SteveK ✭✭✭✭✭

I think being able to pull in custom properties for it would be ideal. We flag our nodes with the responsible team and email addresses, so I could easily see creating custom properties for: CPUAlerting and MemoryAlerting with the options for Node or Anomly/AI and populate my anamoly monitor based on the field containing…

Unfortunatly you are going to need admin rights on the box. I haven't seen anything official from SW stating otherwise. If you don't want to give it domain admin rights, you could in theory use the SolarWinds agent for Domain Controllers, then use a normal account or a GMSA account (either would require admin rights) for…

@Lofstrand Has the right document on how to migrate over. We just had a talk with one of the engineers and they confirmed that is the current migration document.

You may have to run it through Network Discovery. I haven't tried to run that against something with an existing though. The other route would be to look at thw SwisAPI and Powershell. I've had mixed results with that in the past, but unfortunately I do not have any kind of active script for it.

On that, you wouldn't even need to use the script argument. Just replace $ServerName with {$Node.DNS} or ${Node.Caption} (I think that is a correct option, could be wrong) in the script body and just remove the parameter. Also, why are you using the Invoke-Command? You should be able to set the monitor itself to Remote…

If its a VM, allocate a couple extra GB for the OS, and then figure out what your expected usage is. Playing with the 64GB number, if your DB is recommending 61GB, and the server has 64GB, I would probably up the server to 68GB or maybe even a little higher. This way you have the overhead for the OS, antivirus, and any…

I think you would have to create multiple instances of the alert and target specific nodes, which really isn't managable. You maybe able to get away with a custom SWQL alert to accomplish this, but I have no clue on the logic of that off the top of my head. The other route would be to use dependency manager and link the 2…

This is similar to what we do. I personally prefer to have CPU and Memory in their own alerts, this way its easier to query down the line which one is alerting more. I also agree on not hard setting the alerts to a given percentage. You are going to run into different products that always run high on resource utilization…

I would recommend using a standard event log monitor for something like this, instead of powershell. Any reason you went with powershell? But it looks like your script is hardcoded with $MatchCount = 0. Where that should be something like: $MatchCount = ($Events | Measure-Object).count Then you should add your branching…

Intersting, I haven't seen that one before. I can see that working for some of the items when emailing to a team or setting up something for a display. Unfortunatly it wouldn't really work for a summary/homescreen when a user logs in. I will definitly play around with it though, thank you for the heads up.

We use ours to control our alerts. When I inherited the system, things were a bit of a mess. The previous admins tried to use one custom property to control all alerts for every team. Then there were all sorts of random one off alerts for specific systems so they could alert multiple teams. Which lead to the ever popular:…

As everyone else said thank you for the acknodgement. I feel honored to be recognized with this group.

The problem in my case though, I filter down the various widgets for specific teams and/or application stacks in the environment. So my only options at this point is to do the select in the URL, which would get rather crazy since my dashboards cover various stacks within SolarWinds, and I am unable to supply those as…

so this is more of a bug with Windows. Its been a couple months, but with how SolarWinds calls the remote powershell session, get-childitem looses the credentials.

You would need to create a powreshell monitor in SolarWinds, utilizing the code: Create a Windows PowerShell script monitor in SAM Then you would need to add the template to the node: https://documentation.solarwinds.com/en/success_center/sam/content/sam-managing-templates-sw1127.htm#Assign

I would say you would want to review those items in the ResultError and either resolve the problems or exclude them from the monitor. When you have the monitor added to the nodes, you could put a comma seperated list of the name into the script argument, and it would exclude them from the report.

From Settings -> All Settings -> Custom Properties, how are you creating that interface property? The thing that has burned me in the past was not setting the entity type.

I ended up going a different route for IIS Cert Monitoring. I ran into the issue where ports were changed or users failed to setup the monitors correctly. So I ended up creating a powershell based monitor that basically grabs the bindings, then does a lookup for the cert against the local machine store. If there are sites…

Here is what I use. I ended up breaking it down so I got a total count, as well as the various states. You may want to add an exclusion in for your primary server and/or sw database server as those can be pretty heavy on the port count. This can be done by modifying the $HighUtilization variable. This won't give you a list…

I think in SolarWinds when you create the WMI object you would need to use ".\" in front of the user name. So say your local account is Solar (and a member of administrators) you would add it in to SolarWinds as .\Solar The biggest pain on that would be whenever it is time to rotate passwords. You would need to replace it…

If you want to monitor specific scheduled tasks, powershell SAM component would probably be your best bet. To filter, you would probably just swap out this: "FALSE" {$SchTask = Get-ScheduledTask -ErrorAction Stop | Where-Object {$_.TaskName -notIn $Exclusions}}, to be an In instead of notIn. Then you could just provide a…

I don't think the application template allows for a roll up if all components are down. As @"mark.gover" mentioned your best bet for this would be to do a powershell based sam monitor for it. You will need to test this out. I wrote this in the powershell editor in thwack, so there could be some formatting issues: Try {…

I would think you want the Component Name or Application name in the Scope section as well. I'm under the impression that your scope is more of your static values vs the trigger condition which is the variable items that could change. I personally prefer to avoid using the Node name in the scope, and just target the…

As I mentioned in an earlier post, I've had better success with a powershell wrapper. We have different endpoints but the developers stuck with a common approach for exit codes and error handling, so we used a stnadardized powershell script body and utilized the script argument to populate the URI/URL into the code. $URI =…

I've had mixed results with the rest calls from SolarWinds. I normally struggle with the credential set, and that passing to the application in a way that our application works. I couldn't tell you if its our application, SolarWinds, or a combo of both. I've had better success utilizing a powershell monitor and utilizing…

Which route did you end up going?

Hi @"isaacs", This functionality already exists within SolarWinds itself. First you would need to create a group (All Settings -> Manage Groups -> Add New Group). Then you would create a group with a Dynamic Query. The dynamic query would be whatever your custom property and value are. Then under Sam (Settings -> All…

Both @"shuth" and @"bobmarley" solutions should work for a file detection monitor. Since you mentioned that files are there when they need to be processed, I would probably go with Bob's approach. We have something similar in our environment that gets picked up by a different application and if a file is there for longer…

Maybe you could stage something wiht a local text file. Component 1 does its thing, and when you want to branch, have it swap a value in a text file that Component 2 Component 2 is set with Credential 2. Its first step is to open the text file and look for its value to run. If its not, component exits out as up, if it is,…

I don't think I've seen that configuration setting pulled over on the virtualization (VIM) level or node level. In theory if you are doing SNMP based monitoring on the ESX server, there maybe a process or service that is triggered when SSH is enabled, but I never went down that rabbit hole before. The other route would be…