Swql query to find list of volumes of all nodes which are not monitored.

Question

Development team always adds new mount volumes without informing operations team due to which there are lot of hosts on which some volumes are not monitored. I don't want to find it manually where I have to click on each host to list resources that are being monitored

is there any  query I could run to list volumes of all nodes which are not monitored.

bobmarley · Answer

You could probably use the Get-Volume command in powershell to get the inventory from the server and then compare what is in the SolarWinds database for the same node.

SteveK · Answer

Without knowing your environment or what SolarWinds moduls you have, I can only take a guess.

So my initial thought is to go through "Network Discovery."  This is very contingent on your licensing though, if you have unlimited nodes then it shouldn't be an issue.  There is an option to Manually add monitoring later.  So maybe something like this would help.

Besides that, I'm not sure of an automated way within SolarWinds on how to detect that.  Getting a list of known volumes is pretty simple.  I'm not aware of a way to build a direct report on unknown volumes.  If the Network Discovery way doesn't help, then unfortunately I think its going to be a manual process.  If it was me, I would probably write a powershell script to check VMWare/Hyper-V/Hypervisor here, to get a list of all VMs and their corresponding volumes.  If you don't have that, then it would get more dicey depending on if you are using Windows, Linux, or both.  Once you have your list of volumes, I would have that calculate how many volumes per system.  Then build out a similar report in SolarWinds to get a count of volumes per system.  Then look for the deltas between the 2 data sources.

brscott · Answer

No, maybe, and conditionally...

The "No" part is that generically there needs to be a way to query the nodes resources, like a list resources, then see what's not checked.  That does not exist in SWQL.

Maybe it could be done in a script using the SDK, but I don't know that.

Conditionally if that data exists in another way, such as the vmware volumes.  If the Nodes are also vmware vm's, and you monitor your vmware environment in solarwinds, then yes, and that would look something like:

SELECT vmv.VirtualMachine.Name as VM, vmv.VirtualMachine.Node.Caption as Node, vmv.MountPoint, (vmv.Capacity/1073741824) as CapacityGB, (vmv.FreeSpace/1073741824) as FreespaceGB, vmv.VirtualMachine.DetailsURL as _LinkFor_VM
FROM Orion.VIM.VirtualMachineVolumes as vmv
where 
 ( -- Search for the matching node volume, we only want missing ones (or where the results = 0)
 select count(v.Caption) as Matches from Orion.Volumes v 
 where IsNull(vmv.VirtualMachine.Node.NodeID,0) = v.NodeID 
 and (v.Caption like vmv.MountPoint+' %' 
 or v.Caption = vmv.MountPoint 
 or v.Caption like SubString(vmv.MountPoint,1,Length(vmv.MountPoint)-1)+' %' ) 
 ) = 0
 and IsNull(vmv.VirtualMachine.Node.CustomProperties.ABT_OnCall_Hours,' ') != 'Do Not Call'
 and IsNull(vmv.VirtualMachine.Node.NodeID, 0 ) != 0
 and IsNull(vmv.VirtualMachine.Node.ObjectSubType, ' ') != 'ICMP'
 and not ( -- some exceptions
 vmv.MountPoint like '/var/lib/docker/%'
 or vmv.MountPoint like 'V:%'
 or vmv.MountPoint like '/var/named/chroot%'
 )