cscoengineer · Principal Consultant · ✭✭✭✭✭

Great!! Thanks for the information. It's exactly what I was looking for. One of the objective is to setup an alert if the src/dest domain is a social network.

You are correct 1) For the display part: create a SQL report to show the combined status of the dual nodes per site 2) Use the same time of query to create a sql trigger I would definitely go a step further and use custom properties to make this easier. With method would be to set up a SQL trigger on node update to…

Hi Hi - did you get a response from that person? Any idea on where this value is kept?

I've run into this today. Out of 10 agent (6.1) installs, 3 of them failed with the "Installer User Interface Mode Not Supported". According to google, the error has to do with the installer not able to recognize the version of OS. Running the installer in “windows 7 compatibility mode” solved it.

Hi. I can't seem to get it to work - I get the following error: Any ideas?

Great query I LIKE EGGS! Just to elaborate, the custom SWQL query is without the search. The 'search SWQL query' is with the search string SOmetimes this will result in blank MACs. WHich you can filter out using: where i.mac is not null and i.mac not like '' Thanks

Great script marc!! I like to keep things in custom properties, so instead of “and” statements to filter -I decide to use a alert custom property. Now what ever alert you want in the filtered alerts, just check the noc flag. I also threw in number of triggers the alert has. What I have seen are two custom properties (NOC1,…

I agree with the issue with the Explore-Event feature. I had hit and miss with backtracking the inference rule that was fired. For extremely large amounts of inference rule firing, I would capture that information and turn off the inference. I have seen cases there several of the default inference rules fired more than…

Any luck on this issue?

Great! Thanks you for looking into it. Spent quite a bit of time doing and redoing to see if somehow a special character got in there or if I'm doing something wrong. It's strange it worked on NPM 12.3 and not on 12.4. Excited to see what you find out.

Great info!! Used to create a custom one for a client. SELECT -- vServer vserver.ShortName as [vServer] ,concat(vip.IPAddress,':',vserver.Port) as [IPaddress] ,vserver.DetailsUrl as [_LinkFor_vserver] ,concat('/Orion/images/StatusIcons/Small-',siVserver.StatusName,'.gif') as [_IconFor_vServer] -- LTM Pool…

After reading the docs, I got it to work Add-PSSnapin swissnapin $swissrc=Connect-Swis -Hostname 192.168.25.30 -u "cscoengineer" -p "xxx" $swisdst = Connect-Swis -Hostname 192.168.25.30 -u "cscoengineer" -p "xxx" $AlertIDssrc=Get-SwisData -SwisConnection $swissrc -Query "select top 1 Name, AlertID from…

Great!! Thanks for the information!!

Great info. I generally use just two to handle a few transactions. But you're right. Keep an eye on the load and if the load is at 100%, add another account.

Nice code. When you want to create other charts - make sure you rename all of the parameters otherwise it will be a blank resource. Was able to implement Top 10 for client. I ignored ngRepeat:dups. You only need to load the loader.js once.

Great chart!! I'm seeing an error in the console which is preventing other html to be displayed. Error: [ngRepeat:dupes] Duplicates in a repeater are not allowed. Use 'track by' expression to specify unique keys. Repeater: $notification in $ctrl.notifications track by $notification.NotificationID, Duplicate key: null,…

Very nice eggs!! Lots of tweaks can be done!

The code is pretty much the same for all four, just need to change the table names. Here is the one for alert chart. Does that help? select convert(date,ah.timestamp) as [Date] ,sum_email [EmailSent] ,sum_email_f [EmailFailed] ,sum_alert_t [AlertTrigger] ,sum_alert_r [AlertReset] ,'Total' [Total] from AlertHistoryView ah…

I agree. Chart groupings can be pretty confusing. This is how I grouped it.

The CodeNodeID doesn't give you much information. I would link it back to the node table (this example is using swql) select n.Caption as [Node] ,c.ExecProtocol as [ExecProtocol] ,c.CommandProtocol as [CommandProtocol] ,c.TransferProtocol as [TransfterProtocol] from Orion.Nodes n join Cirrus.NodeProperties c on…

This will result in some null data for nodes which are down or ICMP polled. We should filter those out. thanks Amit

Should be matter of joining nodescustomproperties to nodes. DECLARE @StartDate Datetime DECLARE @EndDate Datetime -- Last month --SET @StartDate=DATEADD(month, DATEDIFF(month, -1, getdate()) - 2, 0) --SET @EndDate=DATEADD(ss, -1, DATEADD(month, DATEDIFF(month, 0, getdate()), 0)) -- Last Week SET @StartDate=dateadd(dd, -1,…

Perfect!! Thank you

True. I have tried to handle as many conditions as I can from the test environment, but there are bound to be situation which I did not anticipate. I'll try to replicate your situation and modify the script as needed.

Great!! Thank you!! Is this auto-deletion logged somewhere? Maybe an alert that something is being auto-deleted?

Did some more tweaking and got the total down duration time along with a readable format (Days, hours, minutes) - plus pulling last week, last month, etc. Also took care of the null condition with a case statement. DECLARE @StartDate Datetime DECLARE @EndDate Datetime -- Last month --SET @StartDate=DATEADD(month,…

I did try that route. I populated a few lat long in the CP, and waited an hour. But nothing happened. The worldmap table remained empty.

Brand new install on a freshly spun up VM test sever.

Some people didn't want the additional table, and wanted the lat, long, and address as a cp. (it requires more db space - but it's a small site) But when I did, the map does not update properly. I get "0 Objects at this location". But the table looks correct. Any ideas?

Hi mr.e Don't see a way currently, as the muting of alerts do not seem to be audited. I muted an alert and am not seeing that event populated in the events table. Also the Orion.AlertSuppression does not have a username field. I put in a feature request. Please vote up. Thanks! Amit