mrxinu

has the right idea. Because custom pollers can only be applied to nodes and interfaces you need to use the type of report further down in the list (Current Status of Nodes, Interfaces, etc.). SolarWinds probably needs to make that more obvious or create an entirely separate report type. Once you have the right canvas, the…

Handling syslog is done with the Syslog Viewer application on the application server. The syslog message should look something like "putting Gi4/1 in err-disable state" so you could have it trigger on 'err-disable'. What have you tried?

Hey there, You're spot on in both instances. You get a new AlertActiveID for each new alert that triggers and the AlertObjectID gets reused for every alert configuration + entity combination.

Hi there, This will give you the count you're looking for. Definitely install the SDK and try out the SWQL Studio application if you haven't already. That makes finding these things much easier. SELECT aa.Template.Name, COUNT(1) AS QtyFROM Orion.APM.Application aaGROUP BY aa.Template.Name -- Steven W. Klassen Programmer…

SolarWinds has a copy of the net-snmp binary snmpget.exe that you could wrap in a PowerShell script that tries the OID and then passes or fails depending on the outcome. That would require SAM, though. Do you have NPM only?

I hate to be the bearer of potentially unhappy news, but I think you might be seeing the first orphan from the effort to move NCM entirely to the web console. Someone else chime in if I'm off base.

On the out-of-the-box Top 10 view there is a resource in the bottom left called 'Top 10 Volumes by Disk Space Used' (or something similar). You can use that resource with the following filter: VolumeType = 'Fixed Disk' AND Caption LIKE 'C:\%' AND VolumeSpaceAvailable < 2147483648 (it uses bytes, so this is 2 * 1024 * 1024…

Hey there - this works just fine in advanced alerts. If you have a custom property for your nodes called ContactEmail, just use that in place of the To field like ${Node.CustomEmail}. screencast.com/.../ElMj7OK1c

Hey jbui357​ - there's nothing special about the WHD database. You can move it like you would any other SolarWinds product. Check out the document below and jump down to page 8: http://www.solarwinds.com/documentation/Orion/docs/MovingYourOrionNPMDatabase.pdf

This is going to sound ridiculous, but remove the commented lines from Report Writer. It chokes on them.

Hey there, You could use the API. Just make sure you install the SDK on your system (any system is fine as long as it can reach SolarWinds) and run the script as an AD user that can authenticate in your web console. *** Read the script carefully - there are no warranties, etc etc. *** #requires -version 3<#.SYNOPSIS…

Can you provide a screenshot of the entire alert so we can see all the fields?

Looks about right. Is it working?

Provided you're using net-snmp you should be able to get the disks, processors, and memory along with interfaces, etc. from the Host Resources and Interfaces MIBs by default within NPM. If you can find the jobs and job queues by doing a snmpwalk against one of your AS400s, great, if not, you can use APM's Linux/Unix Script…

It must be unhappy with the aliasing (though I haven't had that problem before - weird). Try this instead: select nodes.nodeid, nodes.caption, count(1) as qty from nodes join events on nodes.nodeid = events.netobjectid where events.netobjecttype = 'N' -- node object type and events.eventtype = '1' -- down node and…

As for your example, "[a] node that has a 'flaky' circuit goes downs 12 times (for less than 5 minutes each time) in any given 24 hour period" you're looking at some more complicated queries that involve outage duration (event start and stop times) instead of just the former.

Because the advanced SQL alert definitions hard-code the select portion of the query I don't see any way to make this an alert, but you could create a report with this information. You could embed that in one of your views and it should only populate with data if you actually get a node going down more than X times in Y…

I'm sorry you're having a hard time with this one. There's nothing more frustrating than something that just seems to change on its own. Is this the only node that's having the problem? Also, what is "Windows O/I"?

Is it possible that those files haven't been used in a long time? I agree that they shouldn't be offered up for deletion if they're critical but I wonder about the age and maybe it's just perceiving them as "orphan" for that reason.

Go into your IPAM settings > Address Groups. Change "Private Addresses" to whatever string you want to show up there.

Two good suggestions from cjfranca​ and smiffy85​. The setting cjfranca​ was referring to can be found if you go into the Node Details page of the node in question and choose List Resources from the Management resource: Then change your status monitoring from ICMP to SNMP. -- Steven W. Klassen Programmer Analyst @ Loop1…

You are using the Trap Viewer to do this, right?

Did you mean for triggers 2 & 3 to overlap or did you intend trigger 3 to be 7pm to 11:59pm? It doesn't affect the answer, but I thought I'd ask. If triggers 1 through 4 have no delay and triggers 5 and 6 have a 30 minute delay, then the scenario you described (at 4pm an alert triggers and executes action labeled 'Trigger…

I'd have to look a little closer at what constitutes a "problem node" but I'd start with an All Nodes resource and hack it down from there. The SWQL (SolarWinds Query Language; isn't that cute?) for network-only nodes using a custom property called 'Device_Type' would look like: (cond1 and cond2 and cond3 that make them…

EOC doesn't merge them into one system, but rather imports information from both to give you a unified view of the information. Yes, EOC needs its own database separate from the two you're using in your individual NPM installs.

No, not without crawling around the raw ASP pages. If you do decide to go that route, keep a copy of whatever you change. Running the config wizard will blow away your changes.

This SWQL query will get you what you want: SELECT CASE WHEN SNMPVersion = 1 THEN 'v1' WHEN SNMPVersion = 2 THEN 'v2c' WHEN SNMPVersion = 3 THEN 'v3' END AS SNMPVersionUsed ,COUNT(1) AS QtyFROM Orion.NodesWHERE ObjectSubType = 'SNMP'GROUP BY SNMPVersion

When they converted from the ${VarName} to ${M=...;N=...} format some of the out of the box stuff got left behind. Just delete the placeholder you have now and click 'insert variables' and find the comparable entry. The new one should work fine.

NPM can monitor the up/down status of interfaces. Is there any reason you're not monitoring them there? -- Steven W. Klassen Programmer Analyst @ Loop1 Systems http://www.loop1systems.com/ http://www.linkedin.com/in/mrxinu

Unmanaging them is definitely the way to go. Now, what about recurring periods of unmanaged nodes? There are 3 fields in the nodes table that you need to manipulate if you want to set them to unmanaged - Unmanaged, UnmanagedFrom, and UnmanagedUntil (the last two are from memory - but they're close). It's going to depend on…