jrouviere ✭✭✭✭✭

* The connectors should remain in place, but as always you will want to test that before making major changes. * No. If the machine is removed from Manage -> Nodes and later re-joined it is going to basically be treated as a new node (no connector profile, no remembered connectors). * Adding machines to a connector profile…

I'm not having this issue, and coming from a thread where the same error happened previously, the customer appears to have resolved the issue with a reboot: iTunes 11.1.0.126 - Images Invalid

There are lots of ways that you could accomplish this. I'd recommend against getting any specific PII or anything like that in Orion, but if it's just the metrics you described then it's more up to your system. Where do you usually get this information? Is it a custom application with resource counters? Is it available…

We have a few of these set up (Oracle Experience Monitor being polled via Agent), but I don't recall any custom setup we had to perform beyond having the Oracle Client installed as per here: Oracle User Experience monitor If it's working agentless I'm assuming you've made it that far. You may want to try alternating the…

In my experience the issue usually sources from the Windows logs themselves, if you find this Security event on the source machine, is the username there or the same "Unable to resolve username" message? That will help narrow down your next steps. If it is in the Windows logs themselves, this article seems to have some…

You've got the right idea, per server. You mention having at least one automation server, so make sure that they have these settings as well. Furthermore, if you're not seeing the settings applied you may want to restart the EminentWare Data Grid Server service on each box to make sure it synchs, or reach out to Support if…

For your given example you can do exactly this with Network Configuration Manager using Jobs if you have it: Create and manage NCM jobs

The Orion SDK and SWIS are accessible via a powershell module: PowerShell · solarwinds/OrionSDK Wiki · GitHub And the forum for additional information: Orion SDK I've never directly looked into what you're trying to accomplish, but I would start there.

I'm assuming that's the verbatim name of your report? I don't see that report in my VMan instance or on the Orion Demo so it is likely a custom report, you may want to take a look at the query to make sure it is polling what you are after. If you're not sure you can try posting screenshots of the report settings or the…

If you want to just have a package copy a file, this thread has some detail on how that was done using xcopy: How best to use Package Boot Helper to copy a file? If you just need to include a configuration file or an MST file there may be a way to do that via switches if you're able to provide some information on what…

I'm not aware of anywhere you're going to have an Excel ready document of the reports list, but you can find the reports listed in the User Guide: Log & Event Manager (LEM) Documentation - SolarWinds Worldwide, LLC. Help and Support You will need to open the PDF (not the online version), it won't let me get a short/clean…

I think you mostly have the right information, but there might be something you're missing if it's not being drawn to your attention, but first the FAQ: SAM licensing model detailed - SolarWinds Worldwide, LLC. Help and Support In your situation if you're trying to add another 400 nodes (for example) and you're including…

Hello tpmobley, This is not currently a feature supported (we take actions for you that run like a script, but don't allow you to run your own scripts), but you can vote on the feature request here: You can read more about available Active Responses here: Using the Computer-based Active Response - SolarWinds Worldwide,…

It looks like you might have some mutually exclusive stuff going on here. What you have will work for SWQL and is necessary for the search portion of the widget, however, I believe the reason why you're not getting decimal points like you desire is due to the data type being INT instead of FLOAT. So you could resolve this…

Success Center If you look at the node details is the sysname showing the short name like you would expect? If it is, you can try to Edit Node, delete the caption, submit the change and it should populate in the order from the above KB. I didn't see an article that specifies where the agent is getting the name, but I…

It looks like System Event ID 6005 and 6006 are the typically suggested events, but more directly correlate to the Event Viewer directly: How to view Startup and Shutdown history in Windows - The Windows Bulletin Just one article I found, but three others had the same event IDs referenced.

There's no way to directly import the query that I can recall, but re-creating the report for Patch Manager should be relatively simple. Below is the KB for the WannaCrypt report which fulfills a similar function as it is reporting on KB numbers for patches: Create a WannaCrypt report in Patch Manager - SolarWinds…

If I'm understanding you correctly you need to point your Orion NTA integration at the correct NTA Database? That isn't going to require a full re-install, but you are going to need to run the NTA installer from the Orion server to update the Database location. The detailed instructions are at the bottom of this KB: Change…

Had something similar with the Real-Time Process Explorer, so I'm betting this is it: For the environment that Does NOT have the reboot options, edit your account or group (Settings -> All Settings -> Manage Accounts), scroll to the bottom and check under "Server & Application Monitor Settings" there is a "Allow nodes to…

Looking at this for our setup as well, did you ever find an answer?

Including a few extra fields so you can pick your like and delete the unneeded ones: SWQL: SELECT TOP 1000 HostName, SystemName, DomainRole, Manufacturer, Model, LastBoot, LastLoggedInUser, DeviceType FROM Orion.AssetInventory.ServerInformation SQL: SELECT TOP 1000 HostName, SystemName, DomainRole, Manufacturer, Model,…

Make sure you have a connector reading the logs. If you're seeing them in CMC then the logs are making it to SEM, but you need to have a connector normalizing the logs for SEM to be reading them and adding the node.

Neat. jhynds​ I'm seeing the same thing clicking those links. It seems like the re-direct there isn't working correctly. Not sure why you can't find it in a search, from support.solarwinds.com I just typed in "LEM admin guide" and it came up: LEM Administrator Guide

I think that this can be done in two alerts, but I'm not really able to test this right now so consider it a rough draft. Alert 1: Trigger Condition: Reset Condition: This will set it so the alert should fire when either node goes down, but not trigger again until both nodes are back up. That's my theory anyway. I'm a huge…

I don't know about the character limit or the format specifically, but we do use it to return formatted HTML so that it will display a table for some information in the message field. It's similar to this process: Write an Application Monitor Template With Advanced Display of Component data - Part 1

It looks like the updates may only be available via the Update Catalog directly: Missing Update KB4057144 from 2018-01-17 in SCCM More Windows patches point to escalating problems this month | Computerworld

Were you able to figure this out? Is that why it's set to "assumed answered"? If not, it looks like I would start with re-arranging how your statistics are reported. For example, it looks like your response is "Statistic: Registered" when really it should be a numeric. So you could do something like: write-host Statistic:…

Looks like it's referencing the Node Details page, so go directly to a node and on the left side you should see the tabs and once in the Interfaces tab see the list of interfaces.

Do you have asset inventory information available for the node? You should be able to tell some of this information from there. I will caveat that I don't see that as a directly retrievable status, so it may not specifically say if it's SSD or not, but you may be able to get what you need from other related information.…

Unless I'm missing something in your description, you would leave the correlation intact, but change the action. If you want to only detect unauthorized attachment and not detach the device, remove the detach action and add the e-mail action. If you want to modify the rule to detach, warn the user with a popup and send you…