mesverrum · Observability Architect · ✭✭✭✭✭

Been a while since I wrote that, almost didn't recognize it. I never ran into this myself because I disabled all OOTB alerts. I created a copy of that alert, it had the same problem exporting. So then I deleted the action and it worked. Looks like there is something funky in that SQL message that the api export function…

I wrote a few powershell tools to move views between instances a while back. https://thwack.solarwinds.com/product-forums/network-performance-monitor-npm/f/forum/31741/viewexporter-ps1 https://thwack.solarwinds.com/product-forums/network-performance-monitor-npm/f/forum/14075/viewimporter-ps1…

"Hung" conditions are a super nebulous vague space. In most cases hung servers respond to pings, depending on the exact problem they may also still respond to some/all WMI queries. The way I have always approached this topic is that every server exists to provide some service. I don't mean like it has some service running…

Alert definitions are pretty complex so unfortunately I have never seen anyone come up with anything human readable to report on them. I actually spent a few hours working on it again (i feel like i try this every year or so) and even extracting the alert to powershell i wasn't able to get it into anything boss friendly.…

That's not new to this version, its been a common bug since as far back as I can remember. At times when I was more motivated I just wrote a trigger on the nodesettings table to replace it any time that comes up with the actual ip of the node.

Thinking on the main limitations I have found in SWQL versus SQL Server is there aren't window functions, you can't declare variables or create temp tables or execute stored procedures, although the verbs pretty much are a window into the native sprocs.

We have this documentation of functions, https://github.com/solarwinds/OrionSDK/wiki/SWQL-Functions, but never seen any for the operators. As far as I can tell it supports everything you can do in SQL server. https://www.w3schools.com/sql/sql_wildcards.asp although I admin I have never tried the bracket stuff, but I use %…

I like it, looking at this it opens up the idea of building our own custom "default" perfstack details widgets for the metrics that don't currently already have a details widget OOTB. As long as the data is available in perfstack and you can figure out how to parse the url's. Might have to kick the tires on that and see…

I just confirmed and that query works for messages from SQL monitors, but not for messages in powershell scripts (why would we use the same tables for similar data right?). So this version does a union between the two tables where these kind of messages might live, depending on the type of components we generate stats and…

sounds about right for patch manager, crickets.

This is a custom query widget I use for that kind of scenario, SELECT max(pe.ComponentStatus.timestamp) as Latest, pe.ErrorMessage as Message FROM Orion.APM.PortEvidence pe where pe.ComponentStatus.ComponentID = ${componentid} group by pe.ErrorMessage order by Latest desc SELECT pe.ComponentStatus.timestamp as Timestamps,…

support.solarwinds.com/.../List-of-NPM-NTA-VNQM-MIBs-and-OIDs-used-for-Polling

I keep a powershell script on all my web servers that enforce dozens of pages of css manipulations like this. Any time i bump into something and think "that stopped making sense when monitors got better than 800x600" i try to dig out the browser developer tools and see how it looks with my own spin and then I save the…

That might be garbage advice from support, or it could be valid. I say that because SAM polling is super complicated, and there isn't a well defined capacity limit, there are some ballpark guidelines that estimate 10,000 monitors on a poller, but just think about the fact that there are 49 different kinds of components and…

As long as I've been using Orion's api it has been the case that the sessions time out after I believe 2 minutes. They renew themselves automatically when in use, so i tend to batch things up in my scripts so i don't get big periods of time when I expect to be doing something outside of orion after I establish my session.…

That query looks mighty familiar Assuming that the name of your property you want to display is AffectedSites you can do this ${SQL:SELECT ISNULL((SELECT TOP 1 AffectedSites FROM Nodes n LEFT JOIN NodeIPAddresses ON n.NodeID=NodeIPAddresses.NodeID WHERE (NodeIPAddresses.IPAddress='${N=SwisEntity;M=NeighborIP}' OR…

There won't be another way, they wanted to discourage select * from SWQL so they don't allow it, and they also don't support pivots/unpivot, https://github.com/solarwinds/OrionSDK/wiki/SWQL-Functions . so the only other way you could do something similar in SQL would be declaring variables and creating dynamic SQL (also…

SWQL doesn't have many difference in how it handles subqueries than normal SQL. What do you think would be valid SQL that you are trying to work around with your excessively verbose where condition. The only place you can't have multiple values is in the select area which is also true in plain SQL.

Seeing this change makes me SO GLAD I never invested the time to create all those javascript based custom widgets I was always wishing I had enough time to build. Would hate to have done all that work to then have it invalidated by a security setting.

They haven't changed, i used them both in my current templates and have been on 20202.2.4 for a couple months. The most common problem i find is trying to use the same variable on different kinds of alert objects. What I mean is if the object of your alert is a component those will work, but if you tried to use them on an…

Do you just need the properties and their attributes or do you want to get the properties and their values to move across? For the first part you could use a variation on this script <#------------- CONNECT TO SWIS -------------#> # load the snappin if it's not already loaded (step 1) if (!(Get-PSSnapin | Where-Object {…

SAM isn't config management unfortunately, so no it doesn't scrape settings from the SQL server beyond the minimal set it needs to identify what you are monitoring. As a sort of work around you could set up a SQL user experience monitor with a query that shows you the current settings from the system tables, since SQL…

So I will guess that you probably did not install the SWQL Studio SDK yet did you? https://github.com/solarwinds/OrionSDK/releases Thats the easiest way to figure these kinds of things out for yourself. You can also look up the schema here, but it's much easier to be able to work with the data live and interactively from…

I'm not exactly sure how the opcmsg works, but from a glance it seems like in Orion we generally would just write a powershell or bash script to do the same. Orion is primarily an agentless architecture so it doesnt assume it's going to have an open channel to anything on the nodes like that agent does.

Looking at what you are doing there are substrings in the where condition in a way that is pretty suboptimal for db performance, https://www.sqlshack.com/sql-substring-function-and-its-performance-tips/ so you might try experimenting with other syntaxes in SSMS to see if your can get better performance. I don't know off…

SAM components are complicated, but I have done some automatic template building in SQL. The reason I say it's complicated is that depending on exactly which type of component you are dealing with data needs to be added to several tables, and since it's not a supported feature you are on your own to hack out which tables…

SWQL doesnt support cast() . There are workarounds, but you don't need them for this case. Also we always need to give names to derived columns in swql. SELECT n.caption,a.deviceid,a.volumename, round((a.CapacityB / 1073741824.0),2) as TotalSize FROM Orion.Nodes n JOIN Orion.AssetInventory.LogicalDrive a ON a.NodeID =…

In case anyone is curious, when digging through Orion logs the tool I use is this script I wrote a few years back, https://github.com/Mesverrum/MyPublicWork/blob/master/OrionLogParser.ps1 . It hunts through all the Orion log files on the server looking for warns and errors, and compiles it all into a giant psobject called…

You could narrow your search by tweaking the queries to have an extra condition with your value in it, so tweaking the query on views and limits you could do declare @Property as nvarchar(50) = 'State' declare @Value as nvarchar(50) = 'Washington' --views and resources SELECT distinct v.viewgroupname, v.viewtitle,…

I often had to go through this exercise when I was consulting, this is a report I used out there quite a bit. It finds all the places where a custom property name is being referenced. The way it's written it doesn't do the mapping of values to check for every case of a single value, but thats a big ask because the…