mesverrum · Observability Architect · ✭✭✭✭✭

Actually here you go, this SWQL query has all the relevant parts and joins to be able to roll your own github.com/.../undp

I can't recreate this scenario with the things I have access to, but i can tell you that you would need to use custom swql/sql variables and join the data for those three custom pollers on the nodeid and the row id. If I come across some code that I can use to get you closer I'll throw in another comment, but I have done…

You can't, they are internal for SW staff.

NTA doesn't have any capabilities to associate an IP with a username. In theory its possible to do such a thing, but NTA doesnt have it as a feature.

Curl is already installed by default by microsoft for most current releases of desktop windows. But yes you can install it on server.

I don't love the built in alert action to post to a website, it always seems to be a little bit more limited than whatever I am working on. A way that might save you a lot of head scratching would be to just use that Run a program action to execute curl.exe, that way you can probably just snag the exact curl syntax to use…

If I'm tracking what you mean by the 'purpose of the equipment' I will often see something along the lines of a device type, although sometimes that gets a little tricky when vendors release new hardware that crosses multiple niches, but we eventually figure out how we want to categorize those devices. When it comes to…

I've been using Applications, and ApplicationsRole, and AssignmentGroup in my custom property scripts for a long time and it falls into the same train of thought you are talking about. Servers don't just exist for no reason, they are all supposed to be running some kind of application and there ideally would be someone in…

that query was written to use in the Custom Query widget on a dashboard, you'll notice line 34 has a where condition with all those ${Search_String} filters, you can comment that out if you arent using it in a search box

This bug is supposed to be fixed in the 2024.2.1 release that just came out, but i haven't had a chance to test it personally yet.

SQL/SWQL doesn't have a native function for converting masks between cidr and binary formats. When I've had to do this I've either exported lists out to excel and used a function there or written one directly in powershell scripts.

Orion does a really bad job of cleaning itself up when a node gets replaced with a new piece of hardware. The conventional recommendation is to delete the node and add it in fresh any time you replace the underlying system so that you dont get a bad mix of old and new data. There a certain fields that are set upon the…

I'm not entirely sure what the table you are presenting is supposed to be saying, is that the statuses of the components under each instance? You should not expect them to be the same unless they were just mirrors of each other, the appinsight template builds the relevant components based on the setup of your SQL instance.

This is the SWQL I use for my custom query widget that reports all my alert activity for the last 30 days, its not 100% what you asked about but it has most of the details and all the relevant tables are already joined if you wanted to expand on it. https://github.com/Mesverrum/MyPublicWork/blob/master/SWQL/Alert%20SLA

I feel like they peak Veeam era might have passed, it used to be everywhere but I haven't seen it at any of my big enterprise customers in while. Have you done an SNMP walk against the veeam appliance to confirm that the OID's you are looking for actually show up. I can tell you from painful years of experience that just…

There is is a comment on the latest release notes about "perstack reflects correct time" so perhaps this was addressed? documentation.solarwinds.com/.../solarwinds_platform_2024-2-1_release_notes.htm

I can say that a few big cruise lines use Orion, but they are closer to an office building that kind of moves than a drone would be. The use sat uplinks one the move and get plugged in for a big data sync when they get to ports. Looking at more of an IoT use case, there are a couple considerations. Can the thing even be…

Just one more reason why I never recommend anyone use the dynamic baseline, the number of ways it can bite you are much higher than the number of ways where it proves to be useful.

^ this is the key, in the perf stack and in the custom charts if you try to plot a series with a high number of data points it automatically summarizes them before you see them by averaging the real data out. The real underlying data is in the DB as @"antonis.athanasiou" mentioned, but the charts wont show more than 300…

The shortest way to answer this question is, how would you identify that from a PoSH CLI? I'm expecting this is going to be something you need use a custom powershell component to check.

I've seen people report on thwack in the past that their status text didn't update appropriately and got stuck. Have you rebooted your system since you noticed this issue?

Just to be sure, are these site specific dashboards legacy views or modern? The relevant query would depend on that First one would show classic views, replace the filter in the where condition with whatever naming convention you use to identify your sites, maybe just like '% Office' based on the choices you presented…

This should help you thwack.solarwinds.com/.../sql-query-to-view-all-enabled-alert-and-its-action

I dont recall what the choices are in the subfield drop down, but i expect it should be something like message?

SNMP is terrible about passing in firmware versions in a format that lines up cleanly with published CVE data. How are you doing your further inspection? By connecting to the device and checking from in there or by looking at the description data that SW actually has access to? I would expect it's probably a regex match…

The release got delayed, i think its supposed to come out next week now.

For fun you can add anything you want to the settings menu bar via either of these scripts and it will only show up for admins https://github.com/Mesverrum/MyPublicWork/blob/master/AddCustomMenusInteractively.ps1 https://github.com/Mesverrum/MyPublicWork/blob/master/AddCustomMenuSettingsLinks.ps1 The only limitation is…

Oh i didn't actually look into your eventid, but yeah upon further inspection there does not appear to be an event for service deletes. There are a few that might happen for an uninstall but sc delete is not really uninstalling software, just removing it from the services.

The swagger has every solarwinds api function listed out, go here and look for things under /Invoke/Cirrus.PolicyReports/ solarwinds.github.io/.../

My first thought is you probably made it an interface property and not a node property, that's why it worked for the ootb node property of City but not your new one. Depending on which widget exactly you are talking about the syntax for an interface property might be different, or it might not be allowed at all. You'll…