Some times USM does not display all alarms and clients want to check and see why a particular alarm is not showing.
Procedure
The first thing to check is to make sure the System the alarm was generated on is in a group in USM. Alarms will not show for systems not in a USM group.
To verify all systems are present in a group you can create a group containing all systems with the following filter:
Create a Dynamic group in USM with the following:
create a group with a filter of: not ip address is null
Save it then select the topmost level group and then click on the alarm icon and see if the count is now closer for IM and NAS.
If you need to dig further below is the SQL query used to return ALL alarms in USM on the top group:
SELECT CASE WHEN dev.dev_id IS NULL THEN -9999 ELSE dev.cs_id END AS cs_id, cim.ci_id, cs.dedicated, cs.os_name, cs.os_type, nas.supptime, nas.assigned_at, ts.nimid, ts.visible, ts.nimts, ts.suppcount, ts.level, ts.message, ts.dev_id, ts.met_id, ts.subsys, ts.sid, ts.source, ts.hostname, ts.prid, ts.hub, ts.robot, ts.origin, ts.user_tag1, ts.user_tag2, ts.assigned_to, ts.assigned_by, ts.acknowledged_by, ts.custom_1, ts.custom_2, ts.custom_3, ts.custom_4, ts.custom_5, ts.i18n_token, ts.i18n_data, ts.time AS update_time, ts.closed, '' AS device_ctd_id, '' AS probe_address FROM NAS_ALARMS nas JOIN NAS_TRANSACTION_SUMMARY ts ON ts.nimid = nas.nimid LEFT JOIN CM_CONFIGURATION_ITEM_METRIC cim ON cim.ci_metric_id = ts.met_id LEFT JOIN CM_DEVICE dev ON dev.dev_id = ts.dev_id LEFT JOIN CM_COMPUTER_SYSTEM cs ON cs.cs_id = dev.cs_id WHERE ( 1=1 ) AND 1=1 ORDER BY update_time DESC
The above can be used to help trouble shoot where the problem is in the data.
keywords SQL query USM 8.1 Alarms NAS alarms USM display