marcrobinson · Observability Detective · ✭✭✭✭✭

What he said. IPAM is not a dns server, but it can monitor and manage Microsoft DNS services. I was looking for something more specific to just MS DNS, but here is an overall link with pretty pictures. DNS, DHCP, and IP Address Management (DDI) Solution | SolarWinds

EDit: really quick search didnt get a reference MIB book for windows. I would recommend doing an snmpwalk on the device, which will list OIDs and values and look for IFCONFIG type information. Then search on the OIDs. That should get you to a site with MIBs or a list of OIDs with real names. If you are not very familiar…

you would need to create a custom undp poller based on those oids.. Lemme see what I can find real quick to get you started. Edit: link to custom poller information: How to Create a Universal Device Poller (UnDP) in NPM (solarwinds.com) If you have active maintenance, you can also get access to training and open sessions…

Digging deeper, it looks like this is a calculated and stored value in int64 format. If I found out more, I will post back. NOTE - the issue only appears when values get big, BIG. I just have not found the spot where things get negative...

snmp.... not like that it is a good thing. You get very basic information at best. Honestly, I am not sure what support snmp has in server 2022 and beyond. It has been on the deprecated list for microsoft since server 2012. You would also need to setup a custom undp poller in NPM too. Its just a bad idea... 

You set up a custom undp poller with the proper oid/mib combo to get the metrics that you desired from these servers and nothing is returning? you probably did this, but have you confirmed the snmp data by running an snmpwalk to one of these from a polling engine? If that returns nothing at all - snmp is either blocked or…

SNMP might be your only bet with NPM. I have not tried that as wmi is the weapon of choice to get data from windows, which comes with SAM.

The other tool that can provide some insight is installing the QOE monitors on some of the clients and adding applications specific to them. The SSL app gives overall averages, but defining specific ones related to complaints can be helpful. Netpath is the best at this, but the QOE experience monitor has been able to add…

Yes, you may want to create dynamic groups so they update membership automatically. Eaton has some decent OID's that you can also monitor via universal polling (undp) monitoring to collect things like ,xupsinputsource (utility or battery power), time left (EatonOnBatteryTimeRemaining), etc. You need to set the polling…

Agreed with the above and for the same reasons. Totally worthwhile alert to have.

I think here is the answer to RTCD as of July 2023. It is from the 2023.2.1 Release notes for SolarWinds HCO. Note the section about third party syslog solutions. The recommendation is to have them forwarded. I understand this, but it seems like a natural to have that integration be built into Kiwi and Loggly - send those…

The short version is that SWO or solarwinds observability is going to fill that option. There are some differences in capabilities between the on prem modules and SWO, but that gap is closing over the next couple of years per my understanding.

Good catch. Never thought that an external node would be the problem.

How many api requests are in the Pingdom poller that you have setup? I have noticed similar with one of the two pingdom pollers that I have setup. Your post provided some new thinking about what is happening. Other API pollers are generally fine also. 

I was hoping this bug hadn't affected the API polling. I work with Pingdom and the SAM API monitor also. Are you able to test with something like Postman too? 

Query worked in my swql studio and I tested it in a modern dashboard table widget (2023.2 Platform). It worked there too. Nice little report too - I might keep this one. Double check the copy and paste in the webpage widget. I have seen this happen before. Also try simplifying it - it may be choking on one of the…

Are you trying to deploy it to a windows vm hosted in a cloud? That should work. 

Are you missing switches in a stack? That would be one reason. I would start with a search to see if someone has a report to list the switch stacks here int he report lab/thwack to see if that brings them up. 

That would be a script based action to integrate or interact with an CA. SAM monitoring would be the primary usage, if you wanted it to renew a cert, that would typically be a scripted trigger action from an alert. The high level monitoring is that SAM would monitor the cert, then have the alert act when a condition…

Adam, I like you explanations, as I omitted this from my answers. I agree that the Top1 is ugly, but can work. I was thinking about your isnull too. This might also work, instead of the case function. I tend to forget that hosts can be deployed without a vcenter so I didn't think about trapping that condition with…

${N=SWQL;M=SELECT E0.Host.DataCenter.VCenter.displayname FROM Cortex.Orion.Virtualization.TriggeredAlarmState E0 WHERE E0.relatedhost = ${N=SwisEntity;M=Host.HostID}} Bad multiple things - edited the query above. And multitasking is bad.... Just say no to it. 

${N=SwisEntity;M=Host.HostID}${N=SWQL;M=SELECT E0.Host.DataCenter.VCenter.name FROM Cortex.Orion.Virtualization.TriggeredAlarmState E0 WHERE ${N=SwisEntity;M=Host.HostID}}

@"adam.beedell" Hey Adam - I hadn't looked at the cortex entities. That clued me in. I also agree that the vm triggered alert condition is a new entity also. I was able to get the following to work, I added both the name and displayname. The name returned only the IP address for me also. The displayname gave the actual…

 Yeah that should work. I did a quick test using a mock up with that alert type and scope. No goodnik. I tried a couple of variations - also no good. This is a weird one. Already bumped the feature request. 

Are on the SolarWinds (Orion) platform with module licensing (NCM, NPM, etc) or are in the new world of HCO/Hybrid Cloud licensing. Depending on the tier, you get NPM, UDT, etc. This is one of the few times I will recommend looking at the new licensing variations now. 

Also check the maintenance log. swdebugmaintenance.log It should be in C:\ProgramData\SolarWinds\Logs\Orion\ typically. You want the most recent one. Number 6 above is the one I would investigate, as this one relates to db performance. The daily maintenance routines also will affect performance. Your high cpu may or may…

Going to assume that the scope is set to transaction. Take a look at the following. last error message: ${N=SwisEntity;M=LastErrorMessage}

I wonder if an NCM policy would work in this case. Hmm a group might be needed to run the second job on affected systems. Something like policy audit of x runs job x. Now that x is compliant, policy B notices, and runs job on group B. 

Definitely agree with @"bobmarley". The alert entity (node, application, component, etc) will change the swql variable formatting in the alert email action. The only thing I would add is that after creating the alert, switching the view to action manager will allow you to edit, and re-edit the actions assigned to a given…

Tabs and rotating tabs for NOC views? Otherwise, one could load the modern dashboards into in iframe inside the custom html widget. It would be an ugly experience, but that should work.