I made these queries so I can extract CSV data for use inside tools such as Splunk.  Handy for correlating event data.

# 1 day stats from 8 days ago and back 68 days (30 days @ 1 day intervals)

SELECT i.FullName,

  t.DateTime, t.InAveragebps, t.OutAveragebps, t.Averagebps, t.OutPercentUtil, t.InPercentUtil,

  t.PercentUtil, t.OutMinbps, t.OutMaxbps, t.InMinbps, t.InMaxbps, t.InAvgUnicastPkts, t.OutAvgUnicastPkts,

  t.InAvgMultiCastPkts, t.OutAvgMultiCastPkts, t.InTotalPkts, t.OutTotalPkts,

  e.InDiscards, e.InErrors, e.OutDiscards, e.OutErrors

FROM Orion.NPM.Interfaces as i

INNER JOIN Orion.NPM.InterfaceTraffic as t ON i.InterfaceID=t.InterfaceID

INNER JOIN Orion.NPM.InterfaceErrors as e ON i.InterfaceID=e.InterfaceID

AND i.FullName LIKE 'ccortc06%' AND t.DateTime=e.DateTime AND t.DateTime > GetUtcDate()-61 AND t.DateTime < GetUtcDate()-31

# 1 hour stats from 8 days ago and back 68 days (22 days @ 1 hr intervals)

SELECT i.FullName,

  t.DateTime, t.InAveragebps, t.OutAveragebps, t.Averagebps, t.OutPercentUtil, t.InPercentUtil,

  t.PercentUtil, t.OutMinbps, t.OutMaxbps, t.InMinbps, t.InMaxbps, t.InAvgUnicastPkts, t.OutAvgUnicastPkts,

  t.InAvgMultiCastPkts, t.OutAvgMultiCastPkts, t.InTotalPkts, t.OutTotalPkts,

  e.InDiscards, e.InErrors, e.OutDiscards, e.OutErrors

FROM Orion.NPM.Interfaces as i

INNER JOIN Orion.NPM.InterfaceTraffic as t ON i.InterfaceID=t.InterfaceID

INNER JOIN Orion.NPM.InterfaceErrors as e ON i.InterfaceID=e.InterfaceID

AND i.FullName LIKE 'ccortc06%' AND t.DateTime=e.DateTime AND t.DateTime > GetUtcDate()-30 AND t.DateTime < GetUtcDate()-8

# last 7 days stats (5 min intervals)

SELECT i.FullName,

  t.DateTime, t.InAveragebps, t.OutAveragebps, t.Averagebps, t.OutPercentUtil, t.InPercentUtil,

  t.PercentUtil, t.OutMinbps, t.OutMaxbps, t.InMinbps, t.InMaxbps, t.InAvgUnicastPkts, t.OutAvgUnicastPkts,

  t.InAvgMultiCastPkts, t.OutAvgMultiCastPkts, t.InTotalPkts, t.OutTotalPkts,

  e.InDiscards, e.InErrors, e.OutDiscards, e.OutErrors

FROM Orion.NPM.Interfaces as i

INNER JOIN Orion.NPM.InterfaceTraffic as t ON i.InterfaceID=t.InterfaceID

INNER JOIN Orion.NPM.InterfaceErrors as e ON i.InterfaceID=e.InterfaceID

AND i.FullName LIKE 'ccortc06%' AND t.DateTime=e.DateTime AND t.DateTime > GetUtcDate()-7

I've used custom views to show clients and my Team many different things that NPM monitors, and those folks really appreciate the service.  You can be a rock star in their eyes when you give them something that helps them improve how they and their clients understand their systems and their performance.

Here's how to build a custom View that shows current and recent WAN interface utilization between routers connecting six different data centers.  Remember, your new View doesn't have to be of just interfaces on the same switch, or on the same router.

You can build this kind of report for as many interfaces as you'd like, from any switch or router or device interface that's monitored by your NPM.  This one shows a single WAN interface on six different routers that connect into the same MPLS cloud:

Here's how to do it:

Create the view:

1. From NPM, go to Settings > Manage Views > Add

2. Customize the new view:

• Name it intuitively
• Select Summary (there are MANY types of views.  Read up on them, test some to get a feel for the extreme versatility of NPM)
• Click Submit

3. Edit the View.

• You can change its name if you want.
• I chose not to enable Left Navigation--this will be simple, and won't load a lot of info.
• I added a Custom HTML Resource to Column 1, then cloned it three times.  Next I moved one instance into Column 2, and then cloned that one twice.  I ended up with three Custom HTML Resources in each column.
• I set the width to 500 px for each
• I set No View Limitation (but you can add one in if you need it)
• Click Done or Preview.  Preview lets you see it right away, without assigning it to any Menu Bar.  Plus, you can edit those custom HTML fields.

