Odd Issue with PowerShell SAM Monitor on one Node

Fun one off issue that I am not sure if it is the node or the monitor.

I have a PS monitor setup to check a folder for the existence of an XLS file. I have a Prod and Stage instance of this monitor that is setup on Prod and Stage servers.  The monitors are setup identical the only difference is the name of the monitor. 

Both monitors are set to Inherit account from node.

Both nodes have the same service account setup on them. 

The Stage Monitor is currently responding with an Unknown status.

If I go into SAM and find the monitor to test when I test with the Stage Node it says "unknown user name or password"

The account that SAM should be using is the same account that the node uses to report on WMI and it is showing up.

I can go and find a different application monitor and add it to the Stage node and it will work like it should.  I know the Solarwinds account works. 

I tried adding the Prod monitor to the Stage server and it failed as well with 'unknown user name or password"

I removed the monitor and added it back and it is still showing as unknown. 


This seems like I am missing something.  Or maybe the node is having a Monday.  Thanks - Dave

Parents
  • This issue raised its head again today but it took out a server in the process.

    To the best of my knowledge nothing changed on these nodes. I working on checking out what patches were applied this month to see if MS had its hand in this.

    I logged in this morning and one of my nodes was showing two monitors as unknown and two monitors were green. 

    The unknown monitors are both PowerShell monitors and the ones that are still working are WMI monitors. 

    Server was completely locked this morning and I had probably 100's of wsmprovhost.exe on the node and they were all tied to the Solarwinds Service account on the server.  I removed the monitor and will be rebooting the server.  Any ideas of what direction I need to look to and figure out what is going on? 

Reply
  • This issue raised its head again today but it took out a server in the process.

    To the best of my knowledge nothing changed on these nodes. I working on checking out what patches were applied this month to see if MS had its hand in this.

    I logged in this morning and one of my nodes was showing two monitors as unknown and two monitors were green. 

    The unknown monitors are both PowerShell monitors and the ones that are still working are WMI monitors. 

    Server was completely locked this morning and I had probably 100's of wsmprovhost.exe on the node and they were all tied to the Solarwinds Service account on the server.  I removed the monitor and will be rebooting the server.  Any ideas of what direction I need to look to and figure out what is going on? 

Children