Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Dynamic Baseline Thresholds, where art thou?

I've been digging through the Orion 2015 DB schema to try and find the values presented when using dynamic baseline thresholds and I can't seem to find them. It seems odd that there isn't a table for them somewhere, or at least one that I can readily find, as the values are used in a number of our alerts, etc.

Any help? Does anyone know the SQL tables where the node and interface values for ${USE_BASELINE_WARNING} and ${USE_BASELINE_CRITICAL} can be found?

Find more posts tagged with

Accepted answers

All comments

vispetto

I believe it is located in the APM_Threshold table. Below is a SQL query I use to find columns in my DB, change '%software%' to whatever value you believe the column name may be.

SELECT t.name AS table_name,

SCHEMA_NAME(schema_id) AS schema_name,

c.name AS column_name

FROM sys.tables AS t

INNER JOIN sys.columns c ON t.OBJECT_ID = c.OBJECT_ID

WHERE c.name LIKE '%software%'

ORDER BY schema_name, table_name;

jbiggley

First -- wicked query! I'm going to use that all the time now.

Unfortunately, I don't think that the APM tables are what I'm looking for in this case. Granted, the APM tables *do* have a place to store the dynamic warning and critical thresholds, but that is for applications. There is a Thresholds table, but it doesn't hold the calculated values, only the assigned values. For example, these are two entries in our Thresholds table. Note that one of the nodes has the dynamic thresholds enabled while the other does not.

There are a couple of tables related to thresholds (Thresholds, ThresholdLevelSettings and ThresholdNames) but none of them seem to hold the key to 'What is the current value of the dynamic baseline warning and critical thresholds for metric [X]?"

InstanceId

ThresholdType

ThresholdNameId

ThresholdOperator

Warning

Critical

WarningFormula

CriticalFormula

BaselineFrom

BaselineTo

BaselineApplied

BaselineApplyError

NULL

${USE_BASELINE_WARNING}

${USE_BASELINE_CRITICAL}

2015-11-22 05:00:52.883

2015-11-30 03:56:04.007

2015-11-30 04:00:13.420

NULL

There is a view called NodesThresholds which I thought might do it too -- but it was more of the same. It lists the values of ${USE_BASELINE_WARNING} and ${USE_BASELINE_CRITICAL} but only if the use of those dynamic baselines are enabled for that metric.

I am beginning to think that those values are calculated when you go to the dialogue to override them on the node/interface/app etc. and the the calculated values are only stored in the DB once they are enabled, otherwise they are the global values. Of course, that means that there is likely a stored procedure somewhere that calculates those values....

jbiggley

I think I found it vispetto‌ -- or at least the start of it.

The stored procedure for the CPU statistics is called dbm_CPULoad_DetailToStatistics. My SQL kung-fu is weak, but I'll take a peak at the query and see if I can extrapolate it into a report of some type. I'd love to be able to hand teams a report showing what the dynamic thresholds WOULD be if they chose to enable them.

nvyguardsman

Did you ever figure this out? I have been tasked with doing the same thing!

jbiggley

Unfortunately I have not -- I got totally distracted by other things and haven't made it that far back in my To-Do list yet.

sum_giais

I'm looking for this same data, and need to enable this on a number of nodes. I'd easily do this for one or two in the UI, however it's a large number of nodes and an odd grouping of them so not ideal to do it through the UI. Anyway after poking in the database and SWQL I found where some of this lives. Note I'm looking at node response time FYI.

In SQL the table name is 'Thresholds' and 'ThresholdsStates'. There is a catch however -- SolarWinds only writes into the 'Thresholds' table if there are any manual overrides to the global defaults. With that in mind I'd think perhaps a manual INSERT would be enough to add in my own overrides en-mass. Still, not certain and I'll be digging more to find the best solution as I'm not sure if this is the only table that gets updated when changing these baselines.

In SWQL SolarWinds does the legwork for us, and has all this data in 'Orion.ResponseTimeThreshold'... perhaps a way to leverage that and do some scripting... TBD

Edit 3.31.2020: The Warning and Critical values are actually a column in the 'Thresholds' table as simple floats. Depending on if the threshold uses baseline data is when the following columns are updated: WarningFormula, CriticalFormula, BaselineFrom, BaselineTo, BaselineApplied. The Formula columns get the variables put in them (e.g. ${USE_BASELINE_WARNING} and ${USE_BASELINE_CRITICAL} ) and then the baseline time period defines the period of time to use to derive that threshold, which will get put into the same column (Warning, Critical) also.

I am now looking at SWQL to see if there's a way to enable these through it. I could simply update the database but if SWQL can handle it, that's always the better solution as SolarWinds knows all the tables to update.

It looks as though the ThresholdType tracks the different ways the threshold is defined. Guessing here.. but...

ThresholdType '0' = Default / Global value
ThresholdType '1' = Manually defined value
ThresholdType '2' = Baseline defined value

In SQL:

In SWQL:

Very interesting stuff!