Hello everyone
The folks keeping an eye on alerts from Orion at night, are getting unknown interface alerts almost every patch window.
We're talking Windows servers of varying versions.
I think I've isolated the problem down to being a problem with ifIndex changing to another number.
I've contacted Solarwinds support regarding the issue, but their answer is it is out of their scope.
Cisco has their own command, that stops interfaces from changing ifIndex. (https://support.solarwinds.com/SuccessCenter/s/article/Managed-interfaces-1-index-showing-as-unknown?language=en_US)
But seem to be the only vendor that has this kind of setting.
I'm looking for inspiration as to what you have done to combat this issue.
I'm not interested in manually removing unknown interfaces from hundreds of nodes, after they've rebooted, after a patch window.
Thanks!