4. Here's the sweet spot to make you rock in the eyes of your boss & peers because it gives you the power to make a really useful view:

• Open a second browser window to your NPM
• Browse to a router node and open it
• Open the interface that faces the WAN
• Look at the URL bar and note the NetObject= section.   Example:
• http://your_server_name_here/Orion/Interfaces/InterfaceDetails.aspx?NetObject=I:XXXXX&view=InterfaceDetails
• Copy or write or memorize the NetObject number for use in the next step

5. Edit your new View in Preview, or assign it to a Menu Bar and open it

• Click Edit in the top left Custom HTML window
• Give it an intuitive Title
• Fill in the Subtitle if that helps you better identify the interface or feature you're displaying
• Copy and paste this into the html window:

<img src="/Orion/Netperfmon/Chart.aspx?ChartName=MMAvgBps&Title=&SubTitle=&SubTitle2=&Width=640&Height=0&NetObject=I:XXXX&CustomPollerID=&SampleSize=1H&Period=Last 10 Days&FontSize=1&NetObjectPrefix=I&SubsetColor=&RYSubsetColor=&Printable=true&ShowTrend=True&ResourceID=27" />

• Where I've put in the X's, remove them and enter in the NetObject ID number you wrote down from the previous step
• Click Submit

The new page should open, but this time the top left window won't say Custom HTML, it'll show the bandwidth used by that router's WAN interface for the last 10 days:

Now repeat this for every Custom HTML entry you've made, but change the NodeID info to the Node ID that's shown in the Interface Details page URL for new/different WAN routers and interfaces.

OK, you've made a new View.  But your team can't access it easily until you assign your new View to the Menu Bar they use.  If you don't know how to do that . . .

Here's how to define a new View to add to a Menu Bar:

1. Go to NPM > Settings > Customize Menu Bars
2. Edit the Menu Bar you or your team will use to access your new View
3. Find your new View in the Available Items column on the left
4. Drag it to the right column, drop it in where you want it.

If you can't find your new View, you'll need to discover its URL.  Follow this process:

1. Open a second browser window and Edit the View by clicking the Preview open
2. Copy the URL for the new View when you're previewing it
3. Go back to the original browser window from step 3 and click Add
4. Type in the Name of your View, paste in the URL address, give it a good Description
5. I clicked the option to Open in a New Window.  It's your choice.
6. Click OK

Now go back to NPM's Home Page, find the new View in the Menu Bar, and click on it.

Voila!

Tweaking and tuning:

If you're not afraid of a little keyboard editing of html, you can easily change the 10 days to show the last 7 days or last 23 hours or last 17 minutes or last pretty-much-anything.  Here's how:

Look for "SampleSize" and "Period" in the code you copied & pasted

<img src="/Orion/Netperfmon/Chart.aspx?ChartName=MMAvgBps&Title=&SubTitle=&SubTitle2=&Width=640&Height=0&NetObject=I:XXXX&CustomPollerID=&SampleSize=1H&Period=Last 10 Days&FontSize=1&NetObjectPrefix=I&SubsetColor=&RYSubsetColor=&Printable=true&ShowTrend=True&ResourceID=27" />

Note the SampleSize is 1H, or One Hour.

Node the Period is the Last 10 Days

Edit each window in your view and change the SampleSize and Period to whatever works best for you.  Keep in mind that some combinations of SampleSize and Period don't go well together (e.g.:  SampleSize=1M and Period=Last 10 Months) because NPM needs to have you be reasonable.  If you want a graph showing changes every 1 minute, you have to be polling & collecting the data pretty frequently.  Pick a Period that's reasonable for seeing good granularity of 1 minute points, like Last 20 Minutes.  If you just see points instead of a line in the chart, you've picked a combination of sample size & period that's too granular for what your NPM has polled.  Adjust until you've got something that meets your needs.

Remember to keep the spacing in the html code exactly the same as the example I show above.  If you add a space between words, or remove one, you risk breaking the pretty graph output.

Some examples:

Show the Last 3 Hours, in 10-minute increments uses this code:

<img src="/Orion/Netperfmon/Chart.aspx?ChartName=MMAvgBps&Title=&SubTitle=&SubTitle2=&Width=640&Height=0&NetObject=I:XXXX&CustomPollerID=&SampleSize=10M&Period=Last 3 Hours&FontSize=1&NetObjectPrefix=I&SubsetColor=&RYSubsetColor=&Printable=true&ShowTrend=True&ResourceID=27" />

Note how the graph automatically changed "Last 10 Days" to "Last 3 Hours" in the title.  Sweet!

