Suggestions for creating a report when SNMP credentials have failed against a node.

Hi Team,

Good Evening!

While reviewing our SW environment, I found that when testing the SNMP credentials for a few nodes, the tests failed.

However, the node status appeared as UP in the SW console, indicating that the SW detected their reachability using ICMP.

At the same time, other resources did not show the correct result for that specific node due to the SNMP credentials failure. Here's a snapshot for your reference.

Node Status Is:- UP

SNMP Credential Failed.

Is there any way to create a report to identify the specific nodes where SNMP credentials are failing?

Using this method, I can notify the user to check the nodes with failing SNMP credentials.

Find more posts tagged with

Reports

support

SNMP

npm - network performance monitor

thwack

certified

nta

Accepted answers

All comments

vinay.by

Report would be a good thing to have, I would rather say enable the default 'Node not polled in last 10 mins' Alert or create a custom alert for yourself to check if 'Node is not responding to SNMP' this would be more effective rather than looking at it periodically through reports.

__PRESENT__PRESENT__PRESENT

vinay.by

Node not responding to SNMP alerts have been a topic of discussion for years and there are several threads on it - you can create a simple custom swql alert

Alert on Nodes that stopped responding to SNMP

Can we alert for SNMP not responding nodes?

Just tweak the query accordingly.

Hope this helps.

__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT

ImNishat

Hi @vinay.by Will this below alert work so I can achieve my desired result?

vinay.by

I want to alert on: Custom SWQL Alert (Advanced) select that.

__PRESENT

vinay.by

@ImNishat

Lets do one thing, forget the alert for now - keep that as your next point for improvement.

You wanted to create a report which provides you a list of devices that fails polling isn't it, please follow the instructions that are mentioned on the below thread - this is what you need at the minute

https://solarwindscore.my.site.com/SuccessCenter/s/article/Create-an-advanced-SQL-report-to-check-nodes-that-fail-SNMP-WMI-polling?language=en_US

__PRESENT__PRESENT__PRESENT__PRESENT

__PRESENT

FormerMember

Use this simple report, schedule it once a day to your mailbox. It works and tells you exactly which nodes have lost the ability to SNMP correctly. Nodes With Statistical Polling Issues

One of the first things I do is set this report up for customers so that they are assured that SolarWinds is monitoring correctly.

stevenstadel

I like to create a SolarWinds Health Dashboard and add a custom Query widget that shows me the devices that are not polling successfully. You can use this syntax in that custom query widget. It shows devices that have not updated the Last System Uptime in 60 minutes.

SELECT
    n.Caption AS [Node],
    n.MachineType,
    n.DetailsURL AS [_linkfor_Node],
--    n.CustomProperties.Environment,    --Use this to add in your own custom property
    n.IP_Address,
    TOLOCAL(n.LastSystemUpTimePollUtc) AS [LastUptimeLocal]
FROM
    Orion.Nodes n
WHERE
    n.ObjectSubType <> 'ICMP'
    AND n.Status = 1
    AND MINUTEDIFF(TOLOCAL(n.LastSystemUpTimePollUtc), GETDATE()) > 60

ImNishat

Thanks @stevenstadel I have created a widget based on the custom query. Please see the below result FYR.

Can you please tell me how I can verify whether the above data is being displayed correctly? I checked one device, and its SNMP credentials failed during testing. However, please see the snapshot below for the polling status of the same device and it's look good.

ImNishat

Hi @vinay.by

I have reviewed the URL provided and followed the given steps. The output from the query does not include all the data I need in the report. Specifically, I require additional information such as the Device IP address, details on whether the device is managed through SNMP V3, V2, or V1, and the date from which it has stopped polling or experiencing SNMP credential failures.

stevenstadel

If SNMP fails, it will not fully gather the expected metrics when collecting statistics. Your snapshot above does not indicate that SNMP is successfully polling, as evidenced by the failure when you test the SNMP credentials. The SWQL query I referenced shows the LastSystemUpTimePollUTC value from the database, shown in your local time as LastUpTimeLocal in the results. This date and time field may indicate the last time SNMP metrics were gathered successfully. If the LastSystemUpTimePollUTC value is not updated, it can indicate a failure in the polling method, which should be investigated. Using the timestamp Last Database Update field you are referencing will not show you that SNMP is working; its value can be updated when the device responds to ICMP for uptime, as an example.

ImNishat

If the SNMP credentials test fails for any devices that are not polling list resources properly and providing current status, it means that there is an issue. Also, the details shown in the above snapshot of polling details are correct but are based on ICMP ping.

But the question is here, how can I justify to the users that there must be an issue due to those devices that are failing the SNMP credentials test?

I need to give them some proof or justification. That's why I asked for a way to test the effect.

ImNishat

I checked, but I did not find any report.

sharath_kb

We are using a Query for SNMP/WMI failure on nodes which i created as an Alert rule as well as a Report and scheduled to owners to fix them. Let me know if you are still looking for it, ll share

d_rathore

i am looking for the above mentioned. Could you please share. Thanks.

mesverrum

This swql or variations gets used a lot for that
github.com/.../Nodes w Polling Issues

obaid.rahman

I tried it, not showing anything for me. Would you post a picture if you dont mind

sivananda

Hi Nishat,

Try below query once, Before that check nodes table columns on your DB.

SELECT Nodes.NodeID AS NetObjectID, Nodes.Caption AS Name,Nodes.IP_Address,Nodes.SNMPVersion
From Nodes
WHERE
(
(LastSystemUpTimePollUtc < DATEADD(minute, -120, GETUTCDATE())) AND
(Nodes.Status = 1)
)

stuartd

Bottom of the post you will see this:

Click on the name to download it and then import via manage reports.