adam.beedell · SRE/Machine Learning Student · ✭✭✭✭✭

This can be a but fiddly depending what alerts you've got SELECT aa.AlertActiveID, CASE WHEN ao.AlertConfigurations.Severity = 1 then 'Critical' WHEN ao.AlertConfigurations.Severity = 2 then 'Serious' WHEN ao.AlertConfigurations.Severity = 3 then 'Warning' WHEN ao.AlertConfigurations.Severity = 0 then 'Informational' WHEN…

Got a SS?

Without touching the SWQL for the moment, you might need to do something to bring interfaces into a historically tracked table, maybe an alert for added/removed interfaces to add events in then join the events table perhaps.

Hit the pencil on top right, search hardware, drag it over to somewhere you want it Later might be worth spinning off a new view for this device type, applying the new view to those devices, and customizing the view to display them well without changing any others

Curious where you get to with this. Accounts can be deleted so presumably it's possible somehow. About all i've done with this is edit the enabled property to turn one off, that might be enough?

Have a search around on here there's a lot of scripts for this already built Note that you add a device, then add stuff-to-be-checked to it, then add metadata, which tends to be more complicated than people think and requires some upstream stuff usually.

Gotta add some error handling to your task. Could be any number of things at this point. The task can be successful without the script doing anything at all depending how you configure it

It's a surprising answer as I dont think this is broke universally

Download the cert and add it to trusted, should work

No luck with the account settings thing?

Got an IP in there somewhere?

Sounds like you might have nicked a quote or some other minor formatting thing. Not sure how a "where clause" is sneaking into line 13 as is

Under Manage Reports there's a Schedule option ;)

These are live icons, what i'm doing here is enlarging the objects with multiple links, then bringing out the child objects that form those connections (which I pulled from clicking on the auto-formed arrows and searching within the related objects for core and core2), at which point those automatically link up too. I'm…

Think about it like: 1) Find the data externally (Sounds done?) 2) Get the data into SLW (Sound done?) 3) Find the data in SLW (I think you're here) 4) Select data from tableItLivesIn where someRestrictionIfNeeded 5) Good to go So usually a good way to start for 3) is to find it in the UI, and note how many levels you…

I know this isnt a nested map, but something like this maybe? (Purely illustrating a way of doing multi-links, i dont really have any serious nested maps)

Are you using the "test" button in the "edit script" dialogue? If not you tend to get errors like this regardless, it formats the thing receiving the output Try moving the endquote on the Message line to " Write-Host "Message: $ListsEqual" " Script seems like it works in general, though I've no idea why the if doesn't error

Feels like an odd approach to SSIS this job, there's an export tool built in for scheduling and whatnot already. You can SSIS an API call for the SWQL equivalent too. The SQL you're after looks pretty straightforward but I'll keep teams calls within my job for the mo (message if you really want a consult). Otherwise could…

I'm guessing it's counting from 0

Absolute works fine Could integrate with a 2fa'd system for access if you wanted to. Not sure what the target process you're hoping for is, but could imagine something like Task scheduler pops up a task Task calls 2fa system 2fa system prompts user User responds 2fa system responds back on confirmation run task else end.…

Sounds like its handling "False" a bit weird. Try "0" or "$false"?

Duplicate alert, strip everything bar the schedule, save as "Master Schedule x", duplicate that when needed? (probably could import/export the while alert w/ schedule or the database item in alertconfigs)

Agreed!

It's worth mentioning - generally you want to keep stuff in SWQL unless you have to use SQL, as the table structure in SQL can change between patches, but the SWQL one should stay about the same

Download the Orion SDK, there's a search bar on SWQL Stufio on there Note: That gives you SWQL not SQL, but usually you want to use SWQL, and if not it's a good start to then plug into SSMS.

Hi there, 1) It's just basic at the moment, sorry that's all that's around. There's a post in the features request section to resolve that. Expect it to arrive in an update at some point proportional to how many people want it. Personally I've got SAML + a service account with a self-destruct rule on it, that was quite fun…

Yes, Yes, and Yes in that order you want these pages https://documentation.solarwinds.com/en/success_center/sam/content/sam-templates-powershell-scripting.htm https://documentation.solarwinds.com/en/success_center/sam/content/sam-powershell-sw3460.htm

100% a SAM template isnt the right place for this - It wants you to end with a Statistic and a Message and an Exit code, which a big array of VMs isnt. You could count some error from the VMs array and report that if you wanted. So if you're after a SAM monitor you want to really change this around a lot, and think about…

The answer is definitely "Yes", but this has just changed so not sure of the process as of current patch. The customer service line could sort you out in a pinch.

I use this, you can ignore the customer/service stuff unless it's relevant Most of that is just covering my bases, shouldnt have a mountpoint on C anyway Try making the logic in the scope, then once it's working move some parts down to the trigger. That way when you click "show list" you can see what's happening and if…