Monitoring Volume but reporting on Memory (too)

Hi,

First Post

I'm new to SAM and my first attempt at alerting has been somewhat difficult.

I have set up an alert which seems to be working but it then started reporting back on a servers memory even though it's a volume monitoring alert.

it's set to report on nodes with volume less than 5% but it is reporting on physical memory on one of the servers.

Any ideas on what I'm doing wrong?

Find more posts tagged with

Accepted answers

All comments

mprobus

You can set up a filter on the volume name where it is not equal to 'physical memory'

On a side note, you may considering using a group or custom property so that you don't have to specify each individual node.

ciboyle

I'll try that.

I did try to assign it to a group but it wouldn't let me know which particular node was exhibiting the issue

yaquaholic

Also, you can Go the the servers' view (or From Manage Nodes) and chose the List Resources, and then remove the memory allocations under volumes.

Why we still have these memory listed under volumes, I don't fully understand.

But I know within our environment (of several thousand monitored devices) we have them unselected on all devices, as they give us no additional information.

mprobus

For the group issue, try adding the following in your message to get the node name.

${N=SwisEntity;M=Node.SysName}

ciboyle

Is there anyway to change this on multiple servers at the same time?

Or do I have to go down through them server by server?

ciboyle

Actually, the more I think about this. I would like to leave the the options for the Physical Memory alerting there i.e. I don't want to touch the default setup.

The filtering option would seem to be better for a single alert. So the question is now: how do I filter out the physical memory alert from the Volume alert in the way that mprobus mentions?

mprobus

Answers to both questions. If you decided you wanted to get rid of all of the Physical Memory volumes, the easiest way is through the DB. You can run the following command.

delete from Volumes where Caption = 'physical memory'

To filter, you can set it up like the following.

mohitonline

Since you don't want to touch the default setup.

I suggest copy the alert or you can say select the actual alert and click (Duplicate & Edit) this will crate new alert for you and allow you to make changes in alert without touching the actual alert.

Adding below filters will solve your purpose.

One thing important to keep in mind

Just make changes under trigger action, change the email id to your email id so that if alert trigger you will only receive the alert notification not service desk.

once you test the same. you are good to touch the default setup.

yaquaholic

Hi Ciboyle,

mprobus beat me to it.

(We were enjoying a long weekend, here in Great Britain).

Though I would have based my SQL on VolumeType, rather than Caption.

Hope you have sorted it