Alerts no triggering

[dbutch1976]

Hello,

I have a brand new out of the box install of VROPs 8.1 and I have not done any customization with the alerts. One of the out of the box alerts is:

Virtual machine is running on snapshots for more than 2 days

I have several snapshots older than that however they are not triggering. I think there is something simple I'm missing which needs to be done before alerts start coming through but I'm not finding it.

Any help?

[KabirAli82]

It could be due to the fact that the snapshot was already there before you deployed vROps. Do you see any other alerts?

[sxnxr]

Is the alert enabled in the policy that the VM is using?

[dbutch1976]

This is an out of the box install, I am seeing host alerts, but I don't seem to be seeing VM alerts.

[dbutch1976]

I believe you could be on to something, where do I check which policy the VM is using? Sorry if this is a basic question, this is an out of the box install.

[KabirAli82]

While I think out of the box the snapshot alert should be enabled, best check it anyways:

https://docs.vmware.com/en/vRealize-Operations-Manager/8.1/com.vmware.vcom.core.doc/GUID-D847F3B6-75...

[dbutch1976]

I think this may be the answer, under alert definitions I see that notifications have not been enabled, is that why they're not triggering?

Here are my settings, as you can see I have a snapshot which is weeks old now, yet only host alerts in my alerts:

[sxnxr]

Notifications is for sending the alert outside of vrops, SNMP, Email, webhook etc. They will only get sent if the alert triggers in vrops first.

If the VM has a snapshot greater than 1GB and older than 1 day then it should trigger unless it is not enabled in the policy

Search the VM in vrops and click it (top right magnifier glass to open the search)

When you click the VM it will show you below the search the policy the VM is assigned to

Click the policy it should take you to it or show a menu that has view policy depending on your version. Edit the policy and again depending on your version search for virtual machine and then snapshot and measure it is enabled

in my case the alert is not enabled so i wont get the alert even tho my two symptoms are

A rough flow is symptom deff needs to trigger then the alert will trigger depending on what symptom triggered that has been associated to the alert deff and if it is using and AND or OR in the alert deff for the symptoms. then the notification will send it out of vrops based on a time threshold that the alert is active for (min 5 mins)

Also if this is an outoff the box install why 8.1 and not 8.6

[dbutch1976 · Accepted solution]

Thanks all for your help!

After re-checking the alert definition I saw that the default symptom is set to met BOTH of the symptoms, the alert will only trigger if:

the snapshot space is GB > 1
and
the snapshot age is > 2

I simply had to change the symptom to OR instead of AND and the alerts started coming in. 

Thanks all for the suggestions, probably wouldn't have found it otherwise.