zackm ✭✭✭✭✭

bingo. Nice explanation!

I use the navigation to get to a sub-area and then search from there. But that's my 2nd option. I primarily stay with the top level search because, as stated before, searching within a sub-area relies on an assumption that the threads have been organized into the "proper" areas. ("Proper" being a VERY flexible word here)…

That might be the issue. I do not think that the old win32 app Report Writer reports can actually be exported to CSV or Excel. I would remake that report using the web report writer and see if that resolved the issue. You might be able to update your URL as well, I haven't tried this in years so I can't promise it wil…

EDIT: I forgot to count your minutes on the first release. Fixed report below. I was actually coming here to recommend something very similar, but I like this better Here is the basic query. The commented out section at the bottom can be used to trim out business hours if desired. This relies on the 30 days default…

If you hover over that gap, does the popup show 0% availability? That almost looks like a data gap, where SolarWinds might have been down for that period of time and not able to truly poll the device.

Nice link Don. To expand on this, the size of your HDD for the FastBit Database is directly related to the length of retention for your flow data. It would be a good idea to try and 'right-size' this database on the front end, unless you are sure that you can easily expand your storage at a later date.…

Try these out and see if one of them works. In my lab the APM_ComponentTemplateSetting table gave good values, but I think that the APM_ComponentSetting table would populate with any monitors where you override the template settings. Also, you will want to replace the ${ComponentID} variable placeholder I have here with…

Great observation. In this situation, it was actually that the client had disabled WSUS reporting when installing SCCM. Updating that and then running some new inventory jobs got everything straightened out. Configuring Software Updates in Configuration Manager You can also configure whether to create WSUS reporting events…

Those sound like NTA resources. I would open a ticket with SW for that. There are a few known issues with some of them that I *think* are being addressed with the next release, but you might want to bring this to their attention.

Business Hours reporting was made available in the Web Report Writer starting with Platform 2016.x (NPM 12) -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

Go ahead and post your SQL query here so we can see what you're working with please. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

I don't have a lab to look at this in at the moment, but I would trust your input here. If it requires CIDR, then I can definitely update the report. Has this been confirmed in earnest at this point, or is it just a theory?

awesome stuff buddy! one note; the snapin is being deprecated; I would update scripts to use the official module from the PS Gallery. PowerShell · solarwinds/OrionSDK Wiki · GitHub

Love this post! The only thing I would add would be that, if you don't have Engineer's Toolset, you can use any syslog test appliance, I personally like TheOne Syslog Sender

Love it! You can make this report outside of NCM as well, for those who don't have the module: SELECT ip.Node.Caption AS [Node] ,ip.Node.DetailsUrl AS [_LinkFor_Node] ,ip.Node.IP_Address AS [PollingNodeIP] ,ip.Interface.Caption AS [Interface] ,ip.Interface.DetailsUrl AS [_LinkFor_Interface] ,ip.IPAddress AS [InterfaceIP]…

Great catch!!! I had that in there to account for some NULL values in our lab. Thank you for bringing that to my attention. The report has been updated.

Love it; it was a lot of fun collaborating with you on this on dgsmith80​!

head's up; jbiggley​ ran across this today reviewing the release notes for our upgrade tomorrow: Orion Platform 2018.4 Release Notes - SolarWinds Worldwide, LLC. Help and Support tl;dr - not dead yet, but the bombs are en route to blow up the old things. As this platform release came last October, I'd assume we're getting…

go to requestb.in and setup a test page, then target that. it will enumerate your payload for you.

be warned; this is untested because we don't have any muted groups in our environment (I'm not even sure that's a native function outside of the API); but The App/Node/Interface parts I use in my environment so I am pretty sure the Groups will work too. note: you may have to massage this a bit; I use this externally via…

That's an actual Log file. What you are looking for is the AlertHistoryView view (or the corresponding AlertHistory table) in the database. The table should be accessible from the DB Manager application. The view will not be (which is a really good reason to always use SSMS!) -ZackM Loop1 Systems: SolarWinds Training and…

I saw that once when developing the process, but haven't been able to replicate it since. (I've run it in about 6-7 other environments since inception)

This is a SWQL query (not SQL). Did you try running the script in SWQL Studio? Otherwise, I just looked at my lab and it is still working there. I am not sure where the issue would be. For my lab, I use the "Custom Query Resource" to build this out.

you need to use the "Add Double Value Comparison" option

have you tried replacing ${VolumeID} in your SQL variable with ${N=SwisEntity;M=Volume.VolumeID}

Great point! Updated the post with your notes. Thanks.

you would need to author a new alert. those screenshots are from the alert engine while I was testing this idea. I put a few links in the beginning of the post, one of them is a pretty nice SolarWinds lab video that covers the "How to" portion of alerting.

Sort of. You can run this for any device type that is supported by Hardware Health polling. However the script is designed to be run against a single PollingMethod at a time. (Gathered from Step 2) So, if you have 4 Cisco devices that all use polling method 9, and 2 f5s that all use polling method 12; you would run the…

thanks for the notice, updated to use SWQL and avoid any future schema changes

I think this is the right link for the "Help" in the questions: THWACK & Customer Portal SSO Frequently Asked Questions