orioncrack ✭✭✭✭✭

Alert on a custom property attached on only the interfaces you want to be bothered by. We do this now and it works fine.

Thank you for the analysis. What do you recommend for a site with 30 agents on hi speed links?

LOL, I'll never forget one of our guys turned on the Component warning alert and we were bombarded by thousands of garbage SQL AppInsight alerts.

I think a full database restore would be needed.

You need to separate all of those servers. Your logic is incorrect. Unless of course the alert is meant for ALL servers in one poll with low space and not just 1 of your group you have listed. Make the alert an All (AND) and put your Node names in the OR condition.

SolarWinds SQL AppInsight doesn't do comprehensive Event ID alerting. So, you must create them yourself. SQL database offline is Event ID: 5084 Someday we'll have comprehensive SQL monitoring of the below objects and not all of the silly WMI counters from SQL Appinsight... Sorry to sound angry, but my god, SQL AppInsight…

Have you setup Directory auditing? I believe Event 4662 will show FSMO changes. Then just create an event log monitor.

Check the latency/packet loss chart - I will bet you have packet loss (look for red lines) which causes these false alerts. It drove us nuts for weeks, until we figured it out. Many threads on this.

Settings, All settings, Manage Views. Copy the Top 10 View and then with that copy, filter on the servers you want. Add a chart for network traffic. Or create a new View with custom chart data of your choosing if you don't want the Top XX charts. This is just a quick way to get started in what you are asking for. HTH

Have to agree, even with all the hate mail I get for bashing it. It is a terribly flawed applet. Miss the old UI for sure. Simple, easy, done.

Only 1 piece of statistical data is supported in the Oracle UE templates. My developers ask for the same and its not possible according to the documentation.

What exactly changed? Also, I'm not sure how GPO failure alerts are related in response to the above. He didn't say there are GPO failures, but a GPO change. My question is, what kind of GPO change took place? If something blows up all of your triggers there's not much you can do as far as a fair warning goes. Unless, the…

A thing of beauty, thanks for the tip.

Dell AD/Server Security Audit product does it beautifully (formerly Quest). Using SolarWinds SAM you may need to collect the events and alert on those which is ugly. Or buy their SIEM/LEM product and see if they have it built in events.

If you get anywhere with a support ticket let us know. This issue/feature has been talked about often with feature request threads as well. Automatic Discovery of Resources to Monitor

User error .... durrr ....

Search for "Polled" in your alert management view for the failed polling alerts that you can use for this condition.

The main problem is they do not allow granular overrides at the MB level, server level, group level. This is a HUGE gap in the product in how disk alerting and monitoring is handled.

We have the same anomalies. How clean are your Windows App/System logs for SolarWinds related events?

Any critical/error level events in event viewer for Solar objects?

The Unmanage Utility on your main polling server is quirky but works. Keep in mind if you apply the utility, or even do it manually in the Web console to 100 servers, you risk the chance of them going into Unknown state. This is a known issue that we suffered in NPM 11. SAM 6.2 Schedule tasks to be stopped using the…

FileGroup space in SQL is different than Volume space. You need to look at your SQL DB filegroup sizes. Right click on a database in SSMS console and choose report, look at the DB Files space usage..

I have reached them on Weekends a few months back. They gotta be really, really busy.

Maybe your statistics retention got changed in Admin Orion Polling settings?

Its thoroughly confusing and buggy, sadly no one wants to admit it.

Not sure if this is what you are looking for but you could set the Trigger condition check box "Condition must exist for more than x number of minutes..."

Easiest way is to use the admin account in the hidden advanced section of the schedule wizard. We tried using AD accounts or any other accounts and could only get it working with Admin. Might be different for others though. Test and see what you get using Admin.

OK, so we have 3 or so customers out of 100,000+ who have had issues to share. Are the 3 users who are having issues a tiny minority? SolarWinds just sent out the NPM 12.0.1 Swag promo deal to all customers - if they know there are issues, why would they push a lemon on us like that and offer free orange fanny packs for…

Well despite this and a few others, it sure beats using Nagios though.

No one has replied because what you speak of is a nightmare to manage with SolarWinds for a large company. I could elaborate but its not worth it. Let us know what you decided to do and how it worked out for you.