akhasheni · sysadmin in a box · ✭✭✭✭✭

If you are looking for Down interfaces you can use "Down Interfaces" resource or create some report, etc. ...neither of which will let me do batch edits on interfaces - the reason I specifically asked for how to do it in "Manage Nodes". It has no impact on the left side itself where are every time Nodes. It does have an…

...and the main section in the middle will show all the interfaces which match the status in question. The main section shows interfaces for the nodes that match the node status in question, not interfaces' status. I.e. how does one display all "down" interfaces anywhere in the "settings" or "manage nodes" sections? (I.e.…

Same here: Ping all registered message subscribers Pinging recipient 'ADM' on endpoint 'd4beb8b9-6689-4399-b3ff-80fde796d471' [local] has failed because of the error: DeliveryFailedPing message received:The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communication because it has…

We run Splunk; the "S" ("security") part in the "SIEM" is only a small one, and the core benefit of it (and any SIEM) is observability and actionable knowledge, in my eyes. P.S. @"yumdarling" you probably meant "SIEM" in the title?

Scared of "free trials" - they're never free - not to me at least - as there's a lot of time spent setting up, learning, going through the paces, and then documenting and cleaning up after the trial expires. Free trials are **bleep** expensive! So what I am interested in, instead - if a given product sparks my interest -…

Hi Balki 1429. Here is my node. Hyper-V polling not yet enabled. "Edit Node" is there. I do "List Resources", select "Hyper-V", and end up on "Virtualization Summary -> Hyper-V Host Details" now instead of "Node Details": I don't see "Edit Node" here any more, and can't get to it from "find node": Clicking on the node in…

It does, and successfully passes backslashes through - yay! (I just missed it - either not enough coffee - or too much of it - 40+ years of drinking it - still can't get it right)

Thanks for posting these chad.every​. I don't see a version for volume capacity alerts; if I were to adapt one of these scripts to provide a volume capacity alert, will it work for Windows volumes that contain backslashes (and thus need "escaping")? There's probably a way to do that in PS - I am just unaware of it. Thanks…

That did it - thank you!

What would a Slack-proof trigger action look like? My usual one below works for *nix paths, but not Windows. payload={"channel": "@slackbot","username": "solarwinds","color": "Warning","text": "<${N=Alerting;M=AlertDetailsUrl}|${N=Alerting;M=Severity}>:…

A rose by any other name would smell as sweet" - was only true for Juliet. in our case, the rose has to have a name without an apostrophe for it to smell like a rose. I.e. if there is an apostrophe in the name of a node, certain functions may not work. "Unmanage" is one of them.

That was an incorrectly phrased question on my part. Turns out, the issue isn't with the traffic per se - but with logging UDP requests such as the ones in the original post. * Aug 14 03:45:46 LinuxNodeHP snmpd[6915]: Connection from UDP: [10.11.12.218]:49919->[10.11.12.192] * Aug 14 03:45:46 LinuxNodeHP snmpd[6915]:…

I don't believe there is a way to do it in Solarwinds other than through a script monitor. If there is a way to figure out through a PS (perl, bash, etc.) script if the process is hung - then yes.

Found an option to clone (copy) views but no way to lock or freeze them, or assign them to specific users or groups. Any tips on the best practices?

According to support, the issue appears to be affecting other NPM 11.5 users and is a little more serious: can't delete any interfaces and hardware health polling via "manage nodes". Any NPM 11.5 users that are able to remove interfaces (stale or not) via "manage nodes"?

I see these too but only when a node actually is down. Orion platform 2014.1.0, SAM 6.1.1 on WS2008r2. The polling interval is 2 minutes yet somehow I am getting 30 of these events in the four minutes the node is down, amounting to about 8 per minute. Strange.

I have a service, sssd, that keeps dying on two Linux servers. While I am waiting to resolve that, I would like to be able to monitor the output of the command: service sssd status With the following actions 1) if the word "running" is in the result, set condition up 2) if the word "down" is in the result, set condition…

Is there a simple way to escape backslashes (e.g. in Windows volume names) in variables? A simplified alert I'd like to post: payload={"text": "Warning: <${N=SwisEntity;M=DetailsUrl}|${VolumeDescription}> on <${N=SwisEntity;M=DetailsUrl}|${NodeName}>: ${VolumePercentUsed} used"} The problem: when a variable contains…

NPM and SAM still have no provision to create multiple object charts dynamically - based on custom properties, group membership, etc. - correct?

Fully uninstalling, deleting the existing database, and then re-installing (using the same offline installer) - resolved the issue.

There's one possibility that it's simply a software bug in NPM and the alert picks up the timestamp not of the current change - but of the prior one. Here is why I think that: 6/20/2015 1:32 AM Event Type Community string for DataMover changed (on purpose - to stop SNMP polling) 6/20/2015 1:34 AM Event Type Interface eth1…

An alert, to me, is a status report, usually that of change (in a condition), or an affirmation (of an existing condition). Some alerts are purely informational, some require an action. Sometimes the action can be devised from the alert alone, sometimes - only from the context. However much I'd like to add a specific…

So the answer to the question is: * run Configuration Wizard - Database, select all default values (including the existing database), let it rebuild what it needs to; then: * assign all nodes to the newly created polling engine (per HolyGuacamole) * delete the old polling engine (which should be idle now, with no elements…

I am back in business after running SW Database Configuration Wizard, however the polling engine still has the old name. How do I change its name?

zackm​ posted an answer in Alerting on Volume Thresholds​ (where I asked the same question): have you tried replacing ${VolumeID} in your SQL variable with ${N=SwisEntity;M=Volume.VolumeID} Tested - Zach's suggestion worked! The resulting statement is then: ${SQL: SELECT REPLACE(Caption, '\', '\\') FROM Volumes WHERE…

Thank you all for your responses thus far. We did have "component down" alerts but never sent emails from them, so few people ever saw them. Application monitors were taking care of all our needs: if a component went down, "application down" alerts would trigger. (I see there are exceptions to this logic, e.g. when a…

Seems that this is either a result of a corrupted database, or a combination of several bugs in Solarwinds? If the record (of an object in Solarwinds) is stale and no longer exists, why was the alert triggered? If the object does exist, and the alert was triggered correctly because of an issue with it, then Solarwinds'…

Installed NPM 10.5 in eval mode on a server already running SAM 6.1.1. Herein lies the problem. According to support (and "Compatibility of SolarWinds Orion Products for Installation and Upgrade" KB), these two aren't compatible when installed on the same system or using the same database. NPM versions compatible with SAM…

Also: is there a way to insert (Now - KeepAlive) value in an alert? Track it in a graph in Orion?

Is there a limit to the script length? A script works if its length is 780 characters, doesn't (SW produces the error message in the title) if I add enough comments (blocks of "#" characters) to get it to 1200 characters. I need it to be about 5K characters. Perl version on the target is 5.10, if it matters.