netlogix

Another thing I found was to close completly out of IE, then install: \\<ORIONSERVER>\c$\inetpub\SolarWinds\SWToolSet.exe It doesn't always install if IE is open.

you are using HTML emails aren't you? hmmm... I saw how to nest the curly braces in an HTML email and it had something to do with using "@" instead, try ${SQL: Select (100 - $@VolumePercentUsed@)}

Open the Alert manager and change it to custom SQL sub type Node, it fills out the "Select Blah from blah", but then allows you to choose where and/or joins to get the data you want. That querry would alert individually for each Node that doesn't have records in syslog for x period - you case might be to replace <_X_HOURS>…

oh, good! was the hyper V server an upgrade or clean install? Did you need to do anything(change any settings)? This is my first hyper v server (install powershell stuff? Windows features on the orion server or hyper V server?) I didn't hear anything from support today, they collected diags, but thats it. I was thinking…

The suppression tab is for global suppression. suppress everything if it is true anywhere. If you suppress "Comment = Printer", then if you have any comments that say printer for any node, suppress for every node until there isn't a comment of printer. Try to stay away from the suppression tab, unless you can not do it in…

The Alert Suppression Tab is a global query (pretty much, never use it). This example suppresses all alerts as long as any Volume in department "xxx" is less than 80%. What out come are you trying to accomplish with the suppression that the trigger condition doesn't already do?

You can try one of these: SELECT VirtualMachines.PowerState, COUNT(*) FROM VirtualMachines INNER JOIN Nodes as Host ON VirtualMachines.HostNodeID = Host.NodeID Group by VirtualMachines.PowerState SELECT Node.Status, COUNT(*) FROM VirtualMachines INNER JOIN Nodes as Host ON VirtualMachines.HostNodeID = Host.NodeID INNER…

you could ask them to add the string, run the discovery with the primary as the new string, then look in manage nodes, group by snmp string and make sure they all had changed, then have them remove the old string. A little more work, but no data loss.

Is it a plain or html email? If it's html, there is some change in the syntax, but I am not completly familiar with it. it might also not like being on seperate lines, try: ${SQL:SELECT [CustomPollerStatus].[Status] FROM [CustomPollerAssignment] inner join CustomPollers on CustomPollers.CustomPollerID =…

It's the next tab in the alert conditions :

Those small switches is probably where the loop came from. Someone else could have plugged one of the small ones into another and bam loop - you may not have made a physical change, but that doesn't mean one didn't happen. Then it's like a hall of mirrors effect where one packet keeps going and going around on a loop, then…

you can also use this to figure out what the nosiest alerts are. SELECT AlertDefinitions.AlertName, AlertLog.ActionType, left(AlertLog.[Message],20) as MessagePart, COUNT(*) as CountOf FROM [AlertLog] inner join AlertDefinitions on AlertLog.AlertDefID = AlertDefinitions.AlertDefID where LogDateTime >…

I have the Certificate error too, but I don't have a problem saving the credentials. If you have tried the browser on the Orion server (or telnet to port 443, did what ever to verify TCP port 443 is allowed from the orion server to the ESX/VC server), but are still having problems, then I would say you have a bug and…

I think this is a support question / bug report. (I don't work for solarwinds though, so I can help from that side) The reason I thought about it is that I have seen this with some interface descriptions I have and they just don't show up. (but I haven't had time to open a support ticket about it)

I didn't have any issues after enabling it, nor security issues. From what I understand, it just changes the way SQL interprets commands and extends the way you can use stored procedures. I don't think it's any more of a security risk than a stored procedure (if the code is good and clean then that's that).…

If you are trying to find where the space is being used, you can check out windirstat. I have found that mine is taken up by windows files (Vista, 7, 2008, and 2008 R2 all suck up space in sxs directory).

Click on the web interface in the web console, look at the URL. Like: orion/.../InterfaceDetails.aspx That is interface ID 6263

How many element? How Many APM Pollers? APM Pollers: orion/.../LicenseSummary.aspx Elements: orion/.../DatabaseDetails.aspx I have 800 APM pollers and 1900 elements running a virtual IIS/App server (2008 R2) and separate DB servers (2008 R2 Core. Yes, the DB is virtual too) and it runs really well. (oh, replace the…

Try: select Caption from nodes where not Caption in ( SELECT distinct [FullName] FROM [ContainerMemberSnapshots] where [EntityDisplayName] = 'Node' ) your database name might not be "NetPerfMon".

When you ran netstat -ano, what address did it show? Mine shows "UDP 0.0.0.0:514 *:* 4656" and a tasklist /svc | find "4656" Mine shows: "SyslogService.exe 4656 SolarwindsSyslogService" which means it is the right exe/service listining on "ANY" interface ("0.0.0.0").

100% agree! Most of the people in my organization that needs a firewall change don't know how to translate it from a need to a config snippet. The people who approve don't know the technical side, but my peers and I do. So I need: a request which would be text, then a design that would be the snippet, then a peer review to…

Is the email, is it plain or html? In html, sometimes you need "@" instead of a "{" or "}", but I think that is only with nested variables. Have you tried using the "Insert Variable" button? it takes away the guessing (like is "${NodeName}" also "$(Node.Caption}" or "$(Node.Name}"? It only inserts into the body of the…

They did a BuddyDrop for me too, but then I had to do a repair on "SolawrWinds Integrated Virtual Infrastructure Monitor v1" the next time I did an update, so watch for that then (don't do it now, because it will revert that DLL). Glad things worked out!

You can use an all and any (and and ors) That is "Alert if NameName like (*Bob* or *Carl*) and Poller Name like (*bgp* or *eigrp*)"

hmm... maybe the smtp server was busy? to verify if Orion tried to send it, run this from SQL: SELECT TOP 1000 * FROM [AlertLog] where ActionType = 'EMail' order by LogDateTime desc and see if you find any info.

Ah, traps and syslog can EAT your space up. You might need to lower your retention length and/or setup filters to drop some of the messages coming in. This query might help you find out where the big talkers are. SELECT [IPAddress], [tag], COUNT (*) as Count FROM [NetPerfMon].[dbo].[Traps] where datetime >…

update APM_HardwareInfo set isdisabled = 1 where Manufacturer = 'VMware, Inc.' and Model = 'VMware Virtual Platform'

Oh, SSL? well tcpdump isn't gonna be very nice and I know wireshark *can* decode if you have the public and private key, but that isn't fun. With SSL I would setup fiddler and set that as the proxy (man-in-the-middle).

I dont have write access to the firewall though , so I can't change pager. I can/have told my mss to execute the command, but some tech down the road eventually wants to see the config in chunks, so they change it back. Which drives me absolutely nuts because management decided it was a good idea to have my access taken…

You don't want to send an alert email when something is unreachable or unmanaged. You could have an alert that triggers on "down", and have that one's subject "Alert: " and a 2nd that is for not "up" and not "down" with "Info: ", then have a outlook rule that puts "info" ones in their own folder so you can look through…