wluther · Breaker of Things · ✭✭✭✭✭

@"patriot" This took me a while to wrap my brain around when I started too, so no worries, you're not the only one. For your specific example, joining the Nodes table (Orion.Nodes) to the NodesCustomProperties (Orion.NodesCustomProperties) can actually be accomplished with an implicit join, which is far less work. An…

@"IQBALAD", here is a link to Marc's GitHub page, which is a treasure trove of SolarWinds gems. https://github.com/Mesverrum/MyPublicWork These are the ones I have used in the past, and they have worked wonderful for me.

@"IQBALAD", there is (or at least used to be) a method to export resources from one view, then import them into a new/different view. As others have stated, messing with the DB directly is a good way to create some fun problems later on, and you could always manually re-add the widget and configure it the same too. The…

@"AaidenVIII" I don't have much time to work this right now, but I'll try to circle back to it tomorrow if possible. While not exactly what you are asking, this should be a decent start for now, until I can circle back around or someone else can provide you a better response. SELECT n.Caption AS [Node] ,n.DetailsUrl AS…

@"shyde" The edges table should list duplicates of each map project based on the different combinations of the source/destination nodes and interfaces. If a node is added to the map (I think) it should also be listed in either the source or destination column in that table. However, I don't have many maps, and there could…

In regards to potentially having the same node show up multiple times across different maps, if you add the other 3 columns from the Orion.Maps.Edges table (DestinationEntityID, SourceMetricEntityID, DestinationMetricEntityID), you may end up with more results than possibly expected. These 2 columns should indicate the…

Don't forget, every node could possibly be on/in every map, or map project. There are other columns too, a source/destination entity for both nodes and interfaces, which can be viewed from the Orion.Maps.Edges table, as well as another table or too. If you start adding all of those columns, the list of map projects will…

@"shyde" If you want to make the captions searchable, I think you just need to add "OR" to the where part, and then drop in the caption field. SELECT DISTINCT p.ProjectID ,p.Graph.DetailsUrl AS [_LinkFor_ProjectID] ,e.SourceEntityID ,n.Caption ,n.IPAddress ,p.DisplayName FROM Orion.Maps.Projects AS p JOIN (SELECT…

Sorry, again, I forgot to include the details URL for the maps, which should allow you to click into them if formatted correctly. SELECT DISTINCT p.ProjectID ,p.Graph.DetailsUrl AS [_LinkFor_ProjectID] ,e.SourceEntityID ,n.Caption ,n.IPAddress ,p.DisplayName FROM Orion.Maps.Projects AS p JOIN (SELECT ProjectID,…

@"shyde" You could also join the maps.projects and nodes tables together by connecting them to the maps.edges table. (I'm not 100% on the query, but it may help point you in a better direction.) SELECT DISTINCT p.ProjectID ,e.SourceEntityID ,n.Caption ,n.IPAddress ,p.DisplayName FROM Orion.Maps.Projects AS p JOIN (SELECT…

@"shyde" The basic SWQL query for this should be: SELECT TOP 1000 AccountID, ProjectID, UpdateDateTime, CreateDateTime, Favorite, TrackHistory, Data, GraphDefinition, EntityCount, GraphOPID, CommitId, DisplayName, Description, InstanceType, Uri, InstanceSiteId FROM Orion.Maps.Projects WHERE Data LIKE '%Nodes_315%' If you…

Here is a screenshot of one of our rules to forward out of Kiwi Syslog Server. These messages appear as if they never made a quick stop by our syslog servers, showing up as if they came directly from the original node/device. If you're not using Kiwi, then hopefully your server has a similar option to this.

I believe you'd need to enable the passthrough option on your syslog server (not sure if the actual option name), which will act as if the syslog message is coming from the source node instead of the syslog server/IP.

@"shyde" No worries, your questions are most definitely valid, and this community is most definitely here for such questions. I also agree with you, and think other folks may have similar questions too. Personally, knowing that the official SolarWinds folks are the only folks able to actually make the updates, I see it as…

PSA: My screenshot shows the mute option while nodes are selected (not interfaces), but the mute is applied to the object, so I believe it will mute anything that object would normally trigger.

@"WillP" There are likely several ways to skin this cat, each depending on various factors. Many folks use dedicated custom properties, tied into the alerts, which will simply bypass the alert if the property value is set to "Yes/True". This allows you to quickly toggle node alerts off/on per node, on the fly. Using the…

@"TomYacura" Did you ever accomplish your task here? I've been wanting to add similar such functionality for a long while now, but still looking for that missing link my brain can understand.

@"jerrysInge" If you don't mind me asking, and other than a direct 1 to 1 comparison between tables, what tasks are you looking to accomplish?

@"mmayer5823" Just out of curiosity, what version of PowerShell are you running? I ask because I ran into the same/similar issue as you, with the "Does not match JSON format". I then realized, out of bad habits, I had been running it in the old PowerShell ISE. I opened up a PowerShell 7 prompt, reran the same commands, and…

Great info, thank you.

@"Bryan Lucas" You could probably just duplicate and edit one of the default traffic reports, selecting the specific node and modifying the date/time. Otherwise, for the destination data, and if you're not already using it, NTA will likely be the tool for that solution. support.solarwinds.com/netflow-traffic-analyzer

This sounds like a job for, NTA. While NPM should be able to cover the XX GB bandwidth at a specific moment in time, NTA should be able to list out the top destinations for which that node was doing business. If you don't have NTA, then you'd likely need to do way too much work behind the scenes, with logs and other such…

Well, since some of our vendors are still working to incorporate that super fancy SNMP future-tech, I'd love for SolarWinds to THWACK them upside the product and bring them into the present times for us... We can talk about API stuff after that.

This is the SWQL I use to view our VM stuff. SELECT Name AS [VM] ,DetailsUrl AS [_LinkFor_VM] ,'/Orion/StatusIcon.ashx?entity=Orion.VIM.VirtualMachines.Vmware&status='+ TOSTRING(VirtualMachines.Status) +'&size=Small/' AS [_IconFor_VM] ,CASE WHEN NodeID > 0 THEN 'YES' ELSE 'NO' END AS [Monitored]…

@"km3000" Just out of curiosity, have you considered using the API to pull data from the Orion DB? I believe there may be a tiny bit more safety rope built into using the API, compared to direct DB access.

To use your query as the example, instead of using an actual JOIN, you can do the following: (I've made a few changes to your aliases to help me follow it a little easier.) Using the Orion SDK to follow along, we are going to start with our SELECT'ing of the Orion.NPM.Interfaces table. Nothing fancy here. This just returns…

And here is a link to an older post I used as an example for someone else. While it's not exactly what you're asking for, I think it can be used to help understand the basics of joining tables in SWQL. I'm pretty sure some of my screenshots in this post have been lost, as I posted this at least 2 THWACK versions ago.…

When you say you don't have access to SSMS or the SDK (Orion, yes?), do you also mean you cannot access your Orion webpage or DB remotely? The Orion SDK can actually be installed on any system that can access your Orion webpage, as it connects to the same address, and uses your same credentials, which also applies your…

If you want the results to come back with, or exclude, only a specific subset of results/views, then you will simply need to add those into the WHERE part of the query. For example, this is how I have my view "Templates" configured. I create a new view (summary type), with 2 additional tabs. Each page/view within that view…