FormerMember ✭✭✭

Hey all, I'm taking a look at things. I've managed to reproduce it, and I'm looking for a workaround. I'll post here when I come up with something...

I'd recommend that you open a Support ticket for that one. 

Hi, I am experiencing the exact same issue. In fact, when we tested from the test button we can receive the mail with minimum delay of 5 minutes, but when we use the sysloggen it is giving us delay for about 1 hour (or more, our record is almost 2 days >.<). NTP server are confirmed configured in the same timezone range…

Ditto...

Hi corazondemelao33, Welcome! If you want to get more familiar with thwack, you should check our onboarding mission: You Don't Know thwack - The Onboarding Mission. Hope you'll like it here!

Thanks for all the input everybody! I really appreciate it. With that, and some other articles I read, I was able to thin down the list quite a bit. Thanks, again, Scott

SWMacroProcessor is our code for processing variables in alerts. Is the message you are seeing: "Orion Alerts SWMacroprocessor Message"?

The 'All Active Interfaces' is just a shortcut to check interfaces that are currently listed and active. If they become active later, they won't automatically be added. In 9.5, we added ability to mark an interface with a new status(Unplugged) instead of marking it as down. NPM will still gather stats against the interface…

I'd try using the "Network Traffic Audit - Web Traffic by Source Machine" report. What this tells you is the most # of hits through the proxy server by source, but it doesn't tell you anything about duration of their surfing. If you need to know how long they were on certain sites, I don't think there's a good way to…

 Mike, NCM is NOT a new product. We've renamed Cirrus (to make our branding match our product stategy), so Orion Network Configuration Manager = Cirrus Configuaration Manager. The new NCM web console is part of v5.0, and it will be FREE to every Cirrus customer with current maintenance. NCM has a separate web server, but…

This list shows the "componets", or discrete performance objects that APM can monitor. From these components, you create an Application Monitor Template that represents an individual app. You apply the template to your servers. This is not the list of applications you have created. To see those, go to Manage Applications.

Well, I'm not sure I promised that exactly, but it's sort of true in v9. Unlike previous versions, Orion now treats the database as authoratative, so if you add a node via a sql script, Orion will pick it up. The reason I say sort of is that adding a node via SQL is not simple. There are a lot of elements to a node. Orion…

go to orion polling setting and try adjusting the snmp timeout to a larger number. switches with huge amounts of interfaces are usually very busy and SNMP is low priority when the switch has to decicide whether to answer a SNMP request of figure out where to send the real traffic

It's a major architectural change, so it's not going to happen in a service pack. The thing to keep in mind is that we are already moving new functionality to a new, multi-threaded poller. For instance, the VMware polliing in 9.1 is multi-threaded. We'll move some more stuff in 9.5. Yes, there will be a release where we…

I'm assuming you have APM 2.0. Go to Admin > APM Settings > Application Monitors Then in the "Group by" dropdown, select "Application Monitor Templates". Click on the template name you're interested in. There you go.

Didn't see the attempted report designer. Can you post the query you are using that isn't working?

Are you looking at the library rules? Which one? There's a few malware-related rules (AV Update Failure, Virus Attack - Bad State, Worm Activity).

Thanks Guru! Markus Alvarez

So what is the MIB that I can use in order to get this traffic to show up in Orion for a POS interface?

APM's doesn't have a monitor that looks specifically at tables. You can run any SQL Query with the SQL Query monitor. Is that change info available via a query?

www.plixer.com/.../

Exchange 2007 was included as a core part of APM in version 2.0 (August 2008)

I think it depends on your SQL backup tools. There's nothing particular to Orion that would allow a partial backup or have the history stored elsewhere.

 It's possible to put the pollers in a separate location, but it's not recommended. EOC and multiple Orion servers is a much better approach.

You might try upgrading to APM 2.5, which is available in your customer portal. We made major changes in the way applications are polled, which might (although no promises) help your situation.

Which product are you referring to?

I meant NPM 12.0.1.

It can't be done today, and yes, it's on the roadmap. But, as always, I cannot give you a timeframe. I understand why you want timeframes, and but I hope you understand why I can't provide them.

I always make sure I press activate rules after enabling or saving a rule. It is easy to forget to do this.

Some background on using Any Alert/Event in rules that you may find interesting... (as you discovered there's no inherent technical limitation to doing it, I'm guessing the restart either cleared up some queued events during the re-mapping of your rules or some other system issue like time that was just a coincidence) On…