FormerMember ✭✭✭

within an advanced alert trigger, add a complex trigger condition.. where field CPU-utilisation is greater than field <CPUAlarm> where CPU alarm is your custom property. this trigger allows you to reference the number within the custom property... you can do this for volume utilisation, CPU, anythying...

Also, Gary, I think support contacted you yesterday with the same answer, but I'm happy to close the loop here on thwack, too!

With regards to the buildup NAT events from the ASA, we've actually recently developed a mechanism where customers can "opt in" to receiving these events in their normalized alert stream by reassigning their severity level to one we'll look for and normalize. There are a few things to consider: * If it's "accepted traffic"…

Those templates for rules will also be useful when trying to create filters - it will be the same logic that you can use there. The Auditable Group Events group SHOULD be catching when a user is added/removed from a group, a property change (like the name) is made to that group, that sort of thing. If you're not seeing…

In your LEM console, click build then rules. Look in the left column under folders and find "Rule Library" open this up and underneath you will see a "Windows/Active Directory" category. All rules you need for monitoring any group changes/deletions will be located here. Click the gear wheel on the rule you want to use,…

Well, based on my research through thwack and solarwinds, you can't do it. I found an entry from NPM 9.x that said flat-out, you could not transform more than the last value, i.e. transforms only work on the current value of the poller you are transforming. So, the answer is to transform it, tell the transform to save the…

Hello jxchapell, I'm considering purchasing this software and I having issues too. My QFX (acting as a core swicth/router) does show up on the map. I has a few interfaces but none of them are connected. I'm confident the snmp configuration is solid, other topo mapping software handles this switch correctly. fpc0:…

Based on what we've seen, this configuration should handle your load. It may be more than you need, but NetFlow is very resource-intensive, so it couldn't hurt. · 3GHz quad-core processor · 4 GB RAM · SQL Server on a separate physical server · 4GB RAM

If you download 8.5.1 from the customer portal, SP3 is included and applied during the installation. If 8.5.1 is not available on your download page, I suggest you call SW.

Two ways: 1. You need agents directly on those systems 2. Build a rule that looks for UserLogon.DetectionIP <server1> OR UserLogon.DetectionIP = <server2>, Use the action "Create Incident" NOTE: You might need to refine the rule to only "interactive" logons (using LogonType) to filter out some noise, but you'll see as you…

I believe the answer is that we are, but I won't challenge Sophos if they want to solve it first! Our support team is confirming a fix/workaround by making a change to the syslog daemon configuration on customer appliances where these symptoms occur, then after we've confirmed it's working as desired we'll roll it in to an…

Yes. Not possible in 2.5, but it's high on the list for the next version.

If you're using IE 11, try turning on compatibility mode for the LEM server and restarting your browser. (In IE use Gear -> Compatibility View Settings -> Add this website) This has resolved it pretty reliably for us, though we're not sure what changed on the IE+Flash sides to make this happen. If you're not using IE11,…

I had the issue of the log file taking all the usable disk space with version 9.6.0 I upgraded to 9.6.1 to fix this issue, but I then the syslogd service started crashing after a couple of minutes. I do not have the latest .Net upgrades installed. I notice the same error messages as you guys: Service Version =9.6.1.6 |…

 Orion's Custom Poller doesn't support table-based MIBs yet. We're working on that feature for the next release.

I had the same problem but then I realized the saved url I was using still included the /NetPerfMon/Login.asp . Sometimes the obvious is easy to overlook. I needed another pair of eyes to notice it.

I want to be clear. We plan to add this as an option, but I'm not sure about "soon". It is not scheduled for 8.1. It is likely to end up in a later release, but I can't promise which one yet. Denny LeCompte Sr. Product Manager, Orion SolarWinds

Which monitors specifically are you having problems with?

 One APM script will only collect output one statistic. Just curious? Could you accomplish the same thing by using WMI Performance Counter monitors?

Honestly: it varies. Certainly weeks, sometimes months, rarely never. I'm not sure where the actual middle of the bell curve is. What happens: * You say "hey, we're interested in covering product X." The support team likely asks form questions: "what does product X do and how does it log? can you send samples?" All that…

Appinsight won't work on an Edge server, it expects to find the mailbox role. I took the built-in Exchange 2010 Edge Transport Role application monitor template and copied it off to make an Exchange 2013 version of it (make sure to change all instances of 2010 in the template to 2013, then it will show up in your list of…

"Is it fixed yet?" No, if it was, you would know because it would be working. Calling me only lengthens the time before it is fixed, because I have to answer my phone and talk to you instead of working on the problem. 

Good news, everyone! The release candidate is available on the Customer Portal! As always, check the forum for more info and to post questions, thoughts, issues. I put up a post there about the RC, what to expect, etc. Edit: If you are a LEM Workstation Edition customer, you probably don't see it on the portal, but if this…

Bump.

No idea ?

I might also add that trying to exclude Notices completely by priority doesnt seem to work on the server or webaccess...

i have never heard about this product before... but i am going to now i am going to! i was looking at Splunk but the price point for this is 10 times better! and it seems more functional!!!

I don't think this is possible.

BTW, this is not currently possible. Wow. I have opened a feature request for this. Benny

jebarber...any feedback from SW on this? We see the same issue with all our Novell servers (running 5.00.10). I posted this problem with SW but have not received any response as yet.