stuartd · Senior Dogsbody · ✭✭✭✭✭

Thank you kindly.... I was able to work it out with your directions - as I said in the opener, these are a black art to me and there are just soooooo many options.

>> I guess I'm trying to say, don't knock Atlas maps yet, Orion maps still has a way to go to get up to speed!! Absolutely, no knocking of Atlas here, except for its shortcomings

@"KMSigma.SWI"and @"mrxinu" Thank you both. I realise I am almost certainly trying to run before I walk with this. If there is one thing I have discovered, is that I learn best is by having a working example (no matter how basic) that I've created (even if heavily copied) and can then walk back through to link to harder to…

mesverrum​ not sure I follow what you are asking. What we saw, was that last October 50+ reports we have configured to extract data for the hours 07:00 to 19:00 changed the time of the reports to be 06:00 to 18:00 and this co-incided with the clocks going back for BST. Just checking now and not sure if our server admin…

@"mrxinu"- I'm grateful to anybody that replies, no matter how slow, so thank you. My code is,very simple because nothing else was working I thought, let's pare it back to the basics. So in SWQL Studio, I run the following and get back a list of node names, no problems. SELECT Caption FROM Orion.Nodes Taking Kevin at his…

What are your settings on the trigger condition screen? Typically we set the following to 2m. As in, the node, interface, etc must be down for 2m before it triggers For WAPs we don't really care about we set that figure to 60m down before alerting. It seems to me that this is where you need to do your 22m setting.

Got it, but never would have without your assist @"Seashore" What I need is: >> WHERE Node_In_BAU = 0 (or 1 depending on need). Muchas gracias or as we Welsh would say - diolch.

I haven't tried it yet, but after yesterdays vSWUG event I believe I can utilise basic HTML coding for line breaks withincustom properties. So that is my next avenue of attack. If it works, I'll be back to post up a how I did it.

So, on that release the functionality you want doesn't exist. Most of it does exist in RC 2020.2 - not that I've yet tried it just had a few chats with the product manager for it and have a meeting with him later today to discuss the future. As it stands right now, Orion Maps still doesn't do all that we need from that…

And having made the necessary changes to the report this now works beautifully so will accept your answer as the solution. Many thanks.

For your second query - if you used the schedule option, then to extend simply re-select and rerun a schedule but extend the end time to a desired one. If you wise to end it early just re-manage.

As above, I have no issues with how to create the alert. We, in fact, already have one which is actively working and doing what is expected. The problem is how to add a new client to that alert (or a new one) without Solarwinds threatening to trigger on XXX number of objects.

Hi - thanks for replying but not sure I follow... but letme try. >> need to check the Network Atlas maps to verify if the connections exist The maps and connections were / are created in Network Atlas and the connections exist. By that, I mean, there is a physical line that connects the device and when 'hovered' over it…

Perhaps I misunderstand what you mean by object...? 

Thank you. I shall go play and see what happens

Happy to know I'm not alone - thanks.

Thank you - I am still very much learning SWQL/SQL and the 'Join' bits still throw me for a loop, though as I understand it they are calling data from a different table. But, yes, that appears to be a most excellent start for me. As a follow on (more for my benefit than anything), and as I read the code, it is pulling data…

That is brilliant. Thank you, or as we say here in Wales: diolch.

Bumping ... Looking at the end of my last post, I now ownder if in fact I should be using the 2nd option: "at least one child condition must be satisfied (OR)" My re-read is: Blue section says - raise an alert if a Pool goes down Unless (purple) it is Pool named X (OR) Pool named Y Anybody please have any thoughts?

Many thanks, and as I had hoped a quick answer. I am still very much learning S/WQL so nuances like this go right over my head.

Hi @"Martin_Crothers" and thanks for the reply. The powershell stuff is beyond me as I am not and have never been a scripter. However, I guess I could have been clearer in my original request. I must admit, I haven't tried copying data back out to see what happens so that is good to know. But what we need is to be able to…

Ahhh a fellow "jack of all trades, master of none". I too "dislike" certifications as I was never a taker of exams,with my only claim to fame being that I failed twice as many as I passed! Urk!!

Kevin, Thanks for the reply. I should have given more detail but have found in the past when I do that I don't get any replies so deliberately tried to keep my initial request short. I hear you about the traps, but in some cases we have no other option as a bunch of our virtual Fortigates have been deployed with a single…

Thanks @"coha" ... Whilst I know the nodes, the nodes have other pools that need to continue to alert should they go down. So I need to find some way to say just this pool from this node and then add a few more. I did click through on one of the pool alerts to see if maintenance mode or scheduling was available but they…

Thank you @"mjperkins" I will give this a go later (probably next week now) and see how I get on

>> Here you can set the action to be executed every 4 hours. Ah yes, I'd forgotten that you can do escalations further into the alert, and it's probably the best place to do so.

@"ramaiya2"personally I would not advise using that option. Why? Simply because it stops ALL alerts affected by that alert action rather than the more desirable "only stop alerts on specific nodes" - so my and @"silverbacksays" advice of going to manage nodes, etc is the much more appropriate method.

Hmmm, thanks Marc. I'm going to have to give this one some more thought - unfortunately I don't see rules / queries based on subnets working for us due to clients on different APE's having similar or same subnets.

Yes - I can see the results in the report, I'm just needing to identify what descriptor is in use to pull that out. But as fas as I can tell, I can't actually edit the word SERIAL to change (or see) what it is using. If that makes sense?

@"ralphpost"it looks like we mirror what you do except for the report. I'll need to double check every alert has the netperfmon event log aspect though. I'm pretty sure they do, but it doesn't hurt to double check - which make sunderstanding why I see 'multiple downs' for a device but not the intervening up that clearly…