bobmarley ✭✭✭✭✭

Since you posted this in the SAM Forum I will assume these are SAM alerts you are asking about. SolarWinds uses different variables for different entities so sometimes you have to mess around and try to figure out the correct ones to use. First you need to know what your alert is set up for, Node, Application, Component,…

Bulk Import ICMP Nodes - Scripts - The Orion Platform - THWACK (solarwinds.com)

I was asked to get this working by our Network Team. I'm working on a project right now but when I get back to fixing their alert I will post what we did. 

If the routes are getting removed from the database then you may want to use a script to pull all the routing table info out to a text file every few minutes, then perhaps a second script that runs a few minutes later that checks the difference between what's in the database compared to the text file and outputs any that…

If you want to try a different way this is the code I use for a Custom SQL alert for custom pollers. Change the highlighted items so match your poller name and set the values you want in the Where clause. Note this is SQL, not SWQL. WHERE CustomPollerAssignmentID IN (SELECT u.NetObjectID FROM (SELECT…

For example Google "email to a cell phone Verizon" and it will tell you to send to a number such as this. Do that for each carrier you need and place the number in the Custom property field. You need to separate each one either a comma or a semicolon in the CP field if you have multiple numbers. Pagers usually have a…

Here is what I use as the variable for my Custom Property named _Email_Nodes In your environment it would be ${N=SwisEntity;M=CustomProperties.Email} Whatever email address is places into that custom property is where the email is sent to. That way you only need one custom property. Using the alert actions you can populate…

Assuming that you are running from a machine in PST try this. select n.caption as [Device], n.DetailsURL as [_LinkFor_Device] ,'/Orion/images/StatusIcons/Small-' + StatusIcon AS [_IconFor_Device] ,n.IP_Address as [IP], n.DetailsURL as [_LinkFor_IP] , TOLOCAL (Alerts.SuppressFrom) as [Mute from], TOLOCAL…

Most of the ones I have ran across are in UTC so if you are working with the DB use the TOLOCAL command to convert them to your local time. 

Have you tried using the Worldwide Map widget?

We use a custom property such as 'Alert Destinations'. If your org's AD Distribution groups are a mess, rather than clean them up you can simply create some new ones like 'AlertingServerTeam@yourorg.com 'AlertingNetworkTeam@yourorg.com', etc. For a lot of our custom properties we use Alert Actions to populate them rather…

A lot of ads for 3rd party software in the thread this morning. 

I have had 'unable to start discovery' many times before. Never on an existing discovery that had worked in the past but on new ones that were being set up. The only pattern I noticed so far was it happens more often if I change the default timeout values for SNMP, WMI etc to make the discovery go faster. Using the…

If you have additional polling engines perhaps try balancing the nodes onto the APE's. As a general rule I try to keep nodes off of the main poller to free up resources. It also serves as a 'parking lot' for nodes that were recently added or ones I am working on until they are move out to the APE's. In my instances the…

Here is an older one I was using for SNMP Traps, the Trap table moved after my last upgrade and I haven't rewritten the query yet. You could use something similar by joining the Syslog table The alert is scheduled to run every 3 minutes so the SWQL query will run every 3 minutes My alert SWQL. (Reminder this is Traps, not…

Sounds like you may want to try a custom SWQL alert for this.

Mine looks like this. Take out the Where part and you will see the entire table which will give you a better idea of what all of them are. 

When you are setting up your email click the subject line and press the Windows key plus the period. Click on the emoji you would like to use.

This may or may not work in your environment, here is the query I use. SELECT Caption, ErrorMessage, NodeID, ComponentName, ComponentType, ComponentAvailability, ComponentPortNumber, ComponentStatisticData FROM Orion.APM.CurrentStatistics cp INNER JOIN Orion.nodes nd on cp.NodeID = nd.NodeID Where ComponentName LIKE 'SSL…

Looks way nicer than mine :) Thank you! I found an issue with the queries. These two lines: , ToLocal(n.UnmanageUntil) as [Unmanage Until] , AE.AccountID AS [Who] Are pulling in from the AuditEvent Table. That table get populated at the time event occurs, not when it gets scheduled. So any data shown there is either from a…

Try this link Unmanaged Nodes with custom names - Custom Queries - The Orion Platform - THWACK (solarwinds.com) Otherwise use this. SELECT N.Caption AS NodeCaption, N.Status AS NodeStatus, IPAddress, TOLOCAL(N.UnManageFrom) AS UnManageFrom, TOLOCAL(N.UnManageUntil) AS UnManageUntil, TOLOCAL(AE.ObservationTimestamp) AS…

Are you running Powershell as administrator? Right Click Run As Administrator

I have never found a way to make them 'stick'. If you are doing a lot of work in Custom Properties sometimes it is easier to export them out to Excel and do you work there and then import them back in. To make that task easier you can generate a report that shows only the columns you are interested in, and in the order you…

I had a ticket open. Was told the issue was due to two known bugs and they will be addresses in version 2023.2 and 2023.3. Was told it will not impact the system.

Sorry @Vinx it was in reply to the code @raymondakrawi was trying to use. It didn't work when I tried it. Your looks great!

I tried the code that you posted and it doesn't work. The code posted below is very close and does work. This will mute the node indefinitely. Import-Module SwisPowerShell #$OrionServer = 'localhost' #$cred = Get-Credential #$swis = Connect-Swis -Hostname $OrionServer -Credential $cred $swis = Connect-Swis -host…

Either bring in the vendor icon field as suggested by dodo123 or click on Advanced Then click on the trashcan

Did you try changing these values so they match your environment and run this script? This one worked in my environment.

This works on mine, 2023.1 and 3.1.0.343 SwisPowerShell. I wrote it while we were on 2020.2.4 so it was working on that version as well. Take a look and compare. cls Import-Module SwisPowerShell $swis = Connect-Swis -host MyHost@bobmarley.org -UserName BobMarley -Password LetsGet2getherItWillBeAllRight #$swis =…

You can access the tables without using inner joins if you use these pre joined tables. For example AlertObjects.Node.caption ties the AlertObjects table to the Nodes table under the name Node. Caption is from the Nodes table.The query below should have all of the ones you requested. SELECT DISTINCT…