gbutler

If you know the MIB info... could'nt a universal poller be created? My dilemma is we have Zebra's which does not publish their MIB info nor do they use SNMP. They do sell a printer managment tool though! I agree printer managment is huge.

You can test the SQL by toggling the status condition... its not perfect but then you at least can screen out any obvious typos. Using traceroute is something I thought might help but for some reason the IPs returned don't match what I would expect the COREs would be ( I don't understand why this is...). The other thing…

There is a windows event log monitor template you can use. I found it some time back in the APM monitor share archives. It's a vbscript monitor. It counts the number of events matching the spec's you give it... which can be ID number, a string of text, and number of minutes to look back.

I hope your avatar does not reflect what is to come... ;-) Good luck! 

My end result was creating a vbscript monitor that given a time argument would flip for a set period of time. The alert triggers like a normal alert with actions occurring. I suspect down the road there is a chance that I will have more requests to start this app on selected servers at a given time. Thanks for thoughts and…

There is an HTTP APM... I have not used it yet... Not sure if this is what you are looking for... http://www.solarwinds.com/NetPerfMon/SolarWinds/wwhelp/wwhimpl/js/html/wwhelp.htm#href=OrionAPMPHComponentTypesHttp.htm

I found a canned report called "Backup Status of Running Configs". This kind of helps but it has 50 pages because it contains all nodes and there is not option on the filter for say keying on the workd "never".

What I have done (which I hope there is a better answer out there) is created vbscript that grabs WMI values for processes of interest. If you echo the information in a mesage statement... the information will be added to an "info" button besided your component monitor as well as you can include it with a variable…

There are a couple of places where filters will restrict your views. 1. User account has a filter. 2. The specific view has ability to filter (you can tell what view you are in by the URL).

I had a similiar problem many months ago. The immediate cause for my poller to die was not determined but some things that helped were, upgrading to 9.5.1, cleaning up my NCM DB (we had several hundred WIN boxes that were not needed), cleaned up a lot of old alerts/monitors set up years back that folks forgot about and…

Just hit the submit on my post and figured it out.... Since the detail's views are subsets of the summary... I just added limitations to those views that contains all server nodes for test/stage/production. I have four Application Summary views... 1. all their nodes, 2. Summary for Test, 3. Summary for Stage, 4. Summary…

I've been wondering the same thing. It seems everyone wants reports in XLS, which today means manually exporting for them.

Might want to check to see that your reset is not duplicating the email otherwise... to help trace, you could try accessing the db and runninq a query on your alert... this might assist you in finding source of the duplicates,

Assuming your alert is of type "component". Try the variable: ${StatusOrErrorDescription} If you are using a vbscript monitor this contains the "Message: " output text... at most ~250 chars worth at least.

SW: I'm wondering if this would be a bad thing to do... if I can't change the alert trigger using the alert interface how about if I change it by manually editing it? In my above request, if I "add" a custom property call say node.TsmSpace? For example:

Figured it out. Not sure why but I played with the trigger logic... added what I thought was redundant conditional statements...now it works. So if you want to run a single alert triggering from many components from one object... this is what it looks like:

Not sure if your question is "what" to monitor or "how" to monitor.... if you are just looking for out-of-the-box cpu/mem, go to the APM creation page... at the very bottom you will see "find Processes,Services, and Performance Counters"... walk through the menus and you are done...

This does not sound normal. If you would have said you got emails stating that nodes were "down" then I would suggest looking at your trigger but that is not what happened. Did you make any changes to your "reset"? One thought would be to grab the sql statement from your resetquery and see if the change you made messed up…

Here is the answer I got when I asked...

Modified process monitoring to exclude the Tivolli process... it runs a normal 75k+ handle count. According to IBM this iss OK. Adjusted my process monitors to report the "WMI commandline" in the "message" field. This has been helpful for Developers in pin-pointing the afflicting process.

Sometimes I can find helpful clues in \inet\logs file... but more then likely I'd be calling support. Check you events log for SNMP errors? Good luck.

For me, having the ability to assign ownership is big. Today I either have to give them admin priveledges or node management. Neither option is suitable when you have large shared environments. It would be a nice add-on if a user could identify who the owner is of an alert... say the support center gets the alert... if…

Server OS: Windows Server 2008 Server CPU Type/Num/Speed: Xeon/2/2.67 GHz RAM: 12 Num Nodes: 1556 Num Interfaces: 3734 Total Elements: 6493 Other Solarwinds modules Running: NCM, APM, NetFlow SQL DB Local or Remote: Remote Poles per second ICMP and SNMP: 50/51 (outstanding will typically runin the 100s, currently at 300).…

I agree. One application of APM that I'm thinking powershell is the only viable alternative is dealing with hosts in different user domains (for MS platforms). As far as I have been able to determine... the only viable method for handling remote login with passwords is using local encryption via powershell. I would think…

Bingo. I think I have it. Per my DB query the alert was actually triggering. So the problem is not the trigger but the action. I have multiple actions. The first action would fail... so the second action would not run. The only way it would run is if you reset the alert (I would do this by adding/deleting a new condition…

I opened up a support ticket so hopefully they will point out my blunder. I did find some pretty cool things by watching the SQL stuff in the database. I got tired of watching/waiting for that stupid email that would never arrive so I set up some standard queries that would watch - the alert log, my alert's status, alert…

The output you provided from copying your triggers should list the nodes... here is what I was refering to... this is just a generic routine I have been doing to test/validate what nodes will be triggered (see attached).

One thing that I started doing when working with alerts that has been a big help is to have a SQL connection to the solarwinds DB open... after I create the alert I test my trigger by cut & paste the SQL trigger statemen (found under alert definitions) into the SQL server manager. You can toggle the status to check to see…

I agree. If a typo is entered in the "incorrect" entry stays in the cache and bites me every time I select it. Since the email addresses don't resolve it's very easy to mis-type in that very small window.

The time I insert is not the time that is going into the database....