I know there has been discussion regarding alerting or reporting on it (Can we alert for SNMP not responding nodes? ), but I hadn't seen a custom query resource.  Has anyone built a custom query resource to show unresponsive SNMP?

I need to create a report to run at 5pm to show the daily utilization from 8am - 5pm on our MPLS interfaces. When I try to create a custom report on the interface I get a snapshot of the current utilization.

Any assistance would be greatly appreciated.

Is there a way to get the acknowledged note, timestamps and acknowledged by from active alerts and pull that from each node's view?

When adding new nodes to NPM, do you use Network Sonar or you add your nodes directly?

After receiving lots of queries i will try to explain in screen shots what steps needs to take if you wish to use custom properties logic to send email alerts to respective location / or team responsible for that node and group.

Basically when you have bunch of Nodes and you just wanted to send emails to the related department / Engineering Team only

Or You may have monitoring nodes for multiple customers where you would like to send emails to related customer for the nodes for that customer /

This post  can help in order to configure .

Step #1 Creating Custom Property

Start with Custom properties

Settings > manager custom properties.

Add Custom Properties

Leave it blank and Submit

Step #2 Assigning email to the nodes

Go to Settings Manage Nodes.

(Select multiple Node you wish to assign the email ) and click Edit Properties.

Now assign the email you wish to assign so all the alerts will be sent to respected email for these nodes .

And Submit to save changes.

Step #3 Using Custom property name under Alert Trigger Condition

Now in Alert use the custom property name to send the email for required email address for each node.

Select the Alert you wish to Edit and Edit Trigger Action > Send an email /page.

Add Trigger Action

When the alert will trigger it will use the email you have assigned to the Node.

***** Adding CC you can create more custom properties to include CC emails such as an example below ****

${Email}

${EmailCC}

PLEASE NOTE:- THIS SOLUTION WILL ONLY WORK FOR THE NODES

Hi guys

My boss would like to have a report with the Nodes that have been added the last couple of months.

I tried doing the report with the event node added, but  that event is also triggered if you move a node from one poller to the other.

And since I have been moving a lot of nodes forth and back to load balance our pollers, that report got very long

Is there anywhere in the database recorded when a node first got added??

Regards Jens W

Hello,

We would like to accumulate alert flood we have sometimes with use of dependencies. I know we should set only one parent node to one or more child objects but is it possible to have it like virtual parent object, kind of folder which doesn't contain any actual nodes.

Example structure could be like :

Parent : Virtual object which gets somehow state of child objects ?

Child: All devices from one site

So if all devices will go down parent object will be just affected and send one alert.

We have multiple sites and for each site if it will go down I would like to have just one alert but case is that we have two lines connected to two separate routers

Hi

I want to keep track of the date where equipment has been added to our solarwinds installation.

I have 365 days of rentention on the Audit events so I will start to fill out the existing Nodes manually.

But what I really would like is if I could find a way that will automatically fill out the Node added custom property when you import/create the Node.

Have any of you worked with this and poissibly found a way?? or just a pointer to how it could be done!

Regards Jens

During the discovery of a device we noticed that it will select all active disk volumes and interfaces, we would like to setup templates for Linux server's to only monitor disk volumes with "/", and "/var", and on switches we would like to only monitor interfaces on a specific device model interfaces that contain the name "XE"

Hello Everyone,

We have Steelhead in our environment, but they are unmanaged nodes. They are configured with SNMP, and when attempting discovery we see all the resources listed normally. But then we try to add the node, we get the error "The type initializer for 'SolarWinds.Orion.Core.BusinessLayer.DAL.interfaceBLDA' threw an exception." The node cannot be added.

Anyone know how to work around this?

Thanks in advance, Brent Papworth

Is there a way to get the acknowledged note, timestamps and acknowledged by from active alerts and pull that from each node's view?

I am trying to create a custom report. Inside the table layout, I am trying to get the following together.

(Node/Caption) (Node/IP_Address) (Custom Properties/Department) (Network Interface/MAC Address) (Node Current Statistics/Average Response Time) AND (Interface/Speed)

The problem is that I can not add BOTH "Network Interface/MAC Address AND (Interface/Speed)". It is either one or the other.

When I have MAC Address added and try to add Interface/Speed or vice versa. It gives me a error message:

Unrelated Data Columns in the selected category contain data that is unrelated to the other data that is already in this resource. Attempting to join unrelated data may result in slow performance or an invalid database query.
For example, response time history and syslog data are not related, so they should not be included in the same resource.
Select an enabled category to ensure that only related data are used to create this resource. If you are not able to select desired data using this method, use a SQL/SWQL query to select appropriate data sources for your resource.

