kellytice ✭✭✭✭✭

I will concede that WHD is not intended to be a License Management solution that will automatically identify all software licenses that exist in your environment. However, in terms of what is actually possible regarding tracking software I can point you to two things in WHD that can address some aspects of that: 1. The…

I'm no expert on the archiveconfig command, but: After another backup occurs, does the size or timestamp of the file(s) change? The wording on the doc page for that seems to imply that the one file will grow (as opposed to multiple files being created). ---------------------------------------------- reference from here:…

To answer the last question above, typically the access you have to the CMC console is fairly limited; that is by design. SEM runs on a linux backend, but unless you are talking to tech support you will not have an account with root access. While auditors love that aspect of SEM, I can see how it could make it difficult if…

Curious if unchecking the "cascade" button has any impact

SEM 2024.2 introduced a new feature for License Recycling that may help you here: https://documentation.solarwinds.com/en/success_center/sem/content/admin_guide/recycle-licenses.htm My understanding is that it isn't trying to go remove the SEM agent from those devices - it is just recognizing that they haven't sent data in…

This is a slightly different variant, where I made 2 changes: * I limited this one to 7 days * In the "Filter and Property" section I chose Failed Logons as the filter (just like the previous one) but I also chose Destination Account for the "Properties (optional)" field.

Would something like this be what you are looking for? * Went to the Dashboards tab and clicked "Edit Dashboard", then clicked "Add Widget" * For the widget type I selected "*New Time Series Widget - Long Term*" and then clicked "customize" on the bottom right of the screen * In the resulting "Creating Widget" dialog, I*…

No it does not currently allow receipt of secure syslog on port 6514. There is a feature request for this that can be voted up: [mention:c2663e977edb4b3fbde2a50c1ced3599:fb5d84b10a5745448a7a45dafc1faa43] One potential solution that other people have utilized is setting up a Kiwi Syslog Server installation (which can…

This isn't a current feature of SEM. There's a Feature Request that can be voted up for it (if you're talking about receiving syslog): thwack.solarwinds.com/.../receive-an-alert-when-no-syslog-events-in-a-period-of-time

Is this for Security Event Manager (SEM) or for the SolarWinds Platform with modules (NPM/NCM/NTA/SAM/VMAN, etc...)? If it is for SEM, and you are on the current version, you can create a query on the "Historical Events & Reports" tab. In this example, I'm looking for UserLogon events where the UserName field references a…

I think it would not be easy to do this exactly how you may want to because SEM does not really have a way to say "If condition1 is currently true and then condition2 happens, then alert me". However, what is possible would be to create a rule that watches for multiple logins in a certain period of time - so this might get…

Apologies that nobody responded to you and it has been a while, but my understanding is that No it is not possible to rename those since the Detection IP is being pulled directly from the log event itself. So it isn't SEM generating that name - it is just using the data that is there. This is an existing Feature Request…

Rockin'! Shout out to your troubleshooting and the detailed notes in your original post, btw! It really helps when replying to threads when you can so nicely see what has been thought of and/or tried already. 'Tis appreciated

This appears to have been a known issue with 12.8.3 - I have seen some references to people with 12.8.3. HF2 reporting it. I believe this may have been fixed in 12.8.4.

@"bam0899" This might be why @pabely was asking that: 12.8.4 included a fix for a similar issue which some people reported in WHD 12.8.3 HF3. I believe it is the second Fix listed on the release notes: https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-4_release_notes.htm Please let…

I know you put this in a while ago - are you still experiencing this issue? It sounds like a communication issue between your WSUS client machines (server/workstation) to the WSUS server. Patch Manager can let you Publish 3rd party application packages and also let you Approve those 3rd party as well as Windows updates,…

hmm. It is true for just this one user? I ask because there is a setting in Setup -> Tickets -> Options that will let you choose how Clients can create tickets (Web Interface, or Email, or both of those, or neither). Figured there might be a chance that was toggled. When that setting is set like this (only E-Mail checked):…

Hi @"shocko" ! In Patch Manager when you build a package, you will define a Classification for that package. That might be "Critical Updates" or "Security Updates" or "Tools" or "Updates", etc... Next when you take that package and Publish it into WSUS, as far as WSUS is concerned that is just one more update that showed…

Hi Taylor, For .EXE files it isn't *too* much different, but one big one is that in most cases with an .EXE you'll be forced to specify a command line element to make the installer run silently. When it comes to the Not Applicable message when trying to deploy, there are a number of common things that may be at play there.…

Ah, excellent reply! I don't think I had heard of that, but that's pretty neat.

I don't have direct experience in using it to integrate with Jira, but WHD does have an API that can be used to create/read/update/delete records. https://documentation.solarwinds.com/archive/pdf/whd/whdapiguide.pdf so that might open up some options for you, but of course there would need to be some scripting done to read…

Unfortunately, I don't believe it is possible to include images in the footer of outgoing emails automatically.

The short answer is that it comes down to the method of deployment for that software. If it is an .EXE or .MSI that is executed on a Windows machine, and your workstations/servers are WSUS clients, then yes you can build a custom package in Patch Manager for that .EXE or .MSI, and then Publish that 3rd party package that…

Are you just wanting to know information on the schedules that are already defined? If so, there are some fields you can use to build a report in the Task History datasource. In this screenshot, I've gone to Reporting --> Task History Reports --> Task History, then I clicked "New Report" and removed most of the default…

If it was done through Patch Manager - and the Task History event for that change hasn't been cleared - you can run a report or filter the task history to find it. In this case, I went and Declined a NotePad++ update that I had published (but it shouldn't be shown any differently for regular Windows updates); you can see…

This should be possible if you go into Patch Manager System Configuration --> User Preferences tab --> double-click the user to bring up the "Preferences Settings" dialog --> click on the WSUS Servers tab. Then you should be able to select which specific WSUS servers that user can see in the Patch Manager console.

Are they logging in based on an Active Directory/LDAP connection (meaning they log in with their AD credentials)? If so I'm pretty sure that won't work - it does not reset AD passwords. The password reset option there would only be useful if they are logging in with a username/password defined directly within the WHD…

Copying a ticket isn't currently an option. Sounds like a great feature request, though!

Sounds right. It's just a method to facilitate publishing 3rd party updates into SCCM, so that you could then deploy them from SCCM like you do Windows updates. There are a couple of other minor 'hooks' into SCCM that let you, for example, pull info from the SCCM Client and display it, or to schedule specific SCCM Client…

Hi @rjpunsalang Are you following this doc?: support.solarwinds.com/.../Integrate-Juniper-Firewalls-with-SolarWinds-LEM and using the Juniper/NetScreen5 connector? If the issue is that you have followed that article and are not seeing the node appear in SEM, the next question we will need to answer is if the SEM is even…