jameslindsay · IT Operations Engineer V · ✭✭✭✭✭

The note/reason/comment field needs to be provided whether you schedule the mute/unmanage or execute now indefinitely. This is low hanging fruit so please move this up the chain.

Is there a distinction between Managing and Monitoring?

Interesting, I've never seen that on my down tunnels. Maybe it is able to display value but, it is not something selectable in an alert definition. I'm told by support it does not an an enhancement request is required. Have you attempted to grab that status in an alert condition?

Correct, though I recently removed the Unknown from the status, which basically killed the purpose for the alert altogether

Done

No FW rules blocking. Just checked the Palo and the SSL on 443 is allowed to that device, it ages out. I'll open a ticket. In oyur test, where you using a domain account? "Admin" looks local?

Good to know, If i change it back to Unknown though, how do I deal with all the volumes that become unknown and known dynamically as in the cases I mentioned?

To the first question, yes. To the second, I'm not sure I understand how to answer your question. It's a weekly scheduled network sonar discovery. The monitoring settings. "Automatically monitor based on my defined monitoring settings" . Does that not cause the results to be imported. Am I missing some other step I need to…

I wasn't clear. I'm thinking in terms of what permissions it takes to manage, like increase quota's, move boxes, etc....vs. Monitoring queue lengths or what have you. How much of this crosses over to the O365 templates? * Local administrator permissions are needed for automatic configuration, but are not needed for…

Might be interesting to see if any of the posted enhancement requests made it in in this cycle. It would show you are listening.:)

Thank you. I should have read a little further. One of my issues is that I have a WorldMap populated with about 1500 switches where there will always be a couple of the interfaces down. When I first turned it on, my whole map when Yellow. Can I define contributors for a node or or is it global?

I got it but the survey page doesn't display the box for your Thwack username (Chrome and Edge). At least it did not for me.

Seems like all muting or unmanaging this should be done when the node itself is muted or unmanaged as well. Same with WPM Transactions that identify related nodes. 

I get no results in that table and no, I have not asked in Alert Lab or Alert Content Exchange. Thanks for the links.

We need more up votes on this. We also have to test the alerts to ensure we are not producing a ticket storm and that the incidents produced have the correct data. I need to be able to develop the incident integration from PRD SW / snDEV, promote it to snTEST/UAT and then again to snPRD. This would be much easier if I…

This is good and also a place to have other notes added from other sources such as the enhancement request to provide a note when a node is muted or unmanaged

Couple of questions on this and perhaps I'm just not clear on how this cloud service works. Using "outlook.office365.com" as the node, how does SW-SAM know I'm only interested in our specific instance of Office 365? That seems like a very generic target. According to…

I'm bit behind on a response to this but, while this approach may work for a few devices, I have 1500 of them each on a different network. It leads me to wonder, what exactly does this mean for any device in the "Polling Details" NEXT REDISCOVERY 08:36 AM. If that doesn't pick it up, and the weekly Sonar Discovery doesn't…

This is long over due!

This alert came about because an Engineer was performing some change that unmounted some drives that didn't get remounted post change. This caused several application failures. They asked me to alert them when a drive is "offline"...aka Unknown?

Curious if "My Content" is coming back? I'd like to followup on some questions/issues I've raised but, can't seem to find them.

I'm on SAM 6.7.1 and still no relief.

I really like this direction. However, I had to change back to classic for a couple of reasons. Firstly, I've got to review all my alerts that are alerting when Status != Up. I read the warning on the potential for a ticket storm and did it anyway...my bad. Secondly, I have about 1500 switches on the WorldMap that all went…

This is a great new feature AUTOMATIC REMOVAL OF UNKNOWN VOLUMESHowever, it hasn't helped me stop alerting on volumes that appear offline when the volume is dismounted on one node and mounted on another. Or in the case with Veam, when a drive is mounted to do a backup and then removed.

@Michael Halpin Does this article need some updating? This query in SWQL Studio 2.3.0.123 SELECT TOP 5 Caption, N.Interfaces.Name FROM Orion.Nodes N I Give me this error "mismatched input 'I' expecting 'EOF' 2018-05-17 08:36:35,951 [8] ERROR SolarWinds.InformationService.Core.InformationService - SWQL Studio (null)…

Thank you. Everything else I was finding on the subject said it was a global toggle; active until reset too false. I have a change which will largely isolate SW and potentially generate hundreds of alerts. I was hoping this was a work around to shutting down SolarWinds.

I think the last time I looked at this it only worked if your SolarWinds was the SaaS offering SWO. We are SWOSHe (on-prem enterprise)

I have the same issue but, I don't care that Jumbo frames exist, I care that they have a high drop rate. I'm wondering how I might approach building an alert that detects drops based on the size and drop rate? Given 200 byte ping - no drops. 2000 byte ping - 7 % drop. 8000 byte ping - 25% drop. I am sending 200 pings for…

Another approach, if you have SWO-SH or just Log Analyzer, is to have Sentry send you an SNMP trap. I'm still looking at that in terms of extracting the information from a Sentry SNMP trap such that I can properly populate the incident ticket for ServiceNow.