bobmarley ✭✭✭✭✭

If you want to try using a custom SWQL take a look here. Make sure you are using Custom SWQL Alert and then your SWQL condition is selecting the correct table. You can not edit the Select statement directly so you may need to do some SQL tricks to get everything you need in the query.

If you are referring to End of Life / End of Service into the SolarWinds NPM platform for nodes you could import it using Custom Properties.

If you are trying to do it from the GUI from the Manage Nodes screen you can checkbox several nodes then click Maintenance Mode then Schedule and put the start/stop times and select Stop polling object. Another method is using the API. Below are a couple links GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion…

I have had issues with importing custom properties since version 2020.2.6. I opened Case #00968740 and was told to rerun the configuration wizard, which did not fix the issue. Also posted the issue here Import Custom Properties not working on 2020.2.6 What I found was if you were importing just a small number of custom…

The nodes that were added by System are also in the AuditingEvents table. You could easily make a daily report. SELECT AuditEventID, ToLocal (TimeLoggedUtc) as LocalTime, AccountID, AuditEventMessage FROM Orion.AuditingEvents Where AuditEventMessage LIKE '%User SYSTEM created node%' AND daydiff(TimeLoggedUtc ,getdate()) <…

You need to pass along the node caption or IP as a variable when you run the powershell script. Below is how I do it to delete nodes using an alert action, but it would be the same for running any script. You will also need to have the appropriate rights set up to execute the script on the remote server.…

LA Administrator Guide (solarwinds.com)

Here is what I use 

Replace this part of your script try{ $swisConnection = Connect-Swis -Hostname $solarWindsServer -trusted $entityUris = Get-SwisData $swis "SELECT Uri FROM Orion.Nodes WHERE SysName LIKE'$serverName'" $entityUris = @( $entityUris |% {[string]$_} ) $now =[DateTime]::Now $later =$now.AddDays(1) Write-host "Muting node from…

Change the YOURCUTOMPROPERTIES to match yours below. --Note ICMP Nodes will return as Unknown in DeviceType SELECT n.caption AS [Node Name] ,n.IPAddress as [IP_Address] ,v.ViewGroupName AS [Assigned View Name] ,vd.DeviceType ,[n].CustomProperties.YOURCUSTOMPROPERTIES FROM Orion.NodeSettings ns join Orion.Views v on…

I believe Dynatrace has the ability to import from an external SQL database. 

Is there any reason you are not using the alerting engine to simply send alerts to those responsible for each region? We assign each device an 'owner' which is the team that supports that specific device for that geographical area and the alerts go directly to the ticketing system and routed to the appropriate team. 

Here is a SWQL query that has all of the tables linked together. You can go into each table now and grab the additional parameters you wish such as status LED, volume percent used and add some Case statements to adjust the thresholds you would like. To include / exclude specific items such as memory you can set the…

There was a report already on Thwack that had some of what you need List of nodes by view type - Forum - Network Performance Monitor (NPM) - THWACK (solarwinds.com) I added a few things to it here. If you put this into a custom swql report it should look like what was requested. --Note ICMP Nodes will return as Unknown in…

1. 100 = 100 nodes, 250 = 250 nodes, 500 = 500 nodes, 200 = 200 nodes, SLX = unlimited nodes 2. Refer to SolarWinds Platform 2024.1 system requirements 3. No, not recommended 4. No, would defeat the purpose of the additional web server. 5. This is done during the installation 6. SL500 Read the admin guide here NCM…

Usually the spider looking icon (agent icon) turns green after you check the box and click Manage as Node

It should end up looking similar to this after it is managed correctly. This is a Linux node, WIndows looks the same. 

Have you looked in Settings - All Settings - Manage Agents, then check the box next to the node and then click Manage As Node? 

I use Option #4 for several of the items displayed on the main screen. The small chunk of code in the custom HTML Object is below. This file is copied into the IIS directory on the Orion server by the script that is calculating the results. 

One solution to possibly look at is have the Linux servers send the PROCESS1 VALUE1 OTHERVALUE1 as a syslog message to your SolarWinds system. They will get stored into the database and then you can create any custom query you wish to display and you will retain historic data for a period of time. 

I have only been successful in doing this inside of an IFRAME. This may get you started. If it an external site it probably will not work Google this and "encapsulating an external site within an iframe" read the Stack Overflow article about sites refusing Iframes. <html> <body> <iframe src="">YOURURL/iframe> </body>…

I would just write the whole alert in SWQL. You need to use the supplied Select Statement but you can usually get what you need by using the URI or by joining additional tables. 

Read up on this thread, (+) Custom HTML Widget (NOT WORKING)?? - Forum - Network Performance Monitor (NPM) - THWACK (solarwinds.com) there is a setting you need to understand concerning a security risk and a setting to enable to allow the feature to work. 

You could probably use the Get-Volume command in powershell to get the inventory from the server and then compare what is in the SolarWinds database for the same node. 

 Crafting Alerts that Get Noticed 

We use a different tool so don't know a lot about Log Analyzer. A long time ago I used the tool below. Take a look at this FREE Event Log Forwarder for Windows | SolarWinds You can also look for specific event logs using a SAM template. If you have the SAM product it is pretty easy to set up. 

Thanks for posting the working link! I used it and it did fix a couple alert actions that I had created recently that had not yet triggered. Also I upgraded to 2024.1 in my Test environment and had no issues with the upgrade. Have two Production environments scheduled for next month. 

Good to know. We have a lot of alerts that execute programs. The link above is either dead or somewhere I don't have access to get to. 

I'm with @"SteveK" on his suggestions. Giving each Component a unique name will make your life a lot easier later when you want to start setting up alerts. I typically go with alerting off Component as it is the most granular of the two and sometimes mixing Application and Component variables in you alert or report…

I set mine up a little different. This one works.