Lofstrand · Solutions Architect · ✭✭✭✭✭

Hi @"trilobite_rex" A couple of things I see is that the AssignmentName is often something like "ifHCOutMulticastPkts on lab-nexus-3000". Not just the UnDP's name. And all the conversions should not be needed. Also worth noting is that simulate alert does not always work. If in doubt, adjust thresholds so you get a "real…

To only include interfaces with a specific custom property, add that property to the where-filter Below is an example where I have added a filter for the interface custom property "Carriername" should be equal to "xx". Just adjust this to your need. WHERE E1.NetObjectType = 'I' AND E1.EventType = 10 -- Interface Down AND…

Try this one: SELECT N.Caption ,N.ObjectSubType AS PollingMethod ,Count(P_CPU.PollerID) AS CPU_Pollers ,Count(P_Mem.PollerID) AS MEM_Pollers ,ISNULL(I2.qty,0) AS Interfaces FROM Orion.Nodes AS N LEFT OUTER JOIN Orion.Pollers AS P_CPU ON N.nodeid=P_CPU.NetObjectID AND P_CPU.NetObjectType='N' AND P_CPU.PollerType LIKE…

No, I don't think you need to delete the old before adding the new. 

Sorry, it's a bit to easy :-) Just add the license, SOMETIMES it want a restart of solarwinds services but most times that is not necessary. Could take a few minutes before all new features are fully started in the backend. But normally, just add the license and take a coffee - then enjoy the new possibilities 

Hi Go to license manager, on the settings page. Add the HCO/Observability license (I'm almost 100% sure all other licenses will be automatically removed then). That's it!

Everything in the first box is the "variable". So the part that starts with ${SQL:... , add that to wherever you want that information to be. The second picture is an example of how it looks like if you add the variable in the alert Like this:

There doesn't seem to be any prebuilt, but we can always build one ourselves with "Custom variables". Here we write our own SWQL or SQL code to get the data we want. The issue here is that a variable can't include several rows. So a normal query would here give us one row per member and that's not allowed. We need to merge…

Hi @"ojoj" How about using the variable "Group Stautus Root Cause", ${N=OrionGroup;M=GroupStatusRootCause}. That will give you a list of all group members that is "causing" the group status.

Hi, It might be both in db and file. Background maps will be stored on disk and the map config will be stored in database. If you look in MS SQL, not SWQL, you have the tables dbo.maps_*. Yes, it's several tables. dbo.maps_projects is the main one. Other tables might have data depending on what features your map has. In…

No, I haven't heard about that before. Suggest you log a case with support so they can have a look and potentially create a fix

It's as @"bobmarley" wrote. There you have all the syslogs and traps. To know what devices are sending log you can start with below query that shows how many messages that are sent per device. (Remove "TOP 20" to see all devices) -- Traps and syslogs per node SELECT TOP 20 COUNT(L.LogEntryID) AS NrOfMessages…

Have you tested to create an alert rule like this:

If you give a person administrator rights within SolarWinds Observability – Self Hosted, or NPM, that is the required permission to be able to adjust accounts, that person can change all accounts. Including their own. You can't filter what accounts that person can adjust. 

Here you go @"naveensingh43" (+) Mute interface due to Neighbor down and unmanaged - Scripts - The SolarWinds Platform - THWACK

I have a script that Mutes an interface if it's connected to a device that is muted - and Solarwinds topology knows about the connection. If that is what you are after I'll upload it here on thwack.

Hi, controls if the node should be in the vulnerability calculations found on this page: If you change the value, that change will be reflected upon the next CVE Node matching run (once a day by default)

If I need to have groups, many times I build the dynamic membership queries on the Custom Properties, CP, values. To handle the Custom Properties values automatically I use scripts, as you said (and didn't like) but I also sometimes create alert rules that sets my values. I call the alert rule something like "System -…

Ok, you need to first create some monitoring on failovers. So that SolarWinds know a failover has happened. I see two simple ways here: Create a Windows Event Log Montor - documentation.solarwinds.com/.../sam-windows-event-log-monitor-sw3329.htm Create SQL Component monitor…

Ok, the next step is to see if the monitoring of the SQL failover is working. How are you monitoring that SQL has done a failover? Did monitoring see the failover? What kind of SQL HA is this? WFC or AG? When we know that we can continue troubleshooting.

Hi, I have no idea on how GovNotify works but I would start to look in the alert logs. If the alert triggers when the failover occurs, then the actions should trigger at the same time. See these logs for issues C:\ProgramData\SolarWinds\Logs\Orion\ActionsExecutionAlert.log…

"oid not supported" means that the Cisco device is not supporting that oid. You can try to do a SNMP Walk to see what values it supports. Can be alot to look through though

... and you can enable/disable this feature if you like. Take a look here: Auto populating Virtual Machine Custom property - Mapped from groupings - Forum - SolarWinds Observability Self-Hosted (formerly known as Hybrid Cloud Observability) - THWACK

Hi, I haven't done anything related to this myself but looking around there seems to be a couple of possibilities. BUT, the node has to be added to UDT from web gui first according to this rather old post: (+) Add UDT Ports via API (Orion SDK) - SolarWinds SDK - The SolarWinds Platform - THWACK On this page, Swagger UI,…

Most likely, the website is only responding on https and not http. The https check is disabled so it didn't even test this. Try enabling that component.

A trick I many times use is just adjust the "Powershell - Windows Url". Change it from https to http. As WinRm is encrypted in itself, the need for double encryption might not be needed. Change to: http://${IP}:5985/wsman/

Hi, have a look at Orion.Credential | Orion SDK Schemas There you can read some about the API for scripting this. Another option is to use gMSA accounts instead. Then you don't have to rotate passwords. Use gMSA accounts for Windows polling

If you want SWQL dates in local format you can just add something like this: ToLocal(MyUTCDateValue) as LocalDate The function "ToLocal" adjusts the UTC datetime to browser local time.

Correct, you might need to tweak the date intervalls a bit so you see what you want. Give it a try, if needed I can assist again.

Hi I think we have to wrap the first query in another SELECT part, so we can have a WHERE -clause on the duration. Like this where I on the last line adjust the number of minutes the down time has to be: SELECT T.[Node name] ,T.[Start of Downtime] ,T.[End of Downtime] ,T.[Duration] FROM ( SELECT N.Caption AS [Node Name],…