Suppose you like the 10 minute samples, but want to show the last 24 hours.  Just change "Last 10 Hours" to "Last 24 Hours":

<img src="/Orion/Netperfmon/Chart.aspx?ChartName=MMAvgBps&Title=&SubTitle=&SubTitle2=&Width=640&Height=0&NetObject=I:25091&CustomPollerID=&SampleSize=10M&Period=Last 24 Hours&FontSize=1&NetObjectPrefix=I&SubsetColor=&RYSubsetColor=&Printable=true&ShowTrend=True&ResourceID=27" />

If it looks great, fire off an e-mail to your Team or your Boss and show off the new functionality you've provided to the organization.

If it doesn't look great, spend a little time fixing it up.  Look for typos, fix spelling & punctuation--this is your baby, and folks will judge you by your work.

Swift Packets!

Rick Schroeder

Node Capacity forecast report

This page was developed to track all the current DISA STIGs for Brocade Devices.  All new revisions of the content within will be noted here.  I do apologize for the multiple downloads.  It is a recommended process for those new to this customization to help alleviate any "cacheing" issues when attempting to "Update Reports" within NCM.  Also, many users have requested certain parts of the STIGs they would like to check for and does not burden them with "All" STIGs. 

Please feel free to contact me if you need assistance. 

Required Custom Properties

You will need to create TWO Custom Properties for your Brocade Devices.

Name the first column "C1_DeviceType" and include the following drop-down selections:

L2SW  -  Layer 2 Switches

IL3S  -  Infrastructure Layer 3 Switches

IRTR  -  Infrastructure Routers

PL3S  -  Perimeter Layer 3 Switches

PRTR  -  Perimeter Routers

Name the second custom property "C2_OS" and include the following drop-down selections:

BROS - To support Brocade Devices support Brocade Operating System

Infrastructure Layer 3 Switches running Brocade OS

Infrastructure Router running Brocade Operating System

-------------------------------------------------------------------------------------------------------------------------

Everything DISA STIGs for your Network

Thank you for choosing this document.

You will need to create TWO Custom Properties for your Brocade Devices.

Name the first column "C1_Device_Type" and include the following drop-down selections:

L2SW  -  Layer 2 Switches

IL3S     -  Infrastructure Layer 3 Switches

IRTR    -  Infrastructure Routers

PL3S   -  Perimeter Layer 3 Switches

PRTR   -  Perimeter Routers

Name the second custom property "C2_OS" and include the following drop-down selections:

BROS - To Support devices running Brocade Operating System

This file was uploaded from the "Shared on Thwack" Tab via NCM Compliance tree.

Thanks and stay tuned........

-------------------------------------------------------------------------------------------------------------------------

Everything DISA STIGs for your Network

As the title states, I will attempt to show you how to build quick, and simple, PerfStack templates using SWQL queries. My intent is to keep it simple here, so I will NOT be going into anything that requires you to be a world class rocket surgeon.

Here is an easy way to build a list of saved PerfStack projects: Building Simple PerfStack Project Lists With SWQL

Basically, I just need a quick and easy way to build PerfStack views in bulk. When manually building a PerfStack dashboard, you are actually building the URL as you are adding the various metrics. I am simply taking that URL, and stamping it out across all nodes at once. I want to be able to build a handful of templates, to allow my team to quickly troubleshoot issues as they are occurring. I do NOT want to have someone building a PerfStack dashboard during the outage. I do, however, want them to have access to this super awesome tool, but it needs to be useful in the heat of battle. I think we will all get there, in time, but maybe this will work for now...?

Okay, in the spirit of keeping it simple, let's just start things out with a few metrics per node. More specifically, I am going to build a template that shows me the basic metrics for CPU, memory, response time, alerts, and events. Now, let's break this down...

Example NodeID: 1234

CPU

Orion.CPULoad.MinLoad

Orion.CPULoad.MaxLoad

Orion.CPULoad.AvgLoad

If you go through the steps to manually create your PerfStack dashboard, you would need to do the following:

Select the node you want.

Select the type of metrics you want.

Drag each node metric over to the graph section you want.

Using the min, max, avg cpu load metrics, on our example node (nodeid=1234), and having each on its own graph box, your URL would look something similar to this:

http://{orionserver}/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_1234-Orion.CPULoad.MinLoad;0_Orion.Nodes_1234-Orion.CPULoad.MaxLoad;0_Orion.Nodes_1234-Orion.CPULoad.AvgLoad;

And your PerfStack dashboard would look something like this:

All in all, pretty simple and easy to do.

