mesverrum · Observability Architect · ✭✭✭✭✭

Not being specifically familiar with that tool, here is a couple articles my colleague, mrxinu , wrote about using the API with postman, which should be conceptually similar https://loop1.com/swblog/using-the-rest-api-to-get-the-most-out-of-solarwinds-part-1/…

I would suggest you start with an SNMP walk of the node to see if the results you are getting match up to the OID's found on page 110 of the VNQM admin guide https://support.solarwinds.com/@api/deki/files/23107/VNQMAdministratorGuide.pdf If you can't see any obvious problems with that then I would take that information and…

Oriondemo is pretty restricted regarding changes, allowing random users from the public internet to hit the api and make changes to the live system would pretty much guarantee that it would be a wreck every time you tried to use it. Installing your own copy of the IPAM eval is free for 30 days and could really be done on…

Might need to handle this at the policy level, as in say that particular rule only applies to xyz machinetypes. Might take a bit of testing to figure out which devices you need to exclude but thats the usual method for rules that don't apply to every device.

The out of the box groups are just there as a placeholder or to give you a sense of what you can set up for yourself. You are very much encouraged to create you own groups. You would have to define them as a range rather than CIDR address blocks. To your specific question about DNS, I could see building up a group with all…

So it is using string matching and some strings are messier than others. City could be matching with capacity, for example, you can try to narrow it down by putting spaces around city maybe but that might or might not work depending how the fields are written

This is the stack of SQL queries I use to make reports on properties that i want to delete: --views and resources SELECT cp.Name as [Property Name], v.viewgroupname, v.viewtitle, r.resourcetitle, r.resourcename, rp.propertyvalue FROM sys.columns cp left join [dbo].[ResourceProperties] rp on propertyvalue like…

Can't just divide the result by 10 and live with the extra precision?

There is no workstation classification, it is server/network/other. Functionally this classification controls if certain widgets related to appstack and the agent will show up on the node details page since that stuff doesn't apply to network devices. Since a workstation is basically like a server not a switch for the…

I can't think of an easy native way to make this happen but perhaps something could be worked up in SQL as a trigger perhaps that would apply the conversion to the relevant cells. I found this article on how to recast a hex value as a datetime within SQL. http://stackoverflow.com/questions/7580700/microsoft-hex-dates…

Pretty certain that the new tool doesn't retain the varbinds as separate objects, they just all get clumped together as "message" -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

You most likely have an OR condition in the query somewhere, whenever i see things that i know I'm explicitly excluding I start double checking my OR's. There is a table in the db called statusinfo if you ever need to join it in to display statuses in english instead of as codes.

If you apply a template it will inherit whatever components are in that template, including their enabled status. There are a lot of approaches people take to SAM templates, you could clone the prod template and disable the components you don't need and make that into a "non-prod" version of the template, or you could go…

Since you are alerting on a node you shouldn't need the node. part of any of those variables. If the alert object was a child such as volume or interface you have to specify that you are changing from the object to it's parent node using that dotted syntax. anyway I would try going from ${N=SwisEntity;M=Node.Caption} to…

1) 2) I think the main things I still use in Atlas that I couldn't do in the new maps are custom labels, custom tooltips, and being able to select and delete connections that I don't want the map to display. Would be good to just have some kind of "hide this connection" at least. 3) I find that the main value add in…

Short answer, yes to all of those. Essentially, SAM can monitor anything that you can figure out how to find a metric for. It has built in templates for most of the things you mentioned, but some of those might require custom script based monitors, for example there are a few kinds of script monitors on thwack for tracking…

under the ncm settings you can create new config types. Each config type is really just a set of commands you want it to run and record the output, so i have set up new config types for various show commands i was interested in tracking/parsing. After you create a custom config type you need to edit the device template for…

this is supported out of the box with cisco stacks, just discover them in npm and it should collect the info

You can use the escalations exactly as you describe, but I would stretch the time for the escalation to be 2 polls plus whatever time it takes to reset your alert (if you use the no longer true reset condition you don't have to add time, but if it has to be up for 10 minutes before the alert clears you would want your…

To see processes you have to have agents installed on their workstations as those events only exist in the local machine logs

This is for my lab environment, it holds multiple copies of small instances of Orion, ARM, patch manager, and WHD, so its a little messy, but none of these baby environments has more than maybe 50 nodes in them so it's not a great example of a stress test, just a datapoint for a small system. Page Writes/sec Current Value…

SNMP does store bits in/out as a constantly incrementing counter so if you had a big enough burst of traffic you would see it on a bytes sent/received chart, but obviously this wouldn't have super granular visibility into very brief spikes, just shows a sort of average between polls. That's about as good as SNMP would give…

So the thing about this is that there are a pretty wide range of system requirements based on your environment, how many solarwinds modules you are planning to run, and your tolerance for slow websites. Throwing it all on a single server with just NPM and NTA for 50 nodes is probably doable, but if it runs slowly then you…

where nodeid=${nodeid} will work on any node details page

All API calls are going to get routed through the information service, the information service is ALSO where the website gets most of it's information as well so they are basically competing for resources. In the past I have found it was beneficial for me to point API jobs at one of my APE's since those would usually have…

just add WHERE Interfaces.Agreement is not null

There is no really efficient way to see in the database which views are in use or not in use. Views can be tied to user accounts, there can also be rules defined for views by machine type, or views by applications in SAM, and at the individual object level you can over ride the settings and specify a view to use, plus…

For the node reboot alert, essentially that one just looks at the device boot time and triggers if it ever changes, trying to build a timeout condition would involve some much more complex SQL logic where it check the new boot time, looked for down events in the previous 5-10 minutes and only trigger when there was no down…

Don't recall specifically off hand which one you are looking for, but here are some relevant links https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2014/03/10/hidden-gems-in-orion-network-a… Show us your Network Atlas maps and get 500 thwack points! Rock The NOC​ MAPPING: TRANQUILIZE YOUR…

The SIEM does not do any filtering as it would undermine it as being the one source of truth and all that, it just tries to keep up as best it can. It is possible that the appliance might be overwhelmed by an unusually high volume of incoming messages coming from a lot of devices and the devices sending the messages could…