mesverrum · Observability Architect · ✭✭✭✭✭

With config change templates there is no functionality to create loops of user interactivity. You need to understand the workflow, NCM is not like a shell script or CLI where it takes actions in real time and allows for new data to be processed as it runs. Every bit of data you will use in the script has to be known before…

Makes sense, pretty hard to expect support tech's to know anything about a scheme that only a few system engineers on the planet have done successfully. So far I've not talked to anyone who was satisfied with their experience of testing Orion app servers and DB in a cloud. You could probably swing some APE's and definitely…

Unreachable indicates that you have a dependency enabled. Dependencies are intended to cut down on alert noise when you lose a choke point on the network. For example when an edge firewall in a remote office is down you might not want to get 30 alerts for all of the downstream devices so thre dependency allows Orion to…

Yesterday I saw a post indicating there might be a bug where the perfstack view has the charts using area chart mode and if you use the widget it is using stacked area view. With that in mind and comparing the numbers in your screenshot certainly makes them look like they are stacking. I know it was submitted as a bug so…

If you want to go further down the rabbit hole you could also use CASE WHEN ELSE END type logic to make the way it displays conditional, so have the font change size and color to reflect the severity of the threshold breach and turn green when things are fine.

Yes this is a use case for a UNDP

You won't need the third party solution for this issue, I misunderstood, that's for polling windows servers with SNMPv3 instead of WMI. Your issue is that your new Orion server cannot correctly decrypt the passwords in the database because it doesn't have the same certificate that was on the old system (new server…

Everything under SAM Template port requirements essentially depends on what data you think you need access to. I think the most detailed information for each use case is the documentation for each individual component type,. but it's not a whole lot more than whats already in the ports doc.…

I'm not familiar with this inner and outer shell trickery you are describing, but that sounds about right. something like an If $value = 1 then exit 1 else blah blah

in this case it starts counting from the year 2000, but you can switch it to any time in the past thats older than the start of your data, it wakes however many minutes there have been since then, divides that number by 5 into whatever whole number, then adds that number back in to be the start of the 5 minute bucket.

In short, because that's how they structured the schema. All child objects of nodes include their parent node in the path. In theory someone else could have written the schema to just skip straight to the object but that's not how it was done in SWQL so we have to send our requests in the format that the software expects…

Plan looks believable to me. If it makes you feel better, alert definitions has been deprecated a long time. Map studio files could be a big loss if you already have a lot of atlas diagrams, but I have to admit when I see old instances change hands we almost always find 3/4 of the maps we're way out of date anyway.

This is what it looks like on mine which I smashed together to get ${N=SwisEntity;M=Outbps;F=Bandwidth}

yeah just like that. I only wrote it to do them one at a time, making it do more than one at a time seemed like I would go down a road that was going to take more time than I wanted to dedicate. In a super simple form you could just declare more variables for the other CP add "or" bits to the where lines in each segment,…

There is a widget called "Custom Query" and you just paste in SWQL code to get the data you want. It only outputs tables but it has some built in functions for adding icons and links and if you get creative you can make it do all kinds of useful things. I find that *almost* everything I need can usually be accomplished…

If you have the appetite for DIY in SQL you can just create the limitations you want and assign them to the tabs themselves directly in SQL. It's not really a limitation of the tool that it can't have different filters for different tabs, its just the way it was implemented in the GUI. Every time you create a limitation it…

That's the approach I had in mind as well. A possibility too that might help it run faster is to leave some kind of placeholder file maybe in windows/temp on each node that tracks what the timestamp was for the last time you polled the node and if the component should be up or down based on the most recent event. That way…

The only thing I would add is that trying to do them by memory is a huge waste of mental effort. I've been writing these things for hundreds of companies for years and I still mess them up on a regular basis when I try to wing it from memory your best bet is just to use the insert variable button inside the alert building…

Let's not overstate the problem, cpu/memory/disk is extremely easy to do in the GUI, no SQL at all. Where things get complicated it when you want to start building reports with multiple different types of child objects, and this is tricky in the GUI because it is tricky in SQL. For the most part the developers have opted…

This may help https://loop1.com/swblog/solarwinds-tips-sending-alerts-to-different-teams-using-custom-properties/

EOC is trivially easy to set up, typically takes like an hour from the start of install until I'm done.

Open a ticket with the vendor and have them fix the bug in their SNMP. Thats an industry standard OID so if they try to come back with some nonsense like "we consider 2 to be up" then they are just being dumb. Meraki has had a similar issue on the mx68 firmware for months and the fix won't go general release for several…

I think the term pool implies flexibility to the configuration that doesn't actually exist. It is always a pair. MPE+MPEHABackup, APE+APEHABackup. There are no other combinations allowed, a server cannot perform multiple roles or anything else..

This is an example of the kind of SWQL I use for displaying the over ride when needed, or the template value when there is no over ride SELECT case when isnull(cs.Value,'') = '' then cts.value else cs.value end as setting --, cts.Key, cts.value, cs.Key, cs.Value FROM Orion.APM.Component c JOIN Orion.APM.ComponentDefinition…

This is the perfmon section on my laptop, check to make sure your qlogic shows up there as one of the network interfaces. If It doesn't then i'm not sure if Solarwinds is going to be able to collect those stats from that brand of interface. Might end up being the kind of thing you pursue with the Q Logic support to see if…

If the ISP forwarded netflow data from wherever they actually have their router and had a list of IP's on your bundle it would show how much traffic each IP was passing, but they'd still need to do the leg work of looking up what dhcp addresses had been handed out to which homes at that time and figuring out which…

I just reviewed your string more closely and compared it to what I have that works in my environment, what you pasted in here is missing a closing single quote at the end "filter:/Orion.Nodes[CustomProperties.City='"+site+"]" < wrong "filter:/Orion.Nodes[CustomProperties.City='"+site+"']" < corrected You probably shouldn't…

For the most part SWQL and SQL use the same kind of joins, SWQL has some shortcuts but if you aren't already strong in SQL then you can basically ignore that stuff for a bit. This is the link I started at back when I began to smash me head against the Orion database. https://www.w3schools.com/sql/sql_join.asp If you are…

There's a log file parser template that I think may suit your purpose https://documentation.solarwinds.com/en/Success_Center/SAM/Content/SAM-Log-Parser--PowerShell--sw5048.htm

Internally they use it to make minor tweaks to the resources that show up on the node details page. For example, you might notice the network devices don't load an appstack resource. For the most part it doesn't seem to be intended for end users to mess with. There may be some other back end things it ties in to as well…