Now, would you want to do that for each of the 1500, 5000, or 10000+ nodes you are monitoring? If so, I reckon there is no need for you to keep reading. In fact, you best get back to mass producing those graphs on your one person assembly line. For the rest of us, let's look at a simple solution.

Add a "Custom Query" resource to a summary page, and then add the following query into the resource.

SELECT
Caption
,'PerfStack_Template_A' AS [PerfStack-A]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;' AS [_LinkFor_PerfStack-A]
FROM Orion.Nodes

And, to make things a bit easier to navigate, enable the search option, and drop in the following query: (This is certainly not required, but will surely assist in tracking down the node you want to investigate.)

SELECT
Caption
,'PerfStack_Template_A' AS [PerfStack-A]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;' AS [_LinkFor_PerfStack-A]
FROM Orion.Nodes
WHERE
Caption LIKE '%${SEARCH_STRING}%'

After saving/submitting your resource, you should see something that looks like this:

See, nothing fancy... Just a simple little node search box, with a link to something.

Now check out what in one of those links...

Hmm... That looks awfully familiar... Only... You didn't have to build anything... And, whats more, it's already built for EVERY node you are monitoring.

Okay, I admit, that graph template is not all that impressive, and probably not worth much of anything... However, (yeah, there's always a however...) we can easily make a couple of changes, which should make this more helpful.

Instead of having each different CPU metric on its own graph box, let's group all 3 of them together in the same box.

This is easily accomplished by changing the inner semicolons to commas.

SELECT
Caption
,'PerfStack_Template_A' AS [PerfStack-A]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;' AS [_LinkFor_PerfStack-A]
FROM Orion.Nodes

After changing those 2 semicolons to commas, this is what our graph looks like: (since the min, max, & avg are all the same, our graph looks pretty well hidden, but as you can see on the right side, all 3 metrics are still there.)

Now, let's add some more stuff, and finish this thing up...

We are going to add the remaining items from our initial list (memory, response time, alerts, & events)

To show our progress, we are going to add new lines to our query, keeping the first draft the same. This will give us the ability to build different templates, and access them from a central place.

We are going to keep similar metrics together in the same graph box, as we did with the CPU Load metrics. We will end up with a single graph box which contains all of the CPU Load metrics, another with memory, another with response time, etc..

You are simply taking each of the individual metrics groups, and combining them together, into a single URL.

Use a comma to keep metrics in the same graph box, and use a semicolon to end the selection of each graph box.

Using the example below, first remove all of the lines that start with "--", as well as all blank/empty lines.

--CPU Load:
,'/ui/perfstack/?presetTime=last12Hours&charts=
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;

--Memory:
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.TotalMemory,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinMemoryUsed,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxMemoryUsed,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgMemoryUsed;

--ResponseTime:
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.AvgResponseTime,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MinResponseTime,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MaxResponseTime,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.Availability;

--Alerts & Events:
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Alerts,
0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Events;'

Then, just backspace the lines together, starting from the last row, and going up, until they look like this:

,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.TotalMemory,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgMemoryUsed;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.AvgResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MinResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MaxResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.Availability;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Alerts,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Events;'

Finally, just add that newly combined row to your query, which will then look like this: (Don't forget to add your SWQL _LinkFor_ alias to the end of the line, so it matches the alias name)

SELECT
Caption
,'PerfStack_Template_A' AS [PerfStack-A]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;' AS [_LinkFor_PerfStack-A]

,'PerfStack_Template_Z' AS [PerfStack-Z]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.TotalMemory,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgMemoryUsed;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.AvgResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MinResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MaxResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.Availability;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Alerts,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Events;' AS [_LinkFor_PerfStack-Z]

FROM Orion.Nodes

The End Result:

Here is my simple little SWQL query that will give you examples for each of the different basic metric types we used in the many, many, many words above.

PerfStack-A = CPU Load

PerfStack-B = Memory Used

PerfStack-C = Response Time

PerfStack-D = Alerts & Events

PerfStack-Z = All of the above

SELECT
Caption
,'PerfStack_Template_A' AS [PerfStack-A]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;' AS [_LinkFor_PerfStack-A]

,'PerfStack_Template_B' AS [PerfStack-B]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.TotalMemory,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgMemoryUsed;' AS [_LinkFor_PerfStack-B]

,'PerfStack_Template_C' AS [PerfStack-C]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.AvgResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MinResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MaxResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.Availability;' AS [_LinkFor_PerfStack-C]

,'PerfStack_Template_D' AS [PerfStack-D]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Alerts,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Events;' AS [_LinkFor_PerfStack-D]

