Is there a way in the alert to include how many times the alert has been repeated?

There is ${N=Alerting;M=AlertTriggerCount} Count of triggers, but it looks like it's for how many times the alert has fired in general.

General alert variables

Otherwise you may need to create a custom query to return the count per instance of the alert.

Thanks jrouviere!

That is exactly what I was thinking. I will probably have to create a custom script to count alert repeat instance per active alert.

Michael Tautfest

Measurement Inc.

Network Operations

(919)683-2413 ext. 3025

Is it possible to count alerts by a time period (e.g. number of reboots in a day for a certain node)? And from that create a new a alert for that node that says "multiple reboots on node X"?

hebron1212 This is the join I have on one of my displays, showing how many times a node has been down in the past 24 hours/1 day. It joins on the Orion.Nodes table. I snagged it from someone's THWACK post a long time ago, but perhaps it could be used for your purpose.

LEFT JOIN
(SELECT
n.Events.NetworkNode,
COUNT(*) AS TimesBounced
FROM Orion.Nodes AS n
WHERE
n.Events.EventType=1
AND
(n.Events.EventTime > (GetUtcDate() - 1))

GROUP BY n.Events.NetworkNode
) AS a ON a.NetworkNode=n.NodeID

Thanks, wluther! That did the trick!