tdanner ✭✭✭✭✭

The material that used to be in that PDF is now covered by the wiki and samples on GitHub. Home · solarwinds/OrionSDK Wiki · GitHub

The "Query" message is not really recommended because the output is hard to parse. You should use the "QueryXml" message instead. Here's an example request (whitespace added): POST tdanner-dev:17778/.../OrionBasic HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "">schemas.solarwinds.com/.../QueryXml"…

You can write use relative times in your query by starting with GETUTCDATE() and adding or subtracting days. So to query over the last 7 days, do this: SELECT ... FROM Orion.Netflow.Flows f WHERE f.TimeStamp > GETUTCDATE() - 7 AND f.TimeStamp < GETUTCDATE() GROUP BY ... ORDER BY ... To add or subtract hours, use fractional…

This can be done using the Discovery API. The page describing this (https://github.com/solarwinds/OrionSDK/wiki/Discovery) has PowerShell examples, but there is also an example Python script (https://github.com/solarwinds/orionsdk-python/blob/master/samples/discover_one_node.py ) that uses the same API via REST.

Is the Orion Module Engine service running? Some people have had issues with it starting and stopping repeatedly after upgrade. There's a workaround for that if it turns out that's what's affecting you.

SWQL Studio seems to be having trouble with that verb. Stick with Postman. Removing leading/trailing characters is a straightforward task in my programming languages. What language are you writing this tool/script in? Do you have some code you can share?

Orion.NodeIPAddresses is not writable, by design. The information here reflects what IP addresses Orion discovers for a node. The system will still poll the node using the IPAddress property of the Orion.Node object. What are you trying to achieve by adding an entry to Orion.NodeIPAddresses?

I don't understand the question. What do you mean by "what's the existing one"?

I really tried to figure out what word you have replaced with '****' but I couldn't guess it. Hmm. You should start with Orion.Nodes. All of the devices monitored (servers, switches, routers, wireless controllers, whatever) are represented as nodes. This entity includes properties for some metrics like response time, cpu…

The supported IP SLA operations are listed on page 35 of the VNQM Administrator Guide. "ICMP Path Jitter" is in the list.

I recommend you use the discovery API to add nodes. It is documented here: https://github.com/solarwinds/OrionSDK/wiki/Discovery . That repo also has sample code for calling it in a few languages. While you could call it using curl, I think you'll have an easier time if you switch to python or some other scripting…

How were these nodes added? Through some script (if so, please give details), the Add Node wizard? Scheduled discovery? If they were added through the user interface, you may be best off just opening a support ticket.

Orion.AlertStatus is part of the older "Advanced Alerts" system. AlertObjects, AlertActive, and some other entities (see Alerts · solarwinds/OrionSDK Wiki · GitHub​) are the basis for the alert system introduced in 2015 with NPM 11.5. What you are attempting to do here (directly trigger an alert) is not really supported.…

The authentication options for Connect-Swis are: 1. -Username <username> -Password <password>. In this mode, you provide the Orion username and password as plain text strings. If Orion is set up for AD authentication, these can be an AD username/password. 2. -Credential <pscredential>. In this mode you provide a…

When Orion collects data about interface traffic, it writes it into that table with Min=Max=Avg, just like you observed. When this data gets older (default = 7 days old), it gets summarized into hourly buckets. For each interface, all the data collected in a given hour gets summarized into a single row and the detailed…

What version are you using? Is the rest of the product working well?

Are you able to log in to the database using SQL Management Studio using the same username/password that Orion is using?

You can query the following entities: * Orion.F5.Device * Orion.F5.DeviceStats * Orion.F5.Nodes * Orion.F5.Pools * Orion.F5.VirtualServers

Have you checked this page? https://github.com/solarwinds/OrionSDK/wiki/IPAM-API It is straightforward to translate a PowerShell example to Python. If you have a PowerShell call like this: Invoke-SwisVerb $swis Entity.Name VerbName @( "argument 1", "argument 2", "etc." ) You can make a python call like this:…

Create/Update/Delete is not supported for Orion.NPM.CustomPollerAssignment. This is enforced through the access control mechanisms, so that's why you're getting an access denied message. I'll bring this to the attention of the product manager for NPM, because what you are trying to do is a very logical way to automate…

I don't have my system handy to test this, but it looks like the problem is having n.CPUMultiLoadHistory.CPUIndex in the GROUP BY clause. Try replacing that with n.CPUMultLoadHistory.NodeID.

The Job Engine is used by the Universal Device Poller, APM, and EOC to do recurring work. It comprises the Job Scheduler service (central, dispatches work to local or remote job engines), the Job Engine service (one per server), and various Job Engine Worker processes. This separation facilitates scalability and…

This is going to sound a bit weird, but that actually is json. Specifically, it is a string encoded using json rules (note the surrounding "double quotes" and the escaped double quote characters inside). In this case the string does contain XML, but this should not concern you. You don't need to do anything with this…

Orion.CPULoad could be a very large amount of data. If your query returns too many rows, you might get that error. Try doing "SELECT TOP 10 ... FROM Orion.CPULoad" and see if you get results.

Yes, there is an API. Yes, you can use it to acknowledge alerts. And yes, you can call it from a Linux server since it is just HTTPS. Some info: Re: SWIS REST/JSON API Check out this about acknowledging alerts: Re: Re: Acknowledge Alert via SDK Perl

You've got something odd going on with the quotes around the query on the last line. It looks like the query starts with a single quote (') and ends with a double quote ("). That's not valid powershell, so it may just be a re-typing or copy/paste error. One possible cause: powershell only replaces $variables in…

Edit C:\Program Files (x86)\SolarWinds\Orion SDK\SWQL Studio\SwqlStudio.exe.config and find this piece around line 33: <setting name="OperationTimeout" serializeAs="String"> <value>2</value> </setting> And change the "2" to some higher value. It's in minutes. Restart SWQL Studio.

Adding a single object to a group is almost the same as adding a filter rule to a group. In place of the filter, put the Uri of the object you want to add. For example, to add node 33 to group 8, do this: swis.invoke('Orion.Container', 'AddDefinition', 8,…

Thanks. I have entered this as a bug.

There is an internal timeout, but it is long. Including "TOP 1000" in the generated SELECT query is a good idea. I opened that on GitHub: Include "TOP 1000" when SWQL Studio generates a SELECT statement · Issue #66 · solarwinds/OrionSDK · GitHub