No results for basic ncm queries in SWQL studio or custom widgets

Environment:
Solarwinds version: 2025.2.1 (installed on Aug-13)
MPE + 3 APE's. The MPE is just for website+logging+etc. None of the nodes are assigned to it.
SWQL Studio version: 3.2.0.50049
Configuration Wizard ran on all pollers on Aug-20 per this thread, after I noticed that all of the perkstack widgets were broken.

Problem:

When using SWQL studio, I can't get any results for NCM tables. Example queries:

SELECT InterfaceID FROM NCM.Interfaces

SELECT NodeID FROM NCM.ArpTables

SELECT ID FROM NCM.ConfigInterface

In every one of these, the query processes, but returns a result of 0 rows in 00:00:00:2682769, give or take.

When I run these same basic queries in custom widgets, they work. But a slightly more complicated query in a custom widget does not. Example:

SELECT
    a.MAC,
    a.IPAddress,
    n.BldgNo AS "Building#"

FROM
    NCM.ArpTables a

JOIN NCM.Nodes n ON a.NodeID = n.NodeID

WHERE
    a.IPAddress IN ('${SEARCH_STRING}') OR a.MAC IN ('${SEARCH_STRING}')

The arp table is populated in the database, and that same query works in a report - it just doesn't work in SWQL studio or a custom widget. It used to though. I updated to 2025.2.1 on Aug-13, so that may have been when it broke. I'm not sure.

For what it's worth, I've tested some other tables, such as UDT and NPM stuff, and those do return results in SWQL studio and in widgets. There may be other broken tables, but if there are, I'm not aware of it as of yet.

Here's a snippet from Orion.InformationService.log when I did a basic query from NCM.ConfigArchive in SWQL studio

2025-09-26 11:18:17,686 [126] DEBUG SolarWinds.InformationService.Core.InformationService - (null) (null)  OperationContextId 38d903d7-8e18-4d94-93d7-281042ca9e7f - Query took 67.0647 ms: SELECT ConfigID
FROM NCM.ConfigArchive
 RETURN XML RAW
2025-09-26 11:18:17,686 [126] DEBUG SolarWinds.InformationService.ChangeBroker.IndicationReporterBase - (null) (null)  { ReportIndication entered
2025-09-26 11:18:17,686 [126] DEBUG SolarWinds.InformationService.Core.IndicationLogger - (null) (null)  Indication System.QueryExecuted reported:
  Source instance properties:
  Indication properties:
    IndicationID = 13790c50-80c1-430f-a078-fc3d263cd2a7
    IndicationTime = 09/26/2025 17:18:17
    IndicationSequence = 18549757
    QueryText = SELECT ConfigID
FROM NCM.ConfigArchive
 RETURN XML RAW
    Parameters = 
    ExecutionTimeMS = 67
    RowsCount = 0
    ApplicationTag = SWQL Studio
    RemoteAddress = 
    Identity = 
    ConstantExpressionCacheInfo = Untyped cache: 99.98 % (41994022/42004114); typed cache: 99.99 % (65947243/65956460)
    ErrorMessage = 
    TooplesCount = 0

And that same query in a report:

Any ideas?

Find more posts tagged with

Comments

sidj2025

My only idea is that in the example you showed it is calling for the building number using BldgNo and there is no property for that under NCM.Nodes. There is a property for building. Maybe try changing that and see if it works?

samthwacksolarwinds

BldgNo is a custom property we use. But anyway, here are a few other queries that return no results in SWQL Studio. These same queries work in reports.

SELECT NodeID FROM NCM.Interfaces

SELECT MAC FROM NCM.ArpTables

SELECT NodeID FROM NCM.Nodes

SWQL Studio:

Report:

Queries on other tables work in SWQL Studio.

I uninstalled/reinstalled SWQL studio, but it made no difference.

samthwacksolarwinds

I figured out the issue. The account we use for SWQL Studio had the NCM permissions set to "none". Changing it to WebViewer fixed it. The reason for the mismatch between SWQL Studio and Reports/Widgets is that I use an admin account on the website, and a read-only account in SWQL Studio.