Alert me when a managed node last poll time is 10 minutes

This is a carry over from this thread ()

It appears that I am having an issue with this alert. Recently, we've had several windows servers that would not perform a shut down cleanly either via an automated script or a scheduled task just calling shutdown.exe /f /r or a user initiated restart. What appears to happen is several services do in fact shut down but the server remains up with a mouse cursor and a wallpaper but no other IO can be sent to the server. The servers do respond over ICMP.

My question is what exactly is solarwinds looking for in this Now - Last Sync field? Does solarwinds just check for an ICMP response and say that the server is ok or is it actually doing an SNMP Query to grab disk, cpu and memory stats and count that as a Last Sync? Is there a way to check that the Last Sync request was valid? This goes same for the Alert me when a managed node has not been polled during the last 5 tries. Does a polling cycle constitute just as an ICMP response or is solarwinds doing more advanced logic?

Find more posts tagged with

stop

SNMP

net-snmp

timeout

Polling

no_data

no_alert

Windows

Accepted answers

you need NPM 10.1.2 and create Custom SQL alert. This column is not exposed by UI.

All comments

Regarding that case. All nodes are polled as normal, but SNMP service is not responding. We send requests, but there's no response. It's like SNMP timeout. In that case all volumes, interfaces are going to unknown state. So it's not like alert when we stop polling, you need to use different logic.

Column [LastSync] = when row was updated, no matter by which values. It's not useful for you, because we are polling.

You can check column [LastSystemUpTimePollUtc]. SysUpTime poll is aling to PollInterval and it's done by SNMP, so you can set up advanced alert on it. Because if SNMP fails, than this column is not updated.

for instance if sysuptime is not updated for 10 minutes, trigger alert.

SELECT ... FROM Nodes WHERE LastSystemUpTimePollUtc < DATEADD(minute, -10, GETUTCDATE())

jrich

Will test tomorrow and get back to you on the results. Right now I have two servers where SNMP is stopped so I'll make the change in the advanced alert to check for uptime differences.

jrich

In my Alerts manager under Network Nodes ---> Polling Details I do not have a option for LastSystemUpTimePollUtc . Do I need to run this as a SQL alert instead? I am running SolarWinds Orion Core 2010.2.1 SP1, APM 4.0.1, NPM 10.1.1 SP1, IVIM 1.0.0.

you need NPM 10.1.2 and create Custom SQL alert. This column is not exposed by UI.

faizalis

Hi ET,

Can you please help me through as I need to use this option node down for more than 15 minutes through GUI.

We have different nodes and I have grouped them through comments. I need to alert business for any node part of a group is down more than 15 mi nutes.

Thanks in advance