marunderwood

Nope. I don't think so. I'm excluding 'Unmanaged' in the query. It showed up via an custom SQL alert I took from thwart. (I converted the sql code for a report in thwart into an alert.) Here's the code if you want to try it: Be sure to comment out the disabled condition ("-- AND ace.Disabled = 0"). Then disable a…

Sorry. I'm not understanding how this will help my situation. Also, I do not see the 'Original Orion Alert' on the Alert Details page.

I'm able to edit multiple IP's. In IPAM, under 'Manage Subnets & IP Addresses' click the boxes next to the IP addresses you wish to change (or select the box in the heading to edit all of them on the page). Then, click the <Edit> button and a box appears with the fields to change. You may need to scroll down to see the…

This option should also be available when the template is assigned. That way, errors are not recorded immediately, before you have a chance to unmanage the components that do not apply to the particular server. Also, for n-tier applications that run on several servers, shouldn't there be ONE application monitor that gives…

You're close. Try adding the bold portion to the trigger ... left join AlertStatus on Nodes.NodeID = AlertStatus.ActiveObject where AlertStatus.Acknowledged <> 0 and acknowledgedtime > dateadd(mi, -2, getdate()) and ObjectType in ('Node', 'Wireless Controller') and Nodes.Caption like '*xxx*'

I've been working on an alert to do this myself (notify that an alert was acknowledged), but it doesn't work when there are 2 alerts for the same node since the NodeID is the primary key (I'm not sure how or if I can include the trigger name). Plus, this acknowledged alert generates another alert message for the node, so…

Let me start by asking, do you know which alert is causing an entry to be added to the log? If not, I used the query above to help identify the active alerts that corresponded to the log entry errors I received. You will need to modify the WHERE clause to match your situation. (For instance, I needed to find an advanced…

Related add-on: I'm not exactly sure if this is relevant because I haven't attempted it yet, but I have a situation where I have a job to unmanaged some applications from 11 pm until 6:30 am every day. We're getting ready to perform an application change, and I need to unmanage the same application all day Saturday, which…

So, will this also give us the ability to alert when the process IS running?

I could use this today!! I hope it will come with a Powershell script to silence a node based on an IP address or node name.

Can we also get a DOES NOT CONTAIN condition? OR logic (so we can contain an item to 1 query instead of having to setup multiples)? and a way to COPY a dynamic query. I'm dealing with some old systems and there have been numerous naming conventions. Thanks!!

OK. I still would like a recommended configuration given my scenario. I see others suggestions and think I'm going down the right path to get alerts and errors to the right folks, then I find out it doesn't interface with Alert Central.

btw, I had to do some more tweeking because this only works for Node alerts (where the alert type of Object = 'Node' or 'Wireless Controller'). It doesn't work for others (e.g., Interface, IPAM Networks, APM: Application, APM: Component, Volume, etc.)

I fixed the advanced alert. The culprit was with an APM:Application alert. I had a condition group of "..when NONE apply" and a condition of 'Last Booted has changed'. Once I removed that condition the errors stopped getting logged.

Add why doesn't it use the data already gathered in IPAM?

Thanks. I haven't written a script yet. Can someone provide the script & explain how I enter it into SolarWinds (or point me to the documentation)?. This is a WMI component. I know it would be in a template component, but how would I fill out each field?

We have shared computers and zero client devices. It would need to work for those too.

Thanks for the update. Our staff are using a different tool, so I won't be taking the time to re-try. Perhaps others that voted on it can try it for you. Thanks again.

I got it to work, even if there are 2 alerts for the same node!!! This might be a workaround for you until this is implemented. (I doubt it will work for 2 alerts for the same node acknowledged within 2 minutes of each other.) Here's the alert setup: 1. Set the alert to check every 1 minute. 2. Use Custom SQL Alert, using…

I believe that already exists in the alert trigger time field. I include this at the bottom of my alerts: Alert: ${AlertName} Triggered: ${AlertTriggerTime} Down time (in minutes): ${SQL:Select datediff(minute,convert(datetime,'${AlertTriggerTime}',120),getdate())} p.s. This message can be suppressed by acknowledging this…

If your comparing varchar datetime's, you'll want them formatted as YYYYMMDDSS. This might help http://technet.microsoft.com/en-us/library/ms187928.aspx to choose the correct format. Perhaps 111 is needed, instead of 1.

I changed it to BulkColumn on 12/19/2014 and the errors have reduced significantly. Thanks for all your help. Case# was 644272.

Well, it kinda worked. No error, but I'm getting the first 50 records instead of the last 50 .. even after I added the missing DESC at the end. However, I got it to work by faking it out by using this. (The 50000 will need to be large enough to get every event record for the node.) So, the subquery will do the sequencing &…

I'm not familiar with F5, but assuming there are multiple pools that are UP for the node, your reset is only check if at least 1 of them is up. Then it's resetting. You probably want to reset when there are NO pools down. If you want to be specific to the pool that triggered the alert, you may have to save the pool that…

I changed the SNMP from NONE back to BULKROW ... still getting some false down messages. Then I changed the BulkSize from 10 to 8. I still got another false down. [So I had 1 occurrence since 12/11/14, in the past 4 days.]. When I researched this last one, again, this line was in the log file ... ... [C742] WARN…

Another thing, we're using SQL 9.00.3042.00 Standard Edition SP2, which appears to be MS SQL 2005. There are some subquery restrictions Subquery Rules such as "ORDER BY can only be specified when TOP is also specified". I'm sure SWQL has it's restrictions too. I appreciate all your help. I think I'm going to leave out the…

Thanks! I'll let you know when we install 10.7.

SnmpProcessProbeSettings BulkSize="10" MaxProcessCount="30000" PollMethod="None" RetryCount="5" Timeout="40000"

Solution: By following http://www.fixkar.com/articles/kb/1137/ (which is a link in the forums.adobe article mentioned above) solved the issue. So to reiterate, we 1. Saved the registry 2. Used perfmon to verify none of the counters were displayed 3. Used exctrlst.exe to disable the 'Cold Fusion 9 Application Server'…

Oops! Add dv. to WHERE dv.F5_Pools_AvailabilityState = 3 (I fixed it above too.)