mesverrum · Observability Architect · ✭✭✭✭✭

Comments

  • I've never tested tightening up the interval, it could help but as you indicate you might want to test how your network behaves under the increased frequency. Some devices can get kind of fussy if they have larger mac tables to send. The usual form of headache would be the cpu of the management plane maxing out for a few…
  • I'm kind of curious if anyone has bee able to use config change templates in the last few versions. I rarely use them but the last time I tried i couldn't get any of the ones that i know worked in the past to actually work, so I just pivoted and did what I needed through powershell. Never circled back to figure out if I…
  • The thing to keep in mind about the green attributes in SWQL studio is they aren't exactly "real" in the database. They are constructed by the information service when you query it, so they don't really have to behave the way we might expect. I tend not to use them as the basis of anything important. I wouldn't be…
  • The back end tables of UDT are chaotic. The simplest way to think about it is that UDT is collecting a slice of data from at least 3 completely different types of sources, and to make it worse each of those sources is on a different polling schedule so "latest" data from one might not be latest anymore when comparing…
  • VMAN stores historical resource usage of the individual VMs and of whole clusters, so you can do either way fairly simply using the GUI report builder and just creating two charts, one for the current time period and another for the previous month. There isn't a widget for directly overlaying two time spans over the top of…
  • The latter, swql is just the format of all the stored data from Orion. I will mention that pingdom and appoptics are actually a different set of products and don't have an internal query language we can access
  • In the database the identifier column fo nodes is called nodeid, it just increments as things are added to the system. So for me to decide which side of the connecting I alert on and which side I suppres I would just do a min(nodeid) in my query and whichever one is lowest will alert. You could get more specific but that's…
  • I'll throw in the comment that the API uses SWQL, which is slightly different than SQL. So seeing the actual SQL from the DB can be be kind of misleading about the actual query one would need to write to get data from the API.
  • You have touched on the truth of the matter, despite having a few products they acquired over the years that are kind of in the security space, and despite what the marketing team wants to pretend, SolarWinds has never been a serious security solution vendor. So I guess not showing up to Blackhat (or any other particularly…
  • That network path stuff didn't used to work the way it does now, it was just a local folder on each polling engine and I feel like maybe the change in behaviors has broken the variable for ${SCPStorageAddress} in the PA template. I don't have any of those devices to test on but if it was me I would edit the device template…
  • The KPI widget is just a way to display any single value. It could be a right now kind of measurement or an average/min/max/whatever depending on how you set up the underlying query to populate it. SW doesn't have a histogram widget, but in a modern dashboard (i'm assuming thats what you are using since its the only place…
  • Never seen that happen before and it makes it look like something has gone wrong inside your database. The machine type is supposed to get populated based on the SNMP sysOID the device presents, it's totally automatic and shouldn't have a lot of room for someone to screw it up.
  • In SolarWinds you don't pull data from the report, you need to just query the raw data itself and basically do the same thing that the report does. With zero knowledge of solarwinds it is probably going to be really hard for you to write the necessary query on your own. You'll probable want to start with this blog post to…
  • The topology polling interval is 12 hours by default as it can be very taxing on the vcenter server. I tried to find a doc talking about it but it's not mentioned anywhere in the current admin guide anymore. thwack.solarwinds.com/.../allow-custom-polling-intervals-in-vman
  • Interfaces are already dependent on their parent node by default, but something the timing of polling intervals can cause some to slip through and get alerted if SW happens to notice the interface is down earlier than it polls the node. For your second scenario it would require both sides of the connection to have their…
  • You shouldn't needs SWQL for something straight forward like this. The entity should just be Nodes, and then presumably you just add in the caption and maybe ip and whatever other attributes you want. The GUI report and table builders can handle this.
  • Do the servers have the Dell OMSA tool installed on them? Its a requirement for most hardware health sensors on physical servers. documentation.solarwinds.com/.../sam-asset-inventory-and-hardware-health-monitoring-requirements.htm
  • Did some googling and it looks like SolarWinds doesn't usually go to blackhat, at least they have never been mentioned or promoted having a booth there anywhere that I can see. So I guess the question is why would you have expected them to be there?
  • Yes, since neither vendor has made an official integration for you then there will be some level of basic coding involved to roll your own. Or you can contract people like @"HerrDoktor" and others to do the coding for you, if thats not something you are equipped for.
  • just looks like whatever text that you would get back from the CLI if you ran the command yourself.
  • Just pulled the device template from my lab to see what the commands it looks like it is trying to run will do. At a glance it looks like device state is a binary, so have you set up a file share for binary storage and did you set your connection profile to use SCP and have all that set up on your server?…
  • Unfortunately NCM scripts aren't dynamic in the sense that you can't tell them to log into a device, run a show command to get all the strings and then initiate a loop to remove all the strings that were found The entire text of the script job has to be calculated before the NCM job will begin. What I typically see people…
  • No need for custom swql, can do business hours filtering in the GUI easily enough support.solarwinds.com/.../Use-Report-Manager-to-configure-business-hours-in-web-based-reports
  • This is the answer, those other config types should not be applied to a PA
  • You can do all kinds of show commands by adding config types https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-enabling-a-new-config-type.htm Once you create the config type you'd need to edit the device templates so it knows what commands you want to run when you ask it to get the "snmp user" config…
  • I see all those values are available from SNMP, have you set up a Universal Device Poller to collect them yet? https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-external-monitoring-implementations-12-0-0/14.html…
  • You can validate this from your windows workstation fairly easily. copy the whole thing into the ISE and just set the $url manually and delete the exit 0 line, then run it. Presumably you will get the same numbers for the statistic and you can just highlight each variable and print them to the screen by pressing F8. You…
  • might help if you could be more specific about the problems you are having? I've moved 3 environments from 2024.1 to 2024.2 lately and none of them had anything noteworthy come up.
  • I always delete those widgets from my environment because i don't like that they don't give any visual indication that the data is potentially very very stale and inaccurate.
  • Well it sounds like an undocumented use case, so yeah I guess you could open a ticket. I thought you were asking how to do admin tasks from SSH but it sounds like you mainly just have a security use case to cover/close.