zackm ✭✭✭✭✭

Not off the top of my head no. I would have to go digging but IIRC the work around I saw was to use the SDK to Acknowledge alerts and then add a note to the alert at the same time with the user's name. Something like that.

Any updates nicole pauls?

Thanks Nicole. To my memory, I have seen this in small environments that should only have a handful of groups within those OUs. But the >500 limitation is a good point. I look forward to any more info available.

Config Wizard would be my first choice. If you still see the issue after that, try and create a brand new alert to see if it's isolated. If the issue still persists, I would open a ticket.

surely. the limitation being that you need SNMP or WMI access to your devices. This won't work with ICMP-only devices since they show up as 'Unknown' (Of course, this should be a moot point since you cannot poll for Asset Inventory without SNMP or WMI...) Hope that helps! -ZackM Loop1 Systems: SolarWinds Training and…

You can actually do this in the report writer with a custom SQL query: (Replacing STRING MATCH HERE on the last line with whatever you want to match in your configs) SELECTn.Caption as 'DEVICE',n.IP_Address as 'IP ADDRESS',n.VENDOR,n.MachineType as 'MODEL'FROMNodes nJOINNCM_NodeProperties p ON p.CoreNodeID =…

This is the SQL behind that report; and I have tested in 2 environments today with success showing both Node Added and Node Removed events. select netobjecttype ,netobjectid ,eventtime as 'EVENT TIME' ,case when convert(varchar(10), eventtype) = 8 then 'Node Removed' when convert(varchar(10), eventtype) = 9 then 'Node…

SELECT EventType, Name FROM EventTypes ID NAME 1 Node Down 2 Node Warning 5 Node Up 8 Node Removed 9 Node Added 10 Interface Down 11 Interface Up 12 Interface Shutdown 13 Interface Unknown 14 Node Rebooted 15 Critical System Error 16 Interface Added 17 Interface Removed 18 Interface Remapped 19 Interface Changed 20…

Email sent sir. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1 Systems * Twitter: @Loop1Systems

I don't have a good DB in front of me to look at, but you would basically compare the NodesTable to the UDTTable to find anything not in the UDT side. You would need to look at the tables and see if there is a way to join across them succesfully. You'll probably need to match on NodeID and InterfaceIndex.

you would need to create a new custom SQL report you can find training in the videos section of thwack, or in the administrator's guide for NPM. https://thwack.solarwinds.com/docs/DOC-173478

This is the footer from the lab I'm testing in: Orion Platform 2016.2.100, VNQM 4.2.4, SRM 6.3.0, IPAM 4.3.2, SAM 6.3.0, DPA 10.2.0, NCM 7.5.1, VIM 7.0.0, QoE 2.2.0, Toolset 11.0.2, NetPath 1.0.1, NPM 12.0.1, NTA 4.2.1, UDT 3.2.4, WPM 2.2.1

Sorry for the typos, using my phone. :(

Here you go, just edit the message string to match whatever you write with your first alert. This will look for 3+ events over the last 1 day join events on events.netobjectid = APM_AlertsAndReportsData.ComponentID--match your message herewhere events.message like 'netpermon event log:%'--look over the last 1 dayand…

did you get this sorted or are you still looking for some help?

I've updated the query to add more granularity to the hours column. try it now.

On mobile, so please forgive formatting... I would first check to see if the pointer files and/or flat files are even in use anymore. Just because they're not old doesn't mean they're actually pointing to a Raw mapping (pointer) or still in use with a descriptor file (flat). If you can verify that they are indeed still…

Not a fix, but here's a work-around to keep you afloat. Just enter your URL manually and then add the objectID variable to the end. This is a common way that we provide links to SolarWinds based on DNS instead of server name. (PLEASE VOTE UP!!! For a node, it would look something like this:…

BINGO!!! Thanks for the help!!! For reference: SELECT d.NodeID AS DiscoveryID, PrimaryAddress AS DiscoveryAddress, Name AS DiscoveryName, n.NodeID, IP_AddressFROM DiscoveryNodes d LEFT JOIN Nodes n on PrimaryAddress=IP_AddressWHERE IP_Address is NULLANDIgnoredNodeID IS NULLANDProfileID IN…

jamison.jennings‌ nailed it and the video link from HolyGuacamole‌ is gold. On a default install, there should be a 'Training' link on your home menu bar with a solid resource for a lot of the documents and videos SolarWinds provides for their products too. As an aside, with new tools come new opportunities for training…

I haven't looked in a few months, but there should be an 'availabilitystate' metric in the f5 tables of the database. (f5_pools and f5_virtualservers) Shouldn't be too hard to get a Custom SQL alert on those. -ZackM Loop1 Systems: SolarWinds Training and Professional Services * LinkedIN: Loop1 Systems * Facebook: Loop1…

maybe this is more up to speed for you? SELECT DATEADD(mi, DATEDIFF(mi, GETUTCDATE(), GETDATE()), a.TimeStamp ) 'TRIGGER TIME' --local SQL time ,a.EntityCaption 'TRIGGER OBJECT' --what caused the alert ,a.RelatedNodeCaption 'RELATED NODE' --parentNode (will be the same as trigger object for node alerts) ,n.IP_Address 'IP…

If it's a web-based report; then you do not need to use the addition to the end of the URL. If you are now able to export to excel after running the report in the website and then clicking the "export to excel" option; then the export functionality is definitely working. At this point, if you are still not able to see the…

Perfect! Thank you both.

The irony being that affinnova is a product marketing technology firm...

Sorry, I mean the updated syntax for variables. In this instance, assuming that your alert is set for components, I believe it would be ${N=SwisEntity;M=ComponentID}

nodes interfaces volumes apm_hardwareitem all can be joined on the NodeID if you have custom pollers (UnDPs) it can get a lot more complicated

turn off the "Poll for VMware" option on the node settings page for each host you want to only poll directly through vCenter. Essentially, you only want that option checked on your vCenter servers and any hosts that are unassociated with a vCenter.

As far as I can tell, there's not a clear connection between those tables. However, assuming that you have distinct user names for your different SNMPv3 profiles, something like this should work: SELECT n.Caption 'Device' ,n.IP_Address 'IP Address' ,c.Name 'Connection Profile' ,p.LoginStatus 'Login Status'…

Are you getting these results in actual alerts or only when you test fire the alert from Advanced Alert Manager? Testing alerts doesn't always test against valid UnDP data. Generally, the test will send the results of the first data point it finds for the object; the real test is of the alert action (email, snmp trap,…