-
Title
Total Alarms counter (acknowledged, cleared, current, historical) and Purge -
Description
How to get a count of the total number of Alarms stored in my Foglight database (acknowledged, cleared, current, historical, etc)
Also how to get alarms counter break down by source type(Rule Name)
How to Purge alarms?
Investigate High Alarms Counter
-
Resolution
Total alarms counter
Navigate to Script Editor (Administration > Tooling > Script Console > Scripts tab):Click the Add button
Paste in the following script in the Script box and click Run. Note that it may take some time to complete depending on the alarm count.
import groovy.sql.Sql;
import com.quest.nitro.service.util.JDBCHelper;
msg = new StringBuilder();
try{
sql = new Sql(JDBCHelper.getDataSource());
msg.append("Alarms Table Count: \n")
msg.append(sql.rows("select count(*) from alarm_alarm"));
}catch (Exception ex){
msg.append("Exception"+ex);
}
return msg.toString();Please check the attached script "Alarms_counter_by_source.groovy" which shows the alarms counter by source type if you want to see the break down.
If there are greated than 5,000 alarms you should consider:
- Am I addressing the root causes of the alarms for repetitive issues?
- I have a very large number of alarms - could this be affecting performance of the dashboards that query alarms?Alarms counter break down by source type(Rule Name)
Also, please run this script from Script Console in case you want to see the break down:
import groovy.sql.Sql;import com.quest.nitro.service.util.JDBCHelper;msg = new StringBuilder();sql = new Sql(JDBCHelper.getDataSource());msg.append(sql.rows("select source_name, count(*) as ruleCount from alarm_alarm group by source_name order by ruleCount DESC"))return msg.toString()Note: Above break down can also be seen from (Administration > Alarms> Alarms Analysis dashboard.
Also you can run Alarms Analysis Report to be updated on the regular basis regarding alarms behavior.How to Purge Alarms and Investigate High Alarms counter
- Clear Alarms older than X days SOL74729
- To change the alarm purge time, please do the following:
Search under Administration > Rules & Notifications > Manage Registry ValuesName: AlarmPurgeAge
Change the value for a lower number.
- How to Purge Alarms? How to schedule purging of Alarms? SOL40651
- How to Purge Alarms from the GUI? How to Clear Alarms from command line? Do amount of Alarms cause my Alarms dashboard to slow down causing a slow UI? SOL40652
Regarding Orphan alarms
The graph "All System Alarms + Changes" displays more alarms than the alarm table SOL66576
Important Note: Clearing an alarm, clears the alarm from the current Alarm dashboard, but purging is what actually deletes the alarm from the Foglight Database repository. -
Additional Information
From one SupportBundle on DiagnosticSnapshot file you can search for alarm_alarm to also get the alarm counter, this is one example:
| Table Name | Number of Rows | Data Length | Index Length+--------------------------------+---------------------+-------------------+-----------------+| alarm_alarm | 25,032 | 59,219,968 | 15,597,568Other Solutions:
- The following solution clears the alarms but does not purge:
Is there is a way to clear alarms specific to only certain rules? SOL73003
- Clear Specific Alarm as a rule, this is one example with Log Filter alarms(It does not purge, it only clears):
LogFilter alerts will not repeat if an existing alarm has not been cleared. SOL75131