,'PerfStack_Template_Z' AS [PerfStack-Z]
,'/ui/perfstack/?presetTime=last12Hours&charts=0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxLoad,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgLoad;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.TotalMemory,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MinMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.MaxMemoryUsed,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.CPULoad.AvgMemoryUsed;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.AvgResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MinResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.MaxResponseTime,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.ResponseTime.Availability;0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Alerts,0_Orion.Nodes_' + TOSTRING(NodeID) + '-Orion.PerfStack.Events;' AS [_LinkFor_PerfStack-Z]

FROM Orion.Nodes

The SWQL query above should show you a resource similar to:

And the "PerfStack-Z" template should build out to something like this:

**There is really no need to save this dashboard (that I know of, anyway), as the link will just open up the same exact thing, every time. However, if you wanted to use this as a jumping off point, adding other metrics for other nodes/interfaces/etc., it would probably be best to save it.**

While this is really only building single node "templates", you can add multiple nodes to a single graph with a quick copy paste, or some decent SWQL skills (which I am obviously lacking, as I don't have any a multi-node query ready yet...).

For example, the following would show the Average CPU Load for NodeIDs 1234 & 5678, on the same graph box.

0_Orion.Nodes_1234-Orion.CPULoad.AvgLoad,0_Orion.Nodes_5678-Orion.CPULoad.AvgLoad;

There is a browser/URL limitation, so, eventually, once the URL gets too long, it will not work. I believe this is why they convert the URL into a stored name, to circumvent the issue. Having said that, if you do build a super long URL, just update the database directly. (insert buyer beware, backup early, backup often, etc... )

This is, by no means, the best way to accomplish bulk "pre-built" templates for troubleshooting. However, maybe it will hold you over until the next release of PerfStack...?

Thank you,

-Will

In my opinion, PerfStack is the best new thing SolarWinds has given us, since the last best new thing they gave us. PerfStack already has plenty of things going for it, even in its infancy. There are, however, a few things I would like to see improved.

My biggest, most important, PerfStack request is definitely improving the automation of building PerfStack "Templates". Here is a very simple workaround to build basic templates for all nodes, automatically.

Building Simple PerfStack Templates With SWQL

My next request, provide an easy way for users to access all, or even a subset, of the available PerfStack projects.

While we can share links with others, giving them access to saved projects, I still found the need for a simple list of projects, easily accessible. For my environment, "hidden" PerfStack projects do us little to no good. I want my team to be able to see all projects, and access any project they need, at any given moment. The following simple SWQL query will provide an easy way to accomplish this goal.

Step 1: Customize a page, adding the "Custom Query" resource, then edit said resource.

Step 2: Copy and paste the SWQL query below, into the resource.

This simple SWQL query will generate a list of all PerfStack projects, with clickable links, taking you directly to the project.

SELECT
DisplayName AS [Project]
,'/ui/perfstack/' + ProjectID AS [_LinkFor_Project]
,AccountID AS [Created By]
,UpdateDateTime AS [Last Updated On]
,CreateDateTime AS [Created On]

FROM Orion.PerfStack.Projects

ORDER BY DisplayName ASC

Additionally, if you would like to enable search, you will need to add the following in the "Search" query box, located under the main query box.

SELECT
DisplayName AS [Project]
,'/ui/perfstack/' + ProjectID AS [_LinkFor_Project]
,AccountID AS [Created By]
,UpdateDateTime AS [Last Updated On]
,CreateDateTime AS [Created On]

FROM Orion.PerfStack.Projects

WHERE
(AccountID LIKE '%${SEARCH_STRING}%')
OR
(DisplayName LIKE '%${SEARCH_STRING}%')

ORDER BY DisplayName ASC

Step 3: View, search, sort, and click through your simple little list of PerfStack projects.

If you name your PerfStack projects with a little bit of thought, you can filter your SWQL results, only showing a small subset of projects.

Example: If you named your projects with a pseudo-label/code, appended to the beginning of the name, you could then build a list which would only show a specific subset of projects.

Let's use the "VLAN" projects for this example.

Main SWQL Query:

SELECT
DisplayName AS [Project]
,'/ui/perfstack/' + ProjectID AS [_LinkFor_Project]
,AccountID AS [Created By]
,UpdateDateTime AS [Last Updated On]
,CreateDateTime AS [Created On]

FROM Orion.PerfStack.Projects

WHERE
(DisplayName LIKE 'VLAN_%')

ORDER BY DisplayName ASC

Search SWQL Query

SELECT
DisplayName AS [Project]
,'/ui/perfstack/' + ProjectID AS [_LinkFor_Project]
,AccountID AS [Created By]
,UpdateDateTime AS [Last Updated On]
,CreateDateTime AS [Created On]

FROM Orion.PerfStack.Projects

WHERE
(DisplayName LIKE 'VLAN_%')
AND
(AccountID LIKE '%${SEARCH_STRING}%')
OR
(DisplayName LIKE '%${SEARCH_STRING}%')

ORDER BY DisplayName ASC

This query will generate the same list of PerfStack projects/links as the first one we did, however, the results are limited to ONLY the "VLAN" projects.

