mharvey ✭✭✭✭✭

Another option would be to register a file. Close the manager one more time and go into the install directory, usually C:\Program Files\SolarWinds\Orion. In this directory find a file called SWAlertActions8.dll. Right-click on this file and click on Open with, then browse to regsvr32.exe to register this dll again. Once…

Also check, should the poller be assigned, that there are devices you are monitoring that are reporting protocol status of Down, otherwise the alert is not going to trigger. You can also get the status of the poller in your alert using ${CustomPollerStatus.Status} Any tests will pull a random value, but the actual alert…

I would check the powershell config on these servers. Make sure that the SolarWinds server is configured as a trusted host. 

Without an additional webserver, no. You'd have to have the webserver installed in the DMZ in order to allow connection to it. There isn't just one part of the web that can be broken out like that. Regards, Matthew Harvey Loop1Systems http://www.loop1systems.com

I don't think it needs java on it otherwise the program wouldn't have installed. There is something wrong with the network atlas trying to read one of the maps. You need to have SolarWinds support look at these log files to determine what's going on with that. To do that, you open a ticket here Technical Support Ticket…

odd that it's not working in the environment. Is there another windows server you can test on? What OS, powershell version are installed on the server you're testing against? Can you successfully connect from the SolarWinds server to the test server using a test-wsman command in powershell from the SolarWinds server? Has…

To get them all, the SNMP walk is what you are going to want, along with perhaps discussion with device vendors. I would not recommend "everything" as there is going to be information given by SNMP that may not have any relevance to what you need to monitor. The timeout setting is on the top in the right of the…

To get the full times the Error is found you'd have to do something like putting the command in parenthesis and adding .Count to the end. so (get-content \\x.x.x.x\S$\usr\sap\TDP\DVEBMGS00\work\dev_icm | select-string "ERROR").Count I believe would be what you want.

Update: Due to the changes and additions in NPM there are some other filters added in the WhereClause to ensure accuracy. Select DiscoveryProfiles.Name as Discovery_Name, DiscoveredNodes.SysName as Node_Name, Discoverednodes.IPAddress, DiscoveryProfiles.EngineID as Poller, DiscoveryProfiles.LastRun as LastRun From…

I'm running 6.2 currently.

This helps a ton. First you need to ensure that in your main Summary screen under the Home tab or through Manage Nodes that your SQL server is being monitored. If it is, and you are monitoring it via WMI, then do a list resources on the device. It should then show the AppInsight for SQL and the instances you can monitor.…

Turns out the nodeID wasn't what the whereclause needed. Using sysname seems to have proven better results. Select DiscoveryProfiles.Name as Discovery_Name, DiscoveredNodes.SysName as Node_Name, DiscoveryProfiles.EngineID as Poller, DiscoveryProfiles.LastRun as LastRun From DiscoveredNodes Join DiscoveryProfiles on…

remote the 15 minute wait. set it to 0. What difference do you see there? It may not be this alert as this is supposed to hold any actions or triggers for 15 minutes once the device meets the condition. So you wouldn't receive an alert every time it polls.

Mark, Until then, I'd recommend download and upgrading to SQL Express 2008. It's free and will allow you to have a 10GB limit. This should keep things from breaking until you can move to a full SQL or get a DBA in house. 

From what I can see this almost looks like a java error, but I'm not sure the system uses java. I'd recommend opening a ticket with support to see what's causing the TS_FILE_ERROR_READING_STREAM errors.

In addition, is the screenshot you are showing of the valid login one of the same devices showing in the ACS Failed Attempts report?

You can use 1. and it will scan the whole MIB tree for device support. However, doing this can lead to timeouts depending on the amount of OIDs supported on the device, so you may want to increase the timeout settings. Another option would be setting the value to the OID you want to find such as the one mentioned by…

Have you tried a different set of credentials?

There are two things I recommend here. 1 - Close the Advanced Alert Manager. Go into Start > All Programs > SolarWinds Orion > Grouping and Access control and open the Custom Property Editor. When this opens, right click on the toolbar and choose customize. From there, a small window will come up, go to the Commands tab.…

It would be the first. You may also want to make sure the target is setup for remote connection via shell. More information on that can be found using aLTeReGo's post on https://thwack.solarwinds.com/message/221248#221248

What you would do, is at the top set the Hubble to True to enable it. Then run the Orion website and at the top you'll see a red bar as the page loads. If you go into the Details of that red bar you'll see all the SQL and other service calls from the website to the NPM server and the the SQL server in order to load the…

What's not working? Is the alert not firing? Is the email not going through?

One thing that has worked for this issue is to edit the node in NPM and change the SNMP version to 1. This changes how NPM polls for information and seems to have helped in some cases.

That's because it hasn't alerted yet. Notice the blue triangle. It's in a warning state. This means on the trigger condition there is a timeframe that has to be met. Once this is met, and the triangle goes to red, showing alerted, it will show on the alert webpage.

Ziba, Since you acknowledged the initial alert, you are the one that is recorded then. If the alert was not reset and cleared, then your name is still going to be there until the alert resets, or is cleared by being disabled.

What's the delay in your email action. I've found that I have to have at least a 1 minute delay between the time the top 10 process fires off and the email action fire off in order to see the top 10 processes in the email alert.

carlton.patterson@matthey.com, If you are looking at Cisco gear, this poller I've setup may help. You can find it here https://thwack.solarwinds.com/docs/DOC-175252. Once assigned, you should be able to create an alert based off the poller name and the status. Regards, Matthew Harvey Senior Sales Engineer Loop1 Systems…

You could try creating a feature request, but not sure how quickly or if it would be implemented in the product. While it would take some time to walk the device to get the MIB and create the poller, once you have the MIB, you can mass assign to any interface you want to report on and the alert will work.

You cannot have multiple FULL Orion installations share the database. In order to use mulitple polling engines, you would need to purchase the additional polling engine software and deploy them at each location rather than using Full Orion installations.

If you look at the packets themselves, open the pdus (if using wireshark) and look at the inputint and outputint if both of these are 0, then the information is being discarded. The reason is that NTA sees this as the traffic is coming from nowhere and going nowhere. Otherwise, it's matching the int to the index of the…