Comments
-
A quick starting point would probably be something like this select n.caption from orion.Nodes n left join orion.AssetInventory.Software ai on ai.NodeID=n.nodeid where ai.uri is null
-
Since SWQL doesn't have a pivot function I've done what you are asking in the past with a stack of additional joins SELECT NCP.SWCP_Site As [Site] , SWN.nodeName As [Node] , NCP.SWCP_DeviceType As [DeviceType] , CPT1.Status as VPathName , CPT2.Status as VPathState , CPT3.Status as VPathBytesSent , CPT4.Status as…
-
Worked with lots of people who have gone around and around on this, but yes the scheduled discovery is the best available path forward, but usually you need to also set up some kind of rules to clean it up to only track the volumes you want. That clean up process is not really well defined natively in Orion so lots of…
-
Are you sure you aren't chasing issues with local dns getting cached on your machine during a failover? The website service stays running on the inactive host but if you have that ip cached it just causes tons of errors until the dns entry expires.
-
You have a misunderstanding about page life expectancy. It is basically an average of the duration a chunk of data can sit in ram before we have to drop it to hold something for a newer request. A healthy db would see this start at 0 for maintenance or a restart and then just go up and up until you hit the max of the…
-
So since they are ICMP only nodes Orion isn't really going to know anything about them, so you are going to need to come up with a way to populate some list to map the node captions to the correct interfaces. Inside NCM directly its not going to be able to reference UDT data but with a custom script (thinking powershell,…
-
The auto dependencies are typically only going to get you 80% accurate relationships from my experience. You have to turn it on then go through all the relationships and verify the accuracy and fill in any gaps. Many devices don't support the necessary OIDs for Orion to establish the topology on its own.
-
My sql instance right now is 16 vcpu, 600 gb ram and runs all of the applications associated with the monitoring platforms. I imagine that my predecessors wanted to avoid any kind of ram bottleneck when they moved to GCP so they just went hard with it. SQL drives are all split out per database plus tempdb and logson SSD,…
-
When it comes to groups and dependencies I have found the GUI can be extremely sensitive in a way that the underlying application isn't. What I mean by that is I have done all kinds of hacky things in the API and SQL actions and inserted objects and they seemed to work the way i expected but then the GUI either didn't show…
-
You would just want to break your rule apart, there is a 1 to 1 relationship between rules and remediations so just split them up and it's easy.
-
This is what the custom disk volume widget I use looks like, doesn't have the percent bar but it does change color when thresholds get breached or if there are status changes. I also use it to display a custom attribute we use to route out disk alerts to the various teams as needed. SELECT ' ' as Type,…
-
Just as a curiosity, are they both running the same versions of the orion platform? If you hover over to top where it says group details your browser will show a link with a resourceid=?? You could run this SQL query against each your databases as a quick way to compare if something custom may have been done. If they both…
-
After seeing your post I thought I should take a stab at it but I'll admit with the limited amount of time I was able to dedicate to trying it I wasn't really able to find anything good. Hopefully someone else has the bandwidth to really dig in there and figure it out.
-
I used this script before to make the change by running a discovery with my snmpv3 creds against all my nodes that i needed to change, that way I could confirm that my creds were good before i cut anything over. For anything that had a v3 match it switched it over # load the snappin if it's not already loaded (step 1) if…
-
I use a custom SWQL query for getting the relevant info on alert actions, you could filter it a few ways to narrow in on things if you like. --Alert Configuration and Actions Report select ac.name as [Alert Name] ,'/Orion/Alerts/Default.aspx' as [_linkfor_Alert Name] ,case when ac.Enabled=1 then…
-
Netflow doesn't really have a concept of a polling interval. You set up your routers/firewalls to send data as frequently as you like, but the recommendation is a max of 60 seconds since the Netflow db is all dialed in with that assumed interval already. No extra effort needed if your routers are already doing 1 minute…
-
Most saas and cloud vendors have an API available specifically for us to be able to integrate custom tools with them. Right now in Orion they have the SAM custom api poller that's been rolled out over the last couple releases. I think the goal with that is to have the community start building and sharing the various…
-
Yep, the default event log tool isn't really built for correlating events. You can duct tape a solution together within Orion if you are motivated but if you have powershell skills handy I expect you'll have more luck with a scripted monitor.
-
Honestly I would take one look at anything like that and kill it. Itemizing nodes one by one inside alerts is just not a scalable way to manage things, as you are seeing here. If you need to see whatever insanity was in that list your best bet is probably to export the alert definition to an xml file and parse it out of…
-
If NTA receives viable packets from an IP monitored with NPM then it should just automatically add them to the list. Any chance you could throw wireshark on your orion server and confirm that it is seeing the netflow packets from the ASR? If you are getting them, does it show as coming from the same host IP as the one you…
-
My initial login page is pretty high level. The goal is get you from here to wherever you need to go easily, so I have custom search widgets to search by node name, application names, or to find specific dashboards. Got some time zone info since we have users spread out, an html widget where I post general announcements of…
-
Nothing available out of the box, but many people have rolled their own integrations through many different methods. Implementations vary from directly with linked SQL, indirectly with scripts interacting with API's on both tools, rudimentary connections where you send an event emails to a particular mailbox
-
I think maybe there was a miscommunication on your case, there is already a check box in the discovery setup for adding ICMP only nodes.
-
Since you are early on it would be faster to just remove them and re-add. In general you can bulk change nodes from SNMP to WMI by going to manage nodes and multi selecting the nodes you want to change, but if you need to change more than maybe 50 at a time that can be a slow process.
-
If WMI polling is used, SW engine initiates on wmi ports, 135 normally, the node responds toward the SW server on a random ephemeral port. SW server then processes the data and sends it to the SQL server
-
That's been my experience, add a vcenter and it should automatically begin to monitor the hosts as it sees them from vmware.
-
If you have NCM its potentially possible to build a script that would navigate the menus and deploy the upgrade, but in my experience most psus don't really use a CLI the same way you do in a Cisco, so the process of building the templates and scripts can be a bit more complicated.…
-
You'll need to run an snmp walk against the AP to see what it's showing on oid 1.3.6.1.2.1.2.2.1.8 for those interfaces, I have encountered many devices over the years that just had bad data in SNMP so SW can only show what it sees.
-
I've never set the retention up with the hourly values being a shorter duration than the detailed values, I'm curious what the effect is. In my head I would hope it means you have detailed data for the 60 days, then it ultimately gets rolled directly to daily values but I could also imagine that it might behave in other…
