jrouviere ✭✭✭✭✭

The myriad of approaches you can take depends on the environment, the tool you're using and the data. I've had this conversation with customers about patching levels and other things as well, so here's a high level of some of the things I would check and I'll try to throw in a few examples: 1) Make sure everything's set up…

There are definitely multiple variables. {$Notes} might go to the Node Notes that mesverrum is suggesting, but Alerting Notes should definitely be populating those Alert Notes: NCM Action to event ? The other table appears to be just Orion.NodeNotes.

Hello Bullwinkle, You are correct. The catalogs themselves come from the two URLs that you mentioned, but each software package in the catalog is listed with either a Direct Download URL (which will reach out to the vendor's site) or require upload (such as with Adobe, Java, Apple, etc). You would either need to allow…

May be some issues you want to look at with the DMZ machines, this article has some suggestions, but the WMI connectivity shouldn't really be at play directly if you're using the agent: Systems do not reboot after an update is published to multiple system - SolarWinds Worldwide, LLC. Help and Support There is a separate…

You're going to want to start with one machine to troubleshoot as it's likely the same cause, or a small few. I would start with checking: * The LEM license is active and has additional nodes (you aren't maxed out). * The nodes have port connectivity to the LEM. * The nodes have the correct IP/Hostname configuration for…

So the gist of it is that you'd review the interface and check the top endpoints and top conversations for the data: Find the cause of high bandwidth utilization in SolarWinds NTA You can use built in alerts for High Receive/Transmit Percent Utilization with Top Talkers to help you narrow it down faster. IPAM alone won't…

I usually use something like WinDirStat so that you can drill into the storage. If you wanted to spot check some places: SQL Server Express the database instance would be limited to 10 GB. Logs, SQL logs, etc. Logs for Orion are located at C:\Program Data\SolarWinds\Logs (Program Data is a hidden folder). Or it could be…

Which view is this from? Do you have any error messages that you're seeing? If this is from the All Computers view under your WSUS server (or another computer group) then this is the contact date from the client machine talking to the WSUS server. If you haven't seen an error message so far, you may want to identify one of…

It sounds like you want to set up a custom reset condition. Instead of resetting the critical alert once the condition is no longer true, set a special reset condition (bottom option) that is below the warning threshold. For example, if Warning is 75, critical is 90, make your reset condition 70 or below.

"Object reference not set to an instance of an object." is a classic non descript error relating to the database. What have you done so far? Restart server/services, etc? If it's just something simple like that would be nice, otherwise I would try to find which specific part of the script is failing, which database call by…

Forgive me if this is a simple answer on a missed detail, I'll blame late Friday, but I'm sure it's on me. Can you not add a second probe from Netpath? This screenshot shows I have two pollers (one is my primary and one is my APE) going to the same destination. If you click the plus you should be able to add additional…

Hello Steveg, I'd be curious about more of the details you're running into so that I could maybe help understand what's going on in your specific situation. It sounds like you've reached out to Support for this before, otherwise I would do the standard suggestion to have them take a look at your specific situation. A…

Hello Keith, While the LEM is a linux based server, it's a sealed appliance from your side so you wouldn't be able to use the LEM to set this up. If you haven't seen it already, it looks like this is what they want you to set up: https://wiki.ubuntu.com/Kernel/Netconsole It looks like you might be able to send the messages…

You'll want to review the instructions in the NTA Administrator's Guide for documentation: NTA 4.2.3 Administrator Guide - SolarWinds Worldwide, LLC. Help and Support In order to install the Additional Web Server on the NTA Database you will need to install the NPM Additional Web Server first, then run the NTA installer…

What is the reset condition on this alert? Memory is telling me that it might default to Reset automatically after 60 minutes, but you likely want to set it to "No reset condition - Trigger this alert each time the trigger condition is met".

The information you're going to need to diagnose and work with this issue is going to be in the packages themselves (keep in mind these packages are from HP directly and not created by SolarWinds). The rules in the packages for driver updates and most of the updates in the HP Business packages you're referring to contain…

This is the LEM Install Guide that should help answer your questions: Log & Event Manager Installation Guide - SolarWinds Worldwide, LLC. Help and Support In your case, the bottom two sections should answer your specific questions: Install LEM Agents to protect servers, domain controllers, and workstations Provides LEM…

If you haven't done so already, you may want to contact Support. I have a few ideas on this one, but would need to see some things to verify. For example, it sounds like your group for Chrome has users and not computers in it which may be part of the problem. There may be another way to do this and I bet Support would have…

Wish I had seen this earlier. We've been having the same issue and after getting Microsoft and SolarWinds Support on the line we were eventually told to vote on a feature request: https://thwack.solarwinds.com/ideas/3574 Checking through our hourly reports it looks like they had the issue at 12:16 AM EST on Wednesday…

In my training lab I had a 2012 R2 Patch Manager server communicating with WSUS 2016. As frgpugs mentions the main thing you will need is an automation server. Also, 2016 did need a little help with the publishing certificate: How to create a self-signed WSUS certificate when the Server Publishing Setup Wizard fails -…

There's no real way for the LEM to limit logs in a setting like this. The best you could hope for would be eliminating all logon failures from view on the LEM and that's not really something most want to entertain. You'll want to check into what is causing this from the Cisco side. Additionally, while this particular event…

Here's a general video for creating rules: Creating Rules for Real-time Correlation and Response with SolarWinds Log & Event Manager - Video - SolarWinds Worldwide… And a link to the video page for LEM from the Success Center: Free SolarWinds Training Videos - LEM - SolarWinds Worldwide, LLC. Help and Support If you have…

Hello arh95, I don't have anything solid to offer as this isn't something that I've seen myself, but here's some thoughts and suggestions that may help resolve the issue: * The data is certainly originating from your worstation, you just haven't seen it. * If you've narrowed it down to a specific workstation I would…

I'm not sure if there's an easier way to do it, but I just created a custom SWQL variable to return what you're after: Statistics1: ${N=SWQL;M=SELECT c.MultipleStatisticData.NumericData FROM Orion.APM.Component c where componentid = (${N=SwisEntity;M=ComponentAlert.ComponentID}) and c.MultipleStatisticData.Name like…

Sure, plenty of times. If you want to check the machines directly (in case someone installed it on their own) you'll want to be sure that you have a Managed Computers Inventory task set up so that you can collect the data to report on: Generate a managed systems inventory From there if you go to Administration and…

You can create a package to install it via WSUS like a Third Party Update, this article has a pretty good spread for the various deployment options: Deploy agents - SolarWinds Worldwide, LLC. Help and Support The providers should already have a package created for it in the SolarWinds catalog and will automatically deploy…

Not having a similar use case, but I figured I'd try out the thought experiment: If 1 leg to the AP goes down, wouldn't the AP status still be up? So the out of the box alert really should still cover all three legs are down, the AP is down and trigger the alert, correct? Or is there some other break in connectivity there?…

I have been playing around with this a bit for the last two days and it looks like there are two versions of cscript. If I run cscript from path or from system32 I was having your issue, even though I'm using 32 bit Python as well. Finally found that there's a 64 bit version in .\syswow64 so when using that it started…

You can follow the steps in this article to automatically synchronize new updates: Configure synchronization settings and populate catalogs - SolarWinds Worldwide, LLC. Help and Support There is a mechanism for automatically downloading them as well, but you generally want to be cautious with that. If you have anything…

I believe the report you're looking for is the Windows Update Agent History report. You can find it under Reporting -> WSUS Reports -> Windows Update. From what I've seen, WSUS itself doesn't keep track of what installed when (versus it does keep track of when it arrived on the server, when it was approved, etc). However,…