I am trying to apply the SQL Application Monitor Template to a Node using Domain\AppInsightUser but I get the error below.
I notice the Agent on the Node is trying to login to SQL Server using SQL Authentication rather than Windows Auth. SQL Log below.
"Login failed for user 'Domain\AppInsightUser'. Reason: Attempting to use an NT account name with SQL Server Authentication."
Why might this be? Could it be a bug?
Howdy.
I'm aware that you can poll Windows servers for an instance of a specific Event ID from the Windows Event Log. Normally you then use that component monitor's status in the resulting alert. Does anyone know how to use the specific Event ID that was detected in an alert? I know I'm probably looking at custom SQL somewhere but I can't find the specifics from perusing the database.
You may be asking "why do this? You already know the event ID since it's part of the Component definition?!?" I need to do this to draft the logic on the reset action. Here's the scenario:
We have Citrix servers that all get their licensing information from a central licensing server. If the licensing server goes down or if an individual Citrix box cannot contact the licensing server for whatever reason, a series of events are written in the Event log. We can detect that with no issues.
There's a subsequent message written to the Event Log after things are fixed. Different ID number. Ultimately I want to look for the presence of the second ID as the reset condition for the initial condition. If I need to include that ID in the Component monitor so that it's part of the dataset that is available that's fine but I then need to filter the alert to not trigger if the detected ID is X but still trigger if it's Y. And that variable still needs to be available to craft the reset condition.
Any ideas on how to access the detected Event ID in the Alerting system?
Hello,
I tried to access thwack at home but I got the the "forbidden" 403 error (please see image). I also tried to access thwack at work but still got the same issue. I thought the site was on maintenance or something but a friend in the U.S. showed me that
the forum is up and working. I'm currently living at the Philippines, and i'm only able to access thwack by using free VPN on the internet. Anyone got the same issue? Thanks in advance.
Morning all...
I've been migrating all of our alerts to use the Orion General Thresholds so that we could do tweaking of thresholds on the nodes themselves as opposed to maintaining a huge list of exclusions or what not. I've done it on CPU and Memory with no trouble so far.
But I'm stumped for Disk use.
I'm trying to cut alerts, but I can't seem to find the Warning or Critical Value Reached event under Volumes. I'm sure that I'm a moron and have just missed it somewhere, or I have a huge fundamental issue with understanding how this all works... Either way, anyone else been able to figure this out?
Cheers,
Wil
Orion Platform 2015.1.0 - NPM 11.5
We've been challenged to capture syslog messages from around 800 routers. It's a busy network and therefore we receive numerous messages. What we really need to do is alert on particular BGP messages from the routers. I understand that SolarWinds recommends using Kiwi Cattools for syslogging, rather than Orion. A couple of questions I have are:
- Can Kiwi Cattools be used to capture the syslog messages, and then only send a notice to Orion if/when a condition is met; thereby freeing Orion from the task of filtering all messages yet Orion would do any alerting necessary?
- How are others capturing syslogs or doing this?
Thanks in advance for any guidance or thoughts.
Hi,
Is there a way to create a alert or check in SW when the Non Paged Pool Memory fills up per this KB - https://support.microsoft.com/en-us/kb/970054
Thanks.
I am trying to run a alert message to show the PRI Trunk % utilization > 80%. I am having trouble getting the right variable to report the % Utilization against the nodes. My custom SQL variable would pick the first value returned from many lines which is not necessarily for the node I am alerting. Can some one help?
Is it possible to run this from a SAM Monitor and alert for the statistic threshold?
Trigger Condition:
SELECT VoipGatewayEndpointAlertsAggregateLast1Hour.VoipGatewayEndpointID, VoipGatewayEndpointAlertsAggregateLast1Hour.IfName FROM VoipGatewayEndpointAlertsAggregateLast1Hour
Where VoipGatewayEndpointAlertsAggregateLast1Hour.MaxUtilization > 80
Message:
The PRI ${N=SwisEntity;M=IfName} on gateway ${N=SwisEntity;M=VoipGateways.SysName} has hit ${SQL: SELECT MaxUtilization FROM VoipGatewayEndpointAlertsAggregateLast1Hour where MaxUtilization > 80}% utilisation at ${N=Generic;M=DateTime;F=DateTime}
Could anybody tell me which cisco switches are supported with NCM? We use a lot of SG200-300 switches and I was wondering if these were at all supported.
Thanks.
I was wondering if anybody else was concerned about the lack of updates/improvements to the IPMonitor software? I write a check every year to continue receiving support for the product, and I'm getting to the point where I don't see a reason to continue. It's been a very long time since the product has been updated and even longer since I've needed to call the support number.
