I am trying to understand when does Orion Advanced Alert report a host as unreachable and when does it report it as down.
From what I have gathered so far, "unreachable" and "down" status are not same. And mostly unreachable status is possible for nodes which have dependencies on other parent nodes. Are there any other situations (apart from dependency ) when we can get a node status as unreachable?
In our network, we got an event message that "X has stopped responding (Host Unreachable)". We also have an advanced alert configured which matches "Node Status is Down". But we never got the above event matched against that alert. Is it because Orion considered node as UNREACHABLE and not DOWN and hence did not match the alert?Do we need to create an alert which matches "Node status is unreachable"?
The confusing thing is that we don't have any dependency configured in our network, so ideally we should never have seen a "X has stopped responding (Host Unreachable)" event. What I think is we should have received "X has stopped responding (Host Down)" event. Is my understanding wrong?
We have NPM version 10.1.1.
Any help on this is welcome.
Further checking the SQL database, I have confirmed that Orion has an entry for "node Down" event in the events table. So that event should have matched our "node down" advanced alert. But it never happened. I cannot see "node down" alert triggered in AlertLog table. Why the alert was not triggered? Is it some bug with Solarwinds Orion?
Could you pull up the node down alert in the Orion Advanced Alert Manager. And goto 'Trigger Actions' tab and select 'edit selected action'.Check for the following settings.
Time of the day and Alert Escalations.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.