sum_giais

Trial licenses of NPM are fully functional for the 30 days allotted. Just for kicks -- have you checked your DNS configuration on the Orion server? It does state a DNS error at the top right. Can you nslookup www.google.com from a command prompt? Is your Orion server sitting behind a firewall? Try taking a look at these…

Thanks @"tony.johnson" for the clarification, much appreciated!!

Welp... your exact query works for me as well. Though here's a bit of syntactical cleanup - functionally speaking it doesn't change the query. But when comparing values it saves on typing to use cpa.NodeID IN (x, y, z) etc. INNER JOIN Orion.NPM.CustomPollerAssignment AS cpa ON cpa.NodeID = Nodes.NodeID INNER JOIN…

That should work as admin. I'd contact support on this one.

I was able to successfully get this working with two separate queries bringing in nodes. How are your conditions setup?

It should work under a single group, are you able to post your conditions, and what version of NPM/SAM you're using?

Yeah the mib browser will tell you it’s a table I think only - would be nice if you could browse and show the details and structure of an snmp table, columns, rows etc.

Did you try a manual psping, tracetcp, etc., to the endpoints IP directly?

Have you tried running the query manually in the SWQL studio? I think I’ve hit something similar in thenpast but I can’t quite remember the specifics. I’m a stickler for consistency though... first thing I’d do is add in the AS where appropriate, capitalization of statements and proper spacing. Sorry couldn’t help but say…

I'd build it out in SWQL. Not sure exactly how I'd build an alert with this yet (as I've not done it myself) but this would be some SWQL to get you going looking at the syslogs from SolarWinds Orion Log Viewer (LV) or Log Analyzer (LA). I've always used the built-in functionality. Might require some crafty SWQL work to…

It's at the bottom of that page, but just doesn't give you how to retrieve it from the arguments list clearly but it's all there. There's some canned powershell templates that you could reference for it. Below is the argument list you would give if you wanted to provide the caption, and component id to the powershell…

Current versions of NPM (latest as of today is 2019.4 I believe) have what's called Orion Maps. It shows as a tab on the left of the node details view and dynamically makes a map for that node based off topology data polled. NPM 12.0 is at least 3+ years out of date.. I think more than that actually but can't recall…

@"kumar07" - to reiterate here as well... a pcap of the traffic can go a long way in determining the problem here. Also in general as well, it's good to note the protocols (tcp or udp) and direction (inbound, outbound, or bidirectional)... being in relation to the polling engine of the traffic. Below is a link to the Core…

Straying off -- I did just realize this is a topic asking to find the values BEFORE they are defined or configured... perhaps in my adventures through this, I'll find that. I have a feeling with what I've found so far, that due to the BaselineFrom and BaselineTo columns needing to have a datetime value in them, that Orion…

NetPath is not explicitly a traceroute. It is essentially mimicking application traffic, and the path that it will take. As per requirements for NetPath, see NetPath requirements. As rmatejka​ mentioned, firewalls can block this, also traffic shaping and wan accelerating can impact it as well.

tigerr - it's not necessarily a query to run a show command. There's a couple ways to go about this that most folks in the thread have spoken to. Option 1) Mocking up NCM... Create a new configuration type in NCM and save the output (via an NCM scheduled job) of 'sh ntp associations' at the intervals required. A simple…

Do you have any security software that blocks smtp mail messaging? I've seen some antivirus software block that by default.

Very interested in the outcome of your ticket. Seeing the same issue on 2019.4 and support verified that it was resolved in version 2020.2. Still a bit skeptical due to the wording of what I saw in the release notes even after reassurance.…

Found ‘em. https://support.solarwinds.com/SuccessCenter/s/article/How-to-set-SolarWinds-Agent-logs-to-debug-if-the-Web-transaction-gets-stuck https://support.solarwinds.com/SuccessCenter/s/article/NPM-Agent-How-to-gather-agent-diagnostics

I want to say its the system account doing this update, but I don't have anything specifically telling me that and haven't had time to dig into it. Willing to bet that there's logs of it in the installer folder as I believe these are done via an MSI and it logs it. Anyway, I did happen to find where the blacklists and…

Here's roughly that same query for SQL: SELECT ip.IPAddress, ip.MAC, net.VLAN, net.FriendlyName FROM IPAM_Node AS ip INNER JOIN IPAM_Group AS net ON ip.SubnetId = net.GroupId AND net.GroupType = 8 I added in net.GroupType = 8 so it only shows subnets (grouptype 8 is subnet). 

Not sure if there's a way to do this natively in the alert builder UI but taking the SWQL from the neighbor down alert and editing it a bit, I think I have a working PoC for this that takes into account interfaces being muted for alerts. So all they should need to do is mute the alerts for the interface that the neighbor…

I'm looking for this same data, and need to enable this on a number of nodes. I'd easily do this for one or two in the UI, however it's a large number of nodes and an odd grouping of them so not ideal to do it through the UI. Anyway after poking in the database and SWQL I found where some of this lives. Note I'm looking at…

Simply by adding another query... Groups can have multiple dynamic queries that bring nodes etc., into the group. So one for nodes that include ABC, another for DEF.

I don't think you could split any variables perse. Though you could nest variables inside of other variables if you take a look at this: Node and configuration archive variables - SolarWinds Worldwide, LLC. Help and Support,​ perhaps that's of use. Found this article very helpful. I've got production, and non-production…

Thanks Bryan, though I'm specifically focused on when we're adding /19 subnets that truly exist at a host level -- and are not subnetted out into smaller subnets.

Also I think there are some typos in your query. Here's a revised one that is working. There was a missing 'f' after 'FROM Orion.Netflow.Flowsbyconversation', and you're using a WHERE clause trying to limit it by f.TimeStamp when the query hadn't defined it as such. Also removed the 'AddHour(-6,f.timestamp)' part, and…

Check out this thread: Port/Application Alert in NPM/NTA

Ahh my mistake -- that's a SWQL query. I'll try to take a look at what (if any) SQL query can be done for this.

There are lots of examples out here on Thwack about how to do this. First and foremost @"KMSigma.SWI" just did an awesome SolarWinds Lab (#86), completely revolved around getting started with Powershell and the Orion API. You can find it here - https://www.youtube.com/playlist?list=PLSAG2TJPvS5YIsM2X2lhdv5DTbR4HZGoC…