Is the a SWQL query or way I can check to see if WMI Polling has stopped for 9000 servers?

bootneck1111

Hi Guys

We've had an issue whereby the Node Status on the Node dashboard was showing as Green but when opening Performance Analyzer we found that WMI Polling had stopped some days ago.

Is there a SWQL query or way I can check my other 9000 servers to see if WMI Polling has stopped??

stevenstadel

We run this SWQL as a widget. It finds systems that have not updated the LastSystemUptimePoll and can show both SNMP and WMI nodes that are not collecting data correctly over the last couple of hours Credit to @mesverrum 

https://thwack.solarwinds.com/t5/NPM-Discussions/How-to-create-a-report-which-will-identify-all-nodes-where-the/m-p/117227

Nodes with Statistical Polling Issues

Select
n.Caption AS [Node]
,n.DetailsURL AS [_linkfor_Node]
,'/Orion/images/StatusIcons/Small-' + n.StatusIcon AS [_IconFor_Node]
,n.IP_Address AS [IP Address]
,n.DetailsURL AS [_linkfor_IP Address]
,n.StatusDescription AS [Status Description]
,n.ObjectSubType AS [Collection Type]
,e.Servername
,n.StatCollection AS [Interval]
,CASE WHEN n.ObjectSubType !='SNMP' THEN 'Not Used'
WHEN n.Community='' THEN 'Not Used'
ELSE n.Community
END AS [SNMPv2 Community]
,CASE WHEN c.Name is null THEN 'Not Used'
ELSE c.Name
end AS [WMI/SNMPv3 Credential]
,ToLocal(n.LastSystemUptimePollUTC) AS [Last Stat Collection]
,ToLocal(n.LastSync) AS [Last Ping]
,DayDiff(LastSystemUptimePollUTC,GETUTCDATE()) AS [Days Since Polled]
,'Edit' AS [Edit]
, '/Orion/Nodes/NodeProperties.aspx?Nodes=' + ToString(n.NodeID) AS [_LinkFor_Edit]
,'/Orion/images/nodemgmt_art/icons/icon_edit.gif' AS [_IconFor_Edit]

FROM Orion.Nodes n
LEFT JOIN Orion.NodeSettings ns ON n.NodeID = ns.NodeID AND SettingName like '%Credential%'
LEFT JOIN Orion.Credential c ON ns.SettingValue = c.ID
JOIN Orion.Engines e ON e.Engineid=n.Engineid
WHERE Status<>'2'
AND Status<>'9'
AND ObjectSubType!='ICMP'
AND MinuteDiff(LastSystemUptimePollUTC,GETUTCDATE())>120

ORDER BY LastSystemUptimePollUTC