Unable to set a Custom search based alert for NSX Security group change in Aria Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

Unable to set a Custom search based alert for NSX Security group change in Aria Operations for Networks

Refer to screenshot below with GUI query used for this alert

Environment

Aria Operations for Networks 6.13.0
Aria Operations for Networks 6.14.0
Aria Operations for Networks 6.14.1

Cause

The GUI query has 'user contains' which is not an valid operator in Search query.

Resolution

1. Start with build the correct GUI query.
   
   
2. Use valid query right Operator such as below:
   a) "user like" or User ="Name of user"
   b) Problem Entity like "Entity Name"
   
   
   
3. Ensure that there is a Green check Mark before the query. This means query is valid. Refer to screenshot below
   
   
   
   
4. On the GUI Click on the Bell icon to Define the Alert. Refer to screenshot below:
   
   
   
   
5. Clicking on Bell Icon, you will get define alert window popup, refer to below screenshot
   
   
   
   
6. Give a Name to the Alert, Change the Severity as needed.
   
   
7. Under Alert Notification section select the Email notification and Email immediately and add the respective email address or email distribution lists where you want the notification to be received.
   
   
8. Click Submit to save the search based alert.
   
   
9. You should now get a notification that Alert Definition Saved on the extreme right side of the GUI, Refer to screenshot below:
   
   
   
   
10. You can search for this search based alert under "manage Alert Definition" on GUI to make any future changes to this search based alert.

 

Additional Information

Refer to Create a Search-based Alert tech docs.