SteveK ✭✭✭✭✭

I haven't played around with the ServiceNow side of the equation. If the To field from the email action doesn't accept a SQL injection, what about trying the opposite and do the SQL injection to the ServiceNow side. I'm with you on trying to keep the amount of properties down. Our nodes are a little heavy on that as the…

THe primary focus is for a modern dash, I probably should have put that first

So in my environment, I have it setup in a similar fashion. I just reviewed the data populated in our field and we are using standalone emails (distrubution lists) and if we are triggering to multiple addresses we are using a semicolon and a space (DL1@domain.com; DL2@domain.com) Our to field on the email action is just…

So if you already have an existing CPU alert, they would both trigger. If you have the existing out of box alert on, this would probably be more of a replacement for that. I like to use the out of box alerts more so as a template, instead of actual production, due to the limitations on editing them. If you are wanting to…

On that one, I would say that would be a support call. If its for the primary, potentially a re-install/repair but you would want to look through the event logs or SolarWinds logs to see what went on.

We took a similar approach to ecmel with ours. Instead of hardcoding to 90% we use an or statement with critical value reached is true or Current Value (CPU Threshold) is greater than Critical value. We had an issue with a previous version where the critical value reached didn't always update, so we added in the comparison…

I've been messing around with it a bit, and still fighting with the icon. I went the route of linking to the StatusInfo table to get the colors, but those do not line up with the ones from 'Orion Statuses' (ironic right) Select [S].Count_Items , [S].Status , [I].StatusName , [I].Color , Concat ([I].IconPostfix,'.gif') as…

Thats what I was thinking. I went ahead and openned up a support case to add some visibility to it.

As far as what alerts you require, that really depends on your environment and the business requirements. In regards to creating the alerts, it was alot of playing around. I started by reviewing the original "out of the box" alerts, clone the ones that sounded good for me, and started playing around with modify them. Then…

Problem with that approach is for nodes, StatusDescription contains more information than just Warning/Critical/etc... It normally includes some bit of data of what is causing the problem. I could do a case and do a like match on the items and build out my own matrix, but I think that would break the orion icons and color…

Hi Jaleef, As Christopher mentioned, you can re-use the same alert action across multiple alerts. All you need to do is hit the "Assign Action(s)" button on the Trigger Actions/Reset Actions screen. Also to confirm what Christopher said, in our environment, we created a PagerDuty template per object type (Node, Volume,…

Looks like I figured out the issue. Inside the SAML claim piece, I ended up deleting my original "OrionGroups" option. I then selected "Add a group claim" instead of "Add new claim" Which groups associated with the user should be returned in the caim: Groups assigned to the application Source Attribute: Group ID Advanced…

Yes. I was able to add a user on the to both the Azure "Users/Groups" and add the SAML user via account name to Orion and received a successful test

Hi Adam, I updated my post here: (+) 2022.4 Upgrade: Remote PowerShell Broken - Forum - Server & Application Monitor (SAM) - THWACK (solarwinds.com) So the response I got from support was that in 2020.2.6 and earlier, the value in the config was already set to "True." In 2022 it was switched to false. So essentially this…

The response I have received from support 1. What change occurred to the PowerShell execution? - Nothing changes the execution of PowerShell based on the Development Case. 2. Is this issue currently in the pipeline to get resolved without the work around? Yes, they are working on the issue and it should be resolved in the…

Received an update from Support and made the following changes which appears to correct the issue. These changes were done on the APEs and the Primary server. File: %SolarWinds Install Directory%\SolarWinds\Orion\SolarWinds.APM.Probes.dll.config Backup the file above Launch Notepad.exe in administrator mode and load up the…

I double checked and our alerts are working fine with the "Address1@domain.com; Address2@domain.com" in the custom property. So maybe an old limitation, or could be mine are working where they shouldn't be (have to love technology). I'm still doing some research to see a SWQL way, and working with one of our DBAs who has a…

So we started testing it, and its a pretty good start. I'm seeing som false alarms due to [59][32] which appears to be a semicolon and a space, which appear to work with the alerts. Is there an easy way to filter those out? Also have you tried to throw that into a modern dashboard or anything? I'm trying to see how to call…

So for our teams I ended up seperating out to different widgets. Most of our teams just want to know if stuff is over threshold, so instead of returning back a list of all nodes and their general stats, I just return back rows that have exceeded threshold for the specific widget (CPU, Memory, etc...). I went ahead and…

You should be able to. The exact result would vary depending on if you were wanting to go to a node in a critical state, component, application, alert, etc... In your SWQL query you would want to make sure it includes some kind of friendly name (Node Caption, Application Name, Component, etc...), and then make sure you…

Sorry for the wall o text, I know I'm getting into some weird concept areas. So what I was hoping to do was populate the custom property in the alert with the custom property from the node/application/volume/etc....., similar to what I'm doing with my alert actions. For example (I'll go object -> Custom Property on object…

The alerts field is checked. So I double checked a few of my other properties and they are setup with the same selections, on the node front. Several of them are used in the trigger condition (both scope and actual trigger) as well as used for the trigger action (mostly the email action). We do run into the ASCII issue…

I've had issues in the past with PowerShell script execution in general. Do you have other Powershell based scripts working remotely, or is this the first one? Whenever I start with a new powershell script I normally add the component. and set my script as: Write-Host "Message: $($ENV:ComputerName)" and run just that to…

Probably the easiest way would be to include a custom property on the volume (Settings -> All Settings -> Manage Custom Properties). Just create a Yes/No property on volume, and then have that in your alert scope. I would personally go with an Opt out mindset, and create the property as ExcludeVolAlert or something along…

I think I found the issue, after yesterday I was thinking and found an error with the code. It was missing the VolumeTypeID. Looking at the other scripts, I set this variable to 4.

after reviewing, I'm still not making heads or tails of this. We do have a secondary script that goes in, applies monitors, and it appears to be checking for the volumes as well. Here is the run down of the script, maybe i'm still missing something. To save some space, abbreviating sections Make connect to our source…

It is a local disk (local windows span). If I click on list disks, I can manually add it. Would it be tweaking this line: #Volumes AddPoller("V.Details.WMI.Windows"); or am I missing something.

We have a different spin on our side. We also wanted to include if the VM was muted. I also include information on the VM guest state as well. SELECT [N].Caption ,[N].DetailsUrl ,[N].Status As NodeStatus ,[N].StatusIcon ,ToLocal([M].SuppressFrom) As Mute_Start ,ToLocal([M].SuppressUntil) As Mute_End ,[V].GuestState ,CASE…

I wanted to provide the solution we used on our side. Instead of setting it to a flat value, we ended up using the utilization/space thresholds. At this time, I did not see the space utilization threshold as an option under the Virtual Datastore Trigger conditions, so we ended up using a "Custom SWQL Alert (Advanced)." On…

thank you for the information. I will definitely review it and update our import accordingly.