UDT Whitelisting FAQ

Posted by cvachovecj Aug 30, 2013

Now with version 3.0 of SolarWinds User Device Tracker (UDT) you can define a set of rules to determine if a network device belongs on your white list. If so, the device appears in UDT resources list as a safe device. Devices connected to your network that are not on the white list will appear in the Rogue Devices resource list and an alert will be automatically generated for each of them. You can also define a set of rules that determine if a network device should be ignored by UDT. If so, UDT discards all related data. This is handy for HSRP and VRRP MAC addresses.


Although the purpose of whitelisting seems crystal clear at first, you quickly realize that its possibilities extend far beyond 'a list of devices'. This is certainly a big feature, so let’s talk about some of the common questions you may have when getting familiar with this new functionality.


What is the Default Setting?

By default we whitelist everything. Therefore, when you install / upgrade to UDT 3.0.x, the white list contains three rules: Any hostname, Any IP address, and Any MAC address. These rules mark any connected endpoint as safe, thus preventing your new UDT 3 system from being flooded by rogue device alerts. When you want to actually use the white list, you have to disable some of the rules first.




Another part of this feature, that comes pre-configured with the installation, is the list of ignored MAC addresses. It includes both HSRP and VRRP ranges.




When is an Endpoint 'Safe'?

An endpoint is considered safe (i.e. not marked as rogue) when its hostname, IP address, and MAC address are all on the white list. In other words, if e.g. the MAC address in on the white list but the hostname not, an alert will be generated.


I Only Want to White List MAC Addresses

If you don't care about hostnames and IP addresses, simply leave the default rules 'Any hostname' and 'Any IP address' active and disable/delete the 'Any MAC address' rule. Then create your own rules for MAC address.


Can I Create a Black List?

No. The current logic considers rogue every endpoint not on the white list. If you are interested in the other approach (everything is safe and only listed devices are rogue), please vote here:


I Would Like UDT to Automatically Shut Down the Port Where a Rogue Endpoint is Connected

This is currently a feature request:

It can be achieved via Orion SDK/API plus advanced alert manager, but this approach is not officially supported as functionality like this would have to be used with extra care -- for example, you probably don't want to shut down a trunk port.


How Do I Specify White List Items? How Do I List the Safe Devices?

On the 'Included' tab click on 'Add new':




and then you have several options:


Individual Entries

You can add individual MAC addresses, IP addresses, or hostnames:




For one rule you can only add one type (e.g. MAC addresses).


IP Address and MAC Address Range

UDT-WhiteList-Add-IP-Range.png        UDT-WhiteList-Add-MAC-Range.png





Custom Entries

The last option gives you very high flexibility. You can enter IP addresses, MAC addresses, or hostnames. Again, only one type per rule.




How Do I Import My List of Safe Devices?

If you have e.g. a list of MAC addresses that represent safe devices on your network and want to add them to the white list. How do you do it?

  • If there is a pattern in the list, you can use the MAC Range or Custom entry with wildcards.
  • If there is no pattern, then it's probably best to format the list as a plain text file and copy-paste the content to the Custom entry field.


This blog post will be updated regularly based on the question we receive. If you have a question that is not answered here, please let us know.

Let's Welcome the new "World Map" resource




If you've already had a chance to upgrade to the NPM 10.6 or SAM 6.0 RC's, you may have noticed the new "Worldwide Map" resource.



For those of you that have been requesting this feature, or maybe already framing in Google Maps with your own API key to display dynamic map content, this new resource will be a real treat.

Worldwide Map has the capability to display the status of nodes or an aggregated group of nodes over dynamically updated street data.

Perhaps you're an ISP that manages customer premise equipment all over town? Worldwide map makes it easy to layout and view where your equipment is, and it's relative status. Manage a campus environment and want a birds-eye view of your gear? This new resource has you covered.

To add nodes to the map, simply click "Manage Map" and "Place Nodes on the map"


Just select where you want the nodes, what nodes are to be placed at that location, and click submit. That's all there is to it.

If you placed a group of nodes, the status of the icon will reflect the "worst" so you instantly be able to see if a node is in a down status.

To select the default position and zoom level, simply "Edit" the resource.


In the future we can look at adding support for other objects, or borrowing some further functionality from the Network Atlas playbook.

What else would you like to see added? Please Let us know in the comments below.

Superseded by this page: EOC - What We Are Working On - Mar 2015

Please bookmark that page and follow it.

We are pleased to announce the general availability of Serv-U FTP Server and MFT Server v15. The contents of this release contain exciting new features and improvements, namely,


  • File sharing in Serv-U MFT Server
  • New Web Client user interface
  • Rebranding of the user interface
  • FTP Voyager is a FREE tool and no longer requires an activation key


You can view the full set of release notes here.


To learn more about new features in this release see this blog post.


Download Serv-U now and have fun!

You can find the installation packages in your customer portal.

This service release delivers the following fixes:

  • Fixed multiple SSID issues.
  • Fixed an issue where user information was not being displayed.
  • Fixed issues with database maintenance not completing.
  • Fixed issue where "All Network Connections" resource would not load until clicking the refresh icon.
  • Fixed issue where Wireless resources popup shows invalid data.
  • Fixed issue with false MAC address alerts.
  • Fixed issue with alerts not triggering for new MAC addresses after upgrading UDT.
  • Fixed SSID association issue with Cisco wireless devices.

More details can be found here.

Now that we have released Network Configuration Manager v7.2 (NCM), it is a good time to take a look at one of its most awaited features: End-of-Life / End-of-Support (EoL/EoS) information management. The purpose of this post is to set expectations on what this feature is/isn't and to provide a few tips for using it in the most efficient way.


As I outlined in my previous posts on this topic,

you may try to solve the EoL/EoS problem in different ways ranging from a do-it-yourself, spreadsheet-based approach (cheapest but most difficult) to an automated third-party service (fastest but most expensive and may require access to vendor-specific service APIs like e.g. Cisco CDS opened only to Cisco partners).


This new NCM feature, which we have just delivered, enables you to manage the EoL/EoS dates in a much more convenient way than a spreadsheet, because it is connected with other information about the devices that NCM stores.


How is This Feature Going to Help?

  • We provide suggestions for Cisco and Juniper devices out of the box. (For other vendors, you can enter your own information.)
  • You do not have to track the end-of-life information in a spreadsheet.
  • You can group, sort, and filter your devices according to node details and custom properties.
  • Once end-of-life data is entered, you can generate a highly customized report. (See the second blog post.)


