njoylif ✭✭✭✭✭

if String1 and 2 are exact, try: String1(\n).*String2 if not: String1.*(\n).*String2.* or: .*String1.*(\n).*String2.*

I've got this working, see THIS thread or the url at bottom. I did add custom properties in NCM "orionNodeID" and have some SQL jobs that copy those over BASED ON IP ADDRESS (for node is same). I think the NCM import nodes will allow you to import the nodeID from NPM to NCM column of your choice based on IP address as…

yes you do. you can either use map maker to "publish" maps or i just wrote a batch file (and scheduled) to map the drive and copy the appropriate files over. You will also need to copy the custom icons, reports, etc... over. Hope that helps.

I use this report for capacity planning. It is a report that gets my WAN links count when it goes > 45% for 5 minutes (for the last 7 days. you'll have to tweak for the nodes you are looking for and the percentages. hope that helps

sure assuming you have rights in the DB, for Nodes -> UPDATE Nodes SET <column_destination> = <column_source> <> sections get changed with column names (i.e. I have a custom column called HostName - SET HostName=SysName) I personally always test with a single line when dealing with this. It is always also a good idea to…

you need to be more specific please... I'm guessing you are talking perhaps "top 10" pages. i.e. top 10 errors and discards. This is typical for firewalls to show millions of discards...that's its job. For that, you'd click edit (above the section/resource to filter), and enter your filter...it might look like this if your…

typically that is why management systems best practices say to use loopback addresses (never go down) and you configure your devices to source SNMP and syslog from the loopback.

if you know the values expected it would look something like this: Select COUNT(ifOperStatus) as cnt, ifOperStatus from <table getting info from> where ifOperStatus=<value looking for> group by ifOperStatus

I don't know that there is a way to get copy of DB without history. Only thing I can think to do is restore in isolated env. and get running, then set all the retention periods to 1 day or something. then run maintenance/wait for daily cycles to run to roll up/clear out data. HTH

Q1 - currently no way to do this...I believe it uses SWQL. Q2 - one way to accomplish this is to "add time" under frequency at the even hours...I think. never tried it.

I use more than that often without crashing. I assume your logic above is (A and (B or C)). I'd open a ticket.

I had an issue where I was migrating domains. My users couldn't auth to domain 1 while server was in domain 2...(we aren't doing trust relationship) I had to get everyone set up as domain 2 users and set up the users/groups in SW for them to be able to get in.

great regex site.. right side you can click on option and bottom will tell you what it does... \s -- Matches any whitespace character (spaces, tabs, line breaks).

I actually just upgraded one of my small environments with no issues. NPM,SAM,NCM,NTA,UDT only problem I had was PICNIC -> installed NTA on my DB server, but not on main so when I ran config wiz, it barked. I checked installed programs and saw, still on NTA 4.0. I did not get any errors on alert migration which when I…

I assume you are talking about appending within a custom property... if you are decent at SQL, you can do these things. if you can feed info to SQL, you can just add like (### Disclaimer: Always B/U your DB and test thoroughly before updating your DB directly ### not supported): update <CustomPropertiesTable> SET…

tweaked to remove nodeID to give quick totals: use NetPerfMon; select b.engineid,c.ServerName,COUNT(*) numberOfFailures from udt_job a,nodes b,Engines c where a.NodeID=b.nodeid and b.engineid = c.engineid and a.JobLastResult = 0 group by b.engineid,c.ServerName

you would use the tool "network atlas" to create all of your maps any way you want them. just select the interfaces and nodes you want and drag them onto the map. you can even make it look like the drawing above (or use the drawing above and overlay "objects" like nodes and interfaces.

TRY: SELECT COUNT(*) AS Total, ISNULL(OperationName,'No Name') as OperationName FROM WorkQueue WHERE OperationName LIKE '%ApplicationLicenseCountChanged%' OR OperationName LIKE '%Compliance%' OR OperationName LIKE '%Evaluation%' GROUP BY OperationName

seconded. I have many networks that I'm only looking at to make sure we didn't miss something, so I'll scan weekly. I'd love to be able to tell it fire on sat or the like.

you can do this one of several ways. graphical output -> use the policy checker. pretty intuitive to use text output -> you can set up a job to execute a command like sh run | i <your criteria here> this will give you a lot of "noise" in the output, but will give you the info you need.

not out of the box, but you can do this using a SQL query in your alert email message. search for that and LMK if you don't find anything useful and I'll try to help.

This is REALLY going to depend on how you want to view it, what your environment looks like, etc.. This will give you application and systems its applied to. you'll probably want to tweak the where clause to add: AND vendor='Microsoft' or something like that (machinetype like '%windows%')

can you "show SQL tab" in report writer and post the SQL here...I'll play with when I have a few.

many of the app insight "pieces" use existing component alerts as they are mostly component checks, etc.. What we did was take the "template" or main instance and removed any thresholds in it. this will eliminate most if not all of your alerts. If application monitors (AM - template applied to node) have overridden the…

I believe it should be "Application.CustomProperties.<name>"

needs to be (I expect and has to be () b/c of order of operation) (application.name='Application1' OR Application.Name='Application2') AND Monitor.Name='Active Requests'

Try this on...remove columns as desired. select ServerName, IP, PollingCompletion, Elements, Pollers, MaxPollsPerSecond, MaxStatPollsPerSecond from Engines

Orion NPM on 3 servers (2 additional polling) 2 separate Database servers clustered w/ SAN Attachment. Works like a champ

ah, the beauty of custom properties. What I've done is have a custom property called "alertEmails" It is populated with our Operations email, the monitoring team email and the system owner's group email. The alert then has in the TO: ${alertEmails} OR you could have a department/owner custom property. create a group email…