jrouviere ✭✭✭✭✭

When you check the InternalRuleFired filter and don't see anything there it usually means that you are queuing data. Doubly so if restarting the service/appliance resolved the issue (and triply so if it comes back after). There are a variety of articles you could review for this, but many of them refer to stuff you appear…

That makes sense and I agree that functionality would be awesome, but I'm not of a way to do that currently so you may need to post that as a feature request or take it up with Support directly. If it's any consolation the primary things that I can think of which would cause the service stop task to fail would affect the…

It's been a little while since I've been this deep with this process, but what I would do is clean up the primary, synchronize everything (upstream and downstream servers) or wait for them to do it on their schedule, then check your downstream servers. I believe the downstream servers should clean up themselves during the…

Yes, you can set up the Reports Console to run tasks even when a users is not signed in. If that's not working you'll want to double check the settings. One thing that you may want to verify is that when you're running Reports as admin you can see the intended settings. At times when you're running an application as admin…

Hello zdavid, your case is covered on Case 1 in the KB article that Kelly linked to: https://support.solarwinds.com/Success_Center/Patch_Manager/Message%3A_Failed_to_publish_packageName._Publishing_operati… There are two "flavors" of API mismatch. The body of his message breaks down your options for Major version mismatch…

I think the original post only has half of the NTA message, so I have two articles you may want to review: This one takes you back to the NetFlow Management settings under NTA settings: Enable flow monitoring from unmanaged interfaces - SolarWinds Worldwide, LLC. Help and Support This one requires manual input to add the…

Not necessarily. My suggestion is based off of my experience of when this issue typically comes up and typically involved using the scheduled updates, my bad assumption in this case. Really at that point if you're not using Patch Manager to deploy the updates, then it's a Microsoft WSUS topic entirely: How do you work…

The connector is specifically paired with the Profiler template to make sure the correct data is pulled. If you restore the default template are you able to get logs? The two primary things I would check in your case is: * Make sure you're using the default template. If you add/remove some events to the template it can…

On the Node Details page, on the Node Details widget under Description.

Correct. With LEM the hardest part of the upgrade is getting to the files (no joke). After that, the upgrade is scripted and will run on its own. Standard caveats apply: backups, snapshots, etc. Usually if there's a problem during the upgrade process there was something wrong with the LEM already. Additionally 6.3.1 has…

Also think that LA is crazy high for what you get, but depending on your cases, Kiwi is ~$500 and we push everything there first and only forward what's alert-able to Orion for alerting/reporting.

I was thinking about this, too. I have 960 nodes with at least one component assigned. Of those, 684 have 10 or less components. 494 have 1 component. My top 34 servers have 70 or more components, total of 4248 components. Maybe for those 34 servers I'm making out like a bandit, but for the bottom 500? Where most of my…

The bottom of the "Send SNMP Trap notifications from LEM" article has a MIB file attached.

It doesn't sound like you are using nDepth (the RAW database) then. Not to be confused with nDepth, the graphical search tool. If you are having performance issues than likely it's a reservations or rule configuration issue. I would run the reports suggested in the performance article and check vs your reservations.…

Raw logging does have a large impact on required resources so that could definitely be part of it. If you don't need it, I would suggest turning it off. You will also want to review articles such as this one for performance checks: LEM performance checks - SolarWinds Worldwide, LLC. Help and Support I would start with…

Pretty much. It wouldn't be bad to put in a feature request, but otherwise what you're asking about is not currently possible in my experience.

I think the easiest thing is going to be to copy over the raw SQL. I don't guarantee that it will always work, but without getting into the nuts and bolts of it, that is your best bet. Here are two articles that talk about it very briefly and I'll provide some additional detail below: Step 1 - Open your report in the Orion…

Theoretically something you may run into, but nothing that I've seen (at least no deliberate attacks targeting the LEM). Ultimately there isn't a way for the LEM to limit the logs that it's receiving. There's no threshold to set or rule to enable to shut down the agent service after so many events, etc. You could…

Not sure if you're still having the issue as this is an older post, but to close the loop on it at least: Make sure you're selecting the Add Display Settings drop down and selecting Data Unit. If you're still not seeing it make sure you're using Current Numeric Value instead of Current Value. It's the difference between it…

Looks like it might not be available for the "free" or unlicensed version. I just checked my QA instance that doesn't have a LA license and I see your screenshot, but my licensed production instance has three additional buttons to the left that include Export. Both of my instances are LA 2.1. In a pinch you can get the…

Exit codes determine if the monitor is up or down. Exit 0 is up and will count the statistics, Exit 1 is down, period. If you want to return alternative statistics you should still do exit 0 and then return various counts/statistics and then you can make it warning/critical based on thresholds. I believe there's more in…

Nice, thanks for sharing. I had played around with the logic some, but not thought to force the decimal conversion, good work!

Makes sense. Most of my bookmarks are junk now. I'm holding out hope that this is transitory and they're able to get more of the content lined up. Thanks for the link!

I believe so. You may also be able to reboot the server if it has the agent installed for this instance of Orion and via an alert.

You seem to be describing a long term notification, so if I'm understanding you correctly, as an example: User locks themselves out for 3 bad attempts, they wait 30 minutes for the account to unlock, do it again two more times for a total of 9 failures over 1.5 hours or so. This is the situation you would like LEM to alert…

* Cool, no worries then. Best practice is to make sure that your Reports Console and LEM versions match. * I left this vague depending on what your processes are. Since we're on Thwack, Patch Manager was the first thing that came to mind, but if you have SCCM or another tool that can pull the inventory you can check for…

The UDLP list and the Approved USB Devices (or equivalent group) are both white list groups. It's easiest to think of it as a two gate or man trap style setup. The device MUST be in the UDLP white list otherwise it is blocked. If it is in the UDLP white list and not in the Approved USB Devices group then it is blocked. If…

I don't have anything that I feel like I can directly test with at the moment, but I came up with this which you might be able to make work for you. I'm pretty sure on everything except for the EntityCaption line 3rd from the bottom: SELECT Nodes.Uri, Nodes.DisplayName From Orion.Nodes as Nodes INNER JOIN Orion.Syslog As S…

With a 2016 Patch Manager Server and a 2012 WSUS server you will need to have an automation server in place: API Mismatch error in Patch Manager - SolarWinds Worldwide, LLC. Help and Support This will be necessary for interactions with the WSUS server due to the API mismatch and you will usually run into it as you have…

Jeremy definitely has a solution that some customers use in this regard. There's a lot to be said about using the correct tool for the job. For completeness, here's some information and suggestions for Patch Manager: Firstly, make sure you're synchronizing all of the available updates: Add Adobe Acrobat Reader DC Packages…