What is the EoL/EoS Feature NOT?

  • A fully automated solution that will report all the end-of-life information automatically.
  • A complete multi-vendor database of different devices and extension cards. Today, this NCM feature handles devices only; not cards and modules, yet.


Typical Workflow

  1. Notice the "End of Support" view under the Configs tab. (Note that this feature is only available in the Web console and not in the Win32 client.)
  2. Select the devices you want to define end-of-life information for.
    You can do it in many different ways using e.g. the Group By drop-down box on the left side and/or filtering on column values in the main group. Most probably you will want to define the same EoL/EoS information for a group of devices of the same properties -- e.g. machine type, firmware version etc. You can see the applied filter(s) in the top left corner.

    NCM EOL Summary Page
  3. Select the resulting devices and click on "Assign Dates".

    NCM EOL Summary Assign Dates
  4. Inspect the suggestions and either
    • select one of the suggested pieces of EoL information,
      (We provide external links to vendor pages that help you choose the correct item. You can also enter a comment that will be displayed in the resulting report.)

      NCM EOL Assign Page
    • or, if our database does not provide any suggestions, enter your own data.
      (In addition to the dates and comments, it is advisable to insert link to the source of the information.)

      NCM EOL Summary Assign Page Custom Dates
  5. Click on "Assign".
  6. If interested, create a report. You can filter the columns as you need and also export the result as spreadsheet.

    NCM EOL Report

Vendor Information

If our database does not provide suggestions to choose from, you can look up the end-of-life information yourself. An alternative to search engines are vendor pages. Here are a few of them:


We would also like to encourage you to post your EoL/EoS data item on thwack here:

Ideally in the following format:

Device Type, System description, end-of-sale date, end-of-support date, Vendor EOL statement URL


NCM 7.2 is now available for all customers on active maintenance in the customer portal.  Please check out EoL/EoS and let us know what you think.


As a bonus, you can watch this video about EoL/EoS:

Individual User Profiles Release


On August 14th, SolarWinds will be offering a subset of our customers the opportunity to create an individual user profile for their customer portal experience. We will continue to roll this feature out across our entire customer base within the next month. You will be automatically prompted to create the individual user profile when your SolarWinds Customer ID (SWID) is included in this rolling release.

During this month-long rollout period, customers will be given the choice to continue using the legacy SWID & Password experience or create their individual user profile. By the end of the month, we will require all customers to enter the customer portal via their individual user account.


Frequently Asked Questions About Individual User Profiles:


Will I still log in with my SolarWinds Customer ID (SWID)?

Until you create your individual user profile, you will continue to login with your SolarWinds Customer ID (SWID) and password. After we complete the release of individual user accounts and you have created your individual profile, you will no longer be able to log in to the Customer Portal using your SWID.


Do I still need my SWID?

Yes, your SWID (SolarWinds Customer ID) is still used to identify your account with SolarWinds. When logged into the portal, you will be able to see your company name and SWID at the top of the page.


What is the new individual user profile, and why do I have to create one?

For purposes of logging in, changing/resetting passwords, managing account information, and more, you will now use a login based on your email address instead of a shared SolarWinds Customer ID (SWID). This will make is much simpler for you to manage your account, and more secure for you as well, because you will no longer have to share credentials among multiple team members.


Help: I can't create an individual account?

In order to create an individual account, you will need to already have a SolarWinds ID (SWID) and be a SolarWinds customer. You will use your SWID and password to create your user profile. If you do not have a SWID, but are a customer, contact customer service to get this. If you do not know your password, use the SWID password retrieval links on the Customer Portal log in page to retrieve these. You need to be listed as your account's primary contact in order to recover these credentials.


What are the different types of individual account? How do I know which one I have?

Currently, there are two types of accounts. Standard Access and Account Administrator. Standard access allows you full access to the customer portal as you know it today. Account Administrators have access to additional account administration functionality within the portal and can modify contact types and roles for other users on the SWID.


Are there plans to add more roles?

Yes, we are planning to add additional roles and more granular access levels in the future.

I am the main contact on my account. Can I add other users to the account?

Yes, you can add contacts and users to the account. You will need to do this from the Company Account Settings screen. The only way to access this page is to be listed as an Account Administrator.


How do I become an account administrator for my company?

When you create your individual user profile, if you are already listed as the business or billing contact on your account, you will have admin access the next time you log in to the portal. Otherwise, in order to request this role, please submit a support ticket for customer service -


I have access to several different SWIDs. Do I need different user profiles for each SWID's Customer Portal I need to log in to?

You will only have one user profile for your email address. This profile can be linked to access multiple SWIDs.


How do I link different SWIDs?

You can link your user profile to additional SWIDs by going to your User Profile Settings page after logging in to the Customer Portal. In order to link to an additional SWID, you will need to the SWID and Password for the account that you wish to link to. Your user profile will be linked to the additional SWIDs. The account must be associated with the same email address you used to setup your user profile. You will use one user profile to log in to multiple accounts using this method.

Can you help me create an individual user profile?

Please refer to the tutorial below on how to create your user profile for the first time. We tried to make the process as simple as possible, but if you do experience issues while creating your account, this tutorial should help.


Can I change my password for my user profile?

Yes, you can change your individual user profile password from within the customer portal on your profile page.


What if I forget my password?

You can get a temporary password and reset it to a new password using the Forgot Password link on the SolarWinds Customer Portal login page.


What if someone else in my organization forgets their password?

The user who has forgotten their password will need to reset the password themselves.


Will Customer Service give me my password if I forget it?

No, for your security, SolarWinds Customer Service will not have access to your password. You will need to retrieve and change your user profile password yourself. 

How do I make updates to my company’s information that is on file with SolarWinds?

On the Company Account update page (accessible by the account admin), users can download and submit the Account Information Update form and submit this to customer service via email to be updated.


What if I need the password for my shared account in order to create a user profile?

The person who is listed as the primary account contact with SolarWinds can retrieve this information using the Forgot Password dialog and clicking I need to retrieve account information for a SWID. This will allow the primary contact to retrieve the shared credentials that are needed in order to create an individual account.




