taylor.crowley · SolarWinds Engineer · ✭✭✭✭✭

Hi @"mharvey", from a PowerShell prompt on the SolarWinds server can you try the following: Test-NetConnection 8.8.8.8 -port 53 This will test to see if the SolarWinds server is able to access the IP over port 53. Could you also perform an nslookup from a cmd prompt to 8.8.8.8? it should resolve to dns.google nslookup…

Hi there, could you please share the scope of the alert? i.e the trigger condtion as well as the application monitor details please. A screenshot of both would be great!

I know that originally it is said that this stopped working after the upgrade but it is still worth confirming that we are actually receiving syslog to the SolarWinds server in the first place. @"rccamacho" could you please set up a packet capture on the SolarWinds server and monitor to see if we are receiving any packets…

Hi @"Zuljin" , Can I confirm you have the SAM module or HCO? If so then there are some ways you can achieve this. Fundamentally SolarWinds will only monitor process you have per-defined for it to monitor. In this situation we need something a bit more pro-active as maybe we don't know which processes are causing the high…

And is it not possible to use the method of updating the WMI credential in the credential library? This is assuming that most of them use the same credential as a WMI service account of sorts.

Hi there and welcome to SolarWinds! Out of interest, are you not able to use the in built export to PDF within SolarWinds? You can set reports up on a schedule to email to specified mailboxes a PDF export of the report. In terms of your query if this is the route you want to go, you just need to change the query to include…

I see you have blanked out a part of the DCOM message and I assume this is an IP address. DCOM errors are generally produced as a result of failed WMI polls to the device specified in the message i.e the IP Address. If you go to this device within SolarWinds and edit the node, are the WMI credentials testing successfully?…

Our best practice for this is finding a clean interface to use for exporting flow data. By 'Clean' I mean one which has the least amount of non-relevant traffic going through it to align with your use case. For example, if we are only interested in data going in and out to the internet, I would want the External WAN link…

As you said, when changing in bulk via the Web Console GUI it requires you to allocate credentials however this is only used for the initial deployment. After deployment it will use the LOCAL SYSTEM account for any polling jobs locally on the endpoint. If you don't wish to deploy this via the SolarWinds Web Console and…

It depends, is there something which can link the devices together in a query such as a custom property that they all share? Of course there is this way of doing it - https://solarwindscore.my.site.com/SuccessCenter/s/article/Change-WMI-credentials-for-all-nodes-at-once?language=en_US - which is just checking all WMI nodes…

You can change what is shown in the Node Details widget for a node by using Device Studio within the SolarWinds Web Console There is an article for this here: https://solarwindscore.my.site.com/SuccessCenter/s/article/Change-device-details-in-the-Device-Studio?language=en_US Usually this would be to set custom OIDs for…

Hi Edwin, this query is great thank you for sharing! I did have one question though. When I try to implement this myself the status column does not show the .png which is dynamically assigned but instead shows the entire URL I can see you are using a custom table to show the results. How should this be formatted so that it…

What SolarWinds evaluation license have you applied to the instance? API Polling functionality comes with the SAM module or HCO Essentials. To access the management section, you need to go to Settings > All Settings, and then you will find Manage API Pollers in the Node and Group Management section. I believe it won't show…

Hi Vivek, whilst I haven't done this myself I have seen many successful integrations from our customers which work really well I'm sure you've already seen this but SolarWinds have documentation on the integration which you can find here: documentation.solarwinds.com/.../core-alert-integrate-servicenow-before-you-begin.htm…

Might be worth giving the WMI service on the endpoint device a restart or maybe restart the whole machine if possible? Have you considered using an agent instead of WMI to see if you get the same results?

Hi there Both the following documentation and article are going to be extremely useful in determining what polling method to use in a scenario. https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-choosing-your-polling-method-sw1223.htm…

Limitations, Limitations, Limitations :) You can use limitations to limit certain aspects of the Orion platform for particular users. You can do this using the normal global permissions but this also works in tandem with custom properties. Let's say you have a user who works on and only deals with the monitoring of…

What version of SolarWinds are you running?

Average CPU/Memory % used can be found within the Orion.CPULoad table. % Polling rate is found within the Orion.PollingUsage table against the 'Orion.Standard.Polling' ScaleFactor in the 'Current Usage' column Here is a SWQL query bringing back the current polling rate for Polling Engine where EngineID = 1 SELECT…

Using the AlertHistory or events table, you could create a query using the 'COUNT' operation to accumulate the number of 'CPU/Memory High utilization' alerts triggered for nodes, in your case specifically servers. You could then create a condition in the query to only display this data IF 'number of alerts' > 5. You would…

Looks like there's currently a feature request for this - https://thwack.solarwinds.com/product-forums/solarwinds-service-desk-swsd/i/feature-requests/disable-category-suggestions From what I can see there is no current workaround

Sorry I still am a little confused. You are trying to edit data which is already calculated? wouldn’t editing this make the data false? That would be similar to me making a report of the number of nodes that went down in a week, the number being 8 and me changing that in the DB so it looks like 5 so the report looks…

Was there a resolution for this? I would suggest looking in the configurationwizard.lofg file

You could get SolarWinds to run a script on the SQL server no? You could do this using the sqlcmd utility Documentation - learn.microsoft.com/.../sqlcmd-start-the-utility

First thing to check, is it in the database? find the table used in the query for the report and verify the data exists.

Please see the documentation here on how to import modern dashboards - documentation.solarwinds.com/.../core-fusion-dashboard-import-export.htm

Apologies if I misunderstood your request :) on our website we actually have an article about how to define time ranges within reports you can find that here - https://prosperon.co.uk/insights/how-use-time-filters-solarwinds-reports/ Please let me know if this helps 

What query are you currently using? This is one that I quickly got together to display the IP address assignments to nodes using SWQL. Select n.Caption, n.IPAddress From orion.nodes n INNER Join orion.NodeIPAddresses i ON n.NodeID = i.NodeID Where n.UnManaged = '0' Does this query help as a building block?

Are you using the Network Sonar Discovery? If not, then have a look at the documentation for it to aid you with the configuration - documentation.solarwinds.com/.../core-network-discovery-using-the-network-sonar-wizard-sw1574.htm

What specific details do you intend to add into the alert email? Can you provide some examples?