happyfunnorm

Not my story, but my favorite "spooky" data center story. A Story About ‘Magic' A Story About ‘Magic' Some years ago, I (GLS) was snooping around in the cabinets that housed the MIT AI Lab's PDP-10, and noticed a little switch glued to the frame of one cabinet. It was obviously a homebrew job, added by one of the lab's…

Pretty cheap... Compare Office 365 Nonprofit Plans $10/user/month for the top end tier. Less or nothing if all you want is, like, E-Mail and the Office Online stuff..

Also, you asked how likely I was to buy an APM from you, and I wasn't sure how to answer. Since I already have SAM, I said not at all likely... since I don't really need a second copy. Should I take this question to mean that you're expecting to roll out a second SAM-like product?

Early in the morning on April 29, 2003, I was working the overnight shift as an Operator in the GA Tech datacenter. At one point I felt shaking and heard a low rumble. Having lived in Anchorage for a time, I knew what an earthquake felt like, and was shocked. It was minor, but definitely an earthquake... I hoped. No one…

Hi there, I've been looking at this a lot. A simple "select replace('x', 'x', 'y')" (so a "${SQL: select replace('x', 'x', 'y')}" in an alert message or alert E-Mail will fail for several alert types (groups, volume capacity, Virtual Host) but works fine for others (like Node, and Interface) and previous to the upgrade…

After doing a Google Image Search on the thumbnail (https://s3.amazonaws.com/thwack-static/production/thwack-store/images/Beats-Headphones-500p.jpg) It looks like a beats by dr dre solo3 gloss black Google

Per the SAM licensing model, when using AppInsight for Active Directory, 50 component monitors count against your licensed number of component monitors per server. Man this is hard to track down... 50.. good lord! looks awesome, though

I'm pretty sure it installed nMap or something, but I can't remember...

Oh, I don't have any expectations. I don't even use NTM, I'm honestly just curious. What kinds of updates would you make? Like, branding and security fixes, but no issues or bugs, or, like, what? Obviously there's some kind of decision rubric, right, if you're not doing everything (or, it seems, most things) but what kinds…

What's crazy is the "Legacy" one works just fine, but the new one is broken for HTML formatting... what I don't know is if it was broken on purpose or accidentally, and if it was on purpose what the new expected way to format that output is at this point. I wish there was some kind of directive on that when they changed…

They're limited as to what they can share because of federal law enforcement involvement.

IMO, you should immediately discount nation-state attacks. There's literally no defense from well-funded, highly specialized focused attacks. As an example, the NSA was intercepting Cisco devices in shipping and updating the OS to a custom version that included backdoors, etc. It's literally the same attack, just physical…

It would be nice to have an actual live chat like we have during ThwackCamp for, like... today. Is there anything like that anywhere? Can someone from Solarwinds set that up, or someone else and just share the URL?

HF2 should be out tomorrow, IIRC. Also, there's basically no defense against a dedicated and well funded state attack. Anyone who thinks otherwise just doesn't understand how computer security actually works, IMO.

How very kind! Thank you so much! I put a ton of time into those things. Happy Friday!

Was the solution flattening and rebuilding the VM

Sure. It's pretty basic, but it's useful IMO, so see how to shove stuff into an alert note. Just like the top 10 processes guy, run this, give 1 minute or whatever for the tracert to complete and then put ${N=Alerting;M=Notes} in your alert Param( [int32]$AlertObjectID, [string]$IP_Address ) if (-not (Get-PSSnapin | where…

ryan.davis26 wrote: So as an example if I'm polling node statistics every 3 minutes, there is absolutely no point in setting this value to anything less than 3 minutes - you're just wasting resources on your poller for anything less than the amount of time you're polling something: I disagree. The alert timing won't…

Thanks! It means a lot coming from you. I "stole" from a bunch of different places and just formatted a bunch of stuff into a single alert E-Mail. The only bigger compliment would be if you started using them yourself

Ok, it's fixed. That was the directory with the templates I downloaded that someone else had made. I used the same general format and coloring, but added a bunch of stuff to them. Please let me know if you have any questions or problems! And thanks for pointing out the problem!!!

HA! That was an older zip file I downloaded! You're the first person to mention it! Let me see if I can update the post.

Bah.. this "Works" but throws errors and doesn't pull ALL the certs even when run as Admin. I really hate Windows... $Remote_Server="Servername" $Expired_Certs = invoke-command -computername $Remote_Server {Get-ChildItem –RECURSE –Path cert: -ExpiringInDays 0} $Expiring_Soon_Certs = invoke-command -computername…

I'd exclude the Phone Line error one, unless you're absolutely sure the ODBC error with that specific string is the only error you'd ever be interested in with that ID. For example, if you get a "Communication link timeout" this won't throw, or maybe if you KNOW you will only get and only want "SQL ERROR" strings I'd do…

Change it to evaluate every minute. What you're doing is alerting is the issue appears in 2 sample periods 30 minutes apart. so Check 1 throws Check 2 throws Alert throws because it's seen high CPU each time it's checked for 45 minutes 1:00 - high CPU 1:10 low CPU 1:20 Low CPU 1:30 High CPU 1:40 low CPU 1:45 low CPU So…

You could change it from a Component alert (when does the service go down) to an Application alert (when does the Application go down) and then use one of the "Components with status..." items in the E-Mail to list each component and whether its currently up or down or whatever. If they're all running on multiple servers,…

You might want to just setup an event log looking for events 1, 4, 50, 153, 150, 157, 11, 15, 129 in the System log. It should be everything you need... You can also setup an Unknown or Down Volume alert, depending on how that node handles disk failures.

Since it evaluates every 15 minutes, to get 2 polling periods you only really need 16 minutes to be sure to get 2 polling periods.

I wrote this guy to track all certs on a server, though it doesn't seem to work on Remote Execution, only localhost... perhaps it needs escalation? $Expired_Certs = Get-ChildItem –RECURSE –Path cert: -ExpiringInDays 0 $Expiring_Soon_Certs = Get-ChildItem –RECURSE –Path cert: -ExpiringInDays 30 $Expiring_Certs =…

There's a Canned (Out-of-the-box) alert "Alert me when the free space of a volume is less than 5%" that you can copy and use as a template. just change 5 to 10. Or are you asking about wanting to insert something in the E-Mail alert itself?

Hey there, you can call it with any of the items you normally use in E-Mails or notifications, including the reqults of an SQL query. Here's what I call to put the results of a traceoute into an alert when a remote node goes down so we can see where the connection died.…