adam.beedell · SRE/Machine Learning Student · ✭✭✭✭✭

It's possible to do a less-than-realtime-detection based around the backup windows. I've got one that works but i've never been convinced it works super well either

This is super annoying and it's kinda on the device's or standard's end. I suppose you could put a middleware service inbetween to only forward the "change" logs from within the informational level, but even then you need to be careful to maintain the source as the original device. Hard problem, experiencing it myself.

It's not really trackable at the moment. If it were, you'd probably have a few hundred things logged per pageview

I've got this working within the api poller, and fully outside of the api poller, doing it both inside and outside an api poller sounds really hard. I know one way you could do it, but it comes with hefty limitations. This stuff's easier to chat about imo, feel free to drop a message

OR you can set the reset condition to 30 mins and have it trigger regularly

Hard to say for sure, if you said just older versions or just WAPS that'd put it down to just old, stable features, because it included the new stuff as well I'm not sure how it works yet. If you've got a weird device in the Secure Applicance, or Switch space it's more likely that one. There is a log but I'm not sure…

Interesting, what version of solarwinds are you on? And what sort of devices do you have in meraki? On my end i've had a few orchestrator's added for a while, since before there was any reference or orchestrators. In 2022.1 or something close to that there's some additional stuff polled, akin to "things bigger than APs".…

OR you can, in the SAM template/application page, set the job to Agentless

Excellent post!

In your script you use a line like: $credential = get-credential ${CREDENTIAL} then use $credential to authorize the thing Easier said then done sometimes

I expect so, depends on the app a bit and the permissions you give it. Lets say you have: SQL DB : 1433 IISServer: 443 + some weird thing on 6767 I'd say you probably want to run an additional config in the IIS application package, and potentially put some extra monitor on the 6767 thing so the application connectivity map…

Agent's mandatory for the application connections feature I'm afraid. You can set up some equivalent stuff manually for diagrams and that, but ultimately it's doing packet inspection and that's not easily replaceable. SAM's pretty powerful for this sort of thing mind, building new application monitors is valuable time…

Are you connected to the Velocloud api or are you pinging the devices? ${N=SwisEntity;M=Caption} = Ping/SNMP/etc ${N=SwisEntity;M=SdWanNodeRelyOrchestratorInfo.Type;F=OrchestratorType} = API stuff

Gotta rewrite em I think.. In fairness most of those seem like they'd be fairly easy to redo

Negative sounds like a overflow error, and int64 is massive, I'd guess there's a polling script of some sort that handles a standard less than int64 such that the database can handle it but something else doesnt. The limits to look for would be like one of these probably: int4signed2,147,483,647__int162short, short…

Edit the height of the widget, top right, take off like 400px or something Should be the aspect ratio is preserved, your map is wider than tall, and it's in a box that's taller than wide. If there were some random white box in the unhappyface region that'd make this behaviour with a different aspect ratio. I dont expect…

Monitoringlife is on two correct tracks below, you can try repurposing these below for an application level alert looking for component-level details (Top 1) Statistic: ${N=SWQL;M=Select top 1 concat(a.Components.CurrentStatistics.ComponentStatisticData, '') as data --, a.Components.CurrentStatistics.ErrorMessage from…

Stick an alert on your polling engines being over a threshold, and have them all monitoring themselves and each other. I'd agree that it's probably port exhaustion but could be other stuff too, sticking the test on loopback covers bases while diagnosis continues

I'm interested, and believe this to be possible, but have few answers for you. Post to get some future pings or maybe to find again if I find a chance to try this out. I believe little is logged from api stuff The network discovery tool is for sure the method'd that'd be reccomended as default, and that stuff gets logged…

That's no longer the design i'm afraid. There's upsides and downsides, but the random installed modules shouldnt be doing anything

In addition to what seashore said, which is correct you can also use the "api poller" tool, or some funky script monitors if you had to

Yeah this works fine, i've had to set basically-this up in the past. Stuart's logic is correct.

Guess 1) Is your reboot trigger an event? Not sure those will play ball if so. Guess 2) If not an event, and you reset the alerting service, does that sort it?

Yes, though i've never had to select top 1 n.NodeID, CASE when n.nodeid = 3 then (select top 1 '1' as one from orion.nodes n) else 99 end as test from orion.nodes n (in my case the top ID was 3, sub in whatever)

My suspicion is that it's not getting checked at all - That when this script is ran (Note: I expect this is with a local account, which means using some system account, if it's not that setup, say remote mode with an agent or something that'll be important) If i run this script on my home computer with no access to your…

Aha someone else with the memory usage issue! I've found dealing with that one has been fairly easy, but diagnosing and resolving it fully has been a pain and is ongoing Recommend sticking a scheduled task on the box to reset the SWIS service if memory use is over 5gb Support will be a faff, eventially you'll be asked to…

In a table you can tick on an 'allow http stuff' in the column settings and then you get some nice colours out

Any idea what they change to/from? Always regular?

For everything other than alert configurations It can be easier to join the orion.statusinfo table for this sometimes for ACs i use this block CASE WHEN ao.AlertConfigurations.Severity = 1 then '<b><p style="color:red">Critical</p></b>' WHEN ao.AlertConfigurations.Severity = 2 then '<b><p…

Any idea if DPA repo in an azure sql managed instance is on the roadmap for anytime soon?