mesverrum · Observability Architect · ✭✭✭✭✭

What is your detailed data retention setting? The first think that I would expect to skew your numbers is the weekly roll up, since it doesn't look like you are doing any kind of weighting in your query to reflect the number of polls in each hourly/daily time slice.

I'd guess a ports/firewall issue, they check in and show up on the web console immediately once the install completes. This KB discusses troubleshooting the agents Success Center

I have been playing with a custom html resource to do some javascript charts and this is the relevant part I use to pull data in from the information service, you can basically point any swql at it and it will give you a JSON response. var params = JSON.stringify({query:'select n.caption, n.CPULoadHistory.AvgLoad from…

Not with anything native to Solarwinds, many of the default resources in Orion are painfully inefficient with white space. I've seen people whip up custom dashboarding integrations with javascript or SQL Reporting Services to get around it but its a lot of work. Here is a clunky example a friend of mine helped me to do of…

You can make up as many rules as you like and key them into whatever data you have in LEM and then you map the rule to an email template, and you can create as many email templates as you need under the manage groups section (don't ask me why, but that's where email templates live). FIM isn't going to be reading the…

You are trying to join on eventid, you should be joining on ev.NetObjectID I don't have the sdk open in front of me but you should also ensure that the netobjecttype is orion.volumes or v: I can't recall exactly how that table looks from memory.

You won't really be able to do aggregates and detailed node data in a single resource, but you could do a report with more than one widget on them, summarized values at the time and detailed info below. I don't believe they surface this stuff in the GUI report builder, so you will probably need custom SQL/SWQL. Don't have…

Meraki SNMP support is famously terrible, they were very late to even begin to add it to their products and it is still super spotty so some things you would expect don't work, or if they do work it's being done in a way nobody else does it and that makes life hard for monitoring. Any time you have trouble with meraki…

https://support.solarwinds.com/SuccessCenter/s/scp-npm-exam-guide Its basically just a matter of reading the admin guide and having some familiarity with the product.

a colleague of mine mentioned he saw that the syntax of some of the sam alert variables changed in this release, you could be running into that. In which case the old copy wouldn't fix your issue, you'd just need to figure out what variables need to be swapped in. An upgrade normally shouldn't change any verbiage unless…

These factors are not explicitly a Patch manager issue, you can play with the settings that microsoft makes available to you but PM doesn't itself directly control things like reboot behaviors associated with the windows update agent. This thread discusses the problems you are having.…

I think the most efficient way to address this would be to use the unmanage scheduler utility on the main orion server to just stop polling the device during the maintenance window. You can make reports that are filtered to specific time ranges but then it would be filtering all the applications in the report the same way…

Make sure you have a custom property that tags which nodes belong in each region. I'll call mine "Region" for example's sake. Add a custom chart widget to a view, probably want to filter it to nodes where region is not blank. On the section where it wants to know what stats you need to track find the node availability % In…

None of the out of the box resources will include that info, but you should be able to create a custom table of transactions and include all the columns you are talking about.

To get around that issue I created a custom query that does the job and you can set as many lines as you like, you can also make it searchable which is nice. SELECT o.AlertConfigurations.Name AS [ALERT NAME] ,'/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:' + ToString(o.AlertObjectID) AS [_LinkFor_ALERT NAME]…

I'm a bit confused, this screenshot shows several real and virtual interfaces. What are you expecting to see differently?

Solarwinds NTA is tied directly to NPM and snmp interface indexes, without those you are kind of stuck. There are methods people have rigged up to get around this but they are usually kind of complicated to deal with, not sure if you want to go down that road.

I haven't tested this yet, but have you checked if the events table records anything for status changes? I find in almost all cases it is much more practical to look for an event in the history than to try and parse every data point in the historical data.

You pulled the current value, not the historical values. You did manage to grab the timestamps from the historical table.

Only needs read only permissions,

Like silverbacksays​ told you, you need to investigate which alerts specifically were firing before and figure out if they were valid or some kind of noise. I often go into environments where there are out of the box alerts that have not been fully configured that are firing off hundreds or thousands of times a day. Ask…

No, and there is not a supported method of installing multiple agents on the same system. The usually recommended method from support for nodes that need to be monitored by multiple systems is that only 1 can use the agent and everyone else has to use WMI/SNMP

Unfortunately Orion will only hold a max of 180 days of detailed stats because going longer tends to lead to oversized databases and poor performance from the web UI. Daily averages can be held for several years, but you may want to have more granularity than the average of the metric across 24 hours. I find that in cases…

I would wager that the snmp interface index don't correlate across and everything in NTA is tied to those indexes so someone made the call to disappear them in some way during a failover. Does the old data come back with a gap when you fail back over?

Your problem was that you selected an application instead of a component, you always need to select the most specific object type when you are setting up these reports. You can do that with a custom table resource, set up the data source like this: Then when it asks you which columns you want to include just select the…

There are newer verbs to create credentials in Orion, so something COULD be built. But I have not heard of anyone else posting anything they built yet. I suspect you will be on your own, and the exact details of what you need from your integration will dictate if the existing capabilities will allow for it.

It looks like to me like you are missing some single quotes in your filter definition This is a snip from the script I use for group building @{ Name = "$application Nodes"; Definition = "filter:/Orion.Nodes[Contains(CustomProperties.Applications,'$application')]" } I know for a fact that the group creation api will not…

The built in integration only does incident generation, for anything else you would probably need to script up your own integration.

I'm not personally too familiar with the TACACS side of this but on the NCM side you can break your backup scheduled job into two parts, one pass for running configs and another starting a few minutes later for startups. Hopefully that gets around this issue for you if there isn't an easy way to fix it in the TACACS setup.…

My first Solarwinds environment was a great learning opportunity. AKA, an inherited train wreck. I was a brand new CCNA working my first gig as a "Network Technician" position where it turns out that only 5% of what I did in any given week was networking at all. My first day they asked me "Hey can you jump onto this server…