bobross

I had some downtime at work tonight and decided to take a swing at this. Component: WMI Monitor WQL Query: Select WorkingSetSize From Win32_Process Where Commandline LIKE "%AntiVirus%" AND NOT Commandline LIKE "%DefWatch%" Convert Value > Custom Formula: ${Statistic}/1024 Test Processes: C:\Program Files\Symantec…

Sorry, I misunderstood that this was for a Windows system. The above will only work on a *nix box. It is still doable on Windows using a custom script, but I don't have anything readily available that I can share with you for this. You would need to pull the WMI information from Win32_Process and…

You can easily write a custom script to pull the data that you are looking for. Especially if you are polling against a Linux box... just use the back tick ` operator to ps -ef and grep. If you set it up right you can input a regex into the command line for reuse later. If you do it this way just be sure to also grep -v…

I've been wondering about this myself. Doing some database diving I found the following: dbo.APM_CurrentComponentStatus has an ErrorMessage field that coincides with what is shown in the info box, but it changes as the component status changes. Unfortunately, I haven't been able to find anywhere in the database where the…

I'd suggest looking in to SEUM. Its pretty much designed to do exactly what you want.

Are you able to manually access the external sites from the server running SEUM?

I would use a nested Select or a stored transaction to gather the data from the physical servers.

Can't help with specifics about mibs, but depending on what sort of information you are looking for the vendor should be able to add in things like log files (which APM can parse) or a --status command line switch.

Does the RT Proc Explorer handle Linux as well? Looks like a great update all around.

This would definitely come in handy... My only concern would be page load times for those of us with a large number of custom properties.

Just change the "Component Name" to reflect the name of the process. Alternatively, you can build a custom script that will return additional data in the Message field. Something like this: #!/usr/bin/perl use strict; my $search = $ARGV[0]; my $process = `ps -ef |egrep -v 'grep|perl' | grep $search`; my @searches =…

I'd also like to see this feature. While making these changes I'd like to see an unmanage option for volumes included as well.

So I did some more investigating. I ended up resorting to sniffing packets to find out what OIDs showed up during a repoll. 1.3.6.1.4.1.2021.4.5.0 => memTotalReal Value (Integer32): 8174656 1.3.6.1.4.1.2021.4.6.0 => memAvailReal Value (Integer32): 5961904 1.3.6.1.4.1.2021.4.14.0 =>memBuffer Value (Integer32): 264164…

In addition to checking your SMTP server settings above, you may need to investigate the IIS SMTP settings. Generally when we run into mail delivery issues it is related to traffic being blocked on the network. Try to telnet to the destination SMTP relay server over port 25. You can also check the mail folder on the…

We are running about 50 NPM servers that are at 10.2+ and don't experience any of these problems. We definitely aren't seeing any older SNMP version or equipment crashing due to polls.

It is a little involved to get set up initially, but this would be a perfect candidate for Custom Properties. You can use the Custom Property editor to label a large number of Interfaces as "Core", then you can just add in an alert that checks to see if the "Core" property is True/False. The benefit of this would be that…

C:\Windows\Tasks contains the Windows Task scheduler items, so you should be able to monitor that folder to check for the addition of any new tasks. There is also a log file at C:\Windows\SchedLgU.txt for scheduled tasks. Refer to How to troubleshoot scheduled tasks in Windows XP and in Windows Server 2003 for some…

I first leaned about thwack when I was in the "training" phase of my current job. I was told to watch Geek Speak videos and browse thwack while my accounts and stuff were set up. This was in a shop that was already making heavy use of Solarwinds.

The bandwidth is likely configured wrong... For example its configured as a 10mb instead of 100mb but the utilization is at 20mb it will show as 200%. Or something like that :)

Try either including the entire string in quotations or putting a back tick ( ` ) in front of the space.

The following is a basic way to stuff in your command line arguments: src = WScript.Arguments.Items(arrayIndex) If you put 'F:\errors\' into the command line (be sure to include quotes) then... WScript.Echo src Should print: F:\errors\ You could also work with the WScript.Arguments.Items objects directly, but assigning to…

I'd suggest taking a look at this thread:

I'd definitely have to recommend SEUM for this. You can set up a stepped transaction and set thresholds on the time each step takes. We rely on SEUM for this exact purpose.

This is a feature that we'd like to see as well; however, as long as you don't need different custom properties for multiple applications on the same server you should be able to use the Node's Custom Properties. We use AppAdmin, AppEmail, and AppPhone CPs for triage information that gets stuck into the alert email. It…

Since you already have a script that returns down if the keyword is found (I'm not able to find the template you are referring to at the moment, unfortunately) you should be able to modify the regex a bit or even use what is already found. Perl's regex can make use of parentheses to populate some variables ($1, $2, $3)…

I think you'll have to use APM/SAM to do this. There is an account lockout template available that should get you started. This thread has some information and links to the templates:

We include the link to the resource (Node, Volume, Interface, Application, or Component) that is affected in the alert email. Maybe I'm misunderstanding the problem that you're trying to fix though.

You won't be able to use NameOfSQLJob dynamically like that in 4.2. I've tried this before myself without success. The best way to do this would be to replace NameOfSQLJob with a static value then have the Message field return the name of the SQL Job. I'm not 100% if the database stores the messages though, but if it does…

Your post is a bit vague as to what functionality is lacking in APM/SEUM. A lot can be done with custom scripts, but this may not be what you want either. If you post up some specifics there are a few Solarwinds Staffers and Gurus that might be able to help you out a bit more.

When setting unmanage through the webconsole, only the most recent unmanage window is used. Assuming that the original maintenance window hasn't started, you can just reselect all of the affected elements and set a new unmanage window. If the original unmanage window has started already then you'll need to remanage then…