How to create and features of Individual User Profiles - Version 2


When you come to the Customer Portal, you will use your SWID and password as you have in the past if you have not created your user profile. If you have created a user profile already, log in with your email address and the password you selected.


cp log in page.png


After logging in with the shared credentials, you will be taken to the following page to create an individual user profile. Click get started, and head to the form. If you have already done this, click I'm already set up and log in. If you choose to setup your individual user profile later, click I'll setup later



Fill out all fields on the form to create your account.


Screen Shot 2013-08-07 at 2.21.13 PM.png


After filling out this form, click Create Account and you will immediately be logged into the customer portal. After your initial log in, you will receive an email to the account provided with a link to confirm your account. You are required to click on the link before your next log in to the customer portal. If you do not confirm your account, you will not be able to log in.


confirm account modal.png


If you return to the portal and re-enter your shared SWID credentials, you will be prompted again to create a user profile. If you have already created an user profile, simply click on the Log In button. We recommend that if you have access to more than one SWID, that you link your user profile to the other SWIDs, so that you only have to remember a single set of credentials. To do this, log in to your account and navigate to the user profile settings page:


home page unconfirmed account.png

On this page, you will have the option to link to another account. You will need the SWID and password of that account in order to link it to your user profile.


link profile screen.png

If you are the administrator for your account, you can also access the company profile settings screen where you can view users who have access to the Customer Portal for your company, add users, assign roles and contact types and review other information related to your account.


company profile settings page.png


manage user interface.png


If you have any questions regarding your individual user profile, please reach out to customer service

We are pleased to announce the general availability of Network Configuration Manager v7.2.


Version 7.2 includes the following enhancements:

  • Continue moving functionality from Win32 client to Web UI
    • Job management (Windows Task Scheduler not used anymore)
    • Config management (edit, delete, set baseline)
    • Possibility to test device login credentials
    • Import config from file
  • Provide End-of-Life information for managed devices.
  • Multiple global connection profiles
    • Define multiple connection profiles (device credentials, protocol, port etc.)
    • NCM will try which of the predefined connection profiles works for a device (configurable per device)
  • The execution of Config Change Templates can be scheduled.
  • Change Approval System enhancements
    • Approved requests to be executed at specified date/time
    • Approved requests to be returned to requestor for execution
    • Requesters can see a history of what they requested and was approved
    • Approvers can see a history of what they approved
  • SNMPv3 -- Support of AES-256 encryption
  • Inventory for Brocade devices
  • More devices supported natively (Palo Alto)
  • Config Change Template Extensions: 'delay' command, string <-> number conversion
  • Make downloaded configurations searchable for IP addresses with FTS enabled.
  • Security enhancements of the Web UI
  • Support for database encryption using MS SQL TDE.


NCM v7.2 is available for download in your customer portal for those customers under current SolarWinds NCM maintenance.


You can view the full set of release notes, including problems fixed here.


Enjoy NCM 7.2!

It is with great pleasure I introduce Virtualization Manager 6.0, fulfillment of the dream of deep integration with SAM (Server & Application Monitor) and NPM (Network Performance Monitor). This isn't simply embedding a view or two, but real contextual integration into Orion views and resources allowing you to navigate seamlessly from App to VM to Host to Datastore/CSV without ever leaving the familiar interface of SAM and NPM.  Is it perfect? - well no (at least, not yet), but it is a huge step forward and has been your most requested features on our Thwack ideation forum. But enough with the pleasantries, lets get down to business!




What's New In 6.0?

This release is a smörgåsbord of goodness, including large features and small enhancements, plus numerous bug fixes as well.  We will cover the most important and asked for features in this blog post.


Integration with SAM and NPM

The goal of integration was to expand the breadth of virtualization data in SAM & NPM, but maintain a seamless experience in the Orion GUI, with contextual linkages to Virtualization Manager when needed.  The focus for the data was around storage (datastores, local volumes, cluster shared volumes) and how it relates to other nodes - mainly hosts, VM's and applications.  Here is a quick video showing the kinds of issues you can solve with the integration:



To cover these new capabilities, let's list the different integration points (Views, Resources & Links) and their benefits:


New Views:

Let's start out with the 6 new views added to SAM and NPM that appear after you install/upgrade and turn on the integration. Under the virtualization tab, you will see the 5 new links (click on the image to brief video).  The datastore view is available via links from other views.




ViewDescriptionUse Cases and BenefitsImage

High level summary of storage capacity, usage and performance of all the storage in your virtual environment in a single view.  Resources Include:

  • Virtualization Storage Summary
  • Top 10 Datastores by Low Free Space
  • Predicted Datastore Space Depletion
  • Top 10  VMs by Storage Consumed
  • Predicted VM Disk Depletion
  • Top Datastore I/O Latency
  • Top Datastore IOPS
  • Top VM Latency
  • Top VM IOPS

From this view, you can see capacity and performance across the entire virtual environment, generally emphasizing where you have issues:

  • Identify the busiest Datastores, drill down to identify which VM and Application is causing the load.
  • Identify the busiest VM's, drill to the datastore and see what other VM's are affected.
  • Identify which Datastores and VM's are low on storage and which ones will run out first.
  • The Storage Summary (aka "the bragging screen") lets you know how big your virtual storage environment really is.

Wait - there's no "datastore" link in the Virtualization Tab!  Correct - you link to this view from other virtualization nodes (VC, DC, Cluster, Host, VM).  We use the name "datastore" to represent any storage managed by the host - i.e. datastores for VMware and local storage and cluster shared volumes (CSV) for Hyper-V.

The datastore view unifies three different areas:

  • Datastore capacity, usage and growth.
  • Datastore relationships with both applications and virtualization nodes (VC, DC, Cluster, Host, VM)
  • Datastore performance (IOPS and Latency) overlaid with the busiest VM's

Resources on this view include:

  • Virtualization Manager Tools - Links directly to Virtualization Manager features (see more below)
  • Virtualization Manager Alerts (see more below)
  • Datastore Info
  • Datastore Usage
  • Related Nodes - related clusters, hosts and VM's
  • Applications on this Datastore - which applications are running on this datastore, more info on this one later.
  • Top 10 VMs by Used Space
  • Top 10 VMs by Allocated Space
  • Top 10 VMs by Low Storage Space
  • Datastore IOPS and Latency Gauge
  • IOPS: This Datastore and its Top VMs
  • Latency: This Datastore and its Top VMs

This view combines all the key data onto one screen to show you contention between VM's at the datastore level, allowing you quickly identify which VM's are the source of the issue and what other VM's and applications are affected.

