jrouviere ✭✭✭✭✭

Great zinger, but in all fairness not everyone in support has seen every setting and issue. If your incident is still open you can let them know what the solution was and if there isn't already a KB article for it (which seems the case) then hopefully they will create it for next time. I've known them to share solutions…

Starting to sound like the subscriptions issue to me more. Try to move it between APEs if you can as this is the least invasive fix I've found. If it's a new monitor and you're not worried about history, delete and re-create the monitor. This may be affecting more than just this one monitor depending on the issue, so you…

In addition to this you could limit the view itself via View Limitations so they'll only see nodes/alerts/etc relating to their silo: Success Center

Short answer is that you will want to make sure that you're running at least LEM 6.3.1 and reach out to support. I worked on validating earltronics assertion that the password may have something to do with it. It looks like a double quote (") does generate an error. It's a different error, however, than what raingeek…

This is pretty close to what we use for the same, then we just break it out by Agent/WMI or SNMP for various alerts (different teams, etc).

I would wager these are the polling intervals you will want to take a look at: Collection issues due to intervals in VMan - SolarWinds Worldwide, LLC. Help and Support Not exactly the same use case, but likely relates to what you're seeing. Additionally, on the Orion console if you edit the properties for the VM Host/Guest…

This article has the answers you're looking for: Configure MSSQL Auditor on a LEM Agent - SolarWinds Worldwide, LLC. Help and Support Specifically: * SolarWinds recommends using a domain-based account that has sysadmin privileges on the database, although the account only needs to have Execute permissions for any stored…

Keep in mind this is a Release Candidate, so everything is subject to change until General Availability: The Falcon (online) installer only supports local NTA install (which is not recommended/best practice). You will want to continue to use the "Orion Netflow Traffic Analyzer (NTA) for Offline Installation" installer if…

I would definitely check both, but if there's correlation it could be a cause. Do you see anything in the logs (specifically core business layer, business layer host) on the poller? Are there any windows event logs like a service is crashing when the spike happens? It's only a theory, but as many of the services are 32…

For the data label it's in Orion.NPM.CustomPollerLabels for SWQL. Otherwise if you're looking for just the poller name it's UniqueName in Orion.NPM.CustomPoller.

Additionally, this is what's used in the template rule for the same:

Not even sure I know enough powershell at the moment without researching it to see how I'd attempt the same thing, I'm also "just OK" at regex, but take a look and if you have your own ideas maybe we'll all learn something.

I don't know if this will list all of those same IP addresses, or only the ones that are being monitored, but I took the above query and slightly modified it: SELECT IPAddresses.[IPAddress], Nodes.[Caption], Nodes.[Description] FROM [dbo].[NodesData] as Nodes INNER JOIN [dbo].[NodeIPAddresses] as IPAddresses on…

Hello Mark, You shouldn't need to replace anything on the local machine, both the 32 bit and 64 bit cscript should be there, they are just in different folders as noted in my post above. I'm using ActiveState Python 3.6 in our environment successfully to monitor and run various scripts, namely for some storage monitoring…

Good point. I don't always think about it when troubleshooting the LEM, but it's worth leaving this here as well: LEM Console Takes a Long Time to Log in Using Internet Explorer 11 - SolarWinds Worldwide, LLC. Help and Support

LOL teach me to reply before refreshing the page...

Touche. I use that example every class and somehow didn't come to mind this time. *downloads more Java*

If your diskusage looks anything like the OP then you've most likely got a rule configuration issue. Especially if the Rules Queue or Epic Rules Queue is maxed out like the OP then you have a few things: * If you remember the last rule(s) you worked on disable it. * If you don't, you can check for InternalRuleFired or…

Just need to update the Where part of the clause to: WHERE Disabled = False and c.StatusDescription in ('Warning','Critical') The reason it limits per node is that there can be quite a few components and everything depending on what you're monitoring, my case was to put it on a dashboard which has an upper limit to what it…

If I'm understanding you correctly, this macro should include the syslog message in the alert body for you: ${N=OLM.AlertingMacros;M=OLMAlertMessage.EventMessage}

Sorry to reply to an older post, but I wanted to try to preserve this for posterity. We were getting the same error, but not the same cause. All of this information is valid and good, but I wanted to add on what our cause was: I generated some data to use all of our directly connected subnets which included /32s. It…

Could be related as it states that your Polling Engine is Down, so here's a KB that you may want to check, starting with Services: Additional Polling Engine is down or is not polling - SolarWinds Worldwide, LLC. Help and Support Additionally I just noticed that your screenshot shows it's the Primary poller, not an…

You may want to test if it's the same issue (regression) and likely open a case up with Support to help investigate.

This is correct. SAM can tell you when a file of a certain size was created, but not who. So you could likely use the two tools in conjunction if you have them both and set it up to do so.

Which log did you find that error in? There's an exact match, but that appears to be for SAM: The Communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communication because it is in… One that appears to be related and more for NPM: Error: The communication object cannot be used for…

I tried pawelk's suggestion and I'm getting an error: Parameters: netObjectId (this is typo'd in the tool as netObjetId): AA:246 unmanageTime: 2019-01-18 14:45:16.681472 remanageTime: 2019-01-19 14:36:16.681472 isRelative: False - <Fault xmlns="http://www.w3.org/2003/05/soap-envelope">- <Code><Value>Sender</Value></Code>-…

This is likely going to be the right answer. Additionally it looks like the ctech291 's screenshot is testing during application assignment, if you edit the application template and test from there it will likely tell you additional information, such as if the statistics don't match the expected outputs or "Get output…

Unmatched Data is pretty much going to be the same procedure every time it's encountered and regardless of vendor, etc. Firstly, make sure you have the latest connectors applied. If that doesn't resolve the issue, get an export of the logs and reach out to Support. See the above article for the specifics.

Not sure about others, but I get an unauthorized message.

Great call. I had looked right passed this and didn't read some of the details enough prior to running the upgrade. I guess the main challenge for the OP is that it doesn't seem to let you do it on a per node basis.