Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Server Down Time using the SDK

I am trying to automate the removal of nodes from SolarWinds. What I cannot seem to figure out is the best way to tell me how long a node has been down for.

My basic workflow is the following:

Determine list of nodes whose status is "Node is Down"

Check to see how long the node has been down for.

If it is greater than 3 days, unmanage the node and put a date time stamp into a custom property on the node

Check to see if the unmanaged node is responding to ping, if so remanage, if not see if the node has been unmanaged for more than 40 days

If node has been unmanaged for more than 40 days, check one more time to see if node is responsive, and if not remove the node from SolarWinds and write that to a file/event log/email etc for records.

Thanks in advance for your help on how to determine how long a node has been down for using the API

Find more posts tagged with

down_nodes_downtime

orion sdk

Accepted answers

All comments

jm_sysadmin

This powershell is completely untested, I don't have a good place to try it at the moment. I am stuck in meetings. the code below is "borrowed" from many Thwack posts, and the SWQL is a modified verions of a custom query on my homepage, but it should point you in the right direction. I don't think you need to set a custom property, you should be able to use the built in timestamps to take you actions. I also didn't include logging or emailing, you can add in what makes sense to you. Let me know if you have any questions, or if you get errors. You may want to comment out the actions when you test this.

Add-PSSnapin SwisSnapin -ErrorAction SilentlyContinue

$hostname = 'server'

$user = "admin"

$password = "password"

$swis = connect-swis -host $hostname -username $user -password $password

$GetNodesQuery = "SELECT n.uri, n.nodeid, n.status, HourDiff(ToLocal(n.LastSystemUpTimePollUtc), GETDATE()) as [LastUpHours], DAYDIFF(ToLocal(n.UnManageFrom), GETDATE()) as [UnManagedDays] FROM Orion.Nodes n Where n.Unmanaged = 1 Or n.Status = 2"

$Nodes = Get-SwisData -SwisConnection $swis -Query $GetNodesQuery

foreach ($Node in $Nodes) {

if ($Node.status = 2 -and $Node.LastUpHours > 72) {

$nodeid = $Node.nodeID

$now = [DateTime]::UtcNow

$later = $now.AddDays(41)

Invoke-SwisVerb $swis Orion.Nodes Unmanage @("N: $nodeid ", $now, $later, "false")

}

elseif ($Node.status = 1 -and $Node.UnManagedDays -ge 40) {

$uri = $Node.uri

Remove-SwisObject $swis $uri

#do your log or email here

}

hallstev5

Thank you for the response and script. I originally was looking at the LastSystemUpTimePollUtc to get the downtime, but I have all of my ICMP nodes and a couple of SNMP nodes that have NULL in the LastSystemUpTimePollUtc.

I am looking into using the Orion.Events table and getting the latest Node Down Event for all of the nodes and building a list and doing a compare. If the node is down and not in that list. it means that the node has been down more than 22 days (our retention time for events). If the node is in that list then it starts the 3 day count to unmanaged, Then look at the day which i unmanaged the node and compare to the current day and if greater than 40 or 45 days check to see if it responds then delete. Do you think this would work?

jm_sysadmin

I think that will work, do you have what you need to do it?

hallstev5

I think so. When I am finished I will post what I came up with.