Is there anyway to add this data for a custom report even though they are unrelated data?

I've installed SolarWinds NPM version 11.5 on a pre-hardened Windows 2012r2 VM.  I've since been asked to go through the Web SRG DISA STIG checklist to ensure that it's still secure.  I've run into the subject checklist item and I have no idea how to comply with it.

Details of the checklist item can be found here:

Cookies exchanged between the web server and the client, such as session cookies, must have cookie properties set to pro…

It expects me to configure the web server to disallow client-side scripts the capability of reading cookie information.  I'm not sure if this should be performed in IIS or in SolarWinds Orion.  In either case, I have no idea how to perform that kind of configuration adjustment.  Has anyone else run into this?

Adding tabs is a feature request that has been around for more than a decade. While it is not yet possible to create these via the API, they can still be easily created.

Also, while this will allow you to easily create custom tabs, I do not yet have a method to hide these tabs based on user account permissions.

So, for now, everyone will see these new tabs, and be able to click on the links within.

Having said that, if the user does not have admin permission, but clicks on the new link you created which points to the admin settings page, that use will still not be able to access the page.

So user account permissions do work.

ESTIMATED TIME TO INSTALL/PERFORM MODIFICATION:<5 Minutes

DIFFICULTY LEVEL: 1-Youngling

1. Youngling(Easiest/Most Basic; no coding experience required, no config wizard required, no system restart required, no system downtime.)
2. Padawan (Easy/Basic; no coding experience required, possible config wizard required, possible system/services restart required, limited/no downtime.)
3. Jedi Knight (Moderately Difficult/Advanced; some coding experience required/recommended, config wizard required, possible system/services restart required, limited/short duration downtime.)
4. Jedi Master (Most Difficult/Advanced; advanced coding experience required, config wizard required, system/services restarts required, 30+ minutes downtime/maintenance window recommended, and other things that I do not even know I would need to know, required...)

This mod was performed on the following SolarWinds environment/versions: (It may, or may not work on other versions)

SolarWinds Orion Platform 2018.2, NCM 7.8, WPM 2.2.2, DPAIM 11.1.0, NPM 12.3, NetPath 1.1.3, CloudMonitoring 2.0.1, SAM 6.6.1 © 1999-2018 SolarWinds Worldwide, LLC. All Rights Reserved.

WHAT DO YOU NEED?

1. Orion SDK (Installed on your Primary Orion Server) Releases · solarwinds/OrionSDK · GitHub
2. SQL Server Management Studio (You can also just use the database tool on your primary SolarWinds server)
3. A list of links you want to use in your new nav tab

Before we begin,

PLEASE don't edit the system files/database without backing them up first.

If you see a friend or co-worker making changes without backing up first, please alert the authorities.

Friends don't let friends mod without backups.

"If it's not broke, then fix it until it is."

     -The smartest person ever

SHOW ME WHAT YOU'RE WORKING WITH:

This is what we are all starting with, the basic, default, nav bar tabs. (My Dashboards, Alerts & Activity, Reports, Settings)

There are a few ways to do this. You can do it all in SQL, or you can do steps 1 & 2 in SWQL Studio, and finish with step 3 in SQL.

I will show both ways, as they are both fairly straightforward and simple to accomplish.

--Creating New Menu Navigation

STEP 1:

--First, you need to create a new group.

--The groups will be displayed on the top level of the nav bar.

--TSQL

INSERT dbo.WebViewGroup (Name,DefaultTitle,Tags,SortOrder)
VALUES ('meow','Meow','navigation',5)
GO

OR, you can do this via SWQL Studio, like so:

Open SWQL Studio, navigate down to the "Orion.Web" group, and query the Orion.Web.ViewGroup table.

Then, right click on the Orion.Web.ViewGroup table and click "create".

From here, just enter the Name (I believe all lowercase, no spaces), DefaultTitle (what will be seen on the nav bar/tab), Tags (navigation is all I currently know for this), and SortOrder (I just used the next number), then click the create button.

Either way should create your new tab on the main nav bar.

Now that we have our new tab created, let's get busy filling it up with links. Again, we can do this step entirely in SQL, or follow the same procedure for SWQL Studio as we did in the previous step, only for a different table.

STEP 2:

--Next, you need to create the links you want to see/use.

