jrouviere ✭✭✭✭✭

Java is built into the agent: Java Runtime versions for LEM Agents - SolarWinds Worldwide, LLC. Help and Support However, you may need Java to run the installer, assuming this might be the error that you're seeinng: JRE Libraries are missing or not compatible - SolarWinds Worldwide, LLC. Help and Support

Are you running VMAN 8.2? The issue should have been fixed there, assuming it's the same as from this post: Account permissions required for VMAN recommendations Bottom line is that VMAN was being weird about working with groups vs single accounts and should be fixed now, unless you have something new.

There was a pretty similar post a few days ago where I posted some suggestions to start with if you want to check it out and reply back: Tracking DNS traffic Assuming the connector configuration isn't the issue, the first thing you'll want to make sure of is the logs have the data. The majority of the DNS connectors pull…

Looks to me that you may want to use these steps as well: Multiple Statistic Data with unique alert variables?

To me, this looks like a clear cut case for Custom Properties. I'm sure it's going to take some time to gather, but how dynamic is this information? The only thing you've listed that I see would remotely be dynamic would be the site contact (could depend on the hours, days, etc, especially with the holidays coming up).…

Lots of ways to do this, there's a built in Log Parser for Powershell application template: Log Parser (PowerShell) There are custom options: Advanced AppInsight-Style Log display in a SAM Monitor using Powershell There are other ways to get similar results by using HTTP/HTTPS monitors and Windows Event Log monitors if the…

Two thoughts come to mind: 1) A DirectLink account (though in my testing it still took additional steps to make sure there was an active session first, maybe try setting it to never expire the session?): Share Orion Platform views with non-Orion Web Console users 2) Some form of SSO. If Orion uses some form of pass-through…

Often with connectors (the Directory Services connector specifically comes to mind) you need to restart the manager services when you enable TLS/SSL. I'm sure Support will take you through that as part of the troubleshooting. Another thought is to make sure you're using the hostname instead of IP if you have DNS enabled.…

Patch Manager integrates into the SCCM console which will be connected to the Patch Manager server. Patch Manager always publishes the third party content to a WSUS server, often just referred to as a Software Distribution Point for SCCM customers. As long as the network is open (at least port 4092 for Patch Manager) I…

I tried your script and it seems to work on my end, so I'm not entirely sure unless something is missing from what you've shared. Make sure you saved and re-ran the script. Make sure you're looking at the same Orion instance. It seems like you are connecting, just not getting any results back. For reference the NULL values…

Yes, you can restart the FSDB server without affecting the Orion Web Console or your other modules.

Not trying to over simplify it, but I was able to add AlertObjects.Node.IPAddress, to the select query as there's already a relationship between the tables, are you running into an issue where that doesn't work for you? Here's the entire third line with it added at the end: <snip line 2> AlertObjects.EntityUri,…

Rules and Filters are largely independent other than they use the same logic. So you don't need a filter before a rule or vice versa. Filters are used to sort the data in real time, rules are used to perform actions on your behalf. Filters ARE necessary for creating most widgets and I would likely use it like that in your…

FIM does not track file size from anything that I've seen. Therefore you wouldn't be able to create a rule based on the data from FIM. The connector settings you're referencing are the types of actions you would like FIM to monitor, so you can either see a file created or not by selecting the appropriate setting. It's…

I've asked this question to Support previously and they've told me that "Total Elements per poller" is the definitive measure for scaling. What you might be seeing is a difference between Licensed Components and Actual Components (my terms). For example, when using AppInsight templates you may be "charged" 50 components…

1. You can migrate the database, but not the install: Patch Manager instance and database limitation - SolarWinds Worldwide, LLC. Help and Support I have seen a situation where an in place upgrade was attempted successfully, make sure you back up and snapshot everything as much as possible before you attempt it. 2. Any…

So from the tail end of your post, nothing is installing now? Even old packages? In the past I've seen this with new packages and sometimes there's a synchronization issue because, if you dig into the client logs, you see that it shows it was already installed, therefore successful relating to the installed rules. Can…

Most of these are Windows (WSUS or Update Agent) errors, you can find some information here, but you're going to want to do some additional research via TechNet to get specific resolutions: Error codes and patches for WSUS servers - SolarWinds Worldwide, LLC. Help and Support InvalidNamespace Invalid namespace typically…

Was trying to find a general troubleshooting article, but came across this: Success Center I would also make sure you can ping the Orion server you're trying to connect to. If you can ping it, make sure the ports are open: SolarWinds Orion agent requirements

From playing with it, I believe the dash is just a placeholder really and not being treated like an actual character in LEM. I exported the data to CSV and found the dash in my LEM is showing up in UserLogon events as the SourceAccount. If I search for UserLogon.SourceAccount = * I get 149 results (it's a lab, so not much…

I'm assuming from your description that fortimail/fortiweb is sending syslog messages to SEM. Do you see them in checklogs on the SEM? Success Center If you do, assuming the connector is enabled and reading from the same location, are you seeing unmatched data events in nDepth? Success Center

This is a question that will vary on your usage of the LEM and your environment. Do you plan to use the LEM to collect only server logs or only networking logs or try to collect both? Ultimately the LEM would ideally have the ability to receive logs from everything in your environment, but if you only intend to monitor one…

I use and have seen used the SWQL custom resource to do this as you can put in a search query directly there. Examples: Serials & Version SWQL Search Resource Building Simple PerfStack Project Lists With SWQL But if you want to use the HTML resource specifically this may help as well: Possible to embed SWQL inside of…

This information is based on the information provided by the logs directly on the server. There isn't likely to be another connector that will read the data as this is what's being presented in the logs. You can find the event in the Event Viewer of the machine to verify. That being said, there may be another event that…

It should be AlertObjects.AlertNote is the field that you're looking for. And this is what happens when you acknowledge an alert: Success Center

It looks like that should support regex, so you can use (a|b) to filter for A or B or you can use [ab] to do the same in theory. For your case I would try "Cisco IOS(-XE| XE)", I'm not amazing with regex so you may want to play around with it some, or there might be a way to do it with just the space and dash like "Cisco…

A few things: 1) You may want to consult your documentation to see if Tintri lists a default syslog facility that is used and check that. 2) If you're able to run a trace you can make sure that data is reaching the LEM (Support can help you with this from the LEM side if you need). 3) It doesn't appear that there's a…

I had this issue when I set a polling interval as well, but if you leave the polling interval blank it will use the Node or Interface polling interval by default. Also if you're using transforms the polling intervals need to match. Define Your Universal Device Poller If you leave the interval blank and then check back in…

I haven't looked in about a year, but the information should be coming from /proc/meminfo does that return the expected statistics or are those numbers negative/off some way? The only calculation that should be done (again, assuming nothing's fundamentally changed in a year) is FREE + BUFFERS + CACHED as unused memory. You…

The short answer is yes. The longer answer is that it will also require Support intervention as 6.3 changed how admin credentials work requiring Support intervention. Feel free to raise a ticket or give them a call and they can assist you with this. https://customerportal.solarwinds.com/support/