bobmarley ✭✭✭✭✭

This query could take awhile as it will pull all the events but this will give you every instance. You could create a custom report or resource to display. SELECT AuditEventID, TimeLoggedUtc, AccountID, ActionTypeID, AuditEventMessage, NetworkNode, NetObjectID, NetObjectType, DetailsUrl, DisplayName, ObservationTimestamp,…

I just had to do this yesterday to get the serial numbers from our Leibert UPS's. Do as @"jm_sysadmin" said and use the SNMPWALK tool to get a full down load of the MIB and find the OID you need to pull. Create a custom poller to pull the data and then you will need to create the resource to display it. 

I'm stuck in that same spot. Downtime is extremely hard to get approved. Trying to get a VM environment set up so I can copy my production servers and database over into a temporary location, upgrade them and then copy them back. Hopefully someone will have a solution for this.

I would create an SWQL query and place it into a widget to get this accomplished. 

SolarWinds NPM can receive syslog messages from external sources. Setting up the external source be it a Switch, Router, Windows Server, Linux server all use different methods to generate syslog messages.

You could go old school and create your own .bat scripts. At the DOS prompt type SC COMMAND and it will get you the commands to use, or Google the SC command and you will find examples. I had a bunch of scripts I used at my old job to get the status of services, start/stop services etc.

You could download SWQL Studio and use that tool to create your query and then place it into a report. For example the query below will show all SNMP v2 nodes. SELECT TOP 1000 IPAddress, Caption, Location, SNMPVersion FROM Orion.Nodes WHERE SNMPVersion = 2 Order by CAPTION ASC

Under the Manage Nodes screen you can reassign them 'in mass' by simply selecting them and assigning them to an engine. Usually if I have one that is sick I move all the nodes off of it until its fixed. In the Manage Nodes screen set your Group By to Polling Engine then click on a polling engine, select all nodes, then…

For some of our interfaces, such as our Internet and VPN connections we use the API to pull the traffic values every 15 minutes and then they are put into charts inside of SharePoint. Those stay in Sharepoint indefinitely. If you don't mind doing it outside of SolarWinds there are a lot of options.

I use Custom Properties quite extensively with my nodes and haven't had any issues with my databases. 

In my experience I have noticed Orion overwrites the location field with whatever data is returned when it polls that object. For example if I set a UPS in Orion with long name location like 1234 Fourteenth Street, and the tech set the Location the UPS to Closet 132 in the UPS itself then next time the node gets polled it…

It sounds like your match may not be matching, have you tried a different action such as having it send an email to you to ensure the match is being made correctly? Then once you verified the match then you could enable the stop processing action?

There are BGP alerts available within NPM and you can also get the info via SNMP Trap or Syslog into NPM. Same goes for power events based on the types of power equipment, UPS's etc you are using. Your answer would be based upon how your environment is set up and the collection of metrics you can obtain. 

There are some examples you can search for in Thwack depending on what type of equipment you are using.

--Also, your query is missing FROM Orion.Accounts at the end. Should be like this SELECT AccountID AS [NAME] ,CASE WHEN AccountType = 0 THEN 'Orion Service Account' WHEN AccountType = 1 THEN 'Local Orion' WHEN AccountType = 2 THEN 'AD Individual' WHEN AccountType = 3 THEN 'AD Group' WHEN AccountType = 4 THEN 'Group Member'…

As a workaround you may be able to use the 'execute a program' action and send an email via a powershell script? Below is a script you could possibly use. $EmailFrom = “NEWSolarwindsOrion@orion.com” $EmailTo = “YOUREMAILADDRESS.com, YOUROTHEREMAILEDDRESS.com” $Subject = “YourSubject” $Body = “This is a powershell script,…

Might try setting this query up: https://thwack.solarwinds.com/t5/NPM-Discussions/ASA-VPN-Traffic-by-user-SWQL-Report/m-p/586262

Probably exceeding the maximum total messages it supports. Check the link below. Also see if you can trim your messages at the device level, do you have something misconfigured to send debug messages? Do you have specific hosts that are sending messages you don't need? Sometimes some clean up work with that also helps.…

You can use variables in your email. Below are some I use. ${MESSAGE} is the one your looking for. Message : ${MESSAGE} Time: ${DateTime} Hostname: ${Hostname}: IP: ${IP}

We just add them as ICMP only nodes and use a node down alert to determine when they are offline. While we do get syslog messages when these go up/down we don't have anything in place to reference these messages back to a master list of access points. I would like to know how others are working this issue as well?

@"jreves"would it be possible for SolarWinds to periodically publish out these application filters for all of the Microsoft Cloud apps? I don't have NBAR enabled at all sites so need to create these manually. I had previously created the same application but when I reviewed it some of the IP's had changed. Thanks!

You can use the 'Statistics' function within your powershell script to return a value. That value can then be used for alerting or graphing. If you search for Statistics you will find some examples. https://support.solarwinds.com/SuccessCenter/s/article/Display-values-from-multi-value-statistics-monitors-in-SAM-alerts

https://github.com/solarwinds/OrionSDK/tree/master/Samples/PowerShell There is where the code is. You will need to install the Solarwinds SDK to use. 

Thanks @"jreves" this was very helpful. 

The steps are create a custom poller - then create a view (or report). It looks like you already made your poller so here is how to make the view. From the main Orion page Settings->All Settings->Manage Views-->Add From there give it a name, and leave view type 'Summary' and hit Submit On the next screen hit + to add a…

Here you go Rick, create this custom poller and then create a chart for it.

Create a custom property named _Email_Nodes and put the email addresses into that property. Then create an alert and in the alert email action use the variable below for the To: field ${N=SwisEntity;M=CustomProperties._Email_Nodes} This will allow you to control where the email is sent via custom properties

I use this SWSQL Query to show mine SELECT TOP 1000 NodeID, IPAddress, Caption, UnManaged, UnManageFrom, UnManageUntil FROM Orion.Nodes Where UnManaged = TRUE ORDER BY UnManageUntil

Might try inserting the full database name in this field [dbo] 

Yes you can depending on what you are using for VPN. I had to set up a custom poller for number of sessions then create an alert against it for ours.