PDF

Alerting Actions and Escalation

Each alert can have its own alert escalation script. This means that NetCrunch executes actions if the alert condition persists or can execute actions when the alert is closed.

Actions

As a response to an event, NetCrunch can execute a sequence of actions. Actions can also be executed when the alert ends (on close). NetCrunch contains various actions, including Notifications, Logging, Control Actions, and Remote Scripts.

Notifications are very flexible and can be controlled by user-profiles and groups. Additionally, they can be combined with a node group (atlas view) membership, so it's possible to send notifications to different groups based on network node location or other parameters.

Predefined Actions

  • Basic Actions: Play Sound, Display Desktop Notification WIndow, Add Traceroute to Alert Message, Add Network Services Status to Alert Message, Notify user or group, Email, SMS via Email, SMS via GSM
  • Computer Control Actions: Run Windows Program, Run Windows script, Run SSH script, Restart Computer, ShutDown Computer, Set SNMP Variable, Terminate Windows Process, Control, Start, Stop, Pause Window Service, Wake on LAN
  • NetCrunch Control Actions: Change Node Monitoring Time, Modify Node Issue List, Modify Node Custom Field, Set Issue, Clear Issue
  • Local Logging Actions: Write to File, Write to Windows Event Log, Write to Unique File
  • Remote Logging Actions: Send SNMP Trap, Send Syslog Message, Trigger Webhook
  • Linux Scripts: Shutdown Linux Machine, Reboot Linux Machine, Restart SNMP Daemon, Mount CD-ROM, Dismount CD-ROM
  • Windows Scripts: Start SNMP Service, Stop SNMP Service
  • Integrations: Send messages to slack or other services. Use SMS gateways or open tickets in service desk applications (like Zendesk, ConnectWise, and more). See: Alert Integrations.

See also Alerting Actions

Action Escalation & Conditional Execution

Actions can be executed immediately or with a delay (if the alert is not finished), and the last action can be repeated. Additionally, you can specify actions to be executed automatically when an alert is closed.

For example, you can decide to send a notification to some person and then, after some time, execute a server restart operation.

The script above executes only notifications for critical alerts and restarts the node causing this event to be a Windows Server node.

actionsalertingescalation