mharvey ✭✭✭✭✭

With the way the bundle installer is working, it's going to check your main poller to see what modules you have installed. It will then download the same version of that module for the additional poller and present for install/upgrade. The only time you'd want to upgrade the additional poller is when you are upgrading your…

The easiest way would be to go into SAM Settings, Manage Template, Add new Tempate, then add a component monitor. On the second page of the monitors you can find SNMP Monitor: You can use this monitor should you know the OID you wish to monitor. Now, if you're looking to just monitor process with SNMP, you can use the…

I believe it depends on if there is a backup tech assigned or not. You will likely need to have a backup tech assigned in order for the tickets to be assigned to that person instead.

Bobby, Yes. NTA has had SFLOW support since version 3.6 or 3.7 I believe. Regards, Matthew Harvey Loop1 Systems

I'm not sure there's officially support. I know I've used it on 8.1 without issue and it's basically the same kernel on the back. 

That's in the code, you'd have to open a feature request with SolarWinds and see if they could either add it, or make the "has changed" option more flexible rather than tied to just Last Boot and IOS. I agree there are many of areas where it could be used in regards to alerting, it's just an unfortunate fixed value.

Bryan, It's going to download locally to the path your browser is set to download to. So if you are exporting from the web on your desktop, then check your browser settings for the download path, and that's where it's going to be downloading to on your machine. Regards, Matthew Harvey Loop1 Systems

I'm getting an error retrieving cases as well.

I would look into what janene16 is referencing as well, remove the check from the option Do Not Execute this Action if the Alert is Acknowledged.

Odd. Mine connected without issue. Interesting new feature I hadn't looked at until now. Not sure I like the layout of the Settings page now with this added. Seems to be trying to jam too much into one screen. But hey, that's just me.

From what I heard the 12 beta became 11.5. I'd go ahead and update to 11.0.1 as 11.5 hasn't hit RC yet and there are some good features and improvement in 11.0.1 that are worth the upgrade. From there, once 11.5 is released you could plan out an upgrade there. I've been testing the beta and there are also some good…

Search for a client account that may be linked. You should be able to edit that and see if the client account is inactive for some reason.

Do all the nodes have the same text in them that identifies them? If so you would use Node Name contains %xxxx% The % is the equivalent of a wildcard for SQL.

This can occasionally be due to permissions issues with the account you are using to run the scheduled report. You aren't seeing this when you are running the report as you are logged into the server to run it. One thing to try is to add Authenticated Users to C:\InetPub\SolarWinds and grant full control. I'd also undo the…

There's no alert that would do this with the Advanced Alert Manager; however, you can accomplish this with Real-Time Change Notification. With this, the device would send a syslog or trap to the server, which would fire an action to have NCM to download the config and compare it to the most recent backup or the baseline.…

From the Virtualization Summary view, when you go to Virtualization Settings, do you see the ESXi hosts there? Are you able to assign credentials to them? If not, go into Settings > Manage Nodes, edit each host, make sure the poll for VMWare option is selected, and test the credentials that you are using. Regards, Matthew…

Figured out the SWQL that I needed to use. For anyone else who runs across this, here is what you'll need. SELECT q.ObjectName, q.TriggerTimeStamp, q.Name, q.AcknowledgedBy, q.AcknowledgedTime, q.Notes, q._LinkFor_ObjectName, q._IconFor_ObjectName AS [_IconFor_ObjectName], q._LinkFor_Name FROM ( SELECT a.ObjectName,…

Outside of disabling the alert, a quick way would be to create a custom property called Classification, or something similar, which you list your nodes as critical or non-critical. Once done, you then would need to edit the alert and add in that property of Classification is equal to Critical. This should clear out the…

Unfortunately no, there isn't any field of this nature in the database for last successful ping of a device.

This was on purpose from the developers. Also do NOT rename the AppInsight application either, it will cause a ton of havoc on your database should the configuration wizard get run. Not sure why they took the approach they did, but this looks to have been by design.

The issues you are seeing are actually being caused by the version you are on. The Wireless components of 9.5 were very rough in terms of polling reliability. The Machine Type issue also can only be resolved by an upgrade of Orion. This isn't an issue with the Orion MIB database, but with the process of how NPM uses it's…

It takes all the detailed data (collected at 5 min intervals) and summarizes it by hours. So all data from 8 am to 8:55 am, for example would get summarized and averaged into a state for the 8 am hour. The same would then occur for the 9 o'clock, 10, etc. It's rolling that detailed data into an hourly average. Regards,…

The mibs being used are a mixture of standard MIB-2 mibs and cisco specific. While the KB article is helpful, you can also use the PollerChecker.exe tool on the Orion server. This will give you the pollers used for the device (they'll show in green) as well as the name of the MIB. You should be able to provide this…

If you edit the application and test the monitors, is there a successful test? What version of SAM are you running?

Are you creating a group for each address? If so, you'd just need to select the address in the Dynamic query. You'll have to repeat for each group you want to create. If you are wanting to group a node list by address, then you simply need to edit the node list or node tree resource and choose the Address CP as only of the…

First you need to remove the Member status has changed. The has changed logic only applies for node reboot and IOS update alerts. The logic is actually going to cause an error in your alert. The reset may be tied to one of the triggers resetting. I'd actually recommend breaking this up into 2 alerts. The first have for…

If you edit the IP then there should be an option you can remove to allow the scan to overwrite the data but it turns scanning off on the IP. That would be about the only option.

Since the alerting sends out on distinct elements, there's not a way to get an alert to send only 1 email if 50 systems go down as opposed to one email per system. That's just the nature of node down alerting. Now, having said that, the closest you'd be able to get would be a group alert where the group status triggers an…

The best place to start in determining a cause and potential fix would be the AleringService.log (or the swalert.log if you are on 10.2 or earlier). This should have some errors (maybe in log.1,.2, or later) that show why the emails may have been jammed. Could have been an issue connecting to exchange, or timeouts on the…

Yes. The easiest way would be to go into manage nodes from the Settings area of the website. Next to the node in question will be a +. Click on this, and you will see all the interfaces, even the unknown ones. Select the unknown ones you do not then go to More Actions > Delete Selected...... These should remove those…