shuth · SolarWinds Consultant · ✭✭✭✭✭

If you don't access SolarWinds with https://server then the site hasn't been configured for HTTPS. It is recommended to run the Configuration Wizard to enable HTTPS. The Configuration Wizard will take the system offline after you confirm the website changes. If you have any custom files in your inetpub\SolarWinds folder,…

Few other places to check: * Windows Event Log* Windows Logs - Application * Applications and Services Logs - SolarWinds.Net and SWI Logs Will usually see database connectivity issues in here. * Try looking inside the OrionWeb.log file to see why the resources might be failing to load.* Found in:…

Per @"mesverrum" , this is the most common problem I see with the multi-subnet HA implementations. The client browser is still looking at the cached DNS entry to server 1 even though SolarWinds has failed over to server 2 and updated DNS.…

NPM is only pulling out the interface statistics from the IF-MIB on the device. https://support.solarwinds.com/SuccessCenter/s/article/What-object-IDs-OIDs-does-NPM-poll-for-interface-information Run an SNMP walk against the device and look at the OIDs around 1.3.6.1.2.1.2.2.1. If the device is reporting the rate in MB/s…

Are they the AppInsight templates? If so, those are not standard templates and cannot be copied. Most of their components cannot be disabled. You might be able to copy them in the database and edit the copies but I would not recommend it (and potentially go so far as to say SolarWinds wouldn't support it if there are…

You should be able to update the SSL certificate in your site binding in IIS. Load the new certificate, open up IIS, find the SolarWinds NetPerfMon site, edit bindings, swap to the new certificate. If the binding is only showing HTTP, that's a different problem...

You can try to rebuild RabbitMQ manually from here: https://support.solarwinds.com/SuccessCenter/s/article/Full-RabbitMQ-Reset-in-Orion-Platform-products?language=en_US Edit: Run these commands in a Command Prompt with Admin (and also run the Config Wizard with Run as Administrator)

@"dpoole" are you able to post a screenshot of your query?

You can run a SWQL/SQL query to retrieve the application names but the alert only reads the first cell (first column, first row). You need to use something like the below (credit to @"Detroiter" - https://thwack.solarwinds.com/t5/Alert-Lab-Discussions/SQL-variable-definition-to-return-multiple-rows/m-p/193015 )…

I don't know if you can easily modify the event log structure without a lot of custom SWQL/SQL queries but you can embed the event log message itself into your email. There are a few steps: * Set up a Windows Event Log component monitor to look for that specific event. The out-of-the-box Windows Domain Controller Security…

A couple of other things to check: 1. Run an SNMP walk on the switch. Confirm if the OIDs show there is a PSU problem or not. SolarWinds will only record what the OIDs report so confirm the OIDs show that there is a problem with the PSU. The SolarWinds server has an snmpwalk.exe tool in your SolarWinds install folder…

You won't be able to search by hostname or IP for a node that has been deleted in the Message Center but there will be an audit event for the node IP address being deleted. You can either use the Message Center and filter by "Node deleted" audit events, or search the database with a SQL/SWQL query. For SQL, you can look in…

APM_ApplicationStatus is a SQL view that combines the data from the following tables: APM_ApplicationStatus_Detail APM_ApplicationStatus_Hourly APM_ApplicationStatus_Daily It is the output of the following SQL query: SELECT [ApplicationID], [TimeStamp], [Availability], [PercentAvailability], 1 AS [RecordCount], 0 AS…

You can edit the resource and in the filter field input the below: VolumeType LIKE 'Fixed%' I've seen some cases where the volume type is Fixed Disk and FixedDisk - this will catch both types. If you want to only show fixed disk volumes above a certain threshold: VolumeType LIKE 'Fixed%' AND VolumePercentUsed >= 80

The retention period is 7 days by default. I'm not sure where you can change this in the GUI but you might be able to edit the database value directly if needed. Syslog and Trap retention is configurable under Log and Event Settings - not sure why Windows and VMware Events aren't in there...

Are you able to share what type of report was in the custom HTML widget?

If you edit your account permissions (Settings > All Settings > Manage Accounts), turn on Browser Integration.

Currently the only way to filter the content of a trap message is a custom SWQL query. The following thread goes into details with some examples: https://thwack.solarwinds.com/t5/LA-Discussions/Editing-Alert-Message-using-SQL-Using-SUBSTRING/m-p/588778#M264

The polling interval field in the database is a smallint datatype that uses 2 bytes to store the value. The maximum value is 32,767 which is why system won't let you use a large number. smallint-2^15 (-32,768) to 2^15-1 (32,767)2 Bytes 32,767 seconds is ~9.1 hours. If you use 28,800 seconds it would poll every 8 hours…

In the smaller environment if you edit the group does it have a description configured? Just did a quick test, if there is no description configured the Group Details widget won't show the Description line at all.

This is not currently possible. I think this is the most relevant feature request: https://thwack.solarwinds.com/t5/NPM-Feature-Requests/Left-hand-navigation-shouldn-t-inherit-view-limitation/idi-p/555088 The current workaround is to use resources that have an EDIT button and a SQL/SWQL filter. Each resource is then…

Those reports are coming from the appliance. You can try admin / admin as the username / password. If you definitely don't want Alert Central, have your server team power off the VM appliance and delete it.

I've seen it happen for alerts where you edit the alert conditions and any alerts currently active never reset (even if they meet the reset the conditions). You have to clear it out manually.

If you monitor a process that has multiple instances (e.g. the UeDeltaApp.exe), as long as ONE of those instances is running then SolarWinds will show the component as running. If these processes use a different command line argument, you can filter by the command line for each process. For example, the…

You could script it in PowerShell and set a scheduled task to delete it via the API. I'd like to say that most of my clients, if they know a server is going to be deleted/decommissioned, would either: * Unmanage the node (manually or schedule) and leave a comment in a custom property (or even a Decommissioned status…

You can also look in the AlertHistory table in the database. This records when alerts are triggered and reset, and when the individual alert actions fired with timestamps. * EventType 0 = alert triggered * EventType 1 = alert reset (?) * EventType 6 = trigger alert action (Send email, log to file, etc) I can't recall what…

One potential way of doing it is with the event log monitors and custom node status. I've done similar previously with triggering and resetting an alert but not setting the node status. * Configure your application monitor with the 2 event log monitors* Event log monitor A - connection lost - configure component to go…

If you have SAM and Node A is a Windows or Linux/UNIX node, you can deploy an agent on the node and use the HTTP/HTTPS component monitors in SAM. Configure the URL to connect to NodeB and the application monitor will run from the agent on node A, connecting via HTTP or HTTPS to node B.

You can use something like the following query. The IS NULL part will include any node that has an empty Company_Division value (or you can use IS NOT NULL) VolumePercentUsed >=90 AND VolumeType LIKE 'Fixed%' AND (Nodes.CustomProperties.Company_Division = 'Retail estate' OR Nodes.CustomProperties.Company_Division IS NULL)…

Currently the only way to do this is as you say - duplicate and delete the old dashboard. https://thwack.solarwinds.com/t5/The-Orion-Platform-Documents/Orion-Platform-2020-2-Modern-Dashboards/tac-p/595865/highlight/true#M196