AlexSoul · The Magician! · ✭✭✭✭✭

Ok, I got this, thanks. Follow up question if I may - if you were to have SolarWinds to collect stats every minute and then fire alert based on the average calculated from SolarWinds stats data - would that be working solution?

Yes. Remember that every single line is evaluated separately and just keep in mind simple rule - when you use AND all lines must be true, when you use OR at least one must be true. In your mind you need to expand your definition to full two lines as follows - then it will be clear If vegetable is not equal to Apple OR if…

Hi Jonathan, I had same thing happened to me this morning. I am not sure what exactly has happened, but I have a feeling that connection between SQL DB and App Server got degraded somehow. MSMQ started to fill up rapidly and has reached ceiling of system disk. This actually lead to SAM crash... I have assembled simple…

It is possible, I am doing it happily now with SQL-based trigger. What is not possible in SAM 6.0 is to "mute/disable/exclude" any particular hardware components individually. Check this article and my reply: Alert Prioritising Dashboard (SWQL) for Problematic Nodes (Servers) Here is an SQL for Custom SQL Alert for Node -…

I have found an alternative which works for BODY part of the message: ${SQL:Select a_ealert_cc FROM APM_ApplicationCustomProperties WHERE ApplicationID = ${ApplicationID}} However, if I use it in address field it is being cut over at the ":" sign when I save it. How to work around it? PASTE: AFTER SAVING:

So what? ... then you should be asking same question to your management... Why do they need dashboard? Why report is not good? Think about it - report IS loading in the browser - it is "like" a page - you even can nicely prin it for your management if they want to. Keep it simple... for yourself Dashboard (in my opinion)…

lol no problem... Option 1: The Automatic Button Pusher - YouTube Option 2: Easy Auto Refresh - Chrome Web Store ‌ Option 3: * Create custom view * Add as many maps as you wish as a resources * You can add more tabs - they will rotate automatically for you * Enable "NOC View" from view "Customize Page" > submit * Then, on…

Hi jof300 Did you ever got a chance to come up with this script? If yes - would you be willing to share? Thanks, Alex

OK, that would invalidate my point #2. I cannot say for sure that Config Wizard was the one to blame, but I will keep this in mind. Thank you aLTeReGo

can't see attachment

Depending on the version of your NPM, table names will differ, although in new version some tables have been migrated to views for backwards compatibility For the nodes you would almost always need dbo.Nodes view For components the best one is dbo.APM_AlertsAndReportsData view. There is also dbo.APM_Component table with…

How about this? SELECT n.Caption, COUNT(*) AS 'Total', SUM(CASE WHEN ((ISNUMERIC(u.DaysUnused) = 1 AND CAST(u.DaysUnused AS INT) >= 30) OR u.DaysUnused = 'Never') THEN 1 ELSE 0 END) AS 'Unused' FROM UDT_Port p JOIN Nodes n ON n.NodeID = p.NodeID LEFT JOIN UDT_UnUsedPorts u ON u.PortID = p.PortID GROUP BY n.Caption Output:

Interesting... what field and from which table you use to report on Last Change? Also, just sanity check - do you have correct system date on your app server?

Then you need to understand what is the reason for them not wanting to do this. Maybe they have something in mind and you can help them to do it even better then they envision it. At the end of the day, for them, it is an output that matters, not implementation. However, for you implementation is also important and more…

Well done, I am glad to hear this has worked for you First, go back to your report and under FIELD FORMATING tab select ICON tab and assign Format = "Icon" and Icon Type = "Status" - this way you will see actual icon, rather than "Warning.gif" Second - check what you setting you have for FLAPS column. It should be Format =…

no, you won't. Script will not delete any existing dependencies. The idea behind my naming convention is: 1. First, we prefix name with "auto_" to indicate that it has been automatically created. 2. Then, we have either letter "n" if parent is node or "g" if group. 3. Then we have ID of the parent. 4. Then we separate them…

Ye, no problem I have managed to setup traps which go through IPMI, which is a Supermicro's version of BMC (open source software). Ideally I would want to poll stats, rather than waiting for traps. So... keep digging...

Yep, that's true, for ICMP nodes this will be blank. Hmmm.... As far as I can see there is no indication in Nodes table for ICMP nodes to say if they have ever been ping-able. You may need to create your trigger with Events instead. I would probably take SQL approach by selecting down/unknown nodes from NODES table and…

I'd like to pull in these stats with SAM to be able to have historical track record and possibly alert on those - has anyone been thinking or done anything like that along the same lines? Are these counts available over WMI/SNMP somehow? [extract from above]:…

Why do you want to have your date/time in text field? Is this because you already created text-based custom property? You can have date/time-based custom property as well and in latest NPM just simply use action trigger to trigger update of this custom property with current date upon node creation. I haven't done exactly…

Have you ever figured this out?

Did you try web-based reporting? There is an out-of-the-box report for it, it is called "All Active Alerts". I suggest you create a copy and fine tune to your liking. Let me know if anything is not quite working there - we will look at it further Here is demo:…

Not to say that it is impossible, but rather might be quite complex to setup. Logic would probably goes like - fire up an action in Reboot alert to run a script, which will in turn access server logs and extracts last event that has this information. Then pass it back to the alert and inject this info into email body... I…

Yep, I just would like to add that this is our number one rule for any alerts - as soon as any alert triggers - we execute NPM log action with the following (each bullet point is a separate action). NODE: * N:${NodeID} | ALERT | Rule: "${AlertName}" | Triggered: ${AlertTriggerTime} INTERFACE: * N:${NodeID} | ALERT |…

1. Would you try to change "Default Zoom Range" on the export chart to be the same as Time Period - in your case "Last Month" 2. Also, from your first chart try to go to EDIT and set default zoom range smaller (or the same) as your time period sorry, correction above, it is already smaller. Hmmmm... I was trying to…

Good question. I personally would not do it as high level of discards and errors will indicate potential problems even for Windows/Linux serevrs You can play with alerting logic and see where Windows/Linux come up, For example below is a filter based on "Vendor": You just need to be careful not to exclude inadvertently…

Ahh, ye, you are on 11.0 - it is easy then. As per your example above all alert logs are sitting nicely in "AlertLog" table I had to ask you first what version of NPM you are on... In the latest release DB Schema was change and AlertLog table is empty now... Hope in 11.5.2 (as per Lada's reply here) we will get them all…

Threshold level itself has nothing to do with SolarWinds. It really depends at what level your Network Team wants to receive an alert. There is no recommended value. In my environment I usually setup 1000 discards and 10 errors per hour as default thresholds. But once again, this is individual to network team, work…

I would love to see how this is done as well. Are you able to give us some hints?

run below command on your switch: show interfaces counters errors