  • Identify contention on a datastore, drill down to the VM causing the load, investigate applications and services on that VM.
  • Identify over allocation from thin provisioning.
  • Find which VM's are using the most storage or about to run out of storage.
  • Quickly see what Applications and VM's are using this datastore, with status and drill down.
  • Visually map relationships between the datastore and other nodes, ranked by current status.
  • See additional alerts (from Virtualization Manager) indicating configuration and performance problems, drill down to see suggestive corrective actions.

Summary of actions you could take in your environment to optimize resource utilization, including removing VM's, decreasing resources assigned to under utilized VM's, and increasing resources to busy VM's. Resources include:

  • Top 10 VMs by Underallocated CPU
  • Top 10 VMs by Overallocated CPU
  • Top 10 VMs by Under allocated Memory
  • Top 10 VMs by Over allocated Memory
  • Top 10 VMs by Snapshot Disk Usage
  • VMs Idle for the Last Week
  • VMs Powered Off for More than 30 Days
  • Rightsizing: Once over and under allocation problems are shown, drill down to the VM and see what applications and loads are on the VM and then decide to increase or decrease resources to that VM.
  • Reclamation: Reclaim resources by decommissioning and removing idle VMs, removing VMs that are not running, and deleting old snapshots.
MapShows the Virtualization Manager Map within the SAM/NPM website.  The Map shows the relationship of virtualization objects and is ranked by object status.  Bonus: When you click on an object in the Map (Cluster, Host, Datastore or VM) it opens up the corresponding node in SAM or NPM.  .
  • Visually understand relationships in your virtual infrastructure and where issues are currently occurring.
  • Focus on an issue by altering the context on the Map to any node.
  • Quickly drill down to the SAM/NPM node view to diagnose application, OS and network issues.
ReportingShows the Virtualization Manager reports in the SAM/NPM website.Allows you to run reports and see the results in a single pane of glass.VMan60ViewReports.png
DashboardsShows the Virtualization Manager dashboards in the SAM/NPM website.  You are able to switch to any dashboard while staying within the Orion website. Most links in the dashboard drill down to the corresponding SAM or NPM node.

Allows you to leverage all the default and custom dashboards from Virtualization Manager without leaving the Orion website, but with the ability to drill down to nodes in SAM/NPM.

  • Identify overloaded nodes, drill down to the corresponding SAM/NPM node and review application, OS and networking data..

If this is enough to convince you, jump to the download and install instructions. But if you want to know more, read on.


New Sub-Views

Sub-Views appear in tabs on the left of the node you are viewing.  When you turn on the integration, a new "Storage" sub-view will appear for all Virtualization Nodes, including the Virtual Center, DataCenter, Cluster, Hosts and VM's.  In general, the Storage sub-view has the same resources as the Storage view detailed above but for just that slice of the virtual environment - i.e. if you drill down to a cluster, then click the Storage sub-view, you will see storage, datastores, hosts and VM's that belong to that cluster.


Sub-ViewDescriptionUse Cases and BenefitsImage

Storage Sub-View


  • Virtual Center
  • Data Center
  • Cluster
  • Host

Same view and resources as the Storage view, but data is filtered for the appropriate node (Virtual Center, Data Center, Cluster and Host).  Resources included:

For all virtualization Nodes:

  • Virtualization Storage Summary
  • Top 10 Datastores by Low Free Space
  • Predicted Datastore Space Depletion
  • Top 10  VMs by Storage Consumed
  • Predicted VM Disk Depletion
  • Top Datastore I/O Latency
  • Top Datastore IOPS
  • Top VM Latency
  • Top VM IOPS

The cluster and host add these Resources:

  • Virtualization Manager Tools
  • Virtualization Manager Alerts

This Host also adds this Resource:

  • Related Nodes

The Storage sub-view slices up your resources according to your virtual environment configuration, allowing you to focus your attention on the data in each area.

  • Identify the busiest Datastores, drill down to identify which VM and Application is causing the load.
  • Identify the busiest VM's, drill to the datastore and see what other VM's are affected.
  • Identify which Datastores and VM's are low on storage and which ones will run out first.
  • Cluster, Host & VM: Visually map relationships between the datastore and other nodes, ranked by current status.
  • Cluster, Host & VM: See additional alerts (from Virtualization Manager) indicating configuration and performance problems, drill down to see suggestive corrective actions

Storage Sub-View for:

  • VM

The Storage sub-view for the VM is different than the others, as it focuses on a single node.  Resources include:

  • Virtualization Manager Tools
  • Virtualization Manager Alerts
  • Storage Summary
  • Related Nodes
  • Component Volumes
  • Virtual Machine IOPS and Latency (gauges)
  • Virtual Machine IOPS - compared to Datastore
  • Virtual Machine Latency - compared to Datastore

For VM's, the Storage sub-view shows how this VM is running and compares that to the overall load of the datastore.

  • Identifies if the VM is loading the datastore or if the datastore is overloaded by other VM's.
  • Visually map relationships between the datastore and other nodes, ranked by current status.
  • See additional alerts (from Virtualization Manager) indicating configuration and performance problems, drill down to see suggestive corrective actions
  • Quickly see if there have been configuration changes to your VM's or if your VM has migrated to another Host


Much of the virtualization data is presented in native resources of SAM/NPM (one of the main goals of the integration), linking to the data of native nodes and applications. However, not all of the data available is shown via the integration. In some places, there are contextual links into Virtualization Manager features (Performance Analyzer, Maps, Alerts, etc.), allowing you to launch a feature while maintaining the context from SAM/NPM.  This allows you to smoothly diagnose issues while traversing from SAM/NPM to Virtualization Manager (and back again).


Resource or LinkDescriptionUse Cases and BenefitsVideo (No Sound)
Resource: Applications on this Datastore

When you are in the datastore view, it shows the applications related to this datastore, along with their status and their associated nodes.

Appears for Datastores.

If you are having a problem with a datastore in your virtual environment, you can instantly see what applications could be affected.  You can then drill down to the application .

Link: View Performance

Allows you to contextually launch Performance Analyzer in Virtualization Manager and then pick any metric and chart, all within the SAM/NPM website.

Appears for Clusters, Hosts, and VM's.

Contextually drill down to any metric in Virtualization Manager, not just the ones shown in Orion, allowing you further diagnose performance issues.VMan6ViewPerf.gif

Link: Show in Maps

Allows you to contextually launch Maps in Virtualization Manager and see all related nodes and their status.

