jrouviere ✭✭✭✭✭

Seems pretty much the same question as answered here: Report on Update Date of Approval You can filter the report or set up a custom report by cloning this one and filtering it to look at only Approved for Removal types of status.

Have you configured an inventory task for the downstream server? Generate a WSUS server inventory - SolarWinds Worldwide, LLC. Help and Support

"Now what?" is always the tricky question and largely depends on what you had in mind when you set up the LEM/Snort. For your other questions: There are no Snort template rules in Build -> Rules so you would need to create rules manually. LEM alerts you based on rules, so once a rule is configured (email action or…

I'm curious about this because we have some APC devices as well and I noticed this with one of ours. It looked like it was version MB:v3.9.2 PF:v3.7.3 vs MB:v3.9.2 PF:v3.6.1 (for the ones that are working) which was a difference I noticed, but I don't know much about the APCs in general, still looking into it with the…

The Database Maintenance Report tends to be the definitive answer on events per day. It should be tracking the events per day by Insertion Time where as you may be seeing events in nDepth by Detection Time. This can manifest itself if you're already having latency issues with the LEM and processing your events per day. I…

The reports that you're looking for are the Computer Update Status reports. You can find them in the admin console under Administration and Reporting -> Reporting -> WSUS Reports -> Windows Server Update Services Analytics. There is a top level report and several that are pre-filtered or you can filter your own and save it…

Hello Charlesnm, This tool is actually a free tool and not a part of Patch Manager, so you will want to reach out to post your question in their space for free tools: Diagnostic Tool for the WSUS Agent Looking at what you've posted it seems like there are two possible issues: 1) You need to go to the settings tab in the…

A couple of clarifications to make sure we're on the same page: Log and Event Manager maintains the raw logs by default for a short period of time, namely in order to "normalize" them which means that the LEM connectors read the data, parse the data, and put key data into specific fields so that it can be searched,…

Hello Shocko, There's a default report that does just that. Go to Administration and Reporting -> Reporting -> WSUS Reports -> Windows Server Update Services and run the Update Approvals report. It should have all of the information you've asked for.

You can see how many times the alert triggered if you click on the alert details link that's included with the default e-mail template. However, it was an interesting thought experiment so I dug some: I didn't see a default flapping interface alert, but I had some ideas for creating one. I started looking directly at the…

Hello Andreas, There aren't any rules to get the LEM to stop receiving logs, but how many logs the LEM can handle per day are constrained by resources. LEM is designed as a compliance and reporting tool, so the intention is to log everything that is sent to the LEM if it can. We do have some rules that you can use to help…

Hello Marnell, I believe these KBs will help you resolve your issue: Unmonitored NetFlow interface - SolarWinds Worldwide, LLC. Help and Support Unmonitored interface automatically added - SolarWinds Worldwide, LLC. Help and Support

Unfortunately this is a conversation few are going to be able to contribute to significantly. Here's what my suggestion would be: Clarify what they mean when they say "alert". To Support, an Alert is an e-mail notification. If you need to get an e-mail or other active notification any time one of these file actions is…

The connector you choose largely depends on where the log data you're trying to collect is stored. If you're connecting to the database directly with that connector you may want to verify the settings there. If the settings to set up the connection for Oracle didn't change from version 11 to 12 there may not be any further…

If it's anything like the test that I just did from Powershell directly make sure your $filever variable actually contains a string. Otherwise the rest of the code looks like it should work as expected. If I set $filever = 8.0.171 it doesn't work, but $filever = '8.0.171' did work.

We've been having an issue with JMX monitoring for a while, but not this symptom. To start, you should turn on debugging and review the application template logs to see if there is an error or something else. Success Center If you can open a case from there and/or provide us with a snippet from the logs we might be able to…

Lots of different things can cause unknown statuses for monitors. A few that come to mind: Insufficient licenses for assigned components. Ephemeral Port Exhaustion on a poller. Polling timeouts. Script timeouts or failure to return statistics. I'm sure there are more, but those are just some that I run into on the regular…

You may want to check with your vendor or knowledgebase for the specific commands on setting up the HP switches, but for NTA to process the sFlow it needs to be sent via port 2055 by default and include minimum fields or it will be ignored: Required fields - SolarWinds Worldwide, LLC. Help and Support You can capture some…

I believe the short answer is, Yes. Patch Manager licensing is inventory based and will also be consumed by nodes you manage from Patch Manager. So for example, you could use Patch Manager to publish updates to WSUS and then let WSUS handle the patching via Group Policy (assuming you don't have additional tooling in place)…

403 is forbidden which sounds like permissions to me. * Can you sign into Orion web with that AD account? * If you can, can you sign in and perform the same query via the SWQL Studio with that AD account? * Make sure you're including the domain with the AD account. We use AD accounts with the script so my guess is that…

You may want to take a look at this one as well: Multiple Statistic Data with unique alert variables? If it hasn't been a feature request already you may want to submit it, I've been getting some mileage out of this one. I don't think it's perfect, but you can query the stats individually.

I've seen the link to what you're referencing floating around, but I believe that was a feature in a Release Candidate and that feature never made it to GA. For bulk adding nodes you can do it via Discovery if you add the node IP or Hostnames one per line (in the Discovery, expand the "IP ADRESSES" option), or you can do…

If you're still having issues (and for future references if anyone lands here): nDepth searches are slow or return a timeout error before finishing - SolarWinds Worldwide, LLC. Help and Support nDepth should be reliable to a week worth of data, past that your mileage may vary. With that being said, if you're timing out…

Hello Packardg, You're most likely going to have to contact Support on this one. It looks like a corrupt license and two out of three causes that come to mind require either a tool that only they can use or fixing something on the backend with your Patch Manager license.

Are you getting an error relating to SSL? I followed the basics from your code and was getting an SSL error, so when I ran the below I was able to connect: add-type @" using System.Net; using System.Security.Cryptography.X509Certificates; public class TrustAllCertsPolicy : ICertificatePolicy { public bool…

I would give this thread a look. If something is available that's one thing, but if it's accessible that can be a different story. A lot of the issue you may come to is whether the path is available to the system or not as is discussed in the below post, if it's a mapped drive it's only available to the user and not the…

If you've got the console open while the alert fires you should see it under the Rule Fired filter on the Monitor tab. Otherwise you can go to nDepth and look for the InternalRuleFired event for a period of time and review those for rules that are firing. You would then need to modify or disable the rule to reduce or stop…

So I just played around with this in our test environment and I think I see what you're saying: If you use the write to NPM Event Log action, it logs it at the warning level. This appears to be irrespective of what the alert level is, since my alert was at a Critical level and was still logged as a Warning. You may want to…

I believe this is what you're looking for: Add endpoint-centric resources - SolarWinds Worldwide, LLC. Help and Support Ninja Edit: Just saw the other end of this having them side by side in the same view, that would be the trickier part. I will meditate on this and see if anything shakes loose, but otherwise those…

Patch Manager will automatically provision the WMI Client Components by default, but if you've turned it off for your environment you can check and re-enable that feature with the instructions here: Automatically provision WMI Providers using Patch Manager - SolarWinds Worldwide, LLC. Help and Support Alternatively you…