Page 1 of 2

Wrong Alerts Report

Posted: Fri Aug 08, 2014 5:06 am
by rajasegar
XI 2014R1.2 Ent Ed
08-08-2014 05-46-04 PM.png
This Report is giving wrong figures for Total Alerts and Latest Alert.

Please see attached state history for SST_KUL_CDM_S798_OMRON
Where did this report get total alerts as 14 and latest alert as 2014-07-03 18:24:59

Please check on this.
statehistory.zip

Re: Wrong Alerts Report

Posted: Fri Aug 08, 2014 10:57 am
by lmiltchev
The latest alert for "SST_KUL_CDM_S798_OMRON" was on 07/03, according to the "Top Alert Producers". The "State History" reports starts on 7/10 and ends on 7/31.

I wonder if you entered "07/10/2014" instead of "07/01/2014" in the "From" filed when you were setting up your custom time period in the web UI...

Re: Wrong Alerts Report

Posted: Sun Aug 10, 2014 6:33 pm
by rajasegar
lmiltchev wrote:The latest alert for "SST_KUL_CDM_S798_OMRON" was on 07/03, according to the "Top Alert Producers". The "State History" reports starts on 7/10 and ends on 7/31.

I wonder if you entered "07/10/2014" instead of "07/01/2014" in the "From" filed when you were setting up your custom time period in the web UI...
The latest alert for SST_KUL_CDM_S798_OMRON was on 31/07/2014. It is shown on the details however the main report is showing wrong information.

No I did not select any date, I clicked the link from the report.
I checked again and the report stopped at 10/07. This looks like another bug to me.

Re: Wrong Alerts Report

Posted: Mon Aug 11, 2014 11:24 am
by scottwilkerson
When you click on the number of alerts and the item in question is a host, the state history that is displayed will be for all alerts on the host.

One possible explanation for what you are seeing is if you have Admin -> Performance Settings -> Database Tab -> "Max State History Age:" set to something low like 20 days, there would not be enough retained information to populate the report.

Re: Wrong Alerts Report

Posted: Mon Aug 11, 2014 6:05 pm
by rajasegar
scottwilkerson wrote:When you click on the number of alerts and the item in question is a host, the state history that is displayed will be for all alerts on the host.
No, the statehistory contains both the host and services alerts.
I just checked again
12-08-2014 07-03-07 AM.png
12-08-2014 07-04-17 AM.png
BTW, it the details, the State type keeps on auto selecting Hard even though I have selected Both from the initial screen or even in the state history screen.
scottwilkerson wrote: One possible explanation for what you are seeing is if you have Admin -> Performance Settings -> Database Tab -> "Max State History Age:" set to something low like 20 days, there would not be enough retained information to populate the report.
Must be some other reason. It is set to 730.
12-08-2014 07-07-19 AM.png

Re: Wrong Alerts Report

Posted: Tue Aug 12, 2014 4:13 pm
by abrist
I just had a client report an issue where: selecting a hostgroup from the dropdown will no longer report alerts from services. Could this be related to the alert issues you are experiencing?

Re: Wrong Alerts Report

Posted: Tue Aug 12, 2014 6:03 pm
by rajasegar
abrist wrote:I just had a client report an issue where: selecting a hostgroup from the dropdown will no longer report alerts from services. Could this be related to the alert issues you are experiencing?
The services get reported fine, the listing of alerts is fine also.
Just the main report page is giving wrong information. See my initial post.

Re: Wrong Alerts Report

Posted: Wed Aug 13, 2014 4:11 pm
by tmcdonald
Maybe I'm just a bit confused here, but the csv you posted is for SST_SGR_CDM_S475_OMRON but you're talking about SST_KUL_CDM_S798_OMRON. Are you sure we're looking in the right place?

Re: Wrong Alerts Report

Posted: Wed Aug 13, 2014 10:14 pm
by rajasegar
tmcdonald wrote:Maybe I'm just a bit confused here, but the csv you posted is for SST_SGR_CDM_S475_OMRON but you're talking about SST_KUL_CDM_S798_OMRON. Are you sure we're looking in the right place?
Ok. Here is another example
Look at the latest alert date
14-08-2014 11-04-23 AM.png
Look at the detail, which shows another latest alert date, even if this is referring to host error the date is still wrong.
Refer to the attachment to alerts list.
14-08-2014 11-05-06 AM.png
statehistory.zip

Re: Wrong Alerts Report

Posted: Thu Aug 14, 2014 5:17 pm
by abrist
Just to further troubleshoot as I am sure there are some issues with this component:
Is the reported "Latest Alert" time the same as the latest alert for the host itself (not any of the services)?