DHCP Alert

Perhaps this question should go in the APM instead of NPM but thought I'd start here. I've been asked to create an alert that will tell us if the available addresses on a DHCP server falls below 10%.

Is this possible?

Thanks.

Karen

Find more posts tagged with

Alert

dhcp

Accepted answers

bshopp

IPAM does this out of the box, see here (http://www.solarwinds.com/products/orion/ip_address_manager/)

All comments

FormerMember

What are you using as your DHCP server?

KLH456

Microsoft DHCP on domain controllers, which are Windows 2003 Standard Edition, SP2.

superdave

SolarWinds IPAM?

viol8tor

You can actually do this with UNDP.

I monitor all DHCP Servers ... over 90 with UNDP and have an alert when a scope is below 5% and 1%.

The only caveat, until SW adds some functionality, is that the alert matches the first scope that is full (this is a table based UNDP), so I have a report for DHCP Scopes that shows all scopes that are below the threshold. For now, the report is necessary because we run split scopes. Eventually, I'll update the logic of the Alert to take into consideration both servers of the split scopes...

Here is a sample alert message:

Date/Time: Friday, February 05, 2010 1:47 AM

Node: XXXXXXXXX | IP Address: 10.129.0.195

Poller Group: MS DHCP Server

Poller Name: MSDHCPpercentFree on XXXXXXXXX

OID: 1.3.6.1.4.1.311.1.3.2.1.1.3

Check DHCP Scope: 10.128.248.0

Goto: http://solarwinds/Orion/NetPerfMon/NodeDetails.aspx?NetObject=N:3061

-------------------------------------------------------------
Alert Name: _Global - DHCP Server Scopes - Warning - Below 5%

Let me know if you are interested...

-v

bshopp

IPAM does this out of the box, see here (http://www.solarwinds.com/products/orion/ip_address_manager/)

KLH456

This sounds like a possibility. I cannot open the link you included in the message.

We only have 6 DHCP servers, but also have split ranges on each.

MarieB

Hi KLH--

I was able to get the link to work, so try again. If it still doesn't work for you, manually navigate to:

www.solarwinds.com>products>orion>ip_address_manager

KLH456

Link still does not work.

viol8tor

I have added the UNDPs, Alert Definition and Report to Content Exchange.

See:

Enjoy -

- v

KLH456

Please forgive my ignorance.. what is UNDP and what do I do with these files now that I've downloaded them.

I don't suppose there is anyway to monitor the DHCPSRVLOG-Day-log on each server for Event 14 which is A lease request could not be satisfied because the scope's address pool was exhausted...

Just thinking out loud there.

Thanks

Karen

KLH456

OK DUH I get the UNDP, Universal Device Pollers, since I use some of those for other devices...

viol8tor

Here are your options for monitoring DHCPSRVLOG -

1.) Use SNARE - Epilog, this product converts any text based log into syslog and it is free. (I have had problems with Epilog, so it does not come recommended.) Point Epilog at your Solarwinds Syslog Server. Create Syslog Alerts.

2.) Use Splunk. Splunk comes in 2 flavors, free or Enterprise. Splunk is amazing and can do so much, but that is for you to discover. The Enterprise version has the alerting feature enabled. (With Splunk, I parse the logs for EventID, IP Address, MAC Address and other sundries.) The price of admission for the Enterprise version is not for the faint of heart.

-v