See a visual representation of all the nodes related to the current node, ranked by their status.  Easily drill down to any node to go to the SAM/NPM view.VMan6Map.proj.gif

Link: Diff Recent Config Changes

Allows you to contextually launch the "Virtual DNA" feature for hosts and VM's in Virtualization Manager to view configuration or environmental changes of that node over the past week. 

Appears for Hosts and VM's.

Quickly see if there have been configuration changes to your VM's or if your VM has migrated to another Host.VMan6VirtualDNA.gif
Resource: Virtualization Manager AlertsShows you the current alerts for that node with the ability to drill down to the alert in Virtualization Manager.

Appears for Clusters, Hosts, Datastores, and VM's.

See in-depth virtualization alerts not available in SAM or NPM, drill down to get more details and suggestions.VMan6Alerts.gif
Link: Datastore to Storage Manager TargetIf you have Storage Manager and turn on the integration with Virtualization Manager, the link from Datastore to the Target View (LUN/Share) will also be propagated to SAM and NPM.When diagnosing a problem with your application, after drilling down to storage level in the virtualization layer, you can drill down to the Array level, jumping directly to the LUN your application is running.VMan6STMLink.gif


Hyper-V Storage (Yes, Cluster Shared Volumes!)

VMan6CSV.pngWe've improved our Hyper-V coverage by going deep on storage, making local and CSV (cluster shared volumes) equivalent to a datastore object in Virtualization Manager... what does that mean?  It means everything that works in Virtualization Manager on datastores (trends, capacity planning, search, alerts, link to Storage Manager, etc.) now works on Hyper-V local storage and CSVs!  Yes, including the integration detailed above.


Hyper-V storage data includes:

  • Storage capacity, usage and growth
  • Relationships to Clusters, Hosts and VMs
  • Performance including IOPS, Latency and More
  • Snapshots
  • LUN information


Note: We've kept the "datastore" nomenclature to represent all storage presented to hosts (at least for now).


GUI and Speed Improvements

As this post gets longer, I get slower, but Virtualization Manager 6.0 would still be going strong.  We made numerous improvements to increase the speed of data collection, dashboards, maps and capacity planning - "snappier" is what one of our RC testers called it.  Also, we completed many long requested GUI improvements... here are a few:


FeatureDescriptionUse Cases and BenefitsVideo (No Sound)
Resize WidgetsResize widgets to 1x1, 1x2, 2x1, and 2x2.  Dashboards automatically adjust to make the widgets fill up the page properly.

Users can customize dashboards to fit their environment.

  • Enlarge the Map widget to see more of the environment
  • Enlarge key performance metrics to see more detail in charts.

Improved Charting

Change the size of the legend, easier to select time ranges, improved selection of a time range on the chart, and made the time slider work more like SAM/NPM.

Easier to use charting - bonus, it works more like SAM/NPM.VMan6Chart.gif

Appliance Health and Status

Quickly see the health and status and link to the appliance login.

Quickly understand if your Virtualization Manager appliance is healthy.VMan6Status.gif


How do I turn on the integration?

To see the integration in your environment, you need to install two pieces.

  • First, for Virtualization Manager:
    • If you own Virtualization Manager, download the upgrade ISO from the customer portal and upgrade to 6.0.
    • If you don't own Virtualization Manager, download the appliance from the SolarWinds website and install it in your VMware or Hyper-V environment.
  • Second, you need to update your production SAM or NPM server with the IVIM package included in the zip file you downloaded above (upgrade or fresh install).

Once both servers are installed/upgraded, then you have to "turn on" integration. All downloads of Virtualization Manager installs and upgrades include the update installer for SAM/NPM too.


VMan6Setup.pngHere is a brief overview of the steps to install and configure, more detailed steps can be found in the Admin Guide.

  1. Download Virtualization Manager 6.0:
    1. Upgrades: Get the upgrade ISO from the customer portal (the full install is available too).
    2. Try It: If you want to try it, download it from the SolarWinds website.  Installation of the appliance is super easy - watch our video Virtualization Manager Installation on VMware®.
  2. Make a snapshot/backup of your servers.  Always important to have a backup!
  3. Install/Upgrade Virtualization Manager.
  4. If you are using SAM 6.0 or NPM 10.6, there is nothing additional to install on Orion.
    For SAM (5.5) or NPM (10.5), upgrade Orion with the IVIM package included in your zip.  This upgrades the IVIM module to 1.7.
  5. In SAM/NPM, go to Settings > Settings section > Virtualization Settings.
  6. Go to Setup Virtualization Manager integration
  7. Enter the required information, press Submit.
  8. If everything works, you should see a green check mark appear.
  9. Click on the Virtualization tab, you should see 5 new links.  Congrats, you are done!




The End of the Beginning

This is the first step of integrating Virtualization Manager with SAM, NPM and other Orion-based products.  We'd love to hear what you think about the integration and the new features in Virtualization Manager 6.0 - and, of course, what you want in the future.  Check out our What We Are Working On post and the idea forum for Virtualization Manager.



In the last release of VNQM we brought the VoIP troubleshooting for your Call Managers. Those of you who maintain VoIP company infrastructure are probably familiar with the VNQM call signaling topology resource:


This resource contains devices "1005 & 1041" which are typically gateways. These devices connect your internal VoIP sub-system to the line of your data/voice provider(s). You may typically hear "PRI or PRI Gateway" when talking about inside out or outside in VoIP connectivity. What is PRI? The definition says that PRI (Primary Rate Interface) is a telecommunication standard used in the Integrated Service Digital Networks (ISDN), for carrying multiple DS0 voice and data transmission between two physical locations. More technically, a PRI is a type of VoIP line that provides up to 23 separate 64 Kbps B lines and one data channel like with 64 Kbps in a T1 configuration (typically USA) or 30 B lines and one data line in a E1 configuration (typically Europe).


PRI is quite popular today among businesses because of many benefits it has:

  • Scalable technologies that can grow or shrink with your business
  • Low cost
  • Use of existing PBX system technologies
  • Multiple sites can be connected into the same system eliminating maintenance and installation charges across locations
  • Doesn't impact end-users (can dial the number as they were used before)
  • Increased high-tech communications options
  • Can be managed remotely via web-based consoles

And this "PRI Gateway" is something that VNQM 4.1 can now monitor and brings you an another piece of information to solve your VoIP problems. To be very specific, in the case of VNQM 4.1 it's about Cisco devices (MGCP gateways) that have support for PRI.

