zackm ✭✭✭✭✭

Import-Module SwisPowerShell $swis = Connect-Swis -Credential $mycredentials -Hostname .... $nodeUri = Get-SwisData $swis "SELECT Uri FROM Orion.Nodes WHERE SysName LIKE'dbprod1a'" $now =[DateTime]::Now $later =$now.AddYears(99) Invoke-SwisVerb $swis Orion.AlertSuppression SuppressAlerts @( @( $nodeUri ), $now, $later )…

You can't use a distinct clause there and still get all of the interfaces per device. Try grouping your report by the IPAddress field and see if that looks better for you.

you need to remove the custom format display option and add the data unit option (you won't see data unit in the drop down until you remove custom format) -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

The easiest way would probably be to add a custom property to the nodes that mark them as "Windows XP" Then you can create an asset inventory report filtered by the node custom property. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter:…

Just taking a cursory glance through the database, Memory Pages/sec doesn't seem to be a natively polled metric. I could have sworn I had seen this somewhere before, but it may have been in some SAM perfmon counters. Maybe rob.hock‌ can confirm that this doesn/does not exist in the current database natively?

answers are in this thread: Re: HELP with the sql Query on report writer

I'm not working with a LEM client this week, so I don't have live data in front of me. However, generally speaking: 1) Server 2008 R2 2) I'm assuming that "any" would be a good answer here. Generally we don't see anything at all. I don't have a good number for you here. 3) None known. I have seen this issue with service…

I just tested this in my lab with the following: Application Template: Email Message Body: APPLICATION NAME: ${N=SwisEntity;M=ApplicationAlert.ApplicationName} </br>COMPONENTS WITH PROBLEMS (FORMATTED HTML): ${N=SwisEntity;M=ApplicationAlert.ComponentsWithProblemsFormattedHtml}</br>COMPONENTS WITH STATUS (FORMATTED HTML):…

sgtp​ - I'm getting the exact same results on all of my IP SLA Operations in lab; I would open a ticket with support to ensure it is escalated as an internally tracked item. cobrien​ may have more input on whether this is a known issue at present. My lab: Platform 2017.1 NPM 12.1 VNQM 4.4.0 and a lot of other things

just sayin... why would there even BE database triggers if they weren't the best thing EVER?!?!?! sqlrockstar​ <troll level: proficient>

do you mean the label for the Row in a tabular poller? try this to see the data, adjust as necessary for your needs: SELECT TOP 1 cp.CustomPollerName ,cp.CustomPollerStatistics.DateTime ,cp.CustomPollerStatistics.RawStatus ,cp.Node.Caption ,l.RowID ,l.Label FROM Orion.NPM.CustomPollerAssignmentOnNode cp JOIN…

The notes do follow into the dbo.AlertHistoryView view though. I have no idea why they are not available on the Alert History objects with the web report engine GUI, that seems like a major oversight for sure. For Reference, this query: select top 10"timestamp",name,objecttype,"message",entitycaption,alertnotefrom…

I don't think you would need powershell at all (unless I am missing something)... SAM has a built-in component monitor for SQL Server: SQL Server User Experience monitor Basically, just setup a read-only account for the DB and write a query to get the response you want as a statistic then set your threshold on it to apply…

That's closer, but it's still not executing the actual disabling... So, here's the script: $swis = Connect-Swis -Hostname $hostname -Trusted# you need these three properties from the sensors to disable $sensor = Get-SwisData $swis "SELECT i.HardwareCategoryStatusID, i.HardwareInfo.ID AS [HardwareInfoID], i.UniqueName FROM…

you need to do something like this: select stuff from tableA ----------------- join (select count(1), b.key from tableB where b.column = "string" group by b.key having count(1) > 5 ) x on x.key = tableA.key

I'd have to see some UDT tables to be 100% sure, but I'm 85% that the answer is no (or at least, not easily). The main issue is that SW is not going to keep any data that it is not polling for. So there won't be data in the DB for anything you're not monitoring. You might be able to do a comparison across your UDT ports…

Try this one. I just tested it in my lab and it is working. (The other one had some syntax errors) SELECT CONVERT(DateTime,LTRIM(MONTH(EventTime)) + '/01/' + LTRIM(YEAR(EventTime)),101) AS SummaryMonth, Nodes.VendorIcon, Nodes.Caption, DATEDIFF(Mi, StartTime.EventTime, (SELECT TOP 1 EventTime FROM Events AS Endtime WHERE…

Open up a page on Thwack for people to submit them just like NCM or SAM templates so the community can share them instead of building each view by hand over and over. BINGO

IIRC rob.hock‌ had mentioned in a thread once that running custom SQL reports required the user to have administrator rights due to a risk of allowing non-admins to run SQL against the DB. (or something like that) EDITED TO ADD: Re: Am I missing something or does Web Reporting require admin privledges for SQL reports? Have…

I guess the next question would be where are your seeing/how did you determine, that you are only getting results every 30 minutes?

Bingo. You're going to need to be able to run script(s) from client locations. Much like using WPM Players. This would be a really solid use-case for the SAM Agent. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

First, I would ABSOLUTELY agree with the approach darragh.delaney outlines. When troubleshooting a potential attack, there is really no such thing as too much information. However, to your point of not wanting to use DPI; you should be able to easily capture this information from NTA as it is capturing the following 7…

that's is almost always my #1 recommendation for maps. use a Visio drawing! (or go to Draw.io if you don't have a Visio license)

i <3 this one!!! anything that is super high-level with easy to identify problems and easy-on-the-eyes coloring is a win

can you further define exactly what you are looking for?

From the Dell OpenManage Server Admin SNMP Reference Manual Table 1673. Array Disk Life Remaining Name arrayDiskLifeRemaining Object ID 1.3.6.1.4.1.674.10893.1.20.130.4.1.45 Description Provides PCIe SSD device life remaining in percentage. Value: 0..100, 999 - Undetermined/Not Applicable Syntax INTEGER (0..100) Access…

Right on. So there are two ways to accomplish this quickly: 1) Create an IP Address Group with only the 1 server IP you are wanting to track (NetFlow Settings > Manage IP Address Groups > Add New Group) 2) Create a filter from the Flow Navigator and save it to your menu bar -- You can actually use this to create a shortcut…

Just a real quick idea, you could theoretically write a normal component monitor alert that writes to something like the NetPerfMon event log, then create another alert that fires when you have more than X events in the log in the last Y time. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN:…

Just in case you wanted the SQL part: SELECT N.CAPTION AS 'DEVICE' ,P.UNIQUENAME AS 'UNIVERSAL DEVICE POLLER' ,P.OID ,P.MIBFROM CUSTOMPOLLERS PJOIN CUSTOMPOLLERASSIGNMENT A ON A.CUSTOMPOLLERID = P.CUSTOMPOLLERIDJOIN NODES N ON N.NODEID = A.NODEIDORDER BY N.CAPTION, P.UNIQUENAME -ZackM Loop1 Systems: SolarWinds Training and…

you could try a powershell monitor: $check=Get-Process notepad -ErrorAction SilentlyContinueif ($check -eq $null) {Write-Host "Process is not running"}else {Write-Host "Process is running"} http://babblecode.blogspot.com/2012/03/powershell-check-if-process-is-running.html Of course, this would need a little tweaking to fit…