jangliss

Then I do believe that your first screen shot should be fine. In that example it's exactly what you are describing. ( Hardware original status = Degraded OR Hardware original stats = failed OR ..... ) AND NOT ( Node name = blur AND Hardware type = Fan ) As a side note, if you know a little SQL, you can drop down the menu…

Dalibor, Thanks for the information. I'll keep an eye open for future updates. We've been loving what you guys are doing with SAM here, lots of awesome features being thrown in.

Use the "HTTP Monitor" in an application. Under the SAM settings, click "Manage Templates", create a new template, add a new component, and select "HTTP Monitor", you are given the ability to specify the URL, proxy settings, search string to find in the page, port numbers, and any credentials that might be required. You…

Get-CacheClusterHealth is returning a custom object type, not a string, which is why you might end up getting some odd behavior. Because it's returning an object, you don't have to treat it like a string, and parse the response using select-string. Unfortunately we decommissioned our AppFabric cache farm about 6 months ago…

Unfortunately AppInsight for Exchange works on 2010 and 2013, not 2007. Have you looked through Thwack to see if there are templates that already monitor it? I unfortunately don't have an Exchange 2007 environment I could test against, so what I come up with might not work.

In Step 2, if you specify WMI instead of SNMP, it should find "AppInsight for Exchange" as a resource (similar to drives, volumes, etc) when you hit "Next". This saves searching all through the applications to track it down.

Ahh, that's right, forgot about the memory limitations. This should answer your question. http://knowledgebase.solarwinds.com/kb/questions/4103/PowerShell+script+that+uses+VMware+PowerCLI+functions+in+SAM. I hit that one a year or so ago, you have to use a wrapper script to get around the problem.

Unless you have the box checked "Run the script under specified account" I believe setting the credential option has no impact over which user the script runs under. This ultimately means that the script runs under the service account which SolarWinds is using, which is usually SYSTEM. System probably doesn't have access…

krcourser if you're referring to my code above, I didn't put it into a template, but they are not hard to create yourself. * Go to SAM Settings * Click "Create New Template" * Give the template a name * Click on "Add Component Monitors" * Select "Manually Add Component Monitors" * Go through the list and look for Windows…

So the email sent at 9:22 matches the event entry in SolarWinds that shows 0805 going down. That's odd if it didn't really go down. I do see there is additional "root cause" information in the screenshot that you are not showing. The little "+" next to 0013 in the left may give some more information. Do you have any…

Great catch on the Remote Registry service. We had a handful of servers reporting similar issues, but not specifically Exchange. It turns out there is a memory/handle leak in 2008R2 and Windows 7 Remote Registry service that has been known to eat up handles and then go off to lala land. There is a hot fix from Microsoft…

SAM is looking for a particular output format, and you have it partially there. SAM uses Statistic/Message pairs, one for the value and one for the user readable text. You've created a "default" output, but as you're outputting it multiple times, it's basically taking the last, or first, result that is returned. For SAM to…

Too kind sir

Did you modify it in the above script, and it still failed to work? Or did you modify it in the SolarWinds template and it failed? There is no such module as HTTPS::Request, which would be why it's failing (search cpan.org). You should be able to just pass in an HTTPS url by changing the line you did to use https://…

Not sure it's too "long" but I suspect the numerical value exceeds the size of the integer boundaries. Depending on the type of int they are using and comparing the value against, the max value would be 2147483647, which is just shy of 2GB if you're using it for bytes. Float values will give you a max of 3.16x10^29 GBs, so…

I was too, started to think my ugly mug broke the bobble head machines. That, or I'm an old MVP and didn't get one

I took a few minutes (yay for TechEd 2014 downtime), and took a look at it. Fortunately the URL you posted is publicly available, so I could test the output... This seems to generate the correct output. I don't have my test environment in front of me, so I cannot validate completely: #!/usr/bin/perluse strict;use…

Lawrence Garvin, I had similar experience to Graham. The documentation here says to do the node discovery, add the Exchange resource, navigate to "All Application", and then step 5 mentions "Enter your Exchange credentials when prompted". I don't know when that's supposed to happen, but I setup a demo lab and never found…

Funny what happens when you become a user, I'm usually very good at that info up front. Yes, SAM 5.5.

Can you provide a screen shot of the configuration,and the test results when you click the test button?

glad to hear it's resolved. It'd be handy for others to know what you did to fix it. Nothing more troubling to other users than finding people with similar/same issues only to find they fixed it without posting their solution.

You can use the following variables to output the useful data: ${N=SwisEntity;M=ComponentAlert.StatisticData}${N=SwisEntity;M=ComponentAlert.ComponentMessage} The "StatisticData" will output numerical value, which will be the number of files, and "ComponentMessage" will be the list of the files, separated by "|" character.

No, the thousands of alerts are because your first condition is "Trigger alert when any of the following apply". Which means that any condition where the node name is not <redacted> and not a fan will trigger the alert (essentially all your hardware). The configuration above is essentially this: Hardware Sensor Original…

HolyGuacamole wrote: Exactly why I said it wouldn't be easy from Windows. The mapped drives are visible for the user logged in, not the entire server. Without emulating an actual windows user session, you will not see the mapped drive. Right, which is why I'd said in my first example that when setting up the component, you…

Not sure any of the solutions that have been provided use WMI. They call out using PowerShell, and UNC paths, or in the other example I gave, DOS and UNC paths, but that doesn't mean WMI.

As it stands currently, they only support a static list of log files. Okay, so this is my rub on this... If we change the code to send to the Windows Event log Application Log, instead of the custom Event Log, LEM would be able to see the entries fine right? It is not a custom log format, it is not a custom layout, it is…

Are you using psshutdown as I gave in the example above? Does the user you have running the alert manager have admin access on the remote server? It will be needed to access \\servername\admin$\, you should verify that it has access. The other thing you may need to verify is that it is using the right values, instead of…

I've found a whole bunch on remoting and SharePoint and it mentions a bunch about CredSSP because of how the sessions are established. Unfortunately I'm not at work to validate that these will work, and I don't have access to our SharePoint install anyway, but it looks like you need to tell PowerShell to enabled CredSSP as…

These work perfectly when doing arguments to scripts for SAM to be monitoring. Based on the question being about restarting services, the question was more about the event actions in alerting.

Have you verified WinRM is running? Have you verified that the firewall ports are open so your SolarWinds server can connect?