gbutler

As I understand you have a max of 255 chars. Subtracting the chars 10+/- for the text Orion adds in. What I ended up doing is I took out all the white space, returns, basically anything that I felt could be dropped ffrom the event message. I also write the full event message to a remote file. So if more detail is needed…

Perfect. Thanks! I'll give it a try.

The only other difference I have is I'm running a pre-released 9.5.1... which I was told would not cause any issues but then here I am. 

I don’t know that the reason the server is not responding to WMI query is its over-loaded. This is only a guess on my part. What I do know is this… we get an alarm failure that states: IIS Admin Service for Internet Information Server (via WMI) on AFI-ARC-WBSVC01 is in an unknown state Which as I understand is the default…

Mike: I've been away from reports in Solarwinds for about a year. That said, I have not seen what you are experiencing. Only idea i have for you is to get the underlying SQL and see if the behavior can be seen in the straight SQL. If you do not know SQL, there is usually someone in Thwack that will help. glenn.

I see what you mean. When I set this up I looked at the "none" and the "not-all" and was more comfortable with the "none"... I should have investigated more. Sure enough. The "none" has a logical OR and the "not-all" has the logical AND. Thanks so much!

I am also interested. I'm finding one difference with our virtual nodes is the SNMP machine name will resolve to the Virtual node's underlying physical server. It seems to be a consistant difference for the vnodes I have so far. When I add a virtual node I need to override the node name. Everything else looks correct so…

Its not a permission issue. I'm using IE for my browser. Per your first item listed. I am unable to view the Orion web console when I use the DNS name or IP but when I use localhost it works. So... it must be an IIS configuration then. Well this is how I end up learning more about IIS... I have a direction to look now…

Using advanced alert there are two options that I'm aware of. You can schedule the alert to block out a time period or you can schedule the action to not go off during a block of time. If you have several actions in your trigger and want some to go off but not others the second option would be the ticket. In either case…

I think your might be right. I forgot that the service restart action is different in that its a custom Orion executable... my issue was with the "vbscript" action.

FYI... the script broke for me due to day-light-savings... I had the monitor checking every five minutes for event IDs... it stopped working this year right at time change. I think I got the code fixed now (as much as I could figure out how MS handles time change). 

I'm not refering to Orion log files. I'm refering to having your script log errors to a local file. I don't think there is an Orion log file a that will help much for alert scripts. Another thought. How are you determining whether your alert is triggering? What I do is I write an event to the event log as welll as I will…

I've had similiar issues. What seems to work "sometimes" is to completely UNINSTALL snmp then install again. The reason I have "uninstall" highlighted is because the admin who was doing this for me was just reinstalling on top and my problem would continue. It was not until another admin did the uninstall first that my…

This is what I have done. I have a node field called "Grp". I created a limitation based on this node field. Based on the user or the view I can apply this limitation... by checking on groups they can access. If the limitation is based on the user... no view is needed to be messed with because the limit is carried by the…

My first reaction was similiar to yours... this is a job for cron... not $$ monitoring system... but I'm in the world of microsoft and having the ability to manage a centralized restart is what is really being asked. They have a specific problem in which the said service has a memory leak and will eventually die. It was…

that was a good explanation. And I think its going to work. My testing is showing that my failures are now due to the "logicalDisk" class not availabe... turns out Win2000 by default turns them off. This sure does give me a little flavor of what you guys must deal with in development. Yuck. What is a bit frustrating is I…

Thanks Roger... I'll give it a try.

If its a custom view where you are using the top 10 there is a limitation button... but it sounds like that is not what you are using.

yes...still around. Not working much with SW these days. For us, after a long struggle with WMI/SNMP and Windows we have pretty much given up and are focusing performance monitoring using MS native systems center suite, which seems to have matured of late. The issue we have is WMI and SNMP services are not reliable…

The resetquery is defined by the trigger. So when you changed the trigger It would imply that the reset was changed. What I'm not sure of is how Orion internally determines that we have a reset. I would have assumed that a node would first need to have been triggered... but in your case this did not seem to be true. WHen I…

Same problem. I had my hopes up but this is still dieing with same error. The doc states to run: You are executing the version 9.5 installer (SolarWinds-Orion-9.5-<em>license</em>.exe) and not a service pack installer (SolarWinds-Orion-9.5-SP#-<em>license</em>.exe). The exe I am using is a bit different:…

I have a curious observation then. I started at my current company in which they had Orion up for a quite a few years. The "choices" for the admin pull-downs are definately not all Orion defaults. Some are user defined ones... the reason I know this is the names are definately custom created. That said, there must be a way…

Thanks. I was able to reach the fellow who did the install. He reinstalled the APM and now they are back. It was some time since the install was done and apparently no one noticed until today that they were missing. I don't know if this is something I should be concerned about. I'm thinking I will wait and see if it occurs…

The short answer is the web interface. The graph I provided above is from APM monitor. Orion graphs allow you to specify the time and interval. ONce you do this and hit refresh... you will see that your URL will now contain necessary details to make the graph. This is what you cut and paste into the job scheduler. If you…

I have 248 alerts (about 50 of these are new alerts that I'm creating in an effort to get suppression set up... as I validate a new alert I added the targeted node to a "not all" list in the non-supressed alert). I've removed the duplicates... basic alerts that were triggering along with advanced ones for the same problem.…

I have not used the web interface for NCM (do to some hanging issues that I have support working on). So my experiance with web interface is NIL. My only guess would be playing with the above settings to see what it does. You might want to look at the webconfig file under inet\Solarwinds\web.config. 

I may be doing something incorrrect but when I create a job it asks me for the user name and password... when I look at the windows task scheduler I see the job queued up under the user I gave it.

I just re-read what you wrote... "Events are populated by NPM and the modules outside of alerting as well as from alert actions" So then it "is" possible to have an event log entry and NOT have an alert log entry. That said, maybe the network to the server went down causing suppression to set? Is there anyway I could prove…

I did have suppression set ... if node down do not act. The node was up though. I have two defined alert actions. One is the action of restarting the service... the other is the action of writing to the eventlog. Since I see the entry in the event log... my assumption is the alert did trip (i.e. because one of the two…

After I wrote my post I tried uploading a pic but for some reason my pic was "blank" on the word template... I am very impressed in your ability to make sense out of what I wrote. Thanks! Yes, this is exactly what I was asking. I did not see the litte "..." (dots) in front of the conditional statements. Now I see how…