Actions

Decrease the severity

Decrease the severity to one of: Normal, Information, Low or Medium.

If the action is to decrease the severity to low then the alarm raised must have a severity of high or medium for any action to take place. If the alarm raised has a severity lower than the severity selected for this action then no action will be taken.

If the alarm requires acknowledgment and has not been acknowledged, then this action will decrease the alarm severity without acknowledgment.

Execute a Powershell script

Execute a Powershell script on the monitored server. The script is executed remotely using the username/password configured for the monitored Windows Server. For more information, see Windows Server connection details.

To use variables in your Powershell script see Alarms - Message Variables.

Execute a SQL script

Execute a SQL script on the monitored server. This action is applicable only to SQL Server connections. The script is executed under the username and password Spotlight Cloud uses to connect to the SQL Server.

To use variables in your SQL script see alarms - message variables for more information.

Run a program

Execute a command line on the Spotlight Cloud Diagnostic Server.

In the rule description, click (program). This opens the Run a Program dialog.

When filling in the command line field:

• File or path names that contain spaces should be enclosed in double quotes.
• Use variables where applicable. For more information, see alarms - message variables.
• You can echo tag values as follows.

Output to file

echo {{TAG_VALUE #tagname}} >>c:\output.txt

Output to monitor

MSG /SERVER:<computer name> * "{{TAG_VALUE #tagname}}"

The behavior of the invoked program depends on the nature of the program.

• It is recommended that you do not invoke a UI-based program in response to the alarm, as the program will run as a service on a remote host.
• If the program that runs in response to an alarm is still executing when the alarm fires again, subsequent commands to run the program are ignored until that execution finishes.
• If you attempt to stop Spotlight Cloud whilst a program or command line action is still executing, Spotlight Cloud will wait until that program or command line action has ended before stopping.

Run actions again after

Re-evaluate this rule after a specified period of time. If the conditions of this rule are still true at that time then repeat the actions. Continue to repeat these actions at this interval for as long as all conditions are true.

You define the period of time: in hours, minutes or days.

For example, if the rule is to Send an email if a CPU alarm is raised and Run actions again after 5 minutes, then an email will be sent every 5 minutes for as long as the CPU alarm is raised.

Send push notification to my mobile device

Send a push notification to mobile device(s) where Spotlight Cloud Mobile is installed with sign in from the Quest account(s) entered into the To field.

To

The Quest account name(s) to receive the push notification.

Note that Quest account names are in the form of an email address. However the push notification is not sent to the email address. The push notification is sent to mobile device(s) where Spotlight Cloud Mobile is installed with Sign in from this(these) Quest account name(s).

When multiple Quest account names are involved, separate each account name with a comma. To send a push notification to all members of a Spotlight organization, list all members of the organization in the To field.

Message

The push notification message. This can include variables. For more information, see alarms - message variables.

Test

Click Test to send a push notification to mobile device(s) where Spotlight Cloud Mobile is installed with Sign in from this(these) Quest account(s). Confirm notifications are working as expected.

Send email to

Send an email. Enter the target email address, subject line and content of the message to be sent.

You can create a default recipient list. For more information, see configure the Diagnostic Server’s mail server.

To include text specific to the alarm in the email use variables. See alarms - message variables.

Send PagerDuty incident

Send the details of this alarm to PagerDuty; PagerDuty can then be used to notify the appropriate people via SMS, email, phone calls and push notifications. Spotlight Cloud sends the following alarm details: the alarm name, connection name, the time the alarm was raised, the severity of the alarm, the alarm message and snooze status. Ensure the necessary instructions have been followed to integrate Spotlight Cloud with PagerDuty:

• Configure PagerDuty
• www.pagerduty.com/docs

Send SNMP trap

Generate an SNMP trap. The trap will be sent to the SNMP manager as configured on the page configure the SNMP trap. The SNMP trap can be viewed through third party software designed for that purpose. The trap contains the alarm name, time of the alarm, severity, Spotlight Cloud alarm message and connection name.

Stop processing further rules

No further rules will be executed. Execute this rule to completion first. For more information, see the guidelines and example cases for multiple rules.

Suppress the alarm

Return the alarm severity to normal.

If the alarm requires acknowledgment and has not been acknowledged, then following this action the alarm severity will be returned to normal without acknowledgment.

Write the alarm details to a Windows event log

Write the details of the alarm to the Windows event log on the Spotlight Cloud Diagnostic Server.

Source

Source is the name of the software that logs the event.

If you change the source name, make sure you do not change it to an existing system’s source name.

Level

Level is one of: success, error, warning, information.

Message

The message field is required; it cannot be empty. The default message is:

{{CONNECTION_NAME}} raised an alarm: {{Message}}

The message can include variables. For more information on variables, see Alarms - Message Variables.