--These links will be seen when you hover over the top level nav bar groups.

--TSQL

INSERT dbo.WebView (WebViewParentID, LimitationID, Name, DefaultTitle, Type, TemplateUrl, Url, Icon, IsCustom, OpenInNewWindow, SortOrder, FeatureDependencies)
VALUES (NULL,NULL,'accounts','Accounts','legacy',NULL,'/Orion/Admin/Accounts/Accounts.aspx',NULL,1,1,0,NULL)
GO

--SWQL Studio

In SWQL Studio, navigate down to the Orion.Web.View table, query the table (just to see what already exists, using the results as a rough example, so to speak), then right click the table and click "create".

I have already added the link to the "Advanced Configuration" page, so let's add another link.

Already having an internal SolarWinds link listed, let's go ahead and add a link to a public website, thwack.com.

So, we have created a new tab ("Meow") on the nav bar, and we have created some links we want to display in/under our new tab, which leads us to our final step.

To finish our quest, we will need to find a way to tie our new items together.

This step, for now, can only be accomplished within SQL, as there is no API magic currently built out.

STEP 3:

--TSQL

--This will bind the URL you created in the 2nd step, to the group you created in the 1st step.

INSERT dbo.WebViewGroupWebView (WebViewGroupID, WebViewID, SortOrder)
VALUES (5,12,0)
GO

This query is taking our new "Meow" tab, which has WebViewGroupID 5, and our new "Thwack" link, which has WebViewID 12, and building them together.

And now we have our brand new, top level, custom menu bar tab, loaded with the links we want/need to use.

END CREDITS:

Here are some similar requests, all needing to be able to add custom tabs. Some of these appear to date back to 2007, so there have been a great many folks waiting for this.

MENU BAR AND VIEWS

Mar 27, 2007 8:45 AM

https://thwack.solarwinds.com/message/25358

ORION V10 CUSTOM TABS

May 19, 2010 2:13 PM

https://thwack.solarwinds.com/message/113077

MAIN TAB CUSTOMIZATION - ADDING CUSTOM MAIN TAB WITH SUB SELECTION OPTIONS

Oct 21, 2010 7:50 AM

https://thwack.solarwinds.com/message/126663

HOW TO ADD NEW TABS AT THE SIDE OF THE MODULES MENU TABS I ALREADY HAVE.

Nov 23, 2010 6:33 AM

https://thwack.solarwinds.com/thread/38431

CAN'T ADD MENU BARS :/

Jun 21, 2011 4:22 AM

https://thwack.solarwinds.com/message/145439

CAN WE ADD NEW TABS YET?

Feb 18, 2012 2:32 PM

https://thwack.solarwinds.com/thread/47228

WE WANT TO BE ABLE TO ADD NEW TABS TO NETWORK PERFORMANCE MONITOR

Mar 3, 2012 10:08 AM

https://thwack.solarwinds.com/message/164952

CAN MENU BARS BE RENAMED?

May 31, 2012 10:57 PM

https://thwack.solarwinds.com/message/171965

IS THERE A WAY TO ADD TABS TO THE MENU BAR IN NPM

Sep 1, 2014 7:03 AM

https://thwack.solarwinds.com/message/249667

ADDING CUSTOM TABS TO ORION WEB CONSOLE

Created on Sep 23, 2014 6:16 AM by amtizo - Last Modified: Sep 23, 2014 6:16 AM

https://thwack.solarwinds.com/ideas/4478

HOW TO CUSTOMIZE TABS AT ORION WEBSITE?

Jul 16, 2015 4:39 AM

https://thwack.solarwinds.com/message/295335

ABILITY TO CREATE CUSTOM TABS!

Created on Aug 25, 2015 2:05 PM by mbrawley - Last Modified: Aug 25, 2015 2:05 PM

https://thwack.solarwinds.com/ideas/5759

CUSTOM HEADERS / TABS IN THE MENU BAR NPM 12

Created on Jun 27, 2016 12:49 PM by kalawala - Last Modified: Jun 27, 2016 12:49 PM

https://thwack.solarwinds.com/ideas/7136

ADDING ADDITIONAL MENU BARS?

Mar 17, 2017 4:23 AM

https://thwack.solarwinds.com/message/359902

EDIT HIGHEST LEVEL MENU

Oct 2, 2017 7:24 PM

https://thwack.solarwinds.com/message/376024

FEATURE REQUEST - ADD A NEW TAB IN MY DASHBOARD

Created on May 16, 2018 8:46 AM by ccandido - Last Modified: May 16, 2018 10:38 AM

https://thwack.solarwinds.com/ideas/9971

I hope this helps you along your customized SolarWinds journey.

