byrona ✭✭✭✭✭

What I am trying to accomplish between this question and the one you responded to HERE is to use a UDG to represent all of the systems for each client that we manage. The problems I am running into are as follows: * No definitive way to know you are capturing all of the proper systems as some report by name while others…

At this point I am just looking for a good solid way to monitor SQL Named instances that doesn't require AppInsight. As a service provider I don't want to use AppInsight for every client that has SQL as that will put a considerable burden on Orion from what I have already seen. I would like to have a solid way to monitor…

I agree and we do use AppInsight; however, I have run into at least two cases where the system has too many databases and it causes AppInsight to both have and cause more problems than it solves. I actually spent weeks working with support on this only to come to the conclusion that there is a point at which a DB has too…

Thanks for letting me know gdoch​! I have submitted a Feature Request HERE for this.

Thanks for the response. I took a look at the solution that you linked to and it seems like there should be a much easier way to do this. Maybe I need to put in a feature request if one doesn't already exist for this.

There's probably a better way to do this than what I'm about to suggest. But if you had some number of devices, say 20, that are the flapping hosts you could create a custom property and fill it with a value to indicate flapping and leave it blank for the rest. In your alerts setup, you could then include consideration for…

Ok, I have opened a support ticket on this. Case #248877

Byron I responded back to your linked post in this thread. Oh, so confused. = ( My apologies but to my knowledge I didn't receive the email that Marie was referencing. On the other thread located HERE I see that you suggest I open a support case, is that the course that I should be taking on this one? Sorry but the Thwack…

There's no benefit to monitoring all these interfaces. It's most likely you're not using Tunnel adapters anyway so there's no point in monitoring them. I'd recommend only monitoring the physical interfaces that are actually in use. You can also ignore the loopback adapters since there's not point in monitoring these…

Thanks for the super fast response Jiri! Is this a currently existing feature request that I can go vote for or is this something I should go ahead and open?

We are experiencing the map error noted in this thread on one of our two additional web servers. Deleting the NetworkAtlas folder in the C:\Windows\temp\SolarWinds directory on the problematic web server did not seem to resolve the issue. The map is working find on our other additional web server for some reason. Any other…

At a high level I think this idea is absolute genius! Like everything, the devil is in the details. I would like to see details on how this would technically be achieved as that would determine how accurate and useful the data is. The model I picture is basically SolarWinds using all the participating Orion installations…

I can try to get some data together. Another potentially easier option would be for your guys to install FileZilla there (it’s free and open source) and generate some logs of their own. This way they may be more likely to capture what they need.

Thanks, this is exactly what I was hoping to hear!

These are great examples, thanks for sharing agusst​!

alaskan​ thanks for sharing! I don't disagree that it takes a while to get use to the rule/alert creation; however, with that being said I have found that to be true with any SIEM and some are much more difficult. The biggest hurdle I had to overcome was understanding that there was a taxonomy that all events were getting…

Thanks for sharing Nicole! I would be interested in hearing specifically how the system was configured or what it was configured to look at in the specific scenarios that lead to the success. 

Events seem to be a combination of items from internal Orion pre-defined events as well as anything you sepcify to create an event in the Advanced Alerts Manager. The Orion pre-defined ones you can't change but you can choose which Advanced Alerts you send to the Event viewer. SNMP Traps as well as Logs you have set to…

aLTeReGo; any word on this?

Here is a screenshot of a query of the Volumes table where you can see both versions:

We have a Raid10 on 15k SAS drives. If you go solid state please let me know how that works out! We also just realized that our AntiVirus software may be causing some of our performance problems, working on that now.

Hi Byron-- I know that grouping is being addressed in the next version of Orion. See Brandon's blog post here. Also, 10.1 RC has been released, which might also address your issue. Private message Brandon if you are interested in partcipating. M Well, I see some grouping stuff for the sake of dependencies but I don't see…

From what I could tell, that is all you get!

curtisi‌ thanks for the response on this. This seems like great data, are there any plans to expand this capability in the product? I certainly hope this has not fallen by the wayside with hopes to focus people over to purchasing the NTA Orion module.

I believe I am on the latest version because I have the data simulator; however, I have turned everything off on that yet the data continues to flow in.

In this specific case the node was completely offline sitting at a black boot screen so the agent wasn't running at all. That's why I am confused on why Orion would tell me it's 100% pack loss but no node down event. I agree, I definitely need to get upgraded.

Hey, better late than never! Thanks for the reply.

Thanks for the explanation, it's exactly what I was looking for!

Would adding nodes with a loopback address work for your situation? No, this would not work. The thing is what I want to add doesn't have a loopback interface because it isn't a node at all. It's simply a container or object to attach other things to.

More and more I am finding that I could really use this. Having non-IP based objects to attach APM stuff to would allow us to do some very nice facility stuff that we could then restrict to specific users with custom properties. With our new data-center there is a huge push here and more and more my executives are looking…