adatole ✭✭✭✭✭

I might have missed something and I apologize in advance if this is too basic, but did you change your "rediscovery interval" to something really long (like 14400 seconds)? "Rediscovery" is the SolarWinds word for "check all the ifindex numbers and see if they changed". So if you upped that value, you will miss re-indexing…

For those who are following this series, the second post is now up. You can find it here:

Last year I did a fairly in-dept analysis of the differences (in terms of load on systems) between ping-only, SNMP, and WMI. You can find it here: http://thwack.solarwinds.com/docs/DOC-170788 Hope that helps!

I could probably vouch for 3-8 of my guys to be in attendance to something like that.

If I understand you correctly, what you want is to alert when the CPU is high AND the number of jobs waiting for the CPU is high as well. Is that correct? If so, these two posts are for you: The Ultimate CPU Alert The Ultimate CPU Alert ... for Linux!

In the trigger action (email, log, whatever) include this: AlertTrigger: ${SQL: select AlertDefinitions.TriggerQuery from AlertDefinitions where AlertDefinitions.AlertName = ${AlertName} } That will embed the SQL for the alert query in your message. It won't be pretty, but it will be there in "any shape or form".

I have to admit, the title is REALLY daunting. I'll also admit, I don't have an answer. But I can't wait to see the discussion the rest of our loyal THWACK-izens bring to the table!

I'm doing this off the top of my head, so caveate query-or: SELECT InterfaceAlias,CircuitID, FROM Interfaces WHERE CircuitID is not null AND InterfaceAlias LIKE '%CID%'; AND InterfaceAlias NOT LIKE interfaces.CircuitID

While these posts are a little older, the basic underlying facts haven't changed much: SNMP vs WMI polling - pros and cons SNMP_vs_WMI_20130412.docx Hope that helps as a start for you!

Just a bit more info on this: For Nodes, Interfaces, and Volumes, there is a related "deleted" table. For 24 hours after the deletion, you can find the node details in there. (and the supporting data records like collected values for CPU, RAM, bandwidth, errors, etc all stay in their respective tables. At 2am (or whenever…

See my answer from a similar question yesterday, here: https://thwack.solarwinds.com/thread/100716#322515

Hey, I want to clarify two things about my "yes you can" statement from the other day - First and foremost - any comment made about future functionality has to be taken with a grain of salt. Any comment made by me about future functionality should be taken with a really big grain of salt. As with all development, Sh...tuff…

To expand on mharvey's comments, you CAN accomplish WMI monitoring without an admin account - if you follow aLTeReGo's comprehensive "Portocalyps" document: https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2013/01/08/wmi-portapocalypse. However, in IT we recognize the difference between…

More questions: How many devices are in your SolarWinds environment? How many ELEMENTS are in your SolarrWinds environmentt How many devices will this alert apply to?

Just to clarify: For each device (or each device in a specific group, like Windows servers) Get the overall CPU %utilization (not the per-CPU average) on the first day of last month (CPU-1) Get the overall CPU %utilization (not the per-CPU average) on the last day of last month (CPU-2) Calculate (CPU-2) / (CPU-1) * 100…

We covered that in last month's SolarWinds Lab episode: SolarWinds Lab #40: Awesome Alert Integration: Slack, Service Desk and More - YouTube The first part of the video talks about making cURL and JSON calls from SolarWinds in general (using Slack as the example). But jumping to the 43:00 minute mark, we talk SPECIFICALLY…

I know this is an old question, but circling around to offer some clarification: 1) as others have said, the additional polling engine (or APE) is a separate license. HOWEVER, you buy that, and it will cover you for any modules you have now and which you get in the future. So if you have IPAM, WPM, and NPM today, your…

This would be awesome for us as well! How is this tracking against SAM 5.5!

Try changing the "NONE" option to "NOT ANY". (I believe) NONE is the equivalent of ANY, and NOT ANY is the same as ALL. In the negative, of course.

I wonder if this is related to the well-known SAM issue, where components which are disabled in a "critical" state remain in a critical state and re-fire alerts.It might be worth asking support about.

has answered all your questions here:

We'll do you one better! We've got an online Upgrade Advisor. You put in your current environment and it will spit out links to the specific versions you will need: Product Upgrade Advisor | SolarWinds Customer Portal In your case, presuming you are running on Windows server 2008 R3 64bit and MS SQL Server 2012, your…

I think I set these up at a previous customer. Hey jbiggley‌ can you check and see what's in the UnDP folder for cell stuff? It should have some nice statistics in there like db, power, etc.

In the nodes table: Nodes.EngineID You can see the NAME of the engine by running the query: select Nodes.NodeID, Nodes.Caption, Nodes.IP_Address, Nodes.Machine_Type, Nodes.Vendor, Engines.Servername from Nodes join Engines on Nodes.EngineID = Engines.EngineID

I'm going to answer the question from a different direction: An element is an IP address (ie: the whole box), a disk, or an interface. Your used element count is whichever of those numbers is largest per device you are monitoring. Let's say you are monitoring JUST the IP address on 50 machines (ie: ping only) - you are…

As a side note, you can always kick off DB Maintenance off-schedule using the utility on the primary poller - Start -> SolarWinds Orion -> Advanced Features -> Database Maintenance.

The only way I've ever known to do this is to hand-write the URL, except for the last important piece. Thus all of my alerts have http://myserverurl/Orion/View.aspx?NetObject=I:${interfaceid} or http://myserverurl/Orion/View.aspx?NetObject=N:${nodeid} or AA for the application, or AM, or whatever. It's a pain, but it's a…

You've hit upon a few key concepts. I want to state that nothing that you said is wrong, AND nothing you've described is broken. The system is behaving as designed AND ALSO it's not what you (the monitoring engineer) need to have happen. 1a) unmanage effectively "freezes" that node in time. No more data is collected, so…

There's obviously no "one-size-fits-all" answer to this (or heck, even a one-size-fits-most!). Some specifics that would help offer you choices that will fit your needs: * how many devices or elements or flows are at this remote site * how fast is the connection? how big is it? * when you say "cost-effective", what kind of…

I'm pretty sure this is do-able, but I need some more details: 1) when you say "autosys trap alert" can you tell me specifically what this is: 1a) the device you are monitoring 1b) whether this is an alert based on values you are polling 1c) or based on a trap message you are receiving 2) what the element or trap…