dan_jagnow · Senior Architect

The options for connecting to SWIS via PowerShell are described at Connecting to SWIS · solarwinds/OrionSDK Wiki · GitHub . For details about different ways to create a PSCredential object, see also https://adamtheautomator.com/powershell-get-credential/ .

I have a few questions to clarify the problem: * For the PowerShell script that you have created, does it use the Autotask API to open a ticket, or is it sending a separate email from the one that Orion is sending? * What information does your PowerShell script have access to that is not available from the email sent by…

You'll find some example SWQL queries for interfaces here: SWQL CUSTOM QUERY TO SHOW INTERFACE PERCENT USAGE LIKE TOP 10 CHARTS with Search option There is information about interfaces in the SWIS schema here: Orion.NPM.Interfaces | Orion SDK Schemas

You'll find some information about how to integrate SolarWinds Orion with ServiceNow here: How to service-now integrate with solarwinds However, all the discussions about integration that I've found revolve around sending data from SolarWinds to ServiceNow. You seem to be interested in doing the reverse. Can you provide…

If you have UDT, you can use SWQL queries to retrieve information about MAC addresses and the associated connection details. See the following for a couple of examples: UDT Port resource/report (swql) Need a UDT report that shows MAC addresses that have moved There is relevant documentation about the SWIS schema related to…

Here are a couple of threads about suppressing alerts that may be helpful to you: https://thwack.solarwinds.com/thread/113593 https://thwack.solarwinds.com/thread/112902

Python has libraries that convert UTC to local time.

Your script looks good. I tried running it on my Orion instance (after removing the custom properties update, which included properties not found in my environment). Immediately after running the script, the node status was Unknown. After the polling interval elapsed, the status changed to Up. Questions: * Did you wait for…

Throughout the log file, there are multiple warnings about opening Registry keys. At the end of the log file, you'll find this: 2018-07-18 08:32:20,592 [12] ERROR (null) SolarWinds.Administration.Client.MainForm - Cannot open URL…

SolarWinds Orion has a REST API: https://github.com/solarwinds/OrionSDK/wiki/REST Since you are posting in the Orion SDK forum, I'm assuming that is the API you are interested in. There are also REST-based APIs for other SolarWinds products (AppOptics, Loggly, etc.).

This is interesting. I wasn't able to get this query running as listed in SWQL Studio. Part of that is because I didn't have an Active_Node property defined in my Orion.NodeCustomProperties, but I commented that out below. More imporantly, the nested subqueries to retrieve the maximum EventTime and TimeLoggedUtc in the…

This requires some XML editing. See this thread for some discussion: "Proper" way to export/import Alert Configurations via SDK? There is documentation about working with Alerts here: https://github.com/solarwinds/OrionSDK/wiki/Alerts You can use the Orion user interface to set up a sample alert with the trigger condition…

There is documentation on the wiki about how to add and manage custom properties: https://github.com/solarwinds/OrionSDK/wiki/Managing-Custom-Properties However, the examples in this documentation use PowerShell. To get a Python-specific example of updating a custom property, see this:…

You do want to use HTTPS. Port 17778 is for secure connections. Make sure that your query is set up correctly. You will need to replace spaces with '+' in the query. Here's an example of what it should look like (for your query) in Postman:

I'm not entirely clear on what you would like to accomplish via API usage. The Orion SDK and Python client are designed to help you interact with SolarWinds Orion via PowerShell, Python, or C#: GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion platform, including tools, documentation, and samples in Powe… GitHub -…

If I understand your intention correctly, you may want to try invoking the Unmanage verb on Orion.NPM.Interfaces. http://solarwinds.github.io/OrionSDK/2019.4/schema/Orion.NPM.Interfaces.html There are some examples of invoking that verb via PowerShell and the REST API in this thread: Unmanage Interface via Script

You could perform a query with the REST endpoint like this (additional columns also available): https://PrimaryOrionServer:17778/SolarWinds/InformationService/v3/Json/Query?query=SELECT+AlertActiveID,+AlertObjectID,+TriggeredDateTime,+TriggeredMessage+FROM+Orion.AlertActive There are examples of using the REST API here:…

I believe you can rewrite the query to avoid the subquery in the IN clause as follows: SELECT n.Uri, n.DisplayName FROM Orion.Nodes n LEFT JOIN Orion.ContainerMemberSnapshots cms ON cms.EntityID = n.NodeID AND (cms.Container.Description LIKE '%critical%' OR cms.Container.Description LIKE '%high%') AND cms.EntityType =…

Try using the Orion SDK for your SWIS client. See GitHub - solarwinds/orionsdk-python: Python client for interacting with the SolarWinds Orion API for details (use pip install orionsdk). The following script works for me: from __future__ import print_function import requests from orionsdk import SwisClient def main():…

A 500 response code indicates that there is a problem on the Orion server, not a problem with the format of your request. I would recommend taking a look at the SWIS log file on the Orion server right after you execute the request: C:\ProgramData\SolarWinds\InformationService\v3.0\Orion.InformationService.log Do you see an…

See tdanner​'s answer under Using Orion Credential Set for SNMPv3 when Adding Node through SDK .

The options for supplying the password via sshpass are described on the sshpass man page. It can be supplied via the command line, a file (via file name or file descriptor), or an SSHPASS environment variable. The man page has a discussion of the security considerations. Also, the Serv-U Administrator Guide has lots of…

The error you're getting indicates that the account you're using to connect to the API doesn't have sufficient permissions to use that particular SWIS verb (CreateCorePluginConfiguration). In the Orion Web Console, select the Settings menu, then All Settings. Under the User Accounts heading, select Manage Accounts. You can…

I'm afraid you need the URI. Alert suppression is designed to work with multiple entity types, not just nodes, so an ID alone is not sufficient. There are details here: Alerts · solarwinds/OrionSDK Wiki · GitHub

This might be a starting point for you: from __future__ import print_function from orionsdk import SwisClient import requests requests.packages.urllib3.disable_warnings() npm_server = 'localhost' username = 'admin' password = 'solar123' swis = SwisClient(npm_server, username, password) results = swis.query('SELECT TOP 5…

There is a sample PowerShell script for bulk unmanaging nodes here: SW PowerShell Bulk Unmanage API script ServiceNow has a PowerShell activity designer, which is what I believe you are looking for to achieve integration:…

Doing things based on times can be tricky in distributed systems since the system clocks on each machine aren't perfectly synchronized. You might need to set the EventTime in your WHERE clause to look a bit further back (perhaps the last 5 minutes) and then use the EventID to avoid sending the same event to the ticketing…

I asked around, and I don't believe it is currently possible to update the credentials associated with an Azure account via the API. That would require the introduction of a new verb for that credential type. I would advise opening a feature request to indicate that this is functionality that you would like to see added to…

If you want to filter the alerts to match only the critical ones, you might need to add AND c.Severity = 5 to the end of your WHERE clause. You may find the following documentation helpful: EOC 2.0 General Walk-Through

You may find the information in this post helpful: https://thwack.solarwinds.com/message/394772#394772