jlescano · Newbie · ✭✭✭✭✭

I am voting to have this update performed....it is creating false/positive alerts in our environment and waking up engineers for non-issues. 

yeah I figured as much after reviewing the tables. what I did was create unique alerts for each site and used the alert_name as a variable to identify the alert. thanks for the reply 

this is great thank you...i'm excited to try it out 

Worked perfectly...exactly what I was looking for to notify the engineers how many times its flapped. also making a widget, hour, day, week to help level 2 and level 3 folks review possible upcoming issues. 

gotcha thanks for the info and help. 

yes i'm looking to include the count it in the alert outgoing email. 

no luck...still doesnt show the column for qty. But I did see results (juts not displaying my nodes in the pic below). I also tried to change the day to week to confirm I see results. Got the same output. Fullname | InterfaceID but no qty column. 

When I run the query, my result doesn't show the qty (number of flapping for the giving interface). 

if I wanted to change it to day and see how many times it flaps..how can I convert the code below to add a count? so far I have the following. SELECT count (*) as qty, Interfaces.Fullname, Interfaces.InterfaceID from Interfaces join events on interfaces.InterfaceID = events.netobjectid where eventtime >…

SWQL is at 3.1.0.343 and Solarwinds is 2020.2.6

Thanks...yes its missing a few things, but from the query you wrote. It doesnt show the minutes until ack minutes since triggered. I know they got ack because my alert screen shows them ack'd. Perhaps I'm missing something else? 

Alert name, Node/interface/ etc (alerting), message for the alert, severity, triggercount, timestamp (of the alert), note details, timestamp of note entered, Calc of how long it took to ack the alert. (also include any additional entries made in the notes) I know this can cause a larger list, but if the operator jots down…

Is there a way to view acknowledged alerts with notes that have cleared?

same question 

How would you turn this off for vm's not need in your environment ? 

I used the swql studio to help me understand the tables and columns in solarwinds.

Thank you @"the_ben_keen" started using Dept and application name to query against. Love using the Thwack for picking up ideas and which swql tables I need to use/combine. keep up the post...been using alot of you post. 

nice! 

Be sure you updated / copied the the ini file from the solution and double check you did it with admin privilege's. Also review the properties for the files and be sure the have them "unblocked" had the same issues..and this fixed my problems. Hope it helps 

So do we need to update the JSL folder vs the lib folder? We dont have the ini file in the jmxbridge\lib we do however see the file in the jmxbridge\jsl folder. anyone else have the same situation ?