Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Is there a metric that records when a node changed status?

I want to build a list of all the down nodes, and I want to include the down time in that list. Some nodes have been offline since I got hired in April this year so I'm building a list of nodes we need to clean up in solarwinds.

How can I build a list of all nodes(included muted/unmanaged) that are either status code 0 2 12 and include the time that they became that status code? Surely there has to be some metric that says node1234 went from status 1/online to status 2/down

But I cant find it

Find more posts tagged with

Accepted answers

All comments

bobmarley

Below is what I replaced my Down Nodes resource with. It includes the time the node went down and a Custom Property called _Group.

You will need to change that custom property in the query to match whatever one you would like, it was added so I know who the owner of the device is.

This only displays down nodes but you can change the query to display other status in the Where statement.

SELECT 
    NodeName AS [Node Name],
        '/Orion/images/StatusIcons/Small-' + StatusIcon AS [_IconFor_Node Name],
        DetailsUrl AS [_LinkFor_Node Name], Nodes.CustomProperties._Group as [Group],

MAX(tolocal(DOWNEVENT.EVENTTIME)) AS [DOWN TIME]
FROM ORION.NODES
INNER JOIN ORION.EVENTS DOWNEVENT
ON NODES.NODEID = DOWNEVENT.NETWORKNODE
WHERE STATUS = 2 
GROUP BY NodeName, StatusIcon, DetailsUrl, Nodes.CustomProperties._Group

ORDER BY [DOWN TIME] DESC

Below is how you can add this to your dashboard

How to add a Custom SWQL Widget to your dashboard - Forum - Network Performance Monitor (NPM) - THWACK (solarwinds.com)

bobmarley

SELECT 
    NodeName AS [Node Name], 
        '/Orion/images/StatusIcons/Small-' + StatusIcon AS [_IconFor_Node Name],
        DetailsUrl AS [_LinkFor_Node Name],

MAX(tolocal(DOWNEVENT.EVENTTIME)) AS [DOWN TIME],Status
FROM ORION.NODES
INNER JOIN ORION.EVENTS DOWNEVENT
ON NODES.NODEID = DOWNEVENT.NETWORKNODE
WHERE STATUS NOT LIKE 1 
GROUP BY NodeName, StatusIcon, DetailsUrl, Status

ORDER BY [DOWN TIME] DESC

This one is without Custom Properties and includes only nodes that are not UP as well as lists the status codes

AlabamaMadman

This seems to be what I need so thank you, but I'm confused.

When I run this block, it doesnt bring up other nodes that I know have status 2 in solarwinds:

SELECT 
    NodeName AS [Node Name], 

MAX(tolocal(DOWNEVENT.EVENTTIME)) AS [DOWN TIME],Status
FROM ORION.NODES
INNER JOIN ORION.EVENTS DOWNEVENT
ON NODES.NODEID = DOWNEVENT.NETWORKNODE
WHERE STATUS = 2
GROUP BY NodeName, Status

ORDER BY [DOWN TIME] ASC

I have a down AP called AP10. This doesnt show up on the list when I do STATUS = 2 or STATUS NOT LIKE 1.

When I run SELECT Caption,Status,StatusDescription,DetailsUrl from Orion.Nodes where Status = 2

The list is 16 nodes long and it includes ap10.

When I run the select at the top, the list is 14 nodes long.

I think it has something to do with the event.eventtime because when I get rid of that, AP10 comes up. When I add it, AP10 does not come up.

sguido

I use this in my emails to display how long the device was down. You may be able to use this to convert the time stamp into something more meaningful.

Object was down for ${SQL:Select '${N=Alerting;M=Downtime}'/1440} Days ${SQL: Select '${N=Alerting;M=Downtime}'%1440/60} Hours ${SQL: Select '${N=Alerting;M=Downtime}'%1440%60;} Minutes

bobmarley

On my DB the ORION.EVENTS table only goes back about 60 days and I think I bumped up mine from the default a long time ago, not sure. It is possible the node went down and it's no longer in the ORION.EVENTS table.