m-milligan ✭✭✭✭✭

Solarwinds just reorganized its KB into the "Success Center" and re-wrote all of the article URLs. Do you happen to know the new URL for this article? I've searched and can't find it. Many thanks.

OK, try this: Group status bar gauges

Hmm. I created a new component alert that uses this macro to get the Url: ${N=SWQL;M=SELECT Value from Orion.APM.ComponentSetting where ComponentID=${N=SwisEntity;M=ComponentID} and Key='Url'} I set the alert message to: The URL is ${N=SWQL;M=SELECT Value from Orion.APM.ComponentSetting where…

I've noticed that Solarwinds deletes the volumes if you switch from the agent to another method, or if you switch to the agent from another method. I've never seen it delete assigned apps, though.

The poller has to run for a while to collect data. Until it's had time to do that, you won't see anything.

(1) You would specify the hostname in the "Script Arguments" field. The script will build a URL from the host name. If you want to test the certificate at "https://myserver.mycompany.com/", you'd put myserver.mycompany.com in the Script Arguments field. (2) I would just assign the template for each URL you want to test, so…

That's interesting. I ran the query against each of my DataCenters, and I did NOT see any duplication. Do you have any storage that's shared between DataCenters? Do you use a naming convention that causes DataStores to have the same name even though they're in different DataCenters? Try this query in SWQL Studio. Replace…

Glad it's working!

I didn't address SuppressFrom in my query because the OP was only concerned about the combination of (Node is down) and (someone took action). The way the query is written, it would trigger even if the SuppressFrom date is in the future. It could certainly be rewritten to make sure the SuppressFrom date is within a few…

How often does your alert definition check for new alerts? Say your alert definition runs every 5 minutes. You could limit it to only events that happened in, say, the last 5 minutes. Add this to the WHERE clause: AND MINUTEDIFF(AuditingEvents.TimeLoggedUtc,GETUTCDATE()) < 5

I had a clause in the query that apparently doesn't play nicely with custom query resources. I've corrected my query. Use this: SELECT ID, EntityUri, SuppressFrom, SuppressUntil FROM Orion.AlertSuppression Supp where Supp.EntityUri like '%NodeID%' and Supp.EntityUri not like '%NodeID%/%'

Sure. Let's say you want to show any nodes with apps that aren't up or unmanaged, grouped by poller, listed by node IP. Here's your query builder: And here's your custom table report setup: (Those columns are Nodes.Polling Engine.DisplayName, Application.Status, Nodes.IP) Finally, here's the report:

Good question. As far as I know, it does run properly, but I will check again.

Did REPLACE ever get added to SWQL? It doesn't work for me.

dbo.[NodeSettings] is the table that holds miscellaneous information related to the configuration of a node. This includes things like which template should be used when displaying node details, the node's polling frequency, the SSH port to use with this node, etc. The query posted by danabrash​ will add a setting to this…

I had a large number of Cisco devices that needed hardware sensors enabled, so I did a bulk insert: INSERT INTO dbo.[NodeSettings] (NodeID, SettingName, SettingValue) ( SELECT NodeID, 'NeedsInventory','HWH' FROM NodesData where Vendor like '%Cisco%' and ObjectSubType='SNMP' and NodeID not in ( select NodeID from…

Thanks!

Yes, in my example, "Alerting" is a True/False property (represented in the database as 0/1, and in the GUI as Yes/No). I did end up writing a trigger query that looks at the AuditEvents table and the ContainerCustomProperties table: SELECT AuditingEvents.AuditEventMessage, AuditingEvents.AuditEventID FROM AuditingEvents…

No change for us - we upgraded to the newest versions of all apps and hotfixes in August, but the problem is still there.

Ah, I forgot that CPU, etc for ESX hosts is in Orion.VIM.Hosts, not Orion.Nodes. Try this: SELECT [Node], [Total CPU Sockets], [Total CPU Cores], [CPU Vendor], [CPU Cores Per Socket] FROM (select N.Caption as [Node], Count(N.AssetInventory.Processor.Name) as [Total CPU Sockets],…

I got a Buddy Drop from Solarwinds this morning. It fixed the problem. Have they given you the BD?

Oh, that's what the engineer said on our support call yesterday. I thought he said "body drop," like we were going to hand off the file in an empty field in the dead of night somewhere.

This query uses the _linkfor_(column name) format to link to the node detail page. It's useful if you want to use a custom query resource on a page in the Orion GUI: Select N.Caption, Supp.SuppressFrom, Supp.SuppressUntil, AE.TimeLoggedUtc, AE.AccountID , N.DetailsUrl AS [_linkfor_Caption] from Orion.Nodes N INNER JOIN…

Those are nodes that have never been unmanaged before. TimeLoggedUTC and AccountID come from Orion.AuditingEvents. If the node hasn't ever been unmanaged, it won't have a record in Orion.AuditingEvents.

Sure. This query gets only current and future mute events: Select N.Caption, Supp.SuppressFrom, Supp.SuppressUntil, LastMuteEvent.TimeLoggedUtc, AE.AccountID, N.StatusDescription from Orion.Nodes N INNER JOIN Orion.AlertSuppression Supp on Supp.EntityUri = N.Uri LEFT OUTER JOIN ( SELECT NetObjectID, Max(AuditEventID) as…

aLTeReGo As far as I know, I've applied HF4 to the polling engines. I used the most recent Solarwinds installer. If there's a list of files/mods in HF4, I'll compare it to my installations.

Aha, that makes perfect sense. Thanks!

I was able to manually change the polling method using SWQL Studio. Here's what I did: * Find the URI of the ESX host you want to change using this SWQL query: select URI from Orion.VIM.Hosts where HostName = '<the name of the ESX host>' * In the Object Explorer, find Orion.VIM.Hosts. * Right-click on Orion.VIM.Hosts and…

Our situation is a bit different, but not very different. Since the upgrade, the HTTPS monitors will be testing just fine, fail once with the TLS/SSL error, and then go back to testing OK. I ended up (1) modifying the app monitor so it tests more frequently and (2) modifying the alert definition so it waits longer before…

Aha, that does rule out a custom table. You could create a custom HTML page with the query and a search function, but then you run into challenges with security. I'll poke around my installation and see if I've done anything similar. If I find it, I'll post an update here.