FormerMember ✭✭✭

You can install all of these products on the same server see the Orion demo for example. Please also refer to the NPM Administrator Guide for miniumum and recommended specs. If you wanted to you could install the products on seperate servers, but this would use seperate databases. You could integrarte everything into a…

The only appliance that requires the license is your core manager appliance (where the agents connect). Essentially with multiple appliances, you could end up with a "stack" - Manager | Database & Reports | Syslog Collection | nDepth Storage & Search. It's useful to help scale or distribute processing by virtue of…

I will try the truncate option, I'm not worried if the traps go away. I would think you'd need to stop the traps service before running the truncate as you don't want it dumping data into it while truncating.

Do you have the Windows Active Response connector enabled on those systems?

Here's a screenshot of the disks.

Yes. That will fix your problem.

 It'll still show down.

Check also the SourceMachine and LogonType fields, they can provide you more insight. If the LogonType is showing "Windows: Interactive" (or Cached Interactive or Remote Interactive) those are all direct logons. If it's a Network logon or other type, the SourceMachine should show you where they are attempting from (it…

I was able to do some thorough investigation this morning. Once again, I messed up the configuration of the alert…I set to query the Application and NOT the component like I should have. Coming from the old Legacy Application monitor, I’m still getting used to the component/application differences…and in this case, the…

We have a hundred or so Nortel/Avaya ERS switches, from 470s, to 5500s, to 4600 and 4800s. Also approximately 300 8100 series APs with 3 8180 controllers. Also, 2 Nortel CS1K several BCMs and several IP Offices. We are considering expanding our Solarwinds investment, but would like to see more support for the Avaya…

Unfortunately, Orion does not formally support Korean at this time. The best solution for now would be to run Windows in English on the Orion NPM server. Denny LeCompte Sr. Product Manager, Orion SolarWinds

If you're using the "Scan for New Nodes", it's possible there aren't enough events generated in the timeframe we're scanning for to conclusively discover your device. You might need to manually configure it instead (from Manage > Appliances, left Gear on the appliance -> Connectors). You might also try toward the end of…

Not that I know of.

 Unfortuantely, the "has changed" operator won't work in that case. At this time, "has changed" is limited to "Last Boot", "IOS Version", and "IOS Image Family". 

In case you missed it: ShellShock Vulnerability and SolarWinds Products LEM does have a vulnerable bash version, but it is not possible to exploit. We'll update in an upcoming release regardless.

Hi Jamie, We are investigating the issue internally. Assuming like you say the LEM appliance is vulnerable, there are a few mitigating factors: * LEM customers use a limited access shell to manage and maintain LEM, which does not use bash except when running external shell commands to make changes. * This shell also does…

can you jump into system manager and have a look at the node in there? might see some old interfaces or something against the node...

Will check out the SDK, thank you.

i would create a custom property against the nodes table for CPU, Memory and up/down your node down will contain a condition to match the monitored yes/no property your CPU and RAM alerts will contain a complex trigger condition for field cpu-utilisation is greater than field custom-property-for-cpu same for RAM for the…

Do you have UAC on? Earlier I noticed that agent doesn't work properly if UAC is on.

 By default, there are a large number of ports that NTA monitors; however, it does not monitor all ports by default to conserve space. If you have a lot of unmonitored traffic, you might want to add additional ports. You can also run a SQL query to monitor all ports.

Its a good thing that report scheduler can now send reports with a PDF attachment. But is there a way that we can edit the file name in the attachment? as well as not including the webpage URL with its password on the body of the email? At least make the PDF filename be the name of the report (i.e., same as email subject…

Update: Since posting, I am able to perform an nDepth search to find failed authentication requests to OWA. Refine the query with the following conditions: WebTrafficAudit.AlertActivityType=HTTP-401 AND WebTrafficAudit.URL=<URL> (e.g. 192.168.0.1/owa/auth.owa) Specify a time period and run the search. I am yet to…

If you submitted a case, can you tell me the number, so I can dig in? I don't see this problem with plain ol' text and user-defined groups, so it seems to be something special about directory service groups.

I would suggest opening a Support ticket.

I will assume you are using the AIR console and not the browser. If this is your first launch of the console since upgrading, close and launch the console. If you have upgraded the appliance to 5.7, make sure you update the AIR console. Remember that any change you make to the filter will cause it to clear the current…

Are you saying that you want to show the data from 3 UPS's in the same graph?

 Good suggestion on Map Maker. Grouping by custom properties is something we'd like to do. W/r/t a better way of adding new devices to the network, we'll be making changes in that regard in the next two major releases, so you should see improvement there.

Anyone?

We have a similar situation in our environment. Is there some kind of logic that is built into the App Monitor for this? This is a standard setup for almost all Cisco VOIP environmens.