mesverrum · Observability Architect · ✭✭✭✭✭

You can filter that by doing a discovery against those nodes and on the section where you pick the interfaces to monitor just come up with an advanced filter. You can use string matches or come up with a regex. Might be as simple as just doing interface alias contains "To"

Getting a list of who the alert is set to go to is not terribly difficult, try this one. select ac.name as [Alert Name] , aa.categorytype , a.actiontypeid , ap.propertyname , ap.propertyvalue from orion.actionsassignments aa join orion.alertconfigurations ac on aa.parentid=ac.alertid join orion.actions a on…

Sounds like when you ran the configuration wizard on the new instance you did not point it at the correct database and it probably created a new one. Check your SQL server to make sure. Get support on the phone and they can walk you through getting it all sorted out.

I've never seen the subplot command used in a solarwinds resource, are you sure it is supported within the filters? Seems like it would be cleaner to just add 4 separate resources, one for each environment. 

Strange, in my lab polling engine gives the full range of node related fields, you may need to open a ticket and have support take a look at your system.

What type of object are you alerting on?

I'm only running the newer version right now but its basically been the same for a long while, on the left side make sure you have the correct options selected in the Show Variables For: pull down menu. Depending on the type of object you are alerting on there will be different ones you can select. -Marc Netterfield Loop1…

Using the volumeid's is probably a bad idea. Solarwinds generates a new volumeid for each disk that gets added to monitoring. You can see them by going to the volume details page and the last numbers in the URL string would be your volumeid. A year from now people would be hard pressed to figure out what volumeid #2943 is…

Orion doesn't allow the charts to be used for non time data series. For cases like that I might suggest using SSRS as outlined in this document Custom Reports with SQL Reporting Services That was written several years ago but none of the fundamentals have really changed much since then. -Marc Netterfield Loop1 Systems:…

You can map netpaths from any windows box with the agent installed on it to any destination that you like. It's only going to give you that fancy traceroute type info, so it wouldn't allow you to "poll" the node for cpu load or WMI metrics or anything like that but I have used it for things like tracking a hub/spoke…

I don't believe any documentation exists for bind updates, but since you guys use bind regularly within your environment do your admins have scripts that already push DNS info into bind from any windows hosts? I try to have solarwinds just fall into line with whatever process we already have in place and set up a script to…

In my experience it is determining packet loss exactly as you describe, based on just ICMP pings or SNMP/WMI if you choose those options. If your link has lots of contention then yes you probably will want to move ICMP and SNMP into higher classes of service to avoid tripping alarms and such in NPM. -Marc Netterfield Loop1…

Not that it will be of much help to you, but I had a similar problem once when I assigned a template to a group with like 5,000 servers in it. Seems like something went wrong in assigning the template to so many devices at once and it ended up double and triple assigning it before I finally killed the services and deleted…

So this is a link to a chunk of a script that I use all the time to build out a group/subgroup tree. MyPublicWork/AppAndAppRoleGroupBuilder.ps1 at master · Mesverrum/MyPublicWork · GitHub The idea is that I have a pair of node custom properties called Applications and ApplicationsRole, i also have those same property names…

Your wish list might be a bit messy without some custom sql/swql. Trying to stay within the GUI driven reports, there is a section of interfaces that shows the downtime history, although in the past when I tried to work with the data there it was a bit iffy so I stopped looking at it. That was when they very first added it…

Wmi and usb are pretty ugly to query, its not like a switch where you can just say, list off all my ports and tell me if something is plugged into it. Your machine will typically have a couple usb controllers, some internal, some external, and since USB allows daisy chained devices there isn't exactly a 1 to 1 relationship…

This is the query I use for charting this out per day select count(message) as [Alerts] ,datetrunc('day',timestamp) as [date] ,'Total' as caption FROM Orion.AlertHistory ah where eventtype=0 and daydiff(timestamp,getdate())<30 group by datetrunc('day',timestamp) order by date If you try to get more granular then there are…

I'm about to take off on a plane but wanted to point out that the join there on the sub query is a little dicey how it is now. They are likely to add other types of objects to the suppression feature eventually and when that happens your join is probably going to break. I'll try to come up with some error handling logic…

The app insight for sql template does not record historical fragmentation, but you would be able to create a custom template with sql user experience monitors to track fragmentation if you needed it charted over time.

What exactly are you trying to test regarding the lines? How much bandwidth is currently in use? What the max possible throughput is of the line? There are several types of tests you can do within Solarwinds depending on which modules you have licensed.

So the alerts engine is pretty robust, I've seen hundreds of alert definitions configured and contacts have told me about instances nearing 1,000 definitions. So you are pretty far from any limits. Where those limits are is really tricky and varies widely between environments. Think of it as each alert definition is a…

Have you tried just blanking out the thresholds? I don't have an environment handy right now to check if thats an option on those monitors but I do that often with other appinsight templates.

Nothing out of the box will be able to do that. I see this request somewhat frequently and I think the best way to do it at this point is to use a custom HTML widget with javascript inside it that will take the array of SWQL rows and parse them into something you can feed into one of these types of things: Collapsible…

The icon for an unmanaged node icon change sometimes lags by maybe 30 seconds, but any longer than that and I would interpret that as the script not working as intended. You also could do something like add a custom query resource to the view to spot check what the database has for the node you are looking at select…

Wish any of my clients had SCM

Regarding the SQL 2005, alterego addressed that question here in 2014. Does anyone know why AppInsight isn't Supported on SQL 2005 SP4? Essentially SQL 2005 was already out of support before Solarwinds ever came out with the appinsight concept so they never wrote it intending to be used on software that was already past…

You just click the add data series and select the data you want to chart out, looks like it would probably be usedspace in this case. You'll have to specify the name of the time column, obviously you'd pick timestamp. Group by and Legend shows should both be physicalname

CourtesyIT​ is probably best suited to explain how to get your policies up to date since he write the NCM templates for them.

Yeah for at least a bit, it could also indicate that you had 100% packet loss for about a minute and then the system came back online before Orion marked the node as down.

When doing the interface discovery part you can click down to advanced and there is a section for setting up rules like excluding interfaces that have a description that includes a string, I would use that and just set up rules to exclude each of the vlans you don't want. Just hit reselect once your criteria are in place…