mesverrum · Observability Architect · ✭✭✭✭✭

Through the UI there is no ability to do this. With that said, I've used SQL in the past to clone views and move them around or duplicate them but doing that requires a pretty solid grasp of SQL and how Solarwinds works.

A guy on my team just wrote a bit of powershell to validate the most typical failure modes and then it shoots out an email. Easy to knock something like that out if anyone on your team knows powershell.

Orion is not an even correlation system normally. It doesn't have much in the way of built in methods for ingesting alarms from external sources except for by sending syslogs/traps to orion. The part where things could get a bit messy is that Orion would map the alert to the object based on the source IP of the event…

In Orion there's not really a scenario where you would need to copy an existing group and then replace the members. Just make a new group and put the stuff you want in it, ideally using a dynamic query to populate it instead of adding the objects in one by one.

An outbound test would usually be to use the component called an SMTP user experience monitor. I don't know off the top of my head what you would be checking to validate inbound mail, but if you can tell me how you would "know" that inbound mail was not working it would be a good lead and what to set your SAM monitors to…

Atlas is much older than the web based mapping feature, and it has always been pretty fussy about not showing anything unless it had ALL the possible information. I expect they wrote the newer feature to be a little more flexible, but it is pretty unlikely that there will be any work to back port that kind of thing into…

one trick I've used to turn a string into an integer is to do p.CurrentValue*1.0

Curious where you got the idea that this process was automatic? As far as I have ever seen the built in automatic map placement option is for nodes only, and does not use any custom properties but instead attempts to parse out the SNMP Location field on your nodes, as per this documentation: Place nodes automatically on…

You can filter that by doing a discovery against those nodes and on the section where you pick the interfaces to monitor just come up with an advanced filter. You can use string matches or come up with a regex. Might be as simple as just doing interface alias contains "To"

Getting a list of who the alert is set to go to is not terribly difficult, try this one. select ac.name as [Alert Name] , aa.categorytype , a.actiontypeid , ap.propertyname , ap.propertyvalue from orion.actionsassignments aa join orion.alertconfigurations ac on aa.parentid=ac.alertid join orion.actions a on…

Sounds like when you ran the configuration wizard on the new instance you did not point it at the correct database and it probably created a new one. Check your SQL server to make sure. Get support on the phone and they can walk you through getting it all sorted out.

I've never seen the subplot command used in a solarwinds resource, are you sure it is supported within the filters? Seems like it would be cleaner to just add 4 separate resources, one for each environment. 

Strange, in my lab polling engine gives the full range of node related fields, you may need to open a ticket and have support take a look at your system.

What type of object are you alerting on?

I'm only running the newer version right now but its basically been the same for a long while, on the left side make sure you have the correct options selected in the Show Variables For: pull down menu. Depending on the type of object you are alerting on there will be different ones you can select. -Marc Netterfield Loop1…

Using the volumeid's is probably a bad idea. Solarwinds generates a new volumeid for each disk that gets added to monitoring. You can see them by going to the volume details page and the last numbers in the URL string would be your volumeid. A year from now people would be hard pressed to figure out what volumeid #2943 is…

Orion doesn't allow the charts to be used for non time data series. For cases like that I might suggest using SSRS as outlined in this document Custom Reports with SQL Reporting Services That was written several years ago but none of the fundamentals have really changed much since then. -Marc Netterfield Loop1 Systems:…

You can map netpaths from any windows box with the agent installed on it to any destination that you like. It's only going to give you that fancy traceroute type info, so it wouldn't allow you to "poll" the node for cpu load or WMI metrics or anything like that but I have used it for things like tracking a hub/spoke…

I don't believe any documentation exists for bind updates, but since you guys use bind regularly within your environment do your admins have scripts that already push DNS info into bind from any windows hosts? I try to have solarwinds just fall into line with whatever process we already have in place and set up a script to…

In my experience it is determining packet loss exactly as you describe, based on just ICMP pings or SNMP/WMI if you choose those options. If your link has lots of contention then yes you probably will want to move ICMP and SNMP into higher classes of service to avoid tripping alarms and such in NPM. -Marc Netterfield Loop1…

Not that it will be of much help to you, but I had a similar problem once when I assigned a template to a group with like 5,000 servers in it. Seems like something went wrong in assigning the template to so many devices at once and it ended up double and triple assigning it before I finally killed the services and deleted…

So this is a link to a chunk of a script that I use all the time to build out a group/subgroup tree. MyPublicWork/AppAndAppRoleGroupBuilder.ps1 at master · Mesverrum/MyPublicWork · GitHub The idea is that I have a pair of node custom properties called Applications and ApplicationsRole, i also have those same property names…

Your wish list might be a bit messy without some custom sql/swql. Trying to stay within the GUI driven reports, there is a section of interfaces that shows the downtime history, although in the past when I tried to work with the data there it was a bit iffy so I stopped looking at it. That was when they very first added it…

Wmi and usb are pretty ugly to query, its not like a switch where you can just say, list off all my ports and tell me if something is plugged into it. Your machine will typically have a couple usb controllers, some internal, some external, and since USB allows daisy chained devices there isn't exactly a 1 to 1 relationship…

This is the query I use for charting this out per day select count(message) as [Alerts] ,datetrunc('day',timestamp) as [date] ,'Total' as caption FROM Orion.AlertHistory ah where eventtype=0 and daydiff(timestamp,getdate())<30 group by datetrunc('day',timestamp) order by date If you try to get more granular then there are…

I'm about to take off on a plane but wanted to point out that the join there on the sub query is a little dicey how it is now. They are likely to add other types of objects to the suppression feature eventually and when that happens your join is probably going to break. I'll try to come up with some error handling logic…

The app insight for sql template does not record historical fragmentation, but you would be able to create a custom template with sql user experience monitors to track fragmentation if you needed it charted over time.

What exactly are you trying to test regarding the lines? How much bandwidth is currently in use? What the max possible throughput is of the line? There are several types of tests you can do within Solarwinds depending on which modules you have licensed.

So the alerts engine is pretty robust, I've seen hundreds of alert definitions configured and contacts have told me about instances nearing 1,000 definitions. So you are pretty far from any limits. Where those limits are is really tricky and varies widely between environments. Think of it as each alert definition is a…

Have you tried just blanking out the thresholds? I don't have an environment handy right now to check if thats an option on those monitors but I do that often with other appinsight templates.