bourlis ✭✭✭✭✭

The only thing I can think of is to maybe check your Server Type connection?? Are you using Orion (v3) or one of the other options? Or...., maybe point it to (Sever Name connection) to a different polling engine??

gaba8696, Assuming you have SAM & assuming you've enabled, tweaked and assigned SolarWinds Server monitors to your web server(s) then this SWQL query will get you to where you want to be. Just replace the nodeids with your systems nodeids. SELECT ComponentStatisticData , case when nodeid =7058 then 'AWS1' when nodeid =7059…

Do you have SW WPM? If so you could simply create web transactions for each of your web serves. You can then compare the web services for each system and/or create WPM alerts for slow SW web performance.

Have you tried to re-add the Windows servers? If not give this a try: * Remove just the unknown volumes from one of the servers. (ALT - remove just one volume from one server to validate the process). * From Managed Nodes click the Add Node button. * Enter IP and agent credential (test). * Select the current polling engine…

My suggestion to validate the queries is to use SWQL studio and then strip down & rebuild the query to get a better understanding of what's being presented. "Always play the devil's advocate against yourself"!!! If you take your query and tweak it in SWQL so that it reads: SELECT --COUNT(NodeID) AS myCount n.caption…

If you're looking for a status table, then here's a nice simple SWQL query to get you started. Depending on who's looking at the dashboard they may want to actually see what's down. SELECT n.Caption , n.Status , n.Category , n.Detailsurl FROM Orion.Nodes n WHERE (Status = 2 AND n.Vendor = 'Cisco') and (n.DisplayName like…

Absolutely!! But to be 100% transparent, this is all based off of work that other people have posted on Thwack. There are some amazing dashboards that other people have posted. All I've done is taken their hard work and tweaked it to fit my environment. So for the example I posted earlier it consists of 2 SWQL queries…

Hi hr2mas. Based on how you're explaining the dashboard it sounds like you're dealing with a KPI widget. If that's the case what you're looking for is something like this, correct? If you all you need to do is edit the KPI threshold so that it looks something like this.

Kenyamson, Sorry this isn't an alert, but it's an SWQL report that you can put into a dashboard view or a nightly report. SELECT top 400 tolocal (ae.TimeLoggedUtc) as [Local Time], ae.AccountID as [Account], ae.ActionTypeID, ae.AuditEventMessage as [Event Message] FROM Orion.AuditingEvents as ae where ae.ActionTypeID =…

You need to give the user 'Allow Node Management Rights'. Users will have access to Manage Nodes, but will not have access to the settings page. If the user can't view Manage Nodes after you've granted rights, double check their menu bar. Also, Manage Nodes means this user can delete any device in SolarWinds. If that's an…

Jasonford, can you please elaborate what you're looking for. To be more specific is this for a report, alert, dashboard. Functionally, this is what you're asking but it would be tweaked to better fit the usage. SELECT n.DisplayName ,n.CPULoad FROM orion.nodes AS n WHERE (((n.Stats.CPULoad) >= (90))) WITH NOLOCK

Wait., I think I'm missing something. Are you saying when you reboot your SW server(s) that an alert is sent for a managed node that wasn't rebooted? Or are you saying that an alert is being sent for the SolarWinds server itself? These are two completely different issues. If I'm reading your issue correctly, you're saying…

Can you please clarify "Primary is having 9k elements and secondary only 3k"? Are you saying you have 9K elements on your primary polling engine and 3K on an additional polling engine? Also are the web users connecting to your primary polling engine or do you have an additional web server that everyone connects to? If both…

Hi WinterSoldier, I'm sorry it's not 100% clear what you mean by 'hardware detail' and it can be perceived in different ways. Hopefully this answers your question or at lease gives you a direction. BTW, I got rid of the joins as it wasn't necessary in your SWQL query. SELECT n.caption,n.IP ,n.VirtualMachine.PowerState…

