smargh

Voted. This annoys me every day.

There isn't one - SolarWinds doesn't handle Windows traps as easily/efficiently as it could. You can use things like eventVar1, eventVar2 etc in the Conditions tab, but in the Alert Actions section you can only refer to them as ${vbData1} etc. SolarWinds does desperately need to improve on the ability to configure trap…

OK, I'm really liking this solution. I still don't see how to create a trap rule. Is that in the advanced alert manager? When I click new in the custom advanced alert manager I don't see the options for a trap rule in the trigger condition tab. Where is that at? Thanks so much for this post. This is awesome. No - Open up…

Trap Viewer -> View -> Alerts/Filter Rules Yes, domain controllers do AD replication, but they don't all log every single AD event to every Windows event log. An account lockout event is only logged on the DC which is receiving the bad authentication requests.

Did you figure this one out at all? I've got NPM 10.0 SP1 (no modules) - for several months I've noticed a specific set of nodes regularly going into a "warning" state, apparently because of high ping times, but the pings to all the servers are perfect - I've had a repeating ping going for a day and the max response time…

Either are you renaming the volume yourself, or is the volume ID changing? i.e. perhaps it's an iscsi volume etc? Try renaming a volume & see if Orion continues monitoring it. See my other posts for rants on that particular issue. Alternatively, look directly at the info returned by SNMP over time to see if the volume…

D'oh.... sorry sorry. Ignore my post.

It's still on the list and we'll continue to consider it, but we'll need more requests to help prioritize above other items. +1 for custom column titles & the ability to specificy the arrangement of columns. Though, perhaps I'd like to be able to alert on custom poller transforms before this - I've read a few threads…

Refs 168542 and 175714. Apologies for the thread hijack. If NPM were modified to use WMI for this specific aspect, then it would alleviate or eliminate these problems, perhaps also helping the original poster's problem of monitoring network volumes. It would, of course, involve potentially significant structural changes of…

If there are others interested in this specific enhancement, please chime in as well. It's not a question of who is interested, but who isn't - I would love to be able to get SNMP traps from my Windows HP servers which would indicate a RAID array status change, but as another poster said earlier: the drive status codes are…

Are you running Orion on a virtual machine? I've seen this kind of thing if I pause & later resume when it's running on a VM.

It would be easy enough to add Disallow: /search/ to the pre-existing robots.txt file This is something that I'm also extremely frustrated by. I realise that SolarWinds has a fairly noticeable SEO programme, but it's always incredibly annoying to trawl through /search/ when I'm trying to find pages that actually contain…

Same issue as well with my brand new install of NCM 10.1.1 sp1 on a freshly built Win 2008 r2 box with the database hosted on a different server getting the same error it looks. I have not opened a ticket yet was waiting to see if there was a fix here first. My problem with the trap service crashing was resolved by making…

It's installed when the SNMP feature is added to Windows. So, it's located at start->Run.

Is "HP Insight Management Agents", from the HP site, installed? That's necessary to get HP-specific polling working.

This is from a Support reponse to my existing ticket: Set AutoClearAlertIntervalInMinutes parameter to bigger value, unfortunately the maximum value is 28800 minutes and it's only 20 days. After that the same situation will happen again. AutoClearAlertIntervalInMinutes parameter could be add to Alerting Engine following…

that solution would probably fire also if the server would not be reachable via snmp anymore for a bit, right? You're correct - I've had this alert trigger when SNMP stops responding, which can be a sign of a much bigger problem - for example, if a dodgy GPO has been rolled out which enables the firewall on every computer,…

You can't delete it from the "list resources" screen - that just shows the stuff it found at that exact point in time. "Manage Nodes", then expand the list of stuff for that server, tick the old drive (check you select the correct one!), delete it.

[blah blah server 2008 wmi bug blah blah] Posted irrelevent information - post edited.

What's using all the memory? IIS? One of the Orion services? How many elements is Orion monitoring?

They said it would be fixed in "the release after next", and I think the just-released 10.1.2 was the next. So, hopefully it should be fixed in the next minor release. They provided a workaround, but it doesn't seem to work properly - alerts are still re-triggered regularly, definitely earlier than the 20 days suggested.…

I'm afraid I only do the monitoring - I don't have access to the Brightmail filesystem or admin interface.

I can imagine it being quite difficult for Solarwinds to code a relationship between a triggered alert and the associated value for that specific record for that specific node or poller record. It's also very difficult to work around, as custom SQL in the emailed alert isn't officially supported by SW and is difficult to…

I think it only triggers on the first match. I have the same problem with alerting when any VPN policy in a UNDP table becomes active - it only alerts on the first match. Switching to a get-next UNDP means that should be alerted when a VPN policy becomes active, but it doesn't indicate which policy is active, and custom…

We use two background MSSQL Agent jobs to monitor the poller and the universal device pollers, because the universal poller [job scheduler?] has broken in the past while the KeepAlive value was updating normally. See msdn.microsoft.com/.../ms190307.aspx &…

Rule out Orion as the problem by testing SNMP connectivity from the Orion server to the servers being monitored. http://www.elifulkerson.com/articles/net-snmp-windows-binary-unofficial.php This command will retrieve the system uptime: snmpget.exe -v 2c -c CommunityStringHere ip.address.here 1.3.6.1.2.1.1.3.0 If the target…

The best possible option to look into would be using a Universal Device Poller with the Host Resource MIB; however, I am not sure how well this would work with indexing and across multiple systems where the OID would be different on different systems for the same process. Ultimately APM is going to be your best bet but I…

Not today, we have an open enhancement request in for this. You can put an href in a custom property and it looks like a link on the website, but it gets munged up in serving it. I was sure there must be a way of working around the munging, so I spent 30 minutes trying to figure out a way. Put a space between the "quote"…

Good idea. For our sites with bonded connections we just monitor the interface status, which is normally sufficient, but this would not detect the lack of traffic on a primary/backup link (i.e. remote site->internet routing issues would not trigger alerts) - it would only find that a given interface is not up. I suppose…

However you could monitor that smtp server for either mailflow, open ports, up/down, etc. and create an alert which will use a different smtp server, that way you will at least know that orion can currently not send any alerts through that smtp server As an added suggestion to that: On our Orion server I have the mail…