adam.beedell · SRE/Machine Learning Student · ✭✭✭✭✭

There's a drilldown widget which is released but not really ready yet, might wait for another patch on it before switching over

Note you're getting into the security/siem world here, if this is sufficient and you've got SAM already it should be a quick add, if this is the first in a series of asks there is probably something in one of the other products that can help while being a little less custom

There's a bunch of examples of alerts queries prebuilt on here, SWQL is the way to go really

I would go SAM -> +3 or so event log monitors -> 2 or 3 alerts, should be reasonably easy to test given some server to work on

3) You can get a free one for 60k points on the store usually, or you can get one from the MVP program, or you can get them sometimes from specific in-person events

Thanks for posting, that Up/up thing must've been frustrating to work out 

Beaut of a post

Yours was a much higher effort reply lol

This question is a little hard to read, I think you've had some line breaks get eaten up I was going to provide this answer based on your question: This'll be either a straight JOIN, or a JOIN or a subquery, or a subquery in a WHERE That answer is still legit, but looking at your queries I think this is actually just a…

You want the 2 lines about the process names to be in an OR block, it's not possible for there to be a process called both sqlserver and msdtc at the same time Other than that what you're doing is fine and makes sense. You can call a node custom property or something containing an email address if it needs to vary it's…

Oh man I am so keen to give this a try Generally solarwinds is unhappy with >200ms latency between servers, I believe that starlink specs should allow pretty global coverage for polling engines under those conditions without the need of super expensive lines. I think there are organizations in which this would solve a…

This is hard to answer because security stuff will vary what works If you can run it from RUN on the SW box, then it should run. You've got remotesigned on here, so hopefully the script is signed or it wont do anything Next up your script is going to try and connect from that box to the target server, if you're connecting…

With Russ/' solution, i'd try and add a section using/referencing discovery results in the #Simulate manual check section If you've got the virtualization layer for your stuff consistently you can pull the VirtualMachineVolumes section, which means unmonitored volumes could just be an OUTER JOIN on that table, maybe. In…

Pretty sure you need more cores or less stuff on that engine

Squinting at the scenarios a little but S1) 95% Confident no, 5% I didnt get you S2) Yes, assuming that you either add F mnaully (select all) or dont rule it out via the auto-add settings, but you can exclude it from the discovery I believe

Middle mouse click?

I always find people like the Idea of CPU/Memory alerts more than the pratice lol, long smoothing times are good paired with checks for unresponsiveness so I'd say you're in the right place. Usually ping up but unresponsive is alertable under "not-responding" type alerts, there's some examples on thwack and a OOTB in…

I think the one on the left is dynamic, so if there's mb of stuff it's in mb. so you'd want a similar function on the right. Nab someone else's function for sure

There's a couple potential ways to interpret what you're asking for that have different answers "I want to add the object to this query" - Seems like you've got it on Displayname, could add e0.transactionID I guess "I want to get the alertobject property from one of the alert tables" could Join Orion.AlertActive aa on…

I have a few slides for a mostly-uncoded method for answering this sort of question i've been pitching solarwinds to develop Got many enabled alert categories (things in Manage Alerts)?

This issue is a faff at all levels because security settings get involved and they can differ I went through a bunch of troubleshooting for this myself, but also gave up at least once I think the 1st-party solution needs some work nowadays The account used to run the report makes a big difference

Beaut!

you're probably thinking of an iframe iframes are rarely OK by security nowadays, so this frequently doesnt work the way it would like 10 years ago

I think you've placed something like the Application Tree element or something on a plain classic summary dashboard. You can avoid filters on the elements if you place a filter on the whole page, you can get there hitting the pencil icon twice If you want to filter the element anyway, it's mostly like what comes after a…

Bit of a weird line by the support guy imo * "Using agent would give us more accurate data"* Probably most of the metrics are the same, and just being collected. Agents can have an issue with ping stats when the aent breaks, and WMI can have issues with TCP port count maxing out, etc, pick your poison * When I asked if the…

Did you have a solid period of normal operation between changing the DNS name and when you've retried the install? There's an Engines table, i think it's just DBO.Engines, which is editable in database manager, i'd try and make sure it was updated and allowed to chill first if I could. If i could not, then I'd take a look…

Products tab -> any of those

@"felipeaf88" to confirm, have solarwinds poller 1 monitor solarwinds poller 1, if the latency is still above ~0 then it means there's a delay is stuff leaving that box, consider it broken at that point. Check TCP pot count, CPU/MEM, Element count, Reboot

This is equal to "Poller 1 is all messed up" or perhaps "poller 1 is far away"