shuth · SolarWinds Consultant · ✭✭✭✭✭

Yes. The easiest way to check is to run an nslookup against the IP from the SolarWinds server. If that returns XYZ.COM then the DNS field in SolarWinds will show that on the next rediscovery. The caption will NOT change/update automatically.

I'm not actually sure from memory what method is used to show the event message. i.e. only last received message or X last received messages but I'm pretty sure the only messages recorded are ones that match the filter. All the messages found are shown on the Component Details view in the Event Log resource. They are also…

I have placed this on the Content Exchange as well if people wanted to import the alert (and customize) versus making from scratch. High Volume Usage (Percent Utilization) Delta

No, there is no downtime during maintenance. The maintenance runs every night cleaning up the database and aggregating data per your retention polices. E.g. Detailed data older than 7 days gets summarised into hourly stats. Hourly data older than 30 days gets summarised into daily stats. Daily data older than 365 days gets…

You would probably need to run a scheduled script against the API or an alert using that query that then updates a custom property value. The group is then populated with a dynamic query against that custom property. e.g. script runs each night and if it detects SQL installed, updates a custom property (SQL_Installed =…

Varies a bit on license. Some of the modules won't let you add past the license count and others will let you add the object but won't monitor / collect data from that object. For SAM component licensing, if you go over the license count the components past the limit just won't poll at all and will show as "unlicensed".…

This doesn't use AppInsight. The licensing usage will depends if you have the newer SAMxxx licence or the older ALxxx license. If older license - it uses the single Event Log Monitor component monitor - 1 component * 20 servers = 20 components If newer license - it will draw down one SAM node license per server, so 20…

1. It shows all your availability data for your applications. The Detailed table shows your raw data (in your screenshot, the status every 5 minutes). The Hourly table is older data summarised into an hourly figure, show the average % availability for that hour. The Daily table is even older data that has been summarised…

Not to my knowledge.

Out of curiousity, what happens if you change the description to something else?

The only way you'll be able to cover every condition like the above will be scripting. And depending on what conditions you come up with will determine how complex your script needs to be. You can tweak the polling interval (default 5 mins) or modify how far back in the logs it looks (default is 1.5 x polling_interval),…

You'll need to talk to the provider and have it enabled - typically it is a separate paid service.

That's getting more complicated. Generally when you require different alert trigger conditions and/or actions, you will need a separate alert. * Alert 1 - Application A goes down, email Team A * Alert 2 - Application B goes down, email Team B * Alert 3 - Node goes down, email Team C There are some ways around this if the…

It will pop up as a warning in the pre-installation health check but you can proceed anyway if you are sure the servers have .NET 4.8 installed.

The ServiceNow integration "syncs" every 20 seconds. I'm not sure if it pulls out the ticket number immediately after sending the creation request but it should have it within 20 seconds when the next sync cycle occurs. If you have your query trigger immediately when the alert triggers, the SolarWinds server typically…

If you want to create a complicated group structure in one go, it's the way to go. If you are importing everything into one group, if you have that group selected then select Import Structure, it should put all the subnets in that group (tell the import to ignore ID / Parent ID)

Hi @"johncranen", No, when you import via Manage Custom Properties it only imports the longitude/latitude values. There is no option for Locations/StreetAddresses so every point on the map is labelled "this location". You can use something like the below that will update the location/streeaddress field with a custom…

It's definitely in the SAM beta as well. I also found the same bug during a GoTo meeting with the UX team. From memory, if you select it the far left list shows all of the Node IDs.

No problem. Let's break the query down. There are a couple of problems due to the IP address length but I offer an alternative at the bottom. The basic structure of the SUBSTRING function is SUBSTRING(source, starting position, # of characters to return). ${N=SWQL;M=SELECT…

You can check the integration logs here: C:\ProgramData\SolarWinds\Logs\ESI There should be an ESI.BusinessLayer.log file. If you want to increase the level of logging in that file, run the Log Adjuster tool on the SolarWinds server. I can't remember if it is called something different in NPM 12.4 but it should be similar…

That query works for me.

You should check the maintenance log to see what it is stuck on or what is taking so long. C:\ProgramData\SolarWinds\Logs\Orion\swdebugMaintenance.log

All good! I mentioned that particular monitor doesn't seem to collect the information about the certificate itself and I read the initial post as you were also looking for the information I talked about. If that's not what you're after then my response isn't correct. It looks like AppInsight for IIS might give you the…

Yes, a bit easier as a SWQL query though. Change the custom property name/value as needed. SELECT Subcaption, COUNT(Subcaption) AS NodeCount FROM (SELECT SUBSTRING(Caption, 1, 3) AS Subcaption FROM Orion.Nodes n WHERE n.CustomProperties.DeviceType = 'Router' ) t1 GROUP BY Subcaption --HAVING COUNT(Subcaption) < 3 Or if you…

Thanks jhynds​ - that alleviates a lot of my concern about dropping the trap/syslog viewers. It wasn't clear anywhere (that I could find) that the LM alerting functionality would be available without an LM license. I'll touch base with you separately about the trap tagging.

You can also use Google's caching to see the old site. I find Google to be quicker using the cache but the problem is all the links are broken on the cache site as well.

Try http://www.dnsstuff.com.

I'm running NetFlow on an ASA here and I've noticed it does seem to be fairly spiky and inconsistent at times. As an example, I downloaded an 800MB file this morning and it's counted the traffic twice (the traffic as it was downloading and then again in a single spike when it finished and closed the connection). I've found…

I am curious as well as my belief is that both the active and passive SolarWinds systems have to be offline for a FOE upgrade.

As above - accounts such as the NOC wallboard display need a 1 minute refresh while other accounts are fine to be on a 5/10/15min refresh. In the meantime I'll look into providing a plugin for IE that auto refreshes as mentioned in this thread.