Wrong Alerts Report

[rajasegar]

XI 2014R1.2 Ent Ed

08-08-2014 05-46-04 PM.png

This Report is giving wrong figures for Total Alerts and Latest Alert.

Please see attached state history for SST_KUL_CDM_S798_OMRON
Where did this report get total alerts as 14 and latest alert as 2014-07-03 18:24:59

Please check on this.

statehistory.zip

[lmiltchev]

The latest alert for "SST_KUL_CDM_S798_OMRON" was on 07/03, according to the "Top Alert Producers". The "State History" reports starts on 7/10 and ends on 7/31.

I wonder if you entered "07/10/2014" instead of "07/01/2014" in the "From" filed when you were setting up your custom time period in the web UI...

[rajasegar]

The latest alert for "SST_KUL_CDM_S798_OMRON" was on 07/03, according to the "Top Alert Producers". The "State History" reports starts on 7/10 and ends on 7/31.

I wonder if you entered "07/10/2014" instead of "07/01/2014" in the "From" filed when you were setting up your custom time period in the web UI...

The latest alert for SST_KUL_CDM_S798_OMRON was on 31/07/2014. It is shown on the details however the main report is showing wrong information.

No I did not select any date, I clicked the link from the report.
I checked again and the report stopped at 10/07. This looks like another bug to me.

[scottwilkerson]

When you click on the number of alerts and the item in question is a host, the state history that is displayed will be for all alerts on the host.

One possible explanation for what you are seeing is if you have Admin -> Performance Settings -> Database Tab -> "Max State History Age:" set to something low like 20 days, there would not be enough retained information to populate the report.

[rajasegar]

When you click on the number of alerts and the item in question is a host, the state history that is displayed will be for all alerts on the host.

No, the statehistory contains both the host and services alerts.
I just checked again

12-08-2014 07-03-07 AM.png

12-08-2014 07-04-17 AM.png

BTW, it the details, the State type keeps on auto selecting Hard even though I have selected Both from the initial screen or even in the state history screen.

One possible explanation for what you are seeing is if you have Admin -> Performance Settings -> Database Tab -> "Max State History Age:" set to something low like 20 days, there would not be enough retained information to populate the report.

Must be some other reason. It is set to 730.

12-08-2014 07-07-19 AM.png

[abrist]

I just had a client report an issue where: selecting a hostgroup from the dropdown will no longer report alerts from services. Could this be related to the alert issues you are experiencing?

[rajasegar]

I just had a client report an issue where: selecting a hostgroup from the dropdown will no longer report alerts from services. Could this be related to the alert issues you are experiencing?

The services get reported fine, the listing of alerts is fine also.
Just the main report page is giving wrong information. See my initial post.

[tmcdonald]

Maybe I'm just a bit confused here, but the csv you posted is for SST_SGR_CDM_S475_OMRON but you're talking about SST_KUL_CDM_S798_OMRON. Are you sure we're looking in the right place?

[rajasegar]

Maybe I'm just a bit confused here, but the csv you posted is for SST_SGR_CDM_S475_OMRON but you're talking about SST_KUL_CDM_S798_OMRON. Are you sure we're looking in the right place?

Ok. Here is another example
Look at the latest alert date

14-08-2014 11-04-23 AM.png

Look at the detail, which shows another latest alert date, even if this is referring to host error the date is still wrong.
Refer to the attachment to alerts list.

14-08-2014 11-05-06 AM.png

statehistory.zip

[abrist]

Just to further troubleshoot as I am sure there are some issues with this component:
Is the reported "Latest Alert" time the same as the latest alert for the host itself (not any of the services)?