Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Where does "List Resources" write its logs?

We have multiple Linux hosts running Agents where List Resources simply hangs.

I've not found anything relevant here on thwack, and am uncertain how the process is logged on the SW server and Agent sides. Please point me to appropriate files so I can suss this out.

Thank you in advance,
Joe Cali-Poutre
Aventiv Technologies

Find more posts tagged with

sam agents

sam

sam linux

Accepted answers

All comments

syeal01

I searched THWACK also but didn't find anything. We know that Solarwinds central location for Orion Core logs is C:\ProgramData\SolarWinds\Logs\Orion*. I am guessing most likely List Resources writes its output into those standard Orion log directories.

joepoutre

I did look there as well as on the agent, but even when running a "List Resouces" it was hard to tell what was updating. I'll keep digging, and if I find I'll share here.

ahawkins72

I can't recall where that log may be, but this may help. I use findstr in the Logs directory constantly.

https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/findstr

So maybe something like "findstr /s /i 192.168.0.1 * . *" (without the spaces in the wildcard because it's auto formatting to something in this comment box)

Sometimes you need hostname, sometimes node ID. Sometimes it takes a little while to churn something up this way, but it's something. Another trick I have used is that I will copy the logs folder out to another location (like my desktop) and run the findstr from there. Then I can use process of elimination. If I'm seeing a lot of noise from SAM logs and I know I'm not looking for SAM, I can delete the SAM logs and run the findstr again.

You could also maybe open a file explorer and run the list resources, then sort the Logs directory by date modified to see what log files are being updated.

One last thing, if your platform server (or another server you have access to) is SCCM/MECM joined, you can use cmtrace.exe in "C:\Windows\ccm" to view your Solarwinds log files, which is neat because you can "live view" the log file and it will update as more entries are added as well as highlight anything that's potentially a warning/error in yellow/red.

I hope something in that wall of text helps! LOL

bourlis

Hi,

List Resources log reports can be found in C:\ProgramData\SolarWinds\Discovery Engine\DiscoveryresultsDump.txt , DiscoveryState.log.txt, & OrionDiscoveryJob.log.txt.

If you have additional polling engines, you'll need to check the logs on the corresponding polling engine.

Also, here's a neat SWQL query I built for myself that lets me quickly see what resources are being monitored for a particular server. I have this setup as a custom table widget that I have placed right next to the node details management widget.

This can also be repurposed as a report or a moder dashboard by removed the 'where n.nodeid = {$nodeid}' with something like 'where n.vendor = 'Linux'.

SELECT DISTINCT


CASE

    WHEN Response.PollerType = 'N.ResponseTime.ICMP.Native' then 'ICMP'

    WHEN Response.PollerType = 'N.ResponseTime.Agent.Native' then 'Agent'

    Else ' '

    End as [Status and Response]


,CASE 

    WHEN cpu.PollerType IS NOT NULL THEN 'Assigned'

    ELSE ' '

    END AS [CPU and Memory Poller]

,CASE 

    WHEN asset.PollerType IS NOT NULL THEN 'Assigned'

    ELSE ' '

    END AS [Asset Poller]



,CASE

    WHEN n.CustomPollerAssignmentOnNode.AssignmentName IS NOT NULL THEN 'Assigned'

    ELSE ' '

    END AS [UnDP Poller]

,CASE 

    WHEN n.SCMNode.Enabled IS NOT NULL THEN 'Assigned'

    ELSE ' '

    END AS [SCM Poller]

,CASE

    WHEN n.Volumes.Type IS NOT NULL THEN 'Assigned'

    ELSE ' '

    END AS [Volumes Poller]



FROM Orion.Nodes n


LEFT JOIN (SELECT PollerID, PollerType, NetObjectID, Enabled FROM Orion.Pollers WHERE PollerType LIKE '%CPU%') cpu ON cpu.NetObjectID = n.NodeID

LEFT JOIN (SELECT PollerID, PollerType, NetObjectID, Enabled FROM Orion.Pollers WHERE PollerType LIKE '%asset%') asset ON asset.NetObjectID = n.NodeID  

LEFT JOIN (SELECT PollerID, PollerType, NetObjectID, Enabled FROM Orion.Pollers WHERE PollerType Like '%ResponseTime%' and Enabled ='True') Response on Response.NetObjectID = NodeID


where n.nodeid = ${nodeid}

fop

That's pretty cool, thanks for sharing! The log locations will be handy too, I'll add those to my 'useful SW directories' list.