mesverrum · Observability Architect · ✭✭✭✭✭

Don't have any devices handy to validate with, but you might need to use this <Command Name="UseExactPromptMatch" Value="true" /> documentation.solarwinds.com/.../ncm-command-template-commands.htm

From a command line or any logs can you verify this? In the past when talking to citrix admins they didn't seem to know if ways to verify this sort of thing except by actually watching a user log in.

You are pulling them from the wrong table. If I recall correctly the ones that are stored in the format you show are in alert configurations, because that's where it stores the template of the message when you build an alert. What you should be pulling from is a field on alert history where eventtype = 0 because that is…

I was starting to write some sql to parse the trigger conditions the other day, but then I remembered that it is xml nested inside of reformatted xml and it made me mad and I had to walk away. Even after making a couple passes to convert, trim, replace, convert again it's not like raw xml is the "best" format for users to…

It's not a service, that's why you can't add it as one. It's an iis application, so the simplest answer would be to set up appinsight for iis on that server. 

Unfortunately there is not a containerid 1 that hold the top level groups, they are just the ones that arent in any other container (or the container they were in gets deleted). In the past ive done it where i got my list of all the containers where their containerid doesn't show up in a subquery that grabs the object id…

Depends on how old your license is. On the legacy component based SAM licenses each component counts against your total, but on the newer licenses sold over the last several years it is one license per monitored server. For those it does not matter how many components you collect or how many templates you use.

yeah unfortunately the way tags work is not really compatible with how SW does custom properties. Making a restricted key value pair kind of setup line up with a free form text situation was going to be ugly no matter what they did. If it was me i'd have just gone with a large string containing all the tags for any given…

This might get you closer i think SELECT distinct n.DisplayName AS [Node Name] , so.[VM Service Owner] , oo.[Org Owner] FROM Orion.VIM.VirtualMachines AS n LEFT JOIN ( SELECT Distinct name ,CASE WHEN m.containerID = '218' Then 'DBA' WHEN m.containerID = '217' Then 'BICC' WHEN m.containerID = '219' Then 'Finance' WHEN…

Might want to open a case with support, I'm sure this sort of thing lives in the config files of the appliance but they keep it pretty locked down so we arent able to actually crawl around in there to find them without support cracking it open with us.

So your case conditions are keyed into two different situations. the uk-lon vm exists as separate lines in the containermembers table in the db because it is in two separate groups, 225 and 228. A single entry seems like it probably wouldnt be in both groups, so in SQL terms this is not a duplicate since the same…

This code example looks like it should be pretty close, assuming you change the settings to suit your environment instead of their hard coded values like the credential to use github.com/.../create_discovery.ps1

I haven't seen anyone post code to add a vcenter programmatically, since that tends to be pretty close to a one time procedure for most environments. As best I can tell this looks like the relevant api endpoint, but it sometimes takes some experimenting to get the syntax of the request right.…

Install SWQL studio on your workstation and use it to connect to your solarwinds server. SWQL studio will provide a GUI for you to learn how the tables are structured and helps in writing/testing queries to get whatever it is that you need. The SW API is unusual in that it is really just a thin wrapper over the raw…

From SSMS you can see the query that forms any view a few ways, but i like this way Right-click the view. Select "Script View as" > "CREATE to" > "New Query Editor Window" stackoverflow.com/.../sql-views-how-to-determine-underlying-tables

To start, you can build IP address groups in the NTA settings. https://documentation.solarwinds.com/en/success_center/nta/content/nta-managing-ip-address-groups-sw272.htm So an important thing to know about netflow is that only a very limited collection of Cisco hardware support collecting flow data on layer 2 connections.…

If I was you I would just open a ticket with opengear and get them to confirm where the config file is, or if the name changed or whatever. Or even just ssh into it and try to navigate around and look for the file yourself. The commands in the template are fairly straight forward, its just doing basic linux operations to…

https://documentation.solarwinds.com/en/success_center/kct/content/system_requirements/kct_3-12-3_system_requirements.htm The requirements are pretty light. Cat tools is intended for network gear. It supports custom devices so if you really wanted you could rig it up to do things on any server that responds to SSH, but…

Its under polling settings documentation.solarwinds.com/.../core-polling-intervals-sw1826.htm

your detailed retention settings are probably still at the default of 7 days, after 7 days you only have hourly averages so it shows the gap. You can edit the chart so the sample period is an hour and the gaps would go away, but you would lose detail during the 7 days.

The historical track record is solarwinds devs don't even look at a feature until it becomes a dominant market force. Considering ipv6 is still barely in use at any SMB (by far most SW customers are pretty small operations) you should not be surprised that IPAM hasn't caught up with it. I don't ever recall seeing any…

oh yeah, so whoever made that template wasn't using the built in alert variables for some reason, im not even sure why. Probably they were trying to get too fancy with SQL. Good lesson for you and others, don't do that unless you are equipped to debug changes to SQL on each release. Probably you could take those templates…

So to be accurate, you arent trying to pump data from your prometheus into solarwinds, you are trying to get solarwinds to scrape a prometheus style collection of metrics? Like you mention, it's doable via custom scripts. There could be a world where SW eventually releases something akin to an appinsight template that…

Using the normal GUI it would need to be two separate tables. One would have the distinct list of all the node captions from the hardware table, and the second widget would have the captions from the software asset inventory. Or you could combine both into one widget using SWQL and left joining each table with something…

I think an alert is making this harder than it has to be, especially if its only expected to check once a day. I've handled this two ways in the past. In my own environments I set a bunch of sql triggers directly in the database tables. If a node gets added to the system that matches whatever criteria then a corresponding…

Did you try those alerts and find that they didn't work in some way? I can't think of much that has changed in the world of alert variables since then.

So as far as I can tell Microsoft doesnt appear to expose an API with anything interesting in terms of performance or availability monitoring. It just gives you admin and reporting functionality. So if it was me I would just start out by using SAM to monitor my ability to connect to the Entra endpoints that my users depend…

Just to throw in a potentially useful tool in the thread, there are some widgets in my admin dashboard specifically for seeing and editing which credentials are used in npm and Sam thwack.solarwinds.com/.../viewexporter-ps1

Dont take this as a sarcastic respond, but chatgpt is awesome at bash. It can probably solve this for you 10 seconds flat Based on my domain knowledge that chatgpt might not have, everything after the . needs to be predicable. If you create a new string for that on the fly SW wont accept it. You have to preview the outputs…

havent seen that problem in particular, but you might try repairing/reinstalling the modules on the server. Most of the data in the inventory reports doesnt come from SNMP, so mib walk itsn't really relevant to the topic, but if you are able to the collect backups then that tells us the ssh creds are legit and it might…