jrouviere ✭✭✭✭✭

Hello Richard! I think there's a little back and forth with what's available where since introducing the Success Center last year. I found a related article there: NTA received a packet indicating that NetFlow data export on device x.x.x.x is not enabled. If you cannot see NetFlow da… And I'm also engaging some internal…

You can use various Macros in templates, we use some of these: Best practices for SAM templates There used to be a more complete list, but I can't find it at the moment. If there's something specific you're trying to do that you don't see on the list let us know.

Try "Status or Error Description": ${N=SwisEntity;M=ComponentAlert.StatusOrErrorDescription}

This little query should work for you: SELECT A.Name, A.Node.CustomProperties.Location, count(A.Components.ComponentID) as Components FROM Orion.APM.Application A group by A.Name, A.Node.CustomProperties.Location order by A.Name If you want to filter it to only the Azure nodes you can just add the Where clause after the…

It looks like that namespace might need some additional configuration: windows - Which permissions/rights does a user need to run "Get-WmiObject win32_service" on a remote machine? - Server F… Remote query -Class Win32_Service does not show all services when executed by normal domain user

There are a few different widgets that get you this information, but for nodes you can usually click on edit on the top right of the widget itself and set the grouping settings there. Likely it is just Vendor and then Status for your view. You can change it to location first or any other property/custom property that is…

Hello John, You'll want to review these guides: Orion Platform Migration Guide Migrate SolarWinds Orion products to a new server with a new IP or hostname There's no mechanism really to promote an APE to a primary server, so the second guide specifically takes you through doing the install, truncating necessary tables and…

This is the logic that I set up and seems to work for me: I had 8 nodes that would have triggered the alert immediately and none of them were down or anything, all were up.

It took me a while playing around with it myself before I finally asked someone who knew and it looks like this code should work for your alerts to get the port number from the monitor: ${N=SWQL;M=SELECT ComponentPortNumber FROM Orion.APM.CurrentStatistics WHERE ComponentID = '${N=SwisEntity;M=ComponentID}'}

To add a little bit to Midnight's answer: LEM is more of a listener, not a poller. If you want data to stop flowing into the LEM, you will typically need to control that from the node side. For a syslog device that means changing the trap levels to control how much data, or disabling syslogging to stop the flow of data…

You have multiple questions here, so I'm going to break them out: I think there have been reported quirks with this in the past, but currently doing a search with my LEM I'm able to search for a $ as a litteral character. So if I search *<machine name>$* it returns only the expected machine names (note this is a default MS…

Firstly, this is a WSUS problem specifically so you're likely to find better answers in Technet and from those forums. We do have this KB article that shows WSUS error codes (not all, and not always provides resolution, but can provide some additional information): Error codes and patches for WSUS servers - SolarWinds…

It's still fairly dependent on your environment and which option you view as better: An Automation Server would be easier overall in my opinion, but would still require the WMI ports open to each node. If that's not a concern then I might go that route and the only port you would need to open is 4092 between the AS and PAS…

You should be able to add the pollers during the discovery process (one of the tabs you will be brought to unless it's only when you use Add Node) if I remember correctly or add them via UnDP like you did before. If you'd like to report on them, this SWQL query would return the caption of all of the nodes with ANY UnDPs…

Haven't tried concatenate for that myself, but I use a different format that I've seen used here and it usually works, an example: ' <a href="' + '/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:' + CAST(ahv.AlertObjectID AS varchar(256)) + '" style="font-size:100%">' + ahv.Name + '</a>' AS 'AlertName', Credit for…

Hello Spotter, Two different things: Unable to retrieve the computer group by ID for enumeration - SolarWinds Worldwide, LLC. Help and Support Long story short the error you're seeing is likely due to a caching issue from the Patch Manager side and should be pretty easy to clear up. As for the License Count: License count…

nDepth is usually only going to return about a week or two of data before timing out. You can use the Database Maintenance Report to check the database retention number in days, then run a search (or a report) for the tail end of that time frame to confirm the data. Use the LEM Database Maintenance Report to See Retention…

Should be pretty easy, this would cover the basics, but let me know if you have any other questions: Success Center

Needs more information. Two things I would check: * From the Orion server (main or additional poller if that's where you've got your node), use powershell and use "Test-NetConnection <hostname> -Port <Port>". If this doesn't work I would look at what could be blocking it (firewall, A/V, etc). * You can turn on application…

It looks like you can report on Bitlocker from Registry settings, so for the Patch Manager piece you'll want to set up an Inventory template using the Registry keys: Collect file, folder, or Registry information - SolarWinds Worldwide, LLC. Help and Support To help you get started with WHICH registry keys, I found the…

I seem to recall seeing this requested as a feature request previously, but can't find it. One thing that I have seen to work around for this is that you can add a field to a copy of the report so that it's filterable to one computer. I don't mean creating a report for a specific machine, but instead of filtering the…

Crystal can become sticky when uninstalled and take some special handling (clearing out the leftover files or folders). There are two ways I would approach this: * You can download the Crystal Runtime stand alone installer and run it as admin to install:…

It looks like SAM isn't getting the response it is expecting, which is why the failure. Instead of returning "403" it should return something like "Statistic.Status: 403" SAM Script Component Monitors - Everything you need to know

It would be helpful to have the query you're using, but one thing I'm guessing at (and have used myself) from your proposed logic is: All conditions (AND) Client is equal to: ABC AND ( priority is equal to: P2 OR priority is equal to: P3 ) Basically you want your OR logic to be contained in parentheses. The logic you…

Hello Alan, I don't see any immediate issues that jump out to me. I wanted to make sure that you've reviewed a previous post where this exact situation was discussed as well: https://thwack.solarwinds.com/message/262576 Your steps appear pretty solid, so you may have reviewed it already, but one thing that was suggested in…

In my opinion this is a minor update needed to the action instructions as the NCM action isn't clear on the variable to be used. 1) Make sure that your action is returning notes. You can check this by clicking on the Alert once it's fired and checking the "History of this alert on this object" resource which will show the…

I don't have a direct fix for you, but this looks to be a WMI issue. Invalid Namespace is a pretty good one when it can't find what you're looking for. The format appears as \\<IP>\root\<etc...> which looks like the namespace path. Are you running a discovery and trying to add SQL templates (or AppInsight for SQL) and…

There's no action in LEM that I can see that will re-create or create a folder. Is it not possible to add a switch or other parameter to have the client machines create the folder if it's not present before copying?

The active response takes place after you're getting the event data. If you're getting the data for attach/detach you should theoretically get data for the file transfers as well. Are you search for specific events (such as File Audit) or just all events from the USB Defender tool alias? I can't recall that I've checked…

I believe this should cover you, you'll want to double-check the settings, namely the database entry pictured: HTTPS prefix in URL variables for alerts and reports are not populating - SolarWinds Worldwide, LLC. Help and Support