netlogix

why an alert? could you create a report that gives you the info from report writer? then you can set report scheduler to send it to you in what ever creative ways you can get windows task scheduler to run.

I would take a look at your syslog rules and try to find a count of logs coming in. Maybe try making your first syslog rule drop the syslogs (I know you won't be getting anything, but at least it is running), then you could move the drop rule down. It could just be a bad order of rules. Best thing to do is figure out witch…

are you running at least 10.0? If so, yea! Use ${vbData2} (var bind data 2, it could be 1 or 3, but from the trap you sent it looks like 2 ${vbData1} or ${vbData3} The problem I have is that it is a specific line number of the trap not based of var line name, but at least its something.

look at the data in the syslog SQL table or in the windows syslog viewer. I wonder if IIS or the web broser is interpreting the <??> as some type of formating.

Create RSA key (I used puttygen and exported as OpenSSH key format) and save to C:\programdata\SolarWinds\sftp.rsa

The whole "Undefined" thing was a bug that showed up for me in the RC, but they fixed mine. Contact support. I had to assign an IP address to NIC that was just sitting there by itself. Then I had another one where I put in a DLL somewhere, but when I upgraded to the final, I had to do a "repair" on the "SolarWinds…

In the alert trigger tab, at the bottom, there is a "do not trigger until...", you could make that 48 hours. Alternately, email alert escalation tab, "delay the execution..." make that 48 hours. (or make each 24, what ever works for you)

Reports folder and Scheduled tasks (NCM jobs or report writer).

From what I have seen, as long as the hostname stays the same, then the polling assignments won't get messed up, so no rediscovery or anything needed. What version of NPM? 10.x? If so, then the license should be no problem. I am not sure if there is anything with any different versions, but I don't think so. You will also…

I have switched servers a couple times. Pretty much everything is in the Database, so you don't need to backup much of anything. (as long as it was done through Solarwinds approved ways) I change the web.config: <add key="TabsMouseOverTimeout" value="300"/> <add key="TabsMouseOutTimeout" value="700"/> <add…

With 2, you can do it with a discovery. Export a list of IPs that you want it turned on for, load those into a discovery, run it, then import the results. Word of caution - sometimes discovery imports extra interface or volumes you don't want, so I just don't import volumes or interfaces - note that doesn't remove any of…

Basic alerts are going away (or at least I think they are) I used an advanced alert and made the condition like this and the reset just reset when no longer true radio button.

Mine look like they are working now too.

I had one problem where a tech added a node, which showed up in the events, then the node was deleted and a different node was renamed and it's ip address changed to the new nodes. Though the tech did not choose to do this. I think it was a bug, but I could not repeat it and I caught it within minutes. the tech said it had…

Try: ${SQL:SELECT [StatusOrErrorDescription] FROM [EG-ORION].[dbo].[APM_AlertsAndReportsData] where ApplicationId = ${ID} FOR XML PATH('')} (*updated to remove extra command that was not needed)

I also asked for this and would like to see it added. Like the interface view in the node management.

Do you have the email action set to repeat in the escalations tab?

That "Disk/Backups" tab has a custom report that ties into my backup solution and shows all the "Online" backups for that server (well just the date/time of some job, not what it is)... (neatest newest addition)

hmm! I was hoping somebody else would respond to this, because I am curious too. I hadn't heard about the MSMQ queues, but I had heard to keep an eye on the average disk queue length of the SQL server. I hope other have more ideas.

I think your alert is a little messed up, the alert will always be active for DC5 and DC34 and that's why it never reset. In order to reset, the Node Name had to be DC5 and DC34, which is not possible. I think you want an alert for only DC5 and DC34 when they are down. You should add a group and set that group to any and…

You would get a second poller to monitor overlapping IP ranges. like here

I went to maps.google.com and zoomed to the level I wanted on SAT view and saved a screen shot of the area my business covers.

Please keep us updated, I have been trying to figure it out too. I ended up just doing "no pager", but then someone turns it back on and I get a bunch of silly empty lines. I even checked the ascii code of the files to make sure they were spaces (20), not that they just look like spaces. I don't remember the order of crlf…

I also saw this thread

If you want to know when the interface goes down for each node, create an alert for the interface status (not as good a ping through the interface, but it is something) and you can add that interface(s) to the map(s).

I don't know if they support it, but I am using it.

Are you using HTML emails? if so, replace inner "{" and "}" with "@" i.e. ${SQL:Select ErrorMessage From SolarWindsOrion.dbo.APM_CurrentComponentStatus where ApplicationID = $@ApplicationID@ }

you can pull anything out of SQL by using something like $(SQL:Select ServiceTag From APM_HardwareInfo where NodeID = ${NodeID}}

I don't know if you guys count voting, but add me to wanting this feature.

try changing your agent string - I have web sites that send back a different response based on the agent string. I figured that out by doing a packet capture on the monitor and pulling the html page out of the tcpdump (not sure if you have that skill set at you disposal) or you could use linux's wget and specify the search…