Thanks for sharing your alerts. I'm not sure how exactly you suppress the generic application and node alerts with this.
For your user case, you can avoid custom SQL by using custom properties and Groups.
- Create an Application Yes/No CustomProperty called AppAlert. Set this custom property for all your application monitors to Yes except the SMTP ones for which you set them to No
- Modify the default 'alert me when a component *' and 'alert me when an application *' monitors to add an additional trigger condition of AppAlert=Yes. This will suppress the default alerts for your SMTP monitors.
- Create a Group using the 2 SMTP monitors, and use the Group status of 'Best case' or the default 'Mixed mode' (if 1 of them is down, the group will be in a Up or Warning status depending on the setting, but will be in Down status when both are down).
- Simply use the default 'Alert me when a group is down' to be notified when both SMTP monitors are down.
For the node count > 50 alert, it is a really good bit of custom SQL there . It will still notify on all the 50 nodes using the 'Alert me when a node is down' alert, but the original requirement was to notify someone else when the node down count > 50. So, this would be a separate alert and more than serves that requirement. BTW, you can also use WHERE Status=2 instead of WHERE StatusDescription LIKE 'Node Status is Down.'