mesverrum · Observability Architect · ✭✭✭✭✭

The chart I described is exactly the same data as the screenshot you posted, just laid out a little differently.

The exact permissions required are spelled out in the admin guide for sam and in those links HerrDoktor​ sent. https://documentation.solarwinds.com/en/Success_Center/SAM/Content/SAM-AppInsight-Applications-sw1243.htm

I wrote the query using 12.5, so it is possible that something changed between here and there. You can manually create the link by doing something like , '/Orion/TrafficAnalysis/NetflowInterfaceDetails.aspx?NetObject=NI:'+tostring(i.interfaceid) as [_linkfor_Netflow] as a replacement for , i.NetFlowSource.DetailsUrl as…

Is the script executing locally or remotely? Hard to tell what the output was with the obfuscation. Just guesses at this point

SWQL has almost the same conventions as T-SQL because ultimately it gets converted by the info service into T-sql. You had an error because you put an extra comma after the nodeid and didn't specify any other columns. The n after nodes is just an alias for the table name. You can inner and left join in SWQL the same as…

Yes there would be, but exactly what modifications depends on what your end goal is Is the month an alert falls into based on the time the alert triggered, or are you looking for the time the alert was ack'ed? Do you just need a count of all alerts that month, or trying to get a list of all alerts and their names and all…

This is meant to be used inside the custom query resource, all the linkfor and iconfor stuff won't work in the reportwriter. In custom query there is a check box to make the query work with a search input, paste then query into that second box. In the first box (this would be the version without the search input) just…

The columns available change depending on what your datasource object is, in this case I used component, were you using the "Appinsight for IIS: Site" one mentioned above? I also changed the names in my example because otherwise it would be two columns called name and that would annoy me.

I'd try taking the $user and $pass variables and make the script print them out in one of the messages to make sure they don't have any kind of typo or something

Actually swql is intentionally set up as an abstraction layer between the users and the database, so they can change the back end as much as need between releases and the SWQL equivalent objects will just get remapped to wherever things end up in SQL. When it comes to hardware alerts there is a pretty reasonable out of the…

That reply was in 2013, probably wasn't available back then

Do you have a routing neighbor relationship with their network through this interface? You would be able to see that neighbor relationship drop under the scenario you are describing. The most basic way I can think of would be to set up their gateway as an icmp node. There's obviously something in the ASA setup that it is…

If you are on the NTA summary page and the charts show no data then you are not collecting netflow data for the last hour. Have you configured your routers to send netflow data to the collector? If some devices work and others don't then that would be a fairly clear indicator that the devices that don't work have not been…

Never seen it documented, just learned me way around them through blunt trauma

When I'm getting cpu count I tend to do it this way select n.caption, n.cpuload, cpu.[cpu count] from orion.nodes n left join (SELECT count(NodeID) as [CPU Count], nodeid FROM Orion.CPUMultiLoadCurrent group by nodeid) cpu on cpu.nodeid=n.nodeid

You have to approach this from a couple different thought processes. First of all, you probably won't have time to hunt down every short term blip that you see, so did this spike have any kind of business impact or is it an recurring issue to be worth your time? The next think to keep in mind is that if the same spike…

Ah true, I missed that in the initial post that he was using appinsight. In that case the license cost is a flat value and if the dev boxes don't warrant burning 50 licenses you will just want to remove the template from those nodes. You can get some of the same metrics by using the older sql 2008 templates and components…

The line where i defined the time period is this one, it is set to look back up to 30(technically 29.9999 days but you can adjust it (if you have 8000 alerts this month there are likely some adjustments you want to make to your settings haha.) daydiff(ah.timestamp,GETUTCDATE())<30 to do 24 hours I would do…

Might be something specific to your environment? I see vdi's displaying in VMAN at almost every larger client I work with. If there are systems missing it may be that the service account used to poll vcenter doesn't have visibility into them, or if there's a large number of objects on that particular vcenter sometimes you…

Ah yeah that could work too, set it up where if the difference is not 0 it would trigger.

The default polling interval for volumes is 15 minutes, which is why i suggested at least that long to try and suppress the noise. 

How to install an additional polling engine - Video - SolarWinds Worldwide, LLC. Help and Support

The reason your post hasn't had any response is it is actually a pretty complex task. The list of parameters sounds like an easy thing, but it is actually very complicated. Orion is gathering potentially hundreds of parameters from every device Trying to report on it all basically becomes an entire database within itself.…

The 1 hour of data is actually incorrect, the apes will stash data in msmq storage until the drive fills. It's a common complaint for people to have cases where they have intermittent issues that cause their ape to fill the drive completely. Once db service is restored you can stop/restart the Orion and msmq services and…

So to get past that you would probably need to use a custom sql variable and hunt down the applicable baseline for your interface. I'll see if I can dig up the table that it lives on to query.

In the mean time I have a SWQL query that gives you some visibility into the netpaths, its still a bit of a work in progress as I have seen some edge cases where there are statuses I didn't know about, but here it is: SELECT --esa.ProbeIDcasewhen esa.laststatus =0 then 'Unknown'when esa.laststatus =1 then 'Up'when…

So I looked over your original question and realized i may have been getting off into a bit of a tangent here, your root problem was that you couldn't get the enumerated values to show up in an email on a table poller, correct? First I would confirm that the OID you are working with is properly enumerated in the UnDP tool.…

Have you guys tried doing mibwalks on the huawei gear and just setting up custom UNDP and CPU/Mem pollers on Orion for the apprioriate OID's? I've done this kind of thing before and had pretty good results. The custom hardware health wouldn't show up alongside the native stuff but with enough SWQL wizardry you can make…

Shouldn't make a difference on a custom table widget, I'll fire this up in my lab and post a screen shot of whatever it takes to get it set back up.

Pretty certain that none of the OOTB features will consolidate them that way.