Alerts

General Filters

The following filters appear on the General tab.

• Clear/select the check box for each Severity level to limit the alerts to the severities you specify.

  • Emergency - System is unusable.

  • Alert - Action must be taken.

  • Critical - Critical condition.

  • Error - Error condition.

  • Warning - Warning condition.

  • Notice - Normal but significant condition.

  • Info - Informational message.

  • Debug - Debug level message.

• Click the Technology Type drop-down.

  • Select All to display both flow technology type and metric technology type alerts.

  • Select Flow to display only flow technology type alerts.

  • Select Metric to display only metric technology type alerts.

• In the Message field, enter message text on which to filter alerts.

• Click the Assigned drop-down and select the user id to display alerts assigned to it.

• In the Search ID field, enter an alert identifier and select Alert ID, enter a threshold identifier and select Threshold ID, or enter a policy identifier and select Policy ID to search for an alert by ID. You must enter the full ID and wildcards are not allowed.

• Click the Show drop-down.

  • Select Active Only to display only active alerts.

  • Select Ignored Only to display only ignored alerts.

  • Select Both to display active and ignored alerts.

Devices Filters

The Devices tab enables you to filter alerts for specific devices. Alerts for the devices you select display in the alerts list. Leave clear to display alerts for all devices.

Objects Filters

The Objects tab enables you to filter alerts for specific objects.

1. Click the Device drop-down and select the device that contains the objects that trigger the alerts to view.

2. Alerts for the objects you move to the field on the right appear in the alerts list. Leave the right side field clear to display alerts for all objects.

Device Groups Filters

The Device Groups tab enables you to filter alerts for specific device groups/device types. Click the Device Groups drop-down and select the check box for each device group/device type for which to display alerts. Leave all check boxes clear to display alerts for all device groups/device types.

Object Groups Filters

The Object Groups tab enables you to filter alerts for specific object groups. Alerts for the object groups you move to the field on the right appear in the alerts list. Leave the right side field clear to display alerts for all object groups.

Grouping - Alerts

Click the Grouping drop-down and select Alerts. Alerts is the default grouping setting when the Alerts page initially appears. The Alerts grouping level is the most granular alerts display and this grouping level enables you to manage the individual alerts.

• ID - Displays the internal tracking number for each alert.

  • - The alert is unassigned.

  • - The alert is assigned.

• Device - Displays the name of the device that triggered the alert. Flow technology alerts display Unknown Device for devices for which the SNMP plugin is not enabled and the name has not been resolved.

• First - Displays the date and time that the alert was first reported to SevOne NMS.

• Last - Displays the date and time that the alert was last reported to SevOne NMS.

• Assigned To - Displays the user id to whom the alert is assigned. The default is for alerts to be Unassigned.

• Severity - Displays the alert severity level.

• Message - Displays the message the threshold generates.

• Comments - To display the Comments column, click the Show Comments button. To hide the comments, click the Hide Comments button.

The Alerts grouping setting provides the following controls to enable you to view alert details and to manage alerts.

• Click on an alert row to display the following additional information for the alert you select below the alert list.

  • Device - Displays the name of the device that triggered the alert. Click the device name to display a link to the Device Summary and links to the report templates that are applicable for the device.

  • Object - Displays the name of the object or interface that triggered the alert. Click the object name: For flow technology type alerts, the FlowFalcon Reports page appears and for metric technology type alerts, a link to the Object Summary and links to the report templates that are applicable for the object appear.

  • Threshold or Trap - Displays the name of the threshold or trap that triggered the alert. Click the threshold name to display the Threshold Editor or click the trap event name to display the Trap Event Editor. For details on this, please refer to section Trap Event Editor in SevOne NMS System Administration Guide.

  • Severity - Displays the alert severity level.

  • Message - Displays the message the threshold generates.

  • Ignore Message - Displays the name of the user who marked the alert to be ignored and the ignore message. (Ignored alerts only.)