Now you can build your lists based on departments, or types, or anything else you deem necessary.

Again, nothing ground breaking here... Just a simple way to see a simple list, of very helpful projects.

Thank you,

-Will

Simplify and automate these patches and more with SolarWinds Patch Manager.

Check out the attached spreadsheet for recent patches.

The Patch Manager catalog contains the following products:

Change History (current month + 1):

06/14

• Adobe Air 26.0.0.118 (06/13)
• Adobe Flash 26.0.0.126 (06/13)
• Adobe Shockwave 12.2.9.199 (06/13)
• Opera 45.0.2552.898 (06/12)

06/06

• Google Chrome 59.0.3071.86 (06/05)
• FileZilla Client 3.26.1 (06/02)

06/02

• Apple Application Support 5.5 (05/15)
• Apple Mobile Device Support 10.3.2.3 (05/15)
• FileZilla Client 3.26 (06/01)

06/01

• RealVNC Server 6.1.1 (05/30)

05/31

• Opera 45.0.2552.888 (05/31)

05/26

• Opera 45.0.2552.881 (05/25)
• VLC Media Player 2.2.5 (05/25)

05/23

• VMware Tools 10.1.7 (05/18)

05/22

• Apache Tomcat 7.0.78 (05/19)
• Mozilla Firefox 53.0.3 (05/19)

05/18

• Apache Tomcat 8.0.44 (05/16)
• Notepad++ 7.4.1 (05/18)

05/17

• iTunes 12.6.1.25 (05/15)
• Mozilla Thunderbird 52.1.1 (05/15)
• Opera 45.0.2552.812 (05/15)
• VLC Media Player 2.2.5.1 (05/12)
• VNC Server 6.1.0 (05/02)
• WinZip 21.5.12480 (04/28)

05/15

• Notepad++ 7.4 (05/13)

05/12

• Apache Tomcat 8.5.15 (05/10)
• Malwarebytes 3.1.2.1733 (05/10)

05/11

• Flash Player 25.0.0.171 (05/09)
• Google Chrome 58.0.3029.110 (05/09)
• Opera 45.0.2552.635 (05/09)
• Skype 7.36.0.101 (05/10)

05/08

• Mozilla Firefox 53.0.2 (05/05)

05/04

• Google Chrome 58.0.3029.96 (05/02)

05/02

• FileZilla 3.25.2 (04/30)
• Opera 44.0.2510.1457 (04/28)
• Mozilla Thunderbird 52.1.0 (04/30)

Author’s Note: This is for Orion Core 2017.1 and higher. For older versions, please go here.

PURPOSE: Orion uses Self Signed SSL by default. This guide is to walkthrough setup to use a Domain Certificate or from Root CA, and setup and troubleshoot Smart Card Authentication Setup and Login. This also covers some additional steps needed for Single Sign on for Smart Card Authentication.

RESOLUTION: Follow these steps to enable Smart Card authentication

            Designed For Windows Server 2012, 2012 R2, and 2016.

Browsers Tested:

• Internet Explorer
• Mozilla Firefox
• Google Chrome

PREREQUISITES: Please make sure that you have the following setup prior to this document.

1. Add at least 1 Active Directory account to the Web Console before attempting. Once all steps are enabled, the Admin account will not be able to login.
2. Automatic Logon is enabled, or you run through the Setup Configuration Wizard for the next use steps.

Note: After this KB is enabled, please remember that the next time that you run the configuration Wizard, in the Website Settings select Skip HTTP Binding. If you forget to do this (this is included in the documentation below), Secure the Site for Authentication Access and Phase II will need to be redone.

PHASE I: SSL CERTIFICATE SETUP

Go into IIS:

1. Go into Start> Control Panel> Administrative Tools> Internet Information Services (IIS) Manager
2. Select the Server
3. Select Server Certificates

Create a Domain Certificate (if you have a valid CA in the Domain, use this option)

1. On the Right under Actions, Select Create Domain Certificate.
2. Enter Common Name
   • This should be the hostname or the fully qualified name that the users will connect.
   • A short name is possible, if you have a CNAME record in the DNS Server to resolve the short name to the Solarwinds Server.
   • The Common Name is required to match the name of the Web URL for all functions to work and for the site to be considered safe and trusted.
3. Fill in Organization, Organizational Unit, City, State and Country. This just needs information filled in, does not need to be factually correct.
4. Select Next
5. Select the Select button and select the Certificate Authority.
   1. If you do not see anything to select, please create a Self-Signed Certificate.
6. Enter a Friendly Name
   1. This name will be accessed under Set Web Server Certificate’s Step 8 and every-time you run the Configuration Wizard on Website.

