Administration Guide › Action Alerts › Example: Create an Alert for a Self-Monitoring Event

Example: Create an Alert for a Self-Monitoring Event

The predefined query for all self-monitoring events is System All Events Detail. You can copy this query and use it as the basis for defining an alert based on a specific self-monitoring event.

For example, a self-monitoring event is generated when a module requiring you to restart the operating system is downloaded in a subscription update. This self-monitoring event is generated only once. You may want to create an alert as a reminder to restart the operating system, in the event this self-monitoring event is overlooked.

Use the following example as a guide.

1. Create a query based on the query for all self-monitoring events as follows:
   1. Click the Queries and Report tab and the Queries subtab.
   2. Select System All Events Detail in the Query List, expand the Options drop-down list, and select Copy.

   

   The query design wizard appears with the Details step selected.

   1. Replace the name of the copied query with a new name, for example, OS Restart Alert. Optionally, add a short name and new description.
   2. Select Action Alerts from Available Tags and move it to Selected Tags.
2. Create query filters as follows:
   1. Advance to the Query Filters step. Click the Advanced Filters tab.
   2. Click New Event Filter. Select event_logname for Column, leave Equal to for Operator, and select CALM for value.
   3. Click New Event Filter. Select receiver_name for Column, leave Equal to for Operator, and enter Subscription.
   4. Click New Event Filter. Select result_string for Column, leave Equal to for Operator, and enter the message, OS Updates are installed on this host...Please restart the machine for these updates to have effect !!!

      

3. Click Save and Close.

   The new alert appears in the Query Lists under the User folder.

   

4. Schedule an action alert for the user-defined query as follows:
   1. Select the query under the User folder.
   2. Click the Edit button in the right pane to display the OS Restart Alert drop-down list, and select Schedule Action Alert.

   

   The Schedule Action Alerts wizard appears with the Alert Selection step displayed. OS Restart Alert is preselected under Selected Queries.

   1. Enter a job name. For example, enter Restart Operating System Alert.
5. Add an event filter as follows:
   1. Click Alert Filters.
   2. Click New Event Filter.
   3. Select receiver_hostname for Column, leave Equal to for Operator, enter the name of the local CA Enterprise Log Manager for Value.

   

6. Specify the frequency with which to generate the alert when a restart is needed as follows:
   1. Click Schedule Jobs
   2. Set the recurrence interval for the alert generation frequency. For example, select 1 and Days for once a day.
7. Provide your email information as follows to be alerted by email.
   1. Click the Destination step.
   2. Click Enable e-mail notification and provide your email address and any of the other optional information desired.
8. Restrict the notification to when the current server needs to be restarted as follows:
   1. Click Server Selection
   2. Select No for Federated Query.
9. Click Save and Close to save the Alert Job.

   The Action Alert Job appears on the Alert Management tab, Alert Scheduling subtab.