Lofstrand · Solutions Architect · ✭✭✭✭✭

Maybe something like this:

Yes, NTA want the data to come from a monitored device so it can map the flow data to a node. But as said, of the broke can spoof the data, it could be done.

The "Group Details Summary Page", is the same for all groups. It just get's the information that is unique for that group. If you want to have group specific information on each page you need to work with variables. Add for example the group name into the picture names, and adjust the html code to use a variable.

Hi Even though your account has admin privileges, you can be missing this permission: As you are an admin, you can change your own account. The path you mention suggests it's the security and vulnerability page you try to open.

But if I was to set this up, I would just alert when the volume was critical. Adjusting the thresholds on the volumes themselves. Alert rule will be simple: Remember, when you create a very complex alert rule, that will be a SQL query ran towards the database at default every minute. Create smart alert with less load on…

How about this setup: (adjust the sizes so it matches your need)

Perfect! And now 2026.2.0 RC1 is out with even more fun new stuff :-)

The first part on that page, marked with a green square below, is for the AI features and that does not require a license. The second part, in red below, is for using Observability SaaS as well as your self-hosted. Connecting and using both platforms. That will require a license, as the guide says. To just use the AI…

Hi NO, you don't need a SaaS license - but you need to set up Platform Connect towards SW SaaS environment, but that can be done without license and will continue to work without a saas license.

Hi, can you explain more on what you are looking for please.

There is a widget for the node details page called "API Pollers" that show all pollers on that node.

I suggest you open a support case on this one. I guess restarting the module engine service does not help? There is a log file on the solarwinds server, on c:\program data\solarwinds\logs\orion and something like Businesslayer.vnqm…. check if you can get any clues in that one.

I think it depends on what type of maintenance you are using. Mute or Unmanage. UnManage should help in getting the availability right on each node. Not so sure that Mute affects the availability, just mutes any alerts.

Most times, that's where you set the work time. You can set the amount of time a metric has to be critical, for example, before an alert is triggered You can set during what time of day the alert should trigger You can set during what time of day each action should be triggered

Don't have a ready UnDP but take a look at this OID: 1.3.6.1.4.1.9.9.843.1.1

What alert that are important for you organization is up to you. But I do recommend that you disable alert rules that you are not interested in. To many alerts will hinder you to see the important once. When an alert comes in, and you take responsibility of the alert, I suggest that you acknowledge the alert. That way your…

What version did you download? 2026.1.0? I have them signed when I download them. Can it be that your computer is not trusting the issuer? If you right click on the file, choosing properties and then "Digital signatures" then you should see that it's signed. Digging further, highlight the certificate, click details to see…

Hi, that sounds very strange. Platform Connect should definitely not create that CPU demand. Have you checked what queries that are consuming all that CPU?` I would recommend opening a support case on this so support and potentially dev can take a look.

If you want to forward windows event logs to LA without monitoring the server with an agent, you have a few options. Like installing the free SolarWinds event log forwarder, that forwards event logs to syslog. You can also configure windows event log to forward the events to another server that has the agent. Read more…

No, not possible. If you want to grant them access to, for example, see how nodes are configured, they need node management permissions. Then they can edit as well. Perhaps some reports can show them the information they need without granting them edit permissions.

Take a look at the audit log, there you should see who logs on. What dashboard they look at is not visible. I guess you could parse the IIS log file to see that if needed.

Like this: WHERE (Caption NOT LIKE '%imbox%' AND Caption NOT LIKE '%atm%')

Not sure I fully understood the question, but here is a new version where we filter to only show nodes where the custom property field "environment" is LIKE "%LAN & WAN%". Hope that at least give you the guidance to adjust according to your need: SELECT ROUND((100.0 * COUNT(N1.NodeID) /( SELECT COUNT(N2.NodeID) AS Nodes…

Hi @KOHLIfied It's as @vinay.by says, to receive traps or syslogs, the basic LV that comes with NPM, for example, is sufficient. It does not require an extra license. If you have any of the Observability licenses, essentials or advanced, then LA is included and LA can handle more log formats and create more action types.

Like this? A KPI widget based on below SWQL query: SELECT ROUND((100.0 * COUNT(N1.NodeID) /( SELECT COUNT(N2.NodeID) AS Nodes FROM Orion.Nodes AS N2 WHERE N2.Status NOT IN (11,9,27) -- Unmanaged, external and disabled ) ),2) AS PercentOK FROM Orion.Nodes AS N1 WHERE N1.Status=1 OR N1.Status=2 -- Up or Warning

Hi @abadshahc Different vendors show VPN login failures in different ways. And different cause of issues might be logged in different ways. So I you have issues from time to time, that give you above error - then it could be a good way of doing it. I would probably use only a part of that string, like SAML Agent:…

Hi @MiltondotCom Network Sonar Discovery is not used for scanning for IP subnets, but for nodes to monitor. Either set up your IP subnets manually, and then, if you want to, let IPAM scan those subnets for used addresses. But you can also use "Discover subnets" in IPAM: There you can scan for example a router that can give…

The function "ToLocal" converts the [Time] to local by the running application. For example if you run it in SWQL studio, it's local to where you run SWQL studio. If you run the query in a widget, it's local to that web browser. (I think the explanation on the SWQL Functions web page is wrong here)

Can it be that your SolarWinds server is not trusting the supplier of that certificate? If you take a web browser on the solarwinds server and go to that url, what does it say then? Does it accept the certificate?

How the architecture should be set up depends on the requirements and the network in where it should be. But all your options are described here: https://documentation.solarwinds.com/en/success_center/orionplatform/content/orion_platform_scalability_engine_guidelines.htm