stuartd · Senior Dogsbody · ✭✭✭✭✭

You should be able to pull a timestamp field from orion.nodes. At the end of the "SELECT n.displayname, p.CurrentValue" line, try adding: ,n.LastSync or ,n.LastSystemUpTimePollUtc

It's not my skillset but if you have a query that works then export that to a spreadsheet and then wrap a delete script in a powershell script to recursively go through the s/s using the API is generally the best approach. You could of course, fire up DB Manager, set the query window to read/write and then execute your…

OOI Chad, does unplugged count towards your license elements total?

I'm on the fence with regards to having every interface 'visible' ** Our documented approach is that we only monitor links to other networking kit. So switch to Switch/FW/Router/LB/etc of FW or even one of our servers. That way we know if something goes down then either it is a fault, or an ABC. ABC = Another Bad Change -…

We don't have a 9800 but we do have several other Cisco WLCs virtual and physical but the principle should be 1the same. The node (WLC in this case) needs to be added via SNMP. Once added, you may want to double check on the 'node details' page that it is recognised as a WLC.... If not, click 'Edit Node' and then scroll…

To get data from a UnDP to populate is a multiple step dance. * You create the UnDP (and test) * You assign the UnDP Poller to relevant nodes (this can be done in the UnDP tool or from manage nodes) * As a part of creating the UnDP you need to indicate where you want the data presented. If you don't do his, then it will be…

So... * You are running the buddy drop * You've followed ALL the advice HERE. * You've confirmed the template being used has the two lines of code in them * AND you've ensured that the Fortinet is configured for at least one of the ciphers? Then that does sound odd. Because it is precisely the scenario we had and following…

Having just checked we are also seeing this. Have you opened a ticket with support?

If you go to the 'Jobs' section in the GUI, do you see this type of thing: ?? If yes, then your first error is a confirmed bug which I'm told is scheduled to be fixed in 2024.4. The internal Solarwinds Bug References are: OO-34652 and OO-36267.

Hey... I posted the answer to this in this very forum. Check this out: SSH - Connection Refused Cipher Updates - An F.Y.I.

So, whilst the direct answer is no, I'm intrigued that you say you don't have Network Atlas (NA) as that comes bundled with NPM. You can find the installer in c:\program files(x86)\solarwinds\orion (this is the default path but it could be 'program files' or another drive and depends on your install) as NetworkAtlas.exe or…

Orion (now known as Intelligent) Maps are very poor in their import options and don't have any export options. You can only import from a Network Atlas map. So, unfortunately the answer is no you can't import an NTM map into a Solarwinds one.

I don't know about the Op's reasons, but my organisation love to have everything documented and/or put into a process. So being able to export ones alerts into a readable flow charty type of document is a real boon. Secondly, when bidding for new business, having a clear "this is what we can offer when monitoring your kit"…

I am not a coder, and 99% of mine are acquired and edited. Try having a look through the 'content exchange' and see if anything is there that you can adapt. This one: Active alerts with acknowledge notes might be a place to start. 

I'd love to see a master list of where 'which' log file type is. I don't have your answer but I, like you start with c:\porgramdata\solarwinds\logs >> then sub-dive according to need. That, or I open a ticket with support and ask them. Maybe that's a thing... open a ticket and ask them to provide a master list of log file…

I also want to add, that we have 1000's of groups and maps and sadly the import tool (introduced, IIRC, in 2024.2.1 or .0) does not work. I expect it to be a WIP as it is the first release but for us but it simply doesn't work. The first issue I spotted is that the node names appear 'under the node' and appear to be…

If I understand you correctly you are saying that you display your Network Atlas maps based on the name of the group they are in. So if you have a group called ABC and you have a map called ABC then the widget displays it? This is because when you edit the widget it shows this: So then yes is the answer. You can also do…

I'd say a modern dashboard is perfect for this idea. Create a custom SWQL code block with whatever details your company requires and then use an MD to display nodes and interface alerts side by side, or one above the other. I think your biggest challenge will be in how to extract the data. A quick scroll through SWQL…

Ahh understood and yes I do follow. In which case you'll only ever get a "sense" of the latency, etc by monitoring specific links. If you have Netflow and the relevant nodes are configured to send that data to Solarwinds, then you could use that to extract the conversation(s). Other than that, then Adam's suggestion is a…

Above and beyond others that have already posted we also use (and I like): * Access - as in 'what protocol is used to access the node' * Accessibility - as in the where and what to access a node. This usually would say something like "CheckPoint GUI 80.10 from x.y.3.50" * Client / ClientSite / ClientPrefix - these 3 all…

Follow this: https://solarwindscore.my.site.com/SuccessCenter/s/article/Turn-on-and-use-Hubble?language=en_US and then you'll be able to see and extract the query yourself.

Unless I'm getting the wrong end of your question, then so long as you have the specific interface(s) that connect these two nodes together, then you can go to the specific interface summary pages for each and see traffic, etc... Alternatively you could set up a specific Perf Analysis project, add the distinct interfaces…

The newer GUI versions are, IMO, just plain horrible to work with. The fact that you can no longer select a Custom Property as a group (we heavily use CPs for client site names), just makes it even worse. Do what I do. Use the original. In the top right hand corner of the new Manage CPs page, click the three dots and then…

I don't have the answer you are after, but as a suggestion have you tried configuring a custom report using your SWQL, and have that sent on a daily [or whatever] schedule?

My first thoughts are: * why do you need to backup 5k nodes daily? On the presumption you are following some form of Core, Distribution, Access model, then a better approach would be to only backup the Core on a daily basis and the Access weekly or even less frequently. I'll wager the config on a lot of the nodes never…

So we do a similar thing for interfaces. We call it an interface flap alert and we want to know if an interface has triggered more than x times in the last y minutes. This is a custom SWQL alert and for your scenario all you need to do is adjust from interfaces to nodes. There are two parts. There's the hard coded part…

Thank you Marc - as per my response to Chad I will have a chat with our automation chap. The reason I mention alert is due to the trigger that alerts have for assigning/changing CP's and the fact that they have all the functionality in them for scheduling/triggering/etc.

Thank you Chad. I will need to get a hold of our automation chap to assist but this sounds like a way forward.

OK. In which case, the only way to do that with NPM is you need to monitor ALL the interfaces.

Understood that you don't have NCM, but you didn't clarify what you want to achieve? Is it a list of ALL interfaces, whether monitored or not? Or is it just a list of monitored interfaces? If the last one, then it would be useful to the community if you accept my first response as the answer.