This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Share your Alert variables

Please share your Variables here.

  • I agree why reinvent the wheel - if someone has great alerts - Share them

  • Not sure is this is what you are looking for.  Here are couple of of Trigger and Reset Email action where we use variables.

    NOTE - The variables change with the Object Type these two one is for an interface and the other is for a Node.

    =========== TRIGGER ACTION  ===========

    ORION ALERT: HIGH ${N=Alerting;M=AlertName} BREACH High interface utilization on ${N=SwisEntity;M=InterfaceName} on ${N=SwisEntity;M=Node.Caption};

    EVENT TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

    TRANSMIT

    UTILIZATION: ${N=SwisEntity;M=OutPercentUtil};

    This Hour

    ERRORS: ${N=SwisEntity;M=OutErrorsThisHour};

    DISCARDS: ${N=SwisEntity;M=OutDiscardsThisHour};

    CRC ERRORS: ${N=SwisEntity;M=CRCAlignErrorsThisHour};

    RECEIVE

    UTILIZATION:  ${N=SwisEntity;M=InPercentUtil};

    This Hour

    ERRORS: ${N=SwisEntity;M=InErrorsThisHour};

    DISCARDS: ${N=SwisEntity;M=InDiscardsThisHour};

    ALERT NAME: ${N=Alerting;M=AlertName};

    ALERT ID: ${N=Alerting;M=AlertID};

    EVENT ID: ${N=Alerting;M=AlertActiveID};

    NODE: ${N=SwisEntity;M=Caption};

    NODE IP: ${N=SwisEntity;M=Router.Nodes.IP_Address};

    INTERFACE NAME: ${N=SwisEntity;M=InterfaceName};

    [

    SITE CODE: ${N=SwisEntity;M=Node.CustomProperties.SiteCode};

    SEVERITY: ${SQL:SELECT INC_Priority FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

    ASSIGN TEAM: ${SQL:SELECT INC_Assign_Team FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

    OPTIER1: Malfunction;

    OPTIER2: Connectivity;

    PRODUCT NAME: Network Connection;

    PRODTIER1: Hardware;

    PRODTIER2: Network;

    PRODTIER3: Connection;

    ]

    =========== TRIGGER ACTION ===========

    ORION ALERT: ${N=Alerting;M=AlertName} BREACH ${N=SwisEntity;M=CPULoad} on ${N=SwisEntity;M=Caption};

    EVENT TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

    EVENT ID: ${N=Alerting;M=AlertActiveID};

    ALERT NAME: ${N=Alerting;M=AlertName};

    ALERT ID: ${N=Alerting;M=AlertID};

    NODE: ${N=SwisEntity;M=Caption};

    NODE IP: ${N=SwisEntity;M=IP_Address};

    CPU LOAD: ${N=SwisEntity;M=CPULoad};

    [

    SITE CODE: ${N=SwisEntity;M=CustomProperties.SiteCode};

    SEVERITY: ${SQL:SELECT INC_Priority FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

    ASSIGN TEAM: ${SQL:SELECT INC_Assign_Team FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

    OPTIER1: Malfunction;

    OPTIER2: Connectivity;

    PRODUCT NAME: Network Connection;

    PRODTIER1: Hardware;

    PRODTIER2: Network;

    PRODTIER3: Connection;

    ]

    =========== RESET ACTION ===========

    ORION ALERT: ${N=Alerting;M=AlertName} NORMALIZED ${N=SwisEntity;M=CPULoad} on ${N=SwisEntity;M=Caption}.

    EVENT START TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

    EVENT END TIME: ${DateTime};

    EVENT DURATION: ${N=Alerting;M=DownTime} Minutes;

    EVENT ID: ${N=Alerting;M=AlertActiveID};

    ALERT NAME: ${N=Alerting;M=AlertName};

    ALERT ID: ${N=Alerting;M=AlertID};

    NODE: ${N=SwisEntity;M=Caption};

    NODE IP: ${N=SwisEntity;M=IP_Address};

    CURRENT CPU LOAD: ${N=SwisEntity;M=CPULoad};

    [

    SITE CODE: ${N=SwisEntity;M=CustomProperties.SiteCode};

    SEVERITY: P0;

    ]