mesverrum · Observability Architect · ✭✭✭✭✭

NPM doesn't do per second, since everything polled gets added to the DB it would very quickly become unworkably large. There is a tool from Solarwinds called the engineers toolkit which is more geared toward real time monitoring, and can integrate . Depending on your hardware many devices only actually update their SNMP…

At the router level almost every byte that comes in one interface will exit another interface. Drill down to the specific interfaces in order to get more meaningful directional data, or change the ingress/egress settings from both to a specific direction, but you have to understand within your network what inbound traffic…

Any polling engine is fine, I've known people with a really high volume that stuck a load balancer in front and round Robin them to spread the loads.

Since no built in parts of orion keep tables of AD data you would have to build this outside of orion. Assuming I was doing something like this in powershell I would query the api to generate the basic data set of users I wanted to look up, I assume you'd be using something based on the swql query I gave you yesterday and…

In the NCM settings > Configs there is a place where you can already define the folder and naming format you want to use for saved config files. The configs themselves are copied onto your server in a text file (.config) as they are downloaded so if you wanted to act on those files directly you can do so with any normal…

The only part that you can't really do in Orion is the X minutes part, groups automatically build their status based on the status of all their direct members, you can wait 10 minutes to trigger your alert logic, but the group itself will change pretty much right away once a child status changes. So the tree could possibly…

Can you screenshot the data on the node name tab of the table settings? I'm sure that somehow the report engine is joining from the undp results to the nodes table in some kind of unexpected way and that might give us a clue.

You'll probably need to investigate your database, in the environment I'm in now that kind of chart with the same level of detail renders in less than 4 seconds. The main factors being the number of interfaces you have, how often you poll them for stats, how long do you retain the data (this all factors into how many rows…

I had the same problems with some of my custom charts when the upgrade rolled around. You need to add in a column to use for those values. In cases where I haven't had multiple rows I just created a dummy column. See this example of one that I had to modify select count(message) as [Alerts], convert(date,timestamp,111) as…

I never use the old OOTB reports anymore but looking at that I'm thinking this report is set to group the results by week, since nov had 5 weeks. Pretty sure the datetime column has been hidden.

mthangav​, I talked to a netpath dev a few months ago and we specifically discussed the existing lack of reporting in Netpath and it is something he is working on. With that said, in the mean time I have built myself one SWQL based report showing the most recent polling results from my netpaths. It is still a bit of a work…

There is an NCM feature for tracking EOS notices from cisco, but I find that it is pretty hit or miss. I don't know if the way prime does it is more consistent/accurate but in NCM they pull down a list of EOS notices from cisco and parse them for impacted models, then compare that to your Machine Type values and tries to…

Volumes are able to do custom thresholds the same as CPU and Memory is done at the node level (although the default UI kind of hides the edit button for these, I use a custom query to add in a thresholds resource to my volume details page), but the threshold is unfortunately still % based so you wouldn't be able to use…

zackm​ wrote a good query for this a while back, add a Custom Query resource to your view and paste it in SAM Licenses by Group and Node -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

This article seems to have some detail on the inner workings of getting the agents to pick up a new cert, but in their case they say you delete the existing agent provisioning cert and when orion starts the services back up it will regenerate a new self-signed. Not sure if there is a way to intervene, generate an…

I find that the number one issue I have with my clients is they don't filter the dashboards down to actionable info only. It seems like many of them just throw everything up there to make it look full. I'd post screenshots but almost everything at my current client is completely custom SWQL and I feel like it would be an…

All the current versions have a search icon in the top right corner, it works for nearly any kind of orion entity If you are interested in something a little more narrowed down I've also written a custom query that might give a decent starting point (my query is specifically for VM's but also displays the host info, so…

I'd open a support case and have them get into your system with you as I have not seen that problem in any environments I've worked on since the updates came out. I wouldn't be surprised if something in your UDT tables is corrupt and is causing the system to hang, or maybe one of the resources on that page. I'd seen a few…

Each node already has a link to their ip address if you look at the edit nodes screen under web browse template. You can set that and it will build a link to wherever on your node details page. If I recall correctly you can set them in bulk from the manage custom properties page as well.

That is an estimate based on the number of sessions the web server can usually deal with before people start complaining about slow performance, there is no hard coded cap on the number of users allowed to access the web console.

You would need to use a script based monitor, the built in monitor is more focused on loading pages than response codes. This thread discusses a simple example How could I monitor on SAM for the HTML response on a web address? This is a more elaborate example Web Site (PowerShell) monitor template that allows customized…

Try this in a custom query resource, i filtered it to alerts that were reset without an acknowledge. --report on alerts triggered select ac.Name ,ah.Message ,'/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:'+ToString(AlertObjectID) as [_linkfor_Name] ,EntityCaption as [Trigger Object] ,EntityDetailsUrl as…

the relationship from node to credentials is that there is an entry on nodesettigs with the credentialid, i believe the settingname will be something like snmpv3credentialRO, but there are lots of other types of credentials that end up on that table as well, v3RW, vmware, cisco ucs, palo alto api's, basically everything…

I think the most succinct way to describe it is with this screenshot

It helps to have some familiarity with the reporting interface so you know where to find what you need but Solarwinds has a ton of info and there's not really any substitute for seat time in terms of learning where they stash everything. Could be a bit more intuitive but ultimately it isn't terrible to learn if you are in…

Man that is some dense spaghetti to try and untangle. It seems like a piece is missing, where rawstatus is what? It looks like the interfaces tables are joined to make sure the alert only goes off when the interface is up, correct? What exactly is it supposed to be notifying you of? 

Have you tried passing the entire XML object from TemplateXml in Cli.DeviceTemplates? There are a number of verbs that end up wanting a whole tangle of XML and this may be one.

Generally I don't trust a packet loss alert unless it has the timer set to at least 3 minutes (2 minutes for the polling and some time to get the node switched to down status) and the node hasn't been marked down. No other way about it because all nodes will trigger a packet loss on their way down if you don't put that…

Sounds like the way I would do it, this video gives a run down of how to do that if you need, Backing Up, Restoring, and Migrating Your Orion Database - Videos | SolarWinds

UDT is the User Device Tracker module for Solarwinds Orion. It's primarily focused on using SNMP to find what endpoints are connected to network devices. It also hooks into Active Directory to associate windows logon events with those endpoints. The things you are asking for are features of NPM (syslog) and SAM…