mesverrum · Observability Architect · ✭✭✭✭✭

That is an estimate based on the number of sessions the web server can usually deal with before people start complaining about slow performance, there is no hard coded cap on the number of users allowed to access the web console.

You would need to use a script based monitor, the built in monitor is more focused on loading pages than response codes. This thread discusses a simple example How could I monitor on SAM for the HTML response on a web address? This is a more elaborate example Web Site (PowerShell) monitor template that allows customized…

Try this in a custom query resource, i filtered it to alerts that were reset without an acknowledge. --report on alerts triggered select ac.Name ,ah.Message ,'/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:'+ToString(AlertObjectID) as [_linkfor_Name] ,EntityCaption as [Trigger Object] ,EntityDetailsUrl as…

the relationship from node to credentials is that there is an entry on nodesettigs with the credentialid, i believe the settingname will be something like snmpv3credentialRO, but there are lots of other types of credentials that end up on that table as well, v3RW, vmware, cisco ucs, palo alto api's, basically everything…

I think the most succinct way to describe it is with this screenshot

It helps to have some familiarity with the reporting interface so you know where to find what you need but Solarwinds has a ton of info and there's not really any substitute for seat time in terms of learning where they stash everything. Could be a bit more intuitive but ultimately it isn't terrible to learn if you are in…

Man that is some dense spaghetti to try and untangle. It seems like a piece is missing, where rawstatus is what? It looks like the interfaces tables are joined to make sure the alert only goes off when the interface is up, correct? What exactly is it supposed to be notifying you of? 

Have you tried passing the entire XML object from TemplateXml in Cli.DeviceTemplates? There are a number of verbs that end up wanting a whole tangle of XML and this may be one.

Generally I don't trust a packet loss alert unless it has the timer set to at least 3 minutes (2 minutes for the polling and some time to get the node switched to down status) and the node hasn't been marked down. No other way about it because all nodes will trigger a packet loss on their way down if you don't put that…

Sounds like the way I would do it, this video gives a run down of how to do that if you need, Backing Up, Restoring, and Migrating Your Orion Database - Videos | SolarWinds

UDT is the User Device Tracker module for Solarwinds Orion. It's primarily focused on using SNMP to find what endpoints are connected to network devices. It also hooks into Active Directory to associate windows logon events with those endpoints. The things you are asking for are features of NPM (syslog) and SAM…

There isn't a native Solarwinds monitor for these but with the SAM module you can use a custom powershell script to check, as discussed here: Monitoring Windows Registry Value -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter:…

I almost never crack open reportwriter anymore but I would expect that if this report doesn't have the same tabs as the others it is probably because it was set up using custom sql You will have to parse the sql and look for wherever they filtered the datetime and change it in there It would probably look something like…

Yes, under ncm settings there is an option where you can create new configuration types beyond the default running and startup. Im not at at a web console right now so i can't recall the exact name of the screen this setting is on. Add your new type to the list, then edit the device template so that it runs the commands…

Basically those links don't reliably work when using custom SQL/SWQL datasources. You can "kind of" get them to work through various tricks but honestly I find that it becomes a huge time sink to try and get the format to match what it is looking for and once you do it still only lets you generate details link for a single…

This is the report I use, it shows which objects are firing which alerts and how many times in the previous 30 days, but it would be pretty straight forward to change it to just show a count of alerts or whatever arrangement of information makes sense for your purposes. --report on alerts triggered select ac.Name…

Simplest way is just to run a discovery with all 40 devices addresses, also need to give it their snmp and cli info. Once the discovery completes they will all be added to NPM and automatically to NCM as well (unless you changed the option in your NCM settings to not add newly discovered nodes to ncm) then you would go to…

It lives inside the giant block of XML inside orion.alertconfigurations.trigger, but its a bit of a chore to parse the XML and turn it into something easy to read. If you get really motivated you can find it with a few substring() and charindex() functions strung together and some case logic to handle alerts that don't…

The packet loss metric is based on the previous 10 attempts to poll the device, so it will always be a multiple of 10.

not sure if the viewer accepts this kind of regex, but you could try escaping it with a \ or you could just put a wildcard there in place of the comma?

This may help Can I schedule a job in NCM with a script for five minutes each? - SolarWinds Worldwide, LLC. Help and Support

I'd be figuring out some kind of scheme to just have a script figure this all out for me. Presumably there are some standards in place that allow you to know how a site is laid out in terms of network topology? If those exist then they should be programmable, if not then some standards need to be developed or you are going…

For some reason they made some weird choices with the Volume forecast tables so they don't join up as easily as one would hope in the GUI. This is the custom SWQL query I use for keeping an eye on disk volumes, hopefully you can adjust it for what you need SELECT n.caption as [Node] , v.Caption as [Volume] ,…

I'm confused about the use of a baseline for your total size thresholds. Are your databases not allowed/expected to grow? The baselines don't project growth trends very well, they only look at historical values over the previous week and make estimates about the typical ranges based on the observed values. So eventually…

It has always seemed to me that the groups details page does not allow you to parse any of the built in resources down to just the ones int hat group. On the backend it is basically because being in a group isn't really a property on the node, and all those resources are only set up to filter on the nodes/etc and their…

Yes, you can go to the Settings > Manage Views and make copies of the orion summary page for example, and call them orion summary - jeff, orion summary - bill, etc. Then you go to each user's account and about halfway down you will see the settings for changing which view each user gets when they click on certain things.…

My lazy work around for this is just to leverage the custom query resource with swql and the [_iconfor_] syntax and throw red and green check marks and such next to the lines im interested in with case logic. , CASE WHEN MinutesSinceKeepAlive > 2 THEN '/Orion/images/ActiveAlerts/Serious.png' WHEN MinutesSinceKeepAlive <2…

You might have better luck if you can figure out how to change that whole grid of options into a regular expression. I've never seen any mention of a limit to those rules, but I've also never tried to set anything up with more than maybe 6 or 7 individual rules.

NOC Views automatically rotate through all of the left side tabs in a view. The idea being that you could set up a big monitor and it will display several different screens worth of data without having to scroll/click. If you look around there was a Rock the NOC event on Thwack a while ago with several great examples. Rock…

I'd heard that there is a cap of something like 5000 objects on the map, assuming you don't have more than 5k locations you will most likely to have to switch from putting each node on the map to putting the nodes in a group and then using the script to put those groups on the map. That's the workflow I've used any time I…