stevenstadel · Monitoring Addict · ✭✭✭✭✭

Different Alerts are the way we have dealt with this situation, we have found that these four fit most of our needs. Disks Threshold - Less than 3 Days Forecasted Remaining Capacity - Captures unexpected increases in disk usage Large Disks less than 50 GB Remaining - Triggered when less than 50 GB remain on volumes over 1…

You will need to add a Custom Property for it to appear in that specific drop-down list, that may not be the best approach. There are other ways to accomplish what you are looking for. For example, you can create a Group and automatically apply the AD Lockout Monitor to it. This is the official documentation to accomplish…

SEM 2021.1 system requirements (solarwinds.com) Looks like 1000 nodes and up to 216 million daily events (2,500 Events per second)

New Azure templates were released on March 24th, 2022. Available in the Content Exchange. Application Monitor Templates - Server & Application Monitor - THWACK - SolarWinds Community

Try something like this SELECT TOP 10 n.FullName, round((n.Outbps / 1000000),2) as OutMbps FROM Orion.NPM.Interfaces n ORDER BY n.Outbps DESC WHERE (n.FullName LIKE '%Interface Monitoring%') -------------- SELECT TOP 10 n.FullName, round((n.Inbps / 1000000),2) as InMbps FROM Orion.NPM.Interfaces n ORDER BY n.Inbps DESC…

The method I use is to copy and edit a out-of-the-box alert and find search for what I am looking for. For example to find the node caption. Copy and edit an alert that is looking at the area you want to find the variables for. In this case Wireless Access Point. Edit the email alert and use the Insert Variable to find the…

That document lists the minimum versions for that upgrade, so yes to your question. * NPM 12.0 * NCM 7.5

Upgrade older versions of Orion Platform products (solarwinds.com)

Can you show the query you are using for us to help troubleshoot?

Here are some screenshots as an example

You can include the Variables in that Message displayed section. For example you can use ${N=Alerting;M=Severity} - The ${SensorDisplayName} on ${N=SwisEntity;M=HardwareInfo.Node.Caption} is ${SensorOrionStatus}. View Alert: ${N=Alerting;M=AlertDetailsUrl} Pro Tip - If you also want to include that exact same message in…

With Added IPAM Custom Properities SELECT -- Node Details '' AS [ ] , CONCAT ( [Nodes].NodeID , ' ' , 1 ) AS [_LinkFor_ ] , 'Node' AS [Element Type] , [Nodes].Caption AS Element , [Nodes].DetailsUrl AS [_LinkFor_Element] , [Status].StatusName AS Status , CONCAT ( '/Orion/images/StatusIcons/Small-' , [Nodes].StatusIcon ) AS…

The field is in Orion.VIM.VirtualMachineIPAddresses. Here is a SWQL query I use to get Cloud resources that are not managed yet that show one way to link them.SELECT ci.Provider, ci.DisplayName, ci.State, ci.Region, ci.LastSuccessfulPoll, ci.Name, ci.Platform, ci.OrionIdColumn,PublicDNSName, ci.PrivateDNSName,…

Here is an example for listing the nodes that are between 99 and 99.9%. The second example from above. You just need to remove the Count section. SELECT [Nodes].Caption , AVG([Nodes].ResponseTimeHistory.Availability) AS [Availability] FROM Orion.Nodes AS [Nodes] WHERE [Nodes].VendorInfo.Name = 'Windows' -- Put whatever…

This KB article may also apply here. PerfStack real-time polling for interface utilization shows incorrect values and spikes in Orion Platform (solarwinds.com) What may be happening is that the real-time polled data is not synchronized with how often the Palo Alto is updating their OID statistic. You may need to update the…

I suggest using the free temporary trial HA license to move the primary engine, this will maintain all monitoring and update all the relevant tables, and give you a clean new primary server with your new IP. This also gives you a failback if you run into any issues that have nodes hardcoded to the old IP for syslog, or an…

Here is a SWQL query that may help, using different vendors since I have no Fortigate SELECT n.Vendor, COUNT (CASE n.Status WHEN '1' THEN 1 else NULL end) AS UP, COUNT (CASE n.Status WHEN '2' THEN 1 else NULL end) AS DOWN, COUNT (CASE n.Status WHEN '3' THEN 1 else NULL end) AS WARNING, COUNT (CASE n.Status WHEN '9' THEN 1…

I imported and edited the dashboard to get the SWQL. From the great KMSigma Importing/Exporting Modern Dashboards - Orion SDK - The Orion Platform - THWACK - SolarWinds Community ) SELECT COUNT(*) AS [100% Available] FROM ( SELECT [Nodes].Caption , AVG([Nodes].ResponseTimeHistory.Availability) AS [Availability] FROM…

Can we see the query/report structure? The issue is most likely in the conditions. Is there any commonality in the nodes that are missing, (misspelled custom properties (or an accidental space) are a few things that have caught me in the past.

Scalability Engine Guidelines for SolarWinds products Under "Orion Agents"

You can use this query as an SWQL report or as a Query Widget. It is excellent as a widget as it includes hyperlinks. Credit to the original creator for adding all the comments! select n.caption as [Device] -- shows the current status icon , '/Orion/images/StatusIcons/Small-' + n.StatusIcon AS [_IconFor_Device] -- makes a…

Add the filter to the WHERE clause

Is this for pulling info from a SAM component? SELECT TOP 1000 C.Component.Application.Node.Caption , C.Component.Application.Node.Vendor , C.Component.Application.Node.VendorIcon , C.Component.Application.Node.DetailsUrl , C.ComponentName , C.ComponentAvailability , C.StatisticData As DaysRemaining , C.ComponentMessage ,…

Yes, you can add this as an SWQL query in the Web Report Creator.

Here are some examples - Custom SWQL queries to report on NCM Physical Entities - Forum - Network Configuration Manager (NCM) - THWACK (solarwinds.com) I also have used this one found on Thwack, and can't remember who to credit. SELECT NCM_EP.Node.NodeCaption , NCM_EP.Node.AgentIP , Case When NCM_EP.Manufacturer like ''…

We are using Bicep template to deploy the VMs in Azure. After the VM is deployed, NICs are setup, and it joins to the domain we use a private blob storage account to copy the agent over and then execute a PowerShell script for the deploy.

We use Orion Agents in the cloud with auto-deployment, the agent is part of the template, and automatically registers and updates (if out of date). It is a great solution that uses limited ports and encryption. One issue we see every so often is a single node requiring a service restart. Easy enough to alert on and restart…

The Server Clock Drift PowerShell template uses an if-then technique to make sure the result is positive. The clock_drift is less than 0 then multiply it by -1 to turn it positive. Adding something similar to your Linux script may work. ----$clock_drift=$server_time-$local_time; if ($clock_drift -lt 0) {…

Give this a try. Commented with --PUT YOUR CUSTOM PROPERTY HERE SELECT N.Caption AS [Node], ToString(N.UnManageFrom) AS [Suppressed From], CASE WHEN ToString(N.UnManageUntil)='Jan 1 9999 12:00AM' THEN ' - Forever - ' ELSE ToString(N.UnManageUntil) END AS [Suppressed TO], CONCAT('/NetPerfMon/Images/Vendors/',N.Icon) AS…

Add the Where clause right after WHERE n.Status = 9 AND N.CustomProperties.CUSTOMPROPERTYNAME = 'PROPERTYVALUE'This example uses the Node custom property Enviroment = Production SELECT 'Unmanaged' as [Status] ,n.Caption AS [Node] ,tostring(tolocal(n.UnManageFrom)) AS [From] ,case when n.UnManageUntil is null or…