mesverrum · Observability Architect · ✭✭✭✭✭

It's not doing what you think its doing, partially noted by how it just nonstop keeps spamming you. You should only be alerting on the status change, right now its basically triggering on "is there a component with this name?" Which is permanently true, even if there had been no lock out events. If it was properly set up…

If you are any good in powershell it would probably be easy to just set up a custom powershell script to pull those two values and perform the math there.

Ah when exporting it to excel it requires you to use the standard table resource. I don't have time right now to remove all the bits that resource doesn't like, but at the very least it will need to remove anything relating to a column with an Iconfor or linkfor name, it also doesn't like some other types of joins and…

I whipped this one up in SWQL, you can use it in a custom query resource and it gathers all the info from the original request and a few things that the SQL query didn't include. Depending on your environment it might take a while to complete --Nodes Select '' as Sort ,tostring(n.nodeid) as _linkfor_Sort ,n.caption as…

I never actually use that method, just built it to prove the concept. Do you run multiple discoveries per day? Did you narrow the alert's active window like I suggested up there. What is your reset condition? Looking at the logic I would expect it to send one email per discovery that completed in the previous 24 hours.

The report the way I use it has several filters such as only showing disks above 500 mb, with the volume type of fixed/mount/network, that are above their warning threshold or the global warning threshold. You should probably just remove the where conditions until your stuff shows up. The most generic version that still…

I recently worked in an environment with a pretty massive IPAM deployment. When we first went to start discovering all the subnets we had a similar issue with what were basically hundreds of jobs kicking off at the same time and never completing. I dinked around with a lot of things trying to get it to work and ultimately…

I just tested it in my lab and if i set up exactly the same report in web and report writer and look at exactly the same time windows and launch them immediately one after the other they seem consistent. I'd wager it could be just some slight difference in how they are calculating the time window you are defining, like the…

That one has been a real pain point for me with javascript resources, It's not bad if you only have the one giant html widget that populates an entire page, but doing lots of small javascript widgets just doesn't work. I had a few views break on me before when I happened to be using a jquery resource that is also part of a…

Yeah JavaScript can be tricky in that way, I've also rub into problems when I tried to build things that use the same jquery packages as some of the out if of box resources were using.

Are you running the current version? Replace was added in about a year ago I believe.

The table structure is broken out to where metrics are on at least 100 different tables and views depending what they are for. Search thwack posts for examples of all the SQL queries people have come up with, depending on what data they are trying to collect. If you were going to use the API you still need to present it…

My comment was a more general quip to everyone out there building scripts that someone will eventually have to troubleshoot. For some rudimentary debugging you can just look here for the syntax on writing the outputs to a text file and that way after the file gets called you can read the logs and see what it got. Writing…

As an interim work around maybe you could set up a trigger directly within SQL where if node status changes to 2 then set the application status to unreachable, and likewise when the status changes away from 2 set the application to unknown and resume polling. Definitely would need to do some testing around that as I would…

Do any nodes ever show down in your environment? I've never run into a situation where nodes failed to go down if the Orion server can't ping them so you will likely need to do some testing within your environment to pin down if that change you made is a factor.

Thats the place, when necessary I've inserted rows using this kind of format: INSERT INTO dbo.TopologyConnections (DiscoveryProfileID, SourceNodeID, SourceInterfaceID, MappedNodeID, MappedInterfaceID, SrcType, DestType, DataSourceNodeID, LastUpdateUtc, Layer_Type, LinkType) VALUES…

In which case your best bet to get them to make a change is to open a feature request and try to get community member to vote it up, since SW takes their cues on changes to the product from what has the most community interest. The problem I think you'll find is that needing to launch scripts from the APE to polled devices…

First box SELECT 'Unmanaged' as [Status] ,n.Caption AS [Node] ,tostring(tolocal(n.UnManageFrom)) AS [From] ,case when n.UnManageUntil is null or n.UnManageUntil = '9999-01-01 00:00:00' then 'Not set' else tostring(tolocal(n.UnManageUntil)) end AS [Until] ,case when n.UnManageUntil is null or n.UnManageUntil = '9999-01-01…

delete, then test, let them repop and see what you get

You do have nodes in NCM already right? I usually write my queries in swql studio and then copy them into my post body's and things *should* match up. To be fair, I rarely use postman so maybe there is an environment setting thats jamming you up, i mostly use curl requests or the powershell module. May just be faster to…

what you have there is a pointer to the default solar wind custom object resource. so now we know what to add to the view. in your new instance go to the page you want to put this and customize and add the custom object resource. it will be blank and need to be configured. go back to the old instance and hit the edit…

REST and API's are not something you interact with via a web browser. Seems like you will need to review the wiki documentation more thoroughly and might find this article to be helpful as a starting point: https://loop1.com/swblog/using-the-rest-api-to-get-the-most-out-of-solarwinds-part-1/…

Just edit the template and all systems with that template applied should pick up the change, unless you have manually set them to override the template.

It's much more complicated than that unfortunately. I am working with a client now so i don't have time to do the leg work for you, but i believe you would be able to find what you need by looking in various tables that start with APM_

That's doable in the existing UI, there is a button at the bottom of each column in the Customize Page to move to a different tab.

I'm don't do sales so I don't know for sure how the licensing works in NAM. I thought it was unlimited everything and 1,000 unique nodes, but not really sure.

The alert system is intrinsically tied to the object type you are alerting on, the GUI will not really let you cross from one object type to another in a single alert. You could do that in SQL, but its clunky and unnecessarily complex to even bother. For the situation like you are describing I typically do this: Assuming…

Are there alert limitations or account limitations on this account? I'd spin up a brand new local account with 0 limitations applied and verify. * Oh i see you already checked your account for limitations, but maybe not alert limitations? Yeah really a strange one here.

no, the Appinsight for IIS template is it's own thing, separate from those two templates and gathers a LOT more info than they do. Those templates are older than the Appinisght feature. There is some pretty decent documentation of all the things it does here AppInsight for IIS

Since you set up a rule to not write any incoming traps or syslogs to the database you will not see traps or syslogs anywhere in the tools. Pretty straightforward. If you were using the ncm real time detection to trigger backups then that definitely won't work unless you exempt it from the rule.