adam.beedell · SRE/Machine Learning Student · ✭✭✭✭✭

Weston's answer is correct, if it sounds too technical: Open AD, search for computers, open the server, it's what you think it is on that page. If you're entering into a push to fill out that location correctly, add location in a format acceptable to Mapquest and you'll get GPS plots on the worldmaps for free.

I suppose I dont get what you're looking for from the thing you're asking for

There's a whole stack of OOTB ones in your platform as default Where those dont do it, worth thinking about what specifically is missing Alerting for the sake of it isnt worthwhile

I got this from somewhere in thwack, I've found that it's not completely reliable anymore, possibly due to some patching inbetween, maybe an environmental problem (i've seen multiple names against one object, where a couple of those shouldnt be correct). However - It works well enough to direct me to the right event, just…

I havnt tested this yet, but I have done some work in this space I think the LA alerts want to alert on a node, because being a node/being "monitored" is the criteria for events to not be dropped, at least usually. VMware events are properties of the parent vcenter as well, so if Nodes is forced i'm not shocked as such…

Some of the things I've suggested there are a little big and the sort of thing that is either environment specific or the sort I'd need to run through bosses to see if it's shareable. Creating whole alerts via script is not something i'd recommend unless you need to make hundreds for some reason. There's some easier…

I think FROM Orion.ServiceNow.AlertIncident

I wont write these right now because I'm leaving the office shortly, but also there's definitely some examples around For both 1 and 2 the solution is to add and "AND ()" into your WHERE condition, and use the datetime functions here: * GetUtcDate() - Returns the current date and time in UTC. * Hour(d) - Returns the hour…

I'd probably just powershell it, but IFFFT would be easier. Hue's just the one I have not the best option, but for that you set up a hub and can cloud expose it or not

Scenario 1) OOTB integration As far as I can tell, the SNOW sections that aren't too locked down can receive Macros, you'd place a macro for ${m=whateverobject;n.customproperties.Priority} or whatever. We dont have SNOW admin in that environment, but have been told 3rd hand that each section locked down in the integration…

(and I jumped into this thread on notification because hell yeah I'd like to set that up!)

It's definitely been done, I haven't done it at work for lack of a light, I will probably set this up with some Hues when i've got my Lab up like Q4

I'll try and break this down a bit - Extracting Arbitrary data - Yeah pretty much fine. There's probably some size limits but otherwise it's possible, the shape of the data is important to think about. Solarwinds macros like to resolve the top left cell of a table query, so if you want to return 2 cells, the best option is…

Does it not auto-assign as default given come combination of these two?

I can confirm both these options work (Severity per alert category, severity per object), if using the OOTB SNOW integration you need SNOW to have the priority field not be too locked down to do the latter without some extra effort on one end or the other

I think UNDP's can already get applied out for something like Make and Model, right? Sans that and scripting, the alert -> CP -> Group -> Apply a monitor thing is a pretty doable SAM method, not sure about NPM only though

There's a bunch of threads about on different routing alerts, one of those is the way to go I expect What I would do to implement exactly this would be to make a couple custom properties, and have a few alerts CP1 Previous_Route_Count CP2 Current_Route_Count Alert 1 writes COUNT(RouteID) to Current_route_count Alert 2…

I've not imported that specific powershell cert monitor, got some simmilar ones in prod already though You can definately place a custom URL in the invoke-webrequest or whatevever in place of $IP if that's what it's using currently. You can supply the custom URL in from the arguments section using $args[0] in the script

I think you might be able to solve this with complex conditions using the checkbox on the trigger page. If not though; If you're doing custom SQL (which should be almost a last resort), the top lines are predefined, so your query should start like this for the nodes table If you're doing SQL, you also cant use the…

Might be worth stepping back a little here. I think you're mostly trying to create a table, right? Running a authenticated POST from an outbound email is asking for security to get on your tail You can produce a table using a SQL macro with FOR XML PATH and cut the auth/ajax/maybe JS out. Apart from a table what do you…

Logic error somewhere, would be good to figure out if what you've seen is a failed log or a correctly-passed-though-failure of something-which-you'd-expect-to-be-defined-before-or-after

Might sound silly but I'd check the requestor means what you think they mean - I can just imagine it actually being something like: Ping each neighbor, report %down Aside from that to filer by BGP usually it's something like Select/join to Orion.Routing.Neighbors rn ... where rn.ProtocolName like 'bgp'

1st reaction - BGP percent loss?? 2nd reaction - Ok, that would make sense.. You'd group by the startpoint I suppose, as in GROUP BY NODEID, then I guess you could CASE the BGP info into up/down statuses, then Count the IDs GROUPED BY the Status, then I guess divide those into a percentage. Feels maybe a little harder than…

Didnt know this was a setting, what's it under?

I think i solved it last time

Thats a good looking modern dash! Came out a lot clearer than I was imagining For the Pie stuff stuff you usually add a GROUP BY n.STATUS or similar, the data kinda goes left to right instead of up to down Maybe pop another thread up when it comes up

Most of the time there's an easier column to use Which table are you working with? I believe what's happening is the square brackets are a representation of an array, and so dont match their string representation Something like "SELECT TOP 10 fs.AncestorDisplayNames FROM Orion.SRM.FileShares fs where…

I think this can be pulled from an existing one, but I'm not sure and probably wont be in a place to test for a while If so, they're both an array of key value pairs, so it'd be like SettingX: SetToY where you want to update the auth method on template A to style B instead. In that case querying what settings are in place…

In UI, stuff like this: Outside of UI: A small edit to what you placed would be like: Here the "n" you're using ahead of custom properties is an alias, and it's undefined, by placing it after the FROM you can call that table something smaller, n is common shorthand but you can see stuff like "FROM Orion.Nodes as Nodes" as…

I'd probably do a node-level custom SWQL alert, but depends how it's all defined. How do you pick the swap volumes (that count) from everything else? Is the alert condition that any of the 3 are above 40%, or if you were to combine them together 40% of the total is used, or that the percentages average to >40% (dunno why…