You, Thwack users, had many dicussions or feature requests (here or here), about how to see utilization of your PRI trunks. You could also read about PRI in a Geek Speek blog post .

VNQM 4.1 RC is ready to be installed on your production and it is fully supported by SolarWinds support. If you are a IPSLA/VNQM active maintenance customer you are more than welcomed to sign-up here for a RC download


What Do We Need to Monitor?

A typical monitoring task for the T1/E1 is to monitor a number of active channels/trunks and their utilization. Some of you were also asking for monitoring of "VoIP vs. Data" ratio on the line. VNQM 4.1 can do both now. We don't use SNMP in this case, because Cisco has a bug in their SNMP implementation which results in incorrect trunk call utilization data being reported.


Now, how do you see this data in VNQM?

  1. Use a new gateway wizard to add your device to be monitored as the MGCP gateway at VNQM settings page


add gateway_cr.pnggateway wizard.png


  2.  When you have successfully added, you should see the list of your gateways on the VoIP summary page:

gateway summary.png

3.  Click on the Gateway from the resource above or in the signaling resource that's part of the call details page. This will take you to the brand new Gateway detail page:

Gateway detail page_cr.png


How to see data distribution and PRI trunk utilization - are you paying too much to your provider?

Gateway detail page_cr 1.png

Data distribution chart can show you a total usage on your PRI gateway, data & VoIP traffic

distribution and you can also drill down to see each trunk utilization specifically. "Trunk Utilization" resource will give you a good historical overview where you may see spikes or gaps over a time.

In our case, we can see that more than 37% of the capacity

is not used over last three months. So why to pay so much to your voip/data provider?

You can reduce amount of lines you need for the connectivity with the outside world.

The same chart could be also used for a troubleshooting of call connectivity.

In a case you reach maximum PRI utilization, your calls can't be connected

and it's time to figure out who is causing such load (CDRs), ask your provider for more bandwidth, or, at least, set up VoIP precedence policies. Gateway detail page_cr - 2.png





Want to see more "per trunk" utilization details? Not a problem:

Gateway detail page_cr_cr - 3.png





How to see problems on a gateway?

It's possible to do it via VNQM search page itself. But, you can save some time and see the most important metric - failed calls, and call quality issues directly on each Gateway detail page:

Gateway detail page_cr_cr - 5.pngGateway detail page_cr_cr - 4.png

In order to see call details, phone numbers, etc. simply hit "Search for all failed calls" link at the bottom of the page and VNQM will filter out Gateway relevant calls only."Easy peasy" don't you think?

PRI & trunk utilization monitoring is a major feature of this release. However, VNQM 4.1 also brings a new web-based reports with charts you may read about in this post.

VNQM 4.1 RC is ready to be installed on your production and it is fully supported by SolarWinds support. If you are a IPSLA/VNQM active maintenance customer you are more than welcomed to sign-up here for a RC download

For those of you that have installed the RC of NPM 10.6, you may have noticed some changes to the reports menu. And by changes, we mean the newfound ability to create awesome new reports from the web console. The report writer you have come to know and love is still available, and functions exactly as it always has. Reporting isn't something people generally get worked up about, but we think you'll love the new functionality so much, you'll never go back to the old writer. Without further ado, let's go into some highlights.



New Canned Reports


In addition to all the reports you have come to expect from the previous report writer, we've added a bunch of new reports for NPM (and NTA.) New reports have the ability to contain multiple resources (tables / charts) that can be configured to report on separate (or the same) data sources or time periods. For example:


To make your life easier, you can take these existing reports and customize them to your heart's content.

The new report writer gives you the ability to change the header / footer / logo / etc. Additionally, the resources themselves are drag-and-drop to make it easier to layout the report and get it to your boss' satisfaction.


Custom Reports


If you're more of a DIY sort of person, the new report writer gives you the ability to create a useful report from scratch- no SQL required. (Unless you really want to use SQL- it can do that too.)

Feel free to use most any of the existing web resources, or create new resources all your own.


Creating a custom chart or table is as easy as defining your datasource (which can be dynamic) and then the data you would like to report on.


Data can be filtered to represent the top X items, or the top X percent of items.



Sorting? Check. Grouping? Check. Summarization? Sure. Aggregation? You bet.

The new report writer allows you to get as simple, or detailed report as you like. Reporting can often be a challenge, particularly when you are creating a detailed custom report.

In NPM 10.6, we made it easy. If you're a current SolarWinds customer, NPM 10.6 RC is available now in your customer portal.

Please take it for a spin and let us know what you think.

The engineering effort on Kiwi Syslog Server (KSS) v9.4 Release Candidate has been completed. RC is the last step before general availability and is a chance for existing customers to get the newest functionality before it is available to everyone else.

You will find the latest version on your customer portal in the Release Candidate section.


Here is the content of this RC version:

  • Moving to a new web server
    This change brings a lot of new functionality "for free". Examples:
  • Active Directory authentication for web access
  • Alerting for Message Queue Monitor
    Be notified when the number of messages in the message queue crosses certain threshold. This indicates there might be performance problems and gives you chance to take an action before messages get dropped.
  • Bug Fixes / resolved cases:



AD support for Kiwi web access


3 questions regarding Kiwi Syslog Web Access


AD support for Kiwi web access


Kiwi Syslog accounts - AD tie in?


active directory authentication


AD/LDAP Support for Web Console


Kiwi Syslog Web User authentication via AD/LDAP


Broken Support link


Utra Dev Cassini Web Server Service


After web access installation, Cassini Web service stops


Feature Request - Support Newer UltiDev Cassini Server


WebAdmin: HTTPS for Web Front End


SSL for Web Access


https for Kiwi web interface


Alerting for Message Que Monitor


Availability of Buffer statistics for alerting and reporting


Milliseconds in Syslog in Descending Order!


Feature Request - Email Summarization


Database maintenance settings in Kiwi Syslog Webaccess doesn´t work


Reducing number of syslogs on web access




Radio button missing text on Archive Schedule Destination tab


Wrong version displayed when cancelling licensing


sounds not playing on alert


"play a sound once" does not work


Service crash after ORACLE ODBC configuration


Status on 9.3.4


Problem Creating Table for Oracle 11g Release


Ability to see full list of devices


RC builds are made available to existing customers prior to the formal release. These are used to get customer feedback in production environments and are fully supported.

