Submit a ticketCall us

Quickly Address Software Vulnerabilities
Patch Manager is an intuitive patch management software which extends the capabilities of WSUS and SCCM to not only patch Windows® servers and workstations, and Microsoft® applications, but also other 3rd-party applications which are commonly exploited by hackers. Learn more about our patch management solution.

 

Home > Success Center > Server & Application Monitor (SAM) > Server & Application Monitor Getting Started Guide > Reduce alerting noise > Alerts with multi-element triggers

Alerts with multi-element triggers

Table of contents
Created by Chris.Moyer, last modified by Anthony.Rinaldi on Aug 23, 2016

Views: 14 Votes: 0 Revisions: 6

You can use complex conditions to trigger alerts when objects meet separate trigger conditions at the same time. For example, if you have two applications on two separate servers, you can still manage if you lose one application. However, if you lose both applications, you need the system to send a critical alert.

Complex conditions should be used with caution. SolarWinds recommends testing each trigger condition individually before combining them.

On the Trigger Conditions panel, expand Advanced options, and select Enable complex conditions.

File:Success_Center/New_Articles/NPM-CHM-Import/Onboarding-Guide-CHM/0F0/020/Enable_Complex_Conditions.png

With a standard alert, you can create an alert for each of the two applications. With a complex condition, you can create a single alert where the application would have to fail on both Server A and Server B in order to generate an alert.

In this example, the primary trigger condition is written for Server A.

File:Success_Center/New_Articles/NPM-CHM-Import/Onboarding-Guide-CHM/0F0/020/Multi_Element_1.png

Click Add Section and write a trigger condition for Server B.

File:Success_Center/New_Articles/NPM-CHM-Import/Onboarding-Guide-CHM/0F0/020/Multi_Element_2.png

In this example, both conditions must resolve to TRUE in order for the alert to fire, but do not have to relate to each. The condition blocks are evaluated at the same time. If they are all TRUE based on the conditions, the alert triggers. You can add additional conditions to configure granular and complex alerts.

Using condition blocks is a great way to reduce alerts. Instead of receiving an alert for each element, you can receive a single alert.

Use instance names

In the example above, a specific node name is selected in the condition. This works well if the alert has a very limited scope. Another approach is to use instance names in the condition.

File:Success_Center/New_Articles/NPM-CHM-Import/Onboarding-Guide-CHM/0F0/020/Alert-Instance-Name.png

 
Last modified
15:54, 23 Aug 2016

Tags

Classifications

Public