mesverrum · Observability Architect · ✭✭✭✭✭

https://support.solarwinds.com/SuccessCenter/s/article/Manual-offline-installation-of-an-Orion-agent#:~:text=Go%20to%20the%20Manage%20Agents,via%20URL%20and%20click%20Next.…

Fortunately there is just a single table with all of the volumes on it. For a quick and dirty solution I'd start with select * from volumes where volumetype like 'virtual%' and see if that list looks believable, once you get your where conditions sorted you to make sure it only includes the volumes you need to get rid of…

If I wanted to redo the alerts to a single form like that I'd probably just use a custom sql variable with some case logic for my To: Itd be something like case when alert object type = 'orion.nodes' then nodes.alertrecipient when alert object type = 'orion.interfaces' then interfaces.alertrecipient Etc

So I haven't tested this out but if you have SAM then you could possibly use a script based log file monitor to keep an eye on the alert actions log file? It's a little bit roundabout but just watch that file for whatever the error string looks like.

Good to know they moved the icons around, I we don't run ASA's at my current job so I hadn't noticed.

Added this widget to the Resource for anyone who wants to try importing it to their environment. https://thwack.solarwinds.com/t5/NPM-Documents/Node-Details-SQL/ta-p/512112

I don't know that it still does it since they are on the way out, but for a long time if you deleted them then they would get re-added when doing upgrades

@"cscoengineer" , I hope you don't mind but I added your widget to the collection I'm putting together on Github. https://github.com/Mesverrum/MyPublicWork/blob/master/ViewsToShare/SingleWidgets/Node_Details%20-%20Custom%20SQL.xml You can use the resource importer tool to import these single widget XML files on to a view…

FYI it looks like that repo is not public?

Yeah you'll need to do it with a custom alert, this is a very old example I had laying around of doing a disk alert based on jumping 5% across 3 polling intervals, you could probably rework this to your situation. There are DEFINITELY more elegant SQL solutions to the problem but this is the kind of thing that I knew how…

Assuming that your perf counter component is called Page File that would do it to alert on a critical threshold violation. Obviously you can make it more elaborate but that's the basic bones of it.

Have you installed SWQL studio yet? Its bundled with the Orion SDK and its pretty much fundamental in making swql widgets. Basically to convert this you just need to find the SWQL table that is equivalent to the tables/views used in your SQL query. apm_dynamicEvidence would be orion.apm.dynamicEvidence. MOST tables have a…

Probably need to do a list resources and re-add the nics. When an interface goes gray in Orion it basically means that "we asked the device about interfaceindex #xx and the device didn't know what I was talking about." It's pretty common for people to make changes in the hypervisor that effectively remove an existing…

I've only seen it done with sql/swql. Roughly like this psuedo sql Select nodeuri From nodes Join whatever table has the temp data Where timestamp > dateadd(mm,-10,getutcdate()) Group by nodeid Having (max(tempvalue) - min(tempvalue)) > 10

So there is a format function to convert raw bps to a more friendly display, but for some reason it doesn't show up in the gui for all the interfaces variables where you would want it. It does work if you just manually set the format though. The way I always worked around it was to hit the insert variable button and find…

On my phone so I can't grab a SS but the pollers table should have all of the data you need. Start with a select * from pollers and it shouldn't be hard to figure out the update. Something like update pollers set enabled = 0 (guessing at this) where pollertype like '%errors%'

This request comes up often and unfortunately it's not directly doable. The trigger and reset conditions are stored in an XML format that is not especially human readable, its easy to make a report that shows them, but they are unfortunately meaningless in that format. The most common work around that I've seen is to make…

You are not alone, I'm praying to the Thwack gods that this is not the permanent plan and maybe they just haven't sorted out the user upload stuff yet... :smileyfrustrated:

Yes very doable, you can get some info about how the script would need to set up the outputs here, https://thwack.solarwinds.com/t5/Geek-Speak-Blogs/The-Basics-of-PowerShell-part-3/ba-p/434046

Some google research tells me that the status of "allow new connections" should be stored with this registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\WinStationsDisabled https://stackoverflow.com/questions/34657333/how-to-change-logon-enable-disable-remotely It also looks like you could…

Ok so the reason that the data would be stacked up when you tried to assign it as a custom table is because the tables use a different scheme for their rowid's. I tested those values against some HP switches I had in my lab and it looks like youd be able to join them in theory using 1.0.8802.1.1.2.1.3.7.1.2 since thats…

64 bytes every 2 minutes for pinging up/down status is considered excessive network overhead for your use case? Seems like an excessive bit of micro-optimizing. In any case, Orion doesn't have any native ingestion of web hook data sources. To do what you are describing you'd need to set all your meraki nodes as external…

I made this post a few years ago with an example SWQL query that's a roughly similar concept to what you are asking. https://thwack.solarwinds.com/t5/User-Experience/Show-us-your-Network-Atlas-maps/gpm-p/301531#M473 For specifically your case i'd do something like start from a list of distinct values on my site property,…

You just need to set up two separate jobs, and make sure your device template has commands for both types.

I don't have a script handy, but I have done it before. To suggest some pointers you will be looking at orion.technologypollingassignments in SWIS and there are some verbs there for enabling assignments that should get you there.

Did you force that device to poll after setting the custom bandwidth? They don't factor those changes in until the next poll.

There is an OOTB alert that actually works as a pretty good example of how to do a single alert for multiple objects, it's the one called "Polling rate limit exceeded" On your alert trigger conditions screen jump to the bottom and expand the advanced options > Check the box for enable complex conditions > Check the box for…

Uploaded a few minor changes to the Git to deal with cases when Orion has extra spaces in the name of a resource.

This complain comes up fairly often, I believe it goes away on it's own after a period of time. It's something like a month or so. Also that kind of info only shows up for admin users, so at least its not there distracting the end users.

Windows servers using wmi don't populate that field, its basically just legacy stuff from SNMP based polling.