cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 12

How to view and list which alarm that sends out email from Solarwinds?

Jump to solution

People,

I need to know and generate the list of alert / alarm that sends out email for audit & standardization.

How to get the list of alarms and where the location in the Solarwinds page?

Thanks in advance

0 Kudos
3 Solutions
Level 12

You can use the action manager or write a SQL/SWQL query and run it against the DB to get the information.  For the actions manager go to manage your alerts in the console and select the Actions Manager tab, or navigate to:

<your orion Url>/Orion/Actions/Default.aspx

Then you can group by action type for the action type that you want, likely Send an email/page and maybe email a web page.  It will give you a list of the assigned alerts that each action is on.  If it has more than one alert, it will list the number of alerts that the action is assigned to.  You can hover over that number to get the names of the alerts.

 

-j_a_catlin

Loop1 Systems: SolarWinds Training and Professional Services

View solution in original post

I use a custom SWQL query for getting the relevant info on alert actions, you could filter it a few ways to narrow in on things if you like.

 

 

--Alert Configuration and Actions Report
select
ac.name as [Alert Name]
,'/Orion/Alerts/Default.aspx' as [_linkfor_Alert Name]
,case when ac.Enabled=1 then '/Orion/images/StatusIcons/Small-Up.gif'
when ac.Enabled=1 then '/Orion/images/StatusIcons/Small-Up.gif'
end as [_iconfor_Alert Name]
,ac.Description
,ac.Frequency
,case when ac.frequency < 60 then '/Orion/images/StatusIcons/Small-Critical.gif'
else '/Orion/images/StatusIcons/Small-Up.gif'
end as [_iconfor_Frequency]
,CASE
WHEN ac.Severity = 2 then 'Critical'
WHEN ac.Severity = 3 then 'Serious'
WHEN ac.Severity = 1 then 'Warning'
WHEN ac.Severity = 0 then 'Informational'
WHEN ac.Severity = 5 then 'Notice'
END AS [Severity]
,CASE
WHEN ac.Severity = 2 THEN '/Orion/images/ActiveAlerts/Critical.png'
WHEN ac.Severity = 3 THEN '/Orion/images/ActiveAlerts/Serious.png'
WHEN ac.Severity = 1 THEN '/Orion/images/ActiveAlerts/Warning.png'
WHEN ac.Severity = 0 THEN '/Orion/images/ActiveAlerts/InformationalAlert.png'
WHEN ac.Severity = 5 THEN '/Orion/images/ActiveAlerts/Notice.png'
END AS [_iconfor_Severity]
,ac.AlertMessage
--,ac.trigger
--,ac.reset
,aa.CategoryType
,a.actiontypeid
,ap.propertyname
,ap.propertyvalue

from orion.actionsassignments aa
join orion.alertconfigurations ac on aa.parentid=ac.alertid
join orion.actions a on a.actionid=aa.actionid
join orion.actionsproperties ap on ap.actionid=a.actionid

where ac.enabled=1
and ap.PropertyName not in ('EscalationLevel','executionIfAknowledge','executionRepeatTimeSpan','MessageContentType','Priority','SmtpServerID' )
and ap.PropertyValue is not null and ap.PropertyValue not like ''
--and (propertyname like 'EmailTo' or propertyname like 'EmailCC' or propertyname like 'EmailBCC')
--and (ac.name like '%${SEARCH_STRING}%' or ap.propertyvalue like '%${SEARCH_STRING}%' )`

order by ac.Name, aa.Categorytype desc, a.ActionTypeID, ap.PropertyName

- Marc Netterfield, Github

View solution in original post

6 Replies
Level 12

Thanks people for your assistance in this matter.

--Alert Configuration and Actions Report 
SELECT ac.NAME                      AS [Alert Name], 
       '/Orion/Alerts/Default.aspx' AS [_linkfor_Alert Name], 
       CASE 
         WHEN ac.enabled = 1 THEN '/Orion/images/StatusIcons/Small-Up.gif' 
         WHEN ac.enabled = 1 THEN '/Orion/images/StatusIcons/Small-Up.gif' 
       END                          AS [_iconfor_Alert Name], 
       ac.description, 
       ac.frequency, 
       CASE 
         WHEN ac.frequency < 60 THEN 
         '/Orion/images/StatusIcons/Small-Critical.gif' 
         ELSE '/Orion/images/StatusIcons/Small-Up.gif' 
       END                          AS [_iconfor_Frequency], 
       CASE 
         WHEN ac.severity = 2 THEN 'Critical' 
         WHEN ac.severity = 3 THEN 'Serious' 
         WHEN ac.severity = 1 THEN 'Warning' 
         WHEN ac.severity = 0 THEN 'Informational' 
         WHEN ac.severity = 5 THEN 'Notice' 
       END                          AS [Severity], 
       CASE 
         WHEN ac.severity = 2 THEN '/Orion/images/ActiveAlerts/Critical.png' 
         WHEN ac.severity = 3 THEN '/Orion/images/ActiveAlerts/Serious.png' 
         WHEN ac.severity = 1 THEN '/Orion/images/ActiveAlerts/Warning.png' 
         WHEN ac.severity = 0 THEN 
         '/Orion/images/ActiveAlerts/InformationalAlert.png' 
         WHEN ac.severity = 5 THEN '/Orion/images/ActiveAlerts/Notice.png' 
       END                          AS [_iconfor_Severity], 
       ac.alertmessage 
       --,ac.trigger 
       --,ac.reset 
       , 
       aa.categorytype, 
       a.actiontypeid, 
       ap.propertyname, 
       ap.propertyvalue 
FROM   orion.actionsassignments aa 
       JOIN orion.alertconfigurations ac 
         ON aa.parentid = ac.alertid 
       JOIN orion.actions a 
         ON a.actionid = aa.actionid 
       JOIN orion.actionsproperties ap 
         ON ap.actionid = a.actionid 
WHERE  ac.enabled = 1 
       AND ap.propertyname NOT IN ( 'EscalationLevel', 'executionIfAknowledge', 
                                    'executionRepeatTimeSpan', 
                                    'MessageContentType', 
                                    'Priority', 'SmtpServerID' ) 
       AND ap.propertyvalue IS NOT NULL 
       AND ap.propertyvalue NOT LIKE '' 
--and (propertyname like 'EmailTo' or propertyname like 'EmailCC' or propertyname like 'EmailBCC')
--and (ac.name like '%${SEARCH_STRING}%' or ap.propertyvalue like '%${SEARCH_STRING}%' )` 
ORDER  BY ac.NAME, 
          aa.categorytype DESC, 
          a.actiontypeid, 
          ap.propertyname 