Not sure if this is a bug or what, but I was messing around in the alerting area, grabbed a canned hw alert and went to the time of day and see this schedule "Weekly - every day" -
Went further into the Trigger actions and see this for the description ("Weekly Maintenance" schedule is applied to this action) when hovering over the little clock on the NetPerfMon Event log action --
Then went further into edit that action, and see again another time of day of Weekly - every day -
So with all of this said, where is the "Weekly Maintenance" scheduled as alluded to in the little clock next to the trigger action on the Edit Trigger Action page? Is the time of day schedule in the action grabbing the time of day setup in the alert or are these two separate functions (which is what I would think?) I don't use scheduling on any alert currently since we are all 24x7 so this may be me just be new to scheduling alerts in general.
I am using AppInsight for Exchange to monitor my exchange servers. I have 2 mailbox servers (both are VMs) set up in a DAG. The problem is that the servers are always in an UNKNOWN state, because the exchange Perfmon counters keep disabling themselves after about a day or so. I can confirm this on the exchange MB server, in the registry: HKLM\SYSTEM\CurrentControlSet\Services\msftesqllDX-Exchange\Performance, where the "Disable Performance Counters" is non-zero. I've searched the event logs and can't really figure out why it is getting disabled. And if I change it back to 0, the counters will start working again, and everything turns green--for about a day. Then something disables the counters again, and it goes back to Unknown...
I have tried re-installing the libraries from scratch, but the result is the same--it works at first, but then stops within a day. Everything in the "Information Store" is unavailable (Active Connection Count, Active User Count, RPC Requests, RPC Averaged Latency, etc.)
My active mailbox server also has some other "Custom Statistic Monitors" that are "Unknown". Not sure if this is related or not...
I know that this is not necessarily a SAM issue, just wondering if anyone had seen this before?
The product teams are busy working on a number of highly requested enhancements. Although you will not see an official SolarWinds roadmap, the "What we are working on" posts are the best reflection of what the teams are currently working on in each product. It is not a commitment to a specific feature or release date, but it should help you understand the priorities of each of our product teams. Please see the individual "what we're working on posts" for more detail.
When I am creating a user defined group in LEM is there a good way to build import items? I often have list of several items I need to add and I end up adding them all one at a time. Is there a better way to bulk import this type of data?
I need to turn asset collections on for all of my nodes that would support it; is there a good way to do this in bulk so that I don't need go and configure each node by hand?
Thanks in advance for any responses!
I have a server disk volume which the volume percent used is up at 97%. When I look at the console home page where the nodes are listed, the server indicator is green. Not until I drill down to the view [Node Details > Vital Stats] would I see there is an issue. And the volumes listed under AppStack is also green so it doesn't show any issue. However if I mouse-over the volume in AppStack, the drive space used bar is red.
The problem is server admins would not see the issue from the console and they would have to rely on the first alert notification to discover the situation. One would think the server is completely fine. Not until one drill down to each node would see an issue.
There are couple things I like to see:
1. Can I rollup the drive health state (warning or critical) to the node so it's health indicator would reflect the drive state?
2. Is there a way I can create a similar view to the top page so our server admin has a view of all the server drives in warning or critical.
Thanks
j
Has anyone else encountered this problem?
I have a Node CustomProperty that we have Account Limitations set for all users. But when I click on any of our Transaction Monitors, even those associated to a node, I get a timeout or it has the spinner for a long amount of time and never stops the Loading... spinner.
When I remove the Account Limitations from the user, the pages load quickly and no slowness appears to be present.
Let's assume we use groups maintained on different ways - group of nodes, group of groups, group of nodes, interfaces and applications. they show up status on different way - some of them as "best of ..", some as "mixed status" - others as "worst of.." Has anybody an idea if there is a way to have displayed group status mode at goup tree list? I mean - which group is showing status at worst status of member and which shows mixed? I think it is not possible but maybe anybody got a tricky way to get it shown
Maybe I missed something but didn't find explanation why reports created at web interface (and categorized with the same name as group of Report Writer's reports) are not listed within the group to get selected by 'Custom List of Reports'. I suspect a bug because even cleaning of browser's cache didn't change items on the list of reports to select. Can anybody has solution for the issue? If web based reports 'Category" is something different than reports 'Groups' by Report Writer then why I can see both listed together as members of the Category-Group? I even cannot see report created at web interface at possible reports list at all (for Custom List of Reports item for 'view').
I've got a client who is attempting to use the Duplex Mismatch detection that's available in NPM 11.5.1 and for some reason it doesn't seem to work/alert. The proper interfaces are monitored and the alert is enabled but when we initiate a duplex mismatch it just doesn't pop up. For example we hard coded a workstation to 100/hdx and the switch port to 100/fdx. If I drill down into the interface on the switch (which is monitored via NPM) it acknowledges the half duplex (hdx) but still no warning. Am I doing something wrong?
Not sure if this is an obtainable request, but I would like to do a full inventory on our servers and what they are monitoring (CPU, Memory, Network Interface, Disk Volumes etc).
Does anyone have any suggestions on how to obtain this, or has anyone already implemented something similar?