bourlis ✭✭✭✭✭

I can your query against mine and I pretty much got the same result. I saw pretty much because my query checks for muted applications, data equipment and interfaces. The only thing that I can suggest is to add ae.AuditEventMessage to your query to see if the message matches the account name.

Hi Joe, My knee-jerk response based on your explanation is your experiencing status rollup. In which case SolarWinds will show the worst case status for a group. If you haven't done so already review rollup status here. Status Rollup Mode in the SolarWinds Platform

Have to checked the DB to see if its just a Console issue or a bigger NCM issue? If not maybe run a simple SWQL check like this for a validation/troubleshooting test. select DISTINCT top 100 n.caption as [Orion Caption] ,n.nodeid as [Orion Node ID] ,n.NodeProperties.CoreNodeID as [NCM Orion NodeID]…

Interesting question/subject. It made we wonder if this is possible, but what about disabling certain global hardware for those annoying issues? Then leveraging UnDP for sensors you care or want? In this case it would be easier to opt in rather than disabling sensors 

Rajahanumanth, Sorry this is not a fix reply, but more of a inquiry reply. We've just started the design phase of implementing HA so I would like to glean as much info from you as I can. Also hopefully by asking these questions, a fellow Thwacker will be able to resolve your issue. Questions * What type of HA are you using…

Someone please correct me if I'm wrong... Hi Charly_DF, It sounds like a prime candidate for SolarWinds EOC. Based solely on the info you supplied and my understanding of SolarWinds Observability Self Host this is what i would do: * We need to monitor approximately 32,000 IP addresses (some only by ping, others via SNMP…

Hi NoitswithaK, Try this SWQL query, I think it'll get you pretty close to where you want to be. We don't have ServiceNow in our environment, so that's the piece that i cannot help you with. BTW, this was written for a Modern Dashboard view, so you may have to remove some lines if this isn't going to be used in a Modern…

We have 22 Palo Alto's in our environment, all managed via SNMPv3. I would highly suggest following Superfly's example, but don't forget to enable SNMP management on the management interface. Navigate to Device > Setup > Management. Click the Management Interface Settings button. Select the SNMP box. Also use "oid…

Hi cdooer1, I'm not sure why you want to include MAC address to this report. Personally, I would advise not including the MAC address information as it would slow down the report query, increase the complexity of the report and it has the potential of giving you the wrong information. With that here's a SWQL report that I…

Hi alanaraki , Yes I do and it's my pleasure. To be clear you only want to see critical & warnings, correct? If so, you have 2 options which are:: WHERE o.AlertActive.TriggeredMessage <> '' AND (o.AlertConfigurations.Severity = 1 or o.AlertConfigurations.Severity = 2) or WHERE o.AlertActive.TriggeredMessage <> '' AND…

Sorry, we haven't gone HA yet so I can't answer your question. We just purchased SolarWinds Observability Self-Host, but I haven't applied the license keys yet. Right now I'm just researching SW-OSH functions. I'm hoping to test the SW-OSH HA process in January on my DEV/TEST system before I switch my primary system over.…

Ok, good news at least I hope it's good news . I was able to reproduce your issue and find your 'trouble child'. First off, here's your issue: WHERE o.NodesCustomProperties.Department <> ' ' AND o.AlertConfigurations.Severity = 1 You fixed the node.custom properties in your SELECT field but missed it your WHERE command.…

I'm sorry to ask such a basic question, but is the script you provided above the exact one that in your Dashboad query? Can you please supply a screenshot of the SWQL query as it sites in the dashboard? I only ask because when I take the script you provided, including the o.Node.CustomProperties and put into my SWQL studio…

Hi Anvesh, For VMware, Linux & Windows systems you'll need to use Asset Inventor in SAM. This would fall under the Orion.AssetInventory tables and Orion.VIM tables. For Cisco type devices you'll find some of it in the Orion.Nodes table but if you can also find more information in the Orion.NPM tables and Orion.NCM tables.

