nick_scott

Has anyone tested this ? 

Thanks Alex! I will be using these as I am uncovering failed WMI polling.

You say "SLX, or unlimited, license, which is the next tier up. The SLX gives them the ability to monitor an unlimited number of these elements (up to the polling engine maximum, and/or limit of their hardware)." We currently own NPM SLX. What I cannot determine is if the pollers themselves have some logical element count…

I think its a great introduction into a few real world examples. Would you or anyone else be able to provide a basic example using this framework ? I am very interested in this as Linux compared to Microsoft machines lack the feature rich functionality of SAM. 

We do similar things, NCM is amazing.

Any chance we could get an updated SWQL Examples.xlsx ? Thanks!

Your showing a 192.168.5.138 address in the original screenshot, not .137

Im assuming "192.168.5.138:57189 Established" is an active connection on the server still ? Just wanted to confirm.

Looks like WinRM (Remote Powershell) is not enabled on the receiving host. I would check this article out for confirmation. http://stevenmurawski.com/powershell/2015/06/need-to-test-if-winrm-is-listening/

reply with a snippet of the error

Correct, in my case however I swapped exit codes. Reason being, I intend to use this when looking for malicious connections. I would expect this application monitor to be sitting idle until security contacts me. If they say, look for this IP address and port I would then modify the script arguments with that new IP and…

Your script argument has to have the exact number of spaces between the port number and the state. You could leave state out of the script argument and simply look for ip:port Initially I was also having trouble, I counted the spaces between port and state. It worked at that point.

Just got it working! Thank you sir!! Much appreciated! Sweet Template!!!!!

This appears to be a very helpful template for our security team. I am testing this template on my QA Additional Polling Engine. I went directly to the server and ran netstat -na so I could confirm an IP address and port number. I placed the IP address and port number into the script argument and ran this as a remote…

Disregard, I was able to find the tables using DataBase Manager. I was having issues using SWQL. Thanks.

Nice doc, thank you.

I have this same need, SCOM has a multitude of unti monitors that cannot be easily imported into SAM

I contacted support, level one tech informed me that the MIB being used is a private MIB. I Kicked the ball back over to the server side!

I was hoping someone had seen the error in the SNMPwalk before. I cant add the device without proper SNMP verification.

Great information, I appreciate everyone's input.

I would like to point out that Application monitoring (both Linux and Windows) will be in scope. We also have DBA's manage SQL and a server team for the MS OS. The entire app and all its capabilities/modules/patching is all me. Thanks all.

Has anyone made any significant changes to these jobs ? This looks like a game changer IMO. So glad I found this article. I'm getting ready to buy a few Monsters and knock this OUT!

Here are the services I am being requested to pull into the gui for monitoring.

The additional web server needed to be rebooted! All set !

I have a case open with development for the following: Editing custom properties with multiple devices using different SNMPv3 strings results in applying incorrect creds to those devices. After the incorrect creds are applied things like Ethernet and hardware start showing unknown. When you try to poll the device it fails.…

If you were to have a thousand (max agents per poller) agents configured with server initiated and lets say a portion of your network dropped your polling server would be making continuous communication attempts potentially maxing out your available 64k ports. Agent initiated allows the sever to do the legwork, saving the…

Got the scans working. Below is my entire working script. Now, I need to figure out how to schedule them (in script below, you will have to define start, and end address) Thanks again TDANNER! $ErrorActionPreference = 'Stop' #Add the snapin Add-PSSnapin SwisSnapin #create a connection to solarwinds $hostname = 'X'…

Anyone ? 

There are certain limitations with web reports. I have noticed that when you start joining multiple tables the Web Reporter seems to run out of options. Network interfaces and Mac Address info can be found in the 'interfaces' table. Over the years I have learned to get very familiar with Database Manager and basic SQL…

Thanks Lada, I was looking for polling method under orion.node I would of never guessed it was objectsubtype. Thank!!