shuth · SolarWinds Consultant · ✭✭✭✭✭

You can deactivate the license from your on-prem instance and use the same license on the new instance you deploy in the cloud. If you're migrating the instance rather than starting a new instance, you can follow the instructions here (includes steps for the licenses):…

If the alert is still active or if you have the alert URL/ID, you can view the alert history on the alert details page. It will tell you whether the email was successful or there was an error. Otherwise you can go through the ActionsExecutionAlert.log file in C:\ProgramData\SolarWinds\Logs\Orion. I think this may only show…

That will definitely do it! Everything is great and then "Why are my custom poller tables 100+ GB?" 

I've pulled data from Orion.NPM.CustomPollerStatusOnNode before and I'm pretty sure it only includes the most recent poll data. If your UnDP returns multiple rows of data (i.e. a tabular poller), then you will see the same number of rows in that table. I'm not sure why you're seeing data going back so far. You could also…

Currently the only way I know to filter this particular resource is with a View Limitation on the page (or an Account Limitation). I agree that there should be a filter option within the resource itself (like the Top XX resources).

Without Enhanced Mode, the node status can only be one of three statuses (excluding the unmanaged/unreachable/unknown/etc): * Up - device is responding * Down - device is not responding * Warning - device is in the process of going down (the default 120 seconds fast poll/warning period from when the device first stops…

What happens when an actual alert triggers? ie. Not using the Test/Simulate/Execute button. When you hit Test, the AlertTriggerTime is not a real time - in all the instances I've configured, that variable has always shown "Never" during tests as the alert does not exist. In the screenshot below, I've duplicated the line…

When you say you ran a test, are you creating a real alert condition where the system generates the alert or are you clicking the Simulate button?

If you have a unique identifier - e.g. the InterfaceID from the database, you could import a spreadsheet that has the appropriate custom property values using the Import function in Manage Custom Properties.

I've occasionally seen this in various instances and have never been able to find a root cause. Occasionally the Auditing will just stop working - no audit events at all. Restarting the SolarWinds services sometimes fixes it, or disabling/reenabling the auditing, or a full blown repair with the Config Wizard.

The test/simulate won't have a real trigger time as it's a fake alert. I've never seen it say anything other than Never in an execution/simulation though so not sure why yours is showing October. I'd suggest copying the alert and modifying the trigger conditions to a known condition - i.e. that specific interface and…

What is the variable you are using in the alert? This should show the trigger time of the alert: Alert Trigger Time: ${N=Alerting;M=AlertTriggerTime;F=DateTime} When you simulate/execute the email action from the alert configuration, it doesn't input any datetime as the alert doesn't actually exist. e.g. mine shows: "Alert…

If you are running SAM 2020.2.6, there is an out-of-the-box API Poller to monitor RabbitMQ. https://documentation.solarwinds.com/en/success_center/sam/content/sam-api-poller-rabbitmq.htm 

Try this query instead. It will count all the applications with critical status that are assigned to nodes with the custom property starting with "Prio1". If there are none, the count will be 0. This will auto-join all your tables for you. SELECT COUNT(1) as Count_Items FROM Orion.APM.Application a WHERE a.Status = 14 AND…

Hopefully not too late! Sorry to hear you are leaving but all the best with your future endeavours. Thank you for everything you've done. We will miss you! :)

The alerts reference the database therefore are based on your polling intervals. When you set a "condition must exist for X" time in an alert, it should be higher than your polling interval to ensure you have at least 2 data points otherwise you are just delaying the alert trigger by that amount of time. A rough example: *…

A couple of other things to check: * Can the SolarWinds server reach those servers in the OU? SolarWinds may be able to communicate with the Active Directory server but if the servers in those OUs are in a different part of the network behind firewalls, etc. then the discovery won't see them * Has someone accidentally…

A clarification here is that WinRM polling currently only works for SAM application polling when using the WMI based component monitors. Basic node polling (CPU/memory/disks/etc) is still done over RPC/DCOM. https://documentation.solarwinds.com/en/success_center/sam/content/sam-winrm-polling-intro.htm If the DCs have been…

I've done something similar for a client but I'm not sure of the efficiency/optimisation of this type of query, especially with a large data set and if you want to add all 15 pieces of data. You will need unique labels and you could probably narrow the sub-queries further by using the application name as well as the…

As far as I know you can't have the dashboard not show down/red if the port stops responding. So the application monitor will show as down if the port doesn't respond. You could handle the alerting aspect with groups (so probably 14 groups if you have 14 nodes). Otherwise you might be able to do a custom SWQL node alert…

This is changed at the interface level, not the node level. You can select multiple interfaces in the Manage Nodes screen and edit multiple interfaces at once.

If you have a bandwidth statement on the interface, NPM should detect the speed at 80 Mb. If not, you can edit the interface and override the transmit/receive bandwidth. You can see what SolarWinds detects the bandwidth as by looking at the Interface Details widget when drilling down into the interface. If the bandwidth is…

You might be able to use a PowerShell component monitor that uses Test-NetConnection and script in something that checks both ports. Otherwise in SolarWinds, you could: * Create the two individual TCP Port Monitors (10081 and 10082) * Create a Group and add the two component monitors as members * Generate an alert based on…

I generally just google "Orion hot fixes" and it's typically the first or second link. Usually quicker than trying to navigate to them. However you can get there via two methods as far as I know... Probably others. Via the Customer Portal * On the Download page for your Orion product (NPM, SAM, etc), at the bottom should…

You can view the hot fix release notes here for the Orion platform and Orion modules. support.solarwinds.com/.../Orion-Hotfix-Release-Notes

If you have resolved the issue, please post the resolution for other users having the same issue in the future.

Ooops, yes. "IS NULL" for the ones where you haven't acknowledged it yet as those alerts won't have a DateTime value yet. You should be fine without the = '' clause. That was more for if you acknowledge an alert and then unacknowledge it, I'm not sure if the DateTime will go back to NULL or an empty field ( '' ).…

With the additional where clause it is probably only showing alerts that have been acknowledged. You might be able to try something like the below but I haven't tested it. Should show any alerts that match your caption filter, and have either not been acknowledged or have been acknowledged for more than 7 days. WHERE…

There is an AcknowledgedDateTime in the Orion.AlertActive SWQL table. You could try modifying your WHERE clause to only show alerts where the difference between AlertActive.AcknowledgedDateTime and the current UTC time is < 7 days? Not sure if you need < or <= so test it out. WHERE DAYDIFF(AlertActive.AcknowledgedDateTime,…

If you have them both execute at the same time, the NCM action hasn't had a chance to run and update the Notes field before the email is generated. Try adding an Escalation Level on the Trigger Actions step and move the email action into that with a delay, e.g. 1 minute.