John W Johnson · Systems Engineer

What if.... I simply wanted to remove the BCC from all alerts all at once? # Import Module Import-Module SwisPowerShell # What server are we connecting to? $server = 'solarn1r' # Get Creds $creds = Get-Credential -Message "Enter your ORION CREDS" # Connection to SwisConnection $swis = Connect-Swis -HostName $server…

Where can i get the book?????

OK... the start of this query was online somewhere...i have made it my own... OF COURSE>>>>> IF YOU USE THIS IN A LIVE ENVIRONMENT, it is not supported by SolarWinds! USE AT YOUR OWN RISK... Now, after saying that... you will most definately have to modify this for your environment..as i am using some pulling down some…

How would you convert the date to show only for the Month of January 2022?

I closed all connections and restarted swql... i logged in with a different user and it is working... Thanks for your assistance!

Yes, the result when doing that is EXACTLY like using the SQL Query... Now, how do i get swql to work the same way?

hmmm if i try to change the connection type.. the only other type that tries to work is 'orion (v3) over https... but then i get an error 'Server Certificate has problem none.'

in swql, i am using server type 'Orion (v3) AD and doesn't require credentials

Ahhh... good question... let me check 

2022.2

Also...something weird... in SQL, i can pull thousands of rows ...if i take out the 'top 1000' , however, if i take out the 'top 1000' in swql, i only pull 1530-1542 rows...

If i comment from where to the end... i get data ... but is only user login, user logout, user account changed, WHICH would be the 1, 2, and 164

This works .... in sql, but like i say...i can't get actiontypeID to give me a 25 in swql it gives me 1, 2, and 164 only... What i am trying to do, is make a swql report to see the date, time, user and node that was added... I created a great report using the custom sql report with the above sql query. but i want to create…

SELECT [AuditEventID] ,[TimeLoggedUtc] ,[AccountID] ,[ActionTypeID] ,[AuditEventMessage] FROM [SolarWindsNPM1].[dbo].[AuditingEvents] WHERE ActionTypeID LIKE '25' AND TimeLoggedUTC Like '%2022%' AND AuditEventMessage LIKE '%istat2012test%'

Sorry... I had mentioned if i added that to the query, i receive no data at all The above is what i get when i use your swql...

Simply AWESOME! Greatly Appreciated... Would you possibly have time to advise how to add a complete new table?

I will try to adjust your report for my needs..thanks so much...

Unfortunately, your custom properties are different than mine, so I get an error... Is there any other way to share your report?

Do you have nodes in SolarWinds that are in the site 'Nottingham' ? If so, you can click on that node to get to the node details page... In the node details page, you will see a banner on the left side. If you hover on this toolbar, it will expand to show you interfaces... If no interfaces are listed in the interfaces…

I actually have a SQL Query that gets me so close... it just lists everything... DECLARE @StartDate DateTime DECLARE @EndDate DateTime SET @StartDate = CAST((ROUND(CAST(GetDate() - 7 AS FLOAT), 0, 1)) as datetime) SET @EndDate = GetDate() SELECT Interfaces.InterfaceId, Nodes.Caption AS NodeName, Interfaces.Caption AS…

There is already a report in SW...but so much devices with no data...how to remove those?

Ah... with the last change I made it is working!!! Thanks for your help!

But it shows no data...

Here is what i tried last... select n.caption as [Device] -- shows the current status icon --, '/Orion/images/StatusIcons/Small-' + n.StatusIcon AS [_IconFor_Device] -- makes a clickable link to the node details , n.DetailsUrl as [_linkfor_Device] -- shows the timestamp of the down event, if there is no timestamp then is…

Latest Updates to syntax ... select n.caption as [Device] -- shows the current status icon --, '/Orion/images/StatusIcons/Small-' + n.StatusIcon AS [_IconFor_Device] -- makes a clickable link to the node details , n.DetailsUrl as [_linkfor_Device] -- shows the timestamp of the down event, if there is no timestamp then is…

If I move it ouside the parenthesis, it bypasses the AND statements showing PACS devices and BIOMED devices again...

It is also showing nodes up since jul 6...

Also, giving false positive in this query showing CCEprd1 as 'Still Down' above, but this node is actually up... IDEAS?

Ah.... I was able to get it like this... AND n.CustomProperties.INFRASTRUCTURE_TEAM <> 'PACS'