For more ways to customize your SolarWinds environment, make sure to check out this link, by CourtesyIT

How to do various customizations with your Solarwinds

Thank you,

-Will

I'm need some guidance, my director is wanting some kind of "visual aid" to show our higher management how we monitor and respond to alerts on the network. So needing to make flow chart and or a diagram describing how me monitor our critical servers and other nodes. I don't want to just send them a link of our SolarWinds dashboard/summary since it can be a lot to take in as non technical person. When I was in the Army I used to just draw pretty pictures in crayon for any grunt to understand, basically want to do that now but more professionally with Visio lol. Anyone have any examples of a alerting flow charts and or can give some advice? Thanks much! 

SolarWinds customers have known for a long time that the power of the Orion products lie in the ability to customize almost everything. Product managers like myself always seek to identify and promote common alterations to become out of the box content, but at times you need things faster than we can release. One example is the ability to set a classification banner. Many of our federal customers have requirements for compliance e.g. Setup SSL and Enable Smart Card (CAC/PKI) User Authentication for Orion Web Console (Legacy) including setting login text and adding a global classification banner to the web console.

By following these steps, and with a little knowledge of css styling you can place a banner to meet your classification needs, before we standardize on an easy out of the box way to do so in a future release.

Please note that as always, custom code like this one isn't officially supported, thus if you upgrade or apply a hotfix, the configuration wizard will overwrite this change when updating the website. You'll simply want to have a copy of the changes on the side so you can reapply this customization after you finalize your upgrade. This is also why we have a reminder on our upgrade guide to back up custom code before you upgrade.

Step 1 : Create foo.js

Create a text document called foo.js. The content of this file will look like the following. This is where your css styling knowledge can come into play because I doubt you're looking to have an orange banner, so you'll want to switch out the text ("My Classification Banner") and change the style to what you're looking to add.

document.addEventListener('DOMContentLoaded',function(){                window.$('#CustomBanner').append("<div class='sw-eval-mode' style='background-color:orange; position: relative; z-index: 1;text-align: center;'>My Classification Banner</div>")
}, false);

Step 2: Navigate to your InetPub directory

On my lab environment this is located in C:\inetpub, and the directory I'm interested in navigating to is: C:\inetpub\SolarWinds\Orion\js\OrionMinReqs.js

The contents of this directory should look like this:

Step 3: Copy foo.js to the OrionMinReqs.js directory and edit the bundler.config

The original bundler.config file should look similar to the following.

Add a line <file>foo.js</file> to the bottom of the list and save.

Step 4: Navigate to C:\inetpub\SolarWinds\ui\Views\Shared

Step 5: Edit _Layout.cshtml

In this file you'll be doing a Ctrl-F for  @if (displayHeaderAndFooter)

Remember that snippet of code in foo.js? Parse out the <div> part to be used in this file.

<div class='sw-eval-mode' style='background-color:orange; position: relative; z-index: 1;text-align: center;'>My Classification Banner</div>

The section will now look like you've added this code snippet in between the evaluation bar & the header

  @if (displayHeaderAndFooter)    {        <div id="swNavScroll" class="sw-page-header">            @Html.Partial("~/Views/Shared/_EvalBar.cshtml", licenseData)    <div class='sw-eval-mode' style='background-color:orange; position: relative; z-index: 1;text-align: center;'>My Classification Banner</div>            @Html.Partial("~/Views/Shared/_Header.cshtml")        </div>    }

Save your file.

Step 6: Check your results

Here I'm looking at my License Manager to check my banner

And here I'm seeing it on my Settings page

It's also present on my Orion Summary Home page

And you're done! Classification banner added.

I am trying to create custom reports, but i am having difficulty with datasource.

I want a dstatsource selection which seems like this

Node vendor is Cisco and interface errors > 0

Or is there a way to remove all entries with 0 from the output report if the datasource is only Cisco.

Hello all,

I'm trying to figure out a way to configure the "Top 10 Nodes by Average CPU Load" to only show Nodes who's CPU is spiking for more than an hour long and CPULoad>90%.

I've filtered out to only show CPULoad>90 but would like to know a way to only show current spikes lasting longer than 1 hour that's above 90%. The "Show List Nodes Properties" to be used to filter out doesn't have any properties that would work. I have very little SQL experience and have tried to find a solution on here but have came up dry.

