bobmarley ✭✭✭✭✭

Here is my go to query for pulling up some of the tables that are already joined in SWQL. Uncomment the custom props field and fill it in with the name that matches yours. SELECT -- [Nodes].NodeID -- , [Nodes].Caption -- , [Nodes].DNS -- , [Nodes].IPAddress -- , [Nodes].Vendor -- , [Nodes].VendorIcon -- ,…

Perhaps you lost connection to your SQL Server. Try RDP'ing into the main polling engine and launching Database Manager and see if you can attach to the database and read any of the tables. 

Here is a sample of how I set min up and it works correctly: I use both the path to the executable as well as the path to the script. Also in this example I am passing along a variable to the script at the end. C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -Command "C:\scripts\deletefromalertaction.ps1…

The tabs in your browser will not update in that manner, you need to hit the refresh button to reflect the data that has changed on the other tab. 

How are you scanning for the MAC addresses ?

@stevenstadel Great work

Perhaps use a Powershell script to do it. How to send a Wake-on-LAN magic packet using PowerShell? - Stack Overflow

SELECT TOP 1000 AuditEventID, ToLocal (TimeLoggedUtc) as LocalTime, AccountID, AuditEventMessage FROM Orion.AuditingEvents Where AuditEventMessage LIKE '%created node%' Order BY TimeLoggedUTC desc

Try this, otherwise the events are in the AuditEvent table and you can filter them from there in a report.

That doesn't sound right, can you elevate the priority of your ticket to a higher level? Perhaps call in and ask for a supervisor?

It's been a few years (and a different employer) since I have set this up but I set up a SAM template that did a SQL query that determined if the SQL instance was primary or backup. Similar to this sys.fn_hadr_is_primary_replica (Transact-SQL) - SQL Server | Microsoft Learn In the SAM template I remember the Statistics…

Try contacting your sales person if you are stuck, that usually helps. If the issue is something you could share in the community possibly someone here could help. 

I would try re-opening the ticket and asking to get it escalated.

Try adding the widget to the Node Detail page, you should be able to add it? Within the widget Worldwide Map you have the ability to apply SWQL filters. 

Thank you @"giovana.prado" , added the code below. Last line. SELECT I.InterfaceID, N.NodeID, N.Caption AS NodeName, N.DetailsUrl AS NDetailsUrl, N.VendorIcon AS Vendor, I.Caption AS Interface_Caption, I.InterfaceIcon AS Interface_Icon, I.DetailsUrl AS IDetailsUrl, AverageInboundBps95th, AverageOutboundBps95th,…

The easiest way is using the GUI using the Manage Nodes Page. You can select up to 100 nodes at the top of the screen and then do Edit node (all selected need to be WMI, you can't mix and match) then select the new WMI credentials and then apply the change. Adding 100 at a time works ok in my environment, if trying select…

Thanks!

When you create the alert and are on the Trigger Actions page there is an option to Insert Variable. If you click on that you will be able to select any variable you wish to add to the alert message there.

I tried it and can second that it is a bug. Mine does the same.

You could try installing the SDK and look for the data you want to report on in SWQL Studio Orion SDK - The SolarWinds Platform - THWACK The data you are looking for should be in these tables. If you could find the data I would be happy to help you join the tables into a custom SWQL report. 

If you are polling the OID's then the data is being brought into the database. You could create any type of widget you would like. Here is some info on where the data is. (+) Create widget based on OIDs - Forum - Network Performance Monitor (NPM) - THWACK (solarwinds.com)

The column DiskSize is where the change is made. As soon as SolarWinds discovers the change it will update this row. The row will show the new value and what time the value changed. The discoveries are not 'live' but run on a schedule so may not occur at the same time the admin made the change. SELECT TOP 100 NodeID,…

If the data is there it may be in the Audit Event table. Try looking here and if it could then join the tables together. Select TOP 100 VAR2.NodeID , VAR2.IP_Address , VAR2.Caption , VAR2.customproperties._group , VAR1.AuditEventMessage , VAR2.Status , VAR1.TimeLoggedUtc FROM Orion.AuditingEvents VAR1 INNER JOIN…

Not sure about the error but typically whenever a report email runs but the report attachment isn't being generated it has usually been a password issue in the report scheduler. Take a look there and see if that is preventing it. A lot of times people use they're own personal account then the account password gets rotated,…

Try the Academy, it is under Resources on the main page

It's just telling you not to place it on your C: drive so it doesn't fill up and crash the system. The default they choose is shown above. If you have additional drives or a network drive that would be better. 

Here is a start. This is a huge query if you don't run it without getting very specific with the Where statement it may run until it times out. I placed a top 10 there to limit the rows returned. SELECT top 10 [Nodes].NodeID ,[Nodes].Caption AS NodeName ,[Nodes].interfaces.InterfaceID ,[Nodes].interfaces.InterfaceName…

This doesn't make any sense, it is as if the interface isn't discovering the port has been hard shutdown. It shouldn't act like that. If it's just one device doing it possible remove and re-add the device as it seems something is corrupt with that node. You could also try removing all interfaces the re-adding. Both methods…

You may want to look at this feature as well - Define SQL/SWQL Variable

Glad you got it going!