marlief22 · SolarWinds Specialist · ✭✭✭✭✭

Hi there, This is certainly an interesting issue you're having, so let me set out how SolarWinds alerting should work first, then look at what is different. Alerts are made up of trigger/reset conditions which are queries looking for specific requirements, and trigger/reset actions that fire when those requirements are…

Hi there, Any interfaces that are above the license usage will be placed into a status called, helpfully, unlicensed. In this status, they will remain in the platform and historical data will be there but no further polling will take place, meaning no new data will come into the platform for them. I'm not entirely sure how…

Hi there, So for the changing of the Orion Server IP this should be absolutely fine, all the nodes refer to the Engine ID of the poller rather than the IP in the database. SolarWinds KB is here for that process: support.solarwinds.com/.../Change-the-IP-address-of-a-poller For the nodes, SolarWinds does usually use the IP…

Hi there, Orion Maps have different types of automatic connections as you can see here: This menu is available when you are editing a map with no object selected, if you untick everything except "Topology" do you get the answer you are looking for? Marlie Fancourt | SolarWinds Pre-Sales Manager Prosperon Networks |…

Hi Kalin, It seems the specific widget you are using doesn't support the editing of how many results are returned, which means this will have to be a custom table. Rather than walking you through it, I created a report that contains a custom table object that should allow you to reverse engineer it: You can download it by…

Hi there, Unfortunately, what you're asking is not going to be possible because the PDF is simply a static image created using the "Print to PDF" function built into the browser. The best solution to this would be to change the report schedule action to add in the option "Include Report's URL" where it will give you the…

Hi there, Yes, this is how it work in SCM: The File element type in Server Configuration Monitor (SCM) is defined by a full path to a Linux file (applicable to Linux nodes only) or to a Windows node only (applicable to Windows nodes only). This path can use the wild character * for any part of the filename, the wild…

Hi there, I managed to pull the full query for that widget from the Activity Monitor in SWQL studio: SELECT VolumeID, VolumeName, DeviceID, ai.Type as Type, FileSystem, SerialNumber, AllocationUnit * CapacityB AS Size, AllocationUnit * (CapacityB - FreeSpaceB) AS SpaceUsed, AllocationUnit * FreeSpaceB as FreeSpace, ((1.0 *…

Hi there, The way to do this in bulk is to use the Network Discovery feature to go through each server and automatically add volumes: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-automatically-add-discovered-nodes.htm Kind regards, Marlie Fancourt | SolarWinds Pre-Sales Manager…

Hi there, I don't think there is a specific account limitation that will allow you to filter events in the event log, but I would instead say that a good way to go about this would be to actually create a custom query widget, and limit a user to only be able to see specific dashboards - which IS…

Hey, This sounds really great, are you in a position to be able to share a copy of this with any instance details removed? Thanks. 

Hi there, SolarWinds is simply pulling Interface information from SNMP, so it's likely that the interface name or description mentions the VLAN, rather than it being a VLAN set-up itself. You can check the raw SNMP data by running an SNMP walk to the device from the SolarWinds Orion…

Hi, no problem - glad to help! Unfortunately the version number is actually put through as a string, since it has multiple decimal points in it. If it were, for example, just '5.1' it would likely work perfectly. You could in that case, depending on the amount of precision required, simply split the version number to only…

Hello, This is the line in the script that changes how many days the query looks back: AND DATETIME>=ADDDAY(-1,getdate()) currently it says '-1' for yesterday, but changing that to '-7' would be for the past week and '-30' would do last month. The other option would be to change ADDDAY to ADDWEEK or ADDMONTH and keep the…

Hello, Statistic has to be a floating number, rather than a string so it's trying to automatically assign the string to message. I changed your script to put a dummy statistic for each message: $version = [string]$psversiontable.PSVersion $edition = [string]$psversiontable.PSEdition write-host "Statistic.Version: 1"…

Hi there, You'll need to edit the top line to be the actual servername and CA Name for your platform. This script runs locally on the target server so you can use 'localhost' instead of a hostname, but the recommendation would be to use the full CA name. 

Hello there, Have you followed the steps in the Knowledge Base? documentation.solarwinds.com/.../core-users-saml-authentication.htm If you run into issues there is troubleshooting here: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-users-saml-troubleshoot.htm Kind regards, Marlie…

Hello there, Filters can still be copied following these steps, but it requires using the Adobe AIR console, as the flash player through the web is inaccessible: * First, install the standalone Adobe AIR console for SEM: https://support.solarwinds.com/SuccessCenter/s/article/Install-LEM-Adobe-Air-Console?language=en_US *…

Hi there, This is a pretty cool idea so I made a quick proof of concept: In the alert trigger, you want a custom SWQL to return all devices with a baseline older than 1 month: SELECT Nodes.Uri, Nodes.DisplayName FROM Orion.Nodes AS Nodes left join Orion.SCM.Baseline scb on nodes.nodeid = scb.nodeid where scb.TimeStamp <…

Hi there, Alerting for SAM generally is done either on the component level OR the Application level, but not both as this can cause duplicate alerts being fired. When you create the alert, you can select 'Application' or 'Component' in the dropdown menu for 'I want to alert on:', then the most common triggers would be:…

Hi Andy, When I hear the words 'Clean Re-install' I have to ask if it's going to be just the application servers, or the database too. Application servers only An application re-install isn't an uncommon way to clear up your machine, I would - in your position - also use this as a good time to migrate the platform to the…

Hi there, Let me see if I can help with the most common forms of 'Messy Alerts' that I see on a regular basis: * Devices in multiple scopes We often see this with nodes and interfaces, and applications and components. By default SolarWinds has alerts for all 4 of these elements, but the status of interfaces affects the…

Hi there, This is a good opportunity for a PowerShell component in SAM, if you are licensed for it. I just had a quick go and managed to get something like this to be returned from our CA: Here is the code I used, you'll have to add your CA into the top line and run it with remote execution for it to work, but should give…

Hello there, I work at Prosperon, a SolarWinds Partner in the UK and I've delivered a number of SEM Smart Starts on behalf of SolarWinds. The idea of Smart Start is to give the customer a guided introduction to the platform, the specific features, and try to get them to avoid any bad habits from the beginning. Usually,…

Hi, A lot of these are going to based on what devices you have sending information into SEM. I will do my best to outline how I'd do these rules myself, hopefully they can give you a start: 1. Device/connectors: Domain Controller with Windows Security connector (Must configure auditing in Group Policy too) Rule set-up: 2.…

Hi, This can happen for a couple of reasons: 1. Your account permissions have changed since you last logged in. Because it's possible to remove permissions for user menu bars, you may be seeing the effects of this. In this case, log in with an account with administrator access and then go to All Settings > Manage User…

Ah interesting, thanks for that link!

Hi Kishore, Glad to hear that my information was useful, for your second question I think it is as simple as there are some disabled components inside of the AppInsight templates. So while it may contain 70, only 50 of them are enabled and will count against your license. Kind regards, Marlie Fancourt | SolarWinds…

Advantages: - Monitor not only the direct metrics from Active Directory, but also the performance counters and event logs from the server that can affect the performance - Easy to set-up using the built in AppInsight configuration tool in the web console. This opens all the ports and enables winrm and opens firewall rules.…

I think the way that we have done this recently is by utilising the PowerShell script monitoring in SAM to perform a web-request and then return the required information based on that. Have a look here for examples:…