This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

alerts weekly report

Hi Team,

I want to create a alert report on weekly basis based upon severity.Could you please guide me that how to  create report.

client want to see that how many critical, warning and informational alert are triggered on weekly basis, Could you please guide me that how to  create report.

Thanks

aswani

  • Hi Ashwin,

       we don't have node caption option attribute  not available in database query. so we have to given only Entity caption in database. i think Particular device for alert history report not aware. 

    Thanks

  • Hi Kishore,

    Thanks a lot for your answer. RelatedNodeCaption is available in the alert objective table in the database. I have verified and getting the report but i am unable to combine both RelatedNodeCaption & Entity caption since i am not expert in SQL. Could you please help me to get the exact report.

     

    If you have any possiblity, Please let me know  to schedule a call to discuss about it.

  • Hi Sigma,

    Thanks for your reply, Below query almost met my requirement but need to include the Relatednodecaption option in the same. Could you please help to get the expected report.

    select aa.[timestamp] as TriggeredDateTime , aa.message,ac.severity,

    (CASE aa.eventtype

    WHEN 0 then 'Triggered'

    WHEN 1 THEN 'Reset'

    WHEN 2 THEN 'Acknowledged'

    WHEN 3 THEN 'Note Added'

    WHEN 4 THEN 'Added to Incident'

    WHEN 5 THEN 'Action Failed'

    WHEN 6 THEN 'Action Succeeded'

    WHEN 7 THEN 'Unacknowledge'

    WHEN 8 THEN 'Cleared'

    END) AS EventType

    ,ac.name,ao.entityCaption as Name_of_alert from Alerthistory aa

    join AlertObjects ao on ao.AlertObjectID = aa.AlertObjectID

    join AlertConfigurations ac on ao.AlertID = ac.AlertID

    where aa.[timestamp] between ${fromtime} and ${totime}

    and aa.eventtype=0

    order by  aa.[timestamp] Desc

  • Your above example is in SQL, but I'd (personally) stay away from SQL and use SWQL instead.  SolarWinds will frequently change the structure of the SQL database between releases, which could render this report useless after the next upgrade.

    Did you download and import and look at the report I linked?  That's written in SWQL so it should be 'safe' as the products get upgraded.

    If you want to add the related node, you just add that to the query.  I use SWQL Studio (available in the Orion SDK downloads)  to test my queries as I'm developing.

    It would be much more helpful on THWACK if you put your 'code' inside of code blocks (On the editor menu, Insert, Code) and select SQL in there.

    Did you check in the Content Exchange for Reports?  Someone there might have something that fits the bill or is very close and you could make minor edits.