New Engineer's Toolset 10.9.1 has just arrived. The upgrade is available for free for all Toolset customers under active maintenance and can be downloaded from the SolarWinds customer portal.


The 10.9.1 comes with following list of improvements:


•  TraceRoute tool Changes.

    • Added SNMP Support
      • Additional columns can be displayed for devices which support SNMP
      • User can enable/disable SNMP Discovery
      • SNMP credentials are provided by common Credential Managment
    • Context menus over columns were enhanced
      • Right-click over IP Address column allows user to run some tools.
      • Right-click over other columns allows user to choose displayed columns
    • addresses are not displayed in results

• WorkSpace Studio

    • Export is now possible from IP Network Browser (WSS)

• Neighbor Map

    • Export Neighbor Map to Visio

• Proxy Ping

    • Deprecated the old version and implemented a new one.
    • New version adds support for IPv6
    • Supports Cisco, Juniper, Mikrotik and Extreme Networks

• SCP Server changes

    • Existing files of the same name are renamed during an upload
    • Is now FIPS supported
    • Support for DSA Keys

• Licensing upgraded to GEN3


Notable Bug Fixes in 10.9.1


• Issues with Neighbor Map (250173, 186932)

• Port Mapper - In correct VLAN ID displayed (156029)

• Port Scanner - Maxes out on 65,000 port scan (218038)

• Port Scanner - Crashes (222332, 218038)

• Bandwidth Gauge –Historical Statistics issue fixed (175923)

• Config Viewer –  SNMP community first character cut off (184082)

• Compare config Tool error out when logged in as a standard user (240296)

• Subnet Calculator – Resulting in wrong subnets (243226, 228460, 222771)

• Switch Port Mapper -  Does not work with Cisco Nexus 5000 (197087)

• Switch Port Mapper -  Does not show MAC Addresses  (204097)

• Switch Port Mapper -  Incorrectly displays MAC Addresses  (233180)

• Switch Port Mapper -  Fails to export to CSV format (250453)

• Workspace Studio - Crashes (236890, 236888)

• TraceRoute - Crashes when hostname is not resolved (233322)

• Cannot add nodes to Bandwidth Gauges, with Non Admin user rights (234987)

• WorkSpace Studio -  Interface Chart % Utlization Rx+Tx faulty logic (245706)

• SNMP Real Time Graph - Displaying duplicate column names (250074)

• Watch It - Gives a Run-Time error after exiting the application when log in as a standard user (241675)

• Advanced CPU Load - Not showing Call Manager 7 data  (184082)

• Netflow Real Time - Fails to launch when toolset is installed into a user defined custom folder (251815)

• After upgrade toolset takes ages to load (193803)


So, what are you waiting for ? go ahead and download the General Availability 10.9.1 bits from your customer portal today !

I believe Bronx summed it up perfectly when referring to this release as SAM 6.OMG; because that's precisely the kind of reaction and enthusiasm we receive anytime we have an opportunity to show it off. Those lucky few who've had an opportunity to play with some of the early betas first hand have been champing at the bit in eager anticipation for the opportunity to upgrade their production installations of SAM to version 6.0. Well that time has finally arrived.So without further ado I would like to extend a personal invitation to all Server & Application Monitor customers under active maintenance to sign-up here to download the SAM 6.0 Release Candidate.


Please note that Release Candidates are provided as early availability access to the latest release. They are treated no differently than GA releases, in that Release Candidates are fully supported in your production environment, and the SolarWinds technical support team is available to aid and assist with any problems you might encounter.


If you haven't been following the SAM beta blog postings here in the Product Blog, I'll give you a brief rundown of some of the exciting new features included in the SAM 6.0 Release Candidate.


Real-Time Event Log Viewer


The Real-Time Event Log Viewer, as the name suggests, is a web based version of Windows own Event Viewer. This tool allows you to troubleshoot and diagnose application and server related issues occurring on the remotely monitored host in real-time, without the need to remotely connect to the server, log-in, and launch the Windows Event Viewer. Once you've isolated and identified the cause of the issue, you can then easily create a Windows Event Log Monitor from within the Real-Time Event Log Viewer so you can be alerted if this issue occurs again in the future. Simply select the event(s) you'd like SAM to continuously monitor, click Start Monitoring, and the wizard begins. It's just that easy.


Asset Inventory


In this 6.0 release we extend SAMs hardware health monitoring, introduced in v5.0, to include a much broader array of additional server asset inventory information. This allows SAM to collect all relevant information necessary for asset depreciation, insurance, and support. However, this feature also provides a wealth of additional information you'll likely find useful in your everyday tasks. Some such examples include reporting on software installed for license tracking, or what operating system updates have been applied to the server; by whom, and when they were applied.


Information from SAMs Asset Inventory collection can even be programmatically synchronized with other CMDBs using the Orion SDK. If you don't already have a dedicated CMDB, the inverse is equally true. SAM 6.0 allows you to either manually or programmatically populate and report upon non-pollable information in the Orion database, such as the original purchase price, purchase date, rack location, etc. Need to track and report upon other asset information? No problem. Add additional fields to track whatever information you need, such as "in service date",  who the server was originally purchased from, or anything else for that matter.

Server Warranty Expiration.png


Custom Asset Information.png

In my previous blog post regarding server asset inventory collection, cwestwater suggested that it would be helpful if SAM was able to automatically track and maintain the servers warranty status and warranty expiration dates. And we agreed. So in addition to gathering all kinds of useful asset inventory information about the physical and virtual machines SAM 6.0 is monitoring, SAM will also monitor the warranty status of your physical servers. Provided your Orion server has access to the internet, this is all done automagically by periodically checking the status of each servers warranty against Dell, HP, and IBM's online warranty validation servers. This allows SAM to alert you when your servers warranty is due to expire. You'll also find a new Server Warranty Summary resource (pictured above) that provides at-a-glance warranty status information for servers where the warranty has expired, is due to expire soon, and those next closest to expire.

AppInsight forSQL

Much of the buzz surrounding the SAM 6.0 release is associated with a radical new concept we've dubbed "AppInsight". Beginning with Microsoft SQL Server, AppInsight's focus is to provide unparalleled monitoring depth and visibility around a given application, while simplifying discovery and reducing overhead associated with continuous monitoring.


