jrouviere ✭✭✭✭✭

At a minimum, it's a best practice to set three things via Group Policy: 1) Provide the WSUS publishing certificate. 2) "Specify intranet Microsoft update service location" to tell the client where the WSUS server lives. 3) "Allow signed updates from an intranet Microsoft update service location" to trust 3rd party signed…

Don't know of a limit per device, might be more dependent on the device itself, but there's a limit of 10k per poller: Optimize polling engines in your Orion Platform deployment Christopher got you information on alerting, but while I'm here: Success Center

It looks like some events are audited, but not configuring Admin rights as near as I can tell from testing. Here's some additional information from the KB that covers alerting on auditing events and what is audited: Orion Events and Orion Audit Event Time logging - SolarWinds Worldwide, LLC. Help and Support Alert on Orion…

I believe this is all handled by Orion Polling now if you have that configured. So Status is polled for every 2 minutes and Statistics are polled every 10 minutes. Data used for Recommendations, etc, are collected with the polling data. You can adjust these thresholds via the Edit Properties section when you go to Manage…

Is the popup using a Java applet, Silverlight or Adobe Flash? Because you may need to use the Deprecated WPM recorder if so (there's not full feature parity as of yet): About WPM Recorders

Is this a custom query that you've written or are you just using the query builder? It seems like if you only want the latest status you can select max(timestamp) or just removing that field should get you the single rows. Either way, knowing more about how you built the report and what you're trying to display will help…

Could be a couple of things, so to help find out what it might be, I would do this: Find a test machine that isn't showing up, click Check for Updates, and see what happens. * If it shows up, then I would wait. Let your machines work it out with WSUS. Maybe kick it off so they all check in or if you've got a scheduled…

You likely want to be using the option to Include Events and change that dropdown to "With Keywords Below" and include the string you're looking for: "szErrorMsg = [Microsoft][ODBC SQL Server Driver]Communication link failure"

I was looking into doing this with PackageBootHelper and then I realized that you need to stop services on multiple different machines. This would likely require multiple packages if you were updating the same thing on both machines or it would require multiple tasks. With the information provided by Kelly from this post:…

This issue is typically configuration. You can validate if the correct information is reaching the NTA poller via the instructions in this KB article and using Wireshark: BGP ASN information is not displayed in the NTA Console - SolarWinds Worldwide, LLC. Help and Support

From the digging that I've been doing to look into this I think you see that when it's the default port 1433. I tried setting a "custom port" for one of the application templates to 1433 and tested it on my end, but it still shows the port as 0/null and I don't have a non-default port using instance of SQL to test a…

There's at least one Nginx connector in the LEM, not sure if that relates to the same logs you're looking for or not, but you may want to start there. It would be set up on a Linux based server to read the data directly with the agent typically. Otherwise you're likely right that you will need to reach out to support to…

The reports that you're running are in the WSUS section in reports? I ask because there are two inventories, so if you're running Computer Management reports you would need to set up a Managed Computers inventory as well. If it is a WSUS report have you installed updates from WSUS to the machines so far? And that's…

I think I was able to get it working by putting the first clause in parenthesis and then adding "and not like" such as below: (VolumeType = 'Fixed Disk' OR VolumeType = 'Mount Point') and VolumeDescription not like '%<description>%' However, if you literally only want to except one specific volume you may want to find the…

It's actually not included in the default template, so either way you will need to edit the Inventory Template. * For me, I start from Administration and Reporting -> General Settings and clicking on Inventory Template Editor. * To quickly deselect everything you can check the box for Categories to select everything and…

What is your full query? Are you using this in a custom resource or a report directly? I'm assuming that group_membership is the name of the custom property?

This article is a bit more in depth with similar steps, but often times you will need to clean up some additional information by removing the DeviceID and CADeviceID from the registry: Certificate error message displays when logging in to Patch Manager - SolarWinds Worldwide, LLC. Help and Support Honestly for this issue I…

Hello Mo, This piece is entirely dependent on the settings you have in Task Scheduler and how you use your machine. Firstly, I'm assuming the user's machine is still on and connected to the network when they're offline? If they're using a laptop, etc, maybe consider installing on a server or VM instead. Secondly, if their…

LEM alerts you based on the events that it receives, so I would track it back: With the e-mail track it to the event and node that's alerting you, check the event in ndepth to make sure that it's there (it pretty well should be, but this can give you more information) and from there you can check the Tool Alias, Provider…

What was the path to these logs? They reference EminentWare which would be Patch Manager. So these logs may not directly relate with the SolarWinds Orion Agent issue you're looking into.

Nodes can greatly vary with how much data they're sending especially as you can change the amount of log data by logging at different log levels (informational vs warning, etc). You can find information about retention and reporting in the LEM here: Live Data Storage Retention in LEM - SolarWinds Worldwide, LLC. Help and…

Hello Suja, If the retention period is set for 30 days you will only retain 30 days of data: "After 30 days, the data expires and it is deleted (RetainCompressedDataInDays option in NetFlowGlobalSettings table = 30)" NTA data retention and compression - SolarWinds Worldwide, LLC. Help and Support If you have data from the…

As far as I can think that should be fine. You're injecting the patches to the WSUS server and any reporting is done via Inventories. The biggest thing I could think to try to avoid is scheduling tasks from both at the same time just to make sure you aren't feeding WSUS two different sets of instructions. Granted I haven't…

What is the relative path that it's seeing? Do you have profile re-direction of some kind enabled where your desktop is actually on a file server? If so, are you able to try importing from a local machine or a secondary (for example D:\ ) drive instead? If you have a screenshot of the error it may help provide some context…

Unless the new version has a bad certificate in the build (which support would likely have to confirm) you can try these steps: Success Center

I have a support case for a similar kind of issue, but the opposite. My IP address is used, but shows as transient/available periodically. Have you confirmed from the Orion server that if you ping the IP address you get the expected results (IE it doesn't return packets if available, it does respond to ping if it's used)?…

MSSQL Auditor hasn't been officially updated for SQL 2016 from what I can tell. I'm not certain, but I would not bet on the Auditor working with 2016 as is. You may want to reach out to Support directly to see if there is any further information or if the workaround you suggested is viable.

You can query against Orion.AlertConfigurations (SWQL) or dbo.AlertConfigurations (SQL) for this information, but the data is stored as XML so you may need to parse it in some way depending on what you're trying to do.

Rules (including the built in Templates) live under Build -> Rules in the web console. Add a rule to LEM - SolarWinds Worldwide, LLC. Help and Support I don't see any existing rules relating to Broadcast Poisoning specifically, so a couple of things: 1) You will want to know/keep in mind that rules for the LEM are event…

Two things come to mind: 1. Use a group with "Show best status" as the Status rollup mode, this way you can set it so the group will be down only if all 20 servers are down. Set the group status based on the status of the group members 2. Use advanced correlations so you can put 20 correlations in your alert so that Server…