Recent Content
CMDB Sync relation overrides
Device sync has quite a mandatory configuration option about relations between SL1 devices vs Snow CIs. We have used that a lot but now struggling with some issue we noticed this "values" section. In documentation we can see this picture: which shows that there is part "values" and it is told that they are Additional Child Class Values. Then in example we have this { "cmdb_ci_db_mssql_instance": { "relations": [ { "parent": "cmdb_ci_win_server", "rel_type": "Runs on::Runs", "reverse": true } ], "values": {"sys_class_name": "snow_ci_class", "instance_name": "name"} }, "cmdb_ci_db_mssql_database": { "relations": [ { "parent": "cmdb_ci_db_mssql_instance", "rel_type": "Contains::Contained by", "reverse": false } ], "values": {"sys_class_name": "snow_ci_class", "database": "name"} }, "cmdb_ci_db_mssql_server": { "relations": [ { "parent": "cmdb_ci_win_server", "rel_type": "Runs on::Runs", "reverse": true } ], "values": {"sys_class_name": "snow_ci_class", "instance_name": "name"} } } Not much told about those in documentation, so few questions arise: when do we need to use those? Seems to be optional anyway. what are the field names to be used here. In the example snow_ci_class seems to be coming from device attributes/field from SL1, then probably the key part is the snow field? Is that correct?
Azure SMB file share level monitoring
After discovering our Azure environment we noticed that by default the Storage account utilization is monitored and has events created. But we have 4 SMB file shares on a single storage account. We're looking to monitor the utilization of each file share individually to generate events. Right now we could potentially have a file share 100% utilized and not generate an event because the storage account utilization is not an issue. Is there a way to enable this without programming it into the existing power pack?
Question on Action Policy for Event Enrichment
Looking for some inputs on how i use Run book Variable (specifically "Device Group " , %1 ) in an Action policy of type Snippet for Event source. Basically, I am trying to do some Event Enrichment via Action Policy of type snippet i.e If alert related to particular Device under Device Group then set Alert Severity to CRITICAL. Example, if org is Azure and Device Group is sql , then set severity to CRITICAL else MAJOR. Looking for correct syntax for below if EM7_VALUE ['%O'] =='Azure' and EM7_VALUE['%1']=='sql'Nexus Live: Your Data in Action with Skylar Analytics
Thinking about attending Nexus Live this year? Interested in learning more about Skylar Analytics? Then this session is for you. Here are some details: Skylar Analytics helps technical leaders get more from the data they already collect without adding new tools or pipelines. In this session we’ll share how this powerful platform unlocks new insights with little to no effort. You’ll learn how Skylar Analytics combines business context with telemetry data to surface insights that actually matterenhances operations teams and improves decision making. We’ll also explore how Skylar Analytics uses existing telemetry data to deliver focused predictive alerts and anomaly detection. In this session, you will: Understand the core components and capabilities of Skylar Analytics, including its real-time analytics understanding. Learn how to integrate business and operational data with ODBC connectivity to bring business and IT data together in one platform, replacing cumbersome methods like bulk APIs, GQL, or custom SL1 CDB queries. Explore new BI visualization options—including dashboards purpose-built for executives and ops teams—to make insights easier to share and act on. See how always-on anomaly detection and predictive alerting help your team ahead of incidents and reduce operational risk. Presented by: John Willsey, ScienceLogic Register for Nexus Live
Credentials are not inherited to Component device
Hi All, We are trying to change the credentials for a onboarded meraki organization ,but if we change it to root device that is not inherited to child components. The updates are not pushed. We can control via device template for this update , but its a time consuming process and its should be work in this way.
