marcrobinson · Observability Detective · ✭✭✭✭✭

I have had no issues with AppInsight for SQL applied to the SolarWinds Orion/Netflow/LogAnalyzer databases. However, this is all dependent on your environment. But generally - treat the solarwinds databases like any other. One application template that I have found useful is tracking windows events where servers could not…

Consider upgrading to 2023.3. There have been several updates for polling issues. Without looking into your specifics, this may help. link to current release notes: SolarWinds Platform 2023.3 Release Notes

Bingo! Yes you can filter on the score/severity items. You may want to swap out the report name for the reportID. Just load it from report manager and you can quickly get it. If and probably when you need to filter based on device models or custom properties, you should be able to add those to your filters. If you get…

I will try to add some links to get you started: GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion platform, including tools, documentation, and samples in PowerShell, C#, Go, Perl, and Java. download the sdk. It can help output your statements. As you can export queries to curl/powershell. Orion SDK Information…

THe quick (or ugly) answer is to filter on custom properties, device types, parts of names, etc. As you know which devices you need to filter on, you have a head start. Custom properties can be used to filter which ones are important, like "EDGE Router = True" or "DMZ Firewall = True." If you have existing properties that…

IPAM can handle some DNS Bind services too. I have a feeling that these are not on your list though. https://documentation.solarwinds.com/en/success_center/ipam/content/ipam-isc-dns.htm Add a DNS server (solarwinds.com) Cloud: AWS and Azure: Amazon Route 53 and Azure DNS monitoring (solarwinds.com)

What he said. IPAM is not a dns server, but it can monitor and manage Microsoft DNS services. I was looking for something more specific to just MS DNS, but here is an overall link with pretty pictures. DNS, DHCP, and IP Address Management (DDI) Solution | SolarWinds

EDit: really quick search didnt get a reference MIB book for windows. I would recommend doing an snmpwalk on the device, which will list OIDs and values and look for IFCONFIG type information. Then search on the OIDs. That should get you to a site with MIBs or a list of OIDs with real names. If you are not very familiar…

you would need to create a custom undp poller based on those oids.. Lemme see what I can find real quick to get you started. Edit: link to custom poller information: How to Create a Universal Device Poller (UnDP) in NPM (solarwinds.com) If you have active maintenance, you can also get access to training and open sessions…

Digging deeper, it looks like this is a calculated and stored value in int64 format. If I found out more, I will post back. NOTE - the issue only appears when values get big, BIG. I just have not found the spot where things get negative...

snmp.... not like that it is a good thing. You get very basic information at best. Honestly, I am not sure what support snmp has in server 2022 and beyond. It has been on the deprecated list for microsoft since server 2012. You would also need to setup a custom undp poller in NPM too. Its just a bad idea... 

You set up a custom undp poller with the proper oid/mib combo to get the metrics that you desired from these servers and nothing is returning? you probably did this, but have you confirmed the snmp data by running an snmpwalk to one of these from a polling engine? If that returns nothing at all - snmp is either blocked or…

SNMP might be your only bet with NPM. I have not tried that as wmi is the weapon of choice to get data from windows, which comes with SAM.

The other tool that can provide some insight is installing the QOE monitors on some of the clients and adding applications specific to them. The SSL app gives overall averages, but defining specific ones related to complaints can be helpful. Netpath is the best at this, but the QOE experience monitor has been able to add…

Yes, you may want to create dynamic groups so they update membership automatically. Eaton has some decent OID's that you can also monitor via universal polling (undp) monitoring to collect things like ,xupsinputsource (utility or battery power), time left (EatonOnBatteryTimeRemaining), etc. You need to set the polling…

Agreed with the above and for the same reasons. Totally worthwhile alert to have.

I think here is the answer to RTCD as of July 2023. It is from the 2023.2.1 Release notes for SolarWinds HCO. Note the section about third party syslog solutions. The recommendation is to have them forwarded. I understand this, but it seems like a natural to have that integration be built into Kiwi and Loggly - send those…

The short version is that SWO or solarwinds observability is going to fill that option. There are some differences in capabilities between the on prem modules and SWO, but that gap is closing over the next couple of years per my understanding.

Good catch. Never thought that an external node would be the problem.

How many api requests are in the Pingdom poller that you have setup? I have noticed similar with one of the two pingdom pollers that I have setup. Your post provided some new thinking about what is happening. Other API pollers are generally fine also. 

I was hoping this bug hadn't affected the API polling. I work with Pingdom and the SAM API monitor also. Are you able to test with something like Postman too? 

Query worked in my swql studio and I tested it in a modern dashboard table widget (2023.2 Platform). It worked there too. Nice little report too - I might keep this one. Double check the copy and paste in the webpage widget. I have seen this happen before. Also try simplifying it - it may be choking on one of the…

Are you trying to deploy it to a windows vm hosted in a cloud? That should work. 

Are you missing switches in a stack? That would be one reason. I would start with a search to see if someone has a report to list the switch stacks here int he report lab/thwack to see if that brings them up. 

That would be a script based action to integrate or interact with an CA. SAM monitoring would be the primary usage, if you wanted it to renew a cert, that would typically be a scripted trigger action from an alert. The high level monitoring is that SAM would monitor the cert, then have the alert act when a condition…

Adam, I like you explanations, as I omitted this from my answers. I agree that the Top1 is ugly, but can work. I was thinking about your isnull too. This might also work, instead of the case function. I tend to forget that hosts can be deployed without a vcenter so I didn't think about trapping that condition with…

${N=SWQL;M=SELECT E0.Host.DataCenter.VCenter.displayname FROM Cortex.Orion.Virtualization.TriggeredAlarmState E0 WHERE E0.relatedhost = ${N=SwisEntity;M=Host.HostID}} Bad multiple things - edited the query above. And multitasking is bad.... Just say no to it. 

${N=SwisEntity;M=Host.HostID}${N=SWQL;M=SELECT E0.Host.DataCenter.VCenter.name FROM Cortex.Orion.Virtualization.TriggeredAlarmState E0 WHERE ${N=SwisEntity;M=Host.HostID}}

@"adam.beedell" Hey Adam - I hadn't looked at the cortex entities. That clued me in. I also agree that the vm triggered alert condition is a new entity also. I was able to get the following to work, I added both the name and displayname. The name returned only the IP address for me also. The displayname gave the actual…

 Yeah that should work. I did a quick test using a mock up with that alert type and scope. No goodnik. I tried a couple of variations - also no good. This is a weird one. Already bumped the feature request.