You can set the specific conditions for triggering an advanced alert with the following procedure.
To set the trigger conditions for an advanced alert:
1. Click Start > SolarWinds Orion > Alerting, Reporting, and Mapping > Advanced Alert Manager.
2. Click View > Configure Alerts, and then click New or select an alert.
3. Click Copy or Edit, as appropriate, and then click Trigger Condition.
4. Select the Type of Property to Monitor from the list.
5. If you select Custom SQL Alert, complete the following steps:
a. Select the object on which you want to alert in the Set up your Trigger Query field.
b. Provide your custom SQL in the field below the object selection query.
c. If you want to delay the trigger of this alert, provide the value and unit of your desired alert trigger delay.
d. If you want to confirm your provided SQL, click Validate SQL.
6. If you select a type of monitored object,complete the following steps:
a. Generate trigger conditions in the text field by selecting appropriate descriptors from the linked context menus and by clicking Browse on the left of the text field.
b. Click the linked text to select the number of conditions that you want to apply (all, any, none, not all). For more information about linked text conditions, see Understanding Condition Groups.
c. Click Browse to view the following condition options:
Note: The has changed condition is only valid for the Last Boot, IOS Version, and IOS Image Family device characteristics.
d. If you need an additional condition, click Add, and then select the type of condition you want to add.
e. If you need to delete a condition, select the condition from the condition list, and then click Delete.
f. If you want to specify a time duration for the condition to be valid, type the interval and select Seconds, Minutes, or Hours from the list.
Note: You may need to delay alert trigger actions until a condition has been sustained for a certain amount of time. For example, an alert based on CPU load would not trigger unless the CPU Load of a node has been over 80% for more than 10 minutes. To set up a sustained-state trigger condition, at the bottom of the Trigger Condition tab, provide an appropriate amount of time the alert engine should wait before any actions are performed. By default, the alert triggers immediately, if the trigger condition exists. The maximum alert action delay is eight hours after the trigger condition is met.
g. If you are finished configuring your advanced alert, click OK.