Video Screencast Help

Resolving Alerts

Created: 06 Sep 2013 | 1 comment

I have some servers that had errors in the monitoring console.  I have powered off the server, and now when I "Resolve" the alert, it comes right back into the console.  This is the log entry from the NS.

How can I clear the alert if the agent is powerd off?

Log File Name: C:\ProgramData\Symantec\SMP\Logs\a.log
Priority: 1
Help and Support:
Date: 9/6/2013 10:37:10 AM
Tick Count: 4624337
Host Name: HQ-ALTIRIS01
Process: w3wp (3336)
Thread ID: 27
Module: w3wp.exe
Source: Monitor
Description: Thread:0027 AgentService.AcknowledgeSingleAgent: (SAINTMAP01 (6a5e29c1-8098-45b1-b482-85b455806929),AcknowledgeAlerts): Monitor agent '' has disconnected w/o providing a response.
 

Log File Name: C:\ProgramData\Symantec\SMP\Logs\a.log
Priority: 1
Help and Support:
Date: 9/6/2013 10:37:10 AM
Tick Count: 4624337
Host Name: HQ-ALTIRIS01
Process: w3wp (3336)
Thread ID: 27
Module: w3wp.exe
Source: Monitor
Description: Thread:0027 AgentService.AcknowledgeSingleAgent: (SAINTMAP01 (6a5e29c1-8098-45b1-b482-85b455806929),AcknowledgeAlerts): Monitor agent '' has disconnected w/o providing a response.
 

Operating Systems:

Comments 1 CommentJump to latest comment

Igor Perevozchikov's picture

Hi!

Summary about how works alert resolving from Event Console for monitored agent-based servers

-- If user tries to manually resolve alert, then it will establish connection to monitor agent using 1011 port but if monitor agent service is not running or 1011 port is closed, then it will be impossible to resolve alert data on client side therefore alert will remains in Event Console due same error in NS log

Description: Thread:0027 AgentService.AcknowledgeSingleAgent: (SAINTMAP01 (6a5e29c1-8098-45b1-b482-85b455806929),AcknowledgeAlerts): Monitor agent '' has disconnected w/o providing a response.

Question:

How can I clear the alert if the agent is powerd off?

Answer:

User can use "Event Console Purging Maintenance" settings

Note!

First check the date of alert which will be purged (and do not forget that it will purge another alerts as well which are matched to specified "Days old")

Uncheck "Do not purge unresolved alerts" and execute purging task.

Impact:

Using "Do not purge unresolved alerts" option will purge all alerts from Event Console even if it will be impossible to establish connection to monitored servers and purge alert data on client side as well.

EventConsolePurging.jpg

Hope it will resolve your problem.

Thanks,

IP.

iddqd idkfa idclip