m-milligan ✭✭✭✭✭

Can you post a screenshot of the application monitor template? In the trigger actions for your alert, edit the "Message" portion of the "Send an Email/Page" action. To include a list of application components that are down, warning, or critical, add the ${N=SwisEntity;M=ApplicationAlert.ComponentsWithProblemsFormatted}…

Add this clause to your WHERE clauses to get alerts that have been active for no more than 5 minutes: AND (MINUTEDIFF(o.AlertActive.TriggeredDateTime, GETUTCDATE()) <= 5) Add this clause to your WHERE clauses to get alerts that have been active for more than 5 minutes: AND (MINUTEDIFF(o.AlertActive.TriggeredDateTime,…

We just noticed this with the "Nodes with Problems" resource. We haven't found a fix yet.

Does your script expect any input or produce any output? If so, add the -noninteractive argument.

We had a similar problem after installing some new software to troubleshoot an unrelated problem on our Solarwinds server. Reinstalling the VC++ 2013 Redistributable x86 and x64 packages, Solarwinds seems to be stable again.

This SWQL query* will get you a list of all nodes that are currently unmanaged, the unmanage start time, when the node will be re-managed, the most recent occasion when someone unmanaged the node, and the account ID of the user who did it: Select N.Caption, N.UnManageFrom, N.UnManageUntil, LastUnmanageEvent.TimeLoggedUtc,…

I just had this problem. Rebooting my main Solarwinds server fixed the problem.

You can do this by creating an alert on Auditing Events that uses a custom SWQL query, like this: The query text in the white box is: INNER JOIN Orion.Nodes AS Nodes on AuditingEvents.NetObjectID = Nodes.NodeID WHERE AuditingEvents.NetObjectType = 'N' AND AuditingEvents.ActionTypeID = 102 AND…

Similar to the solution suggested by nks7892​, I just did this for a customer. In our case, the customer has their own Additional Polling Engine (polling engine ID is 12), and the discovery job runs on that polling engine. I created an alert with these trigger conditions: The alert has several trigger actions to set custom…

You can apply multiple templates to a server, so you can (for example) apply both the template for IIS and the template for Shift4.

This query will pull the information you need for your report only information about nodes that are ​not​ ESX hosts: select N.Caption as [Node], Count(N.AssetInventory.Processor.Name) as [Total CPU Sockets], Sum(N.AssetInventory.Processor.NumberOfCores) as [Total CPU Cores], Max(N.AssetInventory.Processor.Manufacturer) as…

I have a case open with Solarwinds for this issue. This morning I heard that it appears to be a bug in Solarwinds and a fix will be made available. ETA: I got a buddy drop today (13 December 2018) that fixed the problem.

We've had the same problem since we applied the last round of Solarwinds upgrades. I'll be interested to see if a fix is provided.

You can't create space-based thresholds on individual volumes, but you could create a custom Volume alert that looks at Orion.Volumes.VolumeSpaceAvailable, like this: Bear in mind that (1) you need to specify available space in bytes, and (2) You need to include only fixe disks or network disks, not memory, CDs, etc..

Try duplicating the alert definition and saving it as a new alert definition. I did this and found that the SQL macros in the new alert (the duplicate) execute correctly. Don't try simulating the alert - the error still shows up there. It should be correct when the alert runs, though. Please let me know if this works for…

2. Can I only populate the Map with nodes that are members of a specific group? You can't do this using the GUI, but I wrote a script to do something similar. In my case, I created a group called "World Map" and then I created a sub-group inside "World Map" to represent each building in my organization. Each sub-group has…

Are you running the Solarwinds services under a named Windows user account or as the Local System account? If you're running the services under a Windows user account, log in as that user and try to run your script from the PowerShell ISE. You may find that the named account is missing some permissions it needs to run the…

Do you just want a count of how many apps are up/down/unknown per poller, or do you need a list of the apps that are down/unknown per poller?

I don't have an answer for you. However, I tested ARRAYVALUEAT() with several queries and it does not work for me, either. Perhaps tdanner​ can weigh in? I tested ARRAYVALUEAT() with arrays that I got using SPLITSTRINGTOARRAY(), like this: SELECT TOP 1 Caption, ARRAYVALUEAT(SPLITSTRINGTOARRAY('Hello|§|§|World'), 0) as…

Unmanage/remanage a node already have auditing action types: ActionType IDAction TypeAction Type Display Name26Orion.NodeManagedNode managed27Orion.NodeUnmanagedNode unmanaged Mute/unmute are part of Alert Suppression, and they also have auditing action types: ActionType IDAction TypeAction Type Display…

I have Powershell script monitors that report that age of the newest backup file. Will that help?

You can also use the macro ${IP} to get the node's IP address into the script.

I was a DBA in a previous life, and I still occasionally cosplay one at work. You most definitely should have been warned that the TRUNCATE command would wipe out all the data in those two tables, and you should have been instructed to back up those two tables (and the whole database) before executing the command. What…

Same here. Users are shying away from using the agent because of this.

We have the same problem. The affected component monitors also throw this error occasionally: Exception message: A call to SSPI failed, see inner exception. The message or signature supplied for verification has been altered System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception.…

Could you clarify please - do you mean there are several virtual servers hosted on one physical server (say, several web servers)? Or do you mean there are several services or processes running on one host, and you would like to monitor each service or processes?

The first question is: do you want to keep the existing node? If you don't need to keep the existing node, you can delete it: * Go to the Admin page for your site (/Orion/Admin). * Click "Manage Nodes" * Search for the node. * In the list of nodes that appears, click the check box net to the node name. * Click the "Delete"…

This SWQL query will get you events that happened within the last 24 hours: SELECT tolocal(EventTime) as [EventTime], C.Nodes.Caption, Message FROM Orion.Events C Where EventTime >= ADDHOUR(-24,EventTime) AND EventType = 14 OR EventType = 5000 OR EventType = 5001 Order by EventTime desc

I was able to manually change the polling method using SWQL Studio. Here's what I did: * Find the URI of the ESX host you want to change using this SWQL query: select URI from Orion.VIM.Hosts where HostName = '<the name of the ESX host>' * In the Object Explorer, find Orion.VIM.Hosts. * Right-click on Orion.VIM.Hosts and…

After a lot of tweaking and testing, it looks like there were a couple of groups (groups including nodes, VMs, and sub-groups) that were breaking the display. When I removed those groups, the VMs started appearing for the end user. Any ideas why this might have happened? Thanks.