0

0

Recently in a forum thread, we had another discussion on the now age old problem: Creating an OpsMgr Top Alerts Reports based on repeat count tell you which rules are noisy is easy, but what about the top monitor-generated alerts?

In the past, we would use T-SQL to get this, as shown here

SELECT  [AlertName], [Severity] ,[RaisedDateTime] ,[SiteName] ,[RepeatCount] ,[DBCreatedDateTime] 
FROM [OperationsManagerDW].[Alert].[vAlert]
WHERE ( RaisedDateTime BETWEEN DATEADD(HH, DATEDIFF(HH, GETDATE(), getutcdate()), @startdate) AND DATEADD(HH, DATEDIFF(HH, GETDATE(), getutcdate()), @en

I was pleased to see that Tenchuu (Andreas Z) has yet again brought a new answer to an old problem with his Top Alerts Reports, Powershell Edition. Great work Tenchuu!

Top Alerts Report, Powershell Edition

Instructions for Use: Save in notepad with a .ps1 extension and run from OpsMgr Command Shell Prompt

#Create Datatable

$AlertTable = New-Object System.Data.DataTable "AlertTable"

$AlertTable.Columns.Add((New-Object System.Data.DataColumn ID,([string])))

$AlertTable.Columns.Add((New-Object System.Data.DataColumn Name,([string])))

$AlertTable.Columns.Add((New-Object System.Data.DataColumn AlertCount,([int])))

$AlertTable.Columns.Add((New-Object System.Data.DataColumn IsMonitorAlert,([string])))

foreach ($Alert in (Get-Alert))

{    

    #Check if Alert exists already.

    $AlertExists = $false  

    foreach ($Row in $AlertTable.Rows)

    {

        if ($Row.ID -eq $Alert.MonitoringRuleId.ToString())

        {    

            $AlertExists = $true

            #In case it does, we just merge the Repeatcount

            $Row.AlertCount = $Row.AlertCount + ($Alert.RepeatCount + 1)    

        }

    } 

    if ($AlertExists)

    {

    }

    else

    {

        #If the Alert doesn't exist, we add it to the DataTable.

        $NewRow = $AlertTable.NewRow()

        $NewRow.ID = $Alert.MonitoringRuleId.ToString()

        $NewRow.Name = $Alert.Name

        $NewRow.AlertCount = ($Alert.RepeatCount + 1)

        $NewRow.IsMonitorAlert = $Alert.IsMonitorAlert

        $AlertTable.Rows.Add($NewRow)

    }

}

$AlertTable = ($AlertTable | sort AlertCount -Descending)

$AlertTable | format-table -AutoSize | select-object -first 10

RSS | TWITTER