CourtesyIT · Managing Director · ✭✭✭✭✭

I am looking for a query to show me who has a remote VPN connection using Cisco Anyconnect, how long they have been connected, and how many MB they have used. I am looking at the following fields: Table: ASA_RemoteAccessSessions Columns: UserName, SessionStatus=1, ConnectedTime, DisconnectedTime, InTotalBytes; OutTotalBytes

I have single ASA using this code with an error. SELECT COUNT(CASE WHEN [data].[RemoteAccessSessions].[EncryptionAlgorithm] = 1 AND ([data].[RemoteAccessSessions].[NodeId] = 204 AND [data].[RemoteAccessSessions].[DisconnectedTime] IS NULL THEN [data].[RemoteAccessSessions].[UserName] END) AS [Total Sessions], FROM…

Looking for Same. 

I am getting no results from the query. I have only one Cisco 5525x ASA. Can you help? 

There maybe. I will contact you. 

Directories will need to be the same on the APE as the ones on the Primary Polling engine.

You might want to look into WPM for those type of actions. @"christopher.t.jones123" might know. 

I usually have to execute the command and copy it over to Excel. Tidyous but do not have to do it too often. If you need that data often then it might be worth looking into a custom SWQL Query and put into a widget. 

Ok, just trying to line up my thinking on this one. You would need an alert to change the CP. You would need Orion to identify the interface (?a/any/specific?) router. Either through a Config Type or validation of sorts. thinking......

You should be able to use the same template if the 2000 uses the same commands. It sounds like the authenication may be off sync. SHA-1 AESX?X start with 128 and see if you can move higher.

I would try SNMPv2 to start with just to prove it is serving SNMP gets.

Are the commands the same between the 1000 and 2000? Have you sent an SNMP walk into solarwinds so they can build the support for the 2000?

I use the compliance feature to check specific STIG requirements, use others for historical information, and others for Tech Refresh activity. 

Brocade - yes, Infoblox, VMWare would be other SolarWinds Products.

Is the PA logging the attempt? Access-List on the Management Interface?

You can use the templates I have uploaded to Thwack. For most you will need to identify a start/stop point since the configuration is large.

I have these commands and more set up to run a couple times a week since we have a lot of changes going on now.

I have been using the following for sometime down in the config block with an ending of ^! ^interface (FortyGigabit|TwentyGigabit|TenGigabit|TwoGigabit|Gigabit|Fast|)Ethernet[\/0-9]+\r

You guys are awesome. Wish I could transfer points to guys as a thank you.

I have a variation on the code here I would like to make but have trouble sorting out the AND's and NOT's. I was able to do this on a per site basis, but still need a full list. Because I have so many devices the list only include something like the first 100 devices and does not provide any additional data. I though if I…

That does it, Thanks for the input.

hey, I was thinking about adding this to each one of my remote sites, but would need to modify the script to key off of a device or two for the site. Each device has a 6 letter code in front of it and would like to use that to specify the query. Thoughts? 

That's it. Thanks, 

Still getting interfaces that have come up.

Thanks, I am working with it right now and trying to get only Cisco Interfaces that are down down state. Messed around with line 11, but still getting interfaces that are up and unmanaged. I could settle for the top 100 interfaces that have been down from more than 31 days.

I am working on building these templates for SCM like I have done in NCM. Please stay tuned....

Success! Thanks, I commented out the where to get all devices

Same error as above. But the results show below

Getting same thing within the Classic dashboard. The modern one works great. Also, I have installed SolarWinds on a separate Drive (E:\) not on C:\ so my links to icons and such dont work.