mesverrum · Observability Architect · ✭✭✭✭✭

From poking around I think you might be able to get this by looking for addresses that are used, but have a blank value for their dhcp lease expiration?

john.trumbul​ My mistake, someone in my team made that custom property and I mixed it up with the built in variable I was looking for, the alert condition should actually look like this, note that it is alerting on the volume capacity forecast, not on volumes. As far as adjusting that threshold, they don't make it very…

You can get by in a small environment with fast storage subsystems, but outside of a lab I don't do it anymore. VM's are fast and easy to deploy and if I do end up with any weird performance problems I don't want to have to worry about things like that when I call support because the first thing they are going to tell you…

Once you click Enable Table Editing the changes you make are saved as soon as you click out of a cell.

You need to validate the auto dependencies, the tool is building them based on a limited set of information and I have seen it wrong often enough not to blindly trust it. To use groups with dependencies you would need to build a group with everything downstream of the parent switch in it, then build a dependency where your…

So when you click onto an unmonitored VM it doesn't have a storage tab with info like this? I don't recall exactly where this data ends up in the DB, but it should definitely be collected for unmonitored virtual machines. If you don't have it then there's probably some kind of problem with vman or it's settings.

Like tdanner mentioned, you are going to be pretty much on your won when it comes to parsing that trigger and reset XML. I've seen the request come up often and nobody has been able to put forth an easy to use solution. I've done mass edits before to the trigger and query XML, but it was a relatively simple set of…

My experiences playing with this have been that the discovery API doesn't quite have all the same functions as the GUI, and in some places where it would look like the options are there it doesn't seem to be working correctly. Just as an example, if you run the api command for discovering interfaces on a node it would…

If they could expand/improve on it to the point where it completely replaced the UNDP tool I know and add in a few more features I've been asking for I know I would be happy. The main perk to using the manage pollers is that it replaces native functions if they aren't working correctly. If you just set up a UNDP for CPU…

If you reallllllly want to make it work you can take a look at the database table called Pollers, and observe how it changes when you modify the details of one node, then you can write a SQL script to create a similar set of changes to the desired nodes. You can push SQL scripts into the system via the API using the…

This looks like a decent query to track what you say you want. One thing you may want to keep in mind with a chart like this is that netflow by default filters to the top 95th percentile of traffic, so this chart would never be 100% accurate and won't match exactly to what you see if you just set up a total bps chart for…

None of the native tools in SAM have that feature at this time, seems like your best bet would be create a custom powershell monitor that pulls and parses the json These should be able to get you what you need to know: How to Use PowerShell to Work with JSON Data A Look at JSON and PowerShell The Basics of PowerShell (part…

Yep, everything in Orion can be made to trigger an alert https://support.solarwinds.com/SuccessCenter/s/article/Create-an-alert-for-monitored-components-in-SAM

I don't recall any scenario where Solarwinds uses anything other than the standard interface oids, same ones that are part of the snmp rfc, 1.3.6.1.2.1.2.etc

Seems like that device doesn't support the OID, or is not allowing you to poll it at least. You could verify by running an SNMP Walk against the router and see if you get a result back for that OID. Meraki SNMP coverage is pretty weird in terms of which OIDS they do and don't have.

The free tools mostly seem to be used to drive users toward the full paid products. The full products are very heavily embedded in a Microsoft Windows Server type ecosystem. I would be surprised if the devs find there is a significant ROI on porting everything over at this point.

Yeah, I started learning SQL originally by picking apart reports and queries i found on Thwack and combining that with tutorials at SQL Introduction and stack exchange type searches

You add the custom query widget to a dashboard and paste it in there

I actually started to write a post suggesting that the UI might not light the special characters in your headers, but I distracted by something shiny and never made it back. Good to know it was an easy fix

Typically huge blocks of ports like that are just used for responses, NTA does not usually categorize data based on responses, plus it wouldn't necessarily be very helpful since anything in the ephemeral port range really could be used by tons of applications.

I'm using chrome, can't copy the numbers even if i wanted to on here so it must be something browser specific.

Number one thing to check when you take an action in a Cisco device and don't see a related event in LEM, does your device even log that event type? Run a show logging on the device, you'd be shocked at how little Cisco logs by default. Thie below doc outlines some of the categories of possible traps you could send if you…

Sounds like they fixed it in the Manage nodes screen and forgot to check if the same bug existed elsewhere

netflow is from it's core a layer 3 protocol, only a few Cisco devices are able to package up l2 packet info into a flow, specifically I can remember setting up for a 6509 chassis but I don't believe there is any equivalent capability on anything smaller than that.

blade mgmt addresses don't support snmp, hence why all you can do is ping them.

I doubt there is anything built in or accessible via the GUI that could do this, but you may e able to cook something up with SQL and custom properties I expect. The ip addresses associated with an interface are not stored on any kind of historical table so you can't just say if current IP != previousIP. There is a table…

I think where people's expectations get messed up here is that the IP solarwinds is polling under blade 1-8 is actually the blades' management IP within the UCS and is not integrated with the OS that is on the blade in any way so they don't see what they are expecting/hoping for. It tells you that a blade is plugged in and…

When you use the custom query resource there is a check box for enabling search, paste the same query into the box that it creates and remove the comment marks from the last line.

I assume there is already an alert with the same name or did you delete/rename that?

Views dont work that way, you have to copy the entire view group if you want to make a tailored version.