Should i try a custom Sql statement instead of this widget?

I use NetPath in a number of ways, but the foremost is to validate that connections to SaaS applications are within tolerances all around my environment.  Having that information in a summary is very helpful.

NetPath already does that, but having a filter would be nice to only show a specific service.  What would be more awesome would be being able to give me summary information over time instead of just showing the most recent.

With that in mind, I started digging into the API to find if I could get a better summary of this information.  Much to my pleasure, I was able to find the information, but it was strewn across a few tables.  So I had to dust off some old SQL tactics in my brain to get the information.  (I'm terrible at hand-writing join queries and almost as bad when doing GROUP BY for calculating minimums/averages/minimums).

The two "tables" that I need to use are Orion.NetPath.ServiceAssignments and Orion.NetPath.Tests.

What I came up with was a little bit of SQL magic, a little bit of SWQL magic, and exactly what I needed in a resource.  I've added some comments in the script to show what I'm doing.  Without further ado, here's the SWQL script:

SELECT [SA].ProbeName AS [Source]     , [SA].ServiceName AS [Destination]     , [SA].DetailsUrl AS [_LinkFor_Source]     , CONCAT('/Orion/images/StatusIcons/Small-', [SI].IconPostfix, '.gif') AS [_IconFor_Source] -- This is the status for the most recent poll only     , ROUND([Tests].MinLatency, 2) AS [Min Latency (ms)]     , ROUND([Tests].AvgLatency, 2) AS [Avg Latency (ms)]     , ROUND([Tests].MaxLatency, 2) AS [Max Latency (ms)]     , CONCAT(ROUND([Tests].MinLatency, 2), ' / ', ROUND([Tests].AvgLatency, 2), ' / ', ROUND([Tests].MaxLatency, 2) ) AS [Min/Avg/Max Latency (ms)]     , ROUND([Tests].MinPacketLoss, 2) AS [Min Packet Loss (%)]     , ROUND([Tests].AvgPacketLoss, 2) AS [Avg Packet Loss (%)]     , ROUND([Tests].MaxPacketLoss, 2) AS [Max Packet Loss (%)]     , CONCAT(ROUND([Tests].MinPacketLoss, 2), ' / ', ROUND([Tests].AvgPacketLoss, 2), ' / ', ROUND([Tests].MaxPacketLoss, 2) ) AS [Min/Avg/Max Packet Loss (%)]
FROM Orion.NetPath.ServiceAssignments AS [SA]
INNER JOIN Orion.StatusInfo AS [SI]   ON [SA].Status = [SI].StatusID
INNER JOIN (    SELECT EndpointServiceID         , ProbeID         , MIN(Rtt) AS MinLatency         , AVG(Rtt) AS AvgLatency         , MAX(Rtt) AS MaxLatency         , MIN(PacketLoss) AS MinPacketLoss         , AVG(PacketLoss) AS AvgPacketLoss         , MAX(PacketLoss) AS MaxPacketLoss    FROM Orion.NetPath.Tests    WHERE ExecutedAt >= GETUTCDATE() - 1 -- ExecutedAt is stored in UTC, so we use 'GETUTCDATE() - 1' to get last 24 hours only    GROUP BY EndpointServiceID, ProbeID
) AS [Tests]
ON  [Tests].ProbeID = [SA].ProbeID
AND [Tests].EndpointServiceID = [SA].EndpointServiceID
WHERE [SA].ServiceName = 'Office 365' -- This is the NetPath Service Name as displayed on your NetPath summary page  AND [SA].Enabled = 'True'
ORDER BY [SA].ProbeName

Let me break it down a little bit.  First off, we are joining up three tables here.  The one that I didn't mention earlier is Orion.ServiceInfo.  This table has the status "names" based on the numbers.  I use them for pulling in the icons.  This leads to a bit of SWQL magic.

SWQL has the ability to recognize icons and links, but only if they are formatted properly.  This is where lines 3 and 4 from the above script come into play.  If you have an element in a custom query called "Stuff", then you can give it a URL named "_IconFor_Stuff" and it will be displayed to the left of the label.  Similarly, you can use the "_LinkFor_Stuff" to provide a clickable link.  As a note for the future, many tables provide a "DetailsUrl" field that's very useful for this.

I'm also using some specific SQL-like constructs - specifically joining a table to a table and joining a table to a query (which returns table-like content).  In lines 14 and 15, I'm joining in the Orion.StatusInfo table which provides the IconPostfix needed for line 4.

