zackm ✭✭✭✭✭

Try using custom properties to route the tickets for you; you can enter up to 10 email addresses (comma separated) per custom property. Also, remember you can email to SMS; 5551234567@verizon.net for example https://thwack.solarwinds.com/docs/DOC-177456#start=25

This could most likely be done with a Custom SQL alert from the Wireless_AccessPoints_Detail table. But it would be pretty hefty for sure. Basically, you will have to join the table to itself to get the last 2 values for the specific AP, then return results when X - Y > Z -ZackM Loop1 Systems: SolarWinds Training and…

So, in SQL, that would look like this: SELECTEventsFROM dbo.EventsWHEREMessage LIKE '%PK_%'ORMessage LIKE '%OCA%'ORMessage LIKE '%GWS Open%'ORMessage LIKE '%Nuance NMS%'ORMessage LIKE '%RightFax%'ORMessage LIKE '%Hyland%'ORMessage LIKE '%PRTG%'OR(EventTypeName LIKE '%Application%') Note that the “And” condition there would…

Assuming you have all of the ESX hosts being monitored via the VMware API through vCenter or the ESX CLI, you can look at the data pulled back into the database for this: SELECT Name 'VM Name' ,GuestName 'Operating System' ,IPAddress 'IP Address' ,vDisksCount 'Virtual Disks' ,TotalStorageSize/1024/1024/1024 'Total Storage…

Are you trying to create a system where you only want to see alerts as they pertain to groups (Option A), or are you trying to isolate your single-points-of-failure (SPFs) and suppress alerts 'downstream' of specific devices (Option B)? Option A: Establish your alerts to ONLY your groups. In other words, do not enable node…

Under 'Manage Nodes', select all of the devices that you want to change, then click 'Edit Properties'. You should be able to mass-edit the polling method here. With the limitation that all of the devices you select must be currently using the same polling method. In other words, if you select 10 devices, they all need to…

i just got mine in the last few days; cross fingers for a holiday surprise!

Some requests from a client I had last week: * Parameterized reporting options (this already exists for charts, why not tables?) * Custom Table Resource with added Search and # of Rows fields (the Custom Query Resource, but for SQL) * A way to hide all of the "Classic" resources * Spark Charts and Gauges embedded in tables…

here is one i have used before for EST (you can edit the datediff line for different time zones) SELECT NodeID, Caption AS 'HostName', IP_Address AS 'IP Address', 'NODE' AS 'Device Type', ObjectSubType AS 'Polling Method', DATEDIFF(HH, DATEADD(HH, -4, TriggerTimeStamp), GetDate()) AS [Time Down in Hours]FROM NodesJOIN…

Did they (SolarWinds) tell you what tables to look at in the Database? If you have/can get that, then I would be willing to take a swing at it in SQL.

that sounds like a problem that I would submit a ticket to support for. there should be 2 general options for muting/unmanaging: immediate with no end and scheduled from manage nodes: from node details: If you're using the blue-highlighted options above, then you should open a ticket.

There's a 'bug' in the current NCM comparison criteria that breaks the certificate matching. On the highlighted rules, remove the carat (^) that limits the expression the the beginning of a line. If you look closely in your picture, line 59 is indented 1 space and lines 60 - 79 are indented even more. I would also enable…

Can you be more specific in your request? I want to monitor syslog messages and want to generate alerts on the orion NPM platform. Sure, there's a few different options to do this depending on your specific needs. I tried using syslog viewer but it only generates the alert with name real time change detection, without any…

Try this as a custom SQL report: selectn.caption as 'Device',case when j.jobtype = 2 then 'Layer 2' when j.jobtype = 3 then 'Layer 3' when j.jobtype = 5 then 'Remote Event Log'end as 'Job Type',dateadd(mi, datediff(mi, getutcdate(), getdate()), j.joblastrun) as 'Last Run'from nodesdata njoin udt_job j on j.nodeid =…

can you post a screenshot of what you are seeing? -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

Enjoy Datastore to VM Mappings

are you referring to groups of nodes or groups of application monitors? -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

You're going to want to look at the InterfaceTraffic view in the database. SELECT n.Caption AS 'Device' ,i.caption AS 'Interface' ,t.DateTime ,t.In_Averagebps ,t.In_Minbps ,t.In_Maxbps ,t.Out_Averagebps ,t.Out_Minbps ,t.Out_Maxbps ,t.Weight FROM InterfaceTraffic t JOIN Interfaces i on i.InterfaceID = t.InterfaceID JOIN…

Can you post screenshots of the rest of the tabs on your alert definition? Also, testing alert trigger and reset actions do not test the logic of the alert, nor do they always return valid status data. What you are actually testing is the ability of SolarWinds to actually perform the action. In your case, you tested the…

Can you change the drop-down option to 'Custom SQL Alert' and then post a screenshot of the full query?

could you perhaps post a screenshot of your alert conditions? that file is a beast to read! -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

1) Are all interfaces sending flows? 2) Can you move from Egress to 'Both' for the NTA chart? I'm suspecting that your NTA chart isn't showing the full picture. But that's just a guess with the information provided. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook:…

looks to be a bug. Tried the following, all fail: Caption NOT LIKE '%node%' Nodes.Caption NOT LIKE '%node%' Node.Caption NOT LIKE '%node%' Caption = 'node' Nodes.Caption = 'node' Node.Caption = 'node' IIRC, the syntax should be Nodes.Entity [Operand] [Value], using % as your wildcard. (obviously that's not working) Funny…

You can get alert history reports in the Web Console easy enough; but for this situation your limiting factor is that the default retention of alert history is = to the event log, and that is 30 days. Anything prior to 30 days just doesn't exist at this point. Going forward you can change the retention of your events…

That's a boolean value from the dbo.NodesData table in the database. It is a default data point that is created without user interaction based on some behind-the-scenes logic that looks at things like Vendor and MachineType fields. What you're probably running into is discrepancies with servers that either were missed due…

You are definitely headed down the right path. The easiest way to do this would be to discover all of your devices, create a custom property that will help you distinguish the nodes (Production - Yes/No would probably be easiest for this specific example), and then import your list of devices into the custom properties to…

As promised Interface_Percent_Loss.OrionReport - ZackM http://www.loop1systems.com

I'm not seeing any reports OOB for this. Though they should be easy enough to create... I am assuming that the text you reference should say 'resource' instead of 'reports' These are available as resources for the default Top 10 view: I'm working on a report to match. I will update when I get it lined out. - ZackM…

You should be able to do this with SolarWinds Server and Application Monitor (SAM) using the Log Parser template. Alternatively, you could skip the middle man and go right to the source with the SQL Server User Experience Monitor. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems…

you can do that in SQL easy enough, but I do not think you can in CMD line ***DISCLAIMER*** If the InterfaceAlias is pulled from a SNMP query, it will probably overwrite anything you do here. I have not tested this in production so I am not 100% sure it will work. It will absolutely update the database, but I cannot…