mesverrum · Observability Architect · ✭✭✭✭✭

Specifically this wiki article talks about the verbs relating to Alert Actions, you would be looking to invoke the appendnote verb Alerts · solarwinds/OrionSDK Wiki · GitHub

Install the SDK on your orion server and you can convert what you have, the table structure is similar, but not exactly the same, as whats in the SQL DB. On that swis.aspx page it actually doesnt matter what you use for the object if you are just erasing what they start with and pasting in your own query. The object stuff…

David, You posted the same method I use. Only difference is I would probably be building a custom property to identify which interfaces I wanted to have show up on the chart so you don't have to go in and edit the report directly when you want to change which interfaces it displays, something like maybe…

I feel like all of these solutions are a lot harder than they have to be. If all you need is a resource on the Interface Details page that pulls info about the parent node you can do that with the Custom Query Resource very easily. Select i.customproperties.YourInterfaceProperty1 ,i.customproperties.YourInterfaceProperty2…

Another possibility is that the unmanaged node was being counted against the "are all the nodes down?" logic

Seeing failed disks and hardware sensors requires you to have the hardware agent for whatever brand of server you use installed, for example on a dell it would be the opemanage, hp insightmanager, etc Latest required software used to monitor hardware health - SolarWinds Worldwide, LLC. Help and Support

It's subject to the same retention as you have for all the other sam component monitors as you would find under the sam settings > database retention area.

So you will want to get acclimated to the Solarwinds API, there are not pre-defined functions to perform the vast majority of changes. It is extremely open ended and so the burden is on you to learn how to use it. You can change almost anything you want, the function is swis.update(anything that allows an update) and it is…

Thats why you want to go to manage pollers as I described, there is a setting there to flip the cpu poller on for multiple nodes at once. https://YOURSERVER/Orion/Admin/Pollers/EnableDisablePollers.aspx?poller=Core.Node.CpuAndMemory

I also just want to point out this kind of scheme only makes sense for small environments where a person can babysit little one-off changes like this. For something more scalable you would probably just want to implement a workflow such as having the engineers who are working on a node mute it for the duration of the…

You can fix the chart by wrapping the whole date section in a toutc() function, but you wouldn't want to do that on your tables because that makes them harder to make sense of.

With the website set to use https you have to have a trusted cert that matches the URL. Otherwise the reporting tool will not log in to an untrusted site. Would be an easy way to steal Orion creds if it did.

They are the averages during the interval, I want to say its a 60 second avg normally for dpa

Sorry, here you go, these are the three sql statements I used the last time I was manipulating this kind of stuff. You'll have to rework the details but this will show the necessary tables and how it works. The thresholds tables for each of these things are null if they use defaults, so if you want to over ride the default…

Correct, a year of changes can make a big difference in the orion architecture, in 2017 and early 2018 we had fastbit, now (2019) we are back to MSsql with columnstore indexing Good to keep the posts updated.

o.AlertActive.AcknowledgedBy is not null And to answer your second question, it is important to note that SWQL is actually an abstraction layer between the tool and the database, so there isn't exactly a 1 to 1 relationship between how things are laid out in swql and how they are in the database. With that said, the best…

To be honest it seems like something internal that isn't in regular use, I have checked a bunch of tables and it is null everywhere. I try to avoid even looking at the inherited properties (the ones that show up in green in swql studio) because they are inconsistent at best. Most tables have them, and most of them are…

The report i gave looks at the discoveries you ran already and figures out which credentials were successful during the discovery, this will address your first issue of testing if SNMP credentials have been set on the ICMP nodes. As I mentioned before, in what I would consider to be a "normal" environment running a…

Also, you *should* just be able to add your nodes in with ICMP now and then later on when the creds are added you can run a discovery on them all again and it should update them to SNMPv3 as well as add in all the appropriate pollers for each device and their interfaces and volumes. I highlight the *should* because I've…

The root solution to this problem for the last couple generations of HP servers has been "download and install the necessary software package from hp" but the magic part is figuring out the labyrinth of the HP website and constantly changing naming conventions to figure out what the appropriate software package actually is…

Probably start here Home · solarwinds/OrionSDK Wiki · GitHub And they gave code samples for how to do various tasks, this is a powershell example OrionSDK/DeployAgentViaVerb.ps1 at master · solarwinds/OrionSDK · GitHub

I would wager that this proves at the very least that something is weird about your WLC and how it is interacting with SNMP. 380,000 OID's in a response is pretty unusual but not outside the realm of possibility for a WLC with a high number of AP's. I've done walks of devices with 80,000 OIDS that took maybe 15 minutes so…

As far as filtering to only nodes that are over their threshold, you could do a where condition like where n.cpuload >= n.CpuLoadThreshold.Level1Value or n.percentmemoryused >= n.percentmemoryusedThreshold.Level1Value

I'm confused, groups do not have IP addresses. Groups are just logical collections of other solarwinds objects

That explains why i couldn't find it, the beta forums normally don't end up in google searches

Stumbled back across this post and felt like I should update it since this is no longer true. ARM is now a solarwinds product that does pretty solid auditing of permissions in AD, file servers, exchange, azure, share point, one drive, and SAP.

Assuming that you have so many alerts because you need to control where the alerts are going you should probably read this KB and see if it can be implemented https://support.solarwinds.com/SuccessCenter/s/article/Use-Custom-properties-when-sending-email-alerts

The query in that example is turning on a setting within orion, and as Neo said, for the last several versions that option is already set so it is likely to not be much help to you, but maaaaaaybe your environment is different.

That feature only works on nodes because nodes was the only table they added a "custom status " column to unfortunately.

+1 for that FR please