Custom Poller Alert based on row values in a table

Hi,
Using Orion Universal Device Poller I've created a custom poller to read OID 1.3.6.1.4.1.14823.2.2.1.5.3.1.10.1.13. When I test this against one of our Aruba wireless controllers, it returns a table with 2 columns - Row ID and Test Result. Row ID contains a representation of the MAC of each of that controller's wireless access points' wired interfaces, and Test Result is a numerical value representing the different possible negotiated speeds that the access points are reporting for their wired interface.



I've assigned the pollers to our wireless controllers. The SNMP Get Type is set to GET TABLE. Polling Type is Node and Keep Historical Data is enabled.

What I'd like to do is create an email alert which will ideally provide the row IDs for all rows in the table where the Test Result column contains a certain value, in a single message if possible. I've been searching around and as I understand it, in the Trigger Condition tab, I need to set the I wan to alert on: drop down option to Custom Table Poller Current Status? I'm not sure what to set for the scope of the alert or the actual trigger condition.
Whilst trying a few things, I managed to produce around about the expected number of separate alert emails for the numeric value I had specified using Custom Table Poller Current Status, Current Numeric Value as a trigger condition but the emails just contained a link to view the alert which stated it was triggered by that value and I couldn't see anything about the Row ID it was from.

I'd be grateful if anyone could point me in the right direction. I expect I'll need to specify some custom SQL in the Trigger Actions tab?

Thank you

  • ${N=SWQL;M=SELECT TOP 1 a.AlertObjects.EntityCaption FROM Orion.AlertActive a WHERE a.AlertObjects.EntityType = 'Orion.NPM.CustomPollerStatusOnNodeTabular'}

  • Hi,
    Thanks for replying! I was thinking of giving my post a bump just earlier today.
    I see the screenshot is from SWQL Studio. I looked at this a little while ago to see if it could help me achieve what I needed, but am I correct in thinking this won't be able to connect to our SolarWinds platform if we use multi-factor authentication?

  • Check if you can access to the TCP/17774 port of your main poller engine.
    Then you test with the following URL (update LOCALHOST value as needed):
    # localhost:17774/.../Query

    To get your full data, the query below should work:
    https://localhost:17774/SolarWinds/InformationService/v3/Json/Query?query=SELECT+DISTINCT+a.AlertObjects.EntityCaption,+AlertObjectID,+a.TriggeredMessage,+b.RowLabel,+a.DisplayName+,+CustomPollerAssignmentID,+CompressedRowID,+AssignmentName,+CustomPollerID,+NodeID,+DateTime,+Rate,+Total,+RawStatus,+b.Status,+b.Description,+RowStatus,+RowID+FROM+Orion.AlertActive+a+JOIN+Orion.NPM.CustomPollerStatusOnNodeTabular+AS+b+ON+a.AlertObjects.Node.NodeID+=+b.NodeID+WHERE+a.AlertObjects.EntityType+=+'Orion.NPM.CustomPollerStatusOnNodeTabular'

    For the MFA question, I'm sorry but that's not the subject of your request.
    I would like to suggest you to ask for help from Solarwinds support.