mrxinu

Sometimes there's another field in the same SWQL entity that gives the text enumeration but I don't see one in this case. Trial & error is probably the best way to get the values matched up with their meaning, but as far as displaying it, case statements work nicely. To start off, this gets you there: SELECT n.NodeCaption,…

You're very welcome.

The most straightforward way to find it on your system is to download an evaluation copy of the Engineer's Toolset and run MIB Walk. Then you can shop through the 1.3.6.1.4.1 (enterprise) OIDs for anything that looks like it might be a match. At least then when you found something you could be 100% sure that your device…

Can you give me an example of what's not working (and how it's not working)?

Hi silphen​ - thanks for wrangling that info. Let's see what we can do with it. Software Load (NPM + NCM) This is a really common pairing and an excellent start for your monitoring. designerfx​'s observation is spot-on - with that mix of software and node-to-interface ratio you're probably using this for your managing your…

I'm with on this one - a screenshot would be helpful to get us started. When you say WMI checks out, have you tried running the query from the template on the command line outside of SolarWinds?

You're very welcome. The easiest thing to do is probably to create an alert that watches for CPU load >= 70% for at least 2 samples. Since node statistics come in every 10 minutes by default so you'd want a delay of at least 20 minutes. Then you can use the trigger action that runs an external program (PowerShell script?)…

You're very welcome. Give this one a try: SELECT n.NodeCaption, n.AgentIP, i.InterfaceName, i.VLANIDFROM NCM.Nodes nLEFT JOIN NCM.Interfaces i ON n.NodeID = i.NodeID -- Steven W. Klassen Programmer Analyst @ Loop1 Systems http://www.loop1systems.com/ http://www.linkedin.com/in/mrxinu

Ah, I get what's happening. You're actually modifying the alert and adding individual systems to it as exclusions? It sounds like you need to be unmanaging nodes and/or using custom properties to identify these problem nodes. Can you show me a screenshot of the trigger condition? There are easier ways to do this that don't…

Ah excellent! I'm glad you figured it out. As for the exit code, there are two ways to build a PowerShell script for SAM. First, you can return a statistic of 0 all the time and handle the up/down status of the component by returning 0 and 1, respectively. Second, you can ignore the exit status entirely by always exiting…

You are correct. -- Steven W. Klassen Programmer Analyst @ Loop1 Systems http://www.loop1systems.com/ http://www.linkedin.com/in/mrxinu

You could create a SAM template and use the SQL Server User Experience component. As long as that query returns a number (and it looks like it does) that would do the trick. -- Steven W. Klassen Programmer Analyst @ Loop1 Systems http://www.loop1systems.com/ http://www.linkedin.com/in/mrxinu

Not as far as I know.

The Orion.NPM.Interfaces table only has information about monitored interfaces and I looked around a bit and don't see any mention of a total interface number. So unless someone else can correct me I don't think it's possible without creating a custom poller to go pull ifNumber (1.3.6.1.2.1.2.1) from the node so it can be…

Hey mistervapor​ - sorry about that. I got distracted by something shiny and forgot to come back to this. I don't know offhand but I'll loop it through the folks here and see what they say. I've written a lot of these multi-statistic scripts but I don't think I've ever had to pull in the named statistic before. Also, I did…

I totally missed that we had a message in there - that ought to be balanced between the up/down like this: # this is kind of a throwaway value since we're using the exit status for up/down Write-Host "Statistic: 0"if ($indexDetails.State -eq 'Active') { Write-Host "Message: Search Index is active!" Exit 0}Elseif…

That makes sense. The only problem is the who-did-what kind of auditing is a slippery slope. If they implement it one place folks will want it for every action in the software. Until everything has been moved to the web console that would be a daunting task. In NPM 10.4 custom properties will be migrated. That leaves…

It looks to be unhappy with the underscore. Try it again with a custom property that's one word? If that works, maybe change the underscore to _?

Just nope, huh? Fair enough.

Agreed. I smell a feature request.

You're too kind! Sure, but it would be repeated on every line. If that works for you - here you go. SELECT n.Engine.ServerName AS PollerName ,n.Caption ,ISNULL(i.Qty, 0) AS InterfaceCount ,ISNULL(v.Qty, 0) AS VolumeCount ,ISNULL(i.Qty, 0)+ISNULL(v.Qty, 0)+1 AS TotalElements ,n.Engine.Elements AS TotalPollerElementsFROM…

You're very welcome. Mark it as the answer if that covers it so folks can find it! -- Steven W. Klassen Programmer Analyst @ Loop1 Systems http://www.loop1systems.com/ http://www.linkedin.com/in/mrxinu

That's interesting that it worked for you - that means it's most definitely not something in between the individual tokens (set, admintimeout, and 480) but something between the ^ and the 'set'. Instead of ^\s*set try '^.?*set admintimeout 480' and see what you get. If that fails, it's SWI ticket time for sure.

My pleasure. Yeah, that's the way to be - sandboxes are my favorite.

Well excellent, I'm glad you figured it out!

That looks good to me.

Hey Jason, The alert he gave you is just for the recently acknowledged alerts. The actual alerting has to be done separately - i.e., your CPU over 80% utilized alert. It looks like you might have some portion of what CO laid out for you configured wrong. Time for some screenshots -c an you get us one of the trigger action…

Ah, there you go. Your trigger condition has to be changed from AND to OR. You can't have a status of both Warning AND Critical. -- Steven W. Klassen Programmer Analyst @ Loop1 Systems http://www.loop1systems.com/ http://www.linkedin.com/in/mrxinu

Brilliant x2! *high-five for teamwork!*

Ah, you have the newer version of the snmpd.conf file. That's fine, it just gives you more granular control than the version I was thinking of that only gives you a few lines to modify. What you're doing is building up access given a particular community string. So there are two parts to this: the information like contact…