Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

How do I suspend all alerts?

msknight

I have to patch the Orion servers using an automated system (Ivanti) but during the process, the Orion servers reboot.

When they reboot, the result seems to be a barrage of node down e-mails, followed by node up e-mails.

How do I suspend all alerts for the period that the Orion servers are being patched and rebooted please?

Find more posts tagged with

Accepted answers

christopher.t.jones123

@msknight, Something like below would probably work

#Needs to be run from a SolarWinds Polling Engine

#Connect to SolarWinds
Import-Module SwisPowerShell

#Replace  with the Orion Srver Name
$hostname = ""
$swis = Connect-Swis -Hostname $hostname -certificate

$uri = Get-SwisData $swis "SELECT uri FROM Orion.Settings where SettingID like 'AlertEngine-PauseActionsOfAllAlerts'"


$update = Set-SwisObject $swis -Uri $uri -Properties @{CurrentValue = $(1)}
Write-Output (Get-Date) "Alert Actions Paused" >> \scripts\LOGS\PauseActionsLog.txt

All comments

msknight

I believe I can only turn alerts on and off, which means I need to know precisely the alerts to handle, or else I could risk turning on all alerts... so that's a non-starter as if someone else adds an alert, it's going to mean remembering to follow up with the script.

This looks like I'm going to need SQL to identify all nodes which are currently being managed and are not muted... and then fire off a command to mute them all for an hour, prior to patching the Orion servers. Can anyone help with identifying the necessary database fields to do this please?

dilbert1234

In the Alerts tab you can Pause actions of all alerts.

christopher.t.jones123

@msknight, you could pause all alert actions. If you go to the Active Alert page on the right hand side under more check the box to pause all alert actions. This will disable alert actions, so the alert will still trigger and be visible in the web console, but an email will not go out for the duration of the pause. It's probably the simplest way to enable/disable all alerts for a maintenance period.

msknight

That's great... but I need to do it via a powershell script. The patching system is automatic, but I can get it to fire a script.

msknight

I need to do this via a powershell script. Do you know the command to send please?

msknight

In fact, that's going to get more complicated because the account that connects to Orion to do the muting... only has permission to mute and unmute.

I have tried looking up the tables, but the alertsuppression2 table ID column doesn't match the NodeID in the Nodes table, so I can't get a common link between them to do a left join. The node id in the alertsuppression2 table is embedded in the EntityUrl field.

christopher.t.jones123

@msknight, Something like below would probably work

#Needs to be run from a SolarWinds Polling Engine

#Connect to SolarWinds
Import-Module SwisPowerShell

#Replace  with the Orion Srver Name
$hostname = ""
$swis = Connect-Swis -Hostname $hostname -certificate

$uri = Get-SwisData $swis "SELECT uri FROM Orion.Settings where SettingID like 'AlertEngine-PauseActionsOfAllAlerts'"


$update = Set-SwisObject $swis -Uri $uri -Properties @{CurrentValue = $(1)}
Write-Output (Get-Date) "Alert Actions Paused" >> \scripts\LOGS\PauseActionsLog.txt

stevenstadel

Check out Schedule "Pause all alert actions" checkbox - Feature Requests - Network Performance Monitor (NPM) - THWACK (solarwinds.com)

In the comments there are some ideas on how to do the pause with a script.

msknight

Thanks. I'll give that a try.