jangliss

As you're on SAM 6.1.1, it should be possible to add the Exchange monitors to the node with the correct permissions assigned. The documentation for AppInsight for Exchange can be found here. Let me know if that works out for you, if not, I'll throw something together.

What kind of error? Can you screen shot it? We've had issues with WMI if the PTR records are invalid, or are missing completely, that's now one of our "go-to" troubleshooting steps, along with Windows firewall, but the fact that you can monitor the individual node IPs suggests that [firewall] is not an issue.

$throttledmatches = select-string "Throttled" *= [0-9\.]+" -input $raw -all matches | foreach {$_.matches} $nums = select-string "[0-9\.]+" -input $throttledMatches -allmatches | foreach {$_.matches} You can actually reduce these 2 lines into a single command by using "captures". This essentially allows you to pull out…

That depends on how you have the alert setup. My understanding is that if you have the alert setup to just report on packet loss, it'll should generate an alert because the node appears to be experiencing packet loss (even though the node is behind another node that is down). If you have the alert set to report on packet…

adeimel's answer is that they monitor the VIP (load balanced IP) and the individual nodes behind the load balancer. So in the original question of 1 VIP and 3 web servers, there would be 4 nodes defined in SolarWinds. That said, depending on the load balancer, your configurations, and other bits and pieces, you could also…

Fun side note, these exit codes aren't documented in the "Creating a Windows PowerShell Monitor" in the SAM Admin PDF (P390), but are listed under sections like Nagios, vbscript (P385), etc. As mrxinu‌‌‌ commented, in the separate guide "Configuring and Integrating PowerShell", it does call out the exit codes (P18).

That helps. I'd made an assumption that because you said MySQL, you were not using Windows. If you are really using Microsoft Clustering to run it, then I'd monitor the individual nodes for the state of things like hardware, and then the cluster resource address/name for things like the service status, disk, memory, CPU,…

The alert message in the email you showed (9-12-2013 11-06-03 AM.jpg) does not match what you have defined in your trigger action (9-12-2013 11-06-52 AM.jpg). Are you sure the trigger you are looking at is the one that generated the email you are looking at? You might look at your other alerts defined, and see what may…

I have a couple of suggestions, the first is from experience with scripting for Nagios, the other may not even apply at all. First suggestion, use full paths to everything. For example, nc and netcat should be listed as /bin/nc and /bin/netcat, adjusting for your real path. Sometimes execution remotely doesn't initiate…

You can also get away with limiting the scope of the alert to specific objects as well... If you plan on adding more nodes to the specific alert, just change the condition at the top to an "OR" and add more nodes. If you start to get a little crazy on the nodes in this list, I'd start thinking about other ways to…

From inside SAM, are you able to test the SMTP portion of it? Do you get an alert when doing that? If not, can you confirm that you are able to send emails using SMTP from the SAM server using a mail client, or telnet? telnet smtpserver 25HELO samserverRCPT TO:<emailto@domain.com>MAIL FROM:<SAMEMAIL@domain.com>DATASubject:…

I just realized you had opened another thread on exactly the same thing, and I replied there with a possible work around. See here.

lchance The script already looks for wildcard extensions so there shouldn't be any issues there. The other issue is that I cannot type apparently. Line 22 should be 'Statistic' not 'Statistics'. I wrote it correctly in the answer to the question, but my sample script was broken. This is what happens when you write quick…

One thought that just crossed my mind, what version of PowerCLI are you using? The version I still have running actually gives you a warning that future versions are going to handle invalid certificates. Maybe your invalid certificate is causing issues with the actual connection. You might need to look at…

So from the script, there are very few possibilities. Clearly when it's getting to the "Get-Datastore" it has not yet successfully established a connection. The certificate error you mentioned is common when you don't replace the "built in" certificate with a trusted certificate, but can usually be ignored. What I'd…

Why would you not be able to use a network share? How are you planning on executing the checks? Are the checks being executed against the SolarWinds server itself? You can change the first two lines so it says this instead to run on the local drive: $remotePath = "F:\DuckCreek\Insights.Extract.Server\Errorlog\"

As components usually got into a warning/critical state due to a threshold being exceeded you can throw the following variables into your alert: ${StatisticData} ${Threshold-Statistic-Critical} ${Threshold-Statistic-Warning} The names are fairly self-explanatory. ${ComponentMessage} might be handy as well, depending on the…

Hello xfaulknor​, Did you look at the answer to that discussion? One of the suggestions was to disable Internet Explorer's "First Run" wizard using Group Policy. If you cannot do it that way, you could use psexec to launch Internet Explorer as the local system account (psexec -s iexplorer.exe for example) Another tip for…

Right, "none of the objects" meaning none of the applications/components have that event ID in it, which means when you hit submit, it's not going to send any alerts. If there was a component that matched the criteria, then it'd say there was X number, and when you hit submit, it'd immediately trigger the alerts. Just as…

I understand that you've resolved the issue by using WinRM, but I wanted to post a comment on the actual error you are getting. You stated that you granted permissions to the IIS folder, but I see based on the path that you are using the admin share e$. In most cases, this share is reserved for access to users that are…

That is... annoying. I've seen SAM do that in several places when it comes to volumes. Can you remove that condition and see if the alerts trigger?

Thanks for the update. I did a quick skim and cannot find any reference to an HTTPS::Request, nor can I really find a perl module on cpan with that name either. There are calls to HTTP::Request, but that's not what is in your screen shot. Do you have shell access to the server? Can you perform a quick test? This is same…

As far as I am aware, Test-Path only validates that the path is correct, and that the file exist, not the actual count of the file. From the request that was made, a count would be needed so that it can be determined when a threshold was being met that would break the web app. Of course, I could be wrong, and Test-Path…

"Windows Script Monitor" is vbscript. You'll need to do some wrapping to capture the output, something like this might work: Dim WshShell, oExecSet WshShell = WScript.CreateObject("WScript.Shell")Set oExec = WshShell.exec("dir z: /b/A-d | find /v /c "::")x = oExec.StdOut.ReadLinewscript.Echo "Statistic: " + x Or something…

I have no clue what "SBOL application server" is, or how it works, which makes recommending how it is monitored quite impossible. Does the application log to a file when errors occur? If yes, then SAM can monitor the log files for entries. There are already built in log parses in !SAM, but if those don't help, there is…

I've performed a quick packet capture from our SolarWinds server, and what I'm seeing is this. A post is being performed against http://thwack.api.solarwinds.com/api/downloadfromproduct.ashx, with the post data of Username=<mythwackuser>&Password=<mythwackpassword>&fileid=<templateid> (in my test example, I used 144007 as…

keithjen wrote: Thanks Rutgerht. I do have this option enabled, however, I also have the option to repeat the alert daily checked. By this I assume you mean "Execute this Action repeatedly while the Alert is Triggered", and have it set to 1 day? If that is the case, then the option above "Do not execute this action if the…

Sure, the only difference is that you specify the full path to your script, instead of a relative path. There might be quirks such as permissions details that need to be investigated as well, but you can essentially launch anything from that prompt as long as the service has rights to do so.

While you can enable auditing, and the information will be stored in the security log files, monitoring it with SAM will be a PITA. What triggers the failure conditions? What are you planning on doing with the information? How do you plan on aggregating the information? As SAM poles on a frequency, are you looking for the…

If it helps any, and saves you a few extra steps, you can probably write this as a PowerShell script to look for the event log, then query AD to find the policy name. Policies are stored in AD under System \ Policies \ {GUID}. If you open AD Users & Computers, and go to View > Advanced then you can look at them. There is…