FormerMember ✭✭✭

Case # 474406

No luck sniffing the traffic. I found that RTMT uses pcsync->https to retrieve what it seeks.

I believe that this is due to the Address in your CCO ID. The address has to match that of the one listed for your SmartNet contract. Contact you Cisco account manager for help.

Did you create custom login profiles for the one off devices? The global profile should be the most common but by no means will it work for all devices. Also, mass editing has some limitations and you should validate that all the changes took as well.

Hi, the missed check at "Settings-> NCM Settings-> Security" was the solution. Thanks Tony Otto

Same info but the counter won't wrap (from biggest number possible back to zero) as quickly. 

 Different database would be ok, but you can't have an Orion server and a Hot Standby on the same box. The HSE is a special case of Orion, so it would be like running two Orion servers on the same box. Not possible. The HotStandbyEngine can only back up one database, not two separate databases, which is what I think you're…

Pete- While I never used any of the above customizations, I can tell you just from looking through them that some of them are written in classic ASP which is a no-go without the LegacyProxy in the Orion website...it was removed at version 9.1 and higher if I'm not mistaken. All customizations must be written in .NET now.…

So would I create a windows Windows Script Monitor and insert the vb code into the script body. Yep.

 Hey, folks. We appreciate the feedback. Can you give us a little more detail? * Which page or pages? * If one page is slow, can you try to detach each resource (by clicking on the name) to see if it's one particular resource that's slowing you down? 

How did you set up the snmpd.conf file to make it work?

Hmm, rules have to be triggered by an event (as it stands), so you'd have to have some kind of event that comes in to fire it off of. Not exists rules do let you do something like: If you see the event get generated and you don't see this other event that should come after it within 30 minutes fire an email. Thresholds do…

Got it. Basically, those rules just look for the presence of that type of event, then trigger (as long as you add an action). Assuming your AV is reporting events to LEM, when a virus is detected you should be able to use those rules to be informed about those events (or respond). VirusAttack: used when a virus is detected…

Let me correct myself. In the next release, we *will* be able to go from ICMP to SNMP without losing data. That was already on the train. Can you explain when you'd want to go from SNMP to ICMP? Is that really a key use case?

I would strongly recommmend upgrading to NPM 9.1 SP1. Web performance is much better in the current version than in 8.1.

 We don't recommend because the additional poller is forced to write to the database across the WAN, which is a very latency-sensitive operation. If you have awesome latency, it'll work. If not, you'll drop some data. Also, with the EOC solution, you'll be protected from data loss in the event of a WAN outage.

Ok. Got it. Many thanks.

It might be the networking setting on your ESX server. If your VM is sharing with ESX, Orion may not be able to distinguish them.

Hi Micheal, We dont have this available at this time for MySQL, it is on the roadmap. I can say though that currently when you monitor multiple platforms with DPA (currently Oracle, MSSQL Server, Sybase, and DB2 LUW) you only need one install of DPA. Kathy

Click the plus next to the Node so you can see the interfaces. Traffic In and Out is blank on the row for the node.

That makes sense. And yes, that sounds correct - the originating device IP should always be passed on, though some syslog servers have an option you might have to enable (otherwise you can't tell where the data came from, which sucks for other reasons). Some people choose to put an agent on the syslog server to aggregate…

Correction - the pcap index is actually 4. However, I was working with SolarWinds support on this and we confirmed that the Netflow is actually coming from eth0, which has an index of 2. When we examined some Wireshark captures of the Netflow data being sent to the Orion server, we didn't see this index number reflected…

What version of NPM are you using?

It requires NPM 9.1 SP3. I'm not ready to share the feature list openly, but if you sign up for the beta, you can see the list. 

It sounds like you need to open a Support ticket.

what browser/version are you using?

 As Josh said above, this isn't possible. You could create an alert on AAA, and then create an Alert Suppression in the Alert Suppression tab so that it won't fire if BBB or CCC are up.

I would definitely take that as an interim step, as kevinbowen stated, as well.

Did we ever get anywhere with this? This would be awesome on a number of levels.

 How many nodes? How many interfaces? What are your database specs? Are you using APM or NetFlow? Give us as detailed a picture as you can, and I and the broader community can probably provide some guidance.