cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Alert me when a new MAC address appears into network

I am trying to setup a UDT alert to email me when a new MAC address appears into network.  What is the trigger condition I need to use to get the alert to work?  When I use the test feature, I get a test email, but I don't seem to be getting an email when a new MAC appears on the network.  I assume that my trigger condition is wrong.  It is currently set to is NewMac equal to 0.  thanks.

0 Kudos
15 Replies
Level 8

I do not see this as an option for us under the alert names. I clicked the "Alert Manager" and I do not see this as an option. Anyone have the settings so that I can generate this new?

0 Kudos
Level 12

Because that was the old alert manager.  The screenshot is from a time the alert manager needs to be run on the server as it is a 32 bit Application.  Now it should be done via the web console.

It looks different but runs on the same logic.  Furthermore, the new MAC address alert is a canned alert.  You just have to activate it and modify the alert actions.

Level 8

Can you please tell me where I can find this canned alert? I looked through the canned alerts and did not see this one.

0 Kudos
Level 9

Thanks Mike! Yeah I figured it out right after I sent this. But I am seeing where the variables aren't working as expected. I will keep trying to figure it out until it works.

0 Kudos
Level 8

In UDT 3.1, NodeID variable is renamed to DeviceID in both New MAC and Rogue MAC Alert. Please edit the Trigger action with DeviceID variable and check for the data.NewMACAlert_MacroVariable.PNG

Level 14

What variables aren't working?

0 Kudos
Level 9

Can you explain how you set this email alert up? I would greatly appreciate it. We are trying to make it easier to track down new devices that are not allow on the on the network.

0 Kudos
Level 7

Go to Start -> Programs -> SolarWinds Orion -> Alerting, Reporting and Mapping -> Advanced Alert Manager

Click Configure Alerts

Select "Alert me when a new MAC address appears on network" and choose Edit

Under Trigger Condition, choose "Trigger Alert when all of the following apply" and set it to "is NewMac is equal to 1"

Under the Trigger Acctions tab, create a new action to email you.  This is where you can add the variables to put into the email you get.

Good Luck.

0 Kudos

Hi Mike - the trigger condition should be equal to 1.

When connecting a new MAC - are you sure that it wasn't connected before? UDT can remember MAC for a half of year easily...

Regards

Peter

0 Kudos
Level 7

Changed it to 1 and it worked! Another question, are there any variables I can add so the email will tell me what switch and port the new MAC is connected to? Thanks!

0 Kudos

Which version do you please use? In UDT 3.1 there are new macro variables - PortID and NodeID you can use to make the alert be more specific...

0 Kudos
Level 7

I received an email with the new variables, unfortunately it wasn’t too helpful.

PortID: 4549

NodeID: 0

0 Kudos
Level 13

Have there been any updates on this? I'm looking at this same problem where I would like more information on a rogue MAC. I'm also looking at pulling in more information from Custom Properties into the email as well and would need the NodeID portion to work for that to happen.

0 Kudos
Level 7

I asked support if it was possible to add which switch the new mac was connected to and they said no.  Every email I get shows a NodeID of 0.

0 Kudos
Level 7

I am on UDT 3.1. I added those variables and will see what I get. Thanks again for your help.

0 Kudos