brscott · Custom Property Aficionado · ✭✭✭✭✭

I tried this recently but with no luck using the "Volume Status has changed", seems the volume status is not related to the thresholds. What we need is a "Threshold status" in the actual volume table, without having to go through volume capacity forecasting. And also have a "Volume: Threshold status has changed"

I had a similar problem, but it was on the previous version of the agent. I updated to Orion platform 2019.2HF1 and Agent 2.2.0.860 and all of the agent problems went away.

Script monitors are a part of SAM, Server and Application Monitor. That would be an additional expense. Honestly I don't know how people get by without (at a minimum) their network, server, and virtual monitoring all in the same place.

I have an issue where I have auto updates turned off on each agent and on the global setting is off. But when I clock on "Real-Time Process Explorer" it gets an error and then updates the agent, which subsequently also breaks. I have a ticket open. I am on Orion Platform 2019.4 HF1 and SAM 2019.4 with no hotfixes. I'm…

I worked down this path but eventually had to change tactics. Problem 1: Service on Server1 goes down, so the group status changes to down. Service on Server2 goes down, and at the same time or soon after Service on Server1 is fixed. Group status didn't change, no new alert for server2 will be sent. Problem 2: You want to…

Here's a nice PDF. http://cdn.swcdn.net/creative/pdf/techtips/how_to_create_intelligent_alerts_with_npm.pdf That PDF comes from this page: Success Center This example alerts on components, I prefer to alert on the application, but it's all about preference. Unfortunately there are several ways to do anything. That can make…

For windows there is the SAM template: Windows Remote Desktop Services It checks a lot of things, the two most important are that the service is running and that the port responds You can get the same thing on linux, checking for the sshd process and checking tcp port 22. Disclaimer: These tests don't actually…

I ran into this a couple times. I ended up moving them to a new polling engine and they started working. Obviously that won't work if you only have one. Might also try to Unmanage them (not mute), wait 5 minutes, then re-manage them.

Change it from "Percent Memory Used" to "Critical Value Reached (Percent Memory Used Threshold)". Then edit the node and set what you want for a critical threshold. Now every node can have a different value (or no value at all)

I have every kind of polling: virtual, asa cli, snmp, wmi, agent (both client and server initiated), F5, ok so I thought of one... "Poll for Palo Alto", I don't use that one. I cannot say that I actually prefer one over the others. SNMP on windows would be my least favorite and I don't think I have any of that left. SNMP…

I assume we are only talking about Agent initiated communication. When you do the install, you are required to provide an Orion Polling engine server name, which could be the VIP, but I would guess that at some point in the communication, the agent looks up the setting assigned to the node for Polling Engine and then uses…

Just as a point (or half dozen points) of advice for a beginner: 1) defiantly play with all of the built in alerts, but then disable them. 2) If you like the alert, Duplicate it to make it your own, even if you are not going to change it. 3) Prefix all of your alerts with something consistent. I used our company initials,…

That might be some older information. NTA was a separate VM for a long time, but now it's integrated into the "Polling Engine". My advice: If you are not going to have a full-time test installation, then go ahead and install everything on one VM with sql Express. Play with it for a while, then delete it and start over. You…

We are just buzzing with questions. Can we all just bee-hive ourselves this year? Can we we combs in the Thwack store? With all of the problems in China, will ThwackCamp be available in Beejing? Maybe if Queen can't do the music, we can play some oldies be the Bee-tles or the BeeGees

Here is one that I use on my personal orion view. It's a custom swql widget that shows the recently added nodes and how many monitored interfaces and volumes it has. It's usually on new nodes that people forget to add the volumes. This does not help for volumes added later to the server, but you could tweak the "where"…

1) You can add a duplicate IP node if it's on a different polling engine.... I do *not* recommend this. Just because you can does not mean you should... 2) If the IP address is a secondary IP address on the node, then you can edit that node, change the monitored IP address, then add the new node. 3) Add the SAM monitor for…

To change the widgets on the page, your account (or the group) has to have "Allow Acccounts to Customize Views" permissions. I would suggest you use the default admin account for this, or make your individual account with this permission... The views are global for everyone, unless you've done a lot of work to separate…

1) Yes (and no). Each subnet you want to scan can be configured to scan from a different polling engine. You can install polling engines in each zone and you would have exactly what you want... the No part is that polling engines are expensive. I am guessing that in the future they might have the option to move this…

Once I went through and looked at all of the OOB alerts, I disabled all of them and started creating new alerts from copies (or eventually from scratch) to do exactly what I wanted. I was always afraid that they would overwrite the default alerts on each upgrade. I have been through several upgrades, and they have not yet…

Did you make sure you were using the same credentials for both the monitor and the test?

Unfortunately the ultimate answer is that syslog especially over udp is an incredibly bad idea. Even more unfortunately, we don't have a good industry standard alternative. Just as unfortunately, the whole thing is difficult to debug. The short answer to your question is that: 1) you need to find a way to send a large test…

While this is not an answer to your questions, you did say suggestions are appreciated. This is just something to think about. Would it be possible to: 1) create an dynamic group based on the custom property 2) Assign the application monitor to the group. (NOTE: I don't know if it will create duplicates for the ones that…

Yeah, I always just thought of UnDP as a way to do custom SNMP without purchasing SAM. But if you are going to go that far, then you can have custom SNMP variables added to the server. Those custom SNMP variables can run any script they want in linux to generate the value, and that script can do the rest/soap api request.…

I think this is possible in Orion Platform 2019.2 or newer. It's a bit different from what you are asking though. I would prefer to also implement this functionality in the alert conditions as you put forth and I suggest that you go ahead and put in a feature request. NOTE: I have *not* tested the below suggestion, but I…

I agree. If doing basic grep/sed/awk and done. Just use bash. On the flip side, bash is by all standards a full fledged scripting language, but please for the love of everyone that have to read it later, don't.... just don't. Yes you can create multi dimensional hash arrays in bash, but if you are going that far, just…

1/ If you can run windows on it, then you can run solarwinds on it. Resources is going to be the key there. 2/ Yes, some, but not sure it's noticeable. 3/ GAK! Actaully I don't know, I just know I would not do it. At least get a separate additional web server just for external access. They are cheap. 4/ Actually that is a…

There might not be a way to do it exactly as you are asking. The closest is to actually create an alert per group instead, where each alert would just have the one action. The alerts is where you can do the filtering. Alternatively if the actions are similar you might could do something close. For example, if all of the…

Yes, the reset after xxx time does actually purge the alert... but ... most alerts (especially from NPM and SAM) are based on persistent conditions and those will just come right back. For example a "node down" alert happens because a server is no longer responding to pings. You can clear that alert, but the node is still…

There is also a different philosophy on alerting with a load balancer such as an F5, which might or might not apply to your situation. 1) Node1 - www1.example.com Full monitoring and alerting. disk, memory, cpu, ping, SAM monitors. One of the sam monitors is the "keepalive" url. 2) Node2 - www2.example.com - same as Node1…