Bedrich.Michalek

Please check this KB article and let me know if that helped: knowledgebase.solarwinds.com/.../UDT Not Receiving User Data from Domain Controllers Thanks

Hi, I'd like to ask you to try following: 1) Run UDT Compatibility Checker (\Program Files\SolarWinds\Orion\UDT\UDTCompatibilityChecker.exe) 2) Click "New", then select "Enter manually" option 3) Enter IP address of the DC and select credential type "REL" 4) Enter username and password to connect to the DC 5) Select…

Then please open another ticket with support, I cannot tell what may be wrong. Also please include diagnostics - change logging level for UDT Business Layer to "DEBUG" and UDT Jobs to "VERBOSE", run the RemoteEventLog job (on UDT Job Status page click "Poll now" for the specific job) and collect diagnostics. Then change…

Hi, Replace all occurrences of "right join" with "left join", the report will work then. Or you can try this modified query (for UDT 2.5+), it will give what you need though in a slightly different way. Let me know if you'll have any troubles with that. with PortCTE as ( select [PC].[NodeID] , [PC].[PortName] ,…

Couple of ideas what you can try: 1) Connect to the domain controller you want to poll, run Event Viewer and check there are events with ID 4768, 4769 (Win2k8) or 672, 673 (Win2k3) in the Security log. Those are the events UDT is looking for. Also verify those events are not older than 30 minutes (on the first poll of DC,…

Can you please connect to the domain controller and check (using Event Viewer) if security log contains events with ID 4768, 4769 (Win2k8) or 672, 673 (Win2k3)? These are the events UDT looks for. Thanks Bedrich

You are right that UDT can cause quite a big DB growth. However it depends on how many nodes you poll from UDT and your environment. Few ideas: - check the size of UDT_PortToEndpoint table (this one is usually the biggest) - adjust your History Retention setting (Settings->UDT Settings->Data Retention) as this will reduce…

Looks like my reply I sent on Friday is gone so here it's again. This should give better results SELECT N.Caption as NodeName , N.Status , CASE ISNULL(E.EventTime, 0) WHEN 0 THEN '' ELSE CONVERT(NVARCHAR(MAX), E.EventTime, 121) END AS EventTime , ISNULL(E.Message, '') AS Message , CASE ISNULL(E.EventTime, 0) WHEN 0 THEN…

Adding following join at the end of the query left join [dbo].[UDT_CdpEntries] cdp on cdp.IpAddress = u2ip.IPAddress and then adding cdp.DeviceId, cdp.DevicePort to the select should do the job.

Hi, can you please open ticket with support and ask support to forward this to UDT team? I'd like to look at the search issue you describe. Please include diagnostics and detailed information about the search (screenshots what are you searching for and what's wrong/and expected would be best). If you specify some…

Well, maybe I'm blind but I don't see anything wrong there.

Yes, this one is for UDT 2.0 only. The original one you posted is for UDT 1.0/1.0.1 only.

Database schema changed between UDT 1.0 (1.0.1) and UDT 2.0. UDT_Switch and UDT_Router tables were replaced by UDT_NodeCapability table. Following query should give you the same result for UDT 2.0 though I didn't test it too much so it's possible you'll have to do some changes. Remove the [IsMonitored] condition to include…

I'd suggest the same - try to run nslookup on the machine where UDT is installed. If that works then UDT should be able to resolve IP addresses into hostnames. If not, then probably open ticket with support as we'll need to investigate diagnostics to see why it doesn't work.

This exception can cause some hostnames are lost. It's fixed in the upcoming UDT 2.5.

Hi, please try to increase 'Layer 2 Job Timeout' and 'Layer 3 Job Timeout' values on UDT Advanced Settings page instead of extending polling interval. I guess there are some jobs that always timeouts (the reason may be slow device?) and thus never finished, so this notification considers them still as 'new'. Can you please…

Hi, please try the query below and let me know if you'll need help with some further tweaks. SELECT N.Caption as NodeName , N.Status , E.EventTime , E.Message , DATEDIFF(DAY, E.EventTime, GETDATE()) AS DaysDown FROM Nodes N INNER JOIN ( SELECT NetworkNode , EventTime , Message , RANK() OVER (PARTITION BY NetworkNode ORDER…

Hi, this value comes from two tables: - [UDT_Switch].[LastSuccessfulScan] for layer2 data - [UDT_Router].[LastSuccessfulScan] for layer3 data In the search grid you can distinguish layer2/layer3 by the (MAC) and (IP) next to the LastSeen/FirstSeen values.

Hi, UDT_UserHistory view doesn't return Department column by default, so you need to take the query from this view and modify it. You can add any column from UDT_User table where the attributes about users are stored. Let me know if you'll have any questions or troubles creating the report. SELECT u.UserID as UserID ,…

Hi, if port is monitored, UDT will collect data what endpoints (MAC addresses) are connected to that port. If at least one port is monitored on a node, UDT layer2 job is periodically executed and data are updated for all monitored ports on that node. If no port is monitored on a node, layer2 job is canceled for that node.…

5) The reason is UDT doesn't display primary group in User Details resource now (it's stored in different attribute than the other groups and UDT doesn't query it now).

5) Do the users with "Users" group have some other group(s) assigned too or is it the only one group they have? Thanks

Hi 1) Easy workaround is to modify the User History Report and change grouping (to IP address) so it will show logon events per node. If you need hostnames instead of IP addresses let me know, I can help you to make the SQL query for the report. 2) On what page you can't search for MAC addresses with dashes in them? Device…

The account must be member of "Event Log Readers" group (Windows 2k8) or have access to the Security log at least. If possible, try some admin account to see if you are able to pull the data from domain controller. If that works, change to the account with restricted rights. I'll also take a look at the help link. Bedrich

All Network connections = both active and historical connections so if you don't have any historical data, both resources will show the same data (with the exception that Current Network Connections won't show time period column as it's not necessary). You'll notice the difference when the endpoint you are looking at won't…

Be aware that UDT 2.0 changed its database schema and the query won't work. Below is modified query which you may use for your report (adjust the WHERE condition at the bottom to suit your needs) SELECT [T].*, ( SELECT [S].[LastSuccessfulScan] AS C18 FROM dbo.UDT_NodeCapability AS S WITH(NOLOCK) WHERE (([S].[Capability] =…