Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Need to have an API in place that enables to send data to ELK solution.

Hi All,

Need some urgent assistance:

As part of a testing, we want to have an api in place, that can send below data from SolarWinds to the connector of ELK solution.
- Device level and interface level current data (event) from the timestamp where it is up and running...no historical data or event required.
- CPU\Memory\Interface Utilization, Device status data.

How to achieve this, or if there is some reference article in place to do the same please suggest.

Regards
GK

Find more posts tagged with

Accepted answers

All comments

adam.beedell

https://solarwinds.github.io/OrionSDK/swagger-ui/#/Query/Query

That's what you want to use^

sum_giais

Yeah exactly. To rough out the process...

Create SWQL Queries for the data, I think at a minimum you're looking at perhaps 2 SWQL queries here (1 for the node data and 1 for the interface data) - below are some examples of each that may work for you.

-- Node data query
SELECT
     n.Caption
    ,n.DetailsUrl
    ,n.Uri
    ,n.CPULoad
    ,n.PercentMemoryUsed
    ,si.StatusName
FROM Orion.Nodes AS n
INNER JOIN Orion.StatusInfo AS si ON si.StatusId = n.Status

-- Interface data query
SELECT
     i.InterfaceName
    ,i.DetailsUrl
    ,i.Uri
    ,i.InPercentUtil
    ,i.OutPercentUtil
    ,si.StatusName
FROM Orion.NPM.Interfaces AS i
INNER JOIN Orion.StatusInfo AS si ON si.StatusId = i.OperStatus

Use the SolarWinds Swagger UI to convert the SWQL query into a REST/JSON API request URL.
1. Under "Query" expand the "GET /Query" section (blue button)
2. Click the "Try it out" button on the right, you should now see this...
3. Paste in one of the queries from above (noting I put two queries in the code block above.)
4. Click "Execute"
5. Now you should see the fields populated under the responses section
6. You want the "Request URL" portion, copy it.
7. Edit the "localhost" to be the FQDN, hostname or IP address of your main polling engine and boom you've got yourself an an API request

You can even see that there's a Curl command crafted for you, so you can manually test this with Curl if so desired. The only other aspect is authentication against your Orion API.

borgan

sum_giais, it looks to me that this approach might work for a need I have to integrate Orion with Ansible, Specifically, I need to have Ansible request an available IP address from a designated subnet, and then "tell" IPAM to mark that IP address as Used. Could this be done? Ideally, this would be a scripted process used by users who need a free IP address for new devices being deployed.

christopher.t.jones123

@borgan, you using an Ansible Tower or AWX instance and trying to do this all within Ansible and use as an artifact in a workflow or something? I've done this in the past by executing a PS script through Ansible that does exactly that and then saves it as an artifact in the rest of the workflow to create the VM with that IP address.

Below is a copy of the playbook

- hosts: Solarwinds
  tasks:
   - name: Obtain first available IP
     win_shell: |
      Import-Module SwisPowerShell
      $swis= Connect-swis -hostname 'localhost' -username '' -password ''
      $firstavailableIP= Invoke-SwisVerb $swis IPAM.SubnetManagement GetFirstAvailableIP @("{{ SUBNET }}", "24")
      $setIPStatus= Invoke-SwisVerb $swis IPAM.SubnetManagement ChangeIPStatus @("$($firstavailableip.'#text')", "Blocked")
      Write-Output "$($firstavailableIP.'#text')"
     register: IP_VAR
   - debug:
       var: IP_VAR.stdout_lines[0]
   - name: "Artifact IP for use in Workflow"
     set_stats:
      data:
        IP: "{{ IP_VAR.stdout_lines[0] }}"

kalsigagan

Hi @sum_giais, Thank you for sharing the above approach. It looks like it did bring us close to the results we were expecting.

sum_giais

Should be able to @borgan, you can invoke swis verbs via the REST/JSON API. @christopher.t.jones123 has pointed out all the necessery verbs, and I believe there are examples / details of creating the necessary POST requests there on the Swagger UI for those two IPAM verbs.

Not very familiar with ansible though but I think you could use any method depending on what is easiest for your environment (python, powershell or rest playbook?)

sum_giais

Glad to help @kalsigagan, those SWQL queries I think are a good starting point but you could surely add more data, columns, logic in them etc. to suite your needs.