bobmarley ✭✭✭✭✭

$yourvariable = [math]::round($size[$_] /1Gb, 3)

You can access the database via the API. Please read the SDK documentation GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion platform, including tools, documentation, and samples in PowerShell, C#, Go, Perl, and Java. Many sample SWQL queries can be found here on THWACK

That was a great video, thanks for sharing. 

Nice work!

Thanks! @"chad.every" That makes it difficult :( Back to your plan and SSH to get the data. Step 1. Somehow get the data into the SolarWinds database. Step 2. Create an alert rule or advanced SWQL rule to alert on the condition. Step 2 is easy if you can get past Step 1

Possibly research the MIBS for the device and see if there is one you can use for a Custom Poller for this condition. 

You could do as @"adam.beedell" suggested and create a SAM template to do a similar SQL (not SWQL) query and that query results would then be recorded unto the database and kept over time using this out of the box template.

It's been a few years but the last time I had to run a script remotely I put the Orion server itself into the Administrators group on the remote computer and the remote scripts would then run on the target machine. There are probably better ways to do it but that is how I was able to get it to go. 

This works to run a script locally on the Orion server, I am passing Caption as a variable to the delete script. C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -Command "C:\scripts\deletefromalertaction.ps1 '${N=SwisEntity;M=Caption}'"

Below is a block of code that reads a list of IP's from your original spreadsheet IPsToAdd.csv. It reads each IP from the spreadsheet then does a lookup in the database to see if the node exists. You could use a similar lookup command after the node was added to verify it exists in the database and output any that were…

You can use a simple query for that. SELECT count (IPAddress) AS Total FROM Orion.Nodes And you then can use the Where to grab specific node types, example: SELECT count (IPAddress) AS Total FROM Orion.Nodes Where MachineType like '%Windows%' or SELECT count (IPAddress) AS Total FROM Orion.Nodes Where Caption like '%SW%'…

Have you verified the account used to run the report hasn't had a password change to it? That is usually the first thing that I would check. Also there is a 'bug' in reports and whomever the last person that viewed the report configuration or schedule is the account that is tied to the report next time it runs. So if you…

When nodes are added they are recorded into the Audit Event Log so you could see those events in Message Center or you could use the SWQL query below SELECT TOP 1000 AuditEventID, ToLocal (TimeLoggedUtc) as LocalTime, AccountID, AuditEventMessage FROM Orion.AuditingEvents Where AuditEventMessage LIKE '%added node%' Order…

If you are trying to access the data externally you can use the Solarwinds API available here GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion platform, including tools, documentation, and samples in PowerShell, C#, Go, Perl, and Java. You would pull that data via a SWQL query which you could run from SWQL Studio…

The events you posted began and ended within 11 seconds, even with a 1 minute poll time you would only have a 1 in 6 chance of catching it using polling. SNMP Traps and Syslogs are 'unsolicited' messages that are sent at the time of the event, each time the event triggers or resets so these would be the better option for…

This is how I execute an external powershell script successfully. The same should work for Python if you get the path correct and you have the correct rights set. I run mine using an AD service account that has the correct user rights. The "'${N=SwisEntity;M=Caption}'" at the end is simply sending in a variable from…

This is how I execute an external powershell script successfully. The same should work for Python if you get the path correct and you have the correct rights set. I run mine using an AD service account that has the correct user rights. The "'${N=SwisEntity;M=Caption}'" at the end is simply sending in a variable from…

This is how I did it. The first section of the alert was the Down part for the node The second part used a custom SQL Query. Note this in an old alert setup and I believe the query referenced below was prior to version 2023 but that is how I did it. 

Perhaps consider using Syslog or SNMP traps alerts from the routers in addition to the polling alerting. From your logs it appears that the outage was just a few seconds and the SNMP polling didn't catch it as @"stuartd" stated. 

At current time mine are mixed, my original main poller and polling engines are on an older version of windows and recently we added several more polling engines that were Windows 2022. Planning to update the older versions later this summer. 

We had to do it that way because so many different teams are adding nodes to the network and we had no way to keep up. Sometimes we got notified and sometimes not. 

I'm using a Custom Query Widget instead of a Table Widget

SELECT [node].MachineType ,'/NetPerfMon/Images/Vendors/' + [node].VendorIcon AS [_iconfor_machinetype] ,[node].caption ,[node].Status FROM Orion.Nodes AS [node] WHERE [node].Status != 1

We do an ICMP only discovery of all of the subnets for each building, data center, etc once a month but do not import any of the nodes during discovery. We also have a polling engine set aside as a 'parking lot' for any new nodes that get added, so we can ensure the nodes get properly monitored before pushing them out to…

If it's not working as expected try moving these conditions down. I usually only filter nodes on the top section or leave it blank and put the alert conditions all together in the lower section. This should work if you rearrange it. Maybe choose 'All objects in my environment' in the upper section. 

You can use the SolarWinds API to export the data. The API documentation is here. GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion platform, including tools, documentation, and samples in PowerShell, C#, Go, Perl, and Java.

That is a custom report you can create that will get you volumes over 80 percent which you can adjust. If you put Select Top 10 at the top is should be close to what you are trying to create. 

SELECT [Volumes].FullName AS [Node] ,'/Orion/images/StatusIcons/Small-' + StatusIcon AS [_IconFor_Node] ,[Volumes].Node.DetailsURL as [_LinkFor_Node] ,ROUND([Volumes].VolumeSize/1073741824,2) as Vol_GB ,ROUND([Volumes].VolumeSpaceAvailable/1073741824,2) AS GB_Free -- ,[Volumes].Caption AS [Volume] ,[Volumes].DetailsURL as…

With Icon and Link, adjust the Where section SELECT TOP 200 [Events].Nodes.Caption AS Node , [Events].Nodes.DetailsURL AS [_LinkFor_Node] , '/Orion/images/StatusIcons/Small-' + [Events].Nodes.StatusLED AS [_IconFor_Node] , [Events].Nodes.IP_Address , TOLOCAL(EventTime) AS LocalEventTime , [Events].Message ,…

Do you have a custom property set to identify a UPS? Otherwise you could use: And [Events].Nodes.IP_Address Like '10.10.10.%' And keep using that for each subnet until you have all the UPS's on your Where statement