mesverrum · Observability Architect · ✭✭✭✭✭

Most companies have some kind of internal process documented for how they handle SSL certs, but roughly the work flow would be similar to this guide IIS 8 and 8.5 SSL Renewal Instructions -DigiCert.com You might have an internal cert server that you would submit the request to, or you may use one of the third party…

Definitely would open a ticket with support, seems like your install has some kind of bug

The screenshot you posted is not expected behavior in 12.2, I have similar resources on my node details view and they are resolving the variables as expected. I've run into this kind of problem in the past and it has usually been resolved by a progression of troubleshooting things like restart services, reboot server, run…

Orion has a pretty write intensive database with a nonstop stream of small inserts, and SQL AAG forces you to use full recovery model in SQL, which is slower as all write operations have to be pushed to all members of the cluster and each member needs to write the transaction to their log and send back a confirmation…

SWQL was a lot less fleshed out in 2015, i suspect you might have better luck just converting those queries back to SQL. In fact I know that the oldest one that I personally saw was written in SQL and I converted it to SWQL to build many of the ones that float around thwack now.

VMAN was a completely standalone virtual appliance that gathered virtualization metrics. VIM is the virtualization polling component that Solarwinds developed do virtualization polling from within the core Orion NPM/SAM software, historically this was just a subset of what VMAN could do. IVIM was the name for the…

There isn't a verb for it, but I've used update operations to do this. There are actually a couple tables that look like they could have the right info on them but if I recall correctly the correct one for your purposes is going to be ipam.subnets

I think you are probably making this more complicated than it has to be. Unless you have multiple routes to the remote site then both the node and the firewall would show as down when the firewall goes down, so your first scenario will never exist. The second scenario is effectively just a node down alert for the far end…

From the screenshot use critical value reached = true, it will be aware of your custom threshold for each interface and react appropriately.

Muted devices should already be suppressed from new alerts by being on that alert suppression table, you shouldn't have to add additional logic. Are you saying that your muted nodes are still triggering alerts?

The web based report writer has the capability to display any of the resources you see on the summary pages. On the Add Content section where you normally choose either a chart or a table you can just click the available resources in the left section of the page and you can find one you want. -Marc Netterfield Loop1…

Without UDT Orion doesn't track historical MAC's in the db as far as I can think of, so it doesn't really "know" when the value has changed. You could probably cook up a sql database trigger so that any time the value changes it generates an event that you can alert/report on but short of getting into the db itself I'm not…

Any polling engine can receive traps, no specific requirement that it would have to be any polling engine in particular. Just like sja​ mentioned, it isn't uncommon for people to get really overzealous about shooting a high volume of messages at their Orion. It is not built to be a SIEM so you do want to control the volume…

So the out of the box alert views aren't very filterable as you have probably noticed, so to get that kind of effect you usually end up building something using the custom table resource. If you get really fancy I could see cooking up a SQL/SWQL resource that only shows the highest severity of the alert and disappears it…

Are you able to do any other linux templates on that node, such as polling for a process or running a script monitor? Does the agent currently display all the cpu/memory metrics and such that you would expect? I would want to kind of start from the beginning, is the agent working for just it's native functions, then narrow…

It's used by the info service. I've never seen it get anywhere near that large, I would be really surprised if other things are not basically broken in your environment. Do you run HA or many APE's or AWE's or EOC? Some or all of those features are likely to be broken right now if the pendingnotifications are stacking up…

I expect you would need to add a separate query just getting the count with none of the machinetypes listed, and then look over the google pie chart documentation to see what they say about additing that total section. The might not support it inside the chart in which case you might just add it to the html as another…

Well since its a cloud thing what exactly are you trying to monitor? I wouldn't expect them to expose SNMP over the internet, most likely you would need to access some kind of API with custom SAM scripts, similar to how it's been done with Office 365 and Meraki.

In most cases I only turn on the full IIS monitoring when there is some kind of performance expectation from a site. Internal services that dont get a lot of users and nobody really cares about are fine to monitor with just a simple http(s) check. I always try to focus alerts on things that someone is going to actually…

In a past life I was a network engineer with a company who had a complete rats nest in their switch closets and from time to time a user would call up saying their workstation wouldn't connect anymore. These workstations were hard wired up and didn't move around so with UDT it tends to be pretty easy to get them to give me…

I don't have an example of the code for this kind of table handy, but basically you are going to need to start of with your base query showing the nodes, then for each column you join in the undp value columns for each custom poller metric you are collecting. As long as all the UNDP's are single rows this is pretty easy,…

If your edge device supports it NBAR2 is another netflow-like protocol that Cisco has that gives more granular information about conversations, but in this case it sounds like you already know what the endpoint the hosts are connected to is, so it really is more of a question of pinning down what processes on those…

You will need to set up a FIM monitor Set up File Integrity Monitoring -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

Is the script set to remote execution or local? Does the node in question have the agent installed?

In Solarwinds you can get hardware health directly from the guest OS as long as you have the dell omsa software installed and you don't have to do anything extra. If you want to gather those stats directly from the IDRAC interface then you will need to use what they call a Universal Device Poller to gather the stats from…

The virtualization drop down only shows up with VMAN integration, there is smaller virtualization view that is part of the default home menu that you may have removed at some point once you added vman.

First of all you should not be putting npm and sql on the same server. The application will not let you connect to two databases at the same time. It is a pretty major hassle to try and merge two databases so I traditionally pick one of them to keep and one to to delete, copy over any custom…

Most of the things in Node Details are not from Solarwinds but are polled values, things like the location and contact have to be configured on the device itself and can't normally be directly filled out from inside solarwinds. If you are working with custom properties you can import those from sql by going to Settings >…

No, the agent needs to be installed on all domain controllers to really have anything close to decent coverage. In most cases you also want to install it on all servers to capture their local events, and depending on your policy may also need to be installed on all workstations.

I'd start at the Settings page and go to Windows Credentials and confirm his data isn't in there, most of the modules also have their own separate credential libraries so depending on what you have installed you could check under the different product specific settings pages to be sure. -Marc Netterfield Loop1 Systems:…