mesverrum · Observability Architect · ✭✭✭✭✭

That's what the dependencydocumentation.solarwinds.com/.../Core-Creating-a-New-Dependency-sw1316.htm feature does.

I'm surprised that ever worked reliably, instead of settings status = 10 you need to stop doing that and instead set unpluggable = 1, which will allow the built in feature to work the way it was intended.

I wouldn't try to use SAM for Netscalers, I use NPM with the custom UNDP pollers. This thread has a decent poller file you can import as a starting point https://thwack.solarwinds.com/t5/NPM-Documents/NetScaler-Universal-Device-Pollers-UnDP/tac-p/527216 I know back when I was working as a consultant I had another expanded…

^ Probably, but there might also be direct SQL to SQL database options available like setting up a linked database between Orion and Spyder. I'd actually say that linked DB is likely to be the simplest if you have in house sql knowledge more readily available than REST API skills.

To be fair you threw a wildcard search into the middle of all the configs. There is not any kind of indexing inside that column and it is often thousands of characters long. That's really the kind of thing that is really painful to do in sql. You'll probably have better luck bypassing the api and directly doing a search…

I think alerttriggered is legacy from before they moved to web based alerts, at least I know I have never used it as part of any custom SWQL query I ever wrote. If you want data about alerts I would recommend using a query like these as a starting point to see how the pieces come together so you can get exactly what you…

Solarwinds doesn't use every port on every host, it depends on what you want to monitor. If you are asked to monitor dns, you probably need port 53, if you don't then don't open it up. It's all situational and depends on what you plan on pulling back.

So when it comes to the gui driven parts of the report writer it will only show you data points that are recorded in the database, and unfortunately the duration of a down period is not recorded, just the timestamps when Orion saw the device go down or up. (Technically there it's a downtime table but when I've tried to use…

Finding every scenario where a property exists tends to be fairly simple, but finding every possible variation of syntax to map to a specific value in that property would be a huge effort. For your example we'd need to be string parsing for scenarios like all of the below and many more to have any chance of being accurate…

Looks like it should work okay, but SAM has a built in file count monitor, why would you even need to run it as a custom script? https://documentation.solarwinds.com/en/Success_Center/SAM/Content/SAM-File-Count-sw4735.htm

The fact that it comes up with the wireless controller view is just some quirk that SW defaults to that on any unknown vendors of devices. You can go to settings > views by device type and change it. As far as monitoring the UPS data, yes you would just use UNDP's for anything that SW doesn't come with native support for.

All alert actions only execute on the primary server, depending on the topology of your servers it might be possible to have your primary server launch a pssession on the APE and execute the rest of the code from there.

You can do business hours in the GUI, https://support.solarwinds.com/SuccessCenter/s/

Pretty sure that anything from 2010 and before is basically irrelevant at this point. I believe that was before they even had web based alerts in the product. This youtube video, https://www.youtube.com/watch?v=PzmSOc7SuM0 , shows some footage of what the process looked like back then and you can pretty clearly see that…

When you tested were you using the same account that ncm uses to access your devices?

I've never seen SW back port anything so I'm doubtful.

Good luck is all I can say. I know many people who have waded into that pool then decided to walk right back out. Its definitely not the most human friendly XML block I've ever tried to work with and there are so many variations on how you define the logic that it's really painful to decode it all.

Go to sam settings and there is an option to manage components within templates. From that area you can copy components directly from one template to another.

The new charts don't show data gaps. It's just drawing a straight line from the previous response time before it went down to the new response time after it comes up.

This thread discusses it https://thwack.solarwinds.com/t5/Alert-Lab-Discussions/Alerting-using-Slack/m-p/325228 and they made a lab video about how to do it. https://www.youtube.com/watch?v=GOE5WfKBahM

I've done things like that in the past, basically using the NCM API as a place to shoot code into devices and not have to worry about things like managing credentials and telnet/ssh and all that since they are already in NCM. There's some documentation here that may be able to help you get started, the verb that you'd be…

Maybe need to increase a timeout for the cli polling? I'll dig in tomorrow and see if I can find the controls for it.

Was the process part of a SAM template? Orion won't be retaining metrics on it unless you designated that it was important by adding it as a component in a template. Assuming it was being monitored then the easiest solution I think is to use Perfstack, YOURSERVER/ui/perfstack/ Click add entities. 1) Change the type from…

Where I am we were able to make a perfstack chart of the asa usage metrics and just sent that page as a scheduled report.

Out of the box sam isn't collecting anything unless you tell it to. I wrote a powershell component that collects the top 5 processes by cpu/memory for this specific scenario. https://thwack.solarwinds.com/t5/SAM-Documents/CPU-MEM-Process-Snapshot/ta-p/528811

There is no built in tool to export and import discovery jobs. With it being such a large difference in versions I would be hesitant to even attempt anything like copying the discovery profiles over in the database or scripting something up to migrate them. A fair bit has changed in discoveries since 10.4

I think it's important to keep in mind a way that SolarWinds alerts are fundamentally different than some other tools. In some tools you "assign" alerts to monitored objects and so you can pull up a node and have it spit out a check list of alerts that the node can tr. Orion alerts never get assigned to anything, they are…

You have a few options, you can slow down the polling intervals on your existing nodes to get more capacity out of the existing poller, or you can stand up an additional polling engine (list price on them is roughly ~20k these days, but some licenses already include them). As far as the install goes you can download the…

There is already a native integration with Cisco ASA's that does basically all the things you described, no scripting required. https://oriondemo.solarwinds.com/Orion/NetPerfMon/NodeDetails.aspx?NetObject=N%3a2511&ViewID=263

SELECT [SA].ProbeName AS [Source] , [SA].ServiceName AS [Destination] , [SA].DetailsUrl AS [_LinkFor_Source] , CONCAT('/Orion/images/StatusIcons/Small-', [SI].IconPostfix, '.gif') AS [_IconFor_Source] -- This is the status for the most recent poll only-- , ROUND([Tests].MinLatency, 2) AS [Min Latency (ms)]-- ,…