yaquaholic · Senior Monitoring Simian · ✭✭✭✭✭

Raaga, Have a look in the database, this SQL query (when run against your SolarWinds DB) will show all the node related events, the when, who, what and which device. SELECT aat.ActionTypeDisplayName ,TimeLoggedUtc ,AccountID ,aud.ActionTypeID ,AuditEventMessage ,NetworkNode ,N.Caption FROM…

Checking against my own environment, we have also have virtual RedHat servers, which do correctly report their asset information. Maybe time to raise a Support Call, this may be an agent issue?

Glad you found a solution!

LEM does syslog, but so much more and has a higher price tag. If you are looking for a security information and event management system, then this is the better choice. It can take feeds from just about any log file, or incoming message you care to throw at it and then runs it through its engine, creating heat…

OldestSnapshotDate not OldestSnapshotData 

@"rajasekar" - How did you get on, did it work?

Have you checked that the correct ports are open? The agent uses specific ports for server communications, if they are not open you wont get them working. Opening ports includes Windows/Linux firewalls (that may be installed/configured on your Orion server and the servers with agents) and any other firewalls/network…

The following code should work, as a PowerShell monitor, returning a 1 for OK status and a zero for anything else. Each value is returned with a unique Statistic (and optional Message) name, of which there are under 10. Create an ILO monitoring template, add a Windows PowerShell Monitor to it and add the script body, and…

Only SNMP is required

Nicely done on the workaround But I'd be inclined to, if you can, raise a support call (Customer Portal Login | SolarWinds)​. The system's Vendor should not be changing and I'm struggling to think of scenario where the system's hostname would be changing. Thoughts of load balanced DNS, say through an F5 to two DNS servers…

aLTeReGo fantastic, I have finally made some progress! However if when I try SELECT memorySizeAvailable FROM GPU it fails with an invalid query. Any chance you could help in finding the actual data (select ?what? from GPU) from within the class? Wbemtest is rather cryptic, is there any way to list all of the data from the…

tmattingly​, So just had a chat with one of storage lasses, who has pointed out that our enclosures only have 8 physical ports, but when I list the device's resources it returns 70 interfaces (data taken from the IF-MIB). So is the port you are trying to monitor the physical interface or a virtual one? If your traffic is…

Sure can, but it'll be tomorrow before I get a chance (UK based and it's home time).

However, getting the results to display in the alert (email) might be the problem. You can write advanced SQL/SWQL queries and their result be displayed in the alert text, but it doesn't handle more than one result. Wondering if anyone else on Thwack has gotten around this, without scripting the thing from PowerShell? That…

What, you don't write your own PowerShell monitors? And SolarWinds will offer support on SAM PowerShell monitors, I know, as I have used them for such assistance.

After a bit more time playing with this, I have realised that the table doesn't seem to provide the details of all user log outs, unless they hit the logout button. For example here are my activities for the past 2 days: ActionTypeTimeLoggedUtcUserNameLog In11/05/2018 08:52meLog In11/05/2018 08:32meLog In11/05/2018…

Morning claidheamh , The Process monitoring picks up on all running instances of the desired process. I threw up a quick template, using csrss.exe (as there be more than one instance running on my test box): And it knows how many processes are running and their PIDs, so it will be alertable on. You can quickly over…

kange0010​ Looking at the MIB for that table, there is one OID that might give you want you want: cEigrpUpTime (1.3.6.1.4.1.9.9.449.1.4.1.1.6) - The elapsed time since the EIGRP adjacency was first established with the peer. From what it looks like, (sorry nothing to test it upon) this will supply the number of seconds…

Odd me too, I added a further 4 rows to my Customer CP, but when I went back into Orion (Node edit) the newly added options where nowehere to be seen. Let me test it further...

smttysmth02gt my apologies, I did not mean to appear rude. Can anyone from SolarWinds confrim or deny my fears please? And what steps can I take to ensure my customers get their monthly reports, without manual intervention?

Sorry, I'll go hide back under my rock.

Did you ever get to the bottom of this problem, as I have a very similar one? If so would you be able to share please?

Was there ever any update to this ticket? Did internal ticket number 348041 ever see the light of day?

Hi pratikmehta003​ Yes, log onto your Orion server and open up the Database Manager Tool (C:\Program Files (x86)\SolarWinds\Orion\DatabaseManager.exe) and click on "Add default server". This will attach to your SolarWinds database and allow you to explore the tables. Firstly Nodes is the place to start, with the all…

My Auditingevent table holds the last year of audit events. Check your polling settings under /Orion/Admin/PollingSettings.aspx

@CRZYFST **** did you ever get this resolved?

Make sure you know the name of your UDP poller and create an alert with a trigger like this: Good luck

Can I recreate the alert in NPM 12.1? Is it just a case of recreating the trigger or is it (as I fear) that the HA alert configuration is kind of an on/off option only, from what I can see in NPM 12.1?

A slight wander off topic, but a step in the right direction i hope... I started playing around with SQL to see if I could utilise customised thresholds within alerts, I noticed that the Thresholds table held the custom thresholds, linked by Nodes..NodeID = Thresholds.InstanceID and was able to link this back to the…

I have just tested the SWQL in the Orion SDK SWQL Studio and it works fine (for me). Here's the code in a more copy'pasta friendly format: SELECT VirtualMachines.Uri, VirtualMachines.DisplayName FROM Orion.VIM.VirtualMachines AS VirtualMachines WHERE DayDiff(VirtualMachines.OldestSnapshotDate, getUtcDate()) >= 10 AND…