Alerts Central Display

Analysts can contain one or more Analyst Rules and Thresholds can contain one or more Threshold Conditions that can detect a range of problems and log these problems to the PrognosisAutomationProblemSummary (PROBSUM) Record. The data from this record is displayed by the Alerts Central Display thereby providing an overview of all detected problems.

The Alerts Display provides operators with access to view and action any alerts that may be triggered by the set of running Analysts and Thresholds. Depending upon how the Analyst or Threshold has been configured, the Display can highlight the type of attention required and allow operators to acknowledge and/or approve pre-configured command execution.

Alert Displays are provided for both multiple and single servers.

All Nodes

The Alerts Central - All Nodes Display provides operators with the ability to view the severity and status of all alerts triggered by Analysts and Thresholds on all monitored nodes. It provides a single location for problem management and, depending on how the problems are configured, can highlight the type of attention required and allow operators to acknowledge and/or approve command execution.

To access Alerts Central click on the Alerts link at the top of the Servers Display.

The Alerts Central - All Nodes Display shows alerts generated from Analysts and Thresholds that have detected problems across one or more monitored nodes. The 'Alerts by Severity' graph in the top left corner of the Display provides operators with the ratio of problems currently not closed. Operators can drill-down on a severity level in the legend to view all problems currently not closed, that is, in the OPEN, OPENACK and CLOSEACK states, for a given severity level.

The table in the top right of the window presents a list of the 50 latest alerts and is ordered by the problem status. This provides an overview of the events that have occurred recently. Any problems that do not fall within the top 50 most recent alerts do not appear in this table but can be found by clicking on the 'Open Alerts' or 'Closed Alerts' links at the top of the window. The start of each row is color-coded to indicate the severity of the problem. The last column in the table indicates whether the problems require acknowledgement or not. Those requiring acknowledgement will have a link visible allowing the operator to acknowledge the problem by simply clicking on it. A drill-down is available on the Status column linking to a Display filtering all the problems for a given status.

The second table in the bottom right corner of the Alerts Central Display presents 50 of the latest problems requiring user interaction. This covers problems in the OPENACK and CLOSEACK states as well as problems that require operator approval to execute a command. As in the previously mentioned table, the first column is color-coded to represent the severity of the problem. The Status column indicates what type of action is required of the operator whilst the last column provides a description of the problem. Drill-downs are available on the problem number and the status both linking to the Details of a Problem Display, which provides all the details of a given problem.

The third table on the bottom left provides a breakdown of all the problems by the source node, severity and status. The drill-down available on the source node will open the Alerts Central - Single Node Display, which lists the problems only pertaining to the selected node.

Display Data

Each row in the Alerts Central Display provides useful information with problems listed in order of the time that each Alert was opened. The Problem column shows a unique number assigned each reported problem and the Status column shows the current situation of the problem, which could be one of the following:

OPEN 

The problem still being resolved.

CLOSED

Problem resolved.

OPENACK

Alert has been raised but has not yet been acknowledged.

CLOSEACK

Alert has been raised and the OFF event has been received but it has not been acknowledged.

The Text column provides a brief description of the problem.

In addition, the Alerts Central-All Nodes Display includes a Source column that shows the node that the alert originated from.

A new problem will not be created if an instance of the same problem is in the CLOSEACK state.

For example, a Threshold exists that will trigger when the CPU is greater than 80% busy and requires acknowledgement. When the CPU reaches 85% busy and the Threshold triggers, it creates a problem requiring acknowledgement. This problem is then placed into the OPENACK state as the Threshold is still triggered and the problem has not yet been acknowledged. If the CPU busy % then drops below the Threshold value, causing the problem to change to the CLOSEACK state, the problem will stay in this state until an operator acknowledges it. Even if the CPU busy % happens to rise above the Threshold value again, a new problem will not be created until the existing problem has been acknowledged.

Status & Severity

Each alert in Alerts Central is color-coded based on status and severity. This allows for easy recognition of the severity of the problem and whether or not it has been resolved. The colors used include:

Severity:


Red

Critical


Orange

Error


Yellow

Warning


Blue

Information

Status:


Dark Blue

OPEN


Mid Blue

OPENACK


Light Blue

CLOSEACK

Drill-downs

Problems can be monitored at several different levels. Drilling-down on a specific problem allows operators to view more detailed information. Some Problems may have been set up to execute a command when a condition is met. Details of the command, and whether it successfully resolved the problem or not, can be viewed from the Problem Details Display.

At any time you may drill-down on one of several fields for each alert:

Problem Number

This opens the Problem Details Display that shows the output of the Analyst Rule for the specific problem. From here the problem can be viewed in more detail, including the Analyst it came from, the rule, and the problem details text logged by the Analyst.

Status

Clicking on a specific Status type will open a Display showing a list of all alerts that have that same status.

Source (Alerts by Node & Severity window)

Opens the Display for the specific node selected.

There are four Links at the top of the Alerts Central - All Nodes Display.

Open/Ack Alerts

Opens the Open Alerts-All Nodes Display. This provides a list of all Alerts that are currently open.

Suppressed Open Alerts 

Opens the Suppressed Open Alerts Display. This provides a list of all Alerts that are currently open and suppressed.

Closed Alerts

Opens the Closed Alerts - All Nodes Display. This provides a list of all Alerts that have been closed in the past 24 hours.

Suppressed Closed Alerts 

Opens the Suppressed Closed Alerts Display. This provides a list of all Alerts that are currently closed and suppressed.

Alerts Requiring User Interaction

Opens a list of all Alerts that are awaiting acknowledgement.

FAQ

This Link opens a 'Frequently Asked Questions' window that provides some helpful tips for using the Alerts Central Display.

Single Node

The Alerts Central - Single Node Display is similar to the Alerts Central -All Nodes Display but it provides data only for a selected server.

This Display can be accessed from either the platform Overview Displays (Windows Server Overview DisplayUNIX Server Overview Display or NonStop Server Overview Display) by clicking on the Alerts link in the 'Server Navigation' window.

This Display contains a number of extra links, the Analysts and Thresholds link opens the Analysts and Thresholds Display, which provides the operator with a list of the Analysts and Thresholds that are available as well as their status. There are also links to the Dispatch Central and Command History Displays, which provide details of the messages that have been dispatched and the commands that have been executed.

Provide feedback on this article