jm_sysadmin · Sr System Engineer · ✭✭✭✭✭

Yup, this will help: HP iLO - Configure SNMP - YouTube About 58 seconds into the video he sets the read community string.

Yah its going to be hard to explain that NPM can take syslog data today, but it isn't very good at it, but if you want it to work well you can buy another module. I know that there is some interest in moving away from our Kiwi and bringing that data into Orion, I just don't know what price makes it worth it yet.

So I am guessing what you are going for, but I think something like this is the data source I would use in a KPI widget: SELECT Count(Distinct N.nodeid) as [Number of Down Nodes] FROM Orion.Nodes N WHERE (N.Status = 2) AND (n.CustomProperties.IsTest = 'False') AND (n.CustomProperties.IsWorkstation = 'False') AND…

There are ways to chart things, the easiest is Prefstack, the orange link below. After you save and name it, it appears in the list of widgets you can add to a dash. 

AddDay(n, d) is a function in SWQL. Can you post the query? <br /> SWQL Functions · solarwinds/OrionSDK Wiki · GitHub

Great Script @"mesverrum", currently I am converting our Service Now integration to the CMDB from a job that Service now pulls a SWQL result from Orion to a push where I dump into an import table into SN via rest. Just getting started though.

If caption doesn't work try SysName , use 'not like ' to remove from th list SysName not like '*CDC*'

See my post above, I hope that helps.

SNMP isn't installed by default on many new Windows installs. WMI will be faster and give you more features for windows. If you still want SNMP the free tool will make short work of it. Also choose a community name that isn't Public if you are starting from the beginning, and set your access IPs to just what you need also.

@"brscott"has it right for custom properties @"sjanssen" Below is the screen shot of the custom properties that I use for the router at the other end of our remote site connections. All of this data get put into the alert, and the emails are used to configure who to send to. Basically I want all the things some one might…

@"iqnetrocks" First check out: https://thwack.solarwinds.com/t5/NPM-Documents/Alert-Prioritising-Dashboard-SWQL-for-Problematic-Nodes-Servers/ta-p/530412 Formatting looks odd, but that uses a custom query resource and a fantastic query. Its one of the tabs I put in front of my NOC. I also have a tab focused on disk alerts…

Custom properties are excellent advice. Much more flexible, and they can drive the group membership.

I agree, but I realize that there are enough pieces and parts to the Orion stack that a bunch of combinations can't be tested as well as "everything on the latest". Its not a problem that I have with just Orion, I see it with other software also. Now I just plan a regular update that will take a few hours every other month.

It only took like 30 minutes, and if your server has free resources, it might be time to look elsewhere

I do, thank you

It works they way you want it to, I think, but may not lead to you being happy with it. Custom properties go at the group level or node, or interface, or in fact at most levels of object in Orion. But you do have to know how to get to them after you set them. When you write your alerts are you alerting on the group? If…

Also consider the email ingestor that allows you to send an email and have a ticket created from it. That may be enough to bridge the gap between now and when the new features are ready.

This may have helped, I swapped to a different MIB. I am going to let it run for a day and I will let you know. Thanks!

I imagine that the need for this has been dealt with, but in case people do a forum search and find this topic like I did, this SAM template for elasticsearch does use powershell, but it executes on the polling engine to pull data from the linux server running the application from API's. Its a good template, give it a shot.

OK, sometimes double quotes are evil try: SysName not like '*sql*' OR SysName not like '*node*' OR SysName not like '*db' And this did work for me.

We have done this, and it had returned. The only thing that has reduced the frequency of the issue is to reduce the total work. Scan subnets less often, and if you have IPAM installed with NPM/SAM etc. then take a look to see if you can reduce the amount of scans there as well.

@"AnH." So I think the list of items you need to update are below: ${N=SwisEntity;M=Node.Caption} ${N=SwisEntity;M=IPAddress} ${N=SwisEntity;M=Node.MemoryAvailable} ${N=SwisEntity;M=MemUsage} ${N=SwisEntity;M=Node.TotalMemory} ${N=SwisEntity;M=Node.MemoryUsed} ${N=SwisEntity;M=Node.PercentMemoryAvailable}…

So maybe Microsoft is the support that can help if the DB is corrupt. Otherwise I would do a clean install if you don't have a good back up of the database.

I bet next time you reboot that counter corrects itself. Perfmon counters like any other "thing" in windows sometimes need a restart. If it happens over and over, maybe rebuild the perfmon counters. Our very own @"KMSigma.SWI" blogged about recovering them and has good info:…

This is not exactly what you are looking for, but hopefully it points you in the right direction: # To avoid script with passwords, create a text file using seccure string to hold the encrypted passwords # read-host -assecurestring | convertfrom-securestring | out-file C:\Path\to\file.txt` Add-PSSnapin…

On the Cisco devices I think they pull that from OID 1.3.6.1.2.1.1.1, your devices might put it somewhere else, but its worth looking. Do a SNMP Walk and see where that data lives. Orion includes a tool to do it at: "C:\Program Files (x86)\SolarWinds\Orion\SnmpWalk.exe" Put in your SNMP config and it will pull everything…

One more reply about how to get the message text. Since we have it in the Syslog table we can get it. SELECT TOP 1000 MessageID, EngineID, DateTime, IPAddress, Acknowledged, SysLogFacility, SysLogSeverity, Hostname, MessageType, Message, SysLogTag, FirstIPInMessage, SecIPInMessage, MacInMessage, TimeStamp, NodeID,…

That's a good idea, since I have Trap data I tried: SELECT TOP 100 NodeID, IPAddress, Caption, Nodes.Traps.DateTime, MINUTEDIFF(Nodes.Traps.DateTime, TOUTC(GETDATE()) ) as [Minutes] FROM Orion.Nodes Nodes Where Nodes.Traps.DATETIME is not Null and MINUTEDIFF(Nodes.Traps.DateTime, ToUTC(GETDATE())) < 5 Which works for traps…

I like what I see in the screenshots, @ me if you need anything else.

You should be able to remove them from the manage nodes page. Possibly a restart of the services would clear it up, but the powershell I posted should also work.