Severity = 1 ORDER by o.AlertActive.TriggeredDateTime DESC And please go vote on this Feature Request to have all of this functionality added to the native resource: Thanks! -ZackM Loop1 Systems: SolarWinds Training and Professional Services LinkedIN: Loop1 Systems Facebook: Loop1 Systems Twitter: @Loop1Systems

Create an "Active Alerts" view based only on critical alerts

Top Replies