Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Orion accepting traps

yandrorip

Does orion accept snmp traps. I know that it poll using SNMP, but is it worth getting hosts to trap to it?

Find more posts tagged with

Accepted answers

All comments

iunderwo

Trap/Syslog reception isn't supported, but frequently requested.

// Ian Underwood - Service Management
// Level 3 Communications

tscaggs

I use Kiwi Syslogd and through a little database browsing, you can have it write the traps directly into the Solarwinds Event database. These will show up on the events screen, but alerts are another matter.

iunderwo

Can the Kiwi syslogger also write the write node name/interface information into the events table? If not, could it be scripted to do so?

// Ian Underwood - Service Management
// Level 3 Communications

pancamo

Started using Kiwi two weeks ago.... I created a new table in the SW database Called KiwiLogs where I send router/unix syslogs, and Windows traps. I also created a few new resources that format the syslogs/traps and display them in the node details view.... works great so far.

I also have NetIQ events and NetIQ CPU Charts resources integrated into the Node Details View...

Now if I can only get Windows Event Logs into the SW database.... Anyone?

dp

quote:Originally posted by tscaggs

I use Kiwi Syslogd and through a little database browsing, you can have it write the traps directly into the Solarwinds Event database. These will show up on the events screen, but alerts are another matter.

xtort

quote:Originally posted by pancamo

Started using Kiwi two weeks ago.... I created a new table in the SW database Called KiwiLogs where I send router/unix syslogs, and Windows traps. I also created a few new resources that format the syslogs/traps and display them in the node details view.... works great so far.

I also have NetIQ events and NetIQ CPU Charts resources integrated into the Node Details View...

Now if I can only get Windows Event Logs into the SW database.... Anyone?

dp

quote:Originally posted by tscaggs

I use Kiwi Syslogd and through a little database browsing, you can have it write the traps directly into the Solarwinds Event database. These will show up on the events screen, but alerts are another matter.

I thought Kiwi Syslogd only received and processed Syslog mesages, not SNMP Traps. How do you get it to catch traps?

www.ragepipe.com

tscaggs

Kiwi does accept SNMP trap messages alond with everything else mentioned. I have seen some tools that will forward Microsoft event log messages to a syslog collector (which Kiwi can accept too), consider looking around for that type of utility.

Network_Guru

Here is what I'd like to see. Log Kiwi to the Orion database and view only the syslog entries for the device you are viewing in the "Node Details" page. Has anyone found a way to do this?
This would be another cool tool to use in troubleshooting a node!
One stop shopping is what I am after....

-=Cheers=-
NG

pancamo

Yes, I'm going this... I have a custom resource(see below) that reads from the KIWI syslog table and displays it on the "Node Details" page. It displays the last XX syslogs for the node...

I also have a win32 app that uses a GRID(see link below) that allows us to quickly display/search/group/sort all the syslogs...

works great...

www.devexpress.com/.../popup.aspx

--------------




<%

If Node.GetProperty("Node_sub_type") <> "WINDOWS" Then

if len(Resource.Title) = 0 then
Resource.Title = "SNMP SYSLOGS"
Resource.Sync
end if

Title=Resource.Title
SubTitle=Resource.SubTitle
EditButton="/NetPerfMon/Resources/NetIQServerEvents.Edit.asp?ResourceID=" & Resource.ResourceID & "&ViewID=" & ViewID & "&NetObject=" & NetObject

HelpPage="Node-ResponseTimeLoss"
DoResourceHeader

maxseverity =Resource.GetProperty("MaxRecords")
if maxseverity = "" then
maxseverity = 10
end if

'remove FQDN

ip = Node.GetProperty("IP_Address")
fqdn = Node.GetProperty("DNS")
MyPos = InStr(1, fqdn, ".")

if (MyPos > 0) then
hostname = Left(fqdn,MyPos-1)
end if

'or MsgTest Like '%housperf1%'

Set cd = CreateObject("ChartDirector.API")

