sum_giais

Perhaps the API is not abiding by this sort order or maybe confused by all of them. Have you tested access with an account that only has access with just one group or just the account added?

Here's a query to check that directly in the database... I will add that this will look for ALL node add/remove events regardless. Also note that your audit log retention could play a part here too. If I recall correctly I think the default retention for audit logs is 1 year (365 days) and then it will start rolling the…

Hi @"bobmarley" that’s more of a question for you and your security team to determine and weigh the risks. I would run this by them for their input (my 2 cents...) Ultimately what it would come down to for me is risk vs reward... e.g. I would prefer to use the existing database if I had a complex multi-module environment…

Without knowing the load-balancing solution you’re employing.. I believe some if not most load-balancing solutions have some sort of sticky session configuration. E.g if you start a session with webserv1, the session remains tagged to that server for the duration of the session.

Where exactly is it being used? Is this the legacy win32 trap viewer or the new web log viewer?

Ah yes that can happen when you copy/paste from the web or other sources. Always something to be cautious of.

Open task manager and sort by memory load, which processes are taking up the most? Also what versions of Orion and these modules are you running? There are known memory leak bugs in older versions so if you’re not at the latest (as of now 2020.2.4) I’d recommend upgrading.

@"tony.johnson" - thanks for the information. I have been doing a bit of research on this as well and am trying to discern the appropriate permissions and configuration to achieve. So far, while I believe it's certainly possible... I think the primary focus is to run the agent under a least-privileged domain account for…

What are you trying to do? You’d usually join two tables / entities via an ID (integer) of some kind, when speaking interface we’d probably be looking at the NodeID to join it with the Orion.Nodes entity. Timestamps elude to the goal of some sort of historical query (perhaps interface status or utilization history) but we…

The first two affect the Orion Platform and are directly noted as fixed in the 2020.2.4 release notes. The third is for the Serv-U FTP which is a separate product as far as I know... not sure if it’s fixed in the latest version or not.…

Yes when deploying via group policy / mass deploy, it will generate an .msi / .mst pair, the .mst file will be different per polling engine, used to auto-configure the agent to the respective engine.

My first thought is the certificate is invalid now... what was your upgrade process? In-place or did it involve a rebuild / migration of servers at all? I’d try doing an uninstall and reinstall of the agent. Check after the uninstall that the certificate gets removed from the local computer certificates and then reinstall.…

You could create an alert that has an action to set a custom property value. It’s a native action that can be assigned to alerts. The key is figuring out your criteria on how to set it.

Copy the OOTB alert and then edit the copy, it will then allow you to change the reset condition and trigger etc., then disable the OOTB alert afterwards.

When you go into NCM settings you can change the archive location, it can be a folder on the polling engine or a network fileshare. You’ll want to have a look here at the NCM Macros and the link after too. Should get you going, note that it’s not all inclusive, you can actually use custom properties too if you know they…

Try restarting the management interface of the UPS. If it doesn’t go away after that you can try doing a manual self-test of the UPS.

Comparing the current value with the previous value is a bit complicated. Although if you know where the data is in the database yeah it’s possible. I’ve done this with UnDP’s before but there’s no easy native way to do that with either SWQL or SQL. It involves getting the current value and then doing a datediff of some…

Yeah SAM is really the best tool for the job. Attempting to monitor 400 tcp ports with NetPath is a waste of resources and a lot of overhead... not easy to alert on either. It’s meant to analyze and trend the network path to an endpoint tcp port. SAM on the other hand you could use a simple tcp port check component. The…

After you made that change, did you restart IIS and/or perform an iisreset from command line? If that doesn’t work perhaps a server reboot... just guessing on that though, I’d start with an iisreset.

So if I’m understanding correctly, you have (2) additional web servers that are sharing a dns vIP or alias perhaps like round-robin style? Specifically for the additional web servers SolarWinds leaves it up to the customers to design high-availability and/or load-balancing with these. I’ve seen many folks use…

Try you first option without the \b like so, that should match any ip address. \d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}

Not sure if there’s a better way to do this, but you could use a powershell component monitor to run a script that uses Invoke-SqlCmd to run a query. https://documentation.solarwinds.com/en/Success_Center/SAM/Content/SAM-Create-Windows-PowerShell-Script-Monitor.htm…

If the amount of components that need to be polled is the same I don’t think it’s going to matter. If you have 5 applications with 1 component, compared to 1 application with 5 component monitors (assuming all the same components) the load on the polling engine should in theory be the same for each. What really impacts the…

My director looked at me funny when I explained the licensing models and how it pertains to our monitoring and polling engines. Just silly if you ask me. I'm going to stop here.. I've whined enough about this to my sales rep and a SolarWinds SE.

Ok that's a conversion issue possibly. Might need to grab the raw status from another field or just put single quotes around the 30, e.g. >= '30' because the value from the database may be a string.

Have you verified that the traffic is indeed not getting blocked by any firewall by doing packet captures? Either by a hardware firewall in the network path or by an ACL in place on the device you're trying to monitor? E.g. windows firewall settings etc.? Look at everything on the old polling engine, and the new polling…

Ah ok - yes you're on the right track with the views then. Making new views and limiting the actual view to a 'Group of groups' would be best, I misunderstood. I make a habit of setting up my groups with dynamic queries based off custom properties so all the nodes get added automatically. For example if location is Florida…

So when you move to NAM / ACM licensing you have to change the way you think about the solarwinds licensing. For larger deployments it's great. It eliminates the need to procure additional polling engine licenses as you scale. You'll be able to monitor unlimited amounts of IP addresses in the IPAM as cobrien mentioned.…

I'd check the conditions again. Also you can use the question ? mark character as a wildcard to match any number of characters, and the underscore _ to match any single character. Here's a full visual example.... Overall group: Group objects (two dynamic queries): Dynamic query 1 conditions: Dynamic query 2 conditions: End…

Might be better to set the limitation on the client account themselves. That way you don't have to play with the views and can keep that same view for each client, but their account would be limited to the group nodes you set.