jbiggley ✭✭✭✭✭

That is what I figured but I wanted to make sure. This should be called out in the HF notes. I'm a reasonably smart guy but I was left scratching my head wondering if I had missed something. Install notes definitely need to be written for the lowest common denominator. I guess I've proved that, haven't I?!?

I'm not guaranteeing it will fix it, but have you tried applying to 11.5.0 HotFix 1? 

Yeah -- it's true they do. We're still trying to nail down the actual volumes and, to be quite honest, I don't really like the Ignored* tables. Managing them via the UI is such a monstrous pain. We run the scheduled discoveries once per week and then a schedule SQL job runs the deletes. When we come in on Monday morning we…

Virtual Datastores are a concept of your virtualization environment. A datastore is (as far as I know) a VMware term. Specifically, it references a block of storage that is formated with the VMFS file system and presented to one or more VMware hosts. A LUN is a construct of your shared storage environment. A LUN (or…

I hadn't checked, but I just confirmed that the data is in the database. It's weird because some of the alerts come through fine at some times while at others they only send through the variable names. It's almost like the DB was too busy to link the variable with the data -- or the lookup failed, or something like that.

Just to bring this thread back to life, I had our web developers do a proof of concept with iFrames and a clickable overlay. Works wonderfully in the proof of concept. This way I can get the information I want onto the dashboard view and still allow interaction within the Orion application. As soon as I want to jump into…

Alas, security often trumps ease of administration in some cases. As it should.

If you are really interested in triggering traps from a Windows server, you can use the Windows Log Forwarded that is available as part of SAM or Kiwi Syslog Server. How to Archive Windows Event Logs in a Syslog Server

I wish I could say we would miss you when you were gone but we won't. I've used lots of solutions over the years and if I've learned anything it is that the person implementing it is as much at fault for the outcomes as is the product. No product, not even the SolarWinds Orion platform, is perfect. The more I push and…

Did you contact support about that issue? Just curious if it was related to the SQL query or something else.

You definitely want this AND condition there. The logic is "If Windows Processor Queue Length is greater than the CPU count of the server AND the CPU load is >= 90%" Both of those conditions need to co-exist. A CPU running at great than 90% alone? Could be irrelevant and simply means you nailed your server sizing. Queue…

adatole​ and I had a similar discussion about arp cache but I think the same principle applies, but the issue is that our NetPath probe is only pointed at the upstream DNS server and was set to every 5 minutes. The HTTP component monitors are also set to poll every 5 minutes. We have 1387 URL component monitors all…

I can confirm that HF6 greatly improves the stability and performance of the Orion platform.

Thanks. I'm definitely crowd-sourcing consensus on my opinion here because the documentation doesn't specify the actual relationship. The data and experiences gathered so far seem to match. If it keeps up, I'll mark this as solved and leave it here as an educational post for people wondering the same thing. Proper alert…

I did -- that's what we are converting everything to now. Or we're in the process of converting everything to as it's *lots* of things.

Good call on agents. There is a reason that we went away from them a few years ago. We use them in some very specific use cases included the need for secure communications or in high-latency scenarios where the link is tenuous. That reboot is a problem if the agent needs to come back online and we've seen that a few times…

Yeah that works for interfaces directly attached to the node itself, and I believe those are actually implicit alerts, but my concern is with upstream nodes. For example, SwitchA int0/1 is connected to Node1. If I unplug (or administratively shut down) SwitchA int0/1 then NPM will create an event for the interface being…

The http://www.solarwinds.com/documentation/Orion/docs/SolarWindsPortRequirements.pdf also has some good detail on the data flow on Page 5 under the Orion Additional Pollers.

I agree with nickzourdos -- details man, details! I know we have DB issues because of our recent growth but I'd love to make the console a little more peppy for things where it wasn't waiting for data from the DB

Please make sure you report back! We'd love to look at Always On as a possible Poor Man's (OK, that's one rich poor man) way to get another copy of our DB up non-SolarWinds teams to query against. Often their queries aren't as time-sensitive as things like alerts, etc. but they still want 'current' data. Very interested in…

I 'fix' one little problems and suddenly I'm an expert. (Stupid Google-fu)

We used Database Performance Analyzer to see the long-running query. (I promise, I don't work for SolarWinds and I don't get kick-backs for helping sell their products!)

Good call on the event log. We just discovered that an account that we use to connect to the Orion DB for another application (not the SolarWinds Orion DB user) was locked out. We've just unlocked the account and we're investigating the impact now. Why does matter? We were seeing Event ID 4001 Service was unable to open…

Yeah, I ended re-writing a bunch of my SAM-based alerts. What I found was that having some odd combination of multiple components and/or scoping for the application name itself seemed to cause of the problem. I do have a case open with support and I've already talked with them, sent them diags, done some more testing on my…

Yeah, I agree. As it often the case though, the problem needs an immediate solution but doing it right requires an enterprise-scaled solution We are definitely working towards that groups and dynamic queries to populate those groups.

Unfortunately, the AlertDefinitionsView uses the data from the AlertDefinitions table and that table was deprecated in SAM 6.2.2 and Orion 2015.1.2. To validate that data, perform the following query against your SolarWinds Orion DB: SELECT TOP 10 AlertName, LastExecuteTime FROM AlertDefinitionsViews ORDER BY…

What's odd is that we actually can't find any correlation between components in our Windows-based monitors (non-SNMP of course) and the events that the AD team are seeing on the domain controllers. We're not seeing password failures, at least not significant ones, in the SAM log files or in the polling engine event logs.…

I second derik.pfeffer's recommendation for using a custom property field on the node (or disk, interface etc.) for storing the details. Alerts in the active alerts view are transient and, once the alert has been cleared by the alert reset conditions, whether the alert has been acknowledged or not, the alert is no longer…

If you are using AD authentication in your environment (and I suspect that you are), I would recommend creating a service account in AD that has local admin rights on the servers you want to monitor. Using an AD account makes life a lot easier than trying to manage dozens (or hundreds!) of local admin accounts. Cheers.

Unfortunately I have not -- I got totally distracted by other things and haven't made it that far back in my To-Do list yet.