tomiannelli · Infrastructure Department Manager · ✭✭✭✭✭

@"christopher.t.jones123" You gave me an idea. I queried the same table for URI that might be populated correctly. Sure enough they are in there. swis://SCI-NETMON-2.stanleygroup.com/Orion/Orion.Nodes/NodeID=6/Firewall/Id=345633/RemoteAccesses/Id=471292 Which is the program @"KMSigma.SWI" provided would look like this:…

Here is the Array output: Domain=stanleygroup; Username=9; ConnectTime=6/2/2021 7:09:12 AM; DisconnectTime=; Status=1; Lifetime=604800; ComputerName=UNITLE-FVB; VpnType=Device Level VPN; TunnelType=IPSec; VirtualIp=1; PublicIp=5.194.223.186; DetailsUrl=/Orion/View.aspx?NetObject=RA:150822; DisplayName=54179; Id=150822;…

@"KMSigma.SWI", Thanks, I tried that piece. What happens is the URI is empty in that Table/view. The DetailsURI is not acceptable even if I prepend the swis://<hostname> information. @"christopher.t.jones123" in SWQL Studio it does support DELETE.

For us part of the issue is our automated deployment installs the agent immediately. For every new system, the agent is on it from creation.

O Yum Darling! my Yum Darling! our fearful trip is done,The ship has weather’d every Mission, the prizes we sought are won,The port is near, the bells I hear, the people all exulting,While follow eyes the steady keel, the vessel grim and daring; But O heart! heart! heart! O the bleeding 'X' of red, Where on the screen…

Done

Thank you that worked really well. Will definitely need to keep this in a referenced bookmark!

Thank you sir!

I used to have a JavaScript widget to create a grid of basically a world clock. I noticed when I went to port it over to the new platform it simply shows the HTML text. So if I understand you correctly aLTeReGo this code will no longer work. <script language="JavaScript"> <!-- function worldClock(zone, region){ var dst = 0…

I am currently experiencing the same thing. I use a show config merged through ssh. I need to use the merged version of the command because everything is managed through Panorama. If you just do straight running config it is very tiny. I can download the config successfully. But now policies.

This actually happens when you load the page. I am not trying to print anything. Just loading pages. Just tried to upload a screen capture of the activity but it errored out. Will try and post elsewhere and provide a link.

Do not know if this is related but the Windows Event Log is posting this information: Event Type: Information Event Source: ASP.NET 2.0.50727.0 Event Category: Web Event Event ID: 1315 Date: 12/16/2009 Time: 3:18:32 PM User: N/A Computer: MON-NETMON Description: Event code: 4005 Event message: Forms authentication failed…

The strange thing is that when it fails it is not consistent. Sometimes I get a message about .NET 3.5, other times I get a message about, Report Canceled. This could be all the charts or just some. Right now it is hit and miss. I thought I had it figured out with the Expiring pages, but that isn't it.

I have been trying to get this to work. I can get it to recognize data from my LAPTOP but not the server. I am wondering if the Interface Index in solarwinds db has anything to do with it. The Interface index in the database is 65539 and of course using nprobe it is 2! Not sure how else the two systems would recognize each…

Did they ever resolve this for you? I am getting the same problem. No matter what browser or OS. Some graphs are fine others get the same errors as you discussed. Thanks,

Interesting that the 4 and 5 were returned in that set. There is a way to fix that as I didn't catch it in my small test. You should cast the SPLIT as an Integer. $TEST = Get-SwisData $swis 'SELECT DISTINCT I.IpAddress FROM IPAM.IPNode I WHERE Status=2 AND I.Subnet.DisplayName = ''Muscatine Datacenter'''| Where {…

MMAYER5823, if you are using the powershell script make sure this is set: [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}

So if you are not running the release candidate 4.6 of IPAM there is an issue: API returns lots of identical rows when running "SELECT [...] FROM IPAM.Subnet WHERE [...]" · Issue #52 · solarwinds/Ori… If you use a SELECT DISTINCT I.IPADDRESSS.... you should get your numbers.

I truly don't have a magic bullet for you. It is one of those things where some minor element can cause it to get hung up. If you look at thwack for hung configuration wizard you will see a host of things that can cause it to hang on you. Fortunately this is a rare event and to date I have not experienced anything where it…

I don't understand what you mean by "the per template." If you want to import one from Thwack into SAM that is straight forward. then select Shared Thwack Templates and search for a phrase like "Log Parser" select the template you want and click IMPORT. It will then show up in the APPLICATION MONITOR TEMPLATES tab as an…

You would basically have to assume that any traffic you saw going to or from the Exchange boxes was related to mail.

I am confused by a couple of things. First, the IPAddress is stored as a varchar in the IPAM.Nodes table. Your WHERE clause is trying to compare it to an INT. That should not work at all. Second, I am not aware that IPAM will let you define random IPv4 ranges. You have to specify a standard mask. The IP addresses you are…

The complexity of the work done by configuration wizard makes it difficult to troubleshoot without detailed log information. Glad you got it worked out. I encountered a similar issue once and had to simply remove the entire SolarWinds website directory and rebuild the whole thing. Nice thing about having all the…

Then why not build and IP address group of your Exchange servers and call it a day? As you have stated the ports are RANDOM, which means - lacking any definite plan or order or purpose; governed by or depending on chance - how exactly would you expect anything to track that based on ports?

I thought you were trying to solve a problem of standardizing a collection of alerts so that You could easily deploy a collection against a group of servers. mesverrum​ makes a good point in using the custom property to send the emails where they need to go. That has been very useful for us.

dkohler​ Is that your entire script? If so you are getting Out-not defined because you aren't returning a Message and Statistic. Write-Host "Message: $message; Write-Host "Statistic: $stat"; You can also check out this series on PowerShell: The Basics of PowerShell (part 3)

You could use the local box firewall to block 162 from the Tenable source.

Every so often the monitoring fails. Then will pick up again. I think it is related to the fact that the script does not log off the user and Exchange thinks the session is still active. I was trying to post to the logoff.aspx url, but that does not appear to be working. What is the best way to ensure that the Exchange OWA…

For a unified approach you might consider using a PERL log parsing script. For example - Log Parser (Perl) - 10 String Matches - AND . This could provide a starting point. I don;t code much in PERL any more. 99% of our systems are Windows, thus everything is in PowerShell these days. Once you have the script returing a…

Well it seems that both sets of support people are confused by what seems to be a simple issue. The version of SNMP on ESXi 5.1 [including Update 2] appears to report large file systems incorrectly. The SolarWinds' gentleman doesn't seem to appreciate that with anything above ESXi 4 VMWare uses an imbedded SNMP daemon in…