mesverrum · Observability Architect · ✭✭✭✭✭

From the screenshot use critical value reached = true, it will be aware of your custom threshold for each interface and react appropriately.

Muted devices should already be suppressed from new alerts by being on that alert suppression table, you shouldn't have to add additional logic. Are you saying that your muted nodes are still triggering alerts?

The web based report writer has the capability to display any of the resources you see on the summary pages. On the Add Content section where you normally choose either a chart or a table you can just click the available resources in the left section of the page and you can find one you want. -Marc Netterfield Loop1…

Without UDT Orion doesn't track historical MAC's in the db as far as I can think of, so it doesn't really "know" when the value has changed. You could probably cook up a sql database trigger so that any time the value changes it generates an event that you can alert/report on but short of getting into the db itself I'm not…

Any polling engine can receive traps, no specific requirement that it would have to be any polling engine in particular. Just like sja​ mentioned, it isn't uncommon for people to get really overzealous about shooting a high volume of messages at their Orion. It is not built to be a SIEM so you do want to control the volume…

So the out of the box alert views aren't very filterable as you have probably noticed, so to get that kind of effect you usually end up building something using the custom table resource. If you get really fancy I could see cooking up a SQL/SWQL resource that only shows the highest severity of the alert and disappears it…

Are you able to do any other linux templates on that node, such as polling for a process or running a script monitor? Does the agent currently display all the cpu/memory metrics and such that you would expect? I would want to kind of start from the beginning, is the agent working for just it's native functions, then narrow…

It's used by the info service. I've never seen it get anywhere near that large, I would be really surprised if other things are not basically broken in your environment. Do you run HA or many APE's or AWE's or EOC? Some or all of those features are likely to be broken right now if the pendingnotifications are stacking up…

I expect you would need to add a separate query just getting the count with none of the machinetypes listed, and then look over the google pie chart documentation to see what they say about additing that total section. The might not support it inside the chart in which case you might just add it to the html as another…

Well since its a cloud thing what exactly are you trying to monitor? I wouldn't expect them to expose SNMP over the internet, most likely you would need to access some kind of API with custom SAM scripts, similar to how it's been done with Office 365 and Meraki.

In most cases I only turn on the full IIS monitoring when there is some kind of performance expectation from a site. Internal services that dont get a lot of users and nobody really cares about are fine to monitor with just a simple http(s) check. I always try to focus alerts on things that someone is going to actually…

In a past life I was a network engineer with a company who had a complete rats nest in their switch closets and from time to time a user would call up saying their workstation wouldn't connect anymore. These workstations were hard wired up and didn't move around so with UDT it tends to be pretty easy to get them to give me…

I don't have an example of the code for this kind of table handy, but basically you are going to need to start of with your base query showing the nodes, then for each column you join in the undp value columns for each custom poller metric you are collecting. As long as all the UNDP's are single rows this is pretty easy,…

If your edge device supports it NBAR2 is another netflow-like protocol that Cisco has that gives more granular information about conversations, but in this case it sounds like you already know what the endpoint the hosts are connected to is, so it really is more of a question of pinning down what processes on those…

You will need to set up a FIM monitor Set up File Integrity Monitoring -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

Is the script set to remote execution or local? Does the node in question have the agent installed?

In Solarwinds you can get hardware health directly from the guest OS as long as you have the dell omsa software installed and you don't have to do anything extra. If you want to gather those stats directly from the IDRAC interface then you will need to use what they call a Universal Device Poller to gather the stats from…

The virtualization drop down only shows up with VMAN integration, there is smaller virtualization view that is part of the default home menu that you may have removed at some point once you added vman.

First of all you should not be putting npm and sql on the same server. The application will not let you connect to two databases at the same time. It is a pretty major hassle to try and merge two databases so I traditionally pick one of them to keep and one to to delete, copy over any custom…

Most of the things in Node Details are not from Solarwinds but are polled values, things like the location and contact have to be configured on the device itself and can't normally be directly filled out from inside solarwinds. If you are working with custom properties you can import those from sql by going to Settings >…

No, the agent needs to be installed on all domain controllers to really have anything close to decent coverage. In most cases you also want to install it on all servers to capture their local events, and depending on your policy may also need to be installed on all workstations.

I'd start at the Settings page and go to Windows Credentials and confirm his data isn't in there, most of the modules also have their own separate credential libraries so depending on what you have installed you could check under the different product specific settings pages to be sure. -Marc Netterfield Loop1 Systems:…

in the database you will find the credential under apm_componentsettings IIRC, it'll have a key like "__credentialid" roughly, and an integer. I want to say that -4 is inherit from template, -3 is inherit from node, and any actual number would map to a credentialid on the credentials table where the credential is listed as…

It's been on my to do list to re-write a discovery script I have to make it look at the existing nodes and just build a rediscovery of existing nodes like "whatever filter i want" I'll update the thread with it when I get done, it's not terrible complex if you just rework any of the existing examples of a discovery script…

NCM saves a text copy of all the configs as it collects them to your polling engine by default, you could just copy that entire folder Where are the configs stored locally on the NCM server - SolarWinds Worldwide, LLC. Help and Support

There is a possible spot in NCM Settings > Config Settings > SNMP Config Transfer Timeout Default is 4 min

So the problem you are running into it kind of common with SNMP tables, the name/description you are looking for probably lives on some entirely different table than the one that has your attenuation values. The GUI for that tool really only lets you pick label columns that are in the same table, but if you can find the…

Did you try CPULoad > '90' and (Vendor Like 'Cisco' OR Caption Like '*SWNPM*' OR Caption Like '*UPS*')

All of the above. The way Windows handles interfaces with multiple ip addresses is to convert all the source ips and destination gateways to binary and then compare them to see which has the most bits in common and then pick that as the source. There's a post by aLTeReGo i believe where they explain how to specify the…

This was kind of a beast to wrangle up since the newer version of the alert tables are a little cryptic. This is was written to be used as a Custom Query resource SELECT ac.Name, ac.Description, ac.ObjectType, ac.CreatedBy, aa.CategoryType, a.ActionTypeID, a.DescriptionFROM Orion.AlertConfigurations acjoin…