zackm ✭✭✭✭✭

You can name your DB during the installation of most any SolarWinds product. For instance, some larger organizations (read: ISPs) have separate Orion instances per customer in a data center. But the databases are all housed on the same SQL cluster. I've seen setups by city as well. So you may have databases named Miami,…

can you paste the full snippet that you're using here? (redacting any sensitive data of course)

If you run this against your database, you can see the various sources of data for the LTM Server object: SELECT * FROM F5_LTM_Server_V The reason I think you need to use the "Orion Status" object, instead of "F5 Status" is precisely what you mentioned re: SNMP failing. Almost exclusively, the 'Unknown' status for all…

DanielleH​, didn't you meantion that you would be available for babysitting for 5,000 Thwack points/hour? 

There is an alertlog table on the database that you might check, but I am pretty sure that it does not show where an alert comes from as far as what you are looking for. I would also check the Basic Alert Manager application on your server. It is usually not in use anymore, but there might be something laying around there…

interesting! our network team has this on their queue; but not sure what traction it would get above projects and the like. We'll see I guess.

It already is pulling data from the last 30 days. The original code is not looking at the first and last day of any month. If you run that today, it would be from today to today - 30; not from May 1 - 31st.

that's a really strong point re: the licensing this SWQL would reflect a proper NPM license count, just FYI wes.reneau​ SELECT e.EngineID ,e.ServerName ,e.IP ,e.Nodes ,e.Interfaces ,e.Volumes ,e.Elements ,CASE WHEN e.Interfaces >= e.Nodes AND e.Interfaces >= e.Volumes THEN e.Interfaces WHEN e.Nodes >= e.Interfaces AND…

You would need to remake the reports in the web report writer, but it's a heck of a lot simpler than it sounds I would mention that you should check your data retention levels. By default, statistics between 7-30 days back are hourly averages; so you might not be getting accurate numbers with your reports at the moment. If…

What modules are you using in your environment? Do you want a report on only application monitors, all pollers including CPU, Memory, Interfaces, Volumes, Hardware, Topology? i.e.; What specifically are you looking for. (this is almost assuredly possible, but it's always easiest to start with a precise requirement) -ZackM…

Thanks for that. The only thing striking me as odd is your limiting condition on your trigger (highlighted area below) Can you take the drop down menue that says 'Node' (red arrow) and move it to 'Custom SQL Alert' and then post the text that shows up?

is it possible to post the config snippet for the router's NetFlow and the specific interface?

So are you wanting to alert on a basic number or a percentage of change? i.e.; do you want "Alert me when forecast capacity > X" or "Alert me when the current value is X% above the last value"

1) </drool> @ your server. that's a nice one for sure! 2) try this to get you in the ballpark. (ties in the nodes table so you can call your custom property) select n.caption ,a.name ,d.availability ,d.percentavailabilityfrom apm_applicationstatus_detail djoin apm_application a on d.applicationid = a.idjoin nodes n on…

brandonccr wrote: ...our server currently collects 32 days of detailed statistics... That's a bit impressive! Mind sharing your component monitor count and SQL specs?

Just to add to this, the same issues commonly appears with 'Fixed Disk' vs 'FixedDisk' I generally have moved towards alerting against the VolumeTypeID instead of the VolumeType field to account for these discrepancies. Though it would be interesting to see why this is happening from the SWI point of view. -ZackM Loop1…

The GUI is from NPM 12 RC1 The screen you are on is where you choose what type of content you want to add to your report. I would start with Reports > Custom Table The next screen would ask you what you want to report on, in your case it would be the Mailboxes The screen after that would allow you to then design your…

What products and versions of SolarWinds do you have installed currently? -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

touche'

x2 I would almost NEVER increase interface polling to 5 minutes by default. There are, of course, some environments that can handle that, but that's the exception, not the norm.

Depends on what you mean by dashboard. You can either go to the component details page directly to see the information, or pull it into another summary view using either a Custom Query or Custom Table resource (there are probably other resources too, but I don't have my lab in front of me at the moment to check their…

If you don't want to create a report, you could manually review the dates from "Manage Nodes". Group the nodes by status, select the unmanaged group, then add the "Planned Maintenance" column by clicking on the double arrow (>>) right under the "Delete" key.

I'd have to go look to be sure, but you'd probably have to throw a little SQL together. The view that the alert is pulling from only has MAC addresses.

Absolutely. They have their own licensing requirements. IIRC, only NPM and NTA are tied to each other.

1) Open Orion Report Writer 2) Click on Create New Report 3) Choose Report Type "Advanced SQL" 4) Fill out the General Tab as you wish 5) Click on the SQL tab and copy/paste the script I provided above 6) Field Formatting tab will allow you to edit how the results are output 7) Save the report and then run as needed.

Try something like this and see what you get: ALL of the following: volumetype = fixed disk volume size <= 1073741824 vendor = net-snmp type <> printer NONE of the following caption = /boot caption = /tmp caption = /sys caption = /pagecache caption starts with /proc caption starts with /var/lib/nfs

I think I saw your thread about that earlier this week. I have been thinking about it and I don't think it can be done native to SolarWinds. The problem is that I cannot see anywhere where the list of IP addresses to be tested resides in the database. (not saying it doesn't exist, just that I haven't seen it in the limited…

are you using a windows event log monitor or a log parser that looks for a regex search within a txt or .log file?

Nice find. I was ashamedly unaware that would work, but will definitely be using this trick in the future.

probably; something like this should work: SELECT a.*, n.IP_Address FROM dbo.AlertHistoryView a JOIN Nodes n ON n.NodeID = a.RelatedNodeID WHERE Severity = 0