mesverrum · Observability Architect · ✭✭✭✭✭

Not sure what you have in mind exactly, but this is the swql query I added to my node details page to display all the messages from that node. SELECT MessageDateTime, isnull(ms.Caption, ms.IPAddress) as Source, Level, Message FROM Orion.OLM.LogEntry le join orion.olm.MessageSources ms on ms.MessageSourceID =…

Packet loss is tricky one because it isn't measured the same way as most other metrics. Orion does packet loss as the rolling average of the last 10 pings, when the node is up it only sends a single ping every 2 minutes (assuming default settings) and if the node doesn't answer a ping it goes into fast polling and sends a…

So you are looking for a place to unencrypt snmpv3 credentials it sounds like, the short answer is that there is no way to pull that data back out of current versions, it was stored in plain text years ago but that has since been fixed.

Click edit node and the community info shows up there.

When it comes to adding or removing monitored objects in Solarwinds it is safe to assume nothing is automatic. You will need to delete the mounts from the node where they show down and you will need to list resources to add the drives on the newly active server. As a general rule with clustered systems like that i would…

So I've been looking at your recent posts and was confused about the errors you are getting until just now it all came together. Are you are using SSMS to create SWQL reports??? The views in SQL tend to be similar to what ends up in SWQL, but there is absolutely not a 1 to 1 relationship. You should be writing queries…

I'm not sure why you couldn't get the post action to work as you described because I have set up a similar scenario at a client office before where we routed alerts to different slack channels based on including the different web service info as a custom property. I think if you experiment with it you may be able to form a…

strettle​ has a pretty good guide to doing this, Routing Neighbor state view resource.. valid for NPM 10.7 another approach is this one from alexslv​ Know Your Routing Neighbours I have my own query that I use for this but their links come with guides -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional…

If you can't terminal into a device and work with it on a command line then you won't be able to do anything to it with NCM. I don't know the SG200-300's specifically but if they don't support any kind of remote command line they won't work with NCM. -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional…

The best way to stumble through these is just to install SWQL studio on your workstation and use it to connect to the orion sever with your normal orion logon credentials. Then you can browse all the tables and come up with queries. Trying to do it without SWQL studio is hugely painful, nearly impossible.

In addition to the other suggestions given already, I would suggest you enable session tracing to help your troubleshoot the issues. The trace files can be a little hard to parse initially but basically they are showing you exactly what NCM is doing and how it is interpreting the responses it gets from your devices. That…

Those two never show up in test/previews because there is no corresponding alert to match up to in the system. Just add them and when it fires a real alert they should populate fine.

Danielle, first step is making sure you have the SWQL Studio program installed, debugging these things is near impossible without it. Get it as part of the SDK here Releases · solarwinds/OrionSDK · GitHub The error messages you get in that tool are much more helpful than the query failed one the web console provides.…

For this metric there is no threshold, it goes into warning any time the non-preferred server has the database mounted. I find it is generally best to not even trigger alerts on warnings and I also prefer to only trigger at the component level, not the overall application, but your environment may vary. 

SWQL didn't do the recursion because it doesn't support creating a CTE

Whenever something strange seems to be happening in UDT i always go to the source, use SNMP to query your device under all of the scenarios you tested. If somehow cisco is restricting the output of their devices based on the security setting then Solarwinds is only going to show the information they present, and the place…

You must have skipped past the option where it gives you the choice between a local or external db (its one of the first screens and people miss it often). You an remove it but be careful as some of the sql objects in the add/remove programs wizard need to be there in order for orion to talk to your external db.

I think a much easier way to do this, with no custom code required, is just to use the date summarizing feature that is built in. Add your caption, ip, current cpu, and the historical avg/min/max cpu and their timestamp. Then a bit below where you picked the columns is a box that defaults to something like "no…

There's an api command under orion.activealert for clearing alerts, so you could definitely cook something up there, but I think maybe there is a simpler GUI based way to do it. Something like a custom reset condition where something like if the current component availability last polled timestamp was between 1-1:05 pm or…

All script based monitors require a statistic as part of the outputs, this article covers it pretty well The Basics of PowerShell (part 3)

So the web based reports don't really do well with identifying the absence of something,but its pretty easy if you use a custom swql source for your report. Create web-based reports using SWQL in Orion platform - SolarWinds Worldwide, LLC. Help and Support select n.caption, n.vendor, a.name from orion.nodes n left join…

Each time you apply a template to a node it creates a new instance which you can customize, go to the application on each server and there is an Edit Application button, click that and there is an option to disable any components you want.

Custom Table does not support any of those fun things unfortunately. I think I saw a bug on the forum a while back where the Solarwinds devs were aware of the issue that ${nodeid} should be failing their syntax check on the custom table resource but wasn't.

What kind of view are you on when you are seeing that error? Macros like ${Nodeid} don't work on summary views because they aren't associated with particular nodes. If you try to build a custom table on a node details view it has a check box to use the current object as the data source, which is functionally the same as…

Looking at these I would be curious, is your events table unusually large? Has the database maintenance been running successfully? There was a bug running around a bit ago where certain conditions would cause people to have a crazy amount of noise in their events table, I wonder if some variation on that issue is what's…

I don't have a stack switch handy to test on, but if you are finding that this alert works for servers and not switches it could be that stacks are storing their loads on a different table. Can you search the cpumultiload view for the nodeid of one of your stacks to confirm it shows up in there? Also, it might be a more…

Is it just random devices all over or are there a few common culprits? I just ask because if its completely random then it will probably be a lot harder to pin down. I'd expect you are probably on the right trail, snmp itself is not really that complicated. Like you said, you review the captures and can see pretty clearly…

You can just go to the trigger actions tab of the alert and click the insert variable button and it will display the list of all the variables that are available for that object type. I don't know that anyone has compiled this info in any kind of master list, given that there would be tens of thousands of them to search…

How frequently is this template running? The GUi would show you the last polled value, the test is right now. Might have to force a poll or wait until the next interval to see the updated stats on the GUI.

Not to derail you completely from what you are working on using Atlas, as that is still probably the easiest way to accomplish what you are looking at, you can direct java queries toward the following address /Orion/Services/Information.asmx/Query where you would use JSON formatting something like this {query:'SELECT Name…