Introduction
The Alert Listing application will provide a comprehensive and detailed list of alerts. This list provides specific information about each alert, including its source, severity level, timestamp, and any associated actions or recommendations.
Configuration Parameters
- Add Query: Use the query to select the entities that you wish to include in the report.
- Default query: The default query
status IN ("OPEN", "ACKNOWLEDGED", "TICKETED", "CORRELATED", "SUPPRESSED")
will be populated by default when opens alert listing app. User can able to modify/delete the default query and run a custom query. - Using an OpsQL query, you can customize the report result. If Time related attributes is not selected in the query string, the user selection query would be appended by default.
For example: If a user only selects thealertType
attributes, the query will automatically append withAND createdTime > '-7d'
The query will look like below:(alertType = "MONITORING") AND createdTime > '-7d'
- Default query: The default query
- Client Selection: You can select a single client or all clients from the dropdown list. Only selected client data will get into the report.
- Attributes Selection: Specify the attributes of the selected entities that you wish to include as columns in the report.
- Default attributes: The default attributes (Alert Id, Object Name, Object Type, Ip Address, Subject, Metric, Current State, Created Time, Is Inference Alert, Inference Id) will be populated by default. The user can modify/delete default attributes and select their required attributes, including custom attributes, to view in the report.
- Only selected attributes related data will be included in the report. If no attributes are selected, the default attributes data will be included in the report.
- You can customize the default attributes selection order by using the drag and drop functionality. You are allowed to select a maximum of 25 attributes.
- Alert By: Defines the alert to be presented by Created Time or Updated Time. If the user does not select this field or mention it in the query, it will default to
createdTime
as the value for this configured parameter. - Analysis Period: The time period over which your environment was analyzed. The supported analysis periods are: Last 24 hours, 7 Days, Last Month, Last 3 Months, and Specific Period. This is an optional field. If the user does not select this field or mention it in the query, it will default to
–7d
as the value for this configured parameter. - Supported Format: Reports are generated only in XLSX format.
Reports Output
Once the report is generated, it will consist of the following sections:
- Summary: This section provides the configuration details.
- Alerts and Inferences: This section presents a list of alerts and inferences that were triggered in your environment.
- Inferences and Uncorrelated Alerts: Here, you will find a list of inferences and uncorrelated alerts that were triggered in your environment.
- Glossary: This section contains detailed information about each section presented in the report tab, helping you to understand the generated data better.
Sample of reports in XLSX format:
Alert Report Vs Alert Listing Atrributes
Click here to view the supported attributes
Alert Report | Alert Listing | |
---|---|---|
UI Atrributes Selection | Display Format In Report | |
Aler ID | id | Id |
Latest Update (IST) | updatedTime | Updated Time |
Subject | subject | Subject |
Current Status | currentState | Current State |
Partner Name | resource.partnerName | Partner Name |
Client Name | resource.clientName, clientName | Client Name |
Source | source | Source |
Host Name | resource.hostName | Host Name |
Alias Name | resource.aliasName | Alias Name |
Device State | resource.state | State |
Host IP | resource.ipAddress, ipAddress | Ip Address |
Alert Type | alertType | Alert Type |
Metric | metric | Metric |
Component | component | Component |
Ticket ID | incidentId | Incident Id |
Occurrence Count | repeatCount | Repeat Count |
Elapsed Time (HH:MM:SS) | elapsedTime | Elapsed Time |
Healed Time (HH:MM:SS) | alertCriticalWarningDuration | Healed Time |
Created Time (IST) | createdTime | Created Time |
Device ID | resource.id | Resource Id |
Event Type | isInferenceAlert | Is Inference Alert |
Action Taken | status | Status |
Device Maintenance Window | maintenanceWindow.name | Maintenance Window Name |
Device Path | resource.resourceTypePath | Resource Type Path |
Device Type | resource.type | Type |
Device Group | resource.deviceGroups.name, deviceGroups.name | Device Groups Name |
Site | resource.location | Location |
Priority | priority | Priority |
Acknowledged By | statusHistory.acknowledgedBy | Acknowledged By |
Acknowledged Time (IST) | statusHistory.acknowledgedTime | Acknowledged Time |
Created By | statusHistory.openBy | Created By |
Suppressed By | statusHistory.suppressedBy | Suppressed By |
Suppressed Time (IST) | statusHistory.suppressedTime | Suppressed Time |
Ticketed By | statusHistory.ticketedBy | Ticketed By |
Ticketed Time (IST) | statusHistory.ticketedTime | Ticketed Time |
Closed By | statusHistory.closedBy | Closed By |
Closed Time (IST) | statusHistory.closedTime | Closed Time |
Integration | N/A | N/A |
RBA Invoked | N/A | N/A |
N/A | alertDefinitionUUID | Alert Definition UUID |
N/A | clientId | Client Id |
N/A | correlatedAlertsCount | Correlated Alerts Count |
N/A | description | Description |
N/A | resource.deviceGroups.uniqueId | Device Groups UniqueId |
N/A | deviceGroups.uniqueId | Device Groups UniqueId |
N/A | dnsName | Dns Name |
N/A | inferenceId | Inference Id |
N/A | isAvailabilityAlert | Is Availability Alert |
N/A | maintenanceWindow.uniqueId | Maintenance Window UniqueId |
N/A | nocId | Noc Id |
N/A | nocName | Noc Name |
N/A | objectId | Object Id |
N/A | objectName | Object Name |
N/A | objectType | Object Type |
N/A | observedMode | Observed Mode |
N/A | originalState | Original State |
N/A | partnerId | Partner Id |
N/A | problemArea | Problem Area |
N/A | promQL | Prom Q L |
N/A | resourceMaintenanceWindowId | Resource Maintenance Window Id |
N/A | resourceTags.name | ResourceTags Name |
N/A | resourceTags.value | ResourceTags Value |
N/A | serviceGroups.name | ServiceGroups Name |
N/A | serviceGroups.uniqueId | ServiceGroups UniqueId |
N/A | serviceProviderId | Service Provider Id |
N/A | statusHistory.unAcknowledgedBy | Un Acknowledged By |
N/A | statusHistory.unSuppressedBy | Un Suppressed By |
N/A | tags | Tags |
N/A | team | Team |
N/A | ticketId | Ticket Id |
N/A | viewName | View Name |
N/A | serviceGroups.id | Service Groups Id |
Next Steps
Refer to the Installation documentation on how to install and configure the apps.