Security & Management

Adding custom information to alert descriptions and notifications

There are the great post on Kevin Holman's Blog:

Custom Properties for Alert

Descriptions and Notifications:

 

Alert Descriptions:

Event info: (Updated by Daniel)

1.            Publisher Name                   - $Data/PublisherName$

2.            Event Number                      - $Data/EventNumber$

3.            User Name                          - $Data/UseName$

4.            Event Description                 - $Data/EventDescription$

Service Monitor:

Service Name                           - $Data/Context/Property[@Name='Name']$

Service Dependencies               - $Data/Context/Property[@Name='Dependencies']$

Service Binary Path                  - $Data/Context/Property[@Name='BinaryPathName']$

Service Display Name               - $Data/Context/Property[@Name='DisplayName']$

Service Description                   - $Data/Context/Property[@Name='Description']$

Performance:

Counter Value                      - $Data/Context/Value$

Performance Object Name    - $Data/Context/ObjectName$

Performance Counter Name  - $Data/Context/CounterName$

Performance Instance Name - $Data/Context/InstanceName$

 

Notifications:

 

$Data/Context/DataItem/AlertId$                                         The AlertID GUID

$Data/Context/DataItem/AlertName$                                   The Alert Name

$Data/Context/DataItem/Category$                                    The Alert category PerformanceHealth,PerformanceCollection,Operations,EventCollection,StateCollection,SoftwareAndUpdates,Alert,System,Custom,AvailabilityHealth,ConfigurationHealth,SecurityHealth,Discovery,NotificationCategory,Maintenance

$Data/Context/DataItem/CreatedByMonitor$                      True/False

$Data/Context/DataItem/Custom1$                                     CustomField1

$Data/Context/DataItem/Custom2$                                    CustomField2

$Data/Context/DataItem/Custom3$                                    CustomField3

$Data/Context/DataItem/Custom4$                                    CustomField4

$Data/Context/DataItem/Custom5$                                    CustomField5

$Data/Context/DataItem/Custom6$                                     CustomField6

$Data/Context/DataItem/Custom7$                                     CustomField7

$Data/Context/DataItem/Custom8$                                     CustomField8

$Data/Context/DataItem/Custom9$                                     CustomField9

$Data/Context/DataItem/Custom10$                                  CustomField10

$Data/Context/DataItem/DataItemCreateTime$                          UTC Date/Time of Dataitem created

$Data/Context/DataItem/DataItemCreateTimeLocal$                  LocalTime Date/Time of Dataitem created

$Data/Context/DataItem/LastModified$                                     UTC Date/Time DataItem was modified

$Data/Context/DataItem/LastModifiedLocal$                               Local Date/Time DataItem was modified

$Data/Context/DataItem/ManagedEntity$                                  ManagedEntity GUID

$Data/Context/DataItem/ManagedEntityDisplayName$                ManagedEntity Display name

$Data/Context/DataItem/ManagedEntityFullName$                     ManagedEntity Full name

$Data/Context/DataItem/ManagedEntityPath$                            Managed Entity Path

$Data/Context/DataItem/Priority$                                               The Alert Priority Number (High=1,Medium=2,Low=3)

$Data/Context/DataItem/Owner$                                                 The Alert Owner

$Data/Context/DataItem/RepeatCount$                                       The Alert Repeat Count

$Data/Context/DataItem/ResolutionState$                                   Resolution state ID (0=New, 255= Closed)

$Data/Context/DataItem/ResolutionStateLastModified$                        UTC Date/Time ResolutionState was last modified

$Data/Context/DataItem/ResolutionStateLastModifiedLocal$                Local Date/Time ResolutionState was last modified

$Data/Context/DataItem/ResolutionStateName$                                   The Resolution State Name (New, Closed)

$Data/Context/DataItem/ResolvedBy$                                   Person resolving the alert

$Data/Context/DataItem/Severity$                                       The Alert Severity ID

$Data/Context/DataItem/TicketId$                                        The TicketID

$Data/Context/DataItem/TimeAdded$                                  UTC Time Added

$Data/Context/DataItem/TimeAddedLocal$                           Local Time Added

$Data/Context/DataItem/TimeRaised$                                  UTC Time Raised

$Data/Context/DataItem/TimeRaisedLocal$                            Local Time Raised

$Data/Context/DataItem/TimeResolved$                                UTC Date/Time the Alert was resolved

$Data/Context/DataItem/WorkflowId$                                    The Workflow ID (GUID)

$Target/Property[Type="Notification!Microsoft.SystemCenter.AlertNotificationSubscriptionServer"/WebConsoleUrl$                                                  The Web Console URL

Target/Property[Type="Notification!Microsoft.SystemCenter.AlertNotificationSubscriptionServer"/PrincipalName$                                                    

The principalname of the management server

$Data/Recipients/To/Address/Address$                                                                                                        

The name of the recipient (e.g. the Email alias to which the notification is addressed)

Posted: Dec 13 2007, 01:39 AM by daniel | with 2 comment(s)
Filed under:

Comments

Priyanka Kadam said:

Hi,

Can Anyone tell me how do i get all this alert information into a text file using command shell or powershell or any  other scripts....

Thank You in Advance

# January 21, 2008 1:11 AM

daniel said:

One of my customer is using "Command Line" Response action of the alert to run a VBS to generate the alert description and details into a txt file.

# February 24, 2008 8:12 PM
Leave a Comment

(required) 

(required) 

(optional)

(required)