jameslindsay · IT Operations Engineer V · ✭✭✭✭✭

I gave the webhook development about a day and gave that up. I was able to produce a PS script that does the job but, as I mentioned the script has to be applied and to some extent mdified for every condition that warrents incident ticketing.

Slightly different but, I can't seem to get this resolved either What went wrongFailed to get time settings. Failed to get time settings on...insert polling engine I have three pollers at a remote datacenter. They are actively syncing time (NTP) with domain controllers and having no issues. They all have the same time and…

Following. I've been holding out for a better AppInsight solution from SW.

Gotcha, the simple fix would be to break the tabs into their own dashboard then or wait for 2025.1

I use a tab switcher add in for the browser. chromewebstore.google.com/.../ankdojnjbdlokjjpimfhehjfaechilon

Will do, and when you say create a SWQL macro are you taking about this? Custom macros (variables) in NCM (solarwinds.com)

This is coming from Log Analyzer from a VMware event to the variable mentioned above. "Virtual machine ELDSWAPE01TST was migrated from host cltesxprd003.mydomain.local, CLT_PROD_DS_4TB_04 in XXXX-CLT to cltesxprd005.mydomain.local, CLT_PROD_DS_4TB_04 in MUSA-CLT" I want to pull ELDSWAPE01TST from it

Thanks Adam, I'm not entirely sure, no, I'm sure I'm not sure how to do either of those. I'm still struggling with Downsample on the other thread as part of a custom alert where the select line seems uneditable.

Thank you for that tip. I was trying to figure out what SW was doing as it relates to calculating Nodes.[AvgResponseTime] wondering how many datapoints over what period of time and does it exclude the lowest and highest value of the dataset, etc.

Thank you for that tip. I was trying to figure out what SW was doing as it relates to calculating Nodes.[AvgResponseTime] wondering how many datapoints over what period of time and does it exclude the lowest and highest value of the dataset, etc.

HCO - Enterprise plus SRM and WPM. My attention was brought to the issue by a failed WPM Transaction and after snooping around I found many SAM templates in an unknown state. Looking at VMAN, other than the VMs showing CRITICAL, the host appeared to have no issues. I do wish VMAN would be improved to pull in alerts from…

Makes sense, I am also frustrated with the AppInsight going into an unknown state frequently. Component count is managed by balancing my additional polling engines, I have 23. I don't use any OOB alert definitions so each of mine are customized but, to your point there are only a few things our Application support teams…

Curious why the AppInsight for IIS isn't used?

Do you have this as a PowerShell Component in a SAM template running on Local Host (polling engine) or Remote since I don't see a Param for ${IP}.

I get the same sense and so I thought by removing and readding via list resources, I thought I might be triggering the redeployment of a self-signed cert? In some cases, I find the issue is with the "Default Web Site" as that is the site showing the unknow status. When I drill into it, all the metrics are green

Definitely not a password issue. I've been able to rule that out. I'm still open to the possibility of a security software and that team makes it hard to drill into anything.

Your query worked spot on! Thank you. My query used APM_ApplicationTemplateSetting and was useful to find the global template setting where Debug Logging was enabled. It probably did not need the nodedata table at all, but I had it because I was looking for node level deployed templates where the override was on. Each…

Thank you for the suggestion. I have 23 APEs so I'll have to script this approach.

So no, while that did help me find all the global templates that had debugging enabled, I'm looking for the deployed templates where that setting is overridden.

Ok, I am assuming I can change true to false here. SELECT [ApplicationTemplateID] ,[Key] ,[Value] ,[ValueType] ,[Required] ,T.Name, A.NodeID, A.ID, N.SysName FROM [SolarWindsOrion].[dbo].[APM_ApplicationTemplateSetting] TS JOIN [SolarWindsOrion].[dbo].[APM_ApplicationTemplate] T on TS.ApplicationTemplateID = T.ID JOIN…

Task Manager on the host when I came in and find the pages/tabs in this state shows 38% memory consumption and fairly flat. Periodically throughout the day I'll jump on and it's just about the same. And, as I mentioned there are two other tabs being refreshed from ServiceNow and they are working fine.

Yes, it is a proper computer, Windows 11 4core 16GB. I'll take a look at the Devtools, I've never tried locating a memory leak that way. Interesting thought on the monitor, what exactly would you monitor and with what SAM component to detect a memory leak? The "Easy Auto Refresh" has the option to clear cache but,…

No, it does not. For this user I have "Disable Session Timeout" = Yes. The page is just spinning and showing blank. Otherwise, it is saying "Out of Memory" though viewing Task Manager, the system has 60% remaining. Clearing cache and restarting last about 18-24 hours. 

01672671, 01679056

I've tried the latest versions of Chrome and Edge. My service account is authenticated through OKTA as an Active Directory account with "Enable automatic login" on. Despite that, I do find that I have to login in with UN/PW.

This has just popped up for me on version 2024.1.1. However, my error message include a "from xxx.xxx.xxx.xxx" IP address which I recognize not as a managed node but, rather a workstation used by our InfoSec team to pin test.

Thank you, I am on 2024.1.0 so it sounds like I'm in good shape for what should be a simple OS upgrade.

The issue with this is that when starting the alert trigger at the Node object, you do not have access to the Component objects in the trigger. I only want the alert to trigger if CPU is GTE some value PLUS processor queue length is GTE some value. Perhaps here an "Advanced Condition" would work so I will try that.

What I am feeding to the Top 10 program is: SolarWinds.APM.RealTimeProcessPoller.exe -n=${NodeID} -alert=${N=Alerting;M=AlertDefID} -alertId=${N=Alerting;M=AlertID} To be sure it is getting what it needs to actually work, I have that printed in the alert action: SolarWinds.APM.RealTimeProcessPoller.exe -n=5002…

This variable 1: ${N=Alerting;M=Notes} available in the picker for the alert action to send an email is the only place that seem to work to get the top 10 processes running, and only when Node is the object for the alert definition. This ${SQL: SELECT Notes from alertStatusView where alertDefID =…