FormerMember ✭✭✭

 TT opened. Case #12642 - "Viewing maps in Firefox" Keep your fingers crossed... 

Try changing the Config Block Start to 'interface.*ethernet' and set Config Block String Type to Regular Expression.

Does this template works on exchange 2003? No. Microsoft changes all the performance counters between Exchange 2003 and 2007, which is why we include templates for both.

Magic!! Question though, when Checking/Changing Permissions on your little walkthough, I didn't see where to set permissions for Solarwinds_website? Either way it worked, thanks!

that is very odd! i am off to have a think.....

That's correct. This means that the agent connected with its IP address (doesn't know its hostname by that IP, I assume) but some events are coming in with the hostname. We use the info we have about the agent to resolve this problem, so in this case you'd want the agent to know that it's "CentOS63" and 10.10.6.144. Two…

That's a new feature request, so it's not scheduled. I'll certainly consider it. 

So, LEM will present what's in the log data, and I think within LEM's syslog config the hostname resolution for syslog is off because it can create performance problems. It is a syslog-ng option, though, so if you syslogged to another syslog-ng host you could have it attempt to resolve the originating IP (as long as those…

I've captured your request.

I have another post loosely related to this where i have asked for advice on locking down internet explorer.... What i have done to get around this, is use GPO to dramatically restrict the options in internet explorer. I have then published that restricted IE window through a CSG solution which means the users can not…

That answers my question. Thanks Tomas.

The syslog connector will have all the device availability/service stuff, the other one has all the file auditing stuff. Events included: * FileExecute - FileExecute: kern.cli.cmd * FileSystemTrafficAudit - FileSystemTrafficAudit: cifs.op.subOp.unsupported * FileSystemTrafficAudit - FileSystemTrafficAudit:…

Richard, Thank you for sharing your experiences. I see your position very well since I used to work with such the organization in my country.

Good morning, This is the same info I have from google and VMWARE sites. I had hoped for filters to alert on that I could copy to an alert. LEM syntax including the exact error message is hard to guess at in advance. If I wait until something goes wrong, I can then copy the event to a filter and build an alert. But that…

hmm... I ran this same command on my internal and my external interface and both are showing up as netflow ports in solar winds. what version of fortinet are you on? I'm on V4 MR3 patch 5.

Ken, We delivered what we hope to be a fix to your issue. We haven't heard back from you yet. How's it working?

Louieb25, Have you opened a ticket? It may be the same problem or a different problem. If we can get more examples from customers, it would be easier to diagnose and fix.

We are considering adding an open SQL query in the advanced alerts, as we do in Report Writer. It's trickier than in RW because a bad query in the Adv Alert Engine will have much more serious consequence because it's runs over and over. So there's activity on this front, but I can't promise we'll get there in the next…

Here's a copy of the full instructions with screenshots included. It's the same as my paraphrased version, but with a few extra comments (and the pictures ;)). HTH!! This document outlines the steps needed to configure event rules on the MOM Server. This document assumes that Forefront Security for Exchange and/or…

I want to check a few things about this. Are the events syslog from a network device, or windows events from an agent node? If the latter, I am wondering if the event itself contains the hostname and not the IP address, dependent on whether there is a DNS host entry in the DNS server for which the windows server is able to…

You might want to repost this in the NPM forum. There are a lot more UnDP users there than in this APM forum.

Thanks for the idea BakerD! Brandon, I consider the inability to sort ip addresses in the proper order as very basic function of ip address management and consider this a product defect and critical product issue, not an enhancement. This should have been corrected before the RC & GA hit the street since it was brought up…

There are lots of small and completely valid changes that customers ask for every day. From all those requests, we have to choose. That particular change has not risen to the top of queue just yet, but it will do so soon.

They are not running mailboxes as they are client access servers. The Exchange admin said that they could install the mailbox service, though they don't see why it is necessary. Is there an AppInsight for Exchange template that does not requirement Exchange mailbox service?

'fraid not. It's coming soon, though.

Hey Tim, So, is this still true? (That the "current version of NCM does not support Cirrus.Nodes.AddNodeToNCM on SWISv3. You will need to connect to SWISv2 to call any NCM verbs or query any NCM data." ?) Thanks

Hi Mav It does not sound straight forward. I have NPM on its own server and have deployed 2 additional pollers elsewhere on the other servers, so my managed nodes are not being polled from the NPM servers as I wanted this to be completely segregated. So what you are saying is for every additional poller that you have…

There are two fields in "HardwareHealthInfos" (which I realize is the Navigation property's name and not necessarily the name of the backing table) that we use to help identify devices (Nodes|Interfaces) on our network. N.HardwareHealthInfos.Model N.HardwareHealthInfos.ServiceTag AS \"SerialNumber\" Where N is of course…

Great, I've got that converted to C# and will be testing it as soon as other issues have been put to bed. re: the json payload for adding a Node, I don't suppose I can do the following? {"EntityType":"Orion.Nodes", "IPAddress":"10.10.220.32", ... "Community":"public", "HardwareHealthInfos.Model":"ModelNumberString",…

Hi Thanks One more question, I have created two custom field properties in NPM for Interfaces and Nodes called Managed. If this is set to True then I want to manage the Node or Interface, if it is set to False I dont want to manage the Node or Interface. Could I run a set of SQL triggers that states if this Managed field…