sturdyerde · IT Solutions Team Lead / Microsoft PowerShell MVP · ✭✭✭✭✭

If you cannot use the agent for any reason on your domain controller, you can start with this article: How to create a non-administrator user for SAM polling

Maybe somebody else's order got shipped to you accidentally?

So first question, and I'm not trying to be a jerk Do you already have a PowerShell script that can check the security event logs for the service account logins that you're interested in? Are you familiar with how to pull event logs using PowerShell?

A classic DISA STIG move. "Make sure you have [a] value in this setting." (Thanks, DISA!) Take a look at this document from Microsoft: Tuning IIS 10.0 | Microsoft Docs. If you have nothing set for these, start with the defaults that are listed in the document. You may choose to "tweak" settings from there. If you already…

You may want to try reaching out to Solarwinds Support with the details of this problem. Good luck! Submit a Ticket | SolarWinds Customer Portal

I'm using custom properties in both ways, with a PrimaryContact and a SecondaryContact CP for every node and for every application. To use these values in alert actions, the variable syntax looks like this: ${N=SwisEntity;M=CustomProperties.PrimaryContact} ${N=SwisEntity;M=CustomProperties.PrimaryContact}

It all looks good. Try dropping $stat1 outside your write-host string. Also, have you done any debugging to confirm that the stat variable is always either a 0 or a 1? jpaluch wrote: Write-Host "Statistic.Name1: $stat1"; Write-Host "Message.Name1: Monitoring result: $mon_result" Changed to: Write-Host "Statistic.Name1:…

Licensing is done differently for APE and High Availability. You may also need to contact Solarwinds to sort those out before it will let you configure an HA PE.

You can see your out of the box alerts in Orion's web GUI on your 'Manage Alerts' page. (https://OrionServerURL/Orion/Alerts/Default.aspx​) Look for alerts that say "Out-of-the-box" in the Type column. You can also find all out of the box alerts by running the following in Orion's SWIS Query page…

I've never received an email or notification (in Orion web console) about hotfixes. I'm just curious about how I can be notified when they're available!

Many of these health checks have good explanations if you click on them, and some include remediation information. The "ping all plugins on agents" and "ping all registered agents" alerts usually indicate that one or more of your agent-managed nodes are having an issue. The agents may need to be restarted, have a pending…

This limitation of script monitoring templates has been very frustrating for me, too. This component will only accept a number as valid statistic output. I'm not aware of a way to poll for multivalue results, but one option that you do have is to: 1. Check for a true/false comparison (is it the right version or not) and…

You could use the SDK to script the removal of the node, which would require: * Credentials to manage nodes * Find the local host name, then use the API to search for the Orion node with matching caption * Unmanage or delete the node from Orion Not sure how much time this is saving you... You would also want to excepte the…

Thanks for sharing all of your experiences. I hope to share ours soon. When you post, please let us know which version[s] you are upgrading from, along with whether or not .NET Framework 4.8 was installed before your upgrade. Thanks!

This may be a page load performance problem and not an intentional effect. I have seen the transition take more or less time on occasion, depending on what is impacting SQL server load (usually).

This seems like it may work as a starting point for me: the query below shows all component monitors that have custom thresholds set and that have the string "SQL" anywhere in their name. In my case, these are the specific component statistics that I am mostly concerned about removing the template override for. SELECT…

Did you ever get this to work, KMSigma​?

Just finding this, so I'll gladly provide a monthly bump for such a great resource.

This has been noted in several places. I do hope that Solarwinds engineers and product managers take note that this behavior is not OK.

Have you ruled out the possibility of network firewalls or Windows firewall getting in the way? There are two PowerShell commandlets that may help with this troubleshooting step: Test-NetConnection -ComputerName <String> -CommonTCPPort WINRM Test-WSMan -ComputerName <String> Depending on your security configuration, you…

With SNMP configured on MobileIron, they can be discovered as a Linux node. I'd like to see a custom poller or something created specifically for MobileIron MIBs.

AppInsight for ActiveDirectory should default to authenticating over port 636 with TLS/SSL, please.

Over the course of many moons, acquisitions, and regulatory compliance efforts, our environment has grown from two forests (internal and DMZ) to six. It is now in the process of being consolidated back down to two* forests. *Just in time for us to begin evaluating Microsoft's relatively new references for a "Enhanced…

Yes. Very yes. My primary reason (but not only) for saying so is that most customization that you make to the OOB alert configurations are lost every time you upgrade Orion. For example, if you put useful information (please do) in the alert message field, most upgrades will reset this to the default, and you'll have to…

If you look at Ansible really as just being an automation engine, the question is more about which language you're comfortable with, right? Using the SWIS API, you could automate this task using PowerShell, Python, etc and then drop that script into Ansible.

The default installation location is C:\Program Files (x86)\SolarWinds\Orion.

I just created a web site monitor template that uses PowerShell and Invoke-WebRequest to check web sites' status. It was created specifically because I had some sites that resulted in a 401 response, and it is configured to see those as healthy. If you use this template, you shouldn't need to make anything persistent, BUT…

Guys! Thank you, gperkins​ and mesverrum​ for that tip. (Smacking myself for not trying that already.)

Partially answered this, with regards to using global catalog port 3269: apparently global catalog queries do not return the exact same set of data that LDAP queries over 636 does. When testing 3269 w/SSL in my environment, authentication succeeded, but the application quickly alerted as down because it lacked information…

* Edit the alert configuration. * Advance to the 'Time of Day' page in the alert configuration wizard. * Choose 'Specify time of day schedule for this alert (Figure 1) * Enter a name for your schedule, select 'Disable alert during the following time period', and then select which days/times you want the alert suppressed.…