Later in lines 16 through 28 I'm making a query from Orion.NetPath.Tests where I summarize information over the last 24 hours.  Note that in line 26 I'm using a comparison to only pull back minimums, averages, and maximums over the last 24 hours.  You can change this, but be aware that it will take more time to execute the query.  On a 10 minute probe (the default), each probe provides 60 minutes / 10 minutes per test * 24 hours = 144 tests / probe.  Multiple this by the number of probes (4 in my environment) means the query has to summarize 576 entries into six total statistics.

Thankfully SWQL is highly optimized.  As an example me running this full query takes 0.023 seconds.  If I change the number of days on line 26 to 7 (show me the last week), then it runs in 0.59 seconds.  Like I said, the SWQL is highly optimized.

So what's all this look like?  Just edit a page and add a Custom Query widget and paste in the above query (changing line 31 to match one of your own NetPath Services) and you should get something very pretty.

I've elected to show Min/Avg/Max in multiple ways, but in a production environment, I probably only care about average.  To get just the average to display, just comment out (or delete) the unneeded elements.  In SQL (and SWQL) the double-dash indicates a comment.

SELECT [SA].ProbeName AS [Source]     , [SA].ServiceName AS [Destination]     , [SA].DetailsUrl AS [_LinkFor_Source]     , CONCAT('/Orion/images/StatusIcons/Small-', [SI].IconPostfix, '.gif') AS [_IconFor_Source] -- This is the status for the most recent poll only
--     , ROUND([Tests].MinLatency, 2) AS [Min Latency (ms)]
--     , ROUND([Tests].AvgLatency, 2) AS [Avg Latency (ms)]
--     , ROUND([Tests].MaxLatency, 2) AS [Max Latency (ms)]     , CONCAT(ROUND([Tests].MinLatency, 2), ' / ', ROUND([Tests].AvgLatency, 2), ' / ', ROUND([Tests].MaxLatency, 2) ) AS [Min/Avg/Max Latency (ms)]
--     , ROUND([Tests].MinPacketLoss, 2) AS [Min Packet Loss (%)]
--     , ROUND([Tests].AvgPacketLoss, 2) AS [Avg Packet Loss (%)]
--     , ROUND([Tests].MaxPacketLoss, 2) AS [Max Packet Loss (%)]     , CONCAT(ROUND([Tests].MinPacketLoss, 2), ' / ', ROUND([Tests].AvgPacketLoss, 2), ' / ', ROUND([Tests].MaxPacketLoss, 2) ) AS [Min/Avg/Max Packet Loss (%)]
FROM Orion.NetPath.ServiceAssignments AS [SA]
INNER JOIN Orion.StatusInfo AS [SI]   ON [SA].Status = [SI].StatusID
INNER JOIN (    SELECT EndpointServiceID         , ProbeID         , MIN(Rtt) AS MinLatency         , AVG(Rtt) AS AvgLatency         , MAX(Rtt) AS MaxLatency         , MIN(PacketLoss) AS MinPacketLoss         , AVG(PacketLoss) AS AvgPacketLoss         , MAX(PacketLoss) AS MaxPacketLoss    FROM Orion.NetPath.Tests    WHERE ExecutedAt >= GETUTCDATE() - 1 -- ExecutedAt is stored in UTC, so we use 'GETUTCDATE() - 1' to get last 24 hours only    GROUP BY EndpointServiceID, ProbeID
) AS [Tests]
ON  [Tests].ProbeID = [SA].ProbeID
AND [Tests].EndpointServiceID = [SA].EndpointServiceID
WHERE [SA].ServiceName = 'Office 365' -- This is the NetPath Service Name as displayed on your NetPath summary page  AND [SA].Enabled = 'True'
ORDER BY [SA].ProbeName

So the above returns:

Hopefully this has helped a few of you with getting your feet wet within SWQL and the custom query.  Now go forth and script around a bit.

Sorry if this has already been asked,  can you do nesting parent interfaces?  For example, say the MackDonald's Tampa restaurant, if you can’t ping the inside address of the firewall but you can ping the ISP it is most likely a VPN issue.   In that instance you would see everything go down and we would want to roll that all up into just the firewall alert.  Now if the ISP goes down we would see the ISP interface go down and then everything behind that as well.  So is it possible to have the inside interface of the Tampa firewall be the parent to all inside addresses at Tampa and then the public address be the parent to the inside interface?