frak

Well I never got an answer as to what was driving this, however a SW software update has fixed it.

If you want to know what somebody changed, then put a database trigger on [dbo].[APM_ComponentTemplateSetting] and log the changes to another table, including the timestamp in UTC. You can then line that up with entries in AuditingEvents to determine who did it. This trigger for example: CREATE TABLE…

A few ideas spring to mind. First, a script monitor can monitor up to 10 services separately. It's pretty easy to pattern match with powershell - I do this in a script I run to check newly build SQL cluster instances. If you really want to use the service monitoring, then you could do that with several process monitors,…

Another reason to add to the list: availability. With an additional poller, I can bring the main server down for maintenance - patches/windows updates - in the middle of the day and users will not notice. There will be an outage in polling, but not of the user interface if both front ends are behind a load balancer.

I take it that IPAM is not an option? That has very nice DNS monitoring.

This is a common task for DBAs, so there are many queries already written to do the task. Just setup a SQL monitor with this (or another version of it) code assuming the SQL server version is reasonably modern. This returns the percentage full for the log files for each database on the server. You may or may not want to…

I am thinking a powershell (run by task manager) and then check the results of that indirectly or directly from SW. Though I supposed you could do a SAM powershell monitor with a LONG timeout value - would be a bit yuk for the poller but a single script could be run that way. Just make sure the poll frequency is not short…

Emailed you.

There are two approaches to this problem: 1. Write a query that returns several values, formats those values in a table format or similar, and returns a single number that summarises those. The problem with this, is that you only have the full details/numbers on the current read - the historical numbers only have that…

You can use a macro in the alert to execute SQL or SWQL - this can return the values and put them in your alert.

Absolutely. You can effectively monitor anything with SAM. Lots of built-in specific monitors (like WMI calls) but when all else fails there is also the ability to use custom scripts. What you want to do is build a SAM template(s) then assign it/them to your app servers.

Okay so the zones loaded overnight. Not sure why it took so long, though. Currently all zones are empty - guessing it will take ages to populate the zones themselves?

Those error pages are returning a 200. The monitor is checking for a valid return - getting a 200 ('ok') and reporting up. Ie the site is reporting up, while producing that error message. So you need to parse the contents of the page return instead of just check the error code - that the URL monitor is using.

You can't. The closest you could come would be to use WMI polling for one of the Solarwinds installs, and Agent for the other.

On a related note, I noticed that several agent's had gone 'offline' while the services were still running. All I had to do was 'restart' them via the agent console. Therefore I plan to setup an alert with an action to start them if they are down. This could also be useful for yourself. They way I figure, you never know…

You can add any individual SAM component widget to a summary view. (I forget the object you need to add - custom something. Don't do what I did years ago and use an HTML object with an iframe!) The above option means you need to redo your views when you add or subtract an AD server, however. The other alternative is to add…

I have run Powershell scripts via the agent on Windows machines. Logically the same method would be valid for running scripts on Linux hosts if you wanted to. It is an abuse of the system, but works well. Just define the script in a SAM monitor in such a way that it returns a 'monitoring' value of 0 or 1. Make sure you set…

I like the F5 'dev' model. Keep in mind they are an expensive kit. $150 for a 'dev' vm licence. You can in theory turn on all features, but resource limited (CPU or memory I forget which) so you cannot turn everything on at once. Throughput is also limited.

I solved this in the end by: 1. starting (another) new document, with the first paragraph and saved as draft 2. added a few more paragraphs. saved as draft. 3. added a few more paragraphs and saved as draft. . . .

Allocated CPU is not there (though you could get it by a custom monitor with a simple query). This should be the rest of what you want: select sq.Name, sq.InstanceName, sq.ProductVersion, sq.ProductLevel, sq.Edition ,mem.ComponentStatisticData /1024 as MB from [dbo].[APM_SqlBbApplications] sq inner join…

I have never seen that recommendation. I use appinsight to monitor the Orion DB. Not seeing any lock problems. As for the load on our SQL server, we have a single node monitor that has SAM running at 130% capacity, and no missed polls.

Do it old-school. A custom node property to suppress alerts; all alerts check this property and only fire if this property is not set.

So glad this was asked and answered! This is a terrible trap.

Current file paths: C:\ProgramData\SolarWinds\JobEngine.v2\Data\JobEngine35.sdf C:\ProgramData\SolarWinds\Collector\Data\PollingController.sdf And as noted JobTracker does not exist anymore.

From subnet creation, You can setup an alert on this event: IPAM Networks -> IPAM Networks was created There is no event for the deletion of an IPAM Network. However all IPAM audit events appear in IPAM_Events table, such that if you want to find subnet removals, a query like this will do it: SELECT EventTime, UserName,…

The answer for me on this one, was to recall that the Agent can be assigned to any of the IP addresses the device has configured (sometimes it picks the wrong IP...) So either add another IP, leaving the 'real' IP available to assign the monitor to, or in this case change the Agent to use the IP6 address that already…

The most comment reason I have seen for that is firewall config differences for the servers. Can you confirm that SQL connections etc are possible from the APE? Once this is confirmed, have a look at what the logs say on the APE. Thinking some more, it is worth resetting the MQ files on the APE. They can cause the 'last…

Simple solution: use powershell's functions directly like this: Invoke-Command -ComputerName ${Node.DNS} -ArgumentList $args[0], $args[1] -ScriptBlock { . . . } -Credential '${CREDENTIAL}' Alternatively (I have not tried this) it is possible changing the Node to dynamic IP would force use of the FQDN out of the box - since…