0

0

I've been messing around with this one for a few months and wanted to share this. This code will get a list of all alerts that are closed that were created by a monitor, that are older than 1 day, and reset the monitor that created the alert. Before running this script I would suggest getting a count of what your going to be resetting , so you've got an idea how long this script might take to run.

#get an idea how many alerts are in this state

$targetdate = (get-date).AddDays(-1)

(Get-Alert -criteria 'ResolutionState = ''255'' AND IsMonitorAlert = ''True'''| Where-Object {$_.LastModified -gt $targetdate }).count

# script

# targetdate or cut off date which is the past 1 day or 24 hours
$targetdate = (get-date).AddDays(-1)
# get closed alerts created by a monitor whose lastmodified is greater than the targetdate
$alerts = Get-Alert -criteria 'ResolutionState = ''255'' AND IsMonitorAlert = ''True'''| Where-Object {$_.LastModified -gt $targetdate }

ForEach($alert in $alerts) {
$mon = get-monitor -criteria "Id = '$($alert.MonitoringRuleId)'"
$mc = get-monitoringClass -id $alert.MonitoringClassId
$mc | get-monitoringObject -criteria "Id = '$($alert.MonitoringObjectId)'" | foreach {$_.ResetMonitoringState($mon)}
}