Network Management

Integrated alerts in Log Analyzer do not trigger due to Information Service subscriptions

This article addresses Log Analyzer integrated alerts that do not trigger during rule processing.

First published date

5/22/2019 8:03 PM

Last published date

3/4/2022 10:19 AM

Overview

Log Analyzer, formerly Log Manager for Orion, can integrate an alert in its rule processing. When it starts to fail, you may see some logs in the Alerting.Service.V2.log file, indicating an issue with the SolarWinds Information Service Publish/Subscribe (SWIS Pub/Sub).
  
WARN  SolarWinds.Orion.Core.Alerting.Service.Monitors.AlertDefinitionsMonitor - Alert 
(AlertId=159) removed by regular database check. It can indicate that there is 
something wrong with SWIS Pub/Sub.

Product section

Log Analyzer

Cause

Alert integration of Log Analyzer is broken due to the SWIS Pub/Sub.

Resolution

Clear the information Service subscriptions in the database: 

  1. Stop Orion services (How to Start, Stop, or Restart Orion Services with the Orion Service Manager in Orion Platform) on all Orion servers, including Additional Polling Engines and Additional Web Servers.
  2. On your main server, open Database Manager.
  3. Click Add default server.
  4. Right-click the Orion Database, and select New query.
  5. Enter the following queries:  
    -- Scripts are not supported under any SolarWinds support program or service.
-- Scripts are provided AS IS without warranty of any kind. SolarWinds further
-- disclaims all warranties including, without limitation, any implied warranties
-- of merchantability or of fitness for a particular purpose. The risk arising
-- out of the use or performance of the scripts and documentation stays with you.
-- In no event shall SolarWinds or anyone else involved in the creation,
-- production, or delivery of the scripts be liable for any damages whatsoever
-- (including, without limitation, damages for loss of business profits, business
-- interruption, loss of business information, or other pecuniary loss) arising
-- out of the use of or inability to use the scripts or documentation.
DELETE FROM Subscriptions
DELETE FROM SubscriptionTags
DELETE FROM PendingNotifications;
  6. Click Execute query.
  7. Start Orion services (How to Start, Stop, or Restart Orion Services with the Orion Service Manager in Orion Platform) on all Orion servers. Make sure to start with the Main Poller first.
   
Note: See Clear Information Service Subscriptions for details about clearing the SWIS Pub/Sub.