SQL="Select Top 10 MsgDateTime, MsgPriority, MsgHostname, MsgInputSource, MsgText " & _
" FROM KiwiSyslog " & _
" WHERE (MsgInputSource <> 'SNMP') and MsgHostAddress = '" & ip & "' " & _
" ORDER BY MsgDateTime DESC"

Set rs = CreateObject("ADODB.RecordSet")
Call rs.Open(SQL, "DSN=KiwiSolarwinds; USER ID=sa; PASSWORD=XXXXX")
Set dbTable1 = cd.DBTable(rs,-1,10)
rs.Close()

MsgDateTime = dbTable1.getCol(0)
MsgPriority = dbTable1.getCol(1)
MsgHostname = dbTable1.getCol(2)
MsgInputSource = dbTable1.getCol(3)
MsgText = dbTable1.getCol(4)

DoReport
DoFooter
%>

<br>

<%
Sub DoFooter
Response.Write("</table>")
End Sub
%>
<% Sub DoHeader
If Not DidHeader Then %>
<table border=0 cellPadding=2 cellSpacing=0 width="100%">
<tr>
<td class="ReportHeader">EVENT MESSAGE</td>
<td class="ReportHeader">TIME</td>
</tr>
<% DidHeader = TRUE
End If
End Sub
%>

<% Sub DoReport %>
<% DoHeader
For i = 0 to Ubound(MsgHostname)
if (MsgHostname(i) <> "") then
%>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
</tr>
<% End If
Next
End Sub
%>

<% End If %>
-----------

quote:Originally posted by Network_Guru

Here is what I'd like to see. Log Kiwi to the Orion database and view only the syslog entries for the device you are viewing in the "Node Details" page. Has anyone found a way to do this?
This would be another cool tool to use in troubleshooting a node!
One stop shopping is what I am after....

-=Cheers=-
NG

charpham

quote:Originally posted by pancamo

Yes, I'm going this... I have a custom resource(see below) that reads from the KIWI syslog table and displays it on the "Node Details" page. It displays the last XX syslogs for the node...

I also have a win32 app that uses a GRID(see link below) that allows us to quickly display/search/group/sort all the syslogs...

works great...

www.devexpress.com/.../popup.aspx

--------------




<%

If Node.GetProperty("Node_sub_type") <> "WINDOWS" Then

if len(Resource.Title) = 0 then
Resource.Title = "SNMP SYSLOGS"
Resource.Sync
end if

Title=Resource.Title
SubTitle=Resource.SubTitle
EditButton="/NetPerfMon/Resources/NetIQServerEvents.Edit.asp?ResourceID=" & Resource.ResourceID & "&ViewID=" & ViewID & "&NetObject=" & NetObject

HelpPage="Node-ResponseTimeLoss"
DoResourceHeader

maxseverity =Resource.GetProperty("MaxRecords")
if maxseverity = "" then
maxseverity = 10
end if

'remove FQDN

ip = Node.GetProperty("IP_Address")
fqdn = Node.GetProperty("DNS")
MyPos = InStr(1, fqdn, ".")

if (MyPos > 0) then
hostname = Left(fqdn,MyPos-1)
end if

'or MsgTest Like '%housperf1%'

Set cd = CreateObject("ChartDirector.API")

SQL="Select Top 10 MsgDateTime, MsgPriority, MsgHostname, MsgInputSource, MsgText " & _
" FROM KiwiSyslog " & _
" WHERE (MsgInputSource <> 'SNMP') and MsgHostAddress = '" & ip & "' " & _
" ORDER BY MsgDateTime DESC"

Set rs = CreateObject("ADODB.RecordSet")
Call rs.Open(SQL, "DSN=KiwiSolarwinds; USER ID=sa; PASSWORD=XXXXX")
Set dbTable1 = cd.DBTable(rs,-1,10)
rs.Close()

MsgDateTime = dbTable1.getCol(0)
MsgPriority = dbTable1.getCol(1)
MsgHostname = dbTable1.getCol(2)
MsgInputSource = dbTable1.getCol(3)
MsgText = dbTable1.getCol(4)

