mesverrum · Observability Architect · ✭✭✭✭✭

I don't have a test environment handy to figure out the regex for you, but I will say that any time I am struggling with these I typically just take snippets of my config from ncm and paste it into http://regexr.com to write my logic against. At a glance it seems like your config block start and stops wouldn't be correct,…

individual components cannot be unmanaged so I would suggest you split the components that have schedules associated with them into their own App template. Once those are separated you can unmanage their application using the scheduled unmanage utility found on your main orion server. Schedule tasks to be stopped using the…

For servers not on the domain you might create the same local account on each system. In many cases I avoid using the SAM agent software because it is easier to poll with WMI where it is available, but these servers might be a good case to deploy agents on since administrating the accounts and permissions is possible to be…

As long as your new engine is running the same version as the old one was you are fine to keep the same dp, but depending on what version of SQL you run the new versions might also require you to upgrade the SQL instance, I believe 2014 is the earliest SQL version supported now.

So I've seen a few requests like this lately and due to the bug where the report tool won't accept SWQL with unions I figured I would see what I could put together using a SQL based report with some HTML embedded instead of the SWQL I usually use. Let me know if this does the job for you. Create a new report with a table,…

The SQL/SWQL variables in alert messages cannot display an entire table, they always only show the first column of the first row. There are tricks people use such as concatenating values into a single cell or using the for xml path command in SQL as discussed in this thread and others, SQL variable definition to return…

I use this beast of a query to check a bunch of my thresholds if you want to use it as a model. Getting the component thresholds from SAM is a real pain as there are many tables of info to parse out, but it can be done if you take some time to poke around in SWQL studio. select n.caption as [Server Name]…

I've worked some pretty large Solarwinds deployments and though you should be prepared that if you are trying to operate at the scale you will need to become a Solarwinds expert very quickly, or get some on staff. Things will get complicated and administrating 3 instances can easily be the kind of thing that ends up taking…

Try this one in a custom query on your node details page. I set the logic so that it displays the critical icon if the last backup is older than a day, but depending on how frequently you save your configs you may need to adjust the line with the case on it. SELECT ca.NodeProperties.Nodes.Caption, max(downloadtime) as…

In the api there is a verb to clone a view, that creates a new view with all the same numbers of columns and widths and in the same viewgroup, which makes it a new tab, but it has no resources. Then there's also a verb for copy resources into a view. The nice thing if you aren't a powershell user you can call those verbs…

I'd suspect you need to wrap the variable in single quotes

This is a stripped down version of the query I use for tracking that kind of thing. You can paste it into the web based report writer as a custom swql datasource and it should work out for you. If you need more info about snmpv3 or wmi credentials then things get a bit more complicated but this should get you started. If…

I don't believe the process poller tool is set up to collect user account info. Your best bet would probably be to set up a custom Powershell script that collects those stats and the account info and run that as the action of your alert.

So there are a couple layers to this, it is pretty easy to trigger on nodes that have no custom pollers assigned to them. So if you wanted to set something up like notify my whenever an APC UPS has no custom pollers on it then I would do it this way. Go to a new alert and set it up like so: You can get as fancy as you want…

I haven't looked into the training material yet, but troubleshoot Orion at scale is no joke. I hope this test is serious because if it covers the real nitty gritty details and underlying architecture then it could be extremely valuable. If it gets to being on par with a fresh SWI help desk tech then I won't think it's…

Oh jeeze, this feels like a can of worms

To make your BI integration more future proofed you would probably want to take a look at the Solarwinds SDK documentation to make calls to the API. Going directly to the SQL means you are more likely to have things break when Solarwinds makes changes to the tables in future versions. Using the SDK the info you are looking…

The easy answer is that they were all 3 developed by completely separate companies and acquired by Solarwinds. In practice they have lots of overlap but I would say the main differences boil down to these Kiwi - locally hosted, 2 million messages per hour LEM - locally hosted, 16 million messages per hour (given a powerful…

That should be pretty easy to accomplish using the custom Powershell components

When you say you "turned on" the routing poller, what do you mean? The discovery interval is once every 3 hours by default, so it could be that it just hasn't taken effect yet. I can think of two places where you might have turned it on in bulk, either going to Settings > Manage Pollers > Routing > +Assign or with a SQL…

This can be done using the SAM module, Create monitors for processes, services, and performance counters - SolarWinds Worldwide, LLC. Help and Support -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

Just use the report section to create a report listing all the properties you need from of all the nodes in your environment. At the top right whenever you run a report there is an option for export to Excel.

Jpegs work fine for importing as a background file. Found this in an admin guide for Network Atlas: Supported formats l Graphics Interchange Format (.gif, non-animated) l Tagged Image File Format (.tiff) l Joint Photographic Experts Group (.jpg) l Microsoft Windows Bitmap (.bmp) l Portable Network Graphics (.png)

From past experimentation with this concept there cannot be a LB between the pollers and agents. The pollers themselves have to be expecting the agents, if they receive traffic from an agent they aren't assigned to in the DB they won't do anything with the data. In the DB each agent can only be assigned to a single polling…

So in Orion you need to use custom properties for the majority of your sorting/filtering tasks. In this case you say you have some groups and you want to exclude them from alerts, coming up with logic to make that happen is a pain without a custom property. Add a new property, tell your alert to only apply to nodes where…

You method is roughly how I would do it as well. Regarding the part where it makes a mess to intermingle your alerts you can assign an action from another alert, copy the action and then remove the shared action. That way I can use them as fairly fast templates but don't have to be afraid that a change I make will mess up…

You can use a custom powershell script to check for the logged on users, filtered for the account you want to check. Set up a condition where if the account is not it should exit with a 1 (Down), otherwise exit with a 0, you will need a statistic but honestly for a simple check like this you could just hard code in any…

That kind of logic can't be done in the alert GUI, would have to be a custom sql/swql alert condition.

Netflow reads packet headers, so in this case you are probably going to have to break this into some chunks. Initially looking for traffic where the destination is the cluster's load balancer VIP. Then look for traffic where the destination is each of the nodes in the cluster and the source is the load balancer. I'd…

WMI was a bit flaky before server 2008 (and even back then is wasn't that bad of an issue), but this has long since been addressed in any modern releases. If you are using SAM I find that WMI becomes significantly preferred over SNMP for windows boxes, because you can tell SAM templates to inherit the same domain…