2 Replies Latest reply on Jan 8, 2020 11:33 AM by saw10

    Share your Alert variables

    nato

      Please share your Variables here.

        • Re: Share your Alert variables
          jberg246

          I agree why reinvent the wheel - if someone has great alerts - Share them

          1 of 1 people found this helpful
          • Re: Share your Alert variables
            saw10

            Not sure is this is what you are looking for.  Here are couple of of Trigger and Reset Email action where we use variables.

            NOTE - The variables change with the Object Type these two one is for an interface and the other is for a Node.

             

             

            =========== TRIGGER ACTION  ===========

            ORION ALERT: HIGH ${N=Alerting;M=AlertName} BREACH High interface utilization on ${N=SwisEntity;M=InterfaceName} on ${N=SwisEntity;M=Node.Caption};

             

            EVENT TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

             

            TRANSMIT

            UTILIZATION: ${N=SwisEntity;M=OutPercentUtil};

            This Hour

            ERRORS: ${N=SwisEntity;M=OutErrorsThisHour};

            DISCARDS: ${N=SwisEntity;M=OutDiscardsThisHour};

             

            CRC ERRORS: ${N=SwisEntity;M=CRCAlignErrorsThisHour};

             

            RECEIVE

            UTILIZATION:  ${N=SwisEntity;M=InPercentUtil};

            This Hour

            ERRORS: ${N=SwisEntity;M=InErrorsThisHour};

            DISCARDS: ${N=SwisEntity;M=InDiscardsThisHour};

             

            ALERT NAME: ${N=Alerting;M=AlertName};

            ALERT ID: ${N=Alerting;M=AlertID};

            EVENT ID: ${N=Alerting;M=AlertActiveID};

            NODE: ${N=SwisEntity;M=Caption};

            NODE IP: ${N=SwisEntity;M=Router.Nodes.IP_Address};

            INTERFACE NAME: ${N=SwisEntity;M=InterfaceName};

             

            [

            SITE CODE: ${N=SwisEntity;M=Node.CustomProperties.SiteCode};

            SEVERITY: ${SQL:SELECT INC_Priority FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

            ASSIGN TEAM: ${SQL:SELECT INC_Assign_Team FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

            OPTIER1: Malfunction;

            OPTIER2: Connectivity;

            PRODUCT NAME: Network Connection;

            PRODTIER1: Hardware;

            PRODTIER2: Network;

            PRODTIER3: Connection;

            ]

             

            =========== TRIGGER ACTION ===========

            ORION ALERT: ${N=Alerting;M=AlertName} BREACH ${N=SwisEntity;M=CPULoad} on ${N=SwisEntity;M=Caption};

             

            EVENT TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

            EVENT ID: ${N=Alerting;M=AlertActiveID};

            ALERT NAME: ${N=Alerting;M=AlertName};

            ALERT ID: ${N=Alerting;M=AlertID};

            NODE: ${N=SwisEntity;M=Caption};

            NODE IP: ${N=SwisEntity;M=IP_Address};

             

            CPU LOAD: ${N=SwisEntity;M=CPULoad};

             

            [

            SITE CODE: ${N=SwisEntity;M=CustomProperties.SiteCode};

            SEVERITY: ${SQL:SELECT INC_Priority FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

            ASSIGN TEAM: ${SQL:SELECT INC_Assign_Team FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

            OPTIER1: Malfunction;

            OPTIER2: Connectivity;

            PRODUCT NAME: Network Connection;

            PRODTIER1: Hardware;

            PRODTIER2: Network;

            PRODTIER3: Connection;

            ]

             

            =========== RESET ACTION ===========

            ORION ALERT: ${N=Alerting;M=AlertName} NORMALIZED ${N=SwisEntity;M=CPULoad} on ${N=SwisEntity;M=Caption}.

            EVENT START TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

            EVENT END TIME: ${DateTime};

            EVENT DURATION: ${N=Alerting;M=DownTime} Minutes;

            EVENT ID: ${N=Alerting;M=AlertActiveID};

             

            ALERT NAME: ${N=Alerting;M=AlertName};

            ALERT ID: ${N=Alerting;M=AlertID};

            NODE: ${N=SwisEntity;M=Caption};

            NODE IP: ${N=SwisEntity;M=IP_Address};

             

            CURRENT CPU LOAD: ${N=SwisEntity;M=CPULoad};

             

            [

            SITE CODE: ${N=SwisEntity;M=CustomProperties.SiteCode};

            SEVERITY: P0;

            ]

            2 of 2 people found this helpful