DoReport
DoFooter
%>

<br>

<%
Sub DoFooter
Response.Write("</table>")
End Sub
%>
<% Sub DoHeader
If Not DidHeader Then %>
<table border=0 cellPadding=2 cellSpacing=0 width="100%">
<tr>
<td class="ReportHeader">EVENT MESSAGE</td>
<td class="ReportHeader">TIME</td>
</tr>
<% DidHeader = TRUE
End If
End Sub
%>

<% Sub DoReport %>
<% DoHeader
For i = 0 to Ubound(MsgHostname)
if (MsgHostname(i) <> "") then
%>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
</tr>
<% End If
Next
End Sub
%>

<% End If %>
-----------

quote:Originally posted by Network_Guru

Here is what I'd like to see. Log Kiwi to the Orion database and view only the syslog entries for the device you are viewing in the "Node Details" page. Has anyone found a way to do this?
This would be another cool tool to use in troubleshooting a node!
One stop shopping is what I am after....

-=Cheers=-
NG

francismcphail

Any chance of getting a screen dump of what it looks like in Orion?

Cheers,
Francis.

quote:Originally posted by pancamo

Yes, I'm going this... I have a custom resource(see below) that reads from the KIWI syslog table and displays it on the "Node Details" page. It displays the last XX syslogs for the node...

I also have a win32 app that uses a GRID(see link below) that allows us to quickly display/search/group/sort all the syslogs...

works great...

www.devexpress.com/.../popup.aspx

--------------




<%

If Node.GetProperty("Node_sub_type") <> "WINDOWS" Then

if len(Resource.Title) = 0 then
Resource.Title = "SNMP SYSLOGS"
Resource.Sync
end if

Title=Resource.Title
SubTitle=Resource.SubTitle
EditButton="/NetPerfMon/Resources/NetIQServerEvents.Edit.asp?ResourceID=" & Resource.ResourceID & "&ViewID=" & ViewID & "&NetObject=" & NetObject

HelpPage="Node-ResponseTimeLoss"
DoResourceHeader

maxseverity =Resource.GetProperty("MaxRecords")
if maxseverity = "" then
maxseverity = 10
end if

'remove FQDN

ip = Node.GetProperty("IP_Address")
fqdn = Node.GetProperty("DNS")
MyPos = InStr(1, fqdn, ".")

if (MyPos > 0) then
hostname = Left(fqdn,MyPos-1)
end if

'or MsgTest Like '%housperf1%'

Set cd = CreateObject("ChartDirector.API")

SQL="Select Top 10 MsgDateTime, MsgPriority, MsgHostname, MsgInputSource, MsgText " & _
" FROM KiwiSyslog " & _
" WHERE (MsgInputSource <> 'SNMP') and MsgHostAddress = '" & ip & "' " & _
" ORDER BY MsgDateTime DESC"

Set rs = CreateObject("ADODB.RecordSet")
Call rs.Open(SQL, "DSN=KiwiSolarwinds; USER ID=sa; PASSWORD=XXXXX")
Set dbTable1 = cd.DBTable(rs,-1,10)
rs.Close()

MsgDateTime = dbTable1.getCol(0)
MsgPriority = dbTable1.getCol(1)
MsgHostname = dbTable1.getCol(2)
MsgInputSource = dbTable1.getCol(3)
MsgText = dbTable1.getCol(4)

DoReport
DoFooter
%>

<br>

<%
Sub DoFooter
Response.Write("</table>")
End Sub
%>
<% Sub DoHeader
If Not DidHeader Then %>
<table border=0 cellPadding=2 cellSpacing=0 width="100%">
<tr>
<td class="ReportHeader">EVENT MESSAGE</td>
<td class="ReportHeader">TIME</td>
</tr>
<% DidHeader = TRUE
End If
End Sub
%>

<% Sub DoReport %>
<% DoHeader
For i = 0 to Ubound(MsgHostname)
if (MsgHostname(i) <> "") then
%>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
</tr>
<% End If
Next
End Sub
%>

<% End If %>
-----------

quote:Originally posted by Network_Guru

Here is what I'd like to see. Log Kiwi to the Orion database and view only the syslog entries for the device you are viewing in the "Node Details" page. Has anyone found a way to do this?
This would be another cool tool to use in troubleshooting a node!
One stop shopping is what I am after....

