adam.beedell · SRE/Machine Learning Student · ✭✭✭✭✭

Hi cdelcastillo, I believe you can run something like itrinergy to simulate a crap network and run WPM from a box through that software/hardware. Alternately you could install a WPM player on a physical laptop with a wireless card or connected to a wireless network. If you do the later you'll probably need to set it to…

Havnt got access to my palos to test yet, so without getting too complicated something like this? * If panSysHAState =/= active -> Write "yes" to node.customproperty.PaloHADown. On reset write "no" to node.customproperty.PaloHADown * If interface = down AND node.customproperty.PaloHADown = yes -> trigger alert Fairly sure…

I've been meaning to fix this in my own environment for a while. Havnt done it yet, couple paths open: * Include a check in the alert that the polling engine is connected to the DB and polling normally * Create a new alert that auto-fixes SLW when the database sync drops out (perhaps restarts collector service and a couple…

I think you'd have to use a SWQL action Alert action -> custom script -> unmanage.ps1 The format of the script would be basically ConnectSWIS then invoke SWISverb Unmanage. The unmanage command needs 4 values * netObjectID * Unmanagetime * Remanagetime * isRelative Not sure what isRelative does, but it's a true/false value…

No fix immediately jumping to mind, but I can confirm this isnt a problem in our environment and so shouldnt be an inherent problem

Option 1) Make a map in network atlas Option 2) Install agents on both, enable packet inspection, use the application->application UI elements and something separate for the switch. Option 3) Possibly the next-gen mapping takes care of it? Option 4) Something clever with SWQL for the data and a custom HTML element to graph…

In Reports or Legacy report writer there's "Last 24 hours/last x days" etc timeframes, those are what you'd set it do In SWQL or SQL you'd use something like "DATEADD(days, -1, GETUTCDATE())" for the start and GETUTCDATE for the end

Ya cant edit the header at the mo - It's stuck in an old crappy format and JSON is out. (They've recently made JSON application monitors a thing so I'm hoping for an update) You've either got to configure your endpoint to accept the current header and body text (values seperated by "=" etc), or export your data to…

If you set your application alerts to specifically need a Down status rather than Not-Up they should usually be ignored correctly by some combination of the down->unmanaged status or mutes. If not there might be something in that alert design that's not playing well, or something coming from how your environment comes back…

I think you need a network discovery running across those nodes - You can track monitored interfaces vs discovered interfaces that way at least. Possibly with an auto-import to round it out. I think they've added some functions recently to make taking care of interface reconfiguration easier, personally I've not got those…

You got these network nodes in a group already? - That's probably the easiest way to achieve what you're after

I've had this banner, and I've got an expired Orion Scalability Engine Evaluation Core (Installed Version 2018.2.5200.5660) showing in my license manager. I no longer have the banner. Cannot for the life of me remember if I did anything specific to get rid of it. I'm on these versions if it helps: Orion Platform 2018.2…

Basically one per support team, for UI purposes mainly, plus an Admins group

That sounds like the alert's doing what it's supposed to be doing - When the node in the cluster is passive it doesn't have access to the drives, right? Perhaps you filter the clusters out using a custom property or name format?

Not got SAM?

Fairly sure the answer is "...No..?" - In that there isnt a button for that, but generally this scenario would be covered off in bulk by your alert design. Just alert on all hardware faults, or all faults above a threshold, or all faults above a threshold where their vendor is supported, or whatever the relevant criteria…

Like so?

Hi Serena, The main product installs went smoothly and in a multi-server environment this was a massive improvement from the previous workflow. However I did have to create a number of new servers in order to facilitate the install, and i've had several problems since. Still pinning down what's caused what so I wont blame…

Chances are yer pollin stopped working for a bit. You want an alert looking for that stuff, and a couple alerts looking at solarwinds health so you can identify if it's the device's fault, your service's fault, or something else. There's a few posts on the forum here on each topic. You're looking for lastuptimepollutc…

I'd love to tag all the nodes imported in a batch with some variable so that I can sort out further details on them or keep a longer track of how stuff has entered the DB than what the event log retention allows.

Inventory, Status, Response Time, Utilized % -> NPM % traffic per app/port/conversation, source/dest -> NTA

If the last database sync is out of date reset the Collector service If some nodes on a polling engine have their NextPollUTC date in the past reset the JobEngine service If neither of those seem appropriate let us know

Hi Serena, Have you got any estimates for how much database space/io/etc the vmware events addins take up? - Is it all dependant on stuff like the above? - Have you got an example "noisy" and "tidy"? Or is it all fairly tiny and I shouldn't worry about it?

A string called technologyPollingID, you can find available values in the table above. Highly recommend downloading SWQL studio if you havn't already. If you have double click a verb for the required arguments.

Not completely sure of the scenario you're trying to alert on (ie. A-1 goes down, A-2 up, B-1 up, is that a problem?) That said your options are probably: 1) subgroups 2) pain-in-the-ass logic 3) SWQL/SQL advanced alert. The design of each of those is a little different depending on exactly what you need to happen

Without custom html: I doubt it With: Yeah probably It'd be quite a query to work out without being a webdev

"Error Locating Server/Instance Specified" My money's on either the "SQL Server Instance" or "Initial Catalog" values on the template being wrong

Definitely a choice between "Do it the long way" and "Learn the SDK", The latter of which is also kinda the long way if you're starting out. It's not too bad I cant imagine 500+ custom properties is great for your database. I'm guessing you want a site or service value on everything with 500+ possible values? If so that's…

Definitely possible, havnt got to the bottom of it yet but I like the idea. Check here Steps look to be: Add custom HTML element Add HTML+Javascript padding Create a SWQL format query against your own server Put the data into a query to Google Charts

Is there any filter present on the view you're displaying the chart on?