SWQL Query to get SAM application components values

Hello everybody,

actually I trie to write an swql query for the SAM application components for Windows Service Monitoring.

The Problem of the query I can't fetch the Information About the Service Name that will be monitored. i get only the process Name of the Service.

For example i will monitore the Windows Service: server

in Solarwinds will be confiured like the screenshot. The SWQL query only Shows me the processname: svchost.exe.

We Need the Service Name "Server" for our warning.

Kind regards

tobsen1302

solarwinds.PNG

Find more posts tagged with

Accepted answers

All comments

marcrobinson

If you are looking for the status of the component, and this is an application alert, these should work

If you are using an application alert the first two options give status. The first option gives only problem status for all components, and the second gives status on all components (up, down, etc). These could be recreated as a proper swql query, but these have worked for me.

${N=SwisEntity;M=ApplicationAlert.ComponentsWithProblemsFormattedHtml}

${N=SwisEntity;M=ApplicationAlert.ComponentsWithStatusFormattedHtml}

If you want this information from a component alert, the swql will be different. See below:

${N=SWQL;M=SELECT ac.ComponentName FROM Orion.APM.Component ac WHERE ac.ComponentID = ${N=SwisEntity;M=ComponentID} }

tobsen1302

thanks for your Feedback. But it is not the soluition we Need.

I Need the field of the Service Name for Windows Service Monitoring i fill out into the application to monitor the Service on the Windows system.

I would pick it up into my warning to notifiy the Service we Monitoring on the System is down, my warning is based on a Component.

marcrobinson

The information on the net name can be found in the Key-value pairing in the below swql entities. There ought to be a better method to do this, but this is where I have found that information. The query should generate a list of the services and their net names. The joins bring the two entities that have information on the service name.

1. Orion.APM.ComponentTemplateSettings - if you keep all your components in the monitor template, this is where the service name information lives

2. Orion.APM.ComponentSetting - If the windows service component only exists in the monitor instance, then the service name will be here.

SELECT ac.Name, ac.DetailsUrl, cts.Value as Service_NetName
FROM Orion.APM.Component ac
JOIN Orion.APM.ComponentTemplateSetting cts
ON cts.ComponentTemplateID = ac.TemplateID
JOIN Orion.APM.CurrentStatistics cs
ON cs.ComponentID = ac.ComponentID
Where cts.Key = 'servicename'

I tried turning this query into a swql variable for alert notifications. It is not returning a value. Here is the sample, and I am sure I missed something simple.

SELECT cts.Value as ServiceNetName
FROM Orion.APM.Component ac
JOIN Orion.APM.ComponentTemplateSetting cts
ON cts.ComponentTemplateID = ac.TemplateID
Where cts.key = 'servicename' AND ac.componentID = ${N=SwisEntity;M=ComponentID}

Let me know if this helps.

tobsen1302

@marcrobinsonthanks for your Reply. it helps but it doesn't work completly.

In the SWQL Studio I tried the following query:

SELECT Component.Name, Component.DetailsUrl,no.NodeName,Component.ComponentType,cts.Value as ServiceName
FROM Orion.APM.Component Component
JOIN Orion.APM.ComponentTemplateSetting cts ON cts.ComponentTemplateID = Component.TemplateID
JOIN Orion.APM.CurrentStatistics cs ON cs.ComponentID = Component.ComponentID
join orion.apm.Application apm on apm.ApplicationID= Component.ApplicationID
join orion.Nodes no on no.NodeID = apm.NodeID

where cts.Value='server'

it works and i get the output i need:

Windows Service Monitor

/Orion/View.aspx?NetObject=AM:77191

Servername

server

If i go back to Solarwinds warning definition, in the trigger conditions i write this user defined SWQL warning:

SELECT Component.Uri, Component.DisplayName FROM Orion.APM.Component AS Component

JOIN Orion.APM.ComponentTemplateSetting cts ON cts.ComponentTemplateID = Component.TemplateID
JOIN Orion.APM.CurrentStatistics cs ON cs.ComponentID = Component.ComponentID
join orion.apm.Application apm on apm.ApplicationID= Component.ApplicationID
join orion.Nodes no on no.NodeID = apm.NodeID

than i go to the trigger Actions to define an E-Mail action and I want to add the variable, but i can't find them in the selection window