Lofstrand · Solutions Architect · ✭✭✭✭✭

Hi @KOHLIfied Palo Alto Rest API normally listens on TCP/443. The permissions required are listed here: https://documentation.solarwinds.com/en/success_center/npm/content/npm-monitor-palo-alto-firewalls.htm HOW the user is created in Palo Alto, I have no idea ☺️

@NVSteven You could make use of gMSA accounts, that way you don't have to bother about passwords: Use gMSA accounts for Windows polling @ajbmatt There are attempts to use WMI without local admin. Some say it works. See more here: Has Anybody Ever Gotten WMI to Work without Admin credentials - THWACK As normally WMI…

Hi @pcheh For most APC UPS devices, you shouldn't be needing to create Universal Device Pollers, UnDP, as APC is supported out of the box. You should be able to see info like this: A "list resources" on the UPS should give you a box to tick for these metrics. If you still need some UnDP's, you have to also add the widgets…

Hi @jere557 You could add a PowerShell based monitor that asks your AD how many accounts has passwords that expires within 30 days. When you have that information within SWOSH, you may create an alert on it.

Hi @thealexo Interesting approach. I think it will work! Just mind to clear the license store as you normally do when migrating to a new server. Thinking about the ServiceNow integration, how that will react. I would pause that integration before cloning and when on the new instance, make sure the two have at least…

Hi @bourlis Looks like you are right, it does not search in the related entity fields. Just tried on 2026.1RC1. But, a work around that seem to be working is to add another column BUT NOT SHOW IT. In below test, I have interface names with related nodes in column one. With only that it does not search for node names. But,…

To get the above inte a Custom SWQL Alert Trigger Condition, you have to form a query that uses both the mandatory part and the customizable part. Usually, I create the lower part first and then just join in the result with the mandatory part. Like this: -- Trigger Condition Manadatory part SELECT Nodes.Uri,…

Hi @patriot "NCM NodeID" is NOT EQUAL to "NPM/Core NodeID" (for some reason….) The table Cirrus.Nodes holds both values, joining in that table let you "move" between the two nodeid-types. SELECT n.NodeID FROM Cirrus.PolicyCacheResults AS r INNER JOIN Cirrus.Nodes AS CN ON R.NodeID=CN.NodeID INNER JOIN Orion.Nodes AS n ON…

Towards what database? Log db? in that case you have the config file for that one here: C:\ProgramData\SolarWinds\OLM\LogStorage\LogConfig.config

Here is a list for you ;-) StatusID StatusName ShortName Color IconPostFix 0 Unknown Unknown #999999 unknown 1 Up Up #B8D757 up 2 Down Down #950000 down 3 Warning Warning #FEC405 warning 4 Shutdown Shutdown #707070 shutdown 5 Testing Testing #C2C2C2 testing 6 Dormant Dormant #C2C2C2 unknown 7 NotPresent Not Present #C2C2C2…

For node status values, I'd recommend you run SELECT StatusId, StatusName, ShortDescription, Color, IconPostfix FROM Orion.StatusInfo And you will get them all :-)

Happened to me also on an older version. I had to manually change the connection string in C:\ProgramData\SolarWinds\NTA\FlowStorage\Config.xml

It's not that you can't PING the device from the SolarWinds server? When you add a node in SolarWinds it tries to ping the node first, if that fails the error might look the same as when SNMP fails. Try to ping the node from the server to see if that works. If not, there is your issue.

Hi @olaganathan88 Hard to know what will happen during and after the upgrade if you have many custom modifications to the SolarWinds SQL database. Depends on how and where you have created them. I would recommend that you have a separate lab installation of SolarWinds, where you have the same db modifications, and test the…

Ok, not just extra characters. The menu is all wrong. But I see more things, you are missing imaged but in header and footer. In both browsers. A Ctrl+F5 in any browser solves many issues. Maybe not here but try. And you have this on several pages? Is it only you or does your colleges have the same symptoms?

Can you share some pictures on what characters that differs between Chrome and Edge?

SNMP is hard to troubleshoot in that way that it doesn't say much where the issue is. I usually use some third-party snmp testing tool, there are several out there, install it on the polling engine and run if from there. Can be easier and faster to test different settings. One tool ca be the in solarwinds built in SNMPWalk…

For using NCM to take a backup of a devices configuration, you need an account that is allowed to READ the configuration only.

As of now, the latest version is 2025.4.2. You can go directly from 2025.2.0 to 2025.4.2. Just run the upgrade. I would say that this version is stable and working fine.

You probably should file a case with support then. It sh

Hi @santhoshadapa Yes, it's possible. When you add the node, check "Dynamic IP address" and put in the DNS name for the device instead of the IP address It's also possible to edit an already monitor node, change it to a dynamic address node. Just go in and edit the node

It depends on how you monitor the SSL expiry date. And what types of certificates you want to monitor. AppInsight for IIS is great when you have IIS and certificates there. If you have certificates in the local machine store, then there are other methods. A quick search here on thwack give you several options: monitor…

Do you have an additional web server? If so, do you have the same issue when looking at the main servers gui? If not, I think you should file a support case on this. Might be some issues that affects more things.

Hi Custom properties should not just change values by themselves. There must be some script or automation that sets them. If there is a user account that change them, below query might give you some hints. If the changes are done via the API, it might not be logged. (Can also be changed on the SQL sided, then we definitely…

Hi, you can just take the 2019 template and assign it to 2025 servers, will work. Or as you said, copy and rename to a new 2025 template. Tested it out and all metrics work on 2025 also.

Note that non-admins don't have access to the Audit tables. (At least not other accounts actions) So for non-admins a report/table with a query against the auditingevents-table will be empty or very limited. The events-table is available though.

Hi, you can probably create that without using SWQL, just using GUI based widgets. Think we need some more details on what you want but here is a simple SWQL query that displays all nodes and interfaces with their status. SELECT N.Caption AS [NodeName] ,N.StatusDescription as [NodeStatus] ,N.Interfaces.Caption as…

I think the line "AE.AccountID AS [Supressed By]" gives you the accountid. Please also look at this thwack post: "Nodes Currently Muted" report broke after 2025.4.0 upgrade - THWACK

Something like this maybe SELECT E.EventTime ,Message FROM Orion.Events AS E WHERE E.EventTypeProperties.Name='Node Added' AND E.EventTime>ADDHOUR(-24,GETUTCDATE())

Another note on this subject: Continuing to use Network Atlas maps in your instance prevents you from moving to 64-bit IIS.