SteveK ✭✭✭✭✭

We normally just clone our VMs. We used to do snap shots, but based off the change in log files in SW, the snaps would grow pretty large. We then normally hold onto them for a couple weeks, just to make life easier. There is the inherit loosing potentially weeks of data with this approach, but we question the stability of…

I was going to make the same recommendation as @"thomasdrinkwater" As far as I know a powershell component can only have a single credential set applied to it. The only way around this would be to load additional credential sets within the script, and storing encryption files somewhere would be your best bet.

I want to say @"tomiannelli" is spot on about this. I was actually just about to do a write up for the exact same thing. As always I like the disclaimer of mileage will vary by environment, so please test yourself. We are looking to see what applications could be shifted over to OAUTH for general security reasons. I…

As far as the tabs on the tables go, I'm not aware of a way to do that with a custom query/widget. I've seen that on the Active Alerts widget, and I think the Edit button does give you some customizable options, but not enough. I want to say I played around with it a long time ago, but ended up going with the the one I…

Depending on what you are trying to do, you could just do a standard powershell monitor. This is just kind of off the top of my head. Depending on how often the file is overwritten, something like this could work. By using the arguments, you could do the filepath as the first part of the script argument, then a comma, and…

It depends on the type of dashboard that you are using. In the classic dashboard, you would go the route of adding a custom query widget and supply your query to it. If you are using a modern dashboard, then you would add your widget, then configure what type of widget you would want displayed, and then set your query.…

That could get very noisy. I don't even want to think about how many disabled components are floating around in our environment (especially on the appinsight front). I took a quick look and setup a component alert, and tried looking at component events, but unfortunatly that is empty. I was hoping to see if there was some…

We have alot of alerts that are derived from just components. With the shear amount of components in app insight, it basically makes our standard alert templates unusable for appinsight for IIS or it would be over saturating the teams with emails and/or after hour pages Appinsight tends to require alot of tweaking to get…

The milage will vary from setup to setup on that one. In my org, we tend to have different ownership for the OS/Node vs the appliaction. So that lead to more of pulling the email directly from the originating object where we have an email field setup. If you are setup where you are pulling the email from the node, then…

I want to say that the widget I use on my dashboard was based off of the SolarWinds Active Alert Dashboard (SolarWinds Active Alert Dashboard - Modern Dashboards - The SolarWinds Platform - THWACK). The [Self] item was something that they had in theirs for the originating object. I thought it cleaned up the report a bit…

So maybe something like this, unfortunately no one really acknowledges alerts in my environment. So I can't really tell if that part works (it is the [AS] items). I based it off of a resolved over the past month widget I had, so sorry if something seems off. Select [AO].AlertConfigurations.Name ,…

So whenever I write out my remote host executions, I always use this as an initial test: $SysName = $Env:ComputerName Write-Host "Message: $($SysName)" Write-Host "Statistic: 0" This basically will return back the name of the system that is executing the script. Its also a simple test to verify remote powershell execution…

That is correct in that instance. The monitor would go into a warning state, then if there are no further changes over the next 5 minutes it would revert back to up. Your summary page for the monitor would be able to show you all of the events related to those IDs though. If you are needing an email per event, then yeah I…

So you are in the right area utilizing SAM. SAM would do the monitoring of the object, then you would need to build out an alert to trigger the email. I'm not aware of a way to alert off of a new entry with the standard alert (SWQL maybe?). So path of least resistance would be to build out the SAM monitor as you have it…

I did a quick search as well and found the same thing as @"mesverrum" , that SC Delete doesn't show up in the event log. I started to type this, and saw @"adam.beedell" response, and he is spot on. I don't have any experience on the SCM side of things, so I can't speak on that. There is the option to "Count as difference"…

It would depend on the data you are looking to get. @"stuartd" is correct on you can use SNMP to get the various hardware/resource utilization of a host. If you are looking for data down to the VM level, virtualization recommendations, etc..., I think you would need VIM

To build off of this, when you go for components make sure you excluded disabled components. Depending on the environment and amount of Appinsight you are using, that number could get extremely stupid.

Do you have the hosts in there as nodes? I know if you are pulling them in via VIM and vCenter, they do present differently in the console if you also did not configure a node for them as well.

As @"adam.beedell" mentioned it is very simple from a classic dashboard perspective. Just create a Classic Summary Dashboard, build out your widgets and then duplicate it when needed. When I've done this in the past, I normally set a limit via group and build out dynamic groups based on the need (Responsible Team, Email…

This is true. I opted towards send an alert to the node owners/contacts that things are not set correctly. There are too many SAM monitors and variables in my environment to be able to realistically automate it. I would love to be able to get to that point though.

We do something similar to this. We have a custom property on the node looking for a Tag property. If the Tag contains Microsoft SQL, the device gets added to the group. The group then has a couple SAM monitors attached to it, so within 10 minutes or so, the node gets a couple different SQL monitoring templates applied to…

I don't think I've ever used the SWQL approach for SAM alerts. I could be wrong, but I think that ComponentID you are specifying becomes unique for each instance of the monitor. So you may need to branch out to include links from the MultipleStatisticData to the Component and/Or application tables as well (possibly…

For our clusters, we have a DNS alias for the active cluster, example would be: EnvA-SQLCluster. That cluster is made up of 2 nodes/hosts, say: EnvA-SQLNode1/EnvA-SQLNode2. The cluster name has its own IP, and Node1 and Node2 each have their own IP. Whatever host is active would also respond to the Cluster IP. I believe…

This is very gimmicky, so sorry if its not exact but the options are kind of limited. So on modern dashboard, you would need to supply the corresponding number for status: 1 = Up 3 = Warning 14 = Critical CASE WHEN ROUND(AVG(rt.Availability), 2) >= 99 THEN 1 WHEN ROUND(AVG(rt.Availability), 2) >= 95 AND…

Only thing close would be for Threshold Values, but those only have the precanned options. You could probably hack around it a little bit with the icon approach. You would most likely need to do a case and return specific values for your tiers ( = 100, > 95, >90

The main question I have is what is your definition of usage? Under Settings -> Database Details -> Total Elements per poller, will give Node, Volume, Interface, and component counts per polling engine Settings -> License Details: Gives a break down of item count per license type. So it really depends on what you mean by…

@"Indumathi.E" So I would say definitly test something like this out. Every environment is different so I can't gurantee it will work. Monitor Offline Printers Using the latest code block I uploaded in the other one. You would just need to add in the Paused count, and build out the switch statement. So it would probably…

I had a typoe in the join, the semicolon should have been in quotes. I messed around a little bit and came up with the following. It did pass the SW test, but once against test it in your environment and modify as needed. I didn't have a full list of statuses, so you may have to add additional ones if you want to calculate…

I'm going to give the disclaimer that I just wrote this in here, so there maybe some issues. #Arguments to Variables Try { [IPAddress]$IPAddress = $Args[0] [Int]$Port = $Args[1] } Catch { Write-Host "Message: $($Error[0].Exception)" Exit 1 } #Clear Script Variables Clear-Variable TestCon -ErrorAction Ignore #Test…

going off of what @"chad.every" said, SAM is probably your friend on this one. I'm going to preface this with, I do not have a monitor like this in my environment at the moment and this is just kind of off the top of my head. In theory it should work, but may need some tweaks. You could get more specific on the…