This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Alert escalation functionality

To all:

We are currently running NPM 10.3.

My question is this. Is there a way, with regards to the alerting, to set up an escalation process?

For instance, say we get alerted/paged that a switch went down. If that switch is still down after 30 minutes (time should be configurable) then the boss gets paged or something like that.

Does the alerting function in Solarwinds NPM have that functionality? I've have looked around for a little bit and haven't seen anything like that.

As always, any help would be greatly appreciated. Thanx in advance.

  • In your trigger actions, create a secondary action (to email or page or whatever) and on the Alert Escalation tab:

    pastedImage_0.png

    You can choose to delay the execution of this action for say 30 minutes, and check the box not to execute if it has been acknowledged.  So, if someone doesn't take care of the issue within 30 minutes the secondary action would fire.

    Hope this helps,

    Chrystal Taylor

    http://loop1systems.com

  • Chrystal:

         Thank-you very much for replying to my request for assistance.

         Yes, I did see this; however, I did not see where you could enter recipients for this escalation notice.

         Example. You define your alert as you normally would. If a particular condition is met, you send out a message of some sort to a person or group. But say, the alert is still active after 30 minutes, I want to send out an escalation notice to a different group of people. Not to the same group of people as the original alert.

         Hope that helps to try and explain what I am looking for.

         Again, thank-you very much for your help.

  • Yes.  What I was describing was creating a secondary trigger action.  You can have multiple email actions.  So you would be able to enter new recipients and a new/different message to denote that it has been escalated in the previous tabs.  I hope this clears this up for you.

    Thanks,

    Chrystal Taylor

    http://www.loop1systems.com

  • Chrystal:

         I apologize for the delay in replying as I got pulled off on something else. I still do not understand where you add a different recipient or list of recipients on the escalation tab. Or do I have to make a copy of the alert and in that one I have the escalation set? Please advise as it appears I am a little confused. Thanx again for the help.

  • You do not need to make a secondary alert.  In the trigger actions tab of the same alert, you add a new action.  Choose email, then configure appropriately.

    pastedImage_0.png

    First action:

    pastedImage_1.png

    Now, create ANOTHER action

    pastedImage_2.png

    pastedImage_3.png

    Let me know if you need any more help. emoticons_happy.png

    Thanks,

    Chrystal Taylor

    http://www.loop1systems.com

  • Chrystal:

    Ah-hah. I think the ol' lightbulb just went on. So, on the secondary alert action, I would set the alert escalation to the effect that if this alert is still raised say after 30 minutes to execute this action but if the alert has been cleared before the escalation timeout than it will not get executed? Is my thinking on the right track?

    Thanx again so much for your help.

  • Yes you are on the right track.  So in the alert escalation tab on the secondary alert action you would check the box for do not fire if alert has been acknowledged, and you would would check execute after xx minutes.

    Happy to help. emoticons_happy.png

    Thanks,

    Chrystal Taylor

    http://www.loop1systems.com

  • Chrystal:

         OK. I have the alert escalation down on the trigger. Now I have a question with regards to the reset action.

         My question is this. How can I control the reset messages? What I mean is, I only want the recipient that received an alert escalation message to receive an reset message only IF they received the alert escalation message. Is there a way to do that?


  • Chrystal:

         Thank-you very much for your help with my issue. I was able to figure it out. In order for me to meet the requirements that I outlined above; that the escalation group only receive alarm cleared messages if they rec'd an alarm raised after xx minutes was to create a totally separate alert (and set the escalation to 30 minutes (delay)) with the same conditions as the original alert.

         That'll work. Thx again for your help.

  • Glad you were able to get it working to suit your needs. emoticons_happy.png

    Happy to help.

    Thanks,

    Chrystal Taylor

    http://www.loop1systems.com