mesverrum · Observability Architect · ✭✭✭✭✭

I'd suggest you try it in regular SQL, only because I know for a fact that a client of mine was using a SQL case logic to determine the recipient of their messages. It has been over a year since I saw their environment so its also possible that doesn't work in current releases but it did back then.

I've been pushing the consolidate behind a single instance, as long as your instance will stay under about 100k elements total. I've worked with big clients who had 150k so even that ceiling is not a hard cap, but they had to do a lot of fussing around to get there. EOC is still a work in progress in my opinion, Right now…

The first value you referenced, the volume poll interval, is basically just and up down status check and happens every 2 min by default. No other metrics are collected at that time. The statistics polls are every 15 min by default and this is where you would be getting things like the disk space used and disk sec /…

Try this: List of NPM, NTA, VNQM MIBs and OIDs used for Polling - SolarWinds Worldwide, LLC. Help and Support

First of all confirm within the individual machines that your computers are currently logging successful user logons (this is not turned on by default in most Windows environments). The vast majority of times when people can't find a particular event in LEM I have them jump into the source directly to see if those events…

These are the instructions you followed with the portecle application? Configure DPA to use a custom certificate for SSL/TLS - SolarWinds Worldwide, LLC. Help and Support Those instructions contain all the relevant info, if you did it and it was not successful then just go through the steps again and make sure you are not…

Unfortunately there isn't a resource for including web based reports in your view, you essentially have to use the custom table resource to create the same thing as was on the report. In many cases for things like this I just make a list of links to the report I already have to save myself from duplicating my work.

The problem you will run into is that if you don't have SAM your database won't contain any of the tables that Orion stores that information in. It would be possible to build your own integration database and link it to the Orion db and create custom tabs with all kinds of custom SQL resources, but you would basically be…

Sadly there is not a method in place for bulk editing the alerts like that, you are going to end up having to edit them 1 by 1 in the GUI. Going directly to the SQL would likely take so long to develop and have a relatively high risk of failing that unless you have somewhere over 100+ alerts to configure then you won't…

Assuming you haven't modified the views it does show it under the Node details, it is listed as part of the "Appstack Environment" resource. If you want to come at it from the other side and see a list of all the groups and their child objects you should go to the Home>Groups view and look for the "All Groups" resource and…

Not sure what you have in mind exactly, but this is the swql query I added to my node details page to display all the messages from that node. SELECT MessageDateTime, isnull(ms.Caption, ms.IPAddress) as Source, Level, Message FROM Orion.OLM.LogEntry le join orion.olm.MessageSources ms on ms.MessageSourceID =…

Packet loss is tricky one because it isn't measured the same way as most other metrics. Orion does packet loss as the rolling average of the last 10 pings, when the node is up it only sends a single ping every 2 minutes (assuming default settings) and if the node doesn't answer a ping it goes into fast polling and sends a…

So you are looking for a place to unencrypt snmpv3 credentials it sounds like, the short answer is that there is no way to pull that data back out of current versions, it was stored in plain text years ago but that has since been fixed.

Click edit node and the community info shows up there.

When it comes to adding or removing monitored objects in Solarwinds it is safe to assume nothing is automatic. You will need to delete the mounts from the node where they show down and you will need to list resources to add the drives on the newly active server. As a general rule with clustered systems like that i would…

So I've been looking at your recent posts and was confused about the errors you are getting until just now it all came together. Are you are using SSMS to create SWQL reports??? The views in SQL tend to be similar to what ends up in SWQL, but there is absolutely not a 1 to 1 relationship. You should be writing queries…

I'm not sure why you couldn't get the post action to work as you described because I have set up a similar scenario at a client office before where we routed alerts to different slack channels based on including the different web service info as a custom property. I think if you experiment with it you may be able to form a…

strettle​ has a pretty good guide to doing this, Routing Neighbor state view resource.. valid for NPM 10.7 another approach is this one from alexslv​ Know Your Routing Neighbours I have my own query that I use for this but their links come with guides -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional…

If you can't terminal into a device and work with it on a command line then you won't be able to do anything to it with NCM. I don't know the SG200-300's specifically but if they don't support any kind of remote command line they won't work with NCM. -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional…

The best way to stumble through these is just to install SWQL studio on your workstation and use it to connect to the orion sever with your normal orion logon credentials. Then you can browse all the tables and come up with queries. Trying to do it without SWQL studio is hugely painful, nearly impossible.

In addition to the other suggestions given already, I would suggest you enable session tracing to help your troubleshoot the issues. The trace files can be a little hard to parse initially but basically they are showing you exactly what NCM is doing and how it is interpreting the responses it gets from your devices. That…

Those two never show up in test/previews because there is no corresponding alert to match up to in the system. Just add them and when it fires a real alert they should populate fine.

Danielle, first step is making sure you have the SWQL Studio program installed, debugging these things is near impossible without it. Get it as part of the SDK here Releases · solarwinds/OrionSDK · GitHub The error messages you get in that tool are much more helpful than the query failed one the web console provides.…

For this metric there is no threshold, it goes into warning any time the non-preferred server has the database mounted. I find it is generally best to not even trigger alerts on warnings and I also prefer to only trigger at the component level, not the overall application, but your environment may vary. 

SWQL didn't do the recursion because it doesn't support creating a CTE

Whenever something strange seems to be happening in UDT i always go to the source, use SNMP to query your device under all of the scenarios you tested. If somehow cisco is restricting the output of their devices based on the security setting then Solarwinds is only going to show the information they present, and the place…

You must have skipped past the option where it gives you the choice between a local or external db (its one of the first screens and people miss it often). You an remove it but be careful as some of the sql objects in the add/remove programs wizard need to be there in order for orion to talk to your external db.

I think a much easier way to do this, with no custom code required, is just to use the date summarizing feature that is built in. Add your caption, ip, current cpu, and the historical avg/min/max cpu and their timestamp. Then a bit below where you picked the columns is a box that defaults to something like "no…

There's an api command under orion.activealert for clearing alerts, so you could definitely cook something up there, but I think maybe there is a simpler GUI based way to do it. Something like a custom reset condition where something like if the current component availability last polled timestamp was between 1-1:05 pm or…

All script based monitors require a statistic as part of the outputs, this article covers it pretty well The Basics of PowerShell (part 3)