mesverrum · Observability Architect · ✭✭✭✭✭

Volume labels are the same most likely because you are using a vmware template or cloning machines there.

No changes should be required, the API is sitting there waiting and will accept any validly formed requests from any account with the necessary permissions. Just for the sake of verifying is your account an admin in Orion or does it just have add/remove nodes permission? I've never tried any API actions with a non-admin…

This is the model I use in posh <#------------- CONNECT TO SWIS -------------#> Import-Module SwisPowerShell #define target host and credentials $hostname = 'localhost' #$user = "admin" #$password = "password" # create a connection to the SolarWinds API #$swis = connect-swis -host $hostname -username $user -password…

I use SWQL Studio, Releases · solarwinds/OrionSDK · GitHub Originally I had to hunt and peck until i could find the bits I needed to join from one table to the next, but now I've spent enough time under the hood i can rig up a report to show almost anything I can dream up. -Marc Netterfield Loop1 Systems: SolarWinds…

Extremely impractical, I would just re-deploy the agents without even blinking.

Just an FYI, if you don't want to wait for them to finish the API verbs for this you can use the API to push straight SQL commands into the database, and I know of several cases in the past where engineers have done all sorts of manipulation and creation of the supernets and groups directly via the db. Obviously, don't…

There's no column, if it has a row its visible. Unmonitored interfaces just never get added to this table

I loved the trick you used here with the unions, but since I can never leave well enough alone I built it up some more. Pulled in the relationships between interfaces and their individual IP addresses when that info is available, tried to make it a bit easier to spot when we are looking at parent vs child objects, expanded…

Those long strings instead of names are because you selected the wrong info for your label. As far as the numbers not matching the graph it's likely because you are showing a full day on the graph, they automatically smooth out data points when you try to show too many at once. Change your graph to something like last hour…

When i ran into this a while back I built a custom SWQL version of the alerts resource so i can just manually apply whatever filters I wanted SELECT o.AlertConfigurations.Name AS [ALERT NAME] ,'/Orion/NetPerfMon/ActiveAlertDetails.aspx?NetObject=AAT:' + ToString(o.AlertObjectID) AS [_LinkFor_ALERT NAME] ,CASE WHEN…

https://github.com/solarwinds/OrionSDK/wiki/PowerShell

This is all pretty out of date. There is just an API verb built in to do this. Have you installed the SDK on your server yet? GitHub - solarwinds/OrionSDK: SDK for the SolarWinds Orion platform, including tools, documentation, and samples in Powe… The format of the xml data you pass is like this, but with your values in…

You would just join nodes to the container member snapshots table then to the containers table then add a where condition where container.Name = <yourcontainer> For a custom property it's much easier, just add a where condition where n.Customproperties.<your property> = <your value>

Correct, despite the tantalizing fact that patch manager reports will show you the sql they use to get their reports, you aren't given an option to load in your own SQL.

Interesting, to be fair I haven't installed a fresh environment since mid November, but it definitely created the necessary directories automatically on 12 different servers I installed that day. Maybe something different in the latest release of the installer, but this is still pretty unusual.

As I spend more time inside the database I'm finding more and more cases where I just replace a lot of the out of the box resources with my custom versions in SWQL or html or some other bits. You can really make your Solarwinds interface amazingly more effective and automate away a lot of the annoying parts if you learn…

You might have better luck going the opposite route and creating rules to drop any events types that are not actionable, that way instead of sifting through a million events looking for useful data you only keep useful events in the db and immediately route everything else to the garbage? Log Manager is not exactly dialed…

Usually the easiest way to figure things like this out is to do an SNMPwalk of a stack where you already know some of the serial numbers. Then you can just ctrl-f search the results and see if anything came back that matches your serials. 

You didn't include it in your snip but there is a tag in there somewhere to the effect of <import defaults> that is usually true but you would need to set to false if you want to apply custom filters, maybe that caused your problem?

Interesting, I've definitely seen it misunderstand the relationships and make whole swaths of servers as down when they were still reachable due to other paths, and cases where the child parent relationships were backward and when the child went down the parent showed as unreachable, despite still being up. Maybe this was…

So the thing about needing to put the "Node." in the variable is if you are alerting on a child object such as a disk volume or interface, the "node." basically tells the alerting engine to navigate from whatever triggered the alert to its parent node and find out the cp from that. If the alert is for a node then you will…

Oh thought you were taking about upgrading the sw versions, os version doesn't matter at all as long as it is supported on whatever sw version you want the ape to run

it requires a numerical value for the statistic output, but optionally you can add a message output with strings in it

Off the top of my head maybe something like caching from previous requests, or if you used an agent on the SQL server maybe the agents report a faster response time with no network overhead, maybe you ran the SSMS queries from a different network location than the orion poller? Just guesses. 

I know there is a template here, How To: Decrypt SAM Credentials , that i have used in the past to extract passwords into plain text from SAM creds, unless maybe in 6.7 the devs crippled that variable in some way? You might try to merge that template with what you have to see if you can still extract the password. It…

With the web based reports there isn't a handy way to push them to a dashboard, but you can use the "custom table" resource and use exactly the same setup as you did on the report. -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter:…

Sounds like you might want to rewrite the query, something in it is screwing the app up, add each piece in 1 by one until you understand which part is breaking it. At a glance the order by is possibly causing the query to review the entire traffic view which could be months or years of results depending on your settings.

As far as the timestamp, that one is in UTC (most tables are, but not everything unfortunately).

Seems like you already have your answer, Solarwinds doesn't have a "admin standby" interface status so they marked it as being down. Have you tried polling this device in SNMP to see how they describe the status there? It would not be the first time that the CLI shows something different than how SNMP reports it. If it…

What you are describing is doable from the web report tool. Just take the built in top 100 conversations report and edit the data source part to only include interfaces with name like such and such, or if you have an interface custom property you can use that. Then just add in these columns to the table and group by the…