This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Alerts and Dependencies

HI Folks.

We have multiple sites.  Each site has a bunch of servers behind a firewall and that firewall behind a router.   Currently, if the route goes down, we get Down alerts for each of our servers, which we don't want.  Likewise, for the firewall. 

SW suggested, we need to manually create a dependency on the firewall and a second dependency on the router.. which is not practical given the volume of servers.

Another option SW suggested was to create an alert for each site (SiteA Servers Down)  and have the conditions say "if Server location is SiteA & Server status is down & SiteA-FW status is up & SiteA-Router status is up, then fire the alert".   But mentioned we would have to create Custom SQL or SWQL statements for the FW/Router status condition.

Curious what other options people might suggest to achieve this.

OR - what would the custom SQL/SWQL look like to achieve that.

Cheers,

Matt.

Parents
  • The way that I've done this in the past is this way:

    Build 2 groups:

    • Site A: Infrastructure
    • Site A: Edge Routers

    Then your logic would be:

    • Site A: Infrastructure depends on...
    • Site A: Edge Routers which depends on...
    • Site A: Firewall (statically defined)

    Relationships:

    Parent Child
    Site A: Firewall Site A: Router
    Site A: Router Site A: Infrastructure
  • thanks for your reply !!

    I recently had a meeting with our technical contacts at solarwinds and they told me this two tier Parent - Child won't work. 

    As I understand it, in your scenario, if the firewall goes down, your routers won't alert, but your infrastructure will.

    They suggested we'd have to have the infrastructure dependent on the router, and create a second dependency on the firewall.

  • That'll also work.  Realistically, if the Firewall is down, then everything else (most likely) is down.  However, if the router is down, then that's going to be your edge case that you'll need to make sure you account for in your alerting.

Reply Children
No Data