christopher.t.jones123 · CRIS Solutions Architect/Engineer · ✭✭✭✭✭

@"nerengm" are you referring to Hubble?

oh my bad, just modify it to say IS NULL instead of IS NOT NULL

@"arunbhandari05", I would recommend turning on Application Debug Logging per this article and review to try and get a better picture about whats going on

@"hebron1212" here is a good Information Service Schema reference, but as @"KMSigma.SWI" there isn't a cross-reference that I've ever been able to find for the reasons he mentioned.

also I noticed that you have the actual task to update commented out, if this is in fact the version you are running you'll need to uncomment Set-SwisObject $swis -Uri $uri -Properties $CustomProps by removing the "#" in front of it.

@"arunbhandari05", dzdo looks like a command that is specific to the Centrify application, which is probably why you are receiving command not found. Have you tried using sudo instead of dzdo?

I typically find little use for monitoring the memory volumes. I may be off base in that practice, but I have always used the SAM template to get a better idea of the memory utilization on a Linux server. Also adds more flexibility in terms of what information I want to be returned

trying changing your query to below, it's likely not a NULL in the DB and is now "whitespace" $queryInterfacesWithNoPriority = " SELECT ICP.$CustomPropertyName, ICP.InterfaceID, ICP.Uri FROM Orion.NPM.InterfacesCustomProperties ICP Where ICP.$CustomPropertyName is Null or ICP.$CustomPropertyName = ''"

@"jdbrande", the rule is not where you exclude/include logic for checking/not checking a device. The rule is where you define the data you want it to look for. All that other logic is done in the policy section. Trying to add that logic into the rule section is more headache than its worth I would recommend this workflow -…

@"wes.reneau", Do you have Server and Application Monitor (SAM)? If so, have you considered applying the Linux Memory Monitoring Perl Template and seeing if that is a more meaningful method or metric to have your NOC respond to?

@"makecrazy", is this ASA a multi-context ASA? if so you'll probably have to do something along the lines outlined in this KB Article Edit a Device Template KB

[quote userid="81493" url="~/product-forums/network-configuration-manager-ncm/f/forum/91004/cisco-asa-5545-config-download-issue/290045#290045"]9623d334] [06/10/2021 18:35:39.049] Fuzzy match detector start detecting prompt. String1=error:%invalidinputdetectedat'^'marker. String2=hok-ext-vpn-1/pri/stby> [9623d334]…

@"wes.reneau", I was testing this and noticed that between what I was expecting and what the output did not match up. Somewhere between when the query was first written and now the Severity numbers changed below is a version that is correct, I am on the latest versions for all modules SELECT o.AlertConfigurations.Name AS…

@"wes.reneau", not difficult just add the following as part of the where condition o.AlertActive.Acknowledged IS NOT NULL -- Example WHERE o.AlertActive.TriggeredMessage <> '' AND o.AlertConfigurations.Severity = 1 AND o.AlertActive.Acknowledged IS NOT NULL

@"makecrazy", if you enable session tracing per this article what do the session trace logs say?

@"jdbrande", when removing the router conditions and just have session-limit 2 in there and test it against the devices do they show as a violation? here you are defining the string you are looking for, at the policy creation is where you define the nodes it'll be checked against so you don't need to add any of that…

@"wes.reneau", is this query the output you're looking for? SELECT o.AlertConfigurations.Name AS [ALERT NAME] ,'/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:' + ToString(o.AlertObjectID) AS [_LinkFor_ALERT NAME] ,o.EntityCaption AS [ALERT OBJECT] ,o.EntityDetailsURL AS [_LinkFor_ALERT OBJECT]…

@"martian_monster", which one are you trying? I normally just use Orion (v3)

@"martian_monster"can you show a screenshot of the connection screen? really should just need to put in the hostname and then your creds like you would in the web console and it usually connects. typically that error is something I see when you're using SAML for web auth, cause SWQL doesnt support SAML auth as far as I know

@"martian_monster" what kind of creds are you using?

@"ghunter" for both those you'd have to modify the where statements. below are some examples for it. Basically, if you only want it to show information for those nodes starting with PRD- (node OR interface) you'll have to find or add into the where statement for that section something like what I've provided below. Same…

do not use SCM heavily

@"wmarandu" are you monitoring the distant ends tunnel ip? if you are then it should go down when SW can't reach the users side because the tunnel is not functioning properly.

@"wmarandu", where does SolarWinds live in relation to this? does it live on the side of the tunnel where the users were affected? a completely different entry point? I ask because typically if SolarWinds lived on the same side as the users, having SolarWinds monitor a resource on the other side of the tunnel that requires…

@"SentineL", there is a script on this page that I believe is what you're looking for 

Rubric, Cohesity, and Zerto backup status. jobs failed, which machines failed, etc

@"dmoroianu" It's been a while since I had to do this but from what I remember there is going to be a difference between the methods that the switch expects back. A good mechanism I use is I run through the commands via a session on and end device and then I annotate what it prompts me for. You need to ensure that whatever…

no problem

@"tasmar1985"modifying it to below should work SELECT Count(n.UserName) as [Total Clients Using], n.ClientInfo as [Version] FROM Orion.ASA.RemoteAccessSessions n WHERE (ClientInfo LIKE '%AnyConnect%') and (ClientInfo LIKE '%4.8.01090%') group by n.clientinfo UNION ALL (SELECT Count(n.UserName) as [Total Clients Using],…

@"tasmar1985" modify the query in both select statement with to add another column identifying the version number appropriate to the where statement.