It is our belief that SAM can provide a truly multi-vendor "best of breed" application and server monitoring experience, previously only possible by deploying numerous dedicated point products. Unlike these "point products" however, AppInsight is a tightly integrated solution built into SAM to provide a single pane of glass view into the health and status of all your servers, and the applications that run on them.


For example, AppInsight for SQL provides visibility into who's connected to the SQL Server, how long they've been connected, and from where (host name or IP address) they're connected. Need to know who's actively using the SQL server, not just who's connected, before taking it out of service for maintenance? No problem. Within that very same resource you will discover exactly how long each of user has been idle.


AppInsight for SQL gives a unique view into your database's storage usage, allowing users to easily understand the size of each database file, the percentage of white space in the file, as well as calculating in the free space remaining on the volume if auto-grow is enabled. This allows AppInsight to alert you before your database runs out of space, regardless if it's a fixed database size running out of white space, a database file that's configured to auto-grow to a configured limit, or even if the database is configured to auto-grow until it runs out of space on the drive. No matter how your database's are configured, AppInsight for SQL has you covered.


Whether you're new to SQL, or a seasoned veteran DBA, the SQL error log is one of the first places you're likely to turn your attention to identify common issues with Microsoft SQL. The SQL Error log contains important troubleshooting information such as, client connectivity issues, backup failures, end of recovery after a restart, DBCC Events, reconfiguration of server or database options, non-yielding schedulers, stack dumps, autogrowth failures, delayed IO events, etc. With AppInsight for SQL this information is right at your fingertips, located conveniently on the Application Details view of each monitored SQL instance.

Top 10 Databases By Active User Connections.png
File By Size.pngSQL Errors.png

Speaking of backups, and other regularly scheduled reoccurring tasks like database shrinks, AppInsight for SQL also includes SQL Agent Job Monitoring. Never again be caught blindsided because a scheduled SQL Agent Job failed to run properly. Better still, understand when, and for how long, SQL Agent Jobs are running to minimize their impact during business hours. These are just a few of the features included with AppInsight for SQL in SAM 6.0.


So how is AppInsight for SQL licensed anyway? What does it cost? Is it another module? An add-on?


AppInsight for SQL is built-in to SAM 6.0 and does not require the purchase of any additional modules or add-ons. Despite monitoring well over 100 unique SQL Server instance metrics, and more than two dozen key performance indicators for each database, AppInsight for SQL consumes a mere 50 component monitor licenses per-SQL Server instance. Now that's news everyone can be excited about!

SQL Agent Job Status.png

Processes and Services.png

Threshold Baseline Calculator

Believe it or not, there's still plenty of additional new features included in the SAM 6.0 RC I still haven't covered yet. One of these features is the all new Threshold Baseline Calculator. For a several years now we've pre-populated warning and critical thresholds within the application templates included in SAM. These thresholds have been based upon the individual vendors best practices for the given application. There are however many circumstances where this "one size fits all" approach to thresholding simply isn't appropriate, or accurate. The most typical reason why "one size fits all" thresholds doesn't always "fit all" is due to size and scale of an organization and their application deployment.


Let's take the example of Message Queue Length in Microsoft's Exchange for an organization with 10,000 or more employees. It might not be unusual for an organization of this size to see the number of messages queued for submission rise above 100 or more on occasion. However, if a small business of  25 or fewer employees saw the same Message Queue Length, at or around 100 messages queued for submission, it would be likely be an indication of a serious issue with the transport service failing to deliver messages properly. That's because for an organization of 10,000 or more employees, having 100 messages simultaneously sent or received within a given time frame isn't too terribly difficult to fathom. On the other hand, for an organization of only 25 employees, that same feat would be extremely unusual. This is just one example of how thresholds for performance metrics don't always "fit all".

For this reason (and countless more examples just like it) the Threshold Baseline Calculator in SAM 6.0 was born. Located from within the Application Editor, directly next to any threshold field you will find two new options. The first, "Use Latest Baseline Thresholds" calculates and applies recommended warning and critical thresholds for the selected metric based upon the last seven days of statistics collection (the baseline). Some might consider this a "blind faith" approach to thresholding that more closely resembles a random number generator, but fret not. There's a science behind where those numbers came from; and for all that detail and more you need only click the "Latest Baseline Details" link that lies just beneath the "User Latest baseline Thresholds" button.


Upon clicking the "Latest Baseline Details" link (pictured above) you will see a chart which displays the occurrences of statistic values returned by the selected component. This is a visual representation that allows you to easily digest all of the values collected during the baseline period to gain an understanding of what is considered "normal" for this metric in your environment. You have the option of selecting/deselecting typical business hours (8am-6pm Monday-Friday) as well as nights and weekends, or view the cumulative total for entire time period. Overlaid on the chart are the color coded red and yellow banding that represent how the recommended warning and critical thresholds relate to the baseline data. This provides a quick and easy way of determining the number of times you would have been alerted during the baseline period depending how your thresholds were defined.


Latest Baseline Details.pngIf embracing your inner statistician isn't your thing, you can also choose the more familiar "Metric over time" from the top most tabs, which displays the typical historical chart view with visual warning and critical thresholds included.


Thresholds are calculated using standard deviation, as represented by the sigma "σ" symbol in the table header above. By default 2 standard deviations are used for warning, and 3 standard deviations are used for critical thresholds above or below the mean/average depending upon which operator is selected (greater than/less than). Clicking on any number in the table provides you the option of setting the selected value as either the warning or critical threshold. This also dynamically updates the visual yellow and red banding representing warning and critical thresholds in the chart above the table. At any time you may click the "Reset to Recommended Thresholds" link to return values selected in the table, and represented in the chart above to those recommended by the Threshold Baseline Calculator. You may also click the "Cancel" button to revert any changes made and return to the Application Editor.

Armed with a better understanding provided by the Threshold Baseline Calculator of what is typical/average for a given metric you can make educated, informed decisions as to how warning and critical thresholds should best be defined for your environment.


We think you'll agree that this has shaped up to be an outstanding release of Server & Application Monitor. If you've been one of the many patiently waiting for this moment to come, we'd like to welcome you to sign-up here to download the SAM 6.0 Release Candidate now.


Please note that the SAM Release Candidates is available exclusively to those running previous versions of SAM or APM under active maintenance.

Filter Blog

By date: By tag:

SolarWinds uses cookies on its websites to make your online experience easier and better. By using our website, you consent to our use of cookies. For more information on cookies, see our cookie policy.