Lofstrand · Solutions Architect · ✭✭✭✭✭

Hi, if I understand you correctly you need a report showing all interfaces on all switches that you have in NPM, even the interfaces that you don't monitor as of now. That is not possible with NPM. NPM only have information about the interfaces you have chosen to monitor. You can potentially create a couple of Universal…

Suggest you create your own custom table widget with all the information you want. With that, you have all the possibilities to add whatever you want. There are a lot of examples of such tables here on thwack.

If you are monitoring event-id's with a normal SAM Event component, that will not be affected. It's not using the event log forwarder.

To investigate this further, I suggest you open a support ticket. That way this can be investigated further.

AI generated answer? Well, nr 3 is wrong. gMSA can be used in the SolarWinds platform

Hi NKSharma gMSA is a very good way of handling the account that is used while connecting to the monitored targets. But the required privileges are the same as with any other account. The permissions required does not change, just the way you enter the account credentials. So, normally you will require administrative…

Paste the entire contents of the downloaded JSON key file into the Private Key box—including the opening { and closing } https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-cloud-configure-gcp.htm Here you can read more about the permissions required on the GCP side. For troubleshooting, check…

I agree with @user42 , plan for an upgrade. A lot has happened since that version. This is how it looks like now in 2026.4:

Good idea, done now! New Orion SDK out now – 3.4 - THWACK

As of SWQL studio 3.4, released last week, string_agg is also added to autocomplete. Get the latest version here: https://github.com/solarwinds/OrionSDK/releases

AppInsight for SQL will potentially give you some metrics though not all as it also relies on WMI and host metrics. API rest pollers against azure will give you some and normal SQL component queries will work. But if you want deep down info with out of the box support for SQLMI, I really recommend DPA.

Hi, Global Search is not looking at devices serial numbers. If that is needed, a custom query table widget can be created that includes serial numbers.

Hi, you are mainly correct. One thing to add though, timing on polling intervall and alert trigger intervall are not aligned. Meaning that for example, first poll might happen at 10:05 and first alert evaluation at 10:09. Second poll at 10:10 and second alert evaluation at 10:14.

You can write your own queries for monitoring for example long-running queries or replication health, as long as you "ask the question" in the right way. Have a look at this article I wrote some years ago, can give you some inspiration: SQL Query monitoring in Orion SAM – best practice - THWACK

Hi, are you talking about doing this in NPM or IPAM? I would, in both products, create custom properties where you specify what organization the IP belongs to. Custom properties can then be used in alerts, reports and dashboards etc. Custom properties can be updated on several entities at the same time, or through the API.

Hi I would check two things: First the log file for that application monitoring. Look at the MPE at C:\ProgramData\SolarWinds\Logs\APM\ApplicationLogs, there is one folder per application ID. Enable debug monitoring on the application if needed. Does those logs show anything? Also, I would check if you have any reverse dns…

Almost 100k rows in one report, that is not little. If you tweak the report into showing less lines, does it work then?

Hi @zap123 Have you checked on your solarwinds servers, how is the memory pressure? Are these reports very large? Can you narrow down the timespan, if applicable? I would recommend opening a support case if you don't see any obvious when testing the above things.

Hi, looks like this could be a known bug, fixed in 2026.4. I suggest you ask support about it, refer to his issue: OO-53534

Hi Are you talking about custom SQL Views, in the database? If so, they will not be available via the API. You can only access original things in the solarwinds database, no custom views, tables or other databases.

INNER JOIN ( SELECT N.Uri FROM Orion.Nodes as N WHERE N.Vendor='Cisco' AND (N.Caption LIKE '%DC1-R0%' OR N.Caption LIKE '%DC2-R0%') AND N.NodeID NOT IN ( SELECT L.NodeID FROM Orion.OLM.LogEntry as L WHERE L.MessageDateTime>ADDHOUR(-1,GETUTCDATE()) GROUP BY L.NodeID ) ) AS T ON Nodes.uri=T.uri

Hi @Strux I have such an alert ready for you. You need to use a "Custom SWQL alert" for that. Looks like this: The code in be customizable part looks like this: INNER JOIN ( SELECT N.Uri FROM Orion.Nodes as N WHERE N.CustomProperties.City='Örebro' AND N.NodeID NOT IN ( SELECT L.NodeID FROM Orion.OLM.LogEntry as L WHERE…

If it's certificate information you want to get an output on, why don't try creating a SAM Powershell component. That powershell component can get out the certificate information and that can be parsed into a report or what you want.

If you send the windows events to OSH, you can see them under "My dashboards" / "Logs" / "Log Viewer". On the left hand side, filter on the type of logs you want to see.

Hi @quannm546 Try below SWQL query in a Custom Query Widget SELECT TOP 10 I.Node.Caption AS [Node] ,I.Caption AS [Interface] ,I.LastChange AS [Last Change] ,I.node.DetailsUrl AS [_LinkFor_Node] ,I.DetailsUrl AS [_LinkFor_Interface]…

Hi, I don't think it's possible to get out the actual content of the [content] column, as it's stored as binary. SWQL does not have that capability.

Try this to start with. It will replace the credentialID for nodes with a certain custom property value. Find the new credentialID number you want your node to have and add the Custom property value to search for (or add your own filter). This only updates SNMPv3 RO credentials. Can be that you have RW credentials. Then…

You can try running below SQL query against your database. Will check if where a username is used. Can be more places as @cnorborg says. Another place can be vmware/hyperv monitoring. SELECT c.ID AS CredentialID, c.Name AS CredentialName, c.CredentialOwner, c.CredentialType, cp.Value AS Username, -- Node usage n.NodeID,…

Try to use this in a custom query table widget. SELECT C.Application.Node.Caption AS [Node Name] ,C.Name AS [Component Name] ,C.DetailsUrl AS [_LinkFor_Component Name] ,C.MultipleStatisticData.Label ,C.MultipleStatisticData.StringData ,C.MultipleStatisticData.NumericData FROM Orion.APM.Component AS C WHERE C.Name='SSL Cert…

You can start troubleshooting at the following logs on the main server: C:\ProgramData\SolarWinds\Logs\Orion\ActionsExecution.log C:\ProgramData\SolarWinds\Logs\Orion\ActionsExecutionAlert.log They might be able to tell you if there is an issue on the solarwinds side.