Jfrazier ✭✭✭✭✭

not using SCM.

ditto

This sort of thing works well. xMatters is pretty much the Cadillac of those services and priced accordingly. As a note, you might check with your incident/problem management folks, business continuity as well as your physical security team. They may have an interest in such an integration or may already have a tool in…

That looks correct from what I recall.

While not as bad as when I first started at my present company were the silo's. Nobody wanted you to watch their stuff because they were afraid to air their dirty laundry so to speak. That has evolved to being sure you have the right mix of tools..granted you still have other teams trying to tell you that certain tools no…

If you look at several of the alerts logic/criteria, you may find that there is a custom property or a specific record related to each device that may point you to where they located contact info. Once you find out where, then you can work on altering that record. As a recommendation, put a little bread crumb in each alert…

and depending on the model the specific mibs are important. What are these devices and what model?

From Cisco, you can have it ship syslog data to a system or tool such as kiwi to ingest the syslog data. Then depending on which tool, you may be able to write rules to react to the event. What may be preferable and provide some reportable data is to utilize that as well as the SNMP poll for temperature, that way you can…

I have seen servers that have blue screened still respond to pings. As @"mesverrum" said, you need to be making interrogations of the server that require it to perform commonly expected actions/responses after it queries a database, queries an application, makes an API call, etc. SNMP sort of works, but gets dropped when…

Just look at physical memory utilization and swap utilization. those are the numbers that are going to be meaningful and actionable.

They would be much better off with a view into NPM so they can get better data and not have to rely on an intermediate step to get events across. SNMP is not a guaranteed method to pass alerts/events as it's protocol is at the bottom of the stack as far as priority and is the first to get dropped if things get busy. With…

Main questions is, what is the other system going to do with the event? That will be a determining factor in format and method in which it arrives. You can write the event to a logfile on the other system via several methods. There is a remote execution of a script or process on the other system, etc. Once you help with…

Excellent opportunity to share what you use the product/tool for in order to help shape the future of SAM. Not to mention you get 3000 Thwack points to spend in the Thwack store or save for a future item. Your direct input to help the direction SAM evolves helps everyone.

agreed...

opcmsg was part of the OM agent allowing a direct interface back to the mothership via a command line interface which was great for use out of a script. It only worked if the agent was up and running and events were not being buffered. Likely the best avenue would be to have said events written to a log file that Orion is…

It would probably be a good thing to generate some logging steps in the monitor so you can see what values you have at various steps...sometimes it is just simple shell games where things need to be quoted or quoted differently especially if involving directory paths with spaces in the folder names.

did something change in the environment of the id that the monitor runs under? Are all the proper environmental variables present? Is Orion passing the proper parameters?

sounds almost like the shell environment the monitor is running in is different than the edit application monitor page.

Sounds like a data warehouse solution is needed. This is something I brought up years ago on the NPM and SAM side of the house but applies to all aspects of the Solarwinds Suite.…

Are you getting any error codes or messages? What application are you running it from? Have you the ability to log the actions of the script so that you can see what data it is handling and the results of each step? Would you share the contents of the script here so we can maybe see where it could be not working as…

I also see this from time to time...I am using Chrome. There are times where I see a number by the bell and other times I don't. Usually I get an email notification before I see it reflected in the browser. I have also seen when I delete the email the number by the bell decreases...kind of nifty unless I was going to go…

I am not sure, although I suspect the Thwackadmins have been busy with residuals from the platform migration. They did a huge amount of work to get us here...I can wait a week or so for them to catch their breath. They've earned it!

It would be for rendering some pages or parts of pages. Since flash has been "turned off" by the vendor (not Solarwinds), depending on the products you are using you may or maynot see issues in how the pages display. 

Solarwinds updated products to use HTML5 in place of flash. Unless you have an older version you should be fine.

try adding the following to your alert text: Time of Alert ${Time} ${Date} ${Day}

what is in your squid.conf and snmpd.conf files? Are you using it with Net-SNMP ? what do you get when you try this? snmpwalk -v 2c -c your_community_string 10.0.0.2 .1.3.6.1.4.1.3495.1 Everything I see is that the implementation of SNMP for squid revolves around port 3401 and that a standard SNMP agent acts as a proxy.…

Start with health of AD server and then verify interface configurations (speed, half-duplex vs. full duplex, and such). Work your way down the chain once you validate AD server health. Is there a load balancer in the mix?

unfortunately that is the joys of satellite based services unless you are lucky enough to have low earth orbit birds but those are expensive to use. Anything like Hughesnet is going to have the higher ping latency. As a note, years, okay about 2 decades ago when I worked at Radioshack, we were trying to work with Satellite…

@"KMSigma.SWI" that is what we like to do as well. It then gets injested into splunk so we can pull an entire timeperiod of events to correlate with other tools like servicenow, emails and actions by other parties and such. If an alert template fails partway through, inconceivable...right?, having a beginning/ending log…

I would still recommend adding the timestamp to the event. It will give you a point of reference to the events so if you have multiple events in the same time period (say a 5 minute window) you have an absolute time for that event. It will also give you MTTI (Mean Time To Innocence) if they say they got the email late...…