ET ✭✭✭✭✭

In 10.2 we introduced new memory polling based on OIDs CpmCpuMemoryUsed = 1.3.6.1.4.1.9.9.109.1.1.1.1.12 CpmCpuMemoryFree = 1.3.6.1.4.1.9.9.109.1.1.1.1.13 we realized that on 65XX those OIDs are supported, but they return zero values. That cause issue with Memory 0.

I assume that those alerts are assigned to your old engine which is not valid anymore. I think you should open support ticket (attach diagnostic) and support will help you to correct data in database. JFYI: alerts has column [EngineID], this must match to record in table [Engines]

sure, just post here what you need and we will try to find out solution for you.

Topology data are no longer a part of network discovery in 10.2. It's a part of regular polling as interface or volumes. During discovery process we only ping devices which topology data are available/supported (mostly 1 OID) and according that we assign appropriate pollers. We made serious changes to discovery process in…

So you are not able to set up these fields for your templates or there is some other issue? If you know that you have all these fields in your templates and you are still not able collect data, can you please send me some short pcap from this device? I can check it. (I need template definition there) Thanks, ET

Do you have some antivirus? Can you exclude this SDF folder from his scan?

It's mostly caused by corrupted SDF. Please check this thread.

Hi all, I think that you can do that in report writer. You can create new report for netflow endpoints. There you can specify Transmitter IP Group, Receiver IP Group, or just IP addresses, total bytes of course and set up summarize by days if you want. Is this what you want? Regards

Hi, we have resource for IP Address Group for interface detail view, but it's not there by default. You need to customize view and add resource [Top XX IP Address Groups]. Or other possibility is to create query by [Traffic Builder]. On NTA Summary View you should have resource [Traffic View Builder]. You can choose Node,…

But you can always set up in [Admin]->[NTA Settings]->[Database Maintenance]->"Process all expired IPs", right? Internaly this operation is performed by portions, so if db maintenance reach time threshold reserved for clean-up (15 minutes by default), it ends anyway. Or is there some other problem? Thanks

Just add condition for node Status SELECT StartTime.EventTime, Nodes.Caption, Nodes.Location, StartTime.Message, DATEDIFF(Mi, StartTime.EventTime, (SELECT TOP 1 EventTime FROM Events AS Endtime WHERE EndTime.EventTime > StartTime.EventTime AND EndTime.EventType = 5 AND EndTime.NetObjectType = 'N' AND EndTime.NetworkNode =…

Well, there's not exactly this functionality inside single alert definition :( But you can specify variable inside mail TO which is evaluated for each node. If each your node has correct information filled, it's done automatically. This will evaluate property Contact on node where alert occurred. Or You can of course…

Hmmm that's strange, NTA doesn't provide other functionality to automatically disable netflowsources. But yeah, one more thing, when Interface is removed by orion we remove appropriate netflowsource as well. Do you have this interface in Orion? Do you have enabled option "Auto add Interfaces to NetflowSources"? Can you…

Have you checked this microsoft site? 0x800706BA - RPC Server Unavailable - Firewall issue or server not available. The computer really doesn't exist · The Windows Firewall is blocking the connection

Your issue with errors in Collector Core log file is related to insufficient security rights for topology polling on your devices. We are not able to get detail information about VLANs. Error code returned from SNMP device. SNMP_ERRORSTATUS_AUTHORIZATIONERROR - 16

To prove that, you can analyse exported data from node by Wireshark or Microsoft Network Monitor. You will see which data you export. If you are not sure, you can post that pcap here and I will look at it. Thanks

In case you want each created node to by automatically unmanaged, you can do it by alerting via event "Node Created" And as trigger action you must us PowerShell script which via Orion SDK unmanage this node.

Hi, there was leak in Collector SDFs in some special situations, but this was fixed in 10.2.2. Maybe (just maybe) it's possible that your upgrade wasn't finished fluently and that's why you can still see this type of issue. If you are on 10.2.2 and your SDF is over 500MB, please collect diagnostic + SDF and open case. I…

Hello, which version of NTA do you have? Can you also post here the body of this message to be sure, that we are talking about same? (Some messages in NTA have expiration time and it occurs again, but others only once). I would like to check it. Thanks ET Anyway you can't set up filter for "Last 25 Events" resource.

I don't think that AlertEngine won't start or block VBS. It's done by system self ( there's something called session 0 isolation). I assume that this VBS just fail or it's blocked. Try enable on AlertEngine service "Allow service to interact with Desktop" Have you tried my suggestion? What's in logfile?

According your screenshot it looks like you don’t have NPM ( Network Performance Monitor) installed. www.solarwinds.com/.../network-performance-monitor.aspx Please got to web size -> Settings -> License Detail This gives you information about licensed products you have. From: SolarWinds Community Team Sent: Wednesday,…

If you need sum that per file try this one SELECT SUM([size] * 8) , [filename] FROM sysfiles GROUP BY [filename] if you need total sum SELECT SUM([size] * 8) FROM sysfiles

you need NPM 10.1.2 and create Custom SQL alert. This column is not exposed by UI.

So it was able to detect reboot and it just computed lastBoot with weird Date? Can you see Event that node was reboot? btw. LastBoot = CurrentDate().AddSeconds( - (syUpTime / 100) ) Can you see that value SystemUpTime on Nodes table is changing? And also what's value of LastSystemUpTimePollUtc, is it up to date?

This thread will provide you all needed info I guess. if you can't find data there, I can rephrase that once more.

Hi, we've already investigated this problem, and we found out that service is ok and it doesn't crush. We are just too slow in same cases and start up operation is not finished on time. That's why system notify you about start up delay. Service has only limited time to finish start up sequence during system boot up,…

Hi ecklerwr1, can you please post here exact URL for search result? It should be something like .... ApplicationDetail.aspx?NA:161.... I just want to be sure, that all needed parameters are there. I would say that data appear when you switch from [Both] to [Ingress] and back to [Both] Thanks.

just checking, do you have enabled basic alerts? There's CheckBox option in Basis Alert manager application "Disable All Actions", which is enabled by default. Have you tried to fire test alert?

Good, so latest version. Open DB Manager and query table Nodes ( SELECT * FROM Nodes), than go to your node and check whether it's actual. Beware, it's UTC time, so you need to recompute it along your time zone.

If node is deleted we write event into Events table, so you should see it. Maybe there were so much events that they rolled over? We don't write event about "node removed" only in case it was removed by SQL script and our services were stopped in that moment.