mesverrum · Observability Architect · ✭✭✭✭✭

You are at odds here, the security appliance has those options to make itself invisible or harder to identify by remote tools, and you are trying to use a remote tool to gain visibility into the firewall as packets move past it. You will be hard pressed to come up with a solution that will make both happen at the same…

In this case I would say SAM is providing an option for monitoring/alerting, not so much a tool for reporting. As in, you can tweak those thresholds in the template scripts and say "if any mailbox is over x GB" I need to talk to them. If we have inactive users I need to see about pruning them from my accounts. For just…

I haven't tried this out before, but an F5 can monitor services with their health checks and i believe you can do your forwarding rules based on those. In a failover event Solarwinds downs most the services on the server and starts them up on the HA backup. In theory you might be able to do a bit of a DIY redirection if…

IIRC you may have to restart your app pool and website after changing those files.

I don't believe that there is really an issue to resolve, the response times are just very fast. Are you hoping to see something slower?

At glance grouping by DateTrunc('Hour', NIT.DateTime) should get you what you want unless there's something I'm skipping over

With NPM you can deploy a Netpath probe at one side of the link and have it monitor between them, if you have SAM you could set up a scripted solution as well.

Yes the simulated also won't work. If you ever got it to display anything outside a real alert I'm guessing it meant that the alert in question was already active on the object you used to simulate.

Are you looking at the averaged stats from an older time period or something like hourly averages? The default retention settings hold detailed stats for a week, then average them to hourly values for 30 days, then average those values and hold them for a year. An individual node showing stats that have not been aggregated…

While it poses a hypothetical risk, the fact of the matter is that MSSQL does not allow a more fine grained approach so Solarwinds has to use what is available. There is no permission such as "ALTER ANY CONNECTION FOR <DATABASE>" sql server - Grant permission to KILL connections (sessions) for certain databases only? -…

Im fairly certain that Orion doesn't normally just go out and get lists of new interfaces. I think they only pick them up as part of discoveries or actually hitting list resources. There is a verb in the api for discoverinterfacesonnode, it could maybe help with your scenario but it only works on snmp nodes, and the data…

It's fair to say that improving automatic discovery should be a big priority within solarwinds, because these days it is one of the biggest pain points I see with my clients. Almost all the required pieces exist and you can script up a pretty robust automation if you are strong in the sdk, so that tells me there is no…

You can create custom oids to run any scripted stuff you want on linux based systems. Are there useful commands you know of that you would be able to execute from their cli?

Most likely the difference in the time between the event and the email being generated was because of the polling interval. Most component monitors are only checked every 5-10 minutes and in the case of the windows event log items it looks back for a certain defined length of time to see if that event was triggered in the…

Assuming servers are already built and patched and you have all your service accounts in place already, sounds like a day if you use the out of the box alerting and templates. Over time your admin will definitely want to tweak things to suit the environment, but it typically takes people a bit to get a sense of what…

You might open a support ticket to have them walk you through it, or maybe check if there is any other installer in the customer portal, but that seems like the name I would expect for the file.

This issue you are seeing probably has to do with the polling intervals. The most common situation i see with intermittent dependency issues happens like this: Your poller is rolling through the giant list of devices it needs to hit. At some point it stops getting pings back from something that should be a dependency child…

Indeed, I already saw it mentioned in the what we're working on and knew the clients would throw a fit if you guys didn't get feature parity before you get around to trying to deprecate the appliance. But as far as v8.0 goes this is where we stand.

Easiest way without scripting is just to use the Component Monitor Wizard feature, YOURSERVER/Orion/APM/Admin/MonitorLibrary/AppFinder/SelectMonitorType.aspx If you know what you are looking for 60 servers should take maybe an afternoon.

To be honest I haven't installed MA in a while, I don't know that there is anything that won't work in Server 2016, but I do see the same as you that the "newest" OS that is officially listed in the documentation is 2012. Best bet is to open a support ticket to get confirmation on that one if you don't want to roll the…

Since all the fields except the average transmit bps show the same values (aside from the rounding) I would expect that the legacy report write is actually pulling values from different places than what was selected for the web based report. Looking at the web UI on my server there are multiple fields called transmit bps…

No, the backup files are always just named with the node info and timestamps. For the custom job, it's not natively a function in the GUI, but you'd have an action that executes a script to execute the job as discussed in this thread ORION NCM : Create jobs through the API

Ah I understand your question a bit better now, to be honest I have not yet had a use case where I had to test the logic being used for that group member availability feature since it came out. My availability reports are all still relying on the individual objects availability stats directly so I haven't looked at group…

All 3 of those work, you will just be feeding the cert into Windows IIS so it takes anything that you can stick into the Windows server cert store.

SWQL doesn't have any function to concat separate rows into a single long one, this can be done in plain sql using a for xml path function, search around on thwack and you'll find examples where people have used them to make strings

Yep, there's also a way to do it in the GUI since version 12.0 roughly, Change the Web Console name to FQDN - SolarWinds Worldwide, LLC. Help and Support

Yeah importing can clear data, its a bit of a nuisance but what I often do is export out the existing properties, merge my changes into the csv, then import that version back in. That way I don't lose any existing property data.

What is the goal of using this kind of group that can't just be accomplished by making a list of neighbors and their statuses?

It's kind of a whole thing to get into, I'll try to circle back later on when I get some time.

I run into the scenario you describe quite a bit, and in that case I often end up with a pair of custom properties to address the issue. First is a generic ApplicationRole - examples being web, database, application, licensing, whatever roles make sense within that app architecture. Then I set up another property that is…