stevenstadel · Monitoring Addict · ✭✭✭✭✭

Comments

  • Here is an example to add the Custom Property 'Customer' to the SWQL report. SELECT DISTINCT [EntityUri], [SuppressFrom] AS [UtcSuppressFrom], [SuppressUntil] AS [UtcSuppressUntil], ToLocal([SuppressFrom]) AS [LocalSuppressFrom], ToLocal([SuppressUntil]) AS [LocalSuppressUntil], CASE WHEN [EntityUri] LIKE…
  • I use the Query widget and a SWQL query to show this type of info with hyperlinks. I recommend using SWQL so that if anything changes in the schema after an upgrade, you will be protected, and your query will still work. You are also able to use the built-in relationships and cut down on joins. When I build a SWQL query, I…
  • There are two steps: the first is to create an application monitor that will watch the services that you want to monitor, and the second is to create an alert that will trigger when a status change occurs for the application monitor. The documentation is excellent, and these links will get you started. Create custom…
  • It all depends on what OID is being polled, which can change depending on the firmware running on the firewall. I suggest opening a case with Palo Alto to compare the results you are getting with an SNMPwalk vs what the vendor is showing. Once the vendor confirms the OID for your specific model and firmware you can change…
  • Try this App Template to pull the different CPU (Dataplane vs Management) - Palo Alto Metrics - Application Monitor Templates - Server & Application Monitor - THWACK (solarwinds.com) I personally prefer using SAM, if possible, for polling SNMP because I can get more advanced features like using Baseline Metrics. If you…
  • Awesome tip! Constantly learning. Thanks Adam
  • Yes, you should be good. Official recommendation The latency (RTT) between each SolarWinds Platform engine and the database server should be below 200 ms. Degradation may begin around 100 ms, depending on your utilization and the size of your deployment
  • Added the Node's IP and a method to query only for the last month. How do you identify the nodes you want specifically report on? One way would be to use a Custom Property. I've added a comment in the where clause on how you can filter nodes on that. (-- AND n.CustomProperties.Environment LIKE 'Production' -- Filter on…
  • This is a SWQL query that I use in a custom table widget. You can play with it and use it in a report as well. Not mine but I don't recall exactly who created it. It uses the down event to calculate how long an node was down. select n.caption as [Device] -- shows the current status icon , '/Orion/images/StatusIcons/Small-'…
  • Here are a few methods you can try: * Using -ErrorAction Stop: This is a common way to handle errors in PowerShell. You can use this parameter with any cmdlet that supports common parameters. If a cmdlet encounters an error, this parameter will force the cmdlet to stop executing and return an error. *…
  • If it was working in the past I would first restart the agent on the DMZ server. If still not responding from the polling engine make sure the poller can reach the DMZ server. Test with PowerShell to verify that the port is responding. (Test-NetConnection -computername IPADDESSOFDMZServer -port 17790) If that is not…
  • It may help to start with the free online training under the SolarWinds Academy - Training and Certification above. Every deployment has different requirements on what you want observed. The on-demand training can give you specific ideas on where you want to start.
  • Encryption is handled by a third party tool that SolarWinds uses for the connection. As of HCO version 2023.4.2 it is using WeOnlyDo SSH 2.8.4.205 - Release May 9, 2022. That third party company has released an updated version WeOnlyDo SSH 2.9.1 - Release July 6, 2023 that supports…
  • I've seen this on 8200 Cisco Routers once we upgrade to IOS 17.6. The issue is from the device and have opened a ticket with Cisco. Our workaround is to disable the Power Supply Module 0 from the Hardware components since the device is providing the incorrect status for that OID, and there is a correctly reporting OID for…
  • I was having the same issue, in the 2023.2.4 build you cannot restrict the Menu bar in the usual way in the User settings. Support confirmed that. I was able to find a way to remove it. To get rid of the menu option completely, you can remove the bar by removing all the buttons on the menu bar. Click Admin - CUSTOMIZE…
  • WMI uses ephemeral ports, 49152-65535. We use a rule allowing TCP 22,135,445,5985,5986,17778,17790,49152-65535 and ICMP. It all depends on what you are monitoring. If you want to further limit your port exposure, you can look as using an agent over a single port.
  • I'm glad that resource will be helpful. The wiki documentation is the only source I am aware of that gets updated for the SDK. I can only speculate as to why each entity have different options. The product as it stands today has been developed as individual modules over the years, by different teams, with different…
  • It chould change depending on the version you are using. The wiki should provide what you are looking for. Home · solarwinds/OrionSDK Wiki · GitHub (https://github.com/solarwinds/OrionSDK/wiki) Snip of CRUD operations for IPAM.Subnet for 2022.2
  • Do you have screenshots or a description of the error? Looking at the logs in Step 3 here may help point out where the issue is - Orion Platform Troubleshooting Guide - Website Performance (solarwinds.com). Escalate the case with support by calling in and speaking to support may help if this is a critical issue.
  • Yes, out of the box there is "SSL Certificate Expiration Date" template, there are also others you can get from Thwack. Search for certificate on the Shared Templates on Thwack Tab in Settings / All Settings / SAM Settings / Manage templates tab. YOURORIONSERVER/.../Default.aspx
  • I use custom properties to do this. For example, we have a custom property set on the node that identifies a Physical Location. When I want mute all the nodes that are in a specific physical location, I use the Manage Nodes screen to select them all and schedule/mute.
  • Yes, using the SolarWinds Unmanage Scheduling Utility.Configure Orion to unmanage items on a scheduled basis (solarwinds.com) If this is more of a one-off activity, you can Schedule Applications muting/unmanaging just like scheduling Maintenance on the Node Details Page. You just do it on the Application Details page.
  • I am seeing the same behavior, only the current (last) poll for Message information is available now in a different table. We were using the SAM Log Parser extensively and then running reports for the historical information, which is no longer available. 
  • You can send out an SMS text message to a phone number natively by just using the gateway of the telecom provider. - Set up Orion SMS or email alerts (solarwinds.com) for more details. For example, we send out key alerts to a phone on T-Mobile by using the email alert and sending it out to 10DigitPhoneNumber@tmomail.net.…
  • Making the onboarding more seamless would be helpful, we are getting messages that all the data in SWO will be deleted since the trial license is expired. Having a login with visibility into what is being ingested into the cloud for AI Ops would also make our security folks happy. 
  • DNS User Experience Template uses the default port of 53. Documentation is here - DNS User Experience Monitor (solarwinds.com)
  • What happens after the 30-day trial of SWO expires, but you have HCO Advanced? You are no longer able to login to the Cloud Account and it will report that your organization is suspended because the trial expires. What happens to the Anomaly-based alerting?
  • There is a template called DNS User Experience in SAM that may suit this use case.I have also uploaded an example powershell script that can do a reverse lookup that may give you ideas. DNS Resolution Test - Application Monitor Templates - Server & Application Monitor - THWACK (solarwinds.com)
  • Duplicate post - SAM - Autodiscovery of filesystem - Forum - Server & Application Monitor (SAM) - THWACK (solarwinds.com)
  • Setup a new Network Discovery, schedule it to run at a set frequency, and set it up to automatically add in new volumes by selecting Automatically monitor based on my defined monitoring settings. This method will automatically add new file systems on the next discovery.