marcrobinson · Observability Detective · ✭✭✭✭✭

Also, NTA is underrated as a tool. Combine NTA with Netpath (part of NPM) and you have some very useful and quick to deploy tools. The QOE agent is one of the few agent tools that is also very useful. It is essentially wireshark-lite that you install on a node and can target specific application traffic. NetPath…

Hmm just saw this. Good recommendations on discovery and it refers to NPM. Discover your network with NPM (solarwinds.com) Add discovered devices to NPM (solarwinds.com) This is a nice NPM chart on monitoring: What should I monitor on my network? (solarwinds.com) I looked over NPM, as it used to focus on snmp devices and…

I agree with your assessment of the agents on windows. Unfortunately, provisioning wmi permissions creates its own headaches too. Usually that is a one and done for each version, but still - why did Microsoft even think that Admin rights were a good idea for their core management instrumentation?

DItto. You can run them with different windows server OS. But things get weird with windows patches and .net behaving slightly differently between the server OS versions.

You have it correctly - assuming that you have NPM and SAM or HCO. Agent/WMI is the preferred method for windows - just pick one. For Linux based servers, you can use snmp or agents (see link below). F5 load balancers do have special monitoring tools in solarwinds. See those links below for usage and applicability. The…

Please ask for an escalation and emphasize that your system is down. You can also reach out to your customer success rep/account manager and ask the same of them, but they may need your ticket number. If I understand you correctly, you are trying to migrate your existing windows 2016 servers to new windows 2022 based…

Here are two links to help you get started. The first is a good description of status and how to understand it. There are several more links in this document too. The high level node chart on this page is helpful to get the overall idea of node status codes. The second link provides good troubleshooting for nodes and how…

FYI - this is not something I do every day. I did look over some notes, and the netobject is apparently used with older verbs. The URI is related to newer verbs. 

I suspect the call completing is related to successful login. Going to poke at this, but the detailsUrl for the node has slightly different formatting - /Orion/NetPerfMon/NodeDetails.aspx?NetObject=N:xxxxxxx where xxxxxxx is your nodeid. But, try NetObject=N:8042 and see if that works. If it does…

I dont believe that things have changed since that thread came out.

There is no direct connection that I have seen either. You can also create a dataflow to your solarwinds sql db and point PBI at that. It comes down to what you want and what you are most comfortable with. 

Unmanage is status set by 'unmanaging' a node. Unmanaging stops alerting and monitoring of the node. It has a blue icon with an x inside. The duration is set by the user, which can be scheduled or open ended (forever). Undefined happens when polling fails to gather details on a node. Typically this happens when something…

I agree as you can use AD groups to scoop up users fairly easily and the permissions for AD groups in the SolarWinds webconsole are pretty granular too. Pointing them to their main page works very well too. 

Are you licensed for HCO or the NPM module? This is not included with SAM directly. Otherwise: 1. the device studio poller would modify the value for that node period. It would show up that way in SAM, NPM, etc. 3. Not necessarily. If they are the 'same type of thing' the custom device poller could be applied to all. If…

I just checked, and I dont even have a script for this alert. Create a new Alert set the Alert on to Auditing Event. Set the scope to all objects and for the trigger condition, you can use the following. This will trigger notifications for adds and deletes. You do not need both conditions either. You can just use the Node…

The first part of your request is largely automatic. Anytime a node is created - any report that lists all nodes will automatically pull the current list of all nodes directly from the database. Same with deletes. I do not have my scripts handy, but the second part is your notification email for new nodes. That is best…

@"kpina" Sooo what you are saying is that Christmas is coming in April this year?? 

@"cnorborg" Hits it on the head with the cost involved to get near real time monitoring and alerting. @"cheryl1" provides the final quick answer - NPM is not fundamentally a real time solution. The only other point is whether you can actually respond in real time. The monitoring and alerting will be delayed by minutes in…

If I read this correctly, you appear to have an availability group setup. If you are pointing appinsight at one of the servers in an availability group, it will show unknown when the other member takes over. You may want to point it at the availability group listener to maintain a steady data stream. This will mean that…

OMG that tip is worth solid gold. Very nice. Thank you!

Awesome! I think this falls into the category of "Gonna make this happen, hold my beer." I just confirmed that it works for me also. I think my server is upset about it though... 

My first thought would be Netpath. NetPath - Easy Visual Network Path Analysis | SolarWinds THis is part of NPM. This would track a specific endpoint and how traffic routes to it. Beyond that, are you able to elaborate a bit more? There are few other tools and tricks that may be useful.

You mentioned the three unmentionable letters.... W M I... I suspect that the long term answer may be another unmentionable (for some of us) - Agents. Mitigating wmi can be problematic, and it sounds like your organization went with that approach. The basic alternatives, but they require a wee bit of work - creating and…

I dont think that I have seen this exact message before, but both links below state that the snmp request is taking too long and timing out. Increase the timeout on the SNMP polling settings to 3000 ms. Looks like default is 2500 ms, so increasing by half a second. They both say that the timeout can be increased on the…

Are you running the SQL db on the same server as the SolarWinds products? That would explain the slowness. You should have the sql installed separately. Otherwise the first server in your environment is the main poller (Web and Polling roles). To offset or extend capabilities, then additional polling servers can be added…

I believe that you should be able to use this same enterprise application for other applications. If you have the solarwinds cloud offerings, such as Pingdom, Loggly, AppOptics, etc. In other words, instead of creating a new enterprise application in Entra,add your relevant users/groups to this one and assign them in the…

yeah my conversion tends to return all the outages... ugh

honestly starting fresh in swql might have been MUCH easier. 

SWQL?? hmmm this looks like it works. Gah, easier to start fresh with all the embedded sql statements. This seems to work. Please try it and let me know. SELECT N.StatusLED, N.Caption, N.NodeID, StartTime.Message, StartTime.EventTime AS DownEventTime, ( SELECT TOP 1 EndTimeTable.EventTime FROM Orion.Events AS EndTimeTable…

I tend to agree with the overall tone. This may be the long slow march away from VMware. There are alternatives and the ability to shift into containers and cloud are are creating a new path. With VMware, I don't think any conversation can get too far from the finances. Anytime that you discuss a VMware solution, the first…