Observability

There was an error loading the OLV rules on "Our SolarWinds server" in w3wp

There was an error loading the OLV rules on "Our SolarWinds server" in w3wp. Only default rules are currently available. Notification events in SolarWinds web console.

First published date

1/13/2024 1:43 PM

Last published date

2/19/2025 11:20 PM

Overview

After fresh install or post migration of OrionLog DB, you may see notification events like below in SolarWinds Web console > Alerts & Activity > Events page
image.png
And when you click on Syslog / Traps page, you get the Internal Server error. 
    "data": {
        "message": "An error has occurred.",
        "exceptionMessage": "Exception impersonating user SA_SRV_SomeAccount from domain IIS APPPOOL, error code: 1326",
        "exceptionType": "System.Security.SecurityException",
        "stackTrace": "   at SolarWinds.Orion.LogMgmt.Common.Storage.ImpersonateToken.Impersonate(NetworkCredential creds)\r\n   at SolarWinds.Orion.LogMgmt.Common.Storage.WindowsAuthentication.GetUserToken()\r\n   at SolarWinds.Orion.LogMgmt.Common.Storage.WindowsAuthentication.CreateNewImpersonateConnection()\r\n


 

Product section

SolarWinds Observability

Cause

Account access issues between WebAPI and SolarwindsOrionLog DB
 

Resolution

Verify the SQL server hosting the SolarWinds Orion Log DB is configured for Mixed Mode Authentication on the SQL Server side.
Also verify the account used to run the SolarWinds Orion Application Poll Identity. You may have to set up delegation on your network so that the ASP.NET servers can impersonate users on the Sql server machines

For more info refer to https://learn.microsoft.com/en-us/previous-versions/msp-n-p/ff647404(v=pandp.10)?redirectedfrom=MSDN