mesverrum · Observability Architect · ✭✭✭✭✭

Sorry tdanner , meant this toward the other tim in the thread haha, I would be pretty surprised if you weren't already completely aware of the workflows intended by the team at solarwinds when they implement new features.

bobmarley When you say that it detects the connectnow layer 2 link and doesn't update the utilization, did you add the link and then check the radio button on the bottom left that says connection display options? I've never had a case where it was able to find a link but failed to know the utilization rates. I guess this…

I did a UX feedback session a few months ago relating to proposed improvements to doing upgrades in Orion. I was thoroughly impressed at how much logic and use cases they had already built into the example we were working with. I expect really wonderful things to come from that pipeline sooner or later. 

Agreed, my example is primarily focused on that tipping point between maxing out one instance and having to stand up a second one because you have crossed over into 6 digit interface monitoring and your system starts getting weird. At that point a company would be looking at possibly doubling their licensing/maintenance…

I don't have a good thread to refer to as an example but its fairly simple to describe with your query. So inside the part where you are concatting the html together you can add a case statement like this to produce different html settings based on the value of that activesessions counter. You can string these cases…

Unassigned, as in cannot be in use anywhere. YOU don't manually assign the VIP on a nic or anything like that. You run through the wizard and it does everything automatically. The heartbeat happens inside the database, there is a column that is being updated regularly and if it gets delayed by more than 30 seconds it…

It is doable, but not all the tables match up 100% between sql and swql so you would have to spend some time identifying the different table names and columns or if they are in different spots. The key to this is getting the names of all the pollers that are members of the same SNMP table, then join them all on their…

Don't delete the node, expand the arrow next to it and delete the interface

In my experience I have found that pretty much every SQL database I work with has some indexes fragmented almost all the time and it leads to almost zero measurable performance impact so I just edit the appinsight for sql template so the "Top Indexes for Database" fragmentation thresh hold is maybe 99 for warning and 100…

Is there a reason you don't just use the Orion module that comes with the SDK? It does all the unpacking for you and turns the results into simple arrays.

in this example it's looking for an alert custom property ---- relevant code LEFT JOIN Orion.AlertConfigurationsCustomProperties AS acp ON o.AlertID = acp.AlertID WHERE acp.CUSTOMPROPERTYNAME = 'Networking' ----

For good measure, sometimes when I change the outputs in script based monitors it can be useful to just delete any of the outputs that I had previously saved, they can get weird. Just jump out from that edit script screen to the edit application screen and you should see the outputs with a delete option near therm. 

Not a solution to your problem but I've had similar problems often enough that whenever I write scripts these days I always include a chunk of boilerplate code to make sure it writes a log output somewhere. So many hours wasted trying to reverse engineer scripts that I find laying around on client systems.

I doubt anyone has a step by step guide to this specifically, just write an alert where the alert object is a netpath probe, set up the trigger condition to be anything that you know would always be true, so you could use some like Name = the name of the probe you want the messages on. Like I said above I would set the…

Yeah, asset inventory is optional, but the NodesMacAddress table is pretty reliable even when no inventory is being collected.

Nothing exists out of the box allow end users to register their own systems for monitoring, it would be relatively simple to have a web dev put some kind of UI together using the API though if you were motivated.

I want to say that faults with local disks or memory and such are available but you have to set up your own custom UNDP pollers and point them at the managers address, not at the blades themselves. You may find what you want in the areas around OID 1.3.6.1.4.1.9.9.719.1 MIB Reference for Cisco UCS Manager - About Cisco UCS…

Trigger count will actually pull all the times that alert has fired for as long as the event history is being held, by default that is 60 days if I recall correctly. There isn't a clean built in way to pull what you want through the GUI, but you have the option to use a custom SQL variable based on checking the…

Take that script I posted earlier, push the results into a for each loop and have the api assign any missing applications. Run it once a day as a scheduled task, by the time the bug gets fixed you will have forgotten about the issue completely because you were free to move into new issues. OrionSDK/SAM.Application.ps1 at…

Just shamelessly self promoting, I published this to Thwack last month. After my vacation next week I'm going to write the tool to import dashboards from XML files to make it easier for the community to swap resources/custom queries/entire dashboards viewmigrator.txt

The polling interval by default is two minutes, so a 5 minute chart would always be an aggregate of at least 2 polls. If you experience packet loss at some point in that 5 minutes then you enter fast polling every 10 seconds until we stop losing packets, so in this case I would probably interpret that as the device not…

Yeah I do that too if there are logical rules I can build. Sitenames based on ip blocks or naming conventions and such.

To change it from last 24 hours to all events in the previous month you would change this line: hourdiff(ah.timestamp,GETUTCDATE())<24 to this: monthdiff(ah.timestamp,GETUTCDATE()) = 1 Also important to make sure your event retention settings go back far enough, the default is only 30 days so you would need to increase it…

At the end of the day those connector tools are just a big list of regex rules that parse the incoming event and decide what type of event they are and break out all the parts of the message for normalization. I've felt hackish before and exported mine out and imported back in a modified version as a new connector profile,…

Try SELECT ah.TimeStamp, ah.AccountID, ao.alertconfigurations.Name as [AlertName], ah.Message, ao.EntityCaption, ao.RelatedNodeCaption, ao.TriggeredCount, ao.RealEntityType FROM Orion.AlertHistory ah left join orion.alertobjects ao on ao.AlertObjectID=ah.AlertObjectID where eventtype=2 order by ah.timestamp desc

Why even bother with all these digging around in the database, you can build a report to do this in the GUI in like 5 minutes. Create a new report Add a table, it will ask you for a datasource, choose "I want to report on Application" and if you want to specify which applications or anything else you can filter it here. It…

Seeing your screenshot made me think of a possible issue the we would want to script around. If there are more than 10 volumes in the group then the initial query will only display so many and we might miss things on the volumes that didn't make the cut, so you can use this variant of the query to display the top 10…

Also worth pointing out, if you already have the more traditional orion additional pollers licensed and deployed then you don't HAVE to deploy separate free vman pollers, the normal APE's can poll vmware just fine. I would assume many environments with over 3k vm servers are also big enough to have already purchased APE's…

Awesome to hear about that change!

I recall hearing you mention that you were working on a cloud project, I had assumed this was just with distributed netpath agents. Are you actually looking to move the core application and/or db off prem?