Set Web Server Certificate    

After having completed the Domain Certificate Steps

1. In IIS, expand out the Server and Sites.
2. Select Solarwinds NetPerfMon
3. Right Click and select Edit Bindings
4. Select Add
5. Change Type to https
6. IP Address All Unassigned
7. Port 443
8. SSL Certificate select the certificate Friendly Name

Secure the Site for Authentication Access

1. Expand the Sites folder to SolarWinds NetPerfMon.
2. Under IIS, select Authentication.
3. Disable Anonymous Authentication.
4. Disable Forms Authentication.Note: If your environment requires forms authentication, attempt these configuration changes with forms authentication enabled.
5. Enable Windows Authentication.
6. Click the back button on the top of the screen to return to the SolarWinds NetPerfMon Home view.
7. This is must be setup for Certificate Selection to be seen when accessing the Website
   • Click SSL or SSL Settings.
   • Click Require SSL.
   • Click Required under Client Certificates, then apply at the top Right.
8. Use https://<SSLCertificateFriendlyName>/Orion/Login.aspx to navigate to the Orion SSL website.
   1. If a certificate error is showing up, or you see a Red X, the name of the certificate does not match the url entered. Click on the Certificate and the "Issued To:" will tell you the URL to use.
   2. If the Certificate shows as a Lock in Internet Explorer or Green in Chrome and Firefox, you are good to go.
9. After you select the Certificate and login, you will notice that the login screen may still show up. This is because Automatic Windows Logon needs to enabled.
   1. After logging in, go into Settings> Web Console Settings, Windows Account Login set to enable automatic login, then select Submit.

Optional: SQL Server database change to reflect SSL enabled and new URL

Note: Only for when the URL is not the fully qualified name of the Server

1. Log on to your Orion server.
2. Click Start > All Programs > SolarWinds Orion > Advanced Features > Database Manager. (elevated privileges are required to access this application)
3. Click Add Default Server.
4. Expand your Orion database in the left pane. Default Database names will be SolarwindsOrion or NetPerfMon.
5. Right-click the Websites table, and then click Query Table.
6. Select Execute.
7. Next you are going to reference back to the SSL Certificate Friendly Name, this name will go into the <ServerName> Field.
   1. If you do not know, do not update this column.
8. Replace the default query with the following query:UPDATE dbo.Websites SET ServerName=’<ServerName>’, Port=’443’ SSLEnabled=1 WHERE Type=’primary’
9. Click Execute Query.
10. Right click on the Websites Table again and select Query Table, and Select Execute query.
11. Make sure that the Server Name appears as correct, and a Port is set and if SSL is to be required that it is set to 1.
12. Now you will restart the Solarwinds Information Service v3 so that the Alerting and Reporting System will utilize this new URL for all actions. The Orion Web Link in the start menu will be updated at this same time.
13. Click Start > All Programs > SolarWinds Orion > Advanced Features > Orion Service Manager.
14. Select Solarwinds Information Service v3, and select Restart or Stop then Start.

Phase II: Testing to make sure it all works.

1. Open a browser on your workstation to the URL.
2. Enter a domain/User that was already added in Orion
3. You should now be at the Summary Screen.

Troubleshoot Issues

Configuration Wizard Reports Web Request for /Orion/Login.aspx failed

The Configuration Wizard will from here on erroneously report Web Request for /Orion/Login.aspx failed. Ignore this message in Configuration Wizard, it still works. This is due to the Authentication and SSL change in Phase I setup.

If you believe that this is an issue, you can go into C:\ProgramData\SolarWinds\Logs\Orion\ConfigurationWizard.log. Search for Web Request for /Orion/Login.aspx failed. The same line may report No connection could be made because the target machine actively refused it 127.0.0.1:80, this means that Port 80 http is not available. You can enable Port 80 http to have this error disappear.

From Phase I:

• If you are seeing the following problems, these are all related to the SSL Certificate Friendly Name not matching the URL, or there is no CA trust. Please re-create the certificate to match the URL that all users will be connecting.
  • Internet Explorer: Red X, There is a problem with this website’s security certificate.
  • Google Chrome: Your Connection is not private message
  • Firefox: Untrusted Connection or Your Connection is Untrusted
• If the SSL Certificate shows as invalid or has a Red X, Export to PDF and Reports may not function correctly. Friendly Name needs to match URL.

