osborne_graham

Yes, its a bit of a hack but I use it many times in our environment. Other than scripting via the API you can populate custom fields via alerts. What I do is have a number of alerts dealing with different circumstances - For example if the custom field for 'location' is null and IP is in a range for head office (or in our…

I asked them for specific OID's and was told they don't have anything that can be pulled specific to MobileIron, just usual Linux stats over SNMP. I was also informed that we can't/shouldn't install the Linux agent. So just the basics getting pulled in. Would love to hear additional OID's if you have them.

Yes, I uploaded one a while back, does everything you ask except state who made the change. If you are polling every few hours this will allow you to chart when changes were made and by what size: Folder Statistics

* Add a custom table and use the "Appinsight for IIS: Site" for the datasource and nothing else. * Add 'site name' and 'state' and whatever other details you want to the table. * Expand 'site name' and select 'details page link' from the display settings dropdown. * To also specify the node name too, add another column to…

To cover yourself for the upper management demands of knowing that a device has rebooted, you could create an alert that will fire if the last boot time changes which would fire on the next poll no matter what. You could combine it with an additional component to check the windows syslog for unexpected reboot entries and…

What version of Orion are you using? There was an issue with Core 2017.3 where they made a change to Xui that caused a memory leak populating the maps, for some reason only affecting non-admin accounts. It caused a lot of issues for us at the time similar to what you describe. To see if this is affecting you disable Xui by…

You could do this either with a powershell script in SAM (or SCM if you can fork out for another product). In SAM a really really basic solution could be something along the lines of: $adminmembers = (Get-LocalGroupmember -Group administrators | Where-Object {$_.objectclass -eq 'user'}).count write-host…

Theres an out of the box widget called 'down applications' which will list all app monitors in a down state along with the server reporting the error. Is this what you are after?

I think you are asking for an availability report for all nodes over past week. If so, create a custom table and enter 'node' type and 'node name'->'contains'->'sol' And click 'add to layout' Click 'edit table' then click the plus symbol to add a column. Select: * Node * Average Availability * Timestamp If you have a…

I'm pretty sure you can get the LDAP search count through perform counters so you could do this via Solarwinds using a custom Performance Counter Monitor.

Create a custom Powershell monitor and use "(get-aduser filter *).count" and output this as your statististic. Set an alert to fire with any change in this statistic with an action to email your chosen distribution list or list of email addresses.

I found that the best settings for me is a timeout of 180 and 4 minute wait between the exe running and the email being sent (eg, between escalation level 1 and escalation level 2). Without the two escalation levels the email is sent blank.

In all our cases I use it to replicate a user browsing a site in order to test response of certain components - I like the waterfall charting, it can be very useful. On one occasion we had an externally hosted web app that our users were complaining about response time during certain times. After their extensive diagnosis…

Create a web report, for the datasource use 'node' and specify the two node name prefixes using the 'contains' option and add an 'or' in between them. Use node name, IP address, average availability and timestamp fields: Set a schedule for 1st of every month and configure the email action. This will give you all specified…

You couldn't show the current time, the best you could do would be time at last poll. You could run a report on the time zone so at the end of this month it should change from UTC+00:00 to UTC+01:00 in the UK for example but again you'd have to make sure they'd all refreshed their asset inventory before running the report.

OK, I've just added the document: Disk Space Alerting Using a Variety of Threshold Types Let me know whether this works for you.

You could create a custom a field for the drives and set the alert to react on the custom field. I'm sure I did a write-up on configuring such a solution with percentage or filespace options per drive backed up by defaults/fallbacks but I can't seem to find it. I'll look at putting together a step-by-step and let you know…

When you say you want to create a report on down alerts do you mean nodes down? In which case create a report using the following criteria: Then create a table which includes event time field, node name and whatever else you want to show: You can now restrict to dates either in the table view: or if you submit, now that…

You may have reasons for scripting it but have you tried simply using network discovery in combination with alerts? You can pull anything you like from the DB and use alerts to react and set custom fields however you like. I have several network discovery scans pointing to different AD OU's that pull in new nodes each…

I would personally create such a monitor with a powershell script by putting the logged on user into a variable with: $loggedInUser = get-wmi -class win32_computersystem | select-object UserName Then compare it with the chosen initials which you could also put into a variable so you can reuse the template. The stats have…

I found actiontypeID '1' under 'Orion.AuditingEvents' signifies a login and actiontypeID '2' signifies a logout. My SWQL is nothing more than absolute basic but I imagine it would be possible to compare 'account id' along with 'actiontypeid' to count login's and logout's of each individual then return anyone with 1 less…

I did absolutely everything including a complete rebuild but it was the same since a couple of upgrades back however today I upgraded to the latest and greatest (2019.4) and its all working again - I can now ditch my custom reports that I was having to use so a happy me and a happy manager can click through the charts again

Its either not associated with a node or the node is set for a different polling method. Select the tick box and the option 'manage as node' becomes available. Click that then if it exists change the polling method to 'agent'.

You could look into creating a Powershell script that makes use of the 'New-ScheduledTaskTrigger' command that itself runs by a task schedule on the 1st of every month. This way you could dynamically modify the start date of tasks that kick off the files generated by the Solarwinds Task Scheduler tool.

The updates are getting slowly more reliable. I used the 3gb offline installer on the main poller and the 40mb sync on the other pollers and I think this was the first update I've applied without any issues at all (I've installed the latest updates and hotfixes every month for the past couple of years and always have…

XML no but it depends what you want this for. You can output all the reports with their definition using SWQL: SELECT ReportID, Name, Category, Title, Type, SubTitle, Description, LegacyPath, Definition, ModuleTitle, RecipientList, LimitationCategory, Owner, LastRenderDuration FROM Orion.Report

Do you mean sharing templates from one instance to another? There is an import/export function in the app templates tab:

Thats a generic timeout. Can you ping your orion server from the windows machine? If so, have you opened ports 17778 and 17790 on both sides?

You can be as fine graned as you like with SAM as you can use powershell etc to perform whatever actions you like and monitor the results. For example I worte a template a while back that monitors folders and their content. You can download this here: Folder Statistics and another one for montoring shares: File Share Tools…

If you've set the account correctly on the template, when you apply the template to a node make sure you either change the radio button to 'inherit credentials from template' or select the service account from the drop-down. I tend to manually select from the dropdown rather than allowing it to pull from the template.