mesverrum · Observability Architect · ✭✭✭✭✭

Comments

  • I did a lot of custom reporting on the alert details page for a client a while back, I believe you can use the variables from anything on the alertobjects table, for mine i mostly used ${alertobjectid}
  • To match your node names up to the DNS name you can do this in the database manager update n set caption = dns from nodes n where dns <> '' Before I run that I always spot check things list to make sure nothing weird is going to happen (all these extra fields help me to notice when something is out of place) select…
  • bfaltys​, This should get you where you need to go, with some caveats. Solarwinds can't track traffic per interface and vlan since there isn't an SNMP counter for that, you just get the bytes for the interface as a whole. Because of that I'm almost tempted to break this report into two tables, one with interface traffic…
  • Well i can narrow it down to your environment or poller, as your script executes without any problems in my environment.
  • The All Active Alerts resource should be filtered already if there is a view limitation applied to the page so you don't need to do anything extra there. In either case that resource should normally be completely fine with having several hundred alerts and on into the thousands. Maybe your server was bogged down by the…
  • The standard stop services, detach, move, attach, restart services method is typically pretty fast, only limited by the size of your db and the speed your server copies the files. If you want to be more fancy there are methods that incur 0 downtime, but rely on you having a pretty savvy DBA. See this for one example, not…
  • So to be useful in scripts you have to pre-populate the info you will be working with, it can't read the ASN on the fly by parsing a show command, for example. What I'd do is create a node custom property called BGP_ASN and use some SQL to parse that out from the configs, or if its a small list of routers just populate…
  • It's not your case i think, it's that SWQL doesn't accept a query that doesn't pull from one of the built in tables, you can't do things like roll your own CTE's and whatnot. It also doesn't really do wildcard type columns, you'd need to individually specify the name of the columns you want it to return instead of the…
  • Having HA does not impact the APE installation, it should be the same as normal, no need to worry about vip's or dns names because solarwinds will be using rabbitmq to communicate changes on the active/failover status directly to all the APE's.…
  • Those are pretty similar to my basic node alert template. I figure the idea is that anything that might help you troubleshoot an issue is a good idea to include in the messages so people don't have to go digging it up during an outage.
  • To find your upgrade path just download the latest installer and run it, the first thing it does is the preflight checks where it will tell you if there are any intermediate steps that need to be done to get you up to date. So the 12000 element limitation is somewhat artificial, you can stack additional APE licenses on the…
  • Not every table allows you to just insert objects directly via SWQL, in fact most do not. If there is a verb to do what you want then you should use the verb because that will ensure that the correct types of objects are created on related tables and that everything is kosher. You can tell if a table supports different…
  • I don't think there's a way to edit those features out without it impacting all users, and the config wizard would put them back if you ever ran it after cutting them out of the web interface. For your scenario I would probably go into the user account settings and make sure that every kind of details view was set to none…
  • Group By as a sql/swql command is not the same kind of thing as the Group By that is available in the Orion Report Builder. SQL/SWQL queries dont support that kind of capability as they always present their output in flat lists. You can try to push this query into an Orion Report/Table without the ordering and grouping and…
  • I'd say you've already covered the bases there. I would feel like EOC is the best choice in this case, and yes you would have to have some way of accessing the enclave web console itself on a system outside of the enclave for it to work. Easiest answer is to just open up 80/4443 to the enclave server for users in the corp…
  • Assuming your component names reflect the website being monitored then you can pretty easily create a table/report of Components that shows the Node Caption, Application Name, and Component Name of any component where the componenttype = 6 or componenttype =14 If the info you need is the way my lab is where the URL info…
  • I'd wager the Qlogic 10 gig is not quite a "normal" ethernet port in some way. I don't have any in my environment but this looks like they might not report their metrics the places solarwinds normally looks. If you look at the perfmon for that server can you check Network Interface>Bytes Received/sec and see if there is an…
  • Depends on the type of component monitor, but using a service monitor as an example, if solarwinds can't reach the device via wmi then it would be not responding, compared to actually reaching the server and seeing the process was stopped and being marked down.
  • I imagine it is a catch all, some possible statuses that would fall into it would be unreachable (if a dependency is set up) or not licensed if you exceeded your sam license count. All told there are nearly 30 different statuses that can sometimes come into play. Look at the last events (might have to add it to the…
  • This blog post outlines the process for linking SAM nodes and applications to WPM transactions WPM + AppStack - What It Means To You (and, WPM 2.2 Now Available!) Also here in the oinline admin guide http://www.solarwinds.com/documentation/en/flarehelp/wpm/content/orioncoreagmanagingdependencies.htm ​
  • When they show up like that it means that cisco doesn't put the model number into the standard OID (1.3.6.1.2.1.1.2). They seem to be the most inconsistent vendor I have seen regarding what kind of values they put into that field... Here is a KB on how to set up your own version of the details poller to check a different…
  • Historically I would have said you were out of luck since orion just takes the entire payload of the event and dumps it all in the dB together, but they just added a swql replace function and if you got really clever with that I bet you could replace all the data you don't want with a ''
  • More granular data in the second chart, the first one is averaging the data to the intervals. From counting the number of spikes I assume you have 30 minute intervals defined in the first chart where the second is displaying every datapoint for every cpu at whatever your statistics interval is, default 10 min.
  • Do your network devices support NBAR2 protocol? NBAR2 or Next Generation NBAR - Cisco Set up NBAR2 on Cisco devices
  • The parent needs to be "Down" to trigger suppression events, it looks like yours is going "Critical" when it is at 1. I'm assuming you are using a custom script monitor, in which case you should just exit with a 1 to force the monitor down, which would then cause the dependency to kick in. The Basics of PowerShell (part 3)
  • What is the expected procedure if these devices are using high CPU? Is there a scenario that would actually require an intervention for these boxes? To me it sounds like no action is considered necessary if you don't care during peak hours, and you don't care during off hours then when would it ever actually matter? You…
  • There is a built in alert action to send an email of a web page. You could copy the url for an example of the interface page you want to send over and replace the part of the URL string where it has the interfaceid with the variable for whatever interface triggered your alert.
  • Start by going to the success center and reading the getting started guides, there's links to lots of little videos as well to get the ball rolling. Definitely read the admin guide and check out all the features in your environment, or stand up an eval on a vm for 30 days to mess with. If you already have a paid license…
  • Service now has a very easy to use api with a feature called api explorer where you can basically walk through a GUI and tell it what you want to do and it will spit out a script to do that thing. You could take their sample code and combine it with queries to the SW api to create CI's and set all their attributes. I built…
  • As part of the backup job it gives you the option to email out a list of all the results (and failures). Just enter your email there, much more efficient than getting an individual message for each device.