marcrobinson · Observability Detective · ✭✭✭✭✭

Comments

  • Good question. Using the custom html widget in a classic dashboard will allow you to set up an iframe and load the modern dashboard- but you would get twice the menu bars/headers.. Other than popping them in an external window via the user links widget (as you mentioned ), this is a tough one. I don't get twice the headers…
  • Please do not ignore joins. I have noticed behavioral differences when using the implicit joins, and sometimes, when you want the implicit join, it does not exist and you need to create it. Its more of test and see which works better for your scenario. Swql Studio is your best friend when writing them. 
  • Please consider adding me in. 
  • I did something similar, but I set it to look at the interface first then check for no traffic. I am pretty sure I borrowed some of this from another post when I was working on it. You might find more in thwack if you keep searching. I will paste it below as a starting point, hopefully it helps.I created this a custom swql…
  • You were missing the parenthesis on the second query. (Select blah blah...) . I ran it but did not return much from the second query. Something is off with that entity - could just be me. But you may not need a union statement as a join seems to work. see below. SELECT n.NodeID, n.Caption, n.HardwareHealthInfos.ServiceTag,…
  • Has anyone submitted a feature request to make this simpler? It just seems like an obvious need, since we are moving towards the Modern Dashboards like a large ship in the Atlantic. We can only avoid so many icebergs. OK, the Modern Dashboards are NOT icebergs, but seriously, I will be creating LOTS of these pie charts.…
  • SolarWinds API should support OAUTH2 and Bearer Token, and not just basic auth. - Feature Requests - The Orion Platform - THWACK - SolarWinds Community submitted 
  • I agree with bobmarley, with the following two warnings. Having a user in more than one windows group is still a bad idea. I have seen things still get wonky for that person after they login. It is best to avoid that mess. Second, if you have account limitations setup - that could block them from interacting with nodes…
  • Have you checked the netflow template that the device is using? NetFlow v9 Datagram Knowledge Series: Part 3 - NetFlow v9 Template FlowSet - Geek Speak - Resources - THWACK - SolarWinds Community This is an old post but it has some good information about flow and flow templates.
  • If you access the source setup section in your loggly web console, you will see lots of information about how to configure sources. You will need to configure your token too. Here is the general link to help docs about source setup. I dont see an exact config for winlogbeat, but there is enough here to get you started. 
  • The unmanaged nodes will stay unmanaged - only if you set a schedule and it expired will it change on its own. I generally have not seen a flood of alerts after upgrading - but I this may not be true for everyone, including you. 
  • I am running the current orion/ncm/npm and it largely worked after I removed your custom properties which i dont have, and that leading '(' in the where clause. There were some that didnt load all data, but there are other entities such as assetinventory which might have that information anyways. Could be a cisco model…
  • You will want to create an external node. THen apply the templates to it. You need something that resolves like teams.microsoft.com and then check the External Node: No Status for polling method. This gets past the need to have it actually be monitored. This is one of the more unusual limitations of SAM when polling online…
  • I suspect that you need to install that powershell module on your polling server. You may also need pwershell 7 with the new az module installed. I am not sure which one is trying to install in the screenshot. I suspect it is the AzureRM module which is EOL or will soon be. I will pass this along to thwacksters with more…
  • Are you running the swql report under a different account than the one you are accessing the web interface with? Just wondering if account permissions are limiting the return on the query. 
  • If you are monitoring the WPM destination (Its a web server I assume?) then you can add AppInsight for IIS (if its MS IIS) or use another SAM template depending on the web server. This also assumes that you have SAM. NPM does not have much flexibility here (by design). Otherwise I think you have hit the limit of what NPM…
  • First - WMI permissions are a lovely pain in the backend. That said, you can use non-admin accounts. The second thing that I have learned is that WMI permissions are NOT the same between say 2008 and 2016. This seems to hold true in 2019 as there are additional permission granularities that need updates. You will notice…
  • Here is good thwack post on this. I dont have a better detailed write up. There is a post from Jan (cant think of his thwack handle, he is one of the product managers) has some great info in thwack about API pollers. @"KMSigma.SWI" might be able to chime in too. I think there are some videos on the API stuff also. How to…
  • A couple of thoughts here, first, I believe that manage.office.com api endpoint is retired. Second, do you have an MS Graph enterprise application setup with permissions and an oath2 token? The credential that you will create needs oath2 for the graph stuff. take a look a these links for office365/microsoft 365:Integrate…
  • I created a new alert, but there are still artifacts in the xml output. Custom properties and whatnot. trying to clean them up without breaking the xml. @"KMSigma.SWI" Is there a simple method to do this? Since the question was how to do this, here is a short walk through in lieu of the alert upload. Bottom line, create an…
  • The alert looks good. The only thing you could change is removing the slightly redundant OR statements in the scope - see below. I agree with @"sum_giais" about the duration. I tend to see the occasional missed poll or status unknown for a component on occasion and the extended timing would force the status alert to wait…
  • It is just like an additional polling engine - it will communicate with the orion database. The additional polling engine requirements for connectivity and network latency still apply. From the scalability engine guidelines: Requirements for APEs The latency (RTT) between each additional polling engine and the database…
    in ROP Comment by marcrobinson May 2022
  • Unfortunately no. This seems to be the only other answer that I have found so far - A feature request: (+) EMC Isilon after upgrade to v9.1 SRM has broken our connection. - Feature Requests - Storage Resource Monitor (SRM) - THWACK - SolarWinds Community Any luck with the custom solution? 
  • Glad it was something simple! And there is a special place for copy and paste errors. I think it is to the left of the screaming room. 
  • You mention that unmanage works, but not creation. I have this feeling that solarwinds permissions are involved. 
  • A ROP is basically a smaller APE (additional polling engine) it has the same requirements and yes it supports the same modules. It is limited by licensing compared to a full APE. Installation is similar to an APE. Supported Modules by a ROP: * IPAM * NCM * NPM * NTA * SAM * SRM * UDT * VNQM More information: Scalability…
    in ROP Comment by marcrobinson May 2022
  • Depending on your licensing level for VROPS, some features may not be as functional as any demo you have seen. But yeah - solarwinds tends to be quicker to get use from the data too. Ditto to @"[Deleted User]"
  • Ditto. You can use two variations of custom properties - node custom properties and volume custom properties. The node custom properties are great for excluding all volumes with a single property, and you can get very granular when using the volume custom properties. Both cases are yes/no and I agree that it is an opt out.…
  • Ditto on the comments about no snmp lockout. BUT you can and should use the snmp walk tool (<install drive>\<install folder>\SolarWinds\Orion\SnmpWalk.exe - usually this is C\Program Files (x86)\SolarWinds\Orion\SnmpWalk.exe) This tool will give you a bit more information about failures and can test snmp v1,2, and 3. You…
  • There has not been much in the logs to track sent email that I can recall. If the email action is unable to login to the smtp server - that, I recall, is tracked in one of the service logs. You can add a second email action to that that alert (reboot alerts I am assuming), and have it email only you. You can also add your…