marcrobinson · Observability Detective · ✭✭✭✭✭

Unmanage is status set by 'unmanaging' a node. Unmanaging stops alerting and monitoring of the node. It has a blue icon with an x inside. The duration is set by the user, which can be scheduled or open ended (forever). Undefined happens when polling fails to gather details on a node. Typically this happens when something…

I agree as you can use AD groups to scoop up users fairly easily and the permissions for AD groups in the SolarWinds webconsole are pretty granular too. Pointing them to their main page works very well too. 

Are you licensed for HCO or the NPM module? This is not included with SAM directly. Otherwise: 1. the device studio poller would modify the value for that node period. It would show up that way in SAM, NPM, etc. 3. Not necessarily. If they are the 'same type of thing' the custom device poller could be applied to all. If…

I just checked, and I dont even have a script for this alert. Create a new Alert set the Alert on to Auditing Event. Set the scope to all objects and for the trigger condition, you can use the following. This will trigger notifications for adds and deletes. You do not need both conditions either. You can just use the Node…

The first part of your request is largely automatic. Anytime a node is created - any report that lists all nodes will automatically pull the current list of all nodes directly from the database. Same with deletes. I do not have my scripts handy, but the second part is your notification email for new nodes. That is best…

@"kpina" Sooo what you are saying is that Christmas is coming in April this year?? 

@"cnorborg" Hits it on the head with the cost involved to get near real time monitoring and alerting. @"cheryl1" provides the final quick answer - NPM is not fundamentally a real time solution. The only other point is whether you can actually respond in real time. The monitoring and alerting will be delayed by minutes in…

If I read this correctly, you appear to have an availability group setup. If you are pointing appinsight at one of the servers in an availability group, it will show unknown when the other member takes over. You may want to point it at the availability group listener to maintain a steady data stream. This will mean that…

OMG that tip is worth solid gold. Very nice. Thank you!

Awesome! I think this falls into the category of "Gonna make this happen, hold my beer." I just confirmed that it works for me also. I think my server is upset about it though... 

My first thought would be Netpath. NetPath - Easy Visual Network Path Analysis | SolarWinds THis is part of NPM. This would track a specific endpoint and how traffic routes to it. Beyond that, are you able to elaborate a bit more? There are few other tools and tricks that may be useful.

You mentioned the three unmentionable letters.... W M I... I suspect that the long term answer may be another unmentionable (for some of us) - Agents. Mitigating wmi can be problematic, and it sounds like your organization went with that approach. The basic alternatives, but they require a wee bit of work - creating and…

I dont think that I have seen this exact message before, but both links below state that the snmp request is taking too long and timing out. Increase the timeout on the SNMP polling settings to 3000 ms. Looks like default is 2500 ms, so increasing by half a second. They both say that the timeout can be increased on the…

Are you running the SQL db on the same server as the SolarWinds products? That would explain the slowness. You should have the sql installed separately. Otherwise the first server in your environment is the main poller (Web and Polling roles). To offset or extend capabilities, then additional polling servers can be added…

I believe that you should be able to use this same enterprise application for other applications. If you have the solarwinds cloud offerings, such as Pingdom, Loggly, AppOptics, etc. In other words, instead of creating a new enterprise application in Entra,add your relevant users/groups to this one and assign them in the…

yeah my conversion tends to return all the outages... ugh

honestly starting fresh in swql might have been MUCH easier. 

SWQL?? hmmm this looks like it works. Gah, easier to start fresh with all the embedded sql statements. This seems to work. Please try it and let me know. SELECT N.StatusLED, N.Caption, N.NodeID, StartTime.Message, StartTime.EventTime AS DownEventTime, ( SELECT TOP 1 EndTimeTable.EventTime FROM Orion.Events AS EndTimeTable…

I tend to agree with the overall tone. This may be the long slow march away from VMware. There are alternatives and the ability to shift into containers and cloud are are creating a new path. With VMware, I don't think any conversation can get too far from the finances. Anytime that you discuss a VMware solution, the first…

When the solarwinds server reports down, rdp to the polling server and attempt to load the web page from that server. This can be common pain point - the users can access a resource, but the polling servers were blocked. Ifyou have NPM, netpath to the url:port can be used to validate what solarwinds is experiencing. If the…

That event 4001 is one that I threw in a SAM template. If it trips a lot, then I know that sql connectivity is bunk. Also, Netpath in NPM is underrated. I have setup a netpath agent on each poller and main poller to port 1433 of the sql server. That will help eliminate traffic latency etc. There was an article somewhere…

@"KMSigma.SWI" Ok, that is a great way to find and relate which log files you need. I never thought of abusing, um using, the log adjuster tool for that purpose. I also agree that there is no singular document that lays out all the log files. There are some documents that do point out which log files are relevant to an…

I think I found the relevant KB article. I can confirm that I cannot edit the DHCP or SNMP settings. Importing from spreadsheet is another matter. The API may be able to update them too - But I have not validated that. https://documentation.solarwinds.com/en/success_center/ipam/content/ipam-edit-ip-address-properties.htm…

Can you share a bit more detail? Does ICMP (uptime) polling work? You mentioned three separate polling methods. Are there more nodes affected? Here are some links to get you started: Article Orion Platform Troubleshooting - Polling (site.com) Troubleshoot nodes that are unknown

I dont recall kiwi having HA. BUT if you have a load balancer that would be perfect. I had a kiwi farm behind a load balancer, and could reboot a kiwi server without causing havoc. Alternatively, logstash is also a good forwarder. 

I have noticed that you have a couple of threads open for database space, polling issues, and this one for maintenance. I suggest creating a support ticket as you may have some bigger issues to work with. Additionally, you can run the Active Diagnostics and it will give you some heads up. IT is located in the SolarWinds…

Try this to get you started. The orion.npm.custompoller**** entities should have the custom poller statistics that you want. SELECT TOP 100 cpon.AssignmentName, cpon.NodeID, n.Caption, cpon.RawStatus, cpon.Status FROM Orion.NPM.CustomPollerStatusOnNode cpon JOIN orion.nodes n on n.NodeID = cpon.NodeID

Just from the comment about a large number of alerts, I trust that the web console alert export/import process will be slow if not painful. Check these out: (+) Import Multiple Alert Rules into Alert Manager - Forum - Network Performance Monitor (NPM) - THWACK (solarwinds.com) Vinay.By and MesVerrum have suggestions/links…

@"vinay.by" and @"mesverrum" have the whole of it. I have run into situations where the IIS log had the details to determine if there were specific user actions involved. Monitoring IIS with SAM is also helpful to let you know the general performance of a given webserver. Otherwise the Message center and the Audit…

 VIM and VMAN both use the VMware api to talk to Vcenter. I would check the VMAN logs for connection errors. You should see data much sooner than a couple of days. At least 12 hours as @"Seashore" indicated.