christopher.t.jones123 · CRIS Solutions Architect/Engineer · ✭✭✭✭✭

@"seymanur", if your alert is triggered and you have not received the email one thing you can check is if the action executed properly, an easy way to check it is when the alert is active go to the active alerts page and hover over the eye icon next to escalation. It will tell you if the action was completed successfully,…

@"johnmcavoy1", so I'm not an Ansible expert by any means, but below is a workflow example that i had set up for AWX. The first playbook is requesting an IP from IPAM, then creating a VM with that IP, and then finally adding it as a node in SolarWinds. I know its not directly related to your request but should demonstrate…

@"Mike_Lomax", did you try what @"KMSigma.SWI" posted above? You may need to disable the certificate checking if the Orion certificate isn't from a trusted PKI. PowerShell function to suppress HTTPS self-signed certificate errors » Kevin's Ramblings (kmsigma.com)

@"Mike_Lomax", you could probably do an invoke rest method and see if you can leverage the impersonation that way. I've not tried something like that out so i don't have any examples, but below i have a couple of articles that might be able to help. The most beneficial one IMO is the second one, if you can get it to work…

@"mulambo", it might be worth a shot to add that self signed certificate to your trusted root certificate store. Not entirely sure if that would resolve it but that's certainly something to try. Additionally, you could also get an SSL certificate for the Orion Site from a CA that is already trusted in your environment.

@"johnmcavoy1", are you looking for an Ansible module specifically for SW? To the best of my knowledge that doesn't exist, BUT Ansible is so flexible you could facilitate this in other ways like having Ansible execute a PS script against SolarWinds to add the node(s) in question as part of the playbook. If you're using…

@"mulambo", is your PowerBI a hosted solution or are you using the cloud version?

@"DS99", make sure the flow navigator has the appropriate flow direction defined as well. 

@mplisek the Node Caption value is not a dynamically updated field. If it is changing someone or something is changing it. I suggest you find the someone or something and update it appropriately to use the sysname instead of the DNS. 

@"LatteLarry", How comfortable are you with SWQL and using verbs with PowerShell? Depending on what data is actually in the tables themselves you could potentially do this by developing queries to define the desired applications to delete since it seems like the web console is all jacked up. You'll have to develop a query…

@"pezza72", no problem. Glad I could help.

@"mcalpinj2", I haven't personally done these types of devices. But I may be able to assist, what errors are you getting?

@mplisek so the node caption is a one-time set value. and it determines it on node import based on a variety of conditions, and there is not a way that I'm aware of that you can modify that behavior. What you could do is create an alert to tell you when the values do not match and have it execute this script as the alert…

@"pezza72", your trigger condition would read like this. Alert Object = Interface Status(Node) = up AND Status != Up

@mplisek, try this. # Pre-Reqs: # 1. Ensure that the SolarWinds SDK, and powershell modules are installed on the polling engine running the script. import-Module SwisPowerShell # Connect to SWIS $hostname = "localhost" $swis = Connect-Swis -host $hostname -Certificate #Get List of devices where Caption does not match…

@"plavelle123", take a look at Delete Unneeded Volumes from the content exchange. It's the perfect use case for what you are looking at. You'll just need to update the SWQL query within the script to scope out the desired volumes to delete. If you need help with the query just post back here and it can get worked out…

@"djceola", you're absolutely right in that it would require additional management overhead. But that effort can be minimized with regularly scheduled reports or widgets that output which values are empty, automation that can feed in from another system to help keep it aligned with other tools, etc.

@"djceola", this sounds like a good use case for an application custom property. You could create on called environment or AlertScope or something along those lines, and then you could use that as a filter in your alerting. Then to move them back and forth between alerts you update the value for the applications CP and…

@"spiciacchia", there isn't a direct path for it, but you can see what the report datasource query is in SWQL and attempt to recreate it from there. When you view the report's data source there is a down arrow in the graphical query builder that will tell you the query it runs. 

@"johnson3", the maintenance start and end times are located on the same table as the object itself. So if its the node you are looking for then it'll be on the nodes tables, if its interfaces then on the interfaces table, etc. There are a ton of resources or examples in THWACK or the content exchange.

@"LatteLarry", try this one. When trying to track down blank CP values i like to do both an IS NULL or ='' because when you do a bulk import it'll sometimes change the NULL to a blank value which isnt picked up by the NULL. I've had good success keeping track of them doing something like below. SELECT TOP 100…

@"mjalden1", you do not have to remove and re-add the groups. The reason is that you are only entering that Service account so that you can query AD to find the group to add and validate it is an existing group. Subsequent authentication requests do not rely on that service account, at that point it is just passing the…

@"jprada" take a look at these results, perhaps a solution is already posted.

@"makecrazy", pretty sure it’s because =1 is asking it to look at “this month” try changing the 1 to -1 in your where statement?

@"oyesdeen777", could you leverage a trap receipt? have the device that hosts the F1 Link send a trap to SolarWinds when the interface goes down and have SolarWinds alert on that? Alert on SNMP Trap Log Viewer Orion Alert Action 

@"jbackstrom" The workflow for the firmware upgrade transfer as I understand it is copies from the firmware repository to the SCP root of the polling engine polling the node, transfers to the node, and then deletes it from the SCP root of that polling engine.

@"mat12" so this is absolutely possible. You can use the Send a POST Alert Action to do it, which can send data in JSON formatting. From the requirements, it looks fairly straightforward in terms of formatting, etc. They have some required fields and then it will be all about data mapping to ensure that the events get…

@"makecrazy", so I don't have an instance I can mess around and test a query. so what I have provided will conceptually work, you just need to fine-tune the syntax errors I have given you. Normally I would work that out before I gave it to you. I think the issue is with the order by in that subquery, but without an…

@"makecrazy", my bad, forgot to alias out the selection in that. Try this ( SELECT TOP 1 tostring(tolocal(EndTime.EventTime)) AS UpTime FROM Orion.Events AS Endtime WHERE tolocal(EndTime.EventTime) > tolocal(StartTime.EventTime) AND EndTime.EventType = 5 AND EndTime.NetObjectType = 'N' AND EndTime.NetworkNode =…

@"makecrazy" try this ( SELECT TOP 1 tostring(tolocal(EndTime.EventTime)) FROM Orion.Events AS Endtime WHERE tolocal(EndTime.EventTime) > tolocal(StartTime.EventTime) AND EndTime.EventType = 5 AND EndTime.NetObjectType = 'N' AND EndTime.NetworkNode = StartTime.NetworkNode ORDER BY tolocal(EndTime.EventTime) ) AS UpTime