  • First - Displays the date and time that the alert was first reported to SevOne NMS.

  • Last - Displays the date and time that the alert was last reported to SevOne NMS.

  • Occurrences - Displays the total number of times the alert triggered in the time frame between First and Last. The alert engine runs every three minutes. A policy based threshold requires ten minutes to gather enough data to trigger an alert. Therefore it can take up to thirteen minutes for the first alert for a new policy to appear.

  • Assigned To - Displays the name of the person or role to whom the alert is assigned. The default is for alerts to be unassigned.

• Select the check box for each alert to acknowledge and click Acknowledge to acknowledge the alerts you select. Acknowledged alerts permanently move to the Alert Archives. A pop-up appears to enable you to enter an explanation for the acknowledgment.

• Select the check box for each alert to test and click Retest to see if the threshold trigger condition still exists for the alerts you select. The alert engine runs every three minutes to retest all thresholds. If a threshold does not have a clear condition, the alert displays on the Alerts page until the alert is acknowledged. When you retest an alert that is triggered by a threshold with no clear condition, even if the trigger condition is no longer met, the alert continues to display on the Alerts page but the Last date and time does not change.

• Select the check box for each alert to ignore and click Ignore to ignore the alerts you select. A pop-up appears to enable you to define the time span for which to ignore the alert and to enter a note. Filters enable you to not display alerts you ignore on the Alerts page. No emails and traps are sent from ignored alerts for the time span you enter.

• To add, edit, or delete a comment for an alert, select the check box for the alert. Click Comment button. A pop-up appears which allows you to add a comment or modify the existing comment. Click Save. To delete the comment, click the Delete button in the pop-up.

• Select the check box for each alert to assign, click the drop-down next to the Assign button and select the name of the person to whom to assign the alerts you select, and then click Assign to assign the alerts you select to the person or role you select from the drop-down list.

Grouping - Devices

Click the Grouping drop-down and select Devices.

• Device - Displays the name of the device that triggered alerts.

• First - Displays the date and time that the first alert for the device was first reported to SevOne NMS.

• Last - Displays the date and time that the last alert for the device was last reported to SevOne NMS.

• Highest Severity - Displays the highest severity level of the alerts on the device.

• Message - Displays the total number of alerts the device triggered and the highest severity level of the alerts on the device.

Click on either a device name or on a message to display the alerts list with the Alerts grouping setting and filters applied to display alerts for only the device you select. Please refer to Grouping - Alerts section above.

Grouping - Device Groups

Click the Grouping drop-down and select Device Groups to display the following alert information.

• Device Group - Displays the name of the device group/device type that triggered alerts.

• First - Displays the date and time that the first alert for the device group/device type was first reported to SevOne NMS.

• Last - Displays the date and time that the last alert for the device group/device type was last reported to SevOne NMS.

• Highest Severity - Displays the highest severity level of the alerts in each device group/device type.

• Message - Displays the total number of alerts the device group/device type triggered and the highest severity level of the alerts in the device group/device type.

Click on either a device group/device type name or on a message to display the alerts list with the Devices grouping setting and filters applied to display alerts for only the devices in the device group/device type you select. Please refer to Grouping - Devices section above.

Grouping - Object Groups

Click the Grouping drop-down and select Object Groups to display the following alert information.

• Object Group - Displays the name of the object group that triggered alerts.

• First - Displays the date and time that the first alert for the object group was first reported to SevOne NMS.

• Last - Displays the date and time that the last alert for the object group was last reported to SevOne NMS.

• Highest Severity - Displays the highest severity level of the alerts in each object group.

• Message - Displays the total number of alerts the object group triggered and the highest severity level of the alerts in the object group.

Click on either an object group name or on a message to display the alerts list with the Devices grouping setting and filters applied to display alerts for only the devices in the object group you select. Please refer to Grouping - Devices section above.