ALERT! The community will be read-only starting on April 19, 8am Pacific as the migration begins. Read more for important details.
ALERT! The community will be read-only starting on April 19, 8am Pacific as the migration begins.Read more for important details.
Absent Member.
Absent Member.
1236 views

Custom Notification not sent

Hello everyone!!

I have a big problem!

I want to make a velocity template for my colleagues as an example.

First I created a new velocity template with this content:

Name: $introspector.getDisplayValue($event, "name")

Target: $introspector.getDisplayValue(4event, "TargetAdress")

In the next step I edited the "Email.vm":

#if( $introspector.getDisplayValue($event, "generatorname") =="[NAME_OF_RULE]")

#parse ("NAME_OF_TEMPLATE.vm")

#else

#parse("Informative.vm")

#end

But when the Rule is firing I get an Event in the Console named "Notification Undeliverable".

In the eventMassage stands "[EVENTNAME]Could not deliver notification (No valid destinations in any escalation level)"

When I set the "Email.vm" to default the message is sent without any problems.

The version of the Manager is 5.0.1.6572.0.

I hope someone can help me!

Labels (1)
Tags (3)
0 Likes
10 Replies
Absent Member.
Absent Member.

Hi Tobias

Have you set up escalation levels here?

In the ESM console you would need to go to Notifications and create an escalation level here, with a level (in my case Level 1).

Once you have done this you can add an e-mail address to the level and any other notification path that you want.

You should then be able to attach this to the rule you want to fire

Hope that helps and make sense

0 Likes
Absent Member.
Absent Member.

I already created an escalation level

My destination path is All Destinations\Analysts\Level 1\[MY DESTINATION]

That's my problem.

The eventmessage tells that there's no valid destination in an escalation level but the rule and the notification are working fine when I only use the informative.vm.

0 Likes
Fleet Admiral Fleet Admiral
Fleet Admiral

Hello Tobias,

I know it's a stupid question:

Destination Type: E-mail
E-mail Address: is a valid email address

Right?

Volker

0 Likes
Absent Member.
Absent Member.

Sure!

When i use the email.vm by default I get notifications!

0 Likes
Fleet Admiral Fleet Admiral
Fleet Admiral

Hi Tobias,

did you copy the email.vm and modified it?

What I saw:

Name: $introspector.getDisplayValue($event, "name")

Target: $introspector.getDisplayValue(4event, "TargetAdress")

Is it 4 or a $?

Volker

0 Likes
Absent Member.
Absent Member.

oh, I didn't see it but it's only a mistake in this thread the template contains a $.

And I also configured the email.vm a little bit:

#set($generator = $introspector.getDisplayValue($event, "generatorname"))

#if ($generator == "[NAME OF THE RULE]")

#parse ("[TEMPLATE])

#else

#parse("Informative.vm")

#end

Could it be possible that I get this Event because the destination is deactivated because of over 100 notifications?

But anyway there would be another problem:

When I don't get this Event (Notification undeliverable) I also get no notifications. After a time I only get the information that this destination will be deactivated because there were too many emails sent.

0 Likes
Fleet Admiral Fleet Admiral
Fleet Admiral

Maybe worth to check KB 3374

Volker

0 Likes
Absent Member.
Absent Member.

Tobias,

Were you able to resolve this? If so, what steps did you take?

Thanks!

eugenio

0 Likes
Absent Member.
Absent Member.

Hello Eugenio,

i followed the steps on KB 3374.

0 Likes
Absent Member.
Absent Member.

Hi,

I have increased the notification threshold in server .properties files and restarted the arcsight manager service as we were facing an issue with the email notification regularly.

Post changes, i haven't received even single notification till now.


Below are the observations.

1) When we click the “Test Destination Notification”, we are receiving the notification mail.

2) Correlation alerts are triggering without any issues.

3) But, getting message in the console as “could not deliver notification (No valid destinations in any escalation level)” for respective correlation alerts.

Please help if you got any solution for the query which you have posted as i am also facing same issue.

Thanks & Regards,

Punith

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.