thwackdude

I haven't been able to test yet but I wanted to add the following URL for prosperity. https://support.solarwinds.com/SuccessCenter/s/article/Use-Custom-properties-when-sending-email-alerts It's a little dated but also helped me understand what mesverrum was getting at.

Not that it matters here and i think the direction good to test on but as I mentioned earlier we have about 50 groups that are responsible for different server functions whether it be overarching Window/Linux health and patching or the application the runs on the server itself, as well as another tier that monitors 24x7…

I want to make sure I am understand what you are saying. So in this instance, I create an alert for when a node goes down, I set the action to email custom property, and if a SharePoint server (with custom property of SharePointOwners) goes down it will email a SharePoint admin and if a Linux server (custom property of…

Apologies. Essentially I am hung up on, I can create an alert for components, another for status, and another for volumes but creating 3 alerts for each group of admins is going to get messy which I have accepted at this point. I believe I need to figure out how to change any volume into a template component and status…

Even though all of the responses are fairly great, I went ahead and marked this as the answer. I am still curious about the query string building but not all hope is gone doing WMI as I had previously thought and some of my sanity has returned. I just didn't want to leave this thread open over the weekend. Thank you all…

Rharland2012, RE: 1. I get what you are saying but I have a follow up. If it is imported into NPM does that differ from importing into SAM? Or, a I correct in thinking of the Orion stack as a whole and the modules (SAM, NPM, NQM) are simply different functional add-ons? NPM is already set up for all network components…

JMm_Sysadmin, thank you again, I do have access to Oroin and have been zipping around getting use to things. I have 9 or so test boxes but getting WMI configured and working I think is first on my list; however, being able to test it with my template is also a part of that. As I said before, the whole WMI query string sort…

Right, thank you. I will review read the article and see if it helps. I suppose I was hoping for alert logic to be able to say "if anything is wrong with the set of nodes (all volumes, components, or down)" it would send an email indicating the issue that was presented by the database. I suppose I could attempt what was…

I cannot speak for the original poster but I am personally on 2020.2.0 and so far have one server using Apache on the default 5000 port. have uninstalled and reinstalled 3 times. I was able to work with vendor support for the server that it is impacting and tested using another port for Apache Web Services. As long as…

I apologize I should have clarified. An example would be SQL group gets one set of alerts, Linux gets another set, on and one, application by application or cluster by cluster depending on scope.

Thank you again and I will!

Rharland2012, Arg, sorry, I should have clarified. Running NPM, NQM, SAM, and VNQM; however, the SAM piece is what I was assigned since I currently administrate SCOM. Additional Polling Engine license approval should be coming soon. Just getting my hands dirty with what we have currently.

So, I haven't quite made it to the Alerting section yet for in-depth analysis but would I be accurate in guessing that those default parameters, absent of template, can be alerted on threshold? Very helpful, thus far, thank you. I'm still wading through templates and making notes about the ones that may work.

I too would like to know about this query; although, we are on 2018.2 HF6 which is what support told me a month or two ago would fix it. I might just have to open another ticket after i get some memory dumps.

mesverrum, thank you for your response. I suppose I am just trying to untangle everything and get it all straight. We have just north of 900 servers and 45+ different groups that are notified separately as well as a tier 2 24/7 incident response center that currently get any volume on any server over 98%, server down, and…

tomainnelli, thank you for your response. So are you thinking something like building it as a component in a template and simply alerting on components rather than say volume? This is also an option but then I come up with the question how to create a component script that monitors for any fixed disk and a component that…

Mikegale, thank you for your response. First of all, it is interesting to find out I should be able to run Powershell scripts, it's something we never go around to in SCOM, hopefully I can get to it in Solarwinds. Currently, with my original post I ran across an article by Solarwinds on how to create, apply and alert on a…

JM_Sysadmin, thank you as well for your reply. Good to know you were in the same boat I am currently. Windows come first since that is our majority and Linux will have to use (assuming) SNMP. Blanket system monitoring will come first and specialized (IIS, Exhcnage, SQL) ones will be built later. I believe I can still…

Bobmarley, thank you also for your reply. Also, thank you for reassuring me my assumptions are correct. I get the basic structure of a WMI query, however, I suppose I'm looking for an easier way to get the strings I need to build my own template. I've gone through a few of the templates that are already in the SAM system…

Jdumke, thank you for your reply. As far as "agentless" is concerned, I don't think SNMP is off the table but it was my understanding (limited understanding) that when using WMI, there are more capture points available. The only thing that is off the table as of today is the Orion Agent. The goal is to start with a…

Thank you for posting this, I am having the same issue with an application using port 5000 as well.

I think i got it. I replaced the "from orion.nodes n" with: From orion.containermembersnapshots cs Join orion.nodes n on n.nodeid = cs.entityID. Also, down in the where (n.status =2 or t2.nodeid is not null) section I added: AND containerid = 123

mesverrum​, thank you for the clarification and that is what I had found in another post as well, to my dismay but it makes sense. My inexperience with SQL let alone SWQL is something I'm working on. I got most of the way by creating multiple summary views based on group and then creating a master summary view but that…

Thank you for that, so far I've had to modify the [SolarWindsOrion] down to [SolarWinds] and it works fine in SQL Studio but not SWQL. I'll keep chipping away to figure out why it's throwing a mismatched input error expecting a ( in SELECT caluse.

pksolar, would you be willing to share how you went about joining a container table to the query mesverrum created?

I think that I may have preemptively posted ahead of poking around a bit more and possibly asking the wrong questions. I was focused primarily on the following article Create, apply, and alert on a WMI monitor - SolarWinds Worldwide, LLC. Help and Support . However, what I am finding is WMI as a fetching method can be used…