mesverrum · Observability Architect · ✭✭✭✭✭

Will do.

50 groups is not such a big deal then, but they can be annoying if you want to use logic that they don't support in the GUI for the dynamic queries. I generally do not use the groups resources for anything beside dependencies because i find them to be more work than they are worth when organizing things, but if you want to…

Charindex returns the position of the start of the search string. The + moves the start of the substring to after the colon character. The+255 on the last one is just me being lazy about finding the actual length of the string and just guessing at a high value.

Same thing I teach all the people I train, build properties first, then if you still think you have a need for groups then they should be keyed into the custom properties. If you build the groups first it makes life much harder in every other part of the tools.

Thats along the lines of what I was thinking as well, if you make a change on the dhcp server but IPAM doesn't reflect the change I'd be suspicious that the polling job isn't working for some reason or another.

Are you running a relatively current version of Orion? Did you paste that into a custom query resource or somewhere else? It should work as-is.

I've never seen those alert names, but as far as where they might be lurking in your system, check the alertdefinitions table in the database, thats where old alerts were stored before they moved them to alertconfigurations a couple years ago.

No, we used SEM for port scan alerts and such. I could see them happening in NTA once I was looking for them but I can't think of a way you'd be able to write an alert to catch them there.

Its based on custom data from the database, you can copy/paste this into a "Custom Query" resource on a summary view, basically looks for the most recent unmanaged audit event that matches the node id select n.caption as Node , '/Orion/NetPerfMon/NodeDetails.aspx?NetObject=N%3a' + ToString(n.nodeid) AS [_LinkFor_Node] ,…

I've been using a sql based method of building these things for several years and never got around to switching it to the SDK, but I've never had any problems with the dependencies I built that way. Might be a possible workaround if there is a bug somewhere in the API dependency implementation. This thread discusses a…

They come from Cisco EOL press releases, which are not laid out in a neat programmatic style to make them easy to parse with code. So all you can really do is read the press releases yourself and keep an eye out for your hardware models. If no EOL announcement has been made then there would be no suggestions, or if NCM…

The idea is that all the +'s are there to concat strings together and the dashes and char(10) + char(13) (line breaks and carriage returns) are just there to format the data into something halfway readable. Instead of presenting it as a table with multiple cells it is smashing it all together as an xml doc in a single cell…

These are all pretty complicated.... you could just remove the limitation, import properties to nodes that need them, then turn the limitation back on and it will automatically include everything that exists on any nodes. I literally just went through this while merging two environments this morning.

Best way to learn and understand the XML is to build a discovery with the settings you want in the GUI, and then look at the database table called discoveryprofile and there is a configuration column there with all the XML that defines the discovery. Make changes in the GUI then observe how those changes affect the…

This is the basic SWQL query I use for most of my alert dashboards It doesnn't have check boxes or the ack button since those are done in javascript and I still haven't gotten around to being able to recreate that, but if you click the column with the alert in it that takes you to the alert info page, which does have the…

Try https to be sure, but between the errors and the fact that you can't get the website I feel like you didn't complete the install of the main server yet. Try launching the configuration wizard and letting that run. At the end it should take you to the web console. If that part isn't working do not proceed on to trying…

In terms of knowing what is not working, I'd run this query in SSMS, but with how big your tables are I would be seriously worried that it might not complete in a reasonable amount of time but you can try. It gives you the name of the subscriptions that are not getting their messages, the query column should tell you the…

Change the line that says * where (n.status = 2 or t2.nodeid isnotnull) to say * where (n.status = 2) You could also just get the ip to show without hovering by changing the first line from * select n.caption as [Device] to * select n.caption as [Device], n.IP_address 

There's no built in way to have LEM look up a local security group, what he was suggesting is having lem use a rule to watch for changes to the local group and then have the alert action modify the contents of the LEM user defined group as they happen so you don't have to manually update it every time.

Keep in mind that the SSL cert expiration monitor is also available on it's own as a single component, using only 1 license per tested website. SSL Certificate Expiration Date monitor

Any time you want to do something custom in Orion that is not available OOTB, you should be doing it with "custom" properties. While your use case may be somewhat common, it is not universal. Also you are incorrect about having to monitor gen 10 hardware via ILO only, i have wrestled that problem in many client…

I would discourage you from messing with that category value, the application automatically decides what it will put into there based on the device info it gets from polling and checks that value to determine how it handles certain things they do internally and which resources will load on the page (for example network…

If you aren't up to modifying the SQL described here to work on the interfaces table then as an easier solution you can just use the custom table resource to show interfaces where unmanaged is true It doesn't include the user info but if you add a "Last xx Audit Events" to your interface details page it should record that…

This is a custom chart I use for polling loads that uses a custom SQL query as its datasource select --This is the Time Column for both of your data series in your custom chart d.[Date] --This will be the 'ObjectID' in your custom chart and the 'Caption Column' in your custom chart ,e.servername as [Server] --NPM Polling…

I thought Adm was on by default anyway, unless you changed the global setting?

Sounds like you will need to open a ticket with support then. Something specific to your environment.

Are you running the latest version? last I heard i thought the soft cap was around 3k objects on the map at once.

OP mentioned that is a custom property they added, just create the same one as a yes/no on your NPM and tag the WAN circuits you want to include in the report -Marc Netterfield Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems *

Solarwinds has no product that does what you are describing. LEM is an event monitor and can track when things happen but has no functionality to investigate user permissions or similar data. It also has it's own dashboard and database and does not directly integrate with Orion in any way that you would be able to use…

You were correct when you said that it has to be a "built in" variable, they don't let us just walk the SWQL tables to take whatever we want unless you build a custom sql/swql variable. As far as what is the point, why is the sky green? SW devs do what they want?