How to get NSX open alert in to report

[Sankavaraj]

How to get NSX open alert in to report 

-------------------------------------------

[Octopus]

Step 1: Access NSX Alerts
You can find open alerts from the NSX Manager UI:
*Log into NSX Manager.
*Go to System > Events & Alerts.
*Filter by Status: Open or by Severity as needed.
You can't export directly from the UI, but you can retrieve alerts via API or log forwarding.

Step 2: Use NSX API to Get Open Alerts
NSX-T provides a REST API that allows you to programmatically retrieve alerts.
Here's an example API call (you'll need to authenticate first):

GET https://<nsx-manager>/api/v1/transport-nodes/<node-id>/status

Or, for system-wide alarms:

GET https://<nsx-manager>/api/v1/alarms

*Filter by state=open or equivalent query parameter.
*This returns JSON data with the list of open alarms.
Use tools like Postman, curl, or automation via Python scripts to query this regularly.

-------------------------------------------

[Bogdan_Ionut]

NSX can forward alarms/events to a syslog server, which is often the easiest way to generate reports.

Configure Log Forwarding on NSX Manager to forward alerts to   vRealize Log Insight / Splunk / Any syslog collector.

So yes, besides the NSX API, open alerts can also be obtained by forwarding NSX alarms/events to a syslog server (e.g., vRealize Log Insight, Splunk), integrating NSX with Aria Operations for built-in reporting, or using SNMP traps for real-time alerts. NSX does not provide a native UI export option, so external systems or automation are required for reporting.

-------------------------------------------