I am unable to find alert volume events that correspond to the event type of Volume Disappeared. I hate to do this by custom SQL since it's an event- am I doing it wrong or is it just not hooked in yet?
I'll try choosing Status has changed and last poll date or something but it should be a selection no?
Thank you - I appreciate the info. Just to make sure I'm clear - although you're referring to these volumes as 'down', a disappeared volume situation can be rectified with your script as well?
I believe "Volume Disappeared" is simply an event generated when the volume status changes to Down. Once the volume is "Up" again, you will see a "Volume Re Appeared" event
If the volume has disappeared due to the serial and/or label changing, that script will most likely fix the issue(On WIndows Servers)
I setup an alert in our environment for this, below is how I have it setup. This will eliminate not receiving false alerts about Volumes being offline because they haven't been polled recently because they are down or unmanaged.
You can also use Custom SQL Alert (SolarWinds MT Article "Create custom SQL alerts in the Orion Web Console")
In the example below I am singling out one specific node that I want this to alert on. If this is applialbe for you, you will want to replace the number 106 in "networknode = 106" to the NodeID (NetworkNode) you want to alert on.
You may also want to make sure that you setup your Trigger Actions to receive an email when triggered.
Below is the SQL used:
where nodeid = (select top 1 networknode from events
Where eventtype = 210 and networknode = 106 and eventtime > getdate()-5
order by eventtype, eventtime desc)
I tried this configuration and I get a lot of false alarms of volumes being down to include physical and virtual memory. So I filtered it to volume type equal to fixed disk also in the top portion and I still get several false alarms daily on a volume being down. When I log into the machine and look there is absolutely nothing going on the with the machine and it's perfectly fine.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.