Sounds like a SQL based alert to me. Maybe one of our SQL guru users can chime in?
Does anyone have any ideas on this?
I'm going to move this to our Alerts forum so that (hopefully) it will get more posts.
You could look at the Orion.ResponseTime table which has the Availability field as well as the PercentLoss.
Depending on you interface, this is the query you would want to have:
SELECT NodeID, DateTime, Archive, AvgResponseTime, MinResponseTime, MaxResponseTime, PercentLoss, Availability
WHERE NodeID = 28
AND DateTime = (SELECT max(DateTime) as DT FROM Orion.ResponseTime
WHERE NodeID = 28 AND Availability = 100)
The above query gives you all the data for the last time the Availability was 100, if your DateTime is more than 24 hours old, you can alert on that.
I have had issues with the < and > in Perl so you could assume if the Availability = 100 longer than 24 hours ago, then the Availability has been something less than 100.
Hope this helps.