When you set up alerts in PacketTrap, you will automatically receive an email which notifies you if any issues arise in the network. These alerts allow you to fix the issues before they impact a user. You can configure alerts for multiple conditions that meet the needs of your network. An alert can monitor network events, traffic, and conditions to create a performance baseline, which makes sure that you are not inundated with false-positive alerts from normal network activity. Additionally, you can set up critical alerts to be escalated to one or more users until the problem is resolved or you can suppress alerts from triggering during scheduled network main-tenance. You can also set up an alert for interrelated events or conditions.
See Also
Adding Alerts Escalating Alerts
Setting Up Alerts for Custom SNMP Monitor
Adding an alert to your policy allows you to stay informed of any issues that may arise. You can configure an alert to when you add an alert, you need to configure the conditions for which that alert will be triggered and what actions should be taken to resolve the issue. You can also esca-late the alert if it is not resolved.
1. In the Edit Policy window, click the Alerts tab.
2. Click Add Alert.
3. Type a name for the alert.
4. In the drop-down lists, select a Severity and Priority.
5. In the Notifications section, select one or more of the following check-boxes:
l Notify On Conditions Met. This option notifies you by email after the your con-figured conditions have been met.
l Notify On Actions Complete. This option notifies you by email after an action has been taken to resolve the issue.
l Notify On Alert Reset. This option notifies you by email after an alert has been reset.
6. (Optional) In the Notification Target Override To and CC fields, type an email address. If you have a user already set up to receive alert notifications, this option overrides that per-son and sends an email to the email address that you enter in the To or CC fields.
7. In the Alert Reset Options, select whether you want the alert to be automatically or man-ually reset.
8. In the Conditions, Actions, and Escalations section, configure a new condition, action, esca-lation, or reset option.
l New Condition
You can set the performance thresholds for monitors which determines when an alert is triggered. Set a condition for all monitors.
NOTE: A condition will only work if the associated monitor is enabled for a device.
For example, the CPU monitor must be enabled for an alert to work on CPU over 90%.
l New Action
Foglight NMS can take action on a device if the conditions are met. The inventory of actions includes:
For Windows: Start Service, Stop Service, Pause Service, List Services, Create Proc-ess, Kill ProcProc-ess, List ProcProc-ess, List Process Top CPU Usage, List Process Top Memory Usage, List Process Top Read from Disk, List Process Write to Disk, List Network Sta-tistics, Shutdown Restart, IP Config Info for Host, Route Table Info for Host.
For Linux: Start Linux Process, Kill, Linux process, List Active Connections, List Dae-mon Processes, List Directory Details, List File System Details, List Installed Pack-ages, List IP Config Details, List Memory Status, List Network Statistics, List Routing Table, List Running Processes, List Top CPU Details, Shutdown Linux.
For Networking: Send a Syslog message.
l New Escalation
You can set up a notification to be sent when an alert has not been reset or
addressed for a specific period of time. For example, if an alert is not reset after 30 minutes, Foglight NMS will send another notification to the entire IT Department.
l New Reset Condition
You can set the performance thresholds that need to be met in order for an alert to be reset. This option ensures that the device returns to optimal performance.
9. Click Ok to complete the process.
10. Click Save to save your changes.
See Also
Escalating Alerts
When an alert is not reset by a user, Foglight NMS escalates the alert to one or more users. In order to send the escalated alert to a specific user, you must assign an escalation rank to that user in the User Management section of the Administration View. The escalation rank is the priority by which users are notified. Once you establish the escalation ranking order, you can return to the policy, open an alert, and add a new escalation to it, as well as define the param-eters for it.
Setting the Escalation Rank For a User
1. In the Foglight NMS Studio, click Configuration -> Administration.
2. Click User Management.
3. In the list of users, select a user to which you want to assign a rank.
4. Click Notifications.
5. Click Add Rule.
6. Select a site in the site drop-down list.
7. In the Escalation Rank field, select a number. For example, if you assign "1" as the rank, then this user is the first person notified when an alert is escalated.
8. Click OK.
Adding a New Escalation to an Alert
1. Select a policy to edit and then click the Alerts tab.
2. Select an alert and click Edit Alert.
3. Click the New Escalation link.
4. In the Escalation dialog, do the following to define the escalation parameters:
l In the After field, select the amount of time that passes between each email that is sent to the user.
l In the Trigger field, select the number of times a user will be notified before the alert is escalated to a different user or is placed back in to "Alert in Process" status.
5. Click OK.
See Also
Managing Alert Notification Rules
For each user you add to Foglight NMS, you can specify who will receive alert notifications by creating a rule in the User Management tool. You can also set which users will be notified when an alert has been escalated.
1. From the Studio, click Configuration -> Administration.
2. Click User Management.
3. Click Notifications.
4. Select a user in the list. You can click Add Rule to add a new rule to the selected user or click Edit Rule to edit an existing rule.
5. Click OK to save your changes.
NOTE: You can also access the Alert Notification Rules dialog from the Edit Policy Window.
Click the Alerts tab, and then click the Manage Alert Notification Rules link.
See Also
Escalating Alerts