Quantcast
Channel: THWACK: Message List

Re: What Alerts Could Trigger on Node X?

0
0

Are you using the Scope section of the alert's Trigger Condition to filter the custom properties, or are you putting all of your filter values in the Actual Trigger Condition section of the Trigger Condition page?  The "All Alerts this Object Can Trigger" widget relies on the Scope section of Trigger Conditions.  If you don't properly use those, you won't get accurate data.


Re: Where can I find Log Analyzer logs on Orion server?

0
0

OK, thanks for sharing the solution back here and I will do some investigation on why the ticket went dead on you.

Remote Access VPN Tunnels - Sessions User Data Question for ASA Insight

0
0

I am noticing some potential weirdness with the data found in the ASA Insight data for Remote Access VPN Tunnels sessions.  For example, I'm noticing some users who are showing as connected for months and months and months.  That just isn't possible.  Most of our users work in the office a few days (where they wouldn't connect to the VPN) and from home other days (where they would connect to the VPN).  So how could they possibly be connected continuously for months.  Even if these users were full time work from home users, there's no way they would be constantly connected day in and day out for months and months and months.  The laptops get shut down and disconnected all the time.  See screenshot below:

My other issue is that I picked out a random user and contacted him to see if he was currently connected to the VPN.  He said he was, yet when I looked him up in the sessions table, it said he was currently disconnected and that he had last connected for less than 20 minutes that morning.  Also, it seems to display time data in UTC time because, for example, it said the user I contacted was connected from 12:06pm to 12:25pm.   It was 11:20am when I checked...  He did say he logged in at around 7am EST that morning, which would be 12pm UTC time.  Why is the data in the table not automatically mapped to the browsers local time like nearly every other widget in Orion?   See screenshot below:

 

Is anyone else seeing inaccurate data like this for user sessions?  The Firewall team is requesting some reports based on connection data in SolarWinds, but I don't want to spend a bunch of time creating this report if the data in it won't be accurate.

Re: Help with SWIS verb ValidateLogin

0
0

If you open it up in SWQL Studio you'll get a preview that suggests the form of XML it's expecting:

 

 

If you copy the XML in deviceTemplate and tidy it up, you'll have something like this:

 

<?xml version="1.0"?><DeviceTemplate xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/SolarWinds.Orion.Cli.Contracts.DataModel">  <Author/>  <AutoDetectType>BySystemOid</AutoDetectType>  <Comments/>  <Id>0</Id>  <IsDefault>false</IsDefault>  <Name/>  <SystemDescriptionRegex/>  <SystemOID/>  <TemplateXml/>  <UseForAutoDetect>false</UseForAutoDetect></DeviceTemplate>

 

Most of the elements have string values.  Id is an integer.  IsDefault and UseForAutoDetect are Boolean values.  The possible values for AutoDetectType are BySystemOid and BySystemDescription.  The key element for ValidateLogin appears to be TemplateXml.  It looks like the TemplateXml is supposed to include details about the device and OID and a series of commands.

 

<?xml version="1.0"?><Configuration-Management Device="..." SystemOID="...">  <Commands>    <Command Name="..." Value="..."/>    ...  </Commands></Configuration-Management>

Re: Solarwinds High availability configuration

0
0

dhinagar_j  wrote:

 

In our environment we have SAM agents( Agent initiated ) & these agents traffic are  incoming requests to Orion platform, So definitely i need to have a solution (Default DNS update by HA or custom Load balance solution)  to direct these traffic to active member, or does the agent have any intelligence to identify itself, which is the active member of the pool (without any above mentioned option).

 

 

Agents are fully HA aware, so they do not rely upon on either the virtual hostname or VIP. The Agents are fully aware of both servers in the pool and will attempt to communicate with the other member in the event communication is lost to the AMS. The Agent will continue hunting until the AMS on one of the members responds. Until that time, polling continues on the Agent and results are queued in the Agents SQLlite database.

 

dhinagar_j  wrote:

 

And to add, incase of agent with Server initiated communication , i assume we will able to achieve continuous monitoring, without traffic re-direct option like  "Default DNS update by HA or custom Load balance solution".

 

kindly help to validate my understanding, Please

Passive Agents (Server Initiated) are completely unaffected by HA. Whichever member is 'Active' is the one that connects to the agent to collect job results and update job definitions. Again, agents are fully HA aware and have absolutely zero reliance on the VIP or virtual hostname.

Re: Custom Tile - Alerts Filtering

0
0

Thanks wluther

 

Kindly share the query if you built anything.

Need Group Availability AVG option in report

0
0

All, I'm using the built in Group-Availability Last Month report, which works for me, but what I really need is a way to get an AVG of the availability of ALL groups listed. Can someone direct me please? Ideally, it would be nice to have that as an option within the report. Thanks! Dave B

Re: How do I run PowerShell scripts (in .ps1 format) on remote machines?

0
0

I've definitely done what you describe of just having my SAM monitors call local files.  As you said its kludgy but does the job.  The usual problem I run into here is that server admins write scripts for the purposes of things they need done, and almost never care to think about the format requirements I have in order for SW to interpret the results of their scripts or to collect monitoring-centric metrics in their scripts.

 

For me, when working in places with good script source control like a Git I have built automations where the latest version of the scripts is just inserted directly into the SAM DB.  Not sure how into the weeds you want to go with it, but all the necessary verbs do exist where you could automate the whole process of creating scripts in the repository, have that kick off a script that goes into SAM and creates a corresponding powershell component monitor with the script body being set from what's in your repo, or updating the existing component to reflect any script changes.  Within 1-2 polling cycles all the new version of the script will be in effect.

 

Getting it all to work requires a pretty strong understanding of the Orion API verbs and the SQL table relationships unfortunately, but it can be done.


Re: Monitoring drivers status for Desktops

0
0

Normally nothing in SW is checking for those kinds of things, but as a catch all you can usually write a powershell script to identify anything you want and have SAM run that powershell and store the results.

Re: export automatically the report on orion solarwinds





Latest Images