2 Replies Latest reply on Sep 26, 2013 2:21 PM by LadaVarga

    Alerts generated when 'Unmanage' period ends

    thirty9

      When I unmanage nodes, if those nodes go down during the period they are unmanaged, I correctly do not get alerts. However, when the unmaganed period ends, I get the alert (and reset, if relevant). Is there a way to prevent this, so that I get no alerts when the unmanaged period ends? We're on NPM 10.4.2. Thanks.

        • Re: Alerts generated when 'Unmanage' period ends
          Leon Adato

          The point of unmanage is that it completely stops monitoring. Therefore, when unmanage ends the first thing SolarWinds does is collect a full set of statistics. If one of those statistics breaches a threshold, you are going to get an alert, the same as if it had been monitored all along and JUST breached the threshold.

           

          Even using the "Mute" work around (), you would get the alert, because once you un-mute the relevant query properties have changed.

           

          The only way to block alerts would be further upstream - meaning that Solarwinds sends it's alert to some other system (your ticketing server, etc) and THAT system sends out alerts. Then you could implement a blackout feature at that level. So that during the blackout, Solarwinds is sending alerts but the ticket system sees the blackout and blocks it. And once the blackout is over, Solarwinds isn't going to send ANOTHER alert.

           

          However, in every place I've been what I just described is a BUG, not a FEATURE. The immediate request from all teams is "I need you to RE-check the device when it comes out of blackout so I know if it's still down".

          • Re: Alerts generated when 'Unmanage' period ends
            LadaVarga

            Which alert is fired?

            After unmanage period alerting engine fire alert because that node fulfill trigger condition.

            You can try prolong unmanage period or you can set "Do not trigger until this condition exists for more than" to 2 min for example in affected alert.