Aforsythe

try this command under config term: login on-failure log I also have: login on-success log logging userinfo Because when I see a failure, the very next thing I want to see are successes around the same time-frame.

Mezdem, I was out sick at the end of last week, but I checked this morning and 240 minutes was working for me on that filter. Not that you need it now, but I did want to confirm that it does work...

Rick, Here you go... http://thwack.solarwinds.com/docs/DOC-170644 I've uploaded the script to the content exchange. It requires some minor editng, but if you have any questions or need any assistance getting it setup, let me know and I'll do what I can to help. You'll need to configure at least one rule, and make some…

Yeah we can definitely filter that out. I will try to put a script together for you. It will probably be Monday or Tuesday though, but I might be able to get to it tomorrow.

I don't think that the problem is with kiwi in your logs, it's the way the device is sending it. Possibly a newer updated MIB or something and I haven't worked directly with Cisco MIBs. I also don't typically have parsing scripts on hand for things I don't have/use, so no, I don't have an example script to provide you. I…

That's what I'm wondering... I would too, but is there enough outside interest and enough interested members to collaborate, criticize and contribute to such a group? Maybe we need a poll for this, but lets find out if our hosts are on board first.

I'm forwarding all of my logs from my production server to the machine I am using for beta testing and I'm setting up a separate display all without a filter. Everything is going to the separate display and the logs are all forwarding. I also have a statistics collector script that runs against all messages in a rule…

Caught my mistake, it's working now. Now I have to get it configured to use AD

Thanks Danielle, I ordered the Geek T-shirt, a large I beleive. It was about 2 weeks ago or so.

Thanks Danielle! That should help keep me involved. I can’t always load up the site and spend time looking around, but I can take a quick glance at an e-mail and respond when I have time

Onunis, Thanks for posting the resolution. It makes me wonder why there are two executables for the same version...

And that get's us here: (PS I beleive I'm missing a set of parenthesis in my previous post for minutes, but it's fixed below: SELECT StatusLED, NodeID, Caption, Status, DATEADD(mi, DATEDIFF(mi, GETUTCDATE(), GETDATE()), LastSystemUpTimePollUtc) AS LastSystemUpTimePoll, DATEDIFF(ss,LastSystemUptimepollutc,getUTCdate()),…

I wouldn’t have been able to help you with this anyway, as the MAC address would not be accurate coming from outside your network. The only way using the ARP table would work is if these were PCs on your same subnet within your internal network where you are syslogging. From the sounds of it, you are referring to remote…

SajShaikh, Jiri pointed you to the feature request. If you would like to see this feature in a future version of Kiwi, my suggestion would be vote for this feature. There is no guarantee that a highly voted feature will make it in to the next version, but voting increases the visibility of our wants and needs.

EDIT: Ok, so I was trying to do too many things at one time yesterday.... Everything below works just fine. When I setup the rule to try and test this for Greg, I used the same rule I am currently using for a script for Eilz, and it was un-checked because I always test my scripts in an unchecked rule so they don't impact…

It's elegant in it's complexity. This is exactly the kind of thing I wanted to start this group for: Using the tools at your disposal to accomplish a task in an exotic or overly complicated fashion instead of stopping at : "Sqlplus has stopped responding. Close program" I guess the software just can't do it. We could call…

Hrm... Tested with IE9 on a Win7 box as well and no-go either, same code [a:a]. You're not passing a connection oversees after we log in are you?

You're welcome and thank you too. I learned as much if not more from your post. I forget sometimes there are usually more ways of accomplishing the same goal. And I thought for sure that your way was faster until I decided to test it. They both perform the same unless the field isn't indexed.

, Thanks for coming back with an answer! It's always helpful to others when they have a similar problem. And, I think I have a solution to your login issue. Change your shortcut or URL and add /Gateway.aspx on the tail end of it. Let me know if that resolves the "timed out" message.

The capability of logging to an SQL DB in kiwi can solve all of your reporting needs. I know that log analisys would be an awsome feature in Kiwi, but that's what the more expensive solutions are for and Kiwi is already very powerful and configurable.(Just have to watch your script execution times for custom parsing and…

Eliz, What I meant was if Renato's solution was not working for you, the script I came up with was not optimal and could result in delayed or missing messages but it would be better than nothing.

Eliz, I apologize for the lack of response, but if you still need a script for this and are unable to write one, I will see what I can do, but... I will need a copy of your logs, a few hundred mesages should be enough. If you feel comfortable providing me these logs, I'll PM you with my e-mail address and will try to have…

You really shouldn't use SQL Express for something like this unless you understand the limitations and how to deal with them. I use the express (free) versions all the time for testing, temp dbs, data migration, automating data import/export tasks from one format or another to one format or another, but I never use them to…

I've got a copy running on 2008 as well and didn't have that problem, but I'm glad you were able to get it working.

No problem, I'm happy to help. If you haven't used Powershell with SAM yet, start here: http://thwack.solarwinds.com/docs/DOC-167083 And eventually you'll want to check out the rest of the docs in here: http://thwack.solarwinds.com/docs/DOC-1107 You'll want to be able to execute your scripts on the remote machine to parse…

Awesome news.

Will do...

It looks like that is the default config for kiwi so you're not filtering anything, I don't think the problem is there. Try changing the logging level to debugging to see if you get anything. Also try these commands... config terminal archive log config logging enable Any configuration changes you make should then show up…

It's not picking it up. Still saying I'm up to date running 9.3.0.

I imagine I can come up with something. I'm a little pressed for time this week though so it'll be a few days or early next week. I'll post it here for you.