Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > User Device Tracker (UDT) > UDT Administrator Guide > Alert and Report > Configure SolarWinds UDT Alerts

Configure SolarWinds UDT Alerts

Created by Steven Bansil_ret, last modified by Steven Bansil_ret on Jan 23, 2017

Views: 31 Votes: 0 Revisions: 2

SolarWinds UDT provides device alerts you can use with Orion Advanced Alert Manager to actively monitor and respond to detected issues.

Only advanced alerts may be used for SolarWinds UDT-specific purposes. Basic alerts cannot be configured to trigger on SolarWinds UDT conditions or events.

Configuring an alert for SolarWinds UDT is similar to configuring an alert for Orion Network Performance Monitor.

The UDT alerts currently available are:

  • Alert me when a new MAC address appears on network
  • Alert me when a MAC address moves
  • Alert me when a rogue MAC address appears on the network
  • Alert me when a rogue DNS name appears on the network
  • Alert me when a rogue IP address appears on the network
  • Alert me when a Hostname appears on the network
  • Alert me when watch list item becomes active

Configure a default UDT alert

  1. Log in to the Windows server hosting SolarWinds UDT.
  2. Click Start > All Programs > SolarWinds Orion > Alerting, Reporting, and Mapping> Advanced Alert Manager.
  3. Click Configure Alerts.
  4. Select the relevant UDT alert in the list.
  5. Click Edit.
  6. Click the Trigger Condition tab.
  7. Select theUDT item from the Type of Property to Monitor list.
  8. Adjust the trigger condition.

    This statement does not need to be adjusted. For example, the default trigger for Alert me when a new MAC address appears on the network is Is New MAC is equal to 1. In this case, there are only two values possible: 1 and Null.

Set up the alert trigger action

These steps use Alert me when watch list item becomes active as the alert being set up.

  1. Click the Trigger Actions tab (with the relevant UDT alert still open).
  2. Click Add New Action.
  3. Select Log the Alert to the NetPerfMon Event Log, and then click OK.

    The next steps build the message that shows up in the Orion Event Log when the Alert me when watch list item becomes active alert is triggered.

  4. Enter a string in the message field that begins a statement of the alert. Insert variables that the software populates with values at runtime. This means that you are building your message around the variables.

    For example, if you want to give the Watch item type and node involved in the triggered alert, you might begin your alert statement with Watch list type in the message field and leave the cursor sitting at the end of the phrase.

  5. Click Insert Variable.
  6. Select the variable category from the list, and then select the variable.

    Continuing with the Watch list alert as an example, select Watch List from the Variable Category list, select WatchItemType from the Select A Variable list.

  7. Click Build Selected Variable.

    The prompt Watch item type ${WatchItemType} displays in the message box. At runtime, the Orion Platform software fills in the variable based on the triggered alert and publishes the appropriate message in Orion Even Log.

    The next variable adds the relevant Watch list node into the Event Log message.

  8. Position the cursor at the end of the message under construction in the message box and enter " of node ". Click Insert Variable when you are finished.
  9. Select General from the Variable Category list, select NodeName from the Select A Variable list, and then click Build Selected Variable.

    You should see the phrase "Watch item type ${WatchItemType} of node ${NodeName}" in the message box.

  10. Position the cursor at the end of the message under construction in the message box and type "is". Click Insert Variable when you are finished.
  11. Select Watch List from the Variable Category list, select Present from the Select A Variable list, and then click Build Selected Variable.

    The full message should read The watch item type ${WatchItemType} of node ${NodeName} is ${Present}.

  12. Click OK.

If any of your items in the Watch list become connected to the network, you will see a line item for each in the Event Log.

 
Last modified
19:47, 22 Jan 2017

Tags

Classifications

Public