RichardLetts ✭✭✭✭✭

no idea, you are going to have to try it. can you put AP into a container (groups)? feel free to try it out in SWQLstudio to see what you get, if it doesn't work you'll need to post some output (I don't put AP into containers, so i don't have a test environment to try this out)

I'm not sure putting a time bound on the count of nodes in a group down is helpful, but I don't know your environment. [my environment is many hundred buildings, >400 routers , and >20 thousand switches and wireless access points]. I'm almost certainly going to put an alert like this into production, and suppress alerts on…

CustomPollerLabels?

I use the 'alert' actions Solarwinds Advanced Alert manager to send the trap for significant alerts to this trap receiver SWO Advanced alert custom trap -> trap receiverexploder function ->trap receiver -> LED blinkerSolarwinds ServerNOC ControllerNOC workstation If you have something like xMatters then you might be able…

You deleted an reply that might have been useful to other readers. SysObjectID = 1.3.6.1.4.1.8072.3.2.10 [soapbox] NET-SNMP is an open source extensible snmp agent that is commonly embedded in network equipment. It is a one-line in the configuration for for the device to report a unique sysObjectID for the actual hardware.…

see the last post from m on this thread: SNMP Trap Alerting questions

Have you applied the buddy drop that copes with replies larger than 4K ? UDT polls devices using getBulk, and if the getbulk runs off the end of the table into something that returns large chunks of data (e.g. a MAC history blob of data) then the replied (in UDP packets) will be larger than it expects and replies are…

I'm sorry, but that is a post from more than a year ago; and event then was a remnant from when we were using RT. I can't figure out the answer right now. 1. Have you tried the examples from REST - Request Tracker Wiki 2. what was the output from using CURL 3. what are in the logs on your RT instance when you post to it…

really? what version are you on?

How long ago did you assign the pollers? -- if you only just assigned them then they will not have (yet) been rolled up to the hourly stats. 'just' depends on you detailed stats retention settings.

It's part of the log4net architecture: Apache log4net: Home (note. .Net has the same features and they look very similar to me: Tracing) switchValue sets the logging level(s) propogateActivity includes an activityID in the message header so log messages about the same activity can be correlated. /RjL

yes, I think so.

Yes, we do.

what happens when you run the command from the command line? /a = the name of the application, and should be something like "Solarwinds" or "Orion" what happens when you run the command from the command-line on the alert server? C:\Program Files (x86)\Growl for Windows\growlnotify.com /a:"Orion" /t:"A Network Node is…

The timezone is NOT based on where your polling engine is setup. In general data flows: device -> module engine -> database alerting data flows: database -> alert engine -> recipient so the date/times you see in the emails from the alert engine come from its timezone

if this is for 11.5.2 then contact support -- they have a buddy-drop that fixed this issue for me.

How did I miss that idea! voted up..

first advise: don't try and upgrade all of these in one go. Instead plan on doing them one at a time. anyway, IME a product on the server itself takes 20 minutes to upgrade a product on a poller takes 10 minutes (with ~10 clicks on dialogs per poller per product): vote for a better…

is there a description somewhere of how the DNS interaction works? All of the documentation and links are on screenshots of an actual NPM12.2 install which makes it hard to figure out what rights are needed. Today with the FoE we're running a nsupdate script that adds and removed the IP addresses of the polling engines…

yep... we have the unlimited licence count versions so not such a big deal for me here. I manage the physical interfaces in NPM, and the subinterface ports in UDT. we only manage the uplink and trunk interfaces, access ports are only added to UDT Other gotchas: unconfigured interfaces may not appear in the MIB; so you end…

Not going to happen -- the operating system is always going to use the directly connected interface over any other interface, regardless of any ordering. [this is one of my standard interview questions for network engineers] I also doubt you have a server with an IP address of 11.1.1.1 since that belongs to the US…

the network map is an image/jpeg type -- the rendering engine would have to cycle through a series of images to deliver this (it would be nice if this were HTML5)

this information is in the SDK, newly migrated to github: Alerts · solarwinds/OrionSDK Wiki · GitHub

while a DNSname pointing to the HA pool address works, what also works is having your network devices send the syslog and trap devices to the IP addresses of the two polling engines in the HA pair. The syslog and trap processes are only running on one server at a time, so you do not end up with duplicated data in the…

Yes using either: a) a custom SQL alert based on the node. in the custom SQL have something like: WHERE nodeid IN (SELECT DISTINCT nodeid FROM syslog WHERE acknowledged = 0 AND syslogseverity = 0 AND message LIKE '%HOST LOOPBACK WEDGE DETECTED%' AND datetime > Dateadd(hour, -1, Getdate())) (will generate an alert for…

yes, we do the same with a CP 'sector' We make use of JIRA Software - Issue & Project Tracking to manage requests for new alerts. Alerts require a run-book, and using Jira we can subtask that out so someone has to write documentation on what the alert means, the <5 things to check, and the ways it can be fixed. No runbook,…

There is no way to programmatically control any aspect of the discovery process. (oh, and no, network sonar discovery will not pick those all up for existing nodes)

I've idea-ed reverting this here: http://thwack.solarwinds.com/ideas/3589 yervillageidiot: feel free to update the idea :-)

Where was the idea on thwack that had votes for that change? Perhaps that is what is needed on ideation here -- the things that are planned for the next release (after all every code change surely has a user story that backs up the change, and a test-plan) We could have had an editor for the MachineType and Vendor instead.

without alerting you can also do something like: SELECT N.Caption ,N.IP_address ,NOD.DateTimeFrom ,NOD.DateTimeUntil ,DateDiff(minute,DateTimeFrom,DateTimeUntil) as minutesFROM NodesData N inner join [NetObjectDowntime] NOD on N.Nodeid=NOD.Nodeidwhere NOD.EntityType='Orion.Nodes' and NOD.state=2and N.Unmanaged=0and…