MagnAxiom

Please get this functionality Right!!!

Seeing as we already have the GPS Lat/Long loaded in the properties of each node, it would be very helpful if the map could make use of this info.. In a perfect world, I could create a dynamic group, and tell the map to show the position of all the nodes in this group... that way the group could only be WAN routers for…

The unfortunate solution to this is that you edit EVERY floor switch port that is a "user" port and tell NPM to show the port as "Unplugged" rather than "Down". This way you don't have to filter and can only set client ports to display as unplugged when down. 

For one, I would think you would have to track "completion rates", as well as the storage capacity of each node. You could then model the load flows and be able to capacity plan. If a node has packets that are destined for a remote node, you could track arrival times and through put when the link DOES become available. It…

PLEASE tell me these filters will be coming to the Scheduled Discovery function and that we will be able to save these "advanced" filters on either a global or per discovery basis! For instance, I always want to ignore ALL virtual interfaces, globally in my network. I don't want to have to select each of my discovery…

I tried this configuration, but get a separate email for each site that goes down, even when just one of the sites is down.

I appreciate your effort, but with this type of configuration, I can never have a "reset" message when one or more of the TestSite nodes return to UP. Now that I think of it, I'm not sure suppression can be used in this scenario since I want a reset message sent if ALL TestSites are no longer down, because Suppression…

> Ok, so as you have it configured right now, the alert will only trigger if both TestSite1 and TestSite2 is down, correct? Correct, only if TestSite1 and TestSite2 are down. >And it's not firing now? Correct, it isn't firing at this time >TestSite1 and TestSite2 are actually actually in a down state, not unmanaged or…

It is the EXACT same as the trigger above, minus the Site3 and TestAP conditions.

Ok, backed the alert all the way down to just testing TestSite1, bing.. I have email alerts. I added TestSite2 in a separate condition group, no alerts. I did all of this in a newly created alert, single site worked but addition of a second site in its own condition group generates no alerts.

Any progress on this?

This configuration generates no alerts/emails. I have nothing in event suppression. Here are screen shots. When TestSite 1 - 3 are down, I show the nodes down in Orion. No emails from this Alert however.

This is a wireless tower with a point to multipoint radio on it. The tower site is fully DC powered and has batteries for backup power. The sites 2 - 5 are pump controllers on Oil pump jacks. They are on AC power, and are ICMP polled only. No SNMP. I have been tasked to come up with a way to send an alert to a field tech…

Looks like alot of great information, but might I suggest you package up the scripts and upload them to the Content Exchange? Also, is the version of Splunk your using hosted on unix?

Specifically via BlackBerry, the ability to see active alerts, and ACKNOWLEDGE THEM. Because of this limitation, we do no utilize the acknowledge/escalation features of Orion.

Eekk! I was about to suggest we update to 9.5! We are currently on 9.1. I can't say that breaking the editabled events module will stop me from upgrading, but I sure am interested in finding out if there is a way to do it in 9.5.

There is such a thing!!! You can insert the macro/variable name of a custom property into the To: and / or the CC: fields!!!!

sedmo, I only want an alert if ALL of the test sites 1 - 3 are ALL down, but TestAP is UP. mcbridea, No, this is to be a specific alert ONLY if all the test sites 2-5 are down AND site 1 is up. I have a separate alert that tells me if any one or more of site 2 - 5 go down, this will only be if this specific condition…

We too are getting a good number of false alarms. We check and the AP hasn't rebooted or gone down at all. As is we have this alert set to inform a couple of the wireless guys, but no one else as it isn't proving reliable.

Thanks alot folks!!! Works like a champ!

The issue I run into since SolarWinds doesn't support parent/child relationships is that I have multiple "report to" groups". If this type of device goes down at any of my sites, they want that alert to only be sent to that group, and I have around 8 different groups. If i were to deploy the tier method described here, I…

Acknowledging alerts via email would actually have us using the escalation features of Orion. As it stands, until we can successfully acknowledge and alert via our blackberry, we don't use the escalation features. Problem with doing it via blackberry now via web is a login for each user to be able to know who is…

For me, just simple parent/child relationships would go a long way toward "even correlation". If my remote site goes down because of the WAN router, have Orion be smart enough to realize that for the 40+ devices behind that router are down BECAUSE of the router outage, and not spam me with 41 emails about all the site…

The ability to acknowledge alerts in any way via a phone (Specially BlackBerry) would totaly transform the way we do alerting, and for the good! I would say that it would increase the value of the SolarWinds Orion alerting two fold at least.

I too would like to be able to acknowledge alerts via BlackBerry... without it I don't see the escalation system being all that useful. There just really should be a mobile view. Sure, we can do all kinds of work arounds, but they just ought to go ahead and do it!

I can definitively say it isn't the alert action, or "Trigger Actions" because if I simplify my alert to just alert if one site goes down, I get email notifications.

The latest version of Orion, 9.5 SP3 supports what they call "Unplugable Ports". I have yet to upgrade, but my understanding is that you could tell orion that all your user ports are unplugable and then they wouldn't go into alarm because they are unplugged.

From what I've been told on the forums, the issue arrises from the "trigger" section not being able to check on the status of nodes other than the one that "triggered" the event. I have been told that in the suppression area it is possible to make reference to the status of other nodes, but i've of yet not been able to…

So uh, I downloaded it, but there was nothing in the zip that told me where to put it to be able to use it. Help?

Thanks, that did it!