qle ✭✭✭✭✭

Yes, the Windows agents should automatically upgrade by themselves. Not all at once, mind you, but in batches of 7-10 at a time.

I imagine this would be unique to each environment. For example, there may nodes that you simply monitor for up/down status. Then there are other critical systems where you need to know the moment the application is unavailable even if the system stays up. I'm assuming that the 8-service template you used was the Windows…

If I was able to create External nodes without IP addresses this would be perfect. Would adding nodes with a loopback address work for your situation?

If you're open to it, this is possible if you're using custom node properties.

You could accomplish this by creating a custom view and enclosing it inside an iframe on your company web site. You can take it one step further and make sure only that view is accessible to a generic NPM account. Then pass the login credentials for the NPM account when enclosing it inside the iframe. I hope that helps.

I'm guessing that it's a problem with credentials that have been assigned to this application component. By design, VB scripts are executed locally (on the poller) against remote devices. It uses the assigned credentials to execute it locally and then authenticate to the remote device. Therefore, you need to make sure that…

Have you tried one of the built-in Barracuda connectors? As a matter of fact, it might just be easier to configure the Barracuda to forward syslogs to LEM and see what LEM automatically detects as the connector for the incoming syslogs.

I'm assuming you're referring to UnDP pollers. If so, this sounds so simple yet I'm not aware of a way to do this. Obviously, the trick here is to be able to reference the prior value of the poller and I'm not aware of a variable that does so. We know they're present once we choose to keep historical data.

I believe it is in bytes (B).

Sorry, I must a little slow this morning but I'm trying to understand what you're looking for here. jtimes's Outage Duration Last Month report is already sorted by server/node. Also, as you've indicated, the report applies to down nodes but how is that different from your request for outage duration? Doesn't a down node…

Welcome to the forums! In the future, you may receive more feedback if you posted questions like this in the Network Performance Monitor forum. With that said, you have encountered a limitation of System Manager in that it won't add nodes that don't support the interfaces MIB. The only workaround I'm aware of would be to…

Assuming the message appears in the popup when you hover over the info box, to include this in an alert, use the ${StatusOrErrorDescription} variable. Hope this helps.

This sounds pretty straightforward. Make sure you've set the Do not trigger this action until condition exists for more than option and then for your trigger action, set the Alert Escalation to 6 hours. Am I missing something here?

It's unsupported but you could possibly run an SQL query that modifies this field in the database.

As far as the poller is concerned, not only is the interface down but the entire router is down. Assuming you've setup dependencies for the four switches with the router as the parent, you shouldn't receive any down alerts for those switches. I hope I've explained it clearly. If not, let me know.

Try this. Change the second to last line from this eventtime between dateadd(month, -1, getdate()) and getdate() to this datepart(yy,eventtime) = datepart(yy,dateadd(m,-1,getdate())) and datepart(m,eventtime) = datepart(m,dateadd(m,-1,getdate())) Let us know if this is what you're looking for.

This would be great but I don't think is at all possible now.

Sorry, my mind must be slow today but what's the difference between a running process and an idle process? I'm only confused because an idle process is technically running, isn't it? If so, do you mean that a process is RUNNING if it is active and consuming CPU cycles?

It might depend on what you've configured for the trigger condition. Can you post it?

Total <any statistic> usually refers to historical data but alerts are usually meant to react on current data. Quickly glancing over the available statistics to alert on, I don't see any that refers to total traffic for today. Maybe I'm wrong but it doesn't appear to be possible to alert on this.

There's been at least one other request like this: Multiple APM on a single Graph So no, it's not currently possible. However, if this had been a UnDP poller or a node/interface/volume statistic, it would definitely have been doable.

Yes, if you use Report Writer to create a new inventory report, you can select which fields you'd like to appear on the report such as Node Name and IP Address. Make sure it's displaying the information you're looking for and click File menu > Export > Export to Comma Delimited File. For future reference, you'll probably…

See if the following works for you in the subject line: ${SQL:Select substring(caption,1,2) from volumes where volumeid=${volumeid}}

I'm not aware of any available alert variable that would represent a unique ID for each triggered alert. However, you could create a pseudo unique ID by combining any variable that identifies the affected node/interface/volume with a variable that identifies the alert itself. An example of one such combination could be as…

When one of the monitors become "unknown", what's does the "info" box next to the monitor status provide?

Donald has posted this type of request before in the following thread. Until SolarWinds gets around to properly implementing this feature request, perhaps my suggestion in the thread will be a feasible workaround for others interested in a heartbeat alert. Hearbeat Alert?

Ideally, network devices like a router, firewall or VPN appliance should forward their syslog directly to LEM. However, before doing so, you'll want to make sure that LEM has a connector built for said device. In our case, we have an Cisco ASA as our VPN appliance and so we use the Cisco PIX and IOS connector. Hope that…

It may have changed but it should be "accountid" and not "userid"

I don't have any experience with the IronPort but do have some generic suggestions that might help. Is it fair to assume that when you access the blocked site from the NPM server, the attempt is properly logged to the IronPort? What about when you try to access an unblocked web site? Also, please keep in mind that…

Definitely seems like a bug but then again, I'm not running v9 SP2 yet. I know you can add/remove the "Clear Button" column in the Events View but is it possible in the Alerts View?