Bulk Acknowlegement of Alerts

[Cedric_Jackson]

Is there a script or process to bulk remove unacknowledged and open alerts? I have a system that I burned in for months and the alerts are duplicates

[Adam_Annen]

HI Cedric,

Open alerts just require you to stop the threshold.
Alerts requiring acknowledgement, you could create a custom threshold with a command destination. Pulling in the problem number and using that in the command destination and the acknowledge command should get those all acknowledged. It has been a while since I tested that approach but I believe this is how I have done it in the past.

Let me know if you get stuck on the custom threshold piece.

[ChristopherS]

To add to Adam's response there is a .CMD file in the Knowledge->Command->Comand Store that you can issue too. You can technically create a clearing condition for multiple thresholds utilizing this in an analyst or a command line script. I do not have an example handy.. but this is what it does.

Acknowledge Problem
Destination: Control Threshold
Command: Ack problem #IRField0.#IRField1 analyst "#IRField2"

Ignore
Destination: Automated Control Analyst
Command: stop problem #IRField0 . #IRField1 analyst #IRField2

If you also execute these from within an analyst there I believe some additional commands and options built into analyst syntax.

They both effectively do the same thing though for your purpose and its mostly a matter of syntax to the different destinations.

Christopher

[Cedric_Jackson]

Good Morning Christopher.

Thanks for the response. Where can I find some documentation on the items under Command Store. Right now I am looking for information on the first three which are around Acknowledging Dispatched Messages, Problem, & SNMP Traps. I ask as the Prompts in "Acknowledge Problem - Prompt Form" are not descriptive. All three prompts are labeled the same.

[Adam_Annen]

Hi Cedric,

Let me mock up a sample threshold that uses the existing acknowledge command and send it your way.

[Cedric_Jackson]

Thank you Adam

[BES-SWO]

Hi Adam, could you send me this example, please? BR Bernd