Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Network Performance Monitor (NPM) > Alert on node when ICMP is OK, but SNMP/WMI is DOWN

Alert on node when ICMP is OK, but SNMP/WMI is DOWN

Table of contents
Created by Andy Ng, last modified by Shane Horgan on Jul 24, 2017

Views: 119 Votes: 2 Revisions: 8

Overview

When SNMP/WMI polling stops (when Node is on ICMP/SNMP or ICMP/WMI polling), it generally does not send a notification. The symptom you will notice is that the statistics on the Nodes e.g. CPU, Memory, etc. stop populating. If there are interfaces monitored, they will become unknown. But in some cases, there might not be interfaces available.

Environment

  • NPM 11.5+
  • SAM 6.2.2+

Steps

Use the following query:

 

SELECT Nodes.NodeID, Nodes.Caption FROM Nodes WHERE DATEDIFF(s, Nodes.LastSystemUpTimePollUtc,GETUTCDATE())>300 and status =1

 

Explanation:

  • SNMP/WMI polling will populate LastSystemUpTimePollUtc with the last System Up Time each poll.
  • If the time difference (in UTC) is greater than 300s (5 mins), and the Node Status is UP, it will trigger.

 

To add this Alert to your Installation please complete the following steps: 

  • Log into the web console
  • Click Settings > Manage Alerts
  • Click Add New from the Menu Bar
  • Give the Alert a Name 
  • In the Trigger Condition Change the drop down for I want to Alert on to "Custom SQL Alert'


     
  • Paste the Above Query into the Alert condition as follows

 

  • You can now continue the Alert Wizard as normal and define what kind of notification you would like to receive once the alert is actually triggered. 

Suggested tags : NPM, Alert, SNMP, WMI

 

 

 Reason for Rework or Feedback from Technical Content Review:   

Last modified
01:42, 24 Jul 2017

Tags

Classifications

Public