ET ✭✭✭✭✭

Hi, small question. Does it happen always, or randomly?? thanks

Better would be if you upload here your alert configuration (either exported or just screenshot of your trigger condition) and I will tell you how to modify it.

Hi, the query is pretty simple and should work. In case there's problem with locking you can try siffix WITH NOLOCK SELECT TOP 10 Nodes.NodeID AS NodeID, AVG(ResponseTime.Availability) AS Availability FROM Orion.Nodes AS Nodes INNER JOIN Orion.NodesCustomProperties AS Custom ON (Nodes.NodeID = Custom.NodeID) INNER JOIN…

ad 1 - resource usage) JobEngineWorker serves as a host for module's jobs. Any of these jobs can cause lack of CPU or memory. It's important to find out culprit jobs here. Which modules you do have installed? Some jobs are cheap, but others are expensive and a bit greedy. ad 2 - versions ) Reason is backward compatibility.…

Hello, ReportWriter is generic tool which is able to compose SQL queries dynamically according virtual db schema prodived by modules. So, it's able to use only items which is defined in this schema and it can combine only items if there is defined some relations between them. In opposite, web site uses direct access to DB,…

Yes, unknown is from dependencies, but also unknown state is in case node went from unmanaged to managed and we don't have first poll yet. You can simulate down node with Network Emulator Toolkit, this you can install on your orion server and simulate that node doesn't respond on ICMP, SNMP, DNS, ... .

100 messages is really nothing, I expected something like like thousands. Your poll interval is 10 hours, a lot but .... overall nextPoll should not be in past. You can invoke PollNow on this node, and see if NextPoll is changed to correct value. Is this node currently Up or Down ( real status)? Do you have same time on…

regarding filtering, I would like to have whole traffic, because as someone mentioned here, it can be related to DNS or something else on net ( we can set up ring files for that, to do not overload IO with wireshark). Also it would be great to have two wireshark traces from diferent machines (polled machines, not polling…

Once the SDF is corrupted it doesn't have self repair mechanism. You need to replace it again, and after that test with disabled antivirus. In case you are able to reproduce it regulary, please open a support ticket and we will look at it closely. Thanks

Hi, I think yeah. But it's just table with raw data inside. You can export it for isntance to excel and make chart easily there. ReportWriter can do only tabular reports. The ReportWriter is very easy to use, just select items which you want from DB, and it will find the way how to retrieve data :) Regards

I understand your concerning here. It's not very clear that these 2 choices are tightly connected. So the worst and not recommended option here is: * Process all expired IPs * Never stop processing expired IPs (Not recommented) Because this could block your SQL for a long time (unpredictible time). And yeah, this clean-up…

Hi, I would like to ask, is this issue still active? Have you tried to upgrade to NTA 3.5? Have you contact our tech.support? Can you please provide us Diagnostics to analyze this strange behavior? Thanks

of course you can use any property, ${Contact} was only example. You can create own property if you need.

Hi, our polling engine has maintenance interval 12 hours, so it can be connected somehow with clearing our local storage. Can you please check directory C:\Document And Settings\All Users\Application data\SolarWinds\Collector\Data\ here are two files - jobsTracker.sdf and pollingController.sdf. What's their size? Thanks

In case you use Full Recovery model it's no wonder that your transaction log is growing a lot. NTA provides very massive bulk inserts of netflow data, and with full recovery model all these operations are logged, which can cause your log grows. You can open a support ticket, but I really think it's caused by full recovery…

You need to have access to Bridge-MIB. Check these steps for troubleshooting.

nono, have you tried what I proposed? Don't create action run VBS, but run external program.

Actually no, you have only Orion Core which is common runtime. Allows you to poll Nodes and Volumes. NPM - Network Performance Monitor allows you to monitor Interfaces and other network capabilities. This is how it should look like in case you have NPM.

Can you post here values from table Nodes for this node?. I'm interested in columns LastBoot, SystemUpTime, LastSystemUpTimePollUtc

This is weird. Now it's question whether alert was triggered, but failed send email ( I saw that, with some security issue under SYSTEM account) or it doesn't work at all. Please check Active Alerts and Events site, whether you can find information about fired alert. In case you don't find this information, please open a…

ok, seems that you have problem in database where group status isn't properly updated for advance alerts. Please follow these steps: - stop all solarwinds services - open database management and run command DELETE FROM ContainerMemberSnapshots - this is safe operation. It will clear computed statuses on groups for…

and LastBoot column is wrong? That's weird.

There is workaround for this. You can assign netflowservice to some service group which is started after regular start. See registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder And than in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetFlowService is value DependOnGroup where you can…

You don't have event about "Node removed" even if you simulate that operation. Hmmm I would open support ticket in that case. Maybe you have suppressed this type of events (accidentally) and support will enable that in that case.

Just open Advance Alert Manager -> Configure Alerts -> New -> In Trigger Condition select "Custom SQL Alert" as condition specify WHERE LastSystemUpTimePollUtc < DATEADD( minute, -15, GETUTCDATE()) AND status = 2 This will trigger alert in case node has status DOWN ( that's status = 2) and SNMP uptime poller is…

No sure how looks your alert condition so I can't tell. But suppress alerts for unreachable status is ordinary operation. That's actually reason why we have unreachable status and possibility to define dependencies. That you are not bothered by alerts which are just consequences of events on parent node. "Summary email or…

And is your option [Allow monitoring of flows from unmanaged interfaces. Flow packets defined with only one unmanaged interface will no longer be discarded automatically.] enabled? This is disabled by default, so maybe ..... thanks

Hi, Is it nextPoll changing or it gets stuck at 10:08? If it's moving, probably you have overfilled Message Queue where we keep polled data. Try to open message queue and check how many messages are there. run compmgmt.msc go to services and applications -> Message Queuing -> Private Queues check queue…

I see what you are trying to show now. You are missing event "Node ... is Down." This event is suppressed in case previous status of node was "Unknown". That's the only situation. Are you able to reproduce this issue also in case node was "Up" previously? If so, I would open a support ticket so we can look closer into…

just for sure, you have to change property <enable> from false to true, right? And this information is cached for whole app domain, so maybe you need to restart IIS App Domain, because it is loaded only once (but really not sure) Thanks