marcrobinson · Observability Detective · ✭✭✭✭✭

I agree with @"stuartd" , and you can enable session trace logs in NCM which have more detail. Generate session trace logs for NCM and NPM modules (site.com) I think It may catch errors before the node was entirely setup in NCM. But definitely useful to troubleshoot connection errors when NCM is enabled on a node. 

PowerShell, APIs, PowerBI and get more comfortable with VS Code. 

Link to the migration guide docs: SolarWinds Platform Migration Guide

I am not sure how to feel about an in place upgrade. I understand that it works much better now from teammates. It is a matter of probably running config wizards to 'refresh' the solarwinds installation on those servers. Otherwise, there is an option to migrate to new servers using the HA functionality to hop over by…

SolarWinds is working on the issue with the support documents.

Recreating my post. Also noticed that other pages are not loading. Adding screenshots. One of those pages was working about ten minutes ago. 

An orion map based on groups might be an alternative also. Depending on your platform version, I believe 2023.4.x is where that ability was released to add orion maps to modern dashboards.

Your second part of the response can be done via the following - list of modern dashboards with links. Generating the status - I would consider creating dynamic groups around your studio custom property, then showing the group status for the first column. Cleaner table. There are other ways, such as only listing down nodes…

@"mesverrum" Thank you, I was not thinking about that, just looking at how to get this work in SWQL. @"3wal" Try adding this to the second query's where statement: and ss.Role >1Looks like Role = 1 matches the masternumber in the npm.switchstack entity. 

This is an ugly answer. I was able to use subqueries, an arithmetic function, top function and converting the result to numeric. The top and numeric conversion I cannot explain other than I received errors without multiplying by 1.0 and 4000 repeats without the Top1. I changed your queries to values that I could test, but…

Remove everything after the AND statement and add the following: ORDER BY r.RecordTime ASC That should return all the records available and sort by time ascending. That will eliminate issues with the last 30 days.

Looks like my last reply did not send. I added a date comparison to the where clause to get only the last 30 days. Try this: SELECT op.OperationName, r.OperationInstanceID, r.RecordTime, r.MinRoundTripTime, r.AvgRoundTripTime, r.MaxRoundTripTime FROM Orion.IpSla.OperationResultsHourly AS r JOIN Orion.IpSla.Operations AS op…

Try something like this, which uses the hourly entity and the operations entity: SELECT TOP 1000 op.OperationName , r.OperationInstanceID , r.RecordTime , r.MinRoundTripTime , r.AvgRoundTripTime , r.MaxRoundTripTime FROM Orion.IpSla.OperationResultsHourly AS r INNER JOIN Orion.IpSla.Operations AS op ON…

@"adam.beedell" Adam is too kind in his assessment of the performance during variable loading. Hateful comes to mind when waiting on variables to load when you search. But the fact that VIM returns very little in this case is even worse. 

@"cheryl1" Hey Cheryl, this is something to ponder as you really need to work backwards on some of the vim entities. They work but you really need to watch how you link them. Rachel's initial approach works if you can resolve the hostid, but you cannot as it is written. I was surprised that I had to work differently to get…

 @"adam.beedell" I was looking at the following and noticed that multiples could be returned. Top 1 eliminates that. SELECT TOP 1 H.DataCenter.VCenter.displayname FROM Orion.VIM.HOSTS H WHERE H.DataStores.DataStoreID = ${N=SwisEntity;M=DataStoreID} The other entity that looks good based on the earlier thread are those…

Taking a quick peek and hoping that the slight shift in entity for the alert (changing from virtual host to virtual datastore) is not the cause. This can cause some interesting and subtle changes in formatting the swql variable to retrieve the value. SAM application and component alerts are a great example, as you slightly…

same here. going to poke solarwinds on this one. Thank you for pointing this out. 

Just updating this thread. The ticket is still moving forward. It was a bug that was resolved in the past. The issue occurs when ASA's report data from dropped connections apparently. They can report negative data, and then this data becomes a bigger issue when it is scooped up. Sounds like the resolution may be a new fix…

THose recommendations are definitely helpful if those additional pollers are fully loaded with default polling rates. You will also need to enable some of the features that you were missing in those new modules. So you probably wont see a huge jump in cpu etc. after migrating. How close to 'full' are the current pollers in…

Honestly, you can use enduser workstations to run netpath. Just have a dedicated one in each location, or one that is most likely on and that you have some level of control over. Windows kiosks may be another option if you have them setup. Most of the time I have seen them locked down, and controlled by IT. 

What version of the SolarWinds/Orion Platform are you using? Also - have you downloaded the Orion SDK and installed swql studio? There is an option to export or copy a query in curl format. That might help with troubleshooting too. 

Looks like the default alerts are in that folder. 

@monitoringlife - In my case, the answer was yes. Other users in that AD group were fine. 

Good job, I think you found your root cause. Those one-off account issues are painful. 

I ran into something similar. The issue was with his AD account actually. We did the same with multiple browsers, incognito mode, clearing browser cache and using different pc's. You can also try a different account with access on this user's system too. If everything works except the affected account - the resolution was…

Custom undp polling should be able to get those values. Create one, apply it to all apc ups. I seem to recall there being sets of APC snmp OIDs also. Each with varying levels of details. But I am thankful that you found an answer, even if it is kinda 'meh.' 

you are correct AppOptics is a separate license. You mentioned prometheus? Will you be monitoring containers then? Check into the SAM container monitoring - Docker Container Monitoring in Solarwinds Orion. IT is Prometheus based per my understanding. 

Check SNMP settings, you could be viewing old data. In other words, snmp polling is failiing. I tend to use custom pollers instead of the built in ups polling, but that is what I have noticed when there is a difference between the two. 

I have had to use IIS logs to track this type of activity. I REALLY would love more audit logs for swis. This is something of a security hole AND a troubleshooting black hole. Netflow is another method that I have tracked some of this. But you are looking at larger amounts of trafffic.