-=Cheers=-
NG

pancamo

sure, but I don't know how to get pics into this forum...
so..

I created a Solarwinds group at Yahoo.. I posted some screen dumps of our Syslog and Netiq Integration

Free to join here:
groups.yahoo.com/.../

Hopefully other will share their solarwinds custom pages...

dp

quote:Originally posted by francismcphail

Any chance of getting a screen dump of what it looks like in Orion?

Cheers,
Francis.

quote:Originally posted by pancamo

Yes, I'm going this... I have a custom resource(see below) that reads from the KIWI syslog table and displays it on the "Node Details" page. It displays the last XX syslogs for the node...

I also have a win32 app that uses a GRID(see link below) that allows us to quickly display/search/group/sort all the syslogs...

works great...

www.devexpress.com/.../popup.aspx

--------------




<%

If Node.GetProperty("Node_sub_type") <> "WINDOWS" Then

if len(Resource.Title) = 0 then
Resource.Title = "SNMP SYSLOGS"
Resource.Sync
end if

Title=Resource.Title
SubTitle=Resource.SubTitle
EditButton="/NetPerfMon/Resources/NetIQServerEvents.Edit.asp?ResourceID=" & Resource.ResourceID & "&ViewID=" & ViewID & "&NetObject=" & NetObject

HelpPage="Node-ResponseTimeLoss"
DoResourceHeader

maxseverity =Resource.GetProperty("MaxRecords")
if maxseverity = "" then
maxseverity = 10
end if

'remove FQDN

ip = Node.GetProperty("IP_Address")
fqdn = Node.GetProperty("DNS")
MyPos = InStr(1, fqdn, ".")

if (MyPos > 0) then
hostname = Left(fqdn,MyPos-1)
end if

'or MsgTest Like '%housperf1%'

Set cd = CreateObject("ChartDirector.API")

SQL="Select Top 10 MsgDateTime, MsgPriority, MsgHostname, MsgInputSource, MsgText " & _
" FROM KiwiSyslog " & _
" WHERE (MsgInputSource <> 'SNMP') and MsgHostAddress = '" & ip & "' " & _
" ORDER BY MsgDateTime DESC"

Set rs = CreateObject("ADODB.RecordSet")
Call rs.Open(SQL, "DSN=KiwiSolarwinds; USER ID=sa; PASSWORD=XXXXX")
Set dbTable1 = cd.DBTable(rs,-1,10)
rs.Close()

MsgDateTime = dbTable1.getCol(0)
MsgPriority = dbTable1.getCol(1)
MsgHostname = dbTable1.getCol(2)
MsgInputSource = dbTable1.getCol(3)
MsgText = dbTable1.getCol(4)

DoReport
DoFooter
%>

<br>

<%
Sub DoFooter
Response.Write("</table>")
End Sub
%>
<% Sub DoHeader
If Not DidHeader Then %>
<table border=0 cellPadding=2 cellSpacing=0 width="100%">
<tr>
<td class="ReportHeader">EVENT MESSAGE</td>
<td class="ReportHeader">TIME</td>
</tr>
<% DidHeader = TRUE
End If
End Sub
%>

<% Sub DoReport %>
<% DoHeader
For i = 0 to Ubound(MsgHostname)
if (MsgHostname(i) <> "") then
%>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
</tr>
<% End If
Next
End Sub
%>

<% End If %>
-----------

quote:Originally posted by Network_Guru

Here is what I'd like to see. Log Kiwi to the Orion database and view only the syslog entries for the device you are viewing in the "Node Details" page. Has anyone found a way to do this?
This would be another cool tool to use in troubleshooting a node!
One stop shopping is what I am after....

