Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Network Performance Monitor (NPM) > Alert on Orion Audit

Alert on Orion Audit

Table of contents

Updated: October 16, 2017

Overview

This article describes how to create an alert whenever a certain audit condition occurs. This alert looks at the events in the AuditingEvents table.

Environment

  • All versions of NPM

Steps

1.  Go to Settings -> All Settings -> Manage Alerts, Add New Alert.

2.  For the Trigger condition:

  • I want to alert on:  Auditing Event
  • Only on the following objects:  Choose event:  Auditing Event was created
  • Choose the appropriate Auditing Event(s).  If one has more than one event, make sure that one uses the "OR" condition

3.  Reset Condition:

  • Choose:  No reset condition – Trigger this alert each time the trigger condition is met

4.  Trigger Action

  • Create the appropriate actions to take
  • The account that did the work is in the AccountID variable
  • The person who did the work, the object that was changed, and what was changed in the object, are contained in the AuditEventMessage variable.

5.  Reset Action

  • This will be empty since there was no reset condition specified

6. Complete the alert

 

The following is a list of possible audit-able events: 

 

HardwareHealth.HardwareSensorStatusChanged
HardwareHealth.PreferredCiscoMIBNodeSettingChanged
HardwareHealth.ThresholdCreated
HardwareHealth.ThresholdDeleted
HardwareHealth.ThresholdModified
Orion.AccessDenied
Orion.AlertAcknowledged
Orion.AlertAdded
Orion.AlertChanged
Orion.AlertDeleted
Orion.AlertDisabled
Orion.AlertEnabled
Orion.AlertNoteChanged
Orion.AlertSuppressionAdded
Orion.AlertSuppressionChanged
Orion.AlertSuppressionDeleted
Orion.APM.ApplicationAdded
Orion.APM.ApplicationDeleted
Orion.APM.ApplicationManaged
Orion.APM.ApplicationModified
Orion.APM.ApplicationUnmanaged
Orion.APM.CredentialsAdded
Orion.APM.CredentialsDeleted
Orion.APM.CredentialsModified
Orion.APM.IIS.PoolManaged
Orion.APM.IIS.PoolRestart
Orion.APM.IIS.PoolStart
Orion.APM.IIS.PoolStop
Orion.APM.IIS.PoolUnmanaged
Orion.APM.IIS.SiteManaged
Orion.APM.IIS.SiteRestart
Orion.APM.IIS.SiteStart
Orion.APM.IIS.SiteStop
Orion.APM.IIS.SiteUnmanaged
Orion.APM.NodeRebooted
Orion.APM.ProcessTerminated
Orion.APM.ServiceStateChanged

Orion.APM.TemplateAdded
Orion.APM.TemplateDeleted
Orion.APM.TemplateModified
Orion.Cloud.Aws.CloudAccountCreated
Orion.Cloud.Aws.CloudAccountDeleted
Orion.Cloud.Aws.CloudAccountModified
Orion.Cloud.Aws.Management
Orion.ContainerMemberDefinitionAdded
Orion.ContainerMemberDefinitionChanged
Orion.ContainerMemberDefinitionDeleted
Orion.CustomPropertyAdded
Orion.CustomPropertyChanged
Orion.CustomPropertyDeleted
Orion.DeletedAutoDependenciesAdded
Orion.DeletedAutoDependenciesDeleted
Orion.DependencyAdded
Orion.DependencyChanged
Orion.DependencyDeleted
Orion.DevicePollerDeleted
Orion.DPI.ApplicationChanged
Orion.DPI.ApplicationDiscoverySettingsChanged
Orion.DPI.ProbeSettingChanged
Orion.GroupAdded
Orion.GroupChanged
Orion.GroupDeleted
Orion.HA.PoolCreated
Orion.HA.PoolDeleted
Orion.HA.PoolDisabled
Orion.HA.PoolEnabled
Orion.HA.SwitchoverInitiated
Orion.InterfaceAdded
Orion.InterfaceDeleted
Orion.InterfaceManaged

Orion.InterfaceUnmanaged
Orion.ListResourcesAdded
Orion.ListResourcesChanged
Orion.ListResourcesDeleted
Orion.NodeAdded
Orion.NodeChanged
Orion.NodeDeleted
Orion.NodeManaged
Orion.NodePollingEngineMoved
Orion.NodeUnmanaged
Orion.Recommendations.ConstraintChanged
Orion.Recommendations.RecommendationChanged
Orion.ReportJobDisabled
Orion.ReportJobEnabled
Orion.ResourceAdded
Orion.ResourceChanged
Orion.ResourceDeleted
Orion.ServiceRestarted
Orion.ServiceStarted
Orion.ServiceStopped
Orion.SettingModified
Orion.SettingOverrideCreated
Orion.SettingOverrideDeleted
Orion.SettingOverrideModified
Orion.SettingsChanged
Orion.SMTPServerAdded
Orion.SMTPServerChanged
Orion.SMTPServerDeleted
Orion.SSH.ConnectionFailed
Orion.SSH.ConnectionSuccess
Orion.TechnologyPollingAssignmentChanged
Orion.ThresholdChanged
Orion.UserAdded
Orion.UserDeleted
Orion.UserLogin
Orion.UserLogout

Orion.ViewAdded
Orion.ViewChanged
Orion.ViewDeleted
Orion.VIM.PollingSettingsChanged
Orion.VIM.VmManagement
Orion.WebSettingsChanged
SNI.AlertConfigurations.IntegrationStateChanged

 

Last modified

Tags

Classifications

Public