mesverrum · Observability Architect · ✭✭✭✭✭

Assuming the servers are physical then it can help with ensuring they show up as being connected to the l3switches/routers you are monitoring, but these days they almost always are virtual and so they show up as connected to the vswitches and almost nobody monitors their vswitch since it can't really "fail" so you probably…

Have you installed the desktop client on your machine? This is from the NPM Admin Guide: Playing a Sound The Play a Sound action uses the SolarWinds desktop notification client to play the sound on your computer when an alert arrives. You must download and install the client on every computer that you want to play a sound…

My first thought is that the view you are using on your snmpv3 profile is probably not including the OIDs for hardware health. One simple way to check would be to set the device up to use a v2 community string and see if you are able to add the hardware health to the List Resource. If that exists in v2 and not in v3 then…

I can relate to the frustration, I can hardly think of a reason to remove the feature in that way. It's a pain to be forced to change something that was working fine, but on the plus side it's pretty easy to convert SQL to SWQL, in most cases I can convert back and forth in under 5 mins. The only places where it gets a bit…

The only way to collect those kinds of source/destination/protocol metrics on a per packet basis would be doing wire monitoring with a network tap tool like Netscout or similar products.

So swis doesn't present this data directly, but one work around would be to invoke the executesql verb in the api to use the orion service account to run the necessary sql commands. This thread mentions the command and has an example, Add custom created tables to swql? I haven't tested if these specific stored procs will…

SQL is not very efficient at tweaking the presentations but this particular one is doable, depending on your tables might take a longer time to execute. For those monthly aggregate values, are you using averages or peak values? Try this query to get averages Select v.node.caption as [Node], v.Caption as [Volume],…

Are you previewing? Those values only populate when the alert actually triggers because there is no link to an alert that hasn't fired yet.

IPAM tries to gather hostnames from SNMP, so the first low hanging fruit is to make sure that all the appropriate community strings have been added to the IPAM settings (this is completely separate from the list in NPM or other parts of orion)

The retention periods are not able to be set on a per node basis, only the polling intervals and thresholds are able to set to override the global values. -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

I've run into this problem as well, accidentally moved like 7000 servers to a single APE and caused a mountain of havoc. I want to say that the issue was supposed to be fixed in the latest releases but I haven't tried it again in a couple months.

I just took a look at the PA documentation for their SNMP MIB's, overall it looks like the kind of information you are asking for doesn't show up. You can get things like the HA state of the appliance and several local stats, but the panorama SNMP tree doesn't look like it includes information about related devices or…

I believe variables like that only resolve in NCM when they are used as part of a config change template. All other areas of ncm are just straight text entries

I don't have any active conflicts to check against in my lab right now, but this logic should be a place to start You might end up needing to filter down the conflict message to get the specific type of issue you described, but this logic should cover all types of conflicts easily enough to start.

The variables used on the trigger conditions don't get put into the database in a way that would allow for your to reference them unfortunately. What I generally do for cases like this is instead of using a basic condition like "volume space used over 90%" i will use a double value comparison set up like so: Then i just go…

For some reason the default view associated with a unknown models of devices is the one for wireless AP's. Go to settings>Views by device type, find Unknown and change it from "Wireless Autonomous AP" to "Node Details" -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems…

Lots of ways to do this, but the simplest way to me would be to create your custom property then set up an alert rule has a condition saying "AddedDate" is blank, reset when no longer true, the action would be set custom property to ${N=Generic;M=Date;F=Date}

Type the name of your question into the search box and I think you'll find at least a dozen threads with solutions. I usually use a custom swql query resource for this one.

You would need to give a lot more information to give am accurate estimate. Assuming a basic deployment with nothing fancy and the admin is already familiar with solarwinds then you could be planned and deployed in a day. On the other hand I just migrated a very large customer off another server monitoring tool, lots of…

The feature is called dependencies, you define a parent and children and if the parent goes down then orion stops polling all the children. Can do 1 to 1 relationships, or use groups to do 1 to many or many to many, or many to 1 (but that last one is probably uncommon)

The features that were only available in the appliance are still only available in the appliance, if you still intend to use them then I would not really expect anything to change on your end. This whole integration seems to mostly be focuses on adding new features to the orion polling so that you no longer require the…

Unless you have a switch that is configured with a hostname of "switchname" then it is likely that whoever set up your email alerts and tried to call a variable but did it wrong and ended up hard coding in those values, probably as a placeholder until they figured out how to do it correctly. First step, check your active…

Thad, I'm having a hard time understanding your question. By their nature the dependencies are designed to suppress alerts on child objects NPM knows that the parent is down. Instead of marking them as "Down" they are marked as "Unreachable" and no further attempts are supposed to be made to poll them until the parent…

Off the top of my head, when you change the shell does the prompt change? You can modify device templates to recognize a different prompt like so https://support.solarwinds.com/SuccessCenter/s/article/Adjust-modify-or-change-a-device-template-used-for-NCM-when-the-prompt-is-just-a-or

No preview is available, if you enable it then it creates all the dependencies it can and they all have "auto" in the name. If you do use it then you would need tor eview the links it thinks it found for errors. A common mistake I've seen is when it shows POE wireless ap's as the parent of their switch.

I think the first aspect of that is that a few of those don't generally warrant an email in my view. Most of those events I just display in a dashboard or periodic report. Node down = potentially urgent, I take those in emails. Power supply down, I'm assuming is part of a hardware health alert, I just throw all hardware…

There are software solutions that you can look into that act as Flow data forwarders that can typically do this for you, some basic ones are free and more advanced capabilities typically require a software purchase. Solarwinds does not sell one of these, but here is one free one you could try GitHub - sleinen/samplicator:…

If you are using plain text for your alerts then fonts are all handled in your email client, if you are using html the default fonts are still handled in your email client, but you at least have the option of setting your alerts up like mine <font face="comic sans ms" color="red">This is an ALERT!</font>

Seeing as they only added substring and charindex to SWQL pretty recently I wouldn't be surprised if the logic for the alert tool does not include them. This feels like a lot of work to not just have a second custom property though, one for just the email address and another for anything else you wanted to include.

So if I read this correctly you are looking for events in the last 7 days? Or do you need to be more granular like between specific hours on those days? The way you are doing it seems unnecessarily complex for someone starting out in SQL. SQL is complaining because it doesn't recognize the string you fed it is supposed to…