shuth · SolarWinds Consultant · ✭✭✭✭✭

I'm going to train someone up on SolarWinds. How noob do you want them to be? Never touched it, used it for a tiny amount of time or ?

Ah ok - I wasn't sure if something existed like that for the volume types. How would he modify the alert to exclude the C/D/E drives as I presume they would be Fixed Disk as well? He'd need an exclusion of some kind (either by volume caption or a volume custom property possibly?).

This isn't a common request that many people would have experience with, and those of us that would may miss the thread or don't have the time to respond outside of their actual day jobs.. That said, here is a starting point without having access to your system or knowing the entire use case. You'll most likely need to…

If your transaction log is full, that can block you from logging in with domain accounts. The database can't update with the domain details and will block login. You should be able to log in with local Orion accounts but the transaction log full is a more serious issue that you should investigate (as @"sum_giais" said). If…

@"cnorborg" - my response was if they only had the SQL backup (no website). But yes, that is much easier if the website is still functioning.

The node caption won't change automatically if you rename the device. The SystemName is what the device thinks it is called and should be updated during the rediscovery. There are scripts (like the above) where you can bulk update the node caption with the system name field. The interface caption should change…

I'd say removing the +'s fixes it. The query below runs for me. SELECT NodeID,NodeCaption,NodeGroup,AgentIP,Community,SysName,SysDescr,SysContact,SysLocation,SystemOID,Vendor,MachineType,LastBoot,OSImage,OSVersion,ConfigTypes,LoginStatus,City FROM NCM.Nodes

A quick example. I monitored Event ID 7036 with a filter for "Print Spooler". It detected the stop/start events when I stopped/started the Print Spooler service. @"KMSigma.SWI" wrote an event log report here that I modified to only show that application. This could be placed on your summary dashboard as a custom table.…

I think there is a bug where if you select all and it crosses multiple pages, it doesn't actually work. You have to schedule each page at a time. An alternative option could be to pause all alert actions. From the ALERTS & ACTIVITY menu -> Alerts, in the top right corner click More, then select Pause actions of all alerts.…

Hey @"wesleykparker" , thanks for the reply and the workaround. However there might be something wonky about this system as I'm still getting the error using your script. I will have to dig into the OrionWeb log and maybe turn on Hubble to see the queries trying to run. The query returns all the data: I select the same…

That's pretty much what I came up with as well. If you're after something basic: SELECT Nodes.MachineType AS [OS], COUNT(*) AS [Node Count] FROM Orion.Nodes Nodes WHERE Nodes.Vendor = 'Windows' GROUP BY Nodes.MachineType ORDER BY [Node Count] DESC I removed the WHERE clause for this screenshot in my lab instance. This will…

This document details how the integration works: https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/core-servicenow-how-it-works.htm If the state of the previous incident is a "closing" or Closed state, SolarWinds will create a new incident. You will need to check with your ServiceNow engineer…

Thanks wolfgangvater! Tested and working.

I assume you mean the release notes for the Engineer's Toolset? They can now be found here: https://support.solarwinds.com/Success_Center/Engineer's_ToolSet_(ETS)/release_notes

Hi Kellie, * Primarily yes, I see the spacing to be an issue on the NOC or Summary views (take up more vertical room). The other place I see it a bit is in Application Details in SAM - the Processes and Services resource contains a lot of wrapping text to accommodate all of the extra spacing (including with widened…

Cheers - we've implemented a similar SQL job as the workaround (90 days instead of 30). My initial post was to query in case I had missed something within Kiwi Syslog.

If you want the source of the syslog messages to be from your vlan1 192.168.1.2 address you can add the following line to your logging configuration on the 3750: logging source-interface vlan 1

Hi Jiri, Thanks for consulting with the devs - at least now I know it isn't possible. Steven

Interesting! I haven't come across this issue yet but good to know for if/when I do. Most of the time I come across typo's when going from text-entry to drop-down (i.e. Australia vs Austarlia, or NonProd vs Non-Prod vs Non Prod).

Correct I didn't have NPM initially. I thought it would be best to bring SAM and NCM up to date first before putting on NPM. We reinstalled the job engines and collector services, the module services, cleared out the jobs and collector files from ProgramData and replaced with the blank files, and reran the Config Wizard. I…

This happens in the new versions. Well, at least the last couple of versions and I'm not sure when they added it as I remember it didn't originally (i.e. if you copied Node Details - Summary, it would only copy that 1 tab/view. Now if you copy Node Details - Summary it copies all of the tabs/views). Copying AppInsight for…

Are you sending syslog/trap messages to Solarwinds? What are your polling intervals for statistics?

Good luck. The agents here seem to have settled themselves after a while but it's definitely been a headache. Keeping an eye on it and will raise a support case to send logs through if they go haywire again.

Good to know for if anyone runs across the same issue - thanks for the update!

Correct. By setting the interface to display as unplugged it shouldn't trigger the down interface alert (assuming the trigger is "Interface status is equal to Down" and not "Interface status is not equal to Up"). On the web console, the down interface on the switch will show as unplugged. Depending on the reset condition…

I've experienced this issue before. A UnDP works on a node on the main poller but not nodes on the additional poller, or if you move the node from the main poller to the additional poller then the UnDP stops working. We were able to resolve it with Step 5 in the following KB article: SolarWinds Knowledge Base :: A…

Thanks aLTeReGo​, jeff.stewart​ and everyone else at SolarWinds working on this. Looking forward to the result.

Yeah, it let me book the last session of the day as well (everything else was greyed out). The 11:30pm local time session which puts it at 8:30am Central. Realised if I set the time zone to US Central I could see more time slots. I changed from 11:30pm to the 7:00am session.

Thanks Jiri. This will be useful for the cases where we want to allow read only NCM access but not provide access to the configurations. Unfortunately however, it doesn't seem possible to deny access to certain devices.

Basically, everything zackm wrote! And I've emailed you some screenshots. * It is painfully slow to use! * Should have capability to enable interface bandwidth/speed by assigning an interface to a connection (rather than relying on network topology and Connect Now - if SolarWinds doesn't know the topology, you don't get…