adam.beedell · SRE/Machine Learning Student · ✭✭✭✭✭

In a Baader-Meinhof phenomenon I'd never had this problem before, but had it today immediately after seeing this post. the behaviour is really weird. Seems to care about what comes shorly afterwards, terminating a string I suppose. If you cant slightly move stuff around to resolve it you can place it somewhere in the DB as…

Not sure of the fault here, but I've got this feature working in my environment. Might want to check F12 and see if there's an error popping up. Mine open on the same tab

Could edit the table with database manager. No idea if that causes a problem though.

Specific to what you're asking about: - You can add a macro with a case statement to switch out some bit of text, that might work. "To: ${x.team}" or "To: ${SWQL: Select case when x.team like 'apps' then 'appsaddress' else x end as addressswitcher} Note that when these fail it can mess up your action so build robustly More…

Could do something like: select top 1 'Asset Manager' AS [Full Name], REPLACE('example-AT-work.com','-AT-','@') AS [Email] , N.Caption as [ItemName] from orion.nodes n @"KMSigma.SWI" What's the SWQL stance on variables at the mo? It works if you can define one, seems to be in the UI

Download the Orion SDK for SWQL studio, will make errors much easier to work with. SELECT DisplayName, DetailsURL FROM Orion.Nodes where Status =1 and (DisplayName like 'ABC' or displayname like 'BCD') ORDER BY DisplayName DESC That works ^ Two main problems - DetailsUrl is a plural - You need to redefine the thing to be…

You can set a task running to auto-import via the API, search "Orion SDK" and/or "Solarwinds Swagger" You can also set alerts to populate properties. I've found this works and keeps stuff in-ui but can be fragile

That sounds like a fine solution to me - That said you can add a link in custom table resources, either by using [_LinkFor_x] as in bobmarley's example, or with CONCAT('<a href="',detailsurl or whatever,'">',Nodename or whatever,'</a>) as [built_our_own_html_link] and then ticking the "Allow HTML" option against the column

I'd treat this as a fault then (though maybe try assigning to just one simple node too, to see if it's a bug on bulk stuff, or just assigning applications total)

Try setting the template to "inherit from node" then and then on deploying set it to "inherit from template", should be fine. But yeah you can through the API, I find those a little hard to get my head around, so not sure about "quick"

I'd expect you to have an error logged somewhere around the logoff event. As this shouldnt happen it's a little hard to guess at, i'd try and find that error/log and go from there. Maybe test with other accounts or other tables (like if you were defining a nodes group, try a Hosts or WAP or Volumes group or something) and…

You can use a subquery in the custom SWQL bit to do what you describe, can be a bit fiddily to work with. Your use case sounds like you're trying to get alerting levels into the product, i think, I've not seen anyone do this without getting another tool involved. Seems possible, though will make your alert fairly hard to…

Super recommend not doing that

I think that wont work there. The "Filter" section basically goes in a WHERE statement, probably wont let other stuff through That said, you can quickly replace this with a custom table. Select x from nodes where status = 2 order by y asc/desc

Any leads from that process?

Definitely not normal behaviour - Probably best to call support for this one.

Looks fine to me. There are much weirder distros than ubuntu that would work for.

In addition to what donrobert5 posted - It's probably a vmware alarm. That stuff is handled in a super non-optimal way in SLW at the moment.

Put some creds in the snmpd.conf file, and match them in the dialogue box you pictured If you want a deeper explanation it's a linuxey thing rather than a solarwinds thing, just google snmp ubuntu or similar

You want to pull the event message variable, then if you want to be clever wrap that in a custom SWQL/SQL macro to use stuff like REPLACE and SUBSTRING to chop the username out

You've got a potential block at the windows firewall out, network firewall, windows firewall in, or SNMP authorized list levels.

(and event forwarding or whatever fancy scripts you want to throw at it or API stuff so whatever is running on the box. .... but first SNMP)

SNMP

@"marcrobinson" Here's a generic-ish start, this does some certificate checking, but i've not really settled on the final output yet. The tough bit IMO is getting the scope right, and afterwards being in a scenario where you've got a uncertain amount of stuff to return. I'm leaning toward custom tables for the lot of em,…

If your old UI had actual groups, you want to use the container table If your old UI had stuff grouped by something, you want to use GROUP BY For big boxes you probably follow the format select status, count(1) from [table], group by status (That's a pie really, to change for a box have a think about if you want to count…

A single license for an external tool if externally available, else a script/task running on a different internal server You want to add a script to your patching process to gracefully shut down solarwinds and possibly keep it down till done

This would be a weird SAM monitor if you wanted to use SAM. Would do an event monitor for the lock, apply to all DCs, add a searchable element somewhere. oooor use the lockoutstatus tool from microsoft as a markedly quicker troubleshooting tactic Enterprise-level i'd probably go with a logs or SEIM type tooling.…

I'd super-recommend not trying to do both of these with one action. You'd need to solve this problem for almost every variable and it'll reduce visibility of what your ticket actually says and introduce complexity where it doesn't need to be. Your interface alerts could do cool interface specific stuff, checking discards…

You can use any of the "Script"-type monitors to make an API connection and poll the data, or do the reverse in azure, using a logicapp or simmilar to send API calls or something back to your solarwinds box. The API monitor feature may be worth a look For a more SLW-Native solution it might be worth thinking abou what your…

What are you trying to monitor about that gateway? I'm doing some Azure monitoring currently, everything's doable but i've found azure stuff pretty hard