mesverrum · Observability Architect · ✭✭✭✭✭

If you can add config types then you are definitely new enough to do this. Once you add a new type then you need to edit the device templates you use and add in the commands you want to use for the new type Edit an NCM device template This is a screenshot from a client where we did this,

The hard coded action type is not correct for your environment, the numbers change based on the order you installed modules and what version you started with as they have added additional actions in over the years. Look at my query above to see how to look for an action by name instead of specific ID

Also worth pointing out that if you have a lot of dashboards it is immensely easier to just apply a view limitation to the entire view instead of editing every resource on the page with the same filters. Go to custom view and find what you need here If your custom property isn't in the list then you need to run a tool on…

The custom config type has been around a lot longer than 7.9, that was just the time when they updated the UI around it. I don't know off hand any good places to dig up old versions of the admin guides, but if you are going to be using the tool that would be the place to start to find specific instructions. NCM doesn't…

This capability has been in the product for several years. Route tables are collected as part of the OOTB inventory and for custom stuff you would create a new config type Enable a new config type in NCM

So as an FYI, depending how old someone's instance is, and how many modules they have installed the audit events and regular events tables will have all kinds of different numbers for eventids. To make a query work in other people's environments I find it is 100% required to write queries with a join to the relevant types…

It's bits like this thread that remind me I am just a SWQL hack compared to you guys.

Looks like the opening and closing braces are char(123) and char(125)

You might have better luck converting the custom variable from SWQL to SQL, because sql lets you do replaces with the char(number) format and SWQL doesn't support that kind of thing so far.

I took a look in my lab, several of the queries I have written using Unions show this same behavior, but some of them still count like normal... I'll need to spend some time pinning down what syntax exactly is breaking the page count mechanism in the Custom Query resource

Yep that's how I do them as well

I think you must have some special character in that string of yours that is breaking it, i tested it in my lab and it totally works as expected, ${N=SWQL;M=select top 1…

Looks to me like the result of an account limitation, are there any of those set up on the account or maybe the view you are using for that map?

Looks nice! The only concern I want to raise with this is if you have a large noisy environment the number of traps in that db can be pretty beastly. If you don't have that problem then that's good but I've been to client sites where their traps table is >30 gb (for 7 days of data) so scanning it really bogs down the load…

I noticed his edit of my query is keying into the actiontype, but those id's are not always the same in all environments, it depends which modules you have installed. You may want to check your orion.auditingevents table to confirm what the correct actiontypeid is for your environment. This is the section of code I'm…

I just tried it and it worked in my environment as is, what version of orion are you using? Did you put this into a custom query resource or somewhere else? Shouldnt need to make changes as I had commented out the search box parts, but in hindsight you might want to use a left join for the nodenotes table that way it shows…

I've edited the post and try to simplify it to work more universally I'd expect the reason is probably to do with a custom property i used that you didnt have.

A basic sam powershell template is as follows - $MetricIWantToCollect = ...powershell script that will output a value... write-host "Statistic: $MetricIWantToCollect" ; write-host "Message: Info about the metric" ; Exit 0 ; All scripts have to have a statistic which has to be an number, the message is optional and if you…

I've got a swql query I wrote that will properly display disks based on their warning thresholds that I replace the ones on the top 10 and summary pages with. SELECT n.caption as [Node], InstanceCaption as [Volume], round(CurrentValue,1) as [Space Used],case when DaysToCapacityPeak<0 then 'Full'when DaysToCapacityPeak<91…

The same alert can't be active on the same object normally, but you can do this in the reset conditions to allow multiple triggers of the same alert For most cases you don't want that to be turned on because it can get super spammy

Theres an API verb called ExecuteSQL, this is how I would call it in Powershell, Invoke-SwisVerb $swis 'Orion.Reporting' 'ExecuteSQL' "select 1 from nodes"

its difficult because of course my lab has nothing sending OLM data in, so i'm just eyeballing the query and can't actually validate on my side. Your eventmessage variable is good, you can tell because it does resolve to the a realistic string. The error is something in the rest of the swql query, must be a syntax thing.…

Not sure, I see that it is returning your lines correctly in the message so I can't begin to imagine why it doesnt see the stat integer

Official support won't be able to help with anything in the API/SDK unfortunately. All you can do is raise tickets here and submit issues on the github.

For a node summary view I personally usually use the custom chart widget with custom swql data source because i find that the OOTB widgets are kind of inferior for this, but the built in option for this use case is the Multiple Universal Device Pollers Chart widget. You pick your UNDP, select the nodes that it is assigned…

The mib browser only works for a very limited subset of possible OID's at this point, basically just to replace the ones Orion uses to calculate CPU/Mem as far as stats go, or to get strings for things like the vendor/machinetype/description. For anything you need to track stats on (except cpu/mem) you will only be able to…

Thanks, The error you got wouldn't come from anything to do with spaces or quotes. Comparing what I have to what you pasted in I suspect that when you copied it initially you missed a character in the first line, --Nodes, so instead of having that line commented out it was trying to figure out what function "Nodes" was…

Yeah thats what I get for assuming a column from the SQL table would be the same as the SWQL tables without loading up SWQL Studio to check haha. 

getting closer, maybe this will get all the cases Where (asup.SuppressUntil > getutcdate() or asup.suppressuntil is null)

So I would recommend that you take a look at the results of that discoveryProfile variable that the script is shooting in, and make sure there's not anything that jumps out as being weird or maybe some malformed xml or something similar. A good test would be to create the same discovery with all the settings you want by…