Lofstrand · Solutions Architect · ✭✭✭✭✭

Hi, it looks like it will be handled by the agent if the node is monitored with an agent. See more at Monitor and restart stopped Windows services in SAM

Hi The issue here seems to be that "Polling Method" don't have a proper name when you select the properties to show: As you can see on the right hand side, there is a blank line where Polling Method should be. If you remove that blank line, it's not to be found anymore in the list. A workaround to get it back is to update…

In Errors Critical threshold: ${N=SwisEntity;M=InErrorsDiscardsThreshold.Level2Value} In Errors Warning threshold: ${N=SwisEntity;M=InErrorsDiscardsThreshold.Level1Value} CRC Errors this hour: ${N=SwisEntity;M=CRCAlignErrorsThisHour}

Hi I found variables that look like this: ${N=SwisEntity;M=InDiscardsThisHour} ${N=SwisEntity;M=InErrorssThisHour} Care to try them?

Hi, I can't see any info that DPA supports connecting to it's repository with gMSA yet. But windows/AD authentication should work just fine. 

1. Maybe, my recommendation is to stay with what you have and if you feel you need more hardware, add it then. Depends on how much of the new features you now have available that you utilize. 2. If you have the "Enterprise Scale" edition, you will also have HA in your license. If so, you can add an additional server as a…

Hi @"mjonathan" Take this SWQL query into the report builder and I think you will have the report you want. Adjust the last line with the computer name filter to your liking. SELECT N.Caption ,ISNULL(LTraps.QTY,0) AS [Nr Traps] ,ISNULL(LSyslog.QTY,0) AS [Nr Syslog] FROM Orion.Nodes AS N LEFT OUTER JOIN ( SELECT L1.NodeID…

Hi @"RAJPAD" Am I understanding correctly that you have a few modules and are about to change to SWOSH, SolarWinds Observability Self Hosted? And your installation is currently at 2025.2? Then it's just a matter of changing the license key in License Manager. Thats everything! 5 min job. 

Hi Creating an account for a user that is Read Only shouldn't be a problem. Just don't add "admin", "manage node", "alert management" etc to the account.

Great @"HerrDoktor" ! But less consultant fee to you and more value to the client

Looks like this widget can't be added to another page. If needed, a custom query widget can be used to give you the information. I don't have any VPN connections in my lab so it's hard to create the query for you. But this is the table to start looking at anyway: Orion.Firewall.RemoteAccessTunnel

 @"jjroncag" , here is an updated query. SELECT A.Title AS [Action Title] ,A.ActionTypeID AS [Action Type] ,C.Name as [Credential name] ,CASE WHEN AP.PropertyValue=2 THEN 'Basic' WHEN AP.PropertyValue=3 THEN 'NTLM' WHEN AP.PropertyValue=4 THEN 'Token' ELSE '-' END AS [HTTPAuthType] FROM Orion.Actions AS A LEFT OUTER JOIN…

Hi I Joined in data from the VirtualMachines table to get the host information. The Telnet and web browser fields are just links created in GUI, no actual data in db. Added them in below example anyway SELECT n.Caption AS [Node Name], n.StatusDescription AS Status, n.IPAddress AS [Polling IP Address], n.IOSVersion,…

There where some additions to HW inventory on fortinet devices added in version 2025.1. You can get data like this: But if there is more details you want, you probably have to create that with UnDP's as @"HerrDoktor" said. 

Agree, a "TCP Port monitor component" could be an easy starter here. 

Hi Joacim We have a few features that use SNMP write. For example, shut down interfaces, adjust energywise power level, engineers toolset etc. I would say, if you don't know that you will use it - don't add write credentials. Add it when you know you need it.

Hi The easiest way is to adjust the critical threshold on the interface itself. There you can set that the interface will be critical if the critical value has been bread x amount of times in a row OR x out of Y polls: It can be done with a custom SWQL query alert as well but above is the easiest method. 

Thanks @"tobyw_loop1" I'll pass that on to the right people.

Hi So, two agent record for the same node? Do they have different types, Agent vs server initiated? Do they connect to different IP addresses? (if you mark one and click "edit settings")

Hi There The thickness of the lines intend to represent the bandwidth on the links. In next version, 2025.4.0, it's possible to manually set the link width:

Hi, how about below query: SELECT A.Title ,A.ActionTypeID ,C.Name FROM Orion.Actions AS A LEFT OUTER JOIN Orion.Credential AS C ON A.Properties.PropertyValue=C.ID AND A.Properties.PropertyName='Credentials' WHERE A.Properties.PropertyName='Credentials' AND A.Properties.PropertyValue IS NOT NULL AND…

Hi, I would definitely recommend that you open a support ticket on this one, they will assist you with the upgrade issues. Looks like now, that the primary server is excluded. Might something have failed in the validation in the step before this?. Don't think anything is happening.

Take a look in this log file: C:\ProgramData\SolarWinds\Logs\Orion\ActionsExecutionReport.log Might give you some insights. But I sounds like there is an issue with the account that runs the report:

Hi In SQL there is no table called Orion.Nodes, but in SWQL there is one. In SQL there is a VIEW called Nodes that reflects the information in the SWQL table Orion.Nodes. Suggest you do a normal SQL backup of the databases before upgrading. Snapshot of the application server can also be a good idea. Then run the upgrade…

Hi @"arnabmk" As @"mesverrum" said, you can always create your own custom variables for any data available in the database, if not a prebuilt variable exist. Try below custom variable: ${N=SWQL;M=SELECT D.name FROM Orion.DPA.DatabaseInstance AS D WHERE D.DatabaseInstanceID=${N=SwisEntity;M=DatabaseInstanceID}}

Got 2025.4.0 in my lab and there is no index for currentValue there either. What is trying to use that index? Or is it just SQL saying it want that index?

Hi, All the events are available for you to GET trough the API, but there are no good way to PUSH all the events from Observability. Can you have Elastic to get them for you? Otherwise you will create som script that gets them and pushes them.

@"anish.888222" If you take the calculated hash and search for it on https://www.solarwinds.com/product-checksum you will find that this hash is also 2020.2.6. Apparently there is an may and an august release of that version. You seem to have the august version.

Hmmm, copied your code and it works just fine on my side. What entity type have you based your alert on? I used "Custom Table Poller Current Status"

New version where you don't have to add the name of the UnDP either. This is for SWQL ${N=SWQL;M=SELECT CPS.RowLabel AS Label FROM Orion.NPM.CustomPollerStatusOnNodeTabular AS CPS WHERE CPS.CustomPollerAssignment.CustomPoller.UniqueName='${N=SwisEntity;M=CustomPollerAssignment.CustomPoller.UniqueName}' -- name of the UnDP…