We have BGP neighbor status alert, whenever a bgp neighbor goes down it will trigger alert. When ISP planning maintenance our network team put the interface in maintenance mode and they don't want to get any alert during the maintenance.
Network team don't want to put the entire node in unmanaged state, they only want to put the interface in unmanage state. someone suggest me alert condition for this scenario.
Instead of using "Unmanage," use "Mute Alerts" on the device. All the polling still happens, just none of the alert logic is run. That's probably your best solution.
Not sure if there's a way to do this natively in the alert builder UI but taking the SWQL from the neighbor down alert and editing it a bit, I think I have a working PoC for this that takes into account interfaces being muted for alerts. So all they should need to do is mute the alerts for the interface that the neighbor is connected on and presto.. You'd need to either create a new SWQL alert or copy the out-of-box alert and turn it into a SWQL alert to use this though.
SELECT E0.[Uri], E0.[DisplayName] FROM Orion.Routing.Neighbors AS E0 LEFT OUTER JOIN Orion.AlertSuppression AS E1 ON E0.[Router].[Nodes].[SwitchPortEntriesAsSource].[SourceInterfaces].[Uri] = E1.[EntityUri] WHERE ( ( E0.[ProtocolOrionStatus] = '2' ) OR ( E0.[IsDeleted] = 'True' ) ) AND ( ( GETUTCDATE() < E1.[SuppressFrom] OR GETUTCDATE() > E1.[SuppressUntil] ) OR ( GETUTCDATE() < E1.[SuppressFrom] AND E1.[SuppressUntil] IS NULL ) OR ( E1.[SuppressFrom] IS NULL AND E1.[SuppressUntil] IS NULL ) )
There could be ways to clean this up a bit, and most definitely should be some more testing if you plan to use it but hopefully this can help.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.