Deltona ✭✭✭✭✭

That user doesn't need any specific permissions. All it needs to do is to authenticate in order to validate interoperability (version).

Start by navigating to the node's Node Details view. In there, find the Node Details resource and copy the SYSOBJECTID string. On the SolarWinds Platform server, open up Universal Device Poller and click New Universal Device Poller. In the OID: field, paste the SYSOBJECTID string that you copied earlier. If your model is…

Thank you! Any chance of getting an example for usage?

True. If STIG is the standard you're implementing then this needs to be enabled. In that case, prepare for a barrage of object access events and increased agent resource consumption. Add at the very least 2 additional cores and 2 extra gigs of memory to the monitored DCs. Double that if you have Sysmon running as well.

Hi, You could try changing the retention period to 1 day then go back after purging has taken place, and set the retention back to previous values.

Try this in your Custom Table resource (SQL Query, not SWQL) SELECT Name 'Alert Name' ,EntityCaption 'Object of Alert' ,COUNT(1) 'Times Alert Triggered' FROM AlertHistoryView WHERE EventTypeWord = 'Triggered' AND ((Name = 'Cisco Store Router Down') OR (Name = 'Meraki Device Down (P3)') OR (Name = 'Meraki Device Interface…

You can follow the recommendations listed here: https://support.solarwinds.com/SuccessCenter/s/article/Audit-Policies-and-Best-Practices-for-LEM?language=en_US Pay special attention to the two policies that should NOT be configured on domain controllers: Default Domain controllers policy Select Success and Failure for all…

You can, if you have Sysmon installed and configured on the endpoint to track process and command line. You then need to enable the Microsoft sysmon connector on the node in SEM, in order to process Sysmon generated events.

Here are my settings: Left Y-Axis = Latency with DATETIME as Time Column Right Y-Axis = Loss with DATETIME as Time Column Group/Legend = Destination Keep in mind that your sampling interval should be equal to or greater than the NetPath probing interval.

I second using Notepad++. Alternatively there's also a great compare function in Visual Studio Code.

True, although in my particular environment, that would trigger a security incident since all ps actions are being monitored.

If you get "The file C:\path\to\file\func_ModernDashboards.ps1 is not digitally signed. You cannot run this script on the current system." due to the execution policy on the local machine being set to RemoteSigned, then unblock the file first by issuing Unblock-File -Path .\func_ModernDashboards.ps1

Is the laptop that has the NetPath agent installed, added to Orion using the VPN address or a LAN address? If it isn't added, you can try to change the NIC metric so that the VPN NIC has a lower metric and it will therefore be used first. You may have to uninstall, reboot and reinstall the agent after changing the metric.

Hi Amit, What would I need to add and where, in order for this to only apply to P:\ volumes?

What are the log retention settings set to and have they changed recently?

Are you monitoring the interfaces used by the connection between the two nodes?

Are legacysyslogservicedisabled and legacytrapservicedisabled checked in adv config?

Hi @"KMSigma.SWI", Soz for the very long time to reply. We've been back and forth internally contemplating what, how and when to update data into which format and we have concluded that the attached file would best represent the final output. 1. No we're not anymore. 2. Please find it attached. 3. Yes, only custom…

Hi there, Did you ever get to the bottom of this?

I am saddened that you'll be leaving us, but at the same time very grateful and happy for the time and effort you've spent on thwack and the community. The bar has been lifted very high since you came on and I'm definitely envious of whoever gets your time and attention next. Thank you for two great years and best of luck…

Hi, It would be great if we could get a guide with pictures detailing how this can be achieved. How do we monitor specific Windows events that also look for specific text in the event.

Hi there, I am not the most qualified person to provide a definitive workaround for this, but given the current situation, I guess any help is some sort of help. I think you will be able to resolve this issue if the user defined in Configuration Wizard has been granted sysadmin privileges. That is the user defined in the…

Solution is here: Solved: Database configuration failed after clean install ... - THWACK (solarwinds.com)

Hi there, It would be awesome if you could share the script that was used to resolve the issue. @"dunky2k" 

This is still an issue. Following the latest update all manually entered hostnames since the last update are lost, gone. This i

Network Sonar will also discover all other IPs configured on a single node. FYI

That did it. Thanks!

Sorry my bad. I placed it in a Custom Table resource instead of a Custom Query. It is working now. Thanks! EDIT: Does it only show UnManaged or Muted nodes if they have a Note added? I've noticed that this query doesn't display the same results as the previous one in the thread. Nodes that are muted but don't have a Note…

Is the fix a Buddy Drop or SQL statement?

Thanks!