Syslog differences after upgrade to NPM 10.0

Question

Hello...

We successfully upgrade from Solarwinds Orion NPM 9.5.1. to versio 10.0.0 last week.

We have noticed a few differences in the way that Syslog messages are being displayed in the web portal:

Syslog Hostname Change

For some devices under 9.5.1 the Hostname column in the Syslog display showed the node's DNS name.  After the upgrade to 10.0.0 the node's IP address is shown instead.  There is a link associated with the IP address which is to the associated node in NPM.  So NPM knows that the node's IP address is associated with the device's node, but for some reason it is no longer showing the node's DNS name.  This is a bit of a pain.

Interestingly when we filter the Syslog messages using the Network Object field to the name of the node NPM recognises that the Syslog messages with the IP address are for the device, but it still shows the IP address in the Hostname column.

We have only seen this issue with one node so far, a windows-based server.  We do not get many syslog messages from Windows machines so we don't know whether this is an issue with only this one node or with all nodes.

Syslog Maximum Message Change

Under NPM 9.5.1 in the "Show Messages" field we used to be able enter a number like 10000 so that up to 10000 messages would be displayed in the Syslog web page.  After the upgrade to 10.0.0 it appears that the maximum number of messagese has been reduced to 2000.  If you enter a number greater than this you now get a red circle icon to the right of the value with the text 'Value must be a valid integer from 0 to 2000'.  This is a bit of a pain as we now need to use the Syslog Viewer application on our primary Solarwinds poller if we want to look through lots of messages.

Is there way to change the maximum number of Syslog messages that can be displayed on the NPM web page?  2000 is really a little restrictive for our needs.

If anyone has any information on these two items I would be much appreciated.

Cheers,

... Simon

SimonEvans · Answer

After doing some more digging, there is some other unexpected behaviour we are seeing with the Syslog web display in NPM 10.0.0.

The 'Network Objects' drop down list no appears to list all of the nodes that are defined to Orion NPM. It only appears to list the devices that have Syslog messages associated with them.  This should be a good thing.  However it appears that some of the syslog messages are not being marked as being associated with a particular node.  We have a number of Cisco IOS switches that are sending NPM syslog messages.  These messages are being logged with the correct name listed in the Hostname column, however there is no hyperlink associated with the host name; it appears that NPM has not matched the syslog message with a node that it is monitoring.  This appears to mean that the node is not included in the 'Network Objects' drop down list.

If anyone else has this these issues I would like to find out to see whether anything can be done to fix this.

Cheers,

... Simon