Search the Community
Showing results for tags 'alert'.
Found 4 results
All-- So I have an issue at times where the LT-Offline Server does not work correctly. Specifically the server is reporting back to the database, but overall the machine is hosed. When I look at Automate, the agent is not checked in/show as offline. When I connect to another node that is online I can ping the host, but cannot connect to it. Essentially requiring the server to be rebooted to come back up and come online. The issue here is that the offline monitor should kick off. But because it is still sending some heartbeat info to the SQL, it is essentially telling Automate that it is still on. I now have a group for server that I want to apply a new internal monitor for, but the logic is hard to come by. Would anyone be able to help me out? I have tried the below and it is not working SQL command SELECT * FROM computers WHERE lastContact <= NOW() -INTERVAL 10 MINUTE I also tried this one SELECT NAME, Lastcontact FROM computers WHERE DATE(LASTCONTACT)>NOW() -INTERVAL 10 MINUTE withing SQLyog, the second item returns 0 results. Then I would also need to understand the logic required to actually setup the monitor if someone has the time. Thanks Jason
phoenix posted a topic in Cloud PlatformHi All, First time posting so please be nice . I've recently configured some HP Hardware monitoring (thanks Joe.McCall !) and now am getting alerts for some systems which is great. I now need to configure the following: 1. Drive failure should alert within 5 minutes. The remote monitor is set to run every 5 minutes, and is continuous.This takes care of this requirement but introduces an issue with ticket alerts being generated continuously. Changing the monitor to 'once' would fix this but would introduce another issue which I am trying to solve (below) 2. The ticket should re-open once daily if the issue is still present. This would 'protect' us if a tech closed the ticket without the issue being resolved. Technically I can address the above by creating two monitors, but then this would create two tickets for each alert. As an alternative, I could 'silence' the alerts for a period of time, perhaps 24 hours by default? I'm not sure how to do this, but coming from a Zabbix/Nagios background, I assume this is pretty simple? I would like to be able to do this anyway, or at least create an exception because another issue I have with the hardware alerts is that some will always fail. We have some HP servers with non-genuine memory and HP SNMP will report this as a failure. Without removing the server from the search group the SNMP checks are applied to, how can I create an exception? It looks like exceptions are only possible with Internal Monitors and not Remote Monitors? Any assistance would be greatly appreciated. Thank you!
man posted a topic in General DiscussionsI am trying to make tickets more readable coming from the stock Blacklisted Event Internal monitors, but tickets are not being created for my custom monitors, in CW Automate or CW Manage: EV - BlackListed Events Informational Errors Only EV - BlackListed Events Warnings and Errors Only To do this I have created custom Monitors, Alert Templates, Alert Actions, and Autofix Scripts by copying the stock ones used by the stock monitors above. Here is the setup for my custom Informational monitor for example: Stock Monitor : EV - BlackListed Events Informational Errors Only Custom : Event Log Errors - Informational - CUSTOM Stock Alert Template : ~Autofix Action Blacklist Events - Informational Custom : ~Autofix Action Blacklist Events - Informational CUSTOM Stock Autofix Script : Monitor Disk Blacklist Events - Informational* Custom : Monitor Disk Blacklist Events - Informational* CUSTOM The problem is, when I manually Run and Reset the custom monitors, neither of them create any tickets. The correct results DO show up under the "Status" and "Build and View Query" tabs of the custom monitor. I have narrowed it down to a problem with the custom Autofix script, because it DOES work when I change the Alert Template to use the stock Autofix script. I cannot figure out why my custom Autofix script isn't working. Here are screenshots of my configurations for the custom Monitor and AutoFix script, compared to stock: Monitor: Script:
I've been tasked with generating a custom alert board that we can reference for a large-format display in our NOC. One of the things we're dealing with is a large number of "No checkin for (x) days" alerts and we want to exclude those from the list, along with some other alert types that are deemed less urgent by our account team. Is it possible to create a custom alert view and use filters to exclude certain alert types, monitors or strings? We would still want to keep the master list of alerts that shows everything, but we want to have one (or more) that are custom-tailored to showing up-to-the-minute lists of alerts like circuit outages, AV warnings, and hardware failures. Thoughts on how to do this? Thanks!