FormerMember ✭✭✭

I'll confess that I'm not familiar with this message format. We accept Syslog and Traps; if OPC can be received in those formats, you're covered.

Also, I created an alert on this new transform poller and it is having the same result. I am being spammed by hundreds of emails every minute. Sometimes it returns decimcal results like 11.9 neighbors. Sometimes it will return weird values like 1,1,1,1,1.

Hey There, I know I can see it there, but I removed that option from the Netflow view page as it just makes it look messy with the logs. I presume I would then be able to see it in the events but those items do not seem to be categorized. I may just have to add it back.. unfortunately..

You might take a look at what shows up in the Event Log as "Caller Process Name" (on vista and later, I think it was more spotty in previous versions, might have just been Process Name) and see if you can identify which process it is (in LEM, that might appear in either LogonProcess, ExtraneousInfo, or somewhere else, I…

I second the integration of TACACS support.

Hey byoder‌, It looks like Toolset is the kind of product that saves you bacon. If you want, you can write a review in the Spread the Word forum, and in exchange you'll get a $25 Amazon gift card.

Never mind - I figured it out. Thanks nonetheless.

 We're moving toward UTC. The challenge is that we have multiple modules with different release schedules. So what's going to happen is that Orion and the modules will start to migrate to UTC, but for a while there will be some sections in one and some in the other. While this approach is not ideal, the alternative is to…

Thanks all and sorry for the late reply. mandevil, thanks for the script. I have run the script and these are the top 3 tables. Hmm... guess I shall log a ticket to DPA.

Okay so I'm still waiting for a answer to my question, I can't be the first one trying to do this....

If I add tools to to tool profile and the server does not have the service/application being monitored, does it necessarily matter? For example, add Windows AD monitoring to a Win 2008 Server Tool profile and a server does not need it. Will this affect the server or the SIEM appliance? (On those machines that did not have…

I got in touch with support and they helped me out. Seems some tables didn't upgrade correctly.

Any chance a UDP Monitor will be coming in a future release? Bump... We'd like to monitor the SW TFTP Server which hangs on occasion but the service is still running.

Well, another 6 months has passed. Yeah, I'd like to know when this will be added. Still not supported in 10.1.3.

I'm not following....

DPA is working perfectly, though, its the alerts that are not.

1007978 is my case number. Thanks Shane.

Thanks, I've tried running the reconfiguration and that doesn't make any difference.

 Dev took a peak, but it's not obvious. We really can't help this one on Thwack. You'll need to open a Support ticket to resolve this one.

Under the Reset Condition tab. set the radio button at the top to "reset this alert when the following conditions are met"

 You would buy another polling engine. http://www.solarwinds.com/products/orion/scalability/polling_engine.aspx

Perhaps the Meraki is parsing packets destined for its own MAC address at layer 2, but at layer 3 the IP's are intentionally wrong/changed? Not sure how else the packet would make it to the Meraki interface. The link below has a little info about Threat Intelligence Feed, and it also has 2 links at the bottom to more…

You can create a rule that says if you see this event type from this agent send an email or append to text file, yes.

This looks great pdonnelly. Thanks! I will have my helpdesk team check it out.

That's exactly why they are showing up as net-snmp. We also investigated making the VMWare mibs available through net-snmp, but VMWare no longer exposes all the data that we need to do our monitoring.

Yes, just as part of our maintenance process. You can multi-edit properties if you can write a wildcard search for the node name, which helps, but alternatively (what we do) you could write your own web interface which edits the database directly. Andy.

 It's under consideration.

I checked on our views in use and I don't think I will gain much by adding/removing maps. There are only a few maps that are really used by everyone and they will be displayed in our operations and help desk areas regardless of dedicated views. I saw the service crash a couple times on Saturday and it is already happening…

Hey Chris, Out of curiosity, what's the driver behind the Java restriction on the agent systems? The JRE we install is only installed "within" the agent, and not intended to replace or be used as the system JRE. We only install the JRE bits into the agent install directory and use it to bootstrap & run the agent - so it…

On a similar note, I requested a pre-canned 95th percentile report in Report Writer several years ago... It would be a nice addition as well. We added several 95th percentile reports to 8.5.