sum_giais

Here's an example with @"christopher.t.jones123"'s query. May need to adjust depending... SELECT I.Caption as [Interface Name] , I.Node.Caption as [Node Name] , tolocal(I.LastChange) as [Last Change Time] ,I.Node.ObjectSubType AS PollingMethod ,I.Node.Status ,I.Node.ChildStatus ,I.Node.DetailsUrl ,I.Node.IPAddress…

Hello there @"leonejames1". Here's how you could do that with a SWQL query datasource. This could be done natively with the report builder but for me, it's quicker to do it with SWQL directly. Steps to create the report: - Create new Report - Add Content - Then add custom table resource - Change Selection method to…

Nice query @"christopher.t.jones123"!

That's interesting. Are you on the latest versions? Maybe it does work and it's all in my head Anywho. There's definitely a PowerShell solution to this also which could take it out of your DBA's hands. Here's a rough example (untested FYI). Update the $serverName variable, your custom property that contains email addresses…

Whats the polling frequency of the SAM application applied to the engine? If it's 300s, I'd set that alert to must exist for 6 minutes so to allow for 2 polls to occure before alert trigger.

Yes but are spaces and semicolons valid for email addresses? I don't think so. The only delimiter (when adding multiple email addresses) that SolarWinds accepts is a comma I believe. I don't think there's an easy way to get this into SWQL. I myself would LOVE if modern dadhboards allowed for SQL datasources. Anyway there…

Also may be good to include your networking team to see if there's any related events occuring and/or at least rule out the basic (if not done already). Ping response time etc... basic network triage Maybe even setup a TCP Port check on 17778 for their assigned polling engine?

Have you opened a support case on this? Pick maybe a small handful of servers assigned to each polling engine and set there agent logging level to debug. This may be difficult if its a sporadic issue and not always the same agents. Wait until the issue occurs on them and then take diagnostics on one or two agents and all…

Woah. 10,000 servers. So I have a few questions... * How is your SolarWinds Environment structured? * Do you have any additional polling engines? If so how many? * Of those 10k servers how are they distributed amongst your polling engines? * Are you primarily using active or passive agent communication? I ask because the…

Well said. Management should not be the exceptions to security. I wouldn't recommend using DirectLinks either, not very good practice for security.. my 2 cents anyway.

Here's how I addressed this... not a common issue for us but it was enough of a nuisance that it needed an alert. Not good when you never get an alert all because some strange ASCII is in the custom property values. Generally to help prevent this from even happening I recommend anyone filling in custom properties NOT…

There may be a SWQL solution to this FYI (not sure if the SWQL entity permits updates). Will take a look... However I have done this directly in SQL before with this: https://thwack.solarwinds.com/content-exchange/the-orion-platform/m/custom-queries/3024 The query would need adjustments based on your goal but should give…

Could you create a heartbeat sql query monitor? Possible way to validate the database server is actually working. Copy the template you're using and create a new one with a custom query that will always stay the same, like: SELECT 'dummydata' AS Output; or SELECT 1; Doesn't matter what it returns just that it runs…

Howabout this? Removed subquery and aliased everything. ${SQL: SELECT m.FullName + ' (' + s.StatusName + ')' + ', ' AS Output1 FROM ContainerMemberSnapshots AS m INNER JOIN StatusInfo AS s ON m.Status = s.StatusId WHERE m.Status != 0 AND m.Status != 1 AND m.Status != 9 AND m.Status != 27 AND m.ContainerID =…

I've seen that strange error before with the sql macros... and cannot recall what I did to resolve it, if it comes to me I'll reply here!

I apologize in advance for the wall of info here... lol EDIT: I see you have FOR XML PATH ('') at the end which I have not personally used but I believe is a possible way to concatenate multiple rows into a single field? So you may want to take a look here to get an idea of how to structure a SQL query. SQL is tough on its…

So thinking about this more, you might be able just wrap the comparison fields in a ToLower() so you're forcing them to be the same. Something like this may work: WHERE ToLower(s.Polling.Node.Caption) LIKE ToLower('%${SEARCH_STRING}%') OR ToLower(s.Name) LIKE ToLower('%${SEARCH_STRING}%')

That's strange I didn't think the LIKE keyword was case sensitive... mind sharing the query? I'll see if I get the same behaviour and mess with it a bit.

So I couldn't help myself... I updated both of those custom queries to SWQL on thwack, accessible at the same links I provided above. Really didn't take too much to do it, but you could take either of those SWQL queries and build it into a modern dashboard, custom report datasource etc. etc. I didn't include the fancy…

Perfect glad to help!

I know you're looking for something that's not a SQL query but I'll just put these right here... I haven't looked at these for some time but they may be able to be converted to SWQL query at this point which if possible, could be added to a report or dashboard from there.…

Do either of these queries make a difference for you? The first query here, is yours just re-written essentially with minor syntax changes. SELECT DISTINCT i.InterfaceID AS [Nuddles] ,i.NodeID FROM Orion.NPM.Interfaces AS i WHERE ( i.Alias LIKE '%ISP%' AND ( i.Traffic.DateTime BETWEEN '2022-03-01' AND '2022-04-01' ) AND (…

Pretty sure modern dashboards are SWQL only. I upvoted the feature request for SQL data models in modern dashboards. If its not within the Orion database or more specifically the SWQL data structure you won't be able to get at the data within SWQL or modern dashboards. Think of this scenario - you have supplemental node,…

This gets my mind jogging as this would be cool. I wouldn't see this ever being supported though natively in the API to expose a custom script (I mean consider the security implications of that alone...) That said -- there could be some close solutions. One that comes to mind .. you can create Orion Events via the API.…

Hello there! The time should be based off your Orion server time.

DST is a funny thing. Saw earlier this year that my alert for "Orion engine not updating database in last 10 minutes" actually got snagged by this where the DST shift caused it to falsely trigger then reset (eek time jumped forward!). Have been curious what the SWQL for that alert looks like and if it could be fixed. There…

So I took a look at the Cirrus.Audit table you noted in another thread, there's no way to tie that, at least in which I see to a node. The audits don't have a record of which node ID has the error. Best it has is an IP address in the details sometimes, but not always so that's not a reliable way to join the data. You could…

Thought I'd take a look at this query while I was looking here to assist on your other thread. This is essentially your same query, but completely reformatted and using most SWQL best practices by using navigational properties. Also quite a bit more simplified. SELECT n.Caption ,n.IP_Address -- ,n.CustomProperties.Area…

Good point you're probably right. I'll do a bit more digging with the jobs and see..

Now I know I didn't touch on the report. The 1st SWQL query could be used as a datasource for a report table. I'd add some other fields myself though in that to include the details URL and maybe other custom properties. Also the query is joining (LEFT JOIN) the max datetime result from transfer results. So with some…