Hi techno-reseau, Based solely on the information you provided, the only option I know is to reply on nightly back-ups and a system restore either at your primary site or your back-up site. Your options will increase if your running Orion on a virtual server versus a physical server and if your running SolarWinds…

HI alanaraki, I see 2 items in your query that's giving you grief, all you have to do it simply change: ,o.NodesCustomProperties.Department AS [RESPONSIBLE TEAM]to ,o.Node.CustomProperties.Department AS [RESPONSIBLE TEAM]and your query will work like butter! Here's 2 items that'll help you next time.#1 double check your…

The only way that I can think of is to leverage custom properties. For example if you created a custom property call "whoit" and you created custom property values of 'S2' & 'S21'. Then you can use the Group By Custom Properties function to show just those devices. If you were to go down this road I would highly suggest…

Hi ihigareda, It sounds like your using the PD Events API integration, correct? Is so, the issue your running into is the PD de-dup key. I would have to see the way you have your API key setup up, but I'll make some general assumptions. My low volume space de-dup key looks like this, and it's sent every 2 hours.…

Hi ImNishat, I have a modern dashboard what displays exactly what you're looking for, plus some information that you might find helpful. Note, I hate having end-user ports down in SolarWinds so I implemented the standard that all interfaces that are not critical need to be shown as 'unplugged'. I also implemented a…

Hi Vikas, We didn't run into any issues or bugs when we upgraded to 2024.1 or 2024.2, which you might want to consider. However, in full disclosure we did run into some issues with some of our custom reports and a few out-of-the-box reports. The issues were pretty much easy to fix and in fact everyone liked the fixed…

This vulnerability resides in NCM as well. 

I had this same problem, so I created a simple report and a modern dashboard view to keep tabs on our system. Try these 3 audit reports on for size: SWQL Audit report for ADD/Change/Delete Views SELECT top 200 tolocal (ae.TimeLoggedUtc) as [time], ae.AccountID, ae.ActionTypeID, ae.AuditEventMessage FROM…

Liam, when I hit export report it saves it local to my system as an xml file.

Also just to cover all of my bases and any possible recessed RC 2023.1 oddities, the layout of the report is 3 columns with the default width of 960 px. 

Nope, I wouldn't mind exporting/uploading the report, but I'm note sure where too. But, here's the simple breakdown of the data source for the report. It's a fairly simple SWQL query, I'm sure you can swap out the custom properties for anything. SELECT [data].[Vendor], [data].[CustomProperties]._Disposition FROM…

Ok this is just odd! First off thank you that's a good work around option and might actually shed some light on the issue. I just ran my test report with 6 queries and to be expected it hung. I closed it down after waiting 5 or so minutes. I then added the report to a scheduled report and then hit the run now option it was…

I'm sorry I don't quite understand what your suggesting. Are you suggesting rebuilding the reports as modern dashboards? If so, that would be decent work around option however most users like to have their reports ran on a scheduled bases and mailed. Also it doesn't appears there's a PDF or Excel export function in MD yet.

Jeremy, great question! I just checked and there are no issues with the modern dashboards that I've built. I have MD with 12 different queries that opens nice and quick with no issues. Yes this one is a bugger!! Here's what I have for Report timeouts. For SWNetPerfMon.db it's the default 90: ! Database Command timeout in…

Silly question??? Your IsNull % lines return is visually long, what's your option on making the following change? As far as i can tell the I got the same returns, or at least close enough for government work. replace this: ,IsNull([Component].PercentCPU, 0) AS [PercentCPU] , IsNull([Component].PercentMemory, 0) AS…

LOL... I've been trying to figure this out for a while and thanks to this post I just figured it out. You were super close drop the ' ' around the PercentMemory statement, like this: SELECT TOP 1000 ComponentID, ApplicationID, Availability, PercentCPU, PercentMemory, PercentVirtualMemory FROM…