chad.every · Senior Staff Product Manager · mod

You can combine vendor templates as long as the network CLI syntax is the same. Otherwise, you're looking at multiple templates.

You'll need to parse the results of the output to get it to work as a component monitor. Probably pump the detail into an array and then a foreach to search through looking for throttled. What you'd write-host to the screen would be statistic.throttled = 0 message.throttled = "some text here" There are guidelines in this…

You'll want to disable IE's first-launch wizard. I've had issues with that in the past when i came to powershell monitors. The Solarwinds services run as 'Local System' by default and there isn't a way to start the first-launch wizard without editing the registry. Using Group Policy Editor Using Group Policy Editor is…

You could create a Windows Powershell Monitor in SAM to pass that info into the request. Here is an example of using the Invoke-RestMethod. You also need to install Powershell v3 or greater on your Solarwinds Orion server to use the Invoke-RestMethod cmdlet. You can download that here.

I'm not aware of anything like this can currently exists within SolarWinds. It is most likely going to be a feature request. Others welcome to provide input if they know of any tricks.

That type of setup is not supported. All modules installed on the same server will always share the same web port and the same backend database. You can impose Account Limitations in Orion to limit what certain users see and what they can do. If you require separate ports you also have to install the modules separately,…

I've never been able to get the output of one alert action as input to another alert action. I would guess that for the escalation level 2 you'd have to run another POSH script, ingest the original output and explicitly call SMTP functions inside of that script.

There is an out of the box alert that should be there for restarting windows services that you can enable. Here is an article that outlines it. Monitor, Alert and Restart a Windows Service from SAM - SolarWinds Worldwide, LLC. Help and Support

Any reason you're polling it via snmp? Windows is deprecating it so in the long run it'll be better to use Windows WMI which should report correctly.

Can you post some additional information? What application template/component monitor type is being used? What are the polling/timeout settings for that application template (Found in the advance drop down). What website are you checking (if public facing). Any screenshots of all of the above would greatly help.

Yes, it'll involve some PowerShell Fu to get exactly what you're after. However, this is a script that I put together that hopefully does most of what you're looking for that you can build off of. SSL Certificate Expiration - SNI capable It pulls in the expiration (days), Certificate Authority, certificate Common Name and…

Not that I'm aware of, it's kinda by design that way with Meraki. There are a few MX models that can export netflow directly to NTA, that would be your best option if it's available.

I don't think SAM is a good fit for your use case. There are other tools out there that do a much better job of what you're looking for. You might want to look at Patch Manager​ or Log & Event Manager​.

unfortunately, no. NPM bases everything off SNMP. If SSH is a requirement then you'd have to use SAM and a custom script. NCM can also leverage SSH that can gather data but more from a reporting perspective, not an alerting perspective.

This is what i've done and it's great. Put this article out there for others. Modify Alerts To Be Smarter With Node Thresholds

So netflow does not need to be setup/enabled on every network device. If all of your SG350's roll up to a 2960X, then setting up netflow on the 2960X should capture all of the netflow traffic that you are after. Netflow in general only needs to be setup on 1 device in-between the two points to want to monitor. I only care…

Does the server where QoE is deployed have more than 1 NIC? If so, you edit that QoE sensor and make sure that it's attached to the correct NIC.

Currently, All Orion products do not support 2FA. Here is a feature request that I found that you can upvote

This is a method that I have used before that works. Alert Action - Run Linux Script With Putty

You would want to make a custom alert and make sure that the trigger conditions are very exact so that it doesn't try and stop the service on the other host because of a false positive. In that custom alert, you could add an alert action > Execute an external program. You'd have to call a custom script to stop the…

So i'm hoping that i'm understanding the question, but I believe Orion should do this out of the box. You would add the current rate as a performance counter monitor. Then over time, it'll start to give you the min/max/average values

The SOAP monitor is actually pretty limited. It can only check is the API is up/down and the response time it took for the request. If you're wanting to pull info from a SOAP API and include details of the request in the component it would have to be a custom script monitor. The Powershell script component monitor tends to…

There are possibly a few ways you could check, all depends on how PA exposes the version numbers. 1) NPM: Custom Universal Device Poller. See if those versions are exposed via SNMP. I'd be surprised if they were since it's more of a security appliance. 2) NPM: See if PA can generate an SNMP trap when those get updated. 3)…

There isn't a list of compatible modems with SAM that I know of. SAM really is designed to integrate with 3rd party software and that software is what will use a modem. There is an alert action for this that uses NotePage. I haven't use this option personally so I can't speak to it's setup. What I have done in the past is…

So one of the things that you're going to run into with trying to accomplish this is that SAM only allows up to 10 unique output returns. So it isn't going to be able to enumerate all of the installed software like you're wanting. If you were able to switch to WMI then you can use SAM's Asset Inventory to pull installed…

You'd have to create a custom poller using Device Studio. Settings (All Settings) > Manage Pollers. They also talk about doing that on this Solarwinds Lab https://thwack.solarwinds.com/docs/DOC-176961

you can check out the release notes for 4.2.4 here. Netflow Traffic Analyzer 4.2 Release Notes - SolarWinds Worldwide, LLC. Help and Support

Your script would have to be 2 part and use the API. Part 1: Remove node from group Part 2: Add node to group. I searched thwack quickly and found this post where someone was using perl to do this. Need help trying to add a node to a group container using Perl I've dealt more on the powershell side of the house when…

Not today, that is still an outstanding feature request. You'd have to script something to use a getnext or gettables

I have the variables listed in this post. You can't pass the variables into the script but you can reference them directly in the script. As far as using info/results from previous polls....that is trickier since there isn't a variable that can directly be used for that. You'll have to dump the results to a file or DB and…