Hello everyone, I'm running into an issue with a custom property that I hope someone can help me with. I have created multiple custom layers, but the layer selection for some of my devices keeps reverting to a different value after about 24 hours. Here’s a summary of what I'm seeing: * Printers: When I assign the "Printer" layer to our printers, the setting is accepted but reverts to "other" the next day. * APC UPSs: My APC UPSs are being changed from their assigned layer to either "layer 2" or "layer 3" after 24 hours. * Inconsistent Behavior: The issue is not consistent across all devices. Some devices retain their assigned layer without any problems. * No Clear Pattern: I've confirmed that this issue isn't tied to a specific manufacturer, model, or firmware version. It seems like there might be an automated process overriding my manual selections. Has anyone encountered a similar problem, or does anyone have suggestions on what I could investigate to resolve this? I appreciate any help you can offer.

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Custom Node Properties (Layer) Keeps reverting how to make permenant change?

Hello everyone,

I'm running into an issue with a custom property that I hope someone can help me with. I have created multiple custom layers, but the layer selection for some of my devices keeps reverting to a different value after about 24 hours.

Here’s a summary of what I'm seeing:

Printers: When I assign the "Printer" layer to our printers, the setting is accepted but reverts to "other" the next day.
APC UPSs: My APC UPSs are being changed from their assigned layer to either "layer 2" or "layer 3" after 24 hours.
Inconsistent Behavior: The issue is not consistent across all devices. Some devices retain their assigned layer without any problems.
No Clear Pattern: I've confirmed that this issue isn't tied to a specific manufacturer, model, or firmware version.

It seems like there might be an automated process overriding my manual selections. Has anyone encountered a similar problem, or does anyone have suggestions on what I could investigate to resolve this?

I appreciate any help you can offer.

Find more posts tagged with

Accepted answers

All comments

Lofstrand

Custom properties should not just change values by themselves. There must be some script or automation that sets them.

If there is a user account that change them, below query might give you some hints. If the changes are done via the API, it might not be logged. (Can also be changed on the SQL sided, then we definitely don't have any logs on this)

SELECT TOP 1000

ToLocal(A.TimeLoggedUtc) AS [TimeLogged]

,A.AccountID

,A.ActionTypeID

,A.AuditEventMessage

FROM Orion.AuditingEvents AS A

WHERE

A.actiontypeid=38

AND A.AuditEventMessage LIKE '%changed custom property%'

AND A.TimeLoggedUtc>ADDDAY(-30,GETUTCDATE())

ORDER by auditeventid desc

bourlis

I have a SW Admin Aduit Modern Dashboard, that I use to track things like this. My query pretty much matches Lofstrand's but I'm auditing more than changes. I want to see who adds and deletes CP's too. Here's my query:

SELECT top 2000

tostring(tolocal(a.TimeLoggedUtc)) as [Time Audit]

, a.AccountID as [Edited By]

, a.AuditEventMessage as [Audit Message]
, a.DetailsUrl as [Details URL]
, a.AuditingActionType.ActionTypeDisplayName as [Edit Item]



FROM Orion.AuditingEvents as a


where a.ActionTypeID in ('11','12','13')


order by a.TimeLoggedUtc desc

Here's a snipped of what the dashboard looks like.

bourlis

Also, you might want to run this as report, SWQL Studio query or a moder dashboard view. This query looks for enabled alerts that change the CP's. Case in point we have alerts that dynamically populate CP's based on a couple manually entered CP's.

SELECT 

  a.Name as [Alert Definition Name]

, a.Description as [Alert Definition Description]

, a.ObjectType as [Alerting On]

, a.Frequency  as [Alert Evaluation Frequency]

, CASE

   WHEN a.Severity ='2' THEN 'CRITICAL'

   WHEN a.Severity ='1' THEN 'WARNING'

END as [Alert Config Severity]

, a.NotifyEnabled as [Alert Config Notify Enabled]

, a.Canned as [Alert Config Canned]

, a.Category as [Alert Limitation Category]

, aa.Action.ActionTypeID as [Actions Type]

, aa.CategoryType as [Action Assignment Category]

, aa.Action.Title as [Actions Title]

, aa.Action.Properties.PropertyName

, aa.Action.Properties.PropertyValue

, a.CreatedBy

,tostring(TOLOCAL(a.LastEdit)) as LastEdit


FROM Orion.AlertConfigurations a 


Join Orion.ActionsAssignments aa on a.AlertID = aa.ParentID


WHERE (a.Enabled = 'True') and aa.CategoryType = 'Trigger' and aa.Action.ActionTypeID ='CustomProperty'

order by a.Name ASC, aa.Action.ActionTypeID asc

vinay.by

Custom property population can also be automated through SolarWinds Alerts, there are some great comments on this post, but then can you as well go to your alerts and check if you have any alerts which are specifically created to auto populate the values on these Custom properties.