stevenstadel · Monitoring Addict · ✭✭✭✭✭

Support confirmed this is not available on the product today. - Based on your inquiry is that you are looking to get a report for troubleshooting purposes that can show the Top 10 Netflow Sources and identify who is sending the most flows with NTA. Although you can probably pull up the number of flows received per polling…

Thank you for the reply; that is not what I am looking for. I added additional details to the original question.

Copy your existing alert and remove the trigger actions that are specific to your environment. Share that generic export.

The out-of-the-box monitor does not retrieve that information in a format you can include in variables for an alert. Other templates in the Template library on thwack can extract pieces of this information and use those fields in widgets, reports and alerts. For example - SSL Certificate Expiration - CI, CN, and Expiry…

There are a few ways to do SolarWinds and ServiceNow Integration. The SolarWinds out-of-the-box method uses the ServiceNow API integration.The SolarWinds administrator controls what alerts open and close in ServiceNow; it has two-way communication to reflect the status of the incidents created in ServiceNow back in…

This is an example widget to search by hardware serial number. Widget is Custom Query SELECT OrionNodes.Caption as Node, OrionNodes.DetailsUrl AS [_LinkFor_Node], NcmEntityPhysical.EntityName, OrionNodes.IP_Address, NcmEntityPhysical.EntityDescription, NcmEntityPhysical.Serial, OrionNodes.HardwareHealthInfos.ServiceTag,…

Importing/Exporting Modern Dashboards - Orion SDK - The Orion Platform - THWACK (solarwinds.com) - KMSigma's script and directions are here.

Excellent Post!

Looks like an issue with Perfstack. Since you have already cycled services with a server reboot, you may want to open a ticket with Support. 

Import IP addresses (solarwinds.com) - This documentation will show the procedure for importing the structure and subnets. I recommend setting an example structure in IPAM and then exporting to understand how your import should be formatted. I've attached an export for an example; the item you don't see here is the…

HI @"Solaiy", This example Custom SWQL alert will trigger if the LastSystemUptimePollUTC is not updated in the last 120 minutes. SELECT Nodes.Uri, Nodes.DisplayName FROM Orion.Nodes AS Nodes LEFT JOIN Orion.NodeSettings ns ON Nodes.NodeID = ns.NodeID AND SettingName like '%Credential%' LEFT JOIN Orion.Credential c ON…

This is a query that we use to identify Nodes that are monitored that are not in IPAM SELECT -- IPAM addresses Nodes.Caption , Nodes.Status , Nodes.IP , Nodes.ChildStatus FROM Orion.Nodes AS [Nodes] LEFT JOIN IPAM.IPNodeReport AS [IP] ON [Nodes].IP = [IP].IPAddress WHERE IP.IPStatus is Null AND Nodes.Status = 1

Here is the trigger condition for our alert if the agent is not responsive. The default alert may be enough for what you are looking for. Copy "Node not polled in last 10 minutes" and add in Agent.

Do you have any examples to share of how you get the credentials from the vault? We are starting to go down this path to increase volumes automatically when alerts are triggered.

Assign a SAM application monitor template to groups of nodes (solarwinds.com)

Put the two scripts together SELECT n.NodeID , n.Caption as [Node Name] , n.IP_Address as [IP Address] , n.StatusDescription , ToLocal(n.UnmanageFrom) as [Unmanage From] , ToLocal(n.UnmanageUntil) as [Unmanage Until] , ToLocal(AE.ObservationTimestamp) AS [UnManagedWhen] , AE.AccountID AS [Who] FROM Orion.Nodes n LEFT JOIN…

The lowest level we can configure alerts is at the component level. The ability to have 10 additional outputs per script component can allow for adding another context to the alert or another condition that would affect the main component. A good example is this Folder Monitoring script. This script grabs different…

The status of the multiple outputs will affect the parent component. You can set different thresholds for each output, but only the overall status of the component will be available for the alert. (IE is two of the outputs are critical then the component status is critical) You can include all the outputs in the alert…

 Where are you having issues? Here is another popular one with a few hundred downloads. The example template below runs on the remote host. Folder Statistics - Application Monitor Templates - Server & Application Monitor - THWACK (solarwinds.com)

Both Hybrid Cloud Observability Essentials and Advanced use node-based licensing. Essentials provide the following set of features: * Infrastructure, network, and application performance observability * Physical and virtual hosts, devices, and VoIP monitoring * Application-centric database monitoring * IP address…

Now we are looking at Powershell territory. There are a couple in the Shared Templates on Thwack that I've used for this scenario. These are well written and documented to follow along as examples as well. File Age Monitor (Wildcard) - Setup the alert to trigger if *filename*, if older than 61 minutes. That way, you can…

The default "File Existence Monitor" uses a specifically named file; no PowerShell is necessary.

Yes, we have this architecture working without issues.

Yes, this is possible, you control the firewall rules in Azure and can allow SNMP and open the ports for Agents, API polling etc.

Yes, the Server and Application Monitor Module will provide this functionality. You can copy and edit an existing port monitor template or download one of the many examples others have shared on Thwack.

Is there any way to uninstall the applied monthly patching updates to see if they are affecting the services?

It sounds like the device is sending syslogs to your NCM server. The device's syslog configuration needs to be changed to not send the syslogs to NCM. Can you include a screenshot of the error?

A couple of SAM templates will show you who is locked out; the great thing about SAM is that you can run scripts. I have yet to move this to a SAM-compatible script, but this PowerShell function will search the PDC emulator for locked-out records and spit out who, from where, and when. Great for troubleshooting. Run as a…

This KB outlines what you need for what. Orion Platform Product Features Affected by Internet Access (solarwinds.com)

WMI troubleshooting. Verify WMI connectivity for Orion Platform products (solarwinds.com)