ecmel · Senior SolarWinds Engineer · ✭✭✭✭✭

You can set it on "Edit Interface" page using the tickbox as shown below: If you would like to set the same bandwidth value to multiple interfaces, you can use "Manage Nodes" page and use "Edit Properties" button after selecting the interfaces to edit the bandwidth.

There are multiple ways to configure it. If you would like to create a Classic Summary view, then you can add "Custom Table" widget and choose "Load Table Configuration from Report" button. In the report area, you can search for "mailbox" and choose "Users by Mailbox Size" report as shown below. This will add a custom…

PerfStack charts can be misleading as it draws a straight line between each data point. If you move your cursor on PerfStack chart, little circle pointer should also move. If the pointer is stuck at the left or right side, then it means there is no data for that time. In your screenshot, I see that your pointer is at the…

You can use SolarWinds API for this purpose. I didn't have an instance to try it but you should be able to enable or disable incident integration using "SetIncidentIntegrationState" verb on "Orion.ESI.IncidentIntegration" entity. I see that it expects true/false value only to enable or disable the integration:

You can find collected Windows Event logs in "Orion.APM.WindowsEvent" object. This is a basic query to pull last 100 Windows event logs: SELECT TOP 100 LogFile, ToLocal(TimeGeneratedUtc) as EventTime, ComputerName, SourceName, User, Message FROM Orion.APM.WindowsEvent ORDER BY TimeGeneratedUtc DESC

You can use a query similar to this one (It lists applications of nodes that have City custom property set to London): SELECT A.Name as [Application Name] , A.DetailsUrl as [Application Link] , A.Status as [Application Status] , A.CurrentStatus.LastTimeUp as [Last Time Up] , A.Node.Caption as [Assigned Node] From…

Yes, this configuration should work as expected and only the active alert for a component should be reset when that specific component is up. For your information, you can observe similar approach in out-of-the-box SolarWinds alerts that have special reset conditions. As can be seen below, scope is not filtered for this…

You can try the query below, it should display unacknowledged active alerts only. If you would like to see both acknowledged and unacknowledged alerts, then you can remove the "WHERE" clause in this query: SELECT aa.AlertObjects.AlertConfigurations.Name AS [Alert Name] , CONCAT ( '/Orion/View.aspx?NetObject=AAT:' ,…

Ye,s you query "Orion.AlertObjects" which has alert information for previously triggered (and potentially reset) alerts. For active alerts, you can define your query on "Orion.AlertActive" object in SWQL.

You don't need to define the scope for the triggering object in your reset condition. It is the default behavior in SolarWinds, reset condition will be checked for active alert objects only. So you just need to define your reset condition for status='down'.

Log Analyzer (paid version of the log monitoring on SolarWinds platform) is not included in NAM license. With version 2022.3, legacy syslog and traps functionality was replaced with Log Viewer (free version of the log monitoring on SolarWinds platform) and Log Viewer requires "Log" database in SQL server. Further details…

I would suggest using the "Integer" type for your custom property as it will keep integer data only. Then you should be able to set your custom property using this SWQL query variable in your "Change Custom Property" alert action: ${N=SWQL;M=SELECT abs((ISNULL(NodeDown_Count_Node,0))+1) as new_value FROM…

I think your filter is in SQL format which is not valid for SWQL. You can refer to node custom properties using link from "Orion.Nodes" object. So I would suggest adding this part at the end of your query: AND N.CustomProperties.HEADENDCIRCUIT = 'True'

I don't know the details on Weblogic but you can try "Component Monitor Wizard" in "SAM Settings" page to extract the MBean data you need from your Weblogic servers. If the server state exists, then you can pick and configure it as a new JMX monitor. For more details, you can check these links:…

SolarWinds HTTP and HTTPS monitor component types have a "Search String" parameter so you can define a text to check if it is found in the web page content. Unfortunately it is not possible to parse a specific data from the output in with these component types. I would recommend using a script based component type as you…

There must be a rule defined in your SEM platform to detect "user logon failure" events and create an high priority "inference" events for reporting or alerting purpose. SEM rules can be configured with different settings, for example; this rule can be fired when there are more than 10 user logon failure events detected…

In order to send Orion alert notifications to MS Teams, you can configure "Incoming Webhook" on your MS Teams application as explained in this Microsoft article: Create an Incoming Webhook. At the last step, you will see the actual URL that needs to be allowed from your Orion server. HTTPS port (443) must be allowed from…

SolarWinds keeps incident details in the "SNI_AlertIncidents" t,able and there is an "IncidentNumber" column in this table to store incident number information. You can also find other incident-related columns such as "IncidentUrl", "State", "AssignmentGroup", etc.

Hi @"vandu" If URLs you would like to monitor are completely different on each server, then I would suggest defining separate template for each server and then assign each template to the related server. But if you have both different and common URLs to monitor on multiple servers and these URLs are related to the same…

Hi, I think you can use the following SWQL query to pull the data for your report: SELECT n.NodeID , n.Caption as [Node Name] , n.IP_Address as [IP Address] , ToLocal(n.UnmanageFrom) as [Unmanage From] , ToLocal(n.UnmanageUntil) as [Unmanage Until] FROM Orion.Nodes n WHERE n.UnManageFrom > GETUTCDATE() ORDER BY…

In PowerShell, you can use "Remove-SwisObject" to delete a node. It requires Node URI as the parameter. For your REST example, I don't have a sample request to share but I think your method should be set to "DELETE" instead of "POST" and the URI should be set to the Node URI that you would like to delete.

When you configure log forwarding in Kiwi Syslog actions, you can check the "Retain the original source address of the message" box so that the original source IP will be preserved in the forwarded message. You can check this article for more details:…

Due to the errors related to Information Service notifications, You can clean up SolarWinds subscriptions and pending notifications as described in this article: https://support.solarwinds.com/SuccessCenter/s/article/Clear-Information-Service-Subscriptions?language=en_US If the problem persists, then I would suggest…

Hi @"vandu" Could you please confirm that the preferred polling method is selected as "Agent" in application edit page? If so, you can enable debug mode on the same edit page in order to collect debug logs in "/opt/SolarWinds/Agent/bin/appdata/Logs" folder. These logs may provide more details on the root cause of the…

No, you can't add custom properties to SAM application templates. As a workaround, you can use "Tags" field of application templates. You can define comma separated list if you wish to add multiple values to a template. This SolarWinds article provides details on configuring it:…

If you just want to check if your website URL is responding, then the answer is "yes". HTTP and HTTPS monitor components are designed to check websites from your monitoring location. If you use agentless polling method (ICMP or SNMP) for your Linux server, then you just need to make sure that the website URL is reachable…

Is there any reason for grouping the data, as I couldn't see any data aggregation definition in column definitions? If you just want to list nodes that have hardware model information, then you can change your query like this: SELECT [NN].Caption, [NN].Location, [NN].IOSImage, [NN].MachineType,…

SolarWinds Platform keeps the syslog data in a dedicated SQL database which is different from the Orion core database, its default name is "SolarWindsOrionLog", but it can be renamed during installation process. For further information, you can find details of the databases used by SolarWinds Platform in this link:…

Yes, it should be updated during the platform upgrade. This is from SolarWinds Customer Portal and I don't see any exception here for the latest release:

You can select tick box for "Condition must exist" in trigger condition and specify the duration to wait before triggering the alert as shown below. This will check all polling data in last 30 minutes and trigger alert if the condition is true for all polling cycles of a node.