Current Muted Alerts (v5) [SAM & NPM]

Report.png

Report that shows the Current Muted Alerts and the current audit logs (showing who did the muting).

v1 - original build

v2 - added user who did the muting and Tooltip support

v3 - added local Orion server time in addition to UTC time

v4 - Fixed a 'possible' syntax error with a Join to the Audit Table

v5 - Fixed an issue with duplications occurring when a device is flipped from Muted to Unmuted and back

Tested against Core 2017.1 with NPM 12.1 and SAM 6.4

Created "filtered" reports for Current Muted Alerts for Network Devices (v5) [NPM Only] and Current Muted Alerts for Servers (v5) [SAM Only]

I can only test on a very small segment of my environment, and would appreciate any feedback.

  • Works without any problems for me, Many thanks.

    Orion Platform 2017.1.5200, SAM 6.4.0,  NPM 12.1

  • This is very nice.  Kudos!

    By the way, we support several SolarWinds instances in my firm. Only one of them has SAM installed.  So, we can only runt this report in that server. Sadly, we're not planning to purchase more SAM licenses in the near future.  I imagine that there are other SolarWinds customers in this forum who also do not have SAM deployed in their environments. 

    Is there a way to break the SAM dependency so it runs even if you have no add-on modules? Just a thought...  emoticons_cool.png

  • Nice!  I just noticed the duplicated entry issue for the first time today and you have already fixed it.

  • Excellent Script.  I've been  using this to display currently muted nodes, however, I ran into an issue that if another users click on "suppress alerts", then it will show a duplicated event, where both userID are displayed.  Is there a way to only select only the current user?

  • Can you send me a screenshot of what's being reported?  I'll see if I can figure it out.

  • It's showing a duplicate at the UserID when suppressed the alerts along with a different user.

    pastedImage_7.png

    Code:

    SELECT DISTINCT

    CASE

              WHEN EntityUri LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%' AND EntityUri NOT LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%/%'

                 THEN N.Caption

              WHEN EntityUri LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%/Applications/ApplicationID=%'

                 THEN AA.FullyQualifiedName

              ELSE 'SomethingElse'

           END AS Node,  '/Orion/NetPerfMon/NodeDetails.aspx?NetObject=N%3a' + ToString(n.nodeid) AS [_LinkFor_Node]

    , '/Orion/images/StatusIcons/Small-' + n.StatusLED AS [_IconFor_Node], n.ipaddress as [IP],  AE.AccountID as [ID],

       

           ToLocal(SuppressFrom) AS [Suppress From], ToLocal([SuppressUntil]) AS [Suppress Until],

                        

               n.customproperties.os_type as [Type], n.customproperties.os_environment as [Environment],   n.customproperties.OS_Admin as [Admin], n.customproperties.site_name as [Site], n.customproperties.site_server_room_rak as [Rak], n.customproperties.site_server_room_row as [Row]

    FROM Orion.AlertSuppression AS AlertSup

                

    LEFT OUTER JOIN Orion.Nodes AS N ON AlertSup.EntityUri = N.Uri

    LEFT OUTER JOIN Orion.APM.Application AS AA ON AlertSup.EntityUri = AA.Uri

    LEFT OUTER JOIN Orion.AuditingEvents AS AE ON AE.AuditEventMessage LIKE CONCAT('%', CASE

              WHEN EntityUri LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%' AND EntityUri NOT LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%/%'

                 THEN N.NodeName

              WHEN EntityUri LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%/Applications/ApplicationID=%'

                 THEN AA.Name

              ELSE 'Wrong'

           END, '%') AND [EntityUri] LIKE CONCAT('%=', AE.NetObjectID)

    INNER JOIN Orion.AuditingActionTypes AS AT ON AE.ActionTypeID = AT.ActionTypeID

    WHERE [AT].ActionTypeDisplayName LIKE '%mute%'

    order by SuppressFrom

  • Just wow. Thanks KMSigma, I was just thinking how in the world am I going to remember which nodes I muted... just muted some today. Certainly going to put this report to use tomorrow. Great work. emoticons_happy.png

  • We need an option under the "Group by" on managed nodes page for muted alerts. Or list is under the "Status" category, so we can quickly identify and unmute in bulk. The report is great but when you have many to unmute bulk editing will make it much easier.

    pastedImage_1.png

  • This seems like a great Feature Request to put in the Ideas space for NPM.