SW_United, I've found that it sometimes helps to step back and let the requester choose the widgets they want. What I've done is I've created a template dashboard showing all the different widgets that SolarWinds provides and how those widgets would look with different technologies. Then when asked to build a dashboard I…

Rolfey83, If you're still having problems, then go back to the basics and build up from there. (a) what's the machine type? (b) validate if there are any netflow limitations with the machine type or with the OS. (c) If the machine type is a Cisco device, please supply an edited copy of your netflow configuration. i.e. -…

Joe, Sorry I just need to get a base line of your issue: * You created a custom node down alert, to which you used a custom property to send the alerts to and this works. * You then edited a stock alert and used a custom property to send alerts to and this one doesn't work. Is this correct? If so, are you using the exact…

Smalie, This is actually a common thing in our environment and it's going to be 1 of 3 things. (1) something is mis-configured in SolarWinds (2) something is mis-configured on the node(s) or (3) something is mis-configured outside of SolarWinds or the node. (3) Would be a firewall rule, ACL, radius or something along those…

You can also automate the process by creating an alert that changes the custom property, plus as a bonus feature you can leverage this to automate the future. Simply create a new alert this a totally unique name, just so you can delete or edit it in the future. Given your example the scope of the alert would simply be…

Jduehmig, The devil is in the details. What is the alert centered on, i.e. component, node, interface, application, drive, or something else? If you trying to leverage the custom property for simple node alert you can drop everything but the the actual System_Owner field. Which would look something like this: Here's a…

Hi Tony91, This is the solution we implemented. * Created an interface custom property, let's call it 'Interface_Alert' * Set the custom property on all interfaces that you want to be alerted on. i.e. stackport, StackSub, GigEtherNet or VLAN * Build interface alerts around the 'Inteface_Alert' custom property, it's status…

hi muyokuuu, It kind of sounds like you have a bunch of individual user accounts that you're trying to manage, correct? If so my I offer a few suggestions. Move as many people into groups as you can, like AD groups, then associate views and rights to those groups. It's so much easier keeping track of group rights than user…

Here's a SWQL query for a modern dashboard view that I have. I think if you can stitch aspects of Bobmarley's and mine together you might get exactly what you're looking for. SELECT a.Name as [Alert Definition Name] , a.Description as [Alert Definition Description] , a.ObjectType as [Alerting On] , a.Frequency as [Alert…

Option 2. I didn't write this, someone else did and posted it on Thwack. But this is the one I use in our enviroment. * Create a new custom table widget. * Unselect the 'Use current network object as a Data Source radio button. * Click Edit Source button. * Change the selection method to Advanced Database Query. * Select…

Hi Thompsonsw I would suggest SAM, which comes with asset management function like you're requesting. SAM asset management can be used by itself or bundled with SCM. To be honest I haven't built a report or dashboard based off of SCM but I've done more than my fair share with SAM. For example, here's a nice SWQL script…

Hi SolarWindNoob. We use interface custom properties primarily for alerting. We require the networking team to opt-in for any interface alerting. We also put additional interface custom properties in for 'business hours' versus 'off-hours' alerting. At one point in time the networking team required an 'ISP carrier name'…

Interesting! I'm experiencing a similar issue, minus the HA part. However, I'm in the process of moving our SW instance to HA. I keep getting notifications that SW is receiving SYSLOG messages from nodes that are not monitored, even though it is. Messages are being sent from the management interface, but SW keeps dropping…

Q. Why didn't we get an alert for the node that went down. A. Because you didn't populate the custom properties required for alerting and that are posted on our SharePoint site. 

I don't believe so, at least not fully how you explained it. It is highly recommended not to have anyone connect to the primary poller instance, that is unless you lose your additional web servers and it's an absolute emergency. What I would do is keep your PPE off limits to everyone except your SW support team. I would…

Joe, I'm don't quite understand your question(s) or how to correctly answer them. For all "X" details view there should be a widget that says, 'All Alerts this object can trigger' and 'Active Alerts'. If you don't see that widget, I would highly suggest adding it. That's one of the first things I show people when they I…