mesverrum · Observability Architect · ✭✭✭✭✭

Probably you don't actually have event 7045 auditing enabled. You usually turn things like that off and on in windows by typing to gpmc.msc or setting it as a group policy. 

Those aren't groups. The manage nodes view shows you your devices and you can pick attributes to sort/ filter them, but in solarwinds a group is a specific thing and that's not what this is so that's why you don't see it in manage groups. You can't move a cisco device into the windows section of that view because the…

Regarding the permissions errors, this article explains some changes they made in the recent versions. Assuming you are on the 2024 releases you can change a setting in the db to make these executesql actions work again.…

When i have problems with powershell i just step through and execute it one piece at a time and narrow down the issue. I can say that example script is just trying to pass through the windows account that powershell is running under to orion and quits if that account isn't being allowed to get data. I figure it makes sense…

I'd suggest that it would be pretty trivial to replace that widget with a Custom Query using SWQL and make it so it has clickable links. Usually able to learn SWQL and implement that change for yourself faster than waiting to get traction on that feature request.

The default setting is to stagger them in batches of 25 at a time, but you can adjust as necesary in the NCM settings. documentation.solarwinds.com/.../ncm-configuration-settings.htm

This is the key, Cisco devices are extremely well supported and I've not seen any network gear that didn't already support all those hardware sensors you are talking about. You shouldn't have to do anything except tick the box for "hardware health" when you add the node.

I have a script example in my github repo that grabs all your cisco devices and builds a new discovery for them and imports everything it finds. It would be pretty trivial to update it to do windows instead of Cisco devices. https://github.com/Mesverrum/MyPublicWork/blob/master/DiscoveryByScript There is also another…

I'll just go ahead and save users some trouble. There is a button labeled "rediscover" on the node details and it will absolutely not fix the interfaces being monitored when you swap out a switch. Seen people struggle with this countless times for over 10 years. In this case by "rediscover" the person mean delete the node…

Are both servers on the same host and subnet, or are they in different parts of your data center in relation to the nodes being monitored? If it was me i'd be running traceroute tests from both servers to the targets to see if they behave differently for any reason.

I've seen this problem once in a while, usually on servers with only a single cpu, but your questions made me curious. This article talks about reviewing the WMI operational logs to see what's happening there. I noticed it shows the queries so I wonder if you run into another machine with the problem if you would take a…

Good that you got it working, but i wonder if you are maybe building a questionable Rube Goldberg machine? Generally speaking I try to avoid having Tool A connect to Tool B to cause a change in Tool C when I could just have Tool A trigger the same change directly in Tool C. Hopefully that makes sense, it just seems like…

I used triggers EXTENSIVELY in a past gig, so I can confirm, yes you can do what you are asking. Unfortunately I don't have any code examples handy and I'm a bit disconnected from the world to build one out right now, just using my phone from a camp site in the woods. This tutorial looks pretty reasonable to me: SQL Server…

So the JMX monitors dont use ICMP or WMI. The java application gets configured to allow JMX polling on a particular port and it sets up its own listener and the java app owners configure it for how they want it to handle authentication, could be a local user, ldap, or with an SSL cert. So then SW uses that JMX bridge…

Aside from having them confirm the occasional bug for me, i try not to use support. Occasionally there are known bugs in the platform that they have unpublished hotfixes for, but aside from that I've always been better equipped to just solve my own problems faster than messing around with tickets. Usually faster to reverse…

Really i think this would mostly just end up being a bunch of sam sql components doing select count(*) from solarwindsorion.dbo.<tablename> Just have to identify all the relevant tables for things you are building. You are totally correct that looking at components and elements isn't complete because those are really only…

The behavior where Orion charts average data points any time the time scale goes wider doesn't have any built in way to manage it. If you can live with having a hard coded time span then one trick you can do is to bucketize the timestamps in your SWQL directly. Basically you pick your unit of time and set the query to just…

Surprised it wasn't a problem in the older version but is now. In any case you probably want to get on a call with support if you havent already and I would guess that they are going to walk you through the process of updating the database engines table directly to get the old entry updated.

The container monitoring works it gets locked in to just the host you set it up on and there is not currently a way to automate switching the container monitoring settings when Orion has an HA failover because it requires someone to manually run commands on the container host. So during a failover on your secondary node…

yep, option 2 needs to be the hostname or IP of the polling engine you want this agent to register with. To the second question, there is probably some way to update the configuration of the agent and restart it, but i've not seen the docs for how to do that so I usually just re eploy the agent if I need to make changes…

This script in my repo creates groups based on a couple custom properties, there are also examples in the repo for how to set custom properties automatically. I had one before to assign apps but i don't have it handy, that part is fairly simple if you get familiarized with the way the api works.…

This script has a pretty basic example of how to use those verbs github.com/.../DiscoveryByScript

I'd suggest that before you even worry about upgrade/ migration stuff you should get the 2022 servers up and running and make sure that they can successfully connect to some of the target servers using WBEMTest https://solarwindscore.my.site.com/SuccessCenter/s/article/Testing-WMI-Connectivity?language=en_US That would at…

This queries I posted in Report on Muted and Unmanaged Entities should give you some help. Assuming you only care about nodes then it would do the job right away, but if you want to do interfaces and such like this report shows you would be able to poke at the two and merge them together

Another approach might be a SAM monitor for whatever windows events get thrown for a time zone change. 4616(S) The system time was changed. - Windows 10 | Microsoft Learn Looks like 4616, maybe filter it to only record if the time zone change was made by an account other than local system. You'd see exactly when it was…

This seems like a question you should post to the F5 user forum instead of SolarWinds?

I got to where I do this for all of my custom script monitors. Why just monitor and create alerts when I'm already in here writing code that will execute on the target machine. If the condition fails i write an output that will set the component into Warning and so SAM records that i've initiated a remediation, and if that…

You have to keep in mind that NCM was written originally for the Cisco world where you could do a show run and copy the whole text output and then inject that plain text right back into a device as a config. Palo and Fortigate and several other vendors don't work that way. The version of the config you get from show…

There are some out of the box templates for juniper. When it comes to compliance reports I usually advise my clients remove all the OOTB reports and such anyway and just build fresh reports that are actually tailored to their environment. The OOTB ones are fine for an example what a report COULD look like, but they are a…

Yes, assuming you are using the GUI custom table widget you would edit the data source set up your target object as interface and then add some OR conditions similar to Interface fullname = Switch 1 - Eth1/0/25 OR Interface fullname = Switch 2 - Eth2/0/45 OR Interface fullname = Switch 3 - Eth3/0/5 As an alternative…