-=Cheers=-
NG

gallo007

Pancamo- You stated "Started using Kiwi two weeks ago.... I created a new table in the SW database Called KiwiLogs where I send router/unix syslogs, and Windows traps. I also created a few new resources that format the syslogs/traps and display them in the node details view.... works great so far."

You created a new table and send all syslog information to that table via Kiwi (I got this far...). Can you post an example of a custom resource that would just show the last X events from your table (similar to 81-Last25Events.Resource)?

Mike

pancamo

Here is my Resource that display the last XX syslogs over the last 7 days from the Kiwi table... I use ChartDirector (www.advsofteng.com) for charts and here to simplify the data handling, but you can strip it out with straight VBS if needed.





<%

if len(Resource.Title) = 0 then
Resource.Title = "SNMP SYSLOGS"
Resource.Sync
end if

Title=Resource.Title

SubTitle=Resource.SubTitle
EditButton="/NetPerfMon/Resources/1-2-Top10Lists/TopXXNodes.Edit.asp?ResourceID=" & Resource.ResourceID & "&ViewID=" & ViewID & "&NetObject=" & NetObject

HelpPage="Node-ResponseTimeLoss"
DoResourceHeader

max =Resource.GetProperty("MaxRecords")
if max = "" then
max = 10
end if

'remove FQDN

ip = Node.GetProperty("IP_Address")
fqdn = Node.GetProperty("DNS")
MyPos = InStr(1, fqdn, ".")

if (MyPos > 0) then
hostname = Left(fqdn,MyPos-1)
end if

'or MsgTest Like '%housperf1%'

Set cd = CreateObject("ChartDirector.API")

SQL="Select Top " & max & " MsgDateTime, MsgPriority, MsgHostname, MsgInputSource, MsgText, MsgHostAddress " & _
" FROM KiwiSyslog WITH (NOLOCK) " & _
" WHERE (MsgDateTime > DATEADD([day], - 7, { fn NOW() })) AND (MsgInputSource <> 'SNMP') " & _
" ORDER BY MsgDateTime DESC"

Set rs = CreateObject("ADODB.RecordSet")
Call rs.Open(SQL, "DSN=KiwiSolarwinds; USER ID=sa; PASSWORD=XXXXX")
Set dbTable1 = cd.DBTable(rs,-1,max)
rs.Close()

MsgDateTime = dbTable1.getCol(0)
MsgPriority = dbTable1.getCol(1)
MsgHostname = dbTable1.getCol(2)
MsgInputSource = dbTable1.getCol(3)
MsgText = dbTable1.getCol(4)
MsgHostAddress = dbTable1.getCol(5)

DoReport
DoFooter
%>

<br>

<%
Sub DoFooter
Response.Write("</table>")
End Sub
%>
<% Sub DoHeader
If Not DidHeader Then %>
<table border=0 cellPadding=2 cellSpacing=0 width="100%">
<tr>
<td class="ReportHeader">SERVER</td>
<td class="ReportHeader">EVENT MESSAGE</td>
<td class="ReportHeader">TIME</td>
</tr>
<% DidHeader = TRUE
End If
End Sub
%>

<% Sub DoReport %>
<% DoHeader
For i = 0 to Ubound(MsgHostname)
hostname = MsgHostname(i)
if (hostname <> "") then

MyPos = InStr(1, hostname, ".")
if (MyPos > 0 and Asc(left(hostname,1)) >64) then
hostname = Left(hostname,MyPos-1)
end if

%>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
<td class="Property"><a href="solarwinds.amvescap.com/.../SearchNodes.Action.asp </td>
</tr>
<% End If
Next
End Sub
%>

quote:Originally posted by gallo007

Pancamo- You stated "Started using Kiwi two weeks ago.... I created a new table in the SW database Called KiwiLogs where I send router/unix syslogs, and Windows traps. I also created a few new resources that format the syslogs/traps and display them in the node details view.... works great so far."

You created a new table and send all syslog information to that table via Kiwi (I got this far...). Can you post an example of a custom resource that would just show the last X events from your table (similar to 81-Last25Events.Resource)?

Mike