johnny_ringo

Thanks tony. I created this feature request in case your interested. http://thwack.solarwinds.com/ideas/3622

your account has admin permissions, correct?

@zackm, darragh.delaney, I wonder if you wouldn't mind explaining how the QoE sensors in NPM could help with DDoS attacks a bit further. While I agree having DPI technologies is really useful for getting visbility beyond the typical data you get from NetFlow, it seems that the QoE sensors as currently designed would not be…

aLTeReGo​ for President! You rock!

Yes SNMP is fairly light weight from a network and system resource perspective. However it will not provide you nearly the insight into the performance of your DBs as AppInsight will.

Thanks Stuart. I will keep this in mind where the situation warrants. thanks again.

You could create an IP Address Group using HTTP and the IP Address of your DVR. Then you could create a custom application using this IP Address Group. Then this custom application would appear on your "Top XX Applications" Resources and other places.

Thanks, I saw that. I need to use REST for something else, so I thought I would try out this functionality in the API as well. But I can use Powershell for this until better examples percolate onto the forums.

Thanks! FYI, I am asking for imprvoement to volume verbs here:

What do you need to monitor for the service? Just whether it is running? If so this seems like it would do the job from Powershell Get-service GECS*

I agree with your list Crag. The only thing I would add in addition to this is that these logs would be written to a flat file on the orion server. Having them in the database is good but most security tools look for windows event logs and text file logs on the system. this would enable these logs to be quickly ingested by…

rgr. thanks!!

Also I would add this thread where I describe what is currently still lacking even after the discovery improvements made in NPM 12. Unfortunately I can't get into the SAM beta right now to find the thread. However what I describe is that we need the ability to set robust conditions to determine what to automatically add…

I would also add improved integration of the Discovery utility via the SDK. We need a more granular and more robust way to edit, and create discoveries in bulk. This is a example of where it is lacking today:

Thanks @Network_Guru, cvachovecj‌, I will look into these and post what I come up with. thanks again!

thank you for the info

Hi, I am looking to do something similar. Did this fix the issue for you? thanks

thanks @squinsey, in many cases I assist clients who set up instances for short durations, says weeks to 2 months at most, granular data for as long as possible is important but the number of end points and flows per second is pretty small, say 2000 endpoints.

Are these values in UNDP strings or it is another type of field? If they are strings you could probably use the CONCAT function in SQL. Here is an example that also converts different fields types to enable the concat to function: + (String Concatenation) (Transact-SQL) As you said if your not the SW guy then this probably…

that helps in the short run, thanks Craig! I guess I will have to start thread or something for Custom SWQL Reference Posts....

@"aLTeReGo" , Is this still the recommended method to get the last XX amount of component status messages into a SolarWinds resource? Old component status messages are not stored in the database somewhere? I looked through some views in my DB and it seems like only the most current component message is stored. Thanks!

@"cahunt", where do you change the counter rollover method?

Thanks!

FYI I have been steadily advocating for a global facelift to all resources to standardize the syntax support for different resources.

Can you elaborate? There is an implicit join between Orion.APM.ComponentStatus and Orion.APM.DynamicEvidence. Why do you need to do an explicit join to get a component statistic result in the same row and the component message?

@"mesverrum" , Is there any SWQL query magic to get the statistic result and the message result from the same poll time to appear in the same row? The dynamic evidence table stores the statistic and message for that statistic in 2 different rows in the database.

How about instead of having to create a one off requirement for this specific resource, SolarWinds just standardizes the filtering capabilities on all resources. Like what is described here:

Hi Jan, thanks for the reply. That doesn't work either. Are you sure the UI recognizes the "|" symbol? If I just use brackets I will catch nodes with IP addresses that meet the character class criteria. I can't create criteria that will match all addresses in a Class C subnet. Any other ideas? thanks jrchapman

thanks Tony. I thought this was the case, but wanted to ask to make sure I wasn't missing something.

you could also increase the interval in which your discovery scans run. This would be the easy way to solve this albeit not the most elegant.