jm_sysadmin · Sr System Engineer · ✭✭✭✭✭

It will pull the interface details from SNMP or WMI, or whatever you are using to gather information, and if you need to change a value, some can be altered. A common example is that the bandwidth may be capable of 10 Gb of traffic but you have forced a maximum of 1 Gb, and want to alert and chart based on that maximum. On…

So I don't know what you do want to alert on, but screen reads "I want to entries from 3 IPs, and any message" Since you have 3 "Does not start with" conditions linked by or, I think anything meets that criteria. Does that match what you are seeing? Tell me what you want to include/exclude if you help adjusting that part. 

I am not, but how would you do it manually? Maybe we can work through it. 

event types 2,3 didn't stop me from getting accurate results they seem to be sending and getting status from Service now, but I don't know all the IDs. 

So I don't have your custom properties, so if I comment out lines 11, 12, and get rid of part of the where clause: and (p.Caption like '%-FW%' or p.Caption like '%-CGX%' or p.Caption like '%-AP%' or p.Caption like '%-VS01%' or p.Caption like '%-Switch%' or c.storeVM = True) It runs for me pretty well. What do you see? BTW…

I wouldn't? Every update will overwrite your work, and a lot of icons get used for different type of items. 

If you know what to remove, yes that works. Or the 'manage entities' page will assist: Or automatic removal like @"simon.stone" describes. Then refresh and add the discovered interfaces (using discovery for automatic imports, or hit refresh on the List resources page for it to go out and get new information). If you use…

I think that I would shutdown the old system, copy and start the database to the new server and then immediately run the installation on the new server. That leaves you with a fallback plan, just power the old stuff up. This link might should have the official guidence:…

OK so some info here: solarwinds.github.io/.../index.html And I haven't found the exact breakdown, but here is my best guess. I will see if I can improve this 0 string 1 int 32 ? 2 Date Time? 3 boolean 4 Int ? 5 Int? 6 Float

What's the query that you are using? I think I know what you are looking for but want to make sure.

Sometimes interfaces get reindexed or replaced (Vmware tools updates can do this) and orion doesn't see the old config as active, so it goes unknown. If you don't need the history, delete it off the node and add in the NIC again from the list resources or using discovery. There is also a setting that removes unknown NICs…

Yup! https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-1-Hotfix-2?language=en_US

That should do it if you need to, but the install will likely provide you a link after the primary is updated. 

I agree! 

FYI this is the correct answer even though it didn't get marked

This installer is clean. The online installer always pulls the latest files, the offline installer you can unpack and see the msi's. It has updated versions in it. The hotfix installer is just a subset of files for a smaller footprint. You can call 2020.2.1 hf2 something else but it achieves the same goal.

HF2 is now in the portal: https://customerportal.solarwinds.com/

@"DaveB1" What Orion modules do you have? I am guessing you at least NPM but if you also have SAM, you will have more options. If you could, go to one of the servers in question (since its windows I'd guess you are using WMI, but the agent or SNMP are fine too) and select 'List Resources' you should see something there…

I will try this later today, try leon's 2nd powershell script in the pdf if you are looking for something to try.

Great, that means that a bunch of stuff isn't broken. Do you get WARNING - The underlying connection was closed: An unexpected error occurred on a send when you run the script from the console and from the alert or just one?

If you don't want to go down the route of custom property (which is a good one), and you want to troubleshoot the SWQL query further, get the SDK and SWQL Studio. See the raw data, maybe SysName isn't the best place to pull this name, maybe its cation or DNS. GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion…

That is the magic of SWQL, they do a bunch of those Joins for you, I assume you ahve the SDK, so in SWQL studio you will see the fields for the view you are quering, and linked tables under that. SWQL studio also does some autocomplete, so if you think something is related, just type it and maybe it comes up. It probably…

Different Methods do have different abilities. Feature availability based on monitoring methods — with agents or agentless using SNMP or WMI I'd take a step back from getting it working and come up with a plan to figure out the things that have data for the problems you need to solve. Generally monitoring workstations…

Tried it, and since I couldn't specifiy the user and password, it wouldn't work. You're example was similar to slack.com which allows you to generate an API key, then when that key is in the URL, the post succeeds. ServiceNow require user to authenticate, so the post fails.

There is: https://blog.purestorage.com/try-the-rest-api-using-a-rest-client/ I think the support docs on it require an account.

I would reach out to support, they maybe be able to see in the logs what the issue is.

WMI is the way to go for windows if you don't want the agent.

I agree, and VMan is licensed differently than SAM, and at that level SAM licensing might move to a site license. Talk to the experts, and get a local demo installed to decide what you do and do not care about.

So you didn't say it, but the curl command worked? And I didn't see any screenshots, but if you could for the next part it will help me. The code below is mostly not mine I just trimmed it up to make it simple. Open Powershell console window. After updating the webhook, copy the code into the console window: $webhook =…

Correct, add that to your alert logic.