adatole ✭✭✭✭✭

Have you tried the order by on the plain date? Just as a test?

Sorry if you already know this: In the alert, go to the first tab and make sure the time there is set low. Usually it's 60 seconds. On the trigger tab (second one from the left) check the time there. If it's unusually high (say an hour?) then that's your culprit On the trigger actions tab (second from the right) check the…

On the node details page, you can click "edit properties" and see a screen that lists out CPU, RAM, etc and lets you set a fixed threshold, or use baselines and then set critical/warning based on that. This episode of SolarWinds lab: All About Alerts - SolarWinds Lab #42 - YouTube And this Lab Bit: SolarWinds Lab Bits:…

post the code you have (or better still, the pseudo-code with what you want each step to do) here. Between me and Powershell guru Joshua Biggley we'll get it figured out (yes, I just drafted him into service!)

In additionl to vinay‌'s comments, I would take your trigger action and put it into an email or log message and see what gets output. And then post the results here because I'm interested as to which of those objects populate and which don't. However, I'd STILL like to see a screen grab from your alert trigger page. Not…

Elaboration: If you create an alert trigger action and simply specify "SolarWinds.APM.RealtimeProcessPoller.exe" it will assume it is running from C:\program files(x86) So you need to be VERY specific if you have installed SolarWinds to any other location. For example, I typically install SolarWinds to the root of D:, as…

Turning off UAC has been a "thing" for SolarWinds installs since version 10.3. While I recognize that turning down a security feature isn't the best way to go, my general disdain for most things Microsoft (as well as the fact that their "security" features more often cause me heartache than help me) has made me less…

Yup, this should take care of it.

The other nice thing about setting two separate actions is that you can escalate the email to the group, but NOT escalate the email to the call system. People sometimes overlook the idea of multiple actions for a single alert. It can be quite powerful.

One of those times I'm delighted to be wrong. I had tried testing this out a couple of weeks ago, but I was obviously rushed and not doing it properly. Thanks for the clarification!

If they (syslog) are going to Kiwi, just pass the messages you want into SAM and you can alert on it from there.

Well, you could just take the ksh script lock, stock, and barrel and run it inside SolarWinds (presuming you have SAM) and then you would be monitoring the whole server/application/whatever AND you could have that custom monitor in one place (with the extra benefit of having historical data on the script output. Barring…

It's already a feature request. Vote! Vote early and often! http://thwack.solarwinds.com/ideas/1609

And you will get the information on the web console in the sense that your alert will appear there. Just not a red-coded "up" (you *will* get a green-coded "up", however).

Without diving into the deep technical aspects of the db server setup, that looks like a good start to me. You haven't said anything that is a sure-fire problem (virtual server, RAID 5, disks far away from server, etc). You may want to open a ticket and request an engineer review your specs specifically for this design.…

This one may be a little simpler (no cursors, etc). What it does is join the nodes table to the alertstatus table, pulling the durationfor how lnog a device was down. The one key piece is that it uses the built-in alert called "Alert me when a device goes down" as it's key. If you use a different alert for up/down, change…

OK, got it. I'm going offline for the weekend, but I'll throw something your way early next week. I've got one of these.

First, I think we're both assuming you are using NPM, right? Second, you have to be on the actual SolarWinds polling engine Third, you start the "universal device poller" application From there, you would download the file in that post…

Think about your polling cycles. * SolarWinds polls (pings) every 2 minutes. * If a device fails a ping, Solarwinds sends out one ping every 5 seconds * If a device fails 10 pings in a row, the device is THEN marked as down. * Do you have a delay in your trigger? (You should) That's going to delay the actual alert message…

What you are asking for (basically ownership and permission limitations for views) is something we are thinking about a lot. In fact, meech​ and I had a discussion about it just the other day. (She may have more to say on the subject which is why I'm tagging her). At the moment, I can't think of a way to add this…

My habit has always been to upgrade the primary poller completely, and THEN upgrade my additional pollers and then do the additional web server last of all. It puts the bulk of the database changes at the front end of your upgrade process, and the pollers become more of a mindless update than anything else.

Nice catch!

Go to teh services control panel (services.msc at the Run or DOS prompt) SNMP Service Agent Tab You have placeholders for Contact and Location. You also have checkboxes for which MIB branches to expose to queries (hint: check ALL OF THEM!!) - Leon

No. Straight on the web server. Just like viewing a report.

Check that you are using the variable ${node.blahblah}. Not "nodes". Even though the table name is "nodes", in variable names you have to use the singular "node". Same for "interface" and "volume".

OK, here's the vbscript version

Andy: I know exactly what you are saying and it was my criticism as well - a "better" (ie: more accurate) method would be to say "oh, serverA is down? Let me ping it's parent right now. Nope, it's down too. OK. Mark ServerA as "unreachable". Now, let's go see about ServerA's parent's parent...." However, SW took another…

I'll check. The DBA's keep that as a closely-guarded secret, but if I ply them with beer and chocolate I may be able to get them to crack.

Remember that those are ACTIVE alerts. If the alert has reversed, it won't show up. However, if you click the "edit" button (you see it if you are logged in with an account that has "customize" permission) you can check the box that says "show acknowledged alerts". That may show more. But ultimately it doesn't show alerts…

I'm referring to the web link: /Orion/NetPerfMon/Syslog.aspx