mesverrum · Observability Architect · ✭✭✭✭✭

Hopefully not to derail you entirely, but why would you create a report like this in RW? there's nothing there that couldn't be done in the Web based reports. Sooner or later SW is going to stop carrying that legacy 32 bit RW into new releases so it doesn't make sense to build new content that relies on it.

It would seem that your NTA is doing netbios lookups for an address that it saw in the environment. I looked up that address and it is a Mikrotik router, those were recently known to be compromised as part of a bot net so i wouldn't be surprised that it is probing your environment and NTA is trying to look up a name for…

A few ways you can do this. If you know that these are the only rows you need and they would never change order then you could set up separate UNDP pollers for 1.3.6.1.4.1.476.1.42.3.5.3.2.1.4.1, 1.3.6.1.4.1.476.1.42.3.5.3.2.1.4.2, 1.3.6.1.4.1.476.1.42.3.5.3.2.1.4.3 and 1.3.6.1.4.1.476.1.42.3.5.3.2.1.4.7 Otherwise you poll…

You should edit the page settings for that view and double check what resources you have on the page. If you see anything that might have a name with anything relating to pcu/power then go ahead and remove those widgets from the view, I wouldn't expect an NTA vew to need any of those widgets and those are the ones that…

You basically cannot do that through the GUI. Unfortunately the grouping function in orion isn't easily tied to alerts. What is generally easiest is you should create a custom property that will track these nodes for you, and then you can go to the custom property editor and one of the options you will have in the drop…

In the past when I have had to deal with this the workaround I used was kind of a mess but it gets the job done, way faster than typing in 700 values by hand. Create the custom property you want to populate the drop drown for, but don't restrict the values yet. Grab a list of as many IP addresses as you need for your…

You can script to launch the exe and parse the return code using any of the script monitors.

A lot of the templates provide relatively more 'robust' monitoring than you absolutely need if you are license constrained. As an example, for internal websites or things that aren't under active development the appinsight for IIS template is 30 licenses and gives way more metrics than most monitoring teams really need.…

I think your NOC users are misunderstanding SAM, it is not a ticketing system so it has no mechanism for assigning anything to anyone. If they try to use it as a ticketing system they are probably going to become incredibly frustrated with the fact that it is missing all the features one would expect from a ticketing…

Except in cases where clients have intentionally avoided doing so, Solarwinds has has the NCM and NPM databases merged since 2014. At this point that is the preferred way to have things, there is not any problem with having them run together. The automatic merging was only built into the installer for NCM around version…

the lem usb whitelist is under Manage groups, look for user defined groups with USB in the name

Is topology available on the IR- side as well, usually printers won't support the necessary OID's to get that to display in Solarwinds and NPM doesn't like it if both sides of a connection don't match up in that way. I've never seen an environment where NPM could 100% map out their topology unless the only devices they had…

Do you have scheduled inventories of your wsus server and all the computers? I find that inventory gaps are the main cause of missing report data

I was able to adapt some of my old queries to do this much of it pretty quickly, obviously mine is not 100% identitical to your request but hopefully you will be able to tailor it as you need. There are a lot of assumptions built in here that may not apply in your case so I want to clarify them in case you need to modify…

Lots of ways to approach this but the thing I think would be simplest is just to add a custom table resource to the view and set it to display the full name of all hardware health sensors that are in warn/ crit/ down status. Make sure to enable the link to the details page for the object. If you want to get more detailed…

above is right, but also those variables aren't correct for a component alert, they are for nodes as the triggering object. if you hit the insert variable button and look for the info you want to include you should be able to see how the syntax differs

If you scroll to the bottom of the screen you showed you will have a button that says something like "Not finding your OID?" and it lets you set up a custom OID. In this case you will want to set up a custom OID for 1.3.6.1.4.2.1.47.1.1.1.1.13.1 which will pull the first row of the table. You may have to experiment with…

In my case I ended up rebooting the server and it started working again afterward. Not sure if I had done something previously that helped but when in doubt, give it a reboot?

When you only have a hammer all problems look like nails. What I'm trying to say is that the reason it seems difficult for you is because you are trying to use solarwinds to handle scheduled tasks and that's not really what the monitoring tool is intended to do. Linux has natively built cron functions that could do this…

By performing a Create on the node table you are kind of just putting the shell there. All the polling data needs to be created on the pollers table as well. Check this example and notice that it has two phases, initially creating the node, then adding all the pollers OrionSDK/CRUD.AddNode.ps1 at master ·…

I had to rework a few of my own sql based charts as well, you are correct that the problem is not that the query broke it's that they made some changes to how the custom chart resource works and the sticking point seems to be those two data grouping options that used to be optional and are now required. After mucking with…

I think it would primarily boil down to the specifics of how that network will be built. If the in and out segments can both talk to each other then just put the poller closer to where the majority of the devices live (probably in fabric if this is a network centric instance). If the networks can't easily route then you…

Gone, unless you have older backups of your database and can recover it from one of those.

Solarwinds only reports what it gets via SNMP for those interface stats, so when troubleshooting erratic reporting from Cisco hardware I always take snmp walks of the hardware in question. I personally have experienced 5 different situations where specific models and firmwares will show completely different values in SNMP…

If I remember correctly the alert objects table is going to be historical, as in objects only get an entry there if they have already had each alert. This won't help you with listing out all the alerts that an object could fire but havent yet. Ive danced with this problem a few times and there doesn't seem to be a handy…

No, in a standard scenario the APE goes down and all data collection stops for the nodes assigned to it. There is no built in function to roll nodes to another polling engine, but in concept it could be made to happen with a script and the API launched from an alert action.

Try this for a custom report Data source is Windows Nodes Add the columns you need, but set the install date to use Max aggregation

I was never on a project where we did it, but I heard through the grapevine that the last time one of my coworkers tested it out there were problems getting acceptable performance from cloud db offerings for the SQL side. This was a while back and I know I've seen announcements from the big cloud providers touting that…

Have you installed SWQL studio in your environment yet? If you intend to get anything done in SWQL you won't get far without it, its basically a prerequisite. The tables in SQL have almost identical names and layouts to the ones in SWQL so it shouldn't take much work at all if you load Studio up and have a look. Also worth…

Taking those questions one step at a time, So the question is, is it possible to assign nodes to a group based on actual assigned polling engine? The groups dynamic query UI does not have an option in their pull down for engineid, but what you can do is set up a node alert that is always true (example nodeid is not null)…