Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Network Performance Monitor (NPM) > Changes in the Alertlog table in NPM 11.5.2 version

Changes in the Alertlog table in NPM 11.5.2 version

Table of contents

Updated March 11th, 2016

Overview

This article explains some of the Alert Table changes in NPM version 11.5.2  from the previous versions.

Environment

NPM version 11.5.2

Detail

There are major architectural changes in the database tables with the newest version of NPM. The Alertlog table is no longer valid for 11.5. The following are the newest tables that are included in the new structuring:

 

TABLES:

  • AlertConditionState - used by the service for evaluated alert conditions.
  • AlertActive - contains currently active alerts. When an alert is triggered, then a new record is created for a given object. When an alert is reset, then a record is deleted for the given object.
  • AlertObjects - when active alert is triggered and for triggered swis entity does not exist, a record is added. When alert is reset, the record is not deleted. Deleting orphaned record takes care of database maintenance.
  • AlertActiveObjects - used for global alerts (one alert is triggered when more objects fulfill trigger condition). It contains a list of objects that trigger the alert.
  • AlertHistory table - storage of every action completed with active alert such as trigger, reset, acknowledge, added note, and action execution.

 

If you are looking for what the old table AlertLog has changed to, then the table that you are looking for in the newest version of NPM 11.5.2 is the AlertHistory table.

 

The following are the columns that are in the AlertHistory table:

 

SELECT TOP 1000 [AlertHistoryID]

      ,[AlertID]

      ,[TimeStamp]

      ,[EventTypeWord]

      ,[Name]

      ,[ObjectType]

      ,[AlertEnabled]

      ,[Frequency]

      ,[Message]

      ,[AccountID]

      ,[AlertActiveID]

      ,[AlertObjectID]

      ,[ActionID]

      ,[ActionTypeID]

      ,[Title]

      ,[RealEntityType]

      ,[TriggeredCount]

      ,[EntityNetObjectId]

      ,[EntityCaption]

      ,[EntityDetailsUrl]

      ,[RelatedNodeCaption]

      ,[RelatedNodeDetailsUrl]

      ,[RelatedNodeId]

      ,[LastTriggeredDateTime]

      ,[AlertNote]

      ,[AlertRefID]

      ,[BlockUntil]

      ,[NotifyEnabled]

      ,[LastEdit]

      ,[CreatedBy]

      ,[Canned]

      ,[Category]

      ,[Severity]

  FROM [SolarWindsOrion].[dbo].[AlertHistoryView]

 

This table is prebuilt in the 11.5.2 version.

 

If you could not view this table, the following commands are used to create it. This is a scripted view in 11.5.2.

 

-------------------------------------------

USE [SolarWindsOrion]

GO

 

/****** Object:  View [dbo].[AlertHistoryView]   ******/

SET ANSI_NULLS ON

GO

 

SET QUOTED_IDENTIFIER ON

GO

 

 

Create view [dbo].[AlertHistoryView] as

      SELECT AH.[AlertHistoryID], ACo.AlertID, AH.[TimeStamp],

CASE AH.[EventType]

WHEN 0 then 'Triggered'

WHEN 1 then 'Reset'

WHEN 2 then 'Acknowledged'

WHEN 3 then 'Note'

WHEN 4 then 'AddedToIncident'

WHEN 5 then 'ActionFailed'

WHEN 6 then 'ActionSucceeded'

WHEN 7 then 'Unacknowledge'

WHEN 8 then 'Cleared'

Else 'Unknown'

END  as EventTypeWord ,

ACo.[Name], ACo.[ObjectType], ACo.[Enabled] as AlertEnabled, ACo.[Frequency],

AH.[Message], AH.[AccountID], AH.[AlertActiveID], AH.[AlertObjectID], AH.[ActionID], AC.ActionTypeID, AC.Title,

AO.RealEntityType, AO.TriggeredCount, AO.EntityNetObjectId, AO.EntityCaption, AO.EntityDetailsUrl, AO.RelatedNodeCaption, AO.RelatedNodeDetailsUrl, AO.RelatedNodeId, AO.LastTriggeredDateTime, AO.AlertNote,

ACo.[AlertRefID], ACo.[BlockUntil], ACo.[NotifyEnabled], ACo.[LastEdit], ACo.[CreatedBy], ACo.[Canned], ACo.[Category], ACo.[Severity]

  FROM [AlertHistory] AH With (Nolock)

  INNER JOIN AlertObjects AO With (Nolock) ON AH.AlertObjectID = AO.AlertObjectID

  INNER JOIN AlertConfigurations ACo With (Nolock) ON ACo.AlertID=AO.AlertID

  LEFT JOIN Actions AC With (Nolock) ON AH.ActionID = AC.ActionID

GO


-------------------------------------------

 

Last modified
12:53, 1 Jun 2017

Tags

Classifications

Public