ajiwanand

That is also the reason i wanted to figure out a way to pull in the 'average' value of perfmon

Thanks nglynn, this is good info. I will test it out and see how it goes All I need to do now is figure out if i can have a rule to supress alerts if they fire x times.

This seems to be the right answer but im unsure how to use it with the SWQL (or if it even works) I've tried: ${N=Alerting;M=Previous({N=SWQL;M=SELECT c.MultipleStatisticData.StringData FROM Orion.APM.Component c where componentid = (${N=SwisEntity;M=ComponentAlert.ComponentID}) and c.MultipleStatisticData.Name like…

The problem with this is that the value its currently pulling in is the amount of logs ingested by an application. This amount can go from 5k to 0 in seconds, since Orion's baseline only evaluates initially once the initial baseline is configured im afraid it will overfire due to the possiblity of 10k logs ingesting then 0…

Thanks Mesverrum this makes sense

I was hoping it would already exist lol. Im going to look into the API to see if i can get it done. I assume i have to do a poll to get the node ID, then another to post the custom property for that node ID. The documentation isnt that great though

I would be very interested in this as well. Wondering if there was any release of this?

There's only two options and both is around the alert being acknowledged. What happens if the alert is not acknowledged? My current setting is the default (Do no execute if acknowledged) but what happens if the alert is never acknowledged and the trigger action keeps happening. Does it recycle the escalation levels? or…

Hey jrouviere​, This works GREAT! Would be nice to see this built in as the option to have 10 statistics should mean that we cna use those statistics in other parts of SW but thanks for looking into this

Yep I realized this afterwards however I'd also like to alert on the average number. Is there anyway I can create an alert that will alert if the average is above/below a specific threshold (or baseline) ?

When adding the node, do I have to use server initiated communication to connect? Whenever I install the agents on the servers themselves they show up as their hostname obviously.

This issue is not with getting the values but rather getting the Previous values. Thus putting the SWQL as the answer wouldnt make sense. Will post them for reference though

Solarwinds by default doesn't pull stats when my script exits 1 which is down. Secondly, I have multiple stats and there are no single variables for each statistic, but i found ways of using SWQL to pull what i need however this doesnt matter as once SW ses the component as down it disregards the statistics and doesnt pull…

I did see that but my issue with that is I have to specify a folder to monitor. However since this is a jump box with multiple users folders get created all the time. I was hoping there was like a disk growth monitor to pinpoint large files and stuff. Might be asking for a lot though.

I was able to achieve this by using a powershell script that uses plink.exe to ssh into a linux machine and run a linux script. (plink -m should do the trick). As long as the local system has permissiosn to run powershell (i had to give an admin account to the Solarwnds Orion Service to get this working) then it will work.

This was due to the output not being defined by us not using the 'get output' function in each script when setting it up. It was missed because we used the multi edit function to bulk edit the script. On this note, is there a way to bulk "get output" to get the output values for all component monitors within an application…

I found the problem. It was actually just the service account used for solarwinds. I needed to change the logon account of "Solarwinds Orion Module Engine" rather than "Solarwinds Alerting Service V2". Once I changed this I was able to use Powershell 64 and 32bit just fine.