monitoringlife · Monitoring Engineer · ✭✭✭✭✭

What version are you on? There is a defect in 2023.x about 'SAM Database Maintenance Is Overdue' but check the log to confirm. Database maintenance logs are located under \ProgramData\Solarwinds\Logs\Orion. Database maintenance log files start from <em>swdebugMaintenance.log.</em>

Windows Account / Automatic Login an option? 

I'v posted a few times about the alert engine. Restart the alert engine service. If that fails (roughly 10% of the time) restart the MPE. Do you have your SQL server in a cluster/AG? Did it failover (or the SQL server reboot) recently? There is a known defect that it will cause issues with the alert engine (specifically…

I've noticed this as well but had not had the time to R&D and make a post. Thanks for putting this together, also interested in the behavior. 

What does that alert actions execution log say? Any obvious errors? Are other alert trigger conditions working?

If there is any way I can help please throw it my way.

I have a 15 page Summary dashboard where i put a bunch of these. Should work on Dashboard of SWQL Studio.

I'll let someone else answer your original query but are you looking for a way to find un-reporting interfaces? If so: SELECT I.Node.NodeName, I.InterfaceCaption, I.Status, ToLocal(I.LastSync) as LastSync FROM Orion.NPM.Interfaces I WHERE I.Node.Status IN ('1','3') AND --Node is (1)Up or (3)Warning] I.Node.UnManaged = 0…

I like that. Easy place to keep readme or rebuild doc outside of the boot disk if you need to reimage. 

I feel you, its an arms race. Thanks for keeping on it, this is a great little community so many of us are passionate about keeping it healthy (at least that's how I hope most of the feedback comes across )

These spam accounts are still rampant. I report them (which does not work on Firefox btw, I have to open chrome, copy the url over, login to THWACK again, then report) but all these posts and users seems to still be around. Might just be better off old school black listing their buzzwords from new activity accounts.

Bonus fun fact that has helped. Those files on disk stay around longer than the WebUI does (not sure if a bug but it was helpful once).

Which UPS vendor are you using? SolarWinds has some nice dashboarding for some of them. I would setup a groups (UPS-A > Child-A) and (UPS-B > switch 2, 3, 4). NCM script should be fairly basic (shutdown). Do any of your devices support nut (Linux UPS package? Makes this at lot easier as it has server/client built in to…

Multicore alerts are doable but somewhat complex. I would honestly avoid it if at all possible (CPU MAX value seems to work for most audiences). If you have a vendor that for some reason in 2023 still has single core bound processes (side eye to IPS/security vendors) you might be stuck doing it. I'd push back on them and…

@"stevenstadel" has the message center filter to check for the audit record. When I do these audit search I set the action type, then search (via the right side search) on the username/page name/etc (the filter and search are inclusive). Remove the dashboard edit rights and see who complaints . I have the same issue.…

Are these networks routable? I personally avoid multiple NIC's on servers to reduce complexity. If at all possible I would use Additional Polling Engines for the different networks.

There should be an out of the box asset for Not sure how to do the Perfstack on the WebUI, but I was able to use this to generate a dynamic link for the alert message (this is an example for CPU, but you can easily change it up. Hopefully someone knows the UI part.…

The NCM jobs get written to text files on disk. If your backing up your polling engines you should be covered. If your paranoid you can setup a copy job to write them to another location. 

can have your alert trigger action kick off the scripts, or have your ITSM/ticket system do it.

I do it this way as well. Have a dedicated place for all the scripts to live then execute them from there.

Same, worked for me (2023.x) Also throwing it in my pile of queries

Which IAM are you using? local, AD, LDAP, SAML? If external is that system enforcing a life expectancy? 

If you have an eye for SWIS/SQL I would configure the alert close to how you want it, then drop it to SWQL via the menu option then look at it there (or modify as needed, then just make the alert a SWQL alert). Far right side of the trigger conditions builder, click the chevron, 'show SWQL', copy/paste into SWQL Studio…

Would the custom logo be uploaded there? Not seeing mine present.

Also having it and told its a bug to be fixed in 2023.3. Reference thread.

Wondering what you custom poller is doing that the default BGP routing asset does? Gets you: Node nameProtocolStatusIp addressRemote ASLast change From that I write a neighbor down alert. Can be found on this alerting resource

There is a little flexibility in AD (can turn off service monitors). IIS and SQL are the least flexible. 

What is listed under the DB for Orion.Websites (specifically the external url)?

Under trigger action, set that up how you would like then click simulate (the lightning icon). 

Yes, just add it in