If you only see a white screen after these steps, you may have missed some steps. Please refer back to Require SSL and change it back to Ignore. The Web Console will load as before.

From Phase II          

     If the user cannot select the Certificate or it does not prompt, it is due to browser settingsInternet Explorer:

1. Select the Alt Key to bring up the Menu (IE 10 and newer), then select File> Properties
2. Look for Zone, this is needed for Step 5
3. Select the Gear or Settings> Internet Options
4. Select the Security Tab
5. Select the Zone that was seen in Step 2 and select Custom Level.
   1. You can promote the site to Trusted for better security
      1. Select Trusted Sites
      2. Select Sites
      3. Select Add
      4. Select Close
6. Scroll to the bottom, last option is User Authentication.
   1. If the User only has 1 certificate and wants it auto-selected. This will login the account that they are logged on the OS with.
      1. Select Automatic Logon with current user name and password
   2. If the User wants to select and have a choice for certificates.
      1. Select Prompt for User name and Password
7. Refresh or restart browser. You may need to clear cache for the change to take effect.

Mozilla Firefox: (only needed if it fails)

1. In the Firefox address bar, enter about:config.
2. In the Filter field, enter network.automatic-ntlm-auth.trusted-uris.
3. Double-click the Preference Name listed (network.automatic-ntlm-auth.trusted-uris)
4. In the Enter string value window, enter a comma-separated list of the URLs of the Orion Web Consoles to which you want to enable AD access, as shown in the following: https://OrionServer1,http://OrionServer2,https://OrionWANMonitor
5. Click OK.Note: You may need to restart Firefox for this configuration to take effect.

                    These instructions are adapted from "Enabling NTLM Authentication (Single Sign-On) in Firefox".Everyone else can login except for a few usersUser is required Interactive Logon for this system.                        If the user sees the above Error, Group Policy has blocked the user from accessing the System. IIS leverages the same Authenticate access as if a user was logging into the system.

1. Open up Group Policy Manager, whether on the System Directly or through GPO
2. Go into Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\
3. Check Security Settings to ensure that accounts are not denied Login Access
4. Other Interactive Login Errors can be referenced back to the Event Log on the Solarwinds Server and the Event ID. Use this Microsoft Page to identify what setting is causing the issue based on the Event ID or Message. Interactive Logon Tools and Settings: Logon and Authentication

After I enter my PIN, I get prompted for my account Login for Username Password.

          Enable Windows Account Automatic Logon.

          Go into Settings> Web Console Settings>Windows Account Login set to Enable Automatic Login; SelectSubmit at the bottom.

          If you repeat the above step after running the Configuration Wizard, follow the steps under Setup Configuration Wizard for the next use.

Thank you for using Port Scanner! A thorough Quick Reference Guide will be provided here very shortly. We appreciate your understating in this matter.

Let the community know how impressed you are with Kiwi Syslog and earn a $25 Amazon gift card!  Simply post your review in Spread The Word with the questions answered below:

1.       What was life like before using SolarWinds? (Include what you were using and why you decided it was time for a change)
2.        Which SolarWinds product(s) saved your bacon?
3.        Did you consider other options, and why did you choose SolarWinds?
4.       How has life been since you've rolled out SolarWinds in your environment?

This document was generated from the following discussion: RECOMMEND Kiwi Syslog ON SPREAD THE WORD FOR A $25 AMAZON GIFT CARD!

After receiving lots of queries i will try to explain in screen shots what steps needs to take if you wish to use custom properties logic to send email alerts to respective location / or team responsible for that node and group.

Basically when you have bunch of Nodes and you just wanted to send emails to the related department / Engineering Team only

Or You may have monitoring nodes for multiple customers where you would like to send emails to related customer for the nodes for that customer /

This post  can help in order to configure .

Step #1 Creating Custom Property

Start with Custom properties

Settings > manager custom properties.

Add Custom Properties

Leave it blank and Submit

Step #2 Assigning email to the nodes

Go to Settings Manage Nodes.

(Select multiple Node you wish to assign the email ) and click Edit Properties.

Now assign the email you wish to assign so all the alerts will be sent to respected email for these nodes .

And Submit to save changes.

Step #3 Using Custom property name under Alert Trigger Condition

Now in Alert use the custom property name to send the email for required email address for each node.

Select the Alert you wish to Edit and Edit Trigger Action > Send an email /page.

Add Trigger Action

When the alert will trigger it will use the email you have assigned to the Node.

***** Adding CC you can create more custom properties to include CC emails such as an example below ****

${Email}

${EmailCC}

PLEASE NOTE:- THIS SOLUTION WILL NOT WORK FOR THE GROUPS