@mesverrum, when I execute the query you've suggested inside the Database manager, it throws error:

Msg 208, Level 16, State 1, Line 2
Invalid object name 'orion.actionsassignments'.

 

 

It's a SWQL query, I generally use it as part of a custom query widget or custom table data source.

- Marc Netterfield, Github
0 Kudos

I use a custom SWQL query for getting the relevant info on alert actions, you could filter it a few ways to narrow in on things if you like.

 

 

--Alert Configuration and Actions Report
select
ac.name as [Alert Name]
,'/Orion/Alerts/Default.aspx' as [_linkfor_Alert Name]
,case when ac.Enabled=1 then '/Orion/images/StatusIcons/Small-Up.gif'
when ac.Enabled=1 then '/Orion/images/StatusIcons/Small-Up.gif'
end as [_iconfor_Alert Name]
,ac.Description
,ac.Frequency
,case when ac.frequency < 60 then '/Orion/images/StatusIcons/Small-Critical.gif'
else '/Orion/images/StatusIcons/Small-Up.gif'
end as [_iconfor_Frequency]
,CASE
WHEN ac.Severity = 2 then 'Critical'
WHEN ac.Severity = 3 then 'Serious'
WHEN ac.Severity = 1 then 'Warning'
WHEN ac.Severity = 0 then 'Informational'
WHEN ac.Severity = 5 then 'Notice'
END AS [Severity]
,CASE
WHEN ac.Severity = 2 THEN '/Orion/images/ActiveAlerts/Critical.png'
WHEN ac.Severity = 3 THEN '/Orion/images/ActiveAlerts/Serious.png'
WHEN ac.Severity = 1 THEN '/Orion/images/ActiveAlerts/Warning.png'
WHEN ac.Severity = 0 THEN '/Orion/images/ActiveAlerts/InformationalAlert.png'
WHEN ac.Severity = 5 THEN '/Orion/images/ActiveAlerts/Notice.png'
END AS [_iconfor_Severity]
,ac.AlertMessage
--,ac.trigger
--,ac.reset
,aa.CategoryType
,a.actiontypeid
,ap.propertyname
,ap.propertyvalue

from orion.actionsassignments aa
join orion.alertconfigurations ac on aa.parentid=ac.alertid
join orion.actions a on a.actionid=aa.actionid
join orion.actionsproperties ap on ap.actionid=a.actionid

where ac.enabled=1
and ap.PropertyName not in ('EscalationLevel','executionIfAknowledge','executionRepeatTimeSpan','MessageContentType','Priority','SmtpServerID' )
and ap.PropertyValue is not null and ap.PropertyValue not like ''
--and (propertyname like 'EmailTo' or propertyname like 'EmailCC' or propertyname like 'EmailBCC')
--and (ac.name like '%${SEARCH_STRING}%' or ap.propertyvalue like '%${SEARCH_STRING}%' )`

order by ac.Name, aa.Categorytype desc, a.ActionTypeID, ap.PropertyName

- Marc Netterfield, Github

View solution in original post

@mesverrumThat is an excellent query! Thanks

Level 12

You can use the action manager or write a SQL/SWQL query and run it against the DB to get the information.  For the actions manager go to manage your alerts in the console and select the Actions Manager tab, or navigate to:

<your orion Url>/Orion/Actions/Default.aspx

Then you can group by action type for the action type that you want, likely Send an email/page and maybe email a web page.  It will give you a list of the assigned alerts that each action is on.  If it has more than one alert, it will list the number of alerts that the action is assigned to.  You can hover over that number to get the names of the alerts.

 

-j_a_catlin

Loop1 Systems: SolarWinds Training and Professional Services

View solution in original post