bobmarley ✭✭✭✭✭

Comment out the existing Where by using -- in front of it and try changing it to what is shown below to show only actions taken by the System account. Optionally comment the Where out entirely so you get all of your events and build a new Where that fits what you need. --WHERE AuditEventMessage LIKE '%Unmanaged node%'…

This is the SWQL table that has some of the info. I don't see some of the SAM stuff in there but it is a start. SELECT TOP 1000 AccountID, Enabled, AllowNodeManagement, AllowMapManagement, AllowAdmin, CanClearEvents, AllowReportManagement, AllowAlertManagement, AllowCustomize, AllowUnmanage, AllowDisableAction,…

Here is with Tolocal, includes nodes that were remenaged and sorted by when it was unmanged. SELECT TOP 100 Caption, AuditEventMessage, UnManageFrom, UnManageUntil, ToLocal (TimeLoggedUtc) as LocalTime, unmanaged, NetworkNode FROM Orion.AuditingEvents CP INNER JOIN Orion.nodes nd on cp.NetworkNode = nd.NodeID WHERE…

Here is one I use, I never put the ToLocal in so the time is in UTC bit this should get you started. SELECT TOP 100 Caption, AuditEventMessage, UnManageFrom, UnManageUntil, TimeLoggedUtc, unmanaged, NetworkNode FROM Orion.AuditingEvents CP INNER JOIN Orion.nodes nd on cp.NetworkNode = nd.NodeID WHERE AuditEventMessage LIKE…

On my DB the ORION.EVENTS table only goes back about 60 days and I think I bumped up mine from the default a long time ago, not sure. It is possible the node went down and it's no longer in the ORION.EVENTS table. 

Custom SWQL Query for Temperature - Forum - User Experience - THWACK (solarwinds.com)

SELECT NodeName AS [Node Name], '/Orion/images/StatusIcons/Small-' + StatusIcon AS [_IconFor_Node Name], DetailsUrl AS [_LinkFor_Node Name], MAX(tolocal(DOWNEVENT.EVENTTIME)) AS [DOWN TIME],Status FROM ORION.NODES INNER JOIN ORION.EVENTS DOWNEVENT ON NODES.NODEID = DOWNEVENT.NETWORKNODE WHERE STATUS NOT LIKE 1 GROUP BY…

Below is what I replaced my Down Nodes resource with. It includes the time the node went down and a Custom Property called _Group. You will need to change that custom property in the query to match whatever one you would like, it was added so I know who the owner of the device is. This only displays down nodes but you can…

On version 2020.2.6 I was able to launch Network Atlas on the Orion Main Poller under Start - Solarwinds - Network Atlas Expand the Maps section, right click on the map and click Delete. The tool has been deprecated Orion Platform 2020.2.4 Release Notes (solarwinds.com) If you can not launch Network Atlas I would suggest…

The variable for a custom property is ${N=SwisEntity;M=CustomProperties.YOURCUSTOMPROPERTYNAME} if you are trying to show that value in your alert text.

From the main screen go to Alerts & Activity then launch the Message Center. You should find what you are looking for there. 

I feel the correct way would be follow @christopher.t.jones123 suggestion. An alternate way would be to export the data from Lansweeper and import it as Custom Properties into Solarwinds. This of course would get stale over time -vs- actually getting it from SNMP but if it is somewhat permanent data like location it may be…

MPE = Main Polling Engine (I assume) I downloaded the offline installer and ran it against my main polling engine and it upgraded without issue. *Note - There is an additional database you will need to set up for Log Analyzer if you had not previously installed that. Once you have upgraded to the Main Polling Engine go…

When you save maps from a node view they end up in this space: My Dashboards - Home - Orion Maps You can place a check in the box next to the map and delete them here.

If the DeviceType Custom Property isn't already there then try creating it.

Not knowing what your naming convention, or manufacturer you are using you may want to start by filling in Custom Properties for each type such as Domain Controller, Firewall, etc. so you can use the custom property in your filters. Custom Properties are available under Manage Nodes and Custom Property Editor. I think…

Disable Topology, Routing, Multicast, HardwareHealth polling jobs (solarwinds.com) It is an older doc but I would think you could enable it using the same method.

I had a similar problem and it was related to my certificate. The Deployment Health, Updates Available, and Diagnostics tabs are blank, and diagnostics cannot be gathered from the web for the Orion Platform (solarwinds.com)

Yea, there's quite a few functions that don't work if you do more than a hundred or so at a time. Network discovery from IP addresses, importing custom properties, editing polling methods on nodes, etc. Something to be aware of. 

Here is a very ugly way to get the recipient info into a spreadsheet using powershell and the API. Read through the comments carefully, especially the ones at the very bottom of the script. If this is a one time item you need to do this will probably get the job done. cls cd c:\powershellscripts #Adjust the path…

In addition to doing percent disk remaining, also add and available bytes > 1GB (or whatever you feel comfortable with) allow enough so the operating system will continue running. 

For those that would prefer to do this with powershell here is the code. Read the remarks and fill in the info where stated. cd c:\powershellscripts #Adjust the path C:\PowershellScripts\ExportCustomProperties\ to fit where you run your scripts from Write-host "Loading Solarwinds SWIS Plugin for Powershell" Import-Module…

I posted this in case it helps (+) How to: Backup your Custom Properties - Forum - Network Performance Monitor (NPM) - THWACK (solarwinds.com) It will help you re-add your nodes. I need to do the same thing frequently as some of our nodes don't get correctly rediscovered after they are upgraded or replaced. It won't help…

There is the other option of using an encrypted XML file. See below. Also when running Powershell at least in my environment I right click on it and do Run as a different User and launch Powershell with an administrator account (that is also in Orion) if I'm not logged onto the machine as an admin account #Using an…

I place this at the top of all of my scripts, regardless of if they are run on my desktop or on a server Import-Module -Name SwisPowerShell Add-PSSnapin SwisSnapin $swis = Connect-Swis -host YOURORIONSERVERNAME -Trusted If I'm going to run it on my local machine, I just ensure that the AD account I'm logged in is set up in…

If you are asking how to assign the layer 3 poller in bulk this is how I do it. From the main screen Settings - All Settings - Manager Pollers - Solarwinds Native Pollers then click here on the nodes The group by however you want, or do a search and click the boxes next to all of the nodes you want to apply it to then…

Here is half of it Use the Custom HTML widget to display HTML-based data in the Orion Web Console (solarwinds.com) Then you need to go read this post. There is a setting in Centralized Settings that needs turned on. It has some security risks so research those before you turn it on Custom HTML Widget (NOT WORKING)?? -…

This script is similar and shows how to use Statistic and Message to return the data back to SAM as that M_Roberts what pointing you to. SAM needs those in your script to pass the data back. Take a look here too: https://blog.kmsigma.com/2017/09/08/sam-powershell-scripting-template/ In this case they made up a name called…

Well, I can only guess. The very bottom of the main screen for my 'legacy' 2022.3 instance looks like this: And the Online Demo HCO instance SolarWinds Hybrid Cloud Observability Demo | SolarWinds Demo - Summary Home - Summary Home

The only one I know of is the global setting under Web Console Settings - Page Refresh. We set it to 3 minutes on our instance. That was the 'happy medium' everyone agreed on.