mesverrum · Observability Architect · ✭✭✭✭✭

I don't have the db open in front of me but its just something to the effect of join trapvarbinds on trapvarbinds.trapid = traps.id or it might be traps.trapid, the db naming conventions are a little bit inconsistent sometimes.

When you set up the UNDP on the orion server it asks you which column in the same table it should use to display the label info, whatever you select for that column is what it will display.

Just an FYI to everyone, i just got several reports that in 2019.2 the custom chart resource breaks if you use a custom sql/swql data source. That's a deal breaker for my use case because i love those things.

The agents do not support being associated with multiple polling engines. Your backup systems would have to use agentless polling such as SNMP/WMI

Alerts don't "come out of ack state" ever on their own. Once someone acknowledges it it stays that way forever unless the alert resets or someone clears it manually and then it triggers again. I think what you are experiencing is the alert being reset and then a new instance of the same problem triggering and sending out…

I've had to resolve this before for people, the default setup only waits 10 seconds for the page to load before generating the screenshot it uses to make the pdf. Open a ticket with support and they can walk you through it, but in your main orion folder there is an exporttopdf.exe.config file with a "conversiondelay"…

Start here Product Upgrade Advisor | SolarWinds Customer Portal It complained to me when I put sql 2008 in there, so you'd have to do some digging to figure out which step in the process you would need to move the databases, you will likely have to step through at least 1 or two intermediate sql versions. Are you planning…

Unfortunately there is no super easy way in the GUI to bulk edit those volume thresholds. If you use the manage nodes screen you can check the boxes for them all and set the thresholds for more than one at a time, but you still have to do a lot of clicking around and there is no search for volumes button. For things where…

A couple points to correct, SRM is not the Solarwinds tool for monitoring linux script results, SAM is what you would use for that. There is already a component available designed specifically for monitoring Nagios checks so that migration is typically pretty painless. Your understanding of how views work in Solarwinds is…

It's likely going to be a real mess to do so because the Cisco hardware OID's don't give you much to work with there to correlate a hardware sensor to a specific interface except the name, but even those aren't always exactly the same format so trying to match them across might be an exercise in building patterns like…

Those resources are intended to be used on a Node Details type of view, and it looks like you have them on something else.

I find that the search is very hit or miss, some clients it will execute not problem and give me the values instantly, others it just spins forever. I know how to find most of the variables manually so I just don't use the search anymore because I hate having it stall out while a client is watching me. Doesn't seem to be…

Can't offer a solution, but just want to point out that you are not alone, i had a few clients lately who have HA pools that just randomly die until a service restart brings them back. As an interim solution we just scripted a stop and start of the services every night and that seems to keep them healthy during the rest of…

So this is a bit tricky. Appinsight does collect the values from the error log, but it doesn't tie them to the job normally. Depending on the details of the job error messages if you can find something in the string you could so something like joining all the error messages that were logged after the start time of the job…

So the way I would do this is to add a section to my script that adds a note to the alert via the SW API. Then just have an escalation that waits a minute or two and then writes the ${note} to the event log, but depending on your goal you might not even need to event since the data you want is already in the system as an…

If your interface has a bandwidth defined solarwinds will automatically pick that up and scale the capacity of the link and have the correct percent utilization. Aside from that there is also an option if you edit the interface you can check the custom bandwidth box and manually specify the amount you want it to use for…

In a case like this I would first be curious how many interfaces are in your NPM instance? Do you have a SQL index defragmentation job scheduled?

It's pretty variable, sometimes I need an hour in the queue, other days I put myself on speaker phone and plan to go do some other things and am surprised to find someone answering in 15 minutes. Would be nice if the support line occasionally updated you with an "average wait time is currently XX" so you can just prepare…

Use this in a custom query resource in the web console, sounds like it has everything you are looking for --report on alerts triggered select ac.Name ,ah.Message ,'/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:'+ToString(AlertObjectID) as [_linkfor_Name] ,EntityCaption as [Trigger Object] ,EntityDetailsUrl as…

How much bandwidth you use is really dependent on how many devices there are in a given subnet and what protocols they answer to, but it will always be pretty small. To get a sense of scale, I checked in on a server I used for a discovery earlier today, we tested 900 addresses while still doing our normal monitoring of…

If you can ping it from the server where SW is installed then SW can ping it, if not then it won't work. Are you trying to ping private ips in your network or a network that you do not have a route to?

Your "does not contain" section should be AND's, i would be surprised if a message comes through that isn't true for at least one of those OR conditions.

There is an out of the box alert for interface utilization with top talkers that can use, just search top talkers on the manage alerts page and you should find it. 

Since a single report can cover as many policies and rules as you want to put into it that raises the question, how exactly do you have your set up that are you getting more than a small number of reports? In any place I've ever worked on the reports we usually settle on one roughly one report per vendor, but technically…

Yeah you can do that how you described. Set a custom property, select all interfaces where property is 'X' and then when you get to the part where you pick the columns I'd just go to the interface traffic history category and select total bytes received/transmitted or whatever other metrics you need from the historical…

Done many server 2016 installs, never seen a problem like that. Is windows firewall maybe a factor?

No netflow tool would have all of that info. Netflow protocol only reads packet headers and headers don't contain user info. You can get source IP and Port, protocol, destination IP and port, and bytes/packets counters IN_BYTES1Ingress bytes counterIN_PKTS2Ingress packets counterPROTOCOL4Layer 4 protocolL4_SRC_PORT7Source…

It depends on the device you are monitoring, for the majority of equipment at reasonable polling intervals the answer is almost none, but there are other devices where it is quite measurable and significant. Some examples would be large network switches with hundreds of interfaces, or load balancers with a high number of…

The way the solarwinds devs have written things you can typically assume negative values represent some kind of internal status. In the case of CPU a "-2" means the device is not being polled for CPU. You should go to the devices where you see the negative value and try to list resources to see if the CPU poller is…

That column is a string because lots of UNDP devices report strings in their responses. You can tell your alert to treat it as an integer by changing from the "current Value" to the Current Numeric Value" in your alert logic. You might also be able to do the same thing on the table but I don't recall for sure.