Forum Discussion

Lewis_Beard's avatar
Lewis_Beard
Icon for Expert rankExpert
16 days ago

Alert Trends (Counts) by LogicModule/Datapoint?

A user asked me if there is a way to know how many alert happened over a given time period, broken down (or rolled up) by counts, based on LogicModule, or even LogicModule/Datapoint? For example, he would want to see that in folder Customers/Region1/ that there were 47 ping alerts, 32 host down, 17 ssl cert alerts, 4 file system alerts, etc etc, with the counts by each one based on the time period selected.

The Alert Trends report will show alerts per folder or some similar very basic rollup, and I can make an alerts report and pick a specific logicmodule to see the counts for just that logicmodule. But I dont really see a way to do it. I think the user would even be OK if it were possible to do counts on the Alerts page. Maybe there is some ticky way to do it by the Resource Explorer, that only occurred to me as I'm typing this. I guess I will check.

But is there any way to get a breakdown, or counts, of alerts by type? Preferably in a report, but on a live page like Alerts page or Resource Explorer would be fine.

Thanks!

  • Mike_Moniz's avatar
    Mike_Moniz
    Icon for Professor rankProfessor
    16 days ago

    I can't think of a way to really group alerts in LM built-in. For something like that, I would likely just export the alert report to CSV and use Pivot Tables in Excel to group and filter alerts in various ways. 

  • Lewis_Beard's avatar
    Lewis_Beard
    Icon for Expert rankExpert
    15 days ago

    Oh yeah, this option. I had forgot all about it, and then someone reminded me. Its pretty crude but functional. I think I used that 2 years ago and completely forgot it exists. :)

     

     

     

  • Lewis_Beard's avatar
    Lewis_Beard
    Icon for Expert rankExpert
    15 days ago

    I meant to highlight "Summarize Alert Counts" and not pre-existing alerts. But that does it well enough to help the person who asked. I'm going to keep poking around and see if I can do it in the Resource Explorer. I loathe UIv4 but since its coming, might as well force myself to use the Resource Explorer so I'm more accustomed to it.

    Thanks Mike!

  • Joe_Williams's avatar
    Joe_Williams
    Icon for Professor rankProfessor
    11 days ago

    This doesn't answer your question directly, but we accomplish this via a slightly different means. When we send the alert to our ticketing portal, we send the various extra fields like datasource/datapoint/etc, and each alert is tied to the CI. So we can do the reporting divorced from LogicMointor.