mesverrum · Observability Architect · ✭✭✭✭✭

That's a legacy widget and unfortunately no replacement was added when they updated the syslogs a few versions back. If you search there was a thread on thwack where people created new versions using swql.

Basically it can't be done the way you want. You either use 1 template with lots of over rides, or you use two templates to cover two different scenarios. Creating over rides is not too hard to do via code if you have a look at the database and just insert some rows where the [key] = '__IsDisabled' and the value = 'true'…

Not entirely sure, but I can say I have seen the script components get pretty fussy about not seeing the line breaks it wanted, I had to manually inject some newlines into a powershell script before, maybe its getting choked on that? Also I don't see it pushing an exit code?

Yeah that looks to be about right to me, did you have any trouble with it?

All alert actions run on the primary application server only, here is an example of one of mine calling a powershell script and passing it a mess of arguments. C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -Command "& {& "D:\PS_SW_Alerts\omnibusPostEifMsg.ps1" -locale PROD -actionType…

Unfortunately the permissions in SAM are not as granular as you are asking, it is relatively all or nothing.

I haven't seen one, but you can always create your own feature request. We don't run the ITOM module in SNOW where I am so I'm not personally familiar with it. Still living that classic Tivoli/Netcool life with a mountain of custom code stacked on top.

Added a custom version of the Application Details widget https://thwack.solarwinds.com/t5/SAM-Discussions/Improved-Custom-Application-Details-widget/m-p/601367

You might not want to take it as a given that join order has no impact on query plans. If everything goes well then it won't but there are definitely scenarios where it makes a difference. https://www.mssqltips.com/sqlservertutorial/3201/how-join-order-can-affect-the-query-plan/ The tricky part about getting help when a…

@"bhumphrey" has been developing something really impressive for building a template for importing nodes and setting up all their attributes based on a set of standards that can be adjusted for different teams. Hopefully he's got something sanitized for public consumption to share soon.

I always trained my clients to remove the events lists and only watch alerts. There are thousands of uninteresting things happening all day, if it's not important enough for an alert then you probably don't need to know about it.

Not a lot of useful data relating to voice is available with SNMP, which was why SW spun up a different module specifically to speak the language of phone systems.

Yeah, that's not specific to swql studio. If you wrote a query that pulls too much data and stick it in the web consoles or a report you can cause the info service to balloon like that. I've learned this through painful experience in client environments. It seems like the info service doesn't actually give up on the query,…

You mentioned several polling methods, but we should take a step back and confirm what these devices are set up to do so we can narrow things down. Do these servers have the SW Agent installed or do they poll with WMI or SNMP normally? With the agent you normally rely on that to send the status updates, if the agent can't…

For SAM components it can be a real pain to pick out the threshold details and display what exactly makes them turn red, this is the query that I use to in my alert message to display the source of component issues. It covers all the types of monitors we use but might not cover everything in your environment.…

I've run into scenarios like this before, by chance on the instance you exported the alert from is it using an action that is shared across multiple alerts? Similar to the screenshot below What happens in those scenarios is the XML just exports the actionid but doesn't actually contain the action itself unless you are…

As an FYI, this post appears to be a form of spam where they took a real post that someone else had made in the past and just replaced their link with these shortened xender and nox addresses. See the original post of this here:…

Any chance your user account has any kind of account restrictions or doesn't have the same level of permissions? Assuming it's not that, a null array tells me you most likely have a valid syntax for the query in general but are you using any variables to filter it? Maybe your variable is not resolving the way you had…

Netflow appliances are mostly out of fashion because there are lots of general purpose server based tools to do the same thing that tend to be a good bit cheaper/easier to use. This section of the forum is specifically intended to be about the SolarWinds brand Netflow Traffic Analyzer software, I'd guess that just about…

They renamed it, i believe it is now called a status summary widget

I guess you are late to the party, but yes this was a common complaint when they stopped developing the appliance. The Orion version has several bits of information that old VMAN used to collect that are not available in new VMAN. Here is the feature request specifically for what you are asking about.…

Since there are still some glitches around the icons having wonky gradients I went ahead and implemented a medium theme for my environment. One day if I get realllllllly bored I might rip through and fix all my icons and keep a cleaned up set but for the mean time this is my compromise. Also created myself a custom version…

Pretty sure the problem is that when you add the details link it isn't taking you to a page for the type, it is taking you to the page for a specific event. Only way to change that would be custom SQL/SWQL unfortunately

The AD polling should only be turned on for your domain controllers, so that is likely the main reason you aren't seeing any results. The test is just confirming that the service account you use has access to the appropriate event log, but the actual integration is only looking for event IDs 4768 and 4769, which only show…

Everything goes from ComponentTemplateSetting unless you have any components where you hit the "override template" button. I usually end up reporting on them by doing something like this select top 20 n.caption , a.name , c.Name , cts.key , isnull(cs.Value,cts.Value) as value , c.ComponentType from orion.nodes n join…

Maybe a stray character when you edited it or something weird in your browser session that a restart might fix, because i copied your query and it tests as valid for me. Inner Join Orion.NPM.CustomPollerAssignment cpa on cpa.NodeID = Nodes.NodeID Inner Join Orion.NPM.CustomPollerStatus cps on cpa.CustomPollerAssignmentID =…

Nothing OOTB would give them that option unfortunately, it could be built as totally custom javascript in a custom html widget if you have the background to make that happen.

This can be done in SQL/SWQL, although I don't know the routing protocol bit off the top of my head I do know it could be done with a little poking around in the db. Select n1.caption as Node1, n1.StatusDescription as N1Status, n1i.caption as N1Interface, n1i.StatusDescription as N1IntStatus, '<------------------>' as…

https://documentation.solarwinds.com/en/Success_Center/dpa/Content/DPA_Installation_Guide.htm

The solarwinds powershell module is really just a wrapper around some rest calls, if you wanted to avoid using the module you can just write up the rest calls directly. I find that the perl examples are probably best for seeing how to set up calls without any supporting software…