FormerMember ✭✭✭

There's not enough info here to really comment. You might want to open a Support ticket.

I have the same issue, just with Kiwi CatTools instead of Syslog, so it appears it's maybe something to do with the update module that I'm sure they both share. Your workaround works for CatTools as well. I opened a case with Solarwinds and they've passed it on to the developers for them to troubleshoot.

I split this out into a new discussion. You can back up the virtual appliance as a whole with a snapshot or other VMware/Hyper-V backup solution. You can back up the content (database, settings) to a Windows file share. More info: SolarWinds Knowledge Base :: How to Configure Backups on Your LEM Appliance

Thanks, Adam, we're looking into why you're seeing this again. We would have expected the 5.3.1 resolution to carry forward to 5.4. Will keep you and Thwack apprised of a resolution. If anyone else is seeing an issue using the "DHCP but no Agent" (or in Adam's case, they built a Logon but no Agent) rule, or any rule with…

With the IIS connectors, you can have it go back and read old files by pointing it at an old file, not just the directory itself. Word of caution, though, it will read every file up to the current file, so it may duplicate data if you've had it on. Otherwise, all connectors read from now-forward to keep it safe.

Furthermore, I understand the following may create holes in netflows sent/received: 1) link saturation on flow exporter's side; netflows never sent when too busy 2) link saturation on SolarWinds' Netflow receiver side; netflows made it to receiver's IP stack but were dropped b/c too many to process (according to SolarWinds…

Thanks for the link. I will take a closer look at those metrics, If I had posted trouble with only one link, I would expect questions such as: a) is the router's config sending netflow in the first place? b) is a firewall blocking transmission from source to SolarWinds? Purpose of including the other two links is they are…

I may have found the problem but will check if it runs as scheduled tonight. Suspect it may be the windows credentials on the scheduler.

That is true. We have a couple of feature requests on tuning retention per-source and we're looking into when we could get that implemented. Nothing imminent but it is on our radar. Here's one feature request I found on that to vote on: https://thwack.solarwinds.com/ideas/4036

We finally figured it out. Looks like it had to do with a FIPS setting conflicting with NCM. From the NCM release notes: FIPS and NCM As Ajax-based software, the NCM Web Console relies on the Microsoft ASP.Net ScriptManager to facilitate page-level application functions. Since the version of ScriptManager in Windows 2008…

Please let me know when this available for testing.

 LANsurveyor is a separate product, and Switch Port Mapper is part of Engineer's Toolset, also a separate product, although each is <$2k. Both of these products work with Orion, and either will get most of what you're looking for. 

When ever we reboot, we get an event notice - "NetFlow Receiver Service [IBR1PNRAP017] is receiving a Netflow data stream from an unmonitored interface. " It happens anywhere from once to a few entries as the system comes up. I suspect it is because NTA starts receiving data from the devices before the system is fully…

We've had a couple of questions about TMG, but I don't think any have been on thwack. TMG is backed by the former ISA Server, which we do have a connector for (it's just marked ISA). What we've seen with TMG is that a lot of people are more likely to be logging it to a database than to files on disk, which we don't…

After further research, I have only included the view: snmp-server view mgmtview iso included And I have deleted the rest of them. ISO is at the top of the IOD/MIB tree, so the rest are included if you have that one. But what fixed the problem was changing over to SHA for authentication and DES for encryption/privacy. It…

Depends on the vendor really (i.e. what it presents via SNMP). There is a lot of support for Cisco statistics, but in general SNMP will cover Errors and Discards by default. Anything beyond generic SNMP will need a Universal Device Poller (UnDP) setup to poll any specific information, which Orion will happily do, and may…

Anyone resolve this? We are seeing the same exact issue in NCM 7.7 after upgrading the OS from Win 2012R2 to Win 2016 (in preparation for SW/Orion version upgrade).

We are having the same exact issue as well. NCM 7.7 06/22/2018 5:00:33 PM : Started Weekly Config Backup Download Configs from Devices All Nodes Devices: 255 Errors: 255 ERROR: Cannot download Running config : Transfer Setup Error

I have some UNDP SNMP OID monitors for tracking the number of sessions on a particular realm. If you do an SNMP walk on OID=.1.3.6.1.4.1.9148.3.2.1.2.4.1.2.x it will return your realm names. EX: OID=.1.3.6.1.4.1.9148.3.2.1.2.4.1.2.13, Type=OctetString, Value=<RealmName here> Then if you do an snmp walk on…

Orion Application Performance Monitor is meant to do exactly what you're describing.

I've also noticed that the IP accounting on one of my routers is showing that a particular Pc has transferred over 1Mb of data over a period of 5 minutes to one server. But netflow shows that this PC only transferred 256KB over the same period of time, whats up with that?

Also, there was a white paper put up on solarwinds.com a while back about estimating log generation, where some loose guidelines were given - registration required: Estimating Log Generation for Security Infor... LEM is also mentioned in this SolarWinds Labs episode: [VIDEO] SolarWinds Lab #17: Too Small or Just Right?…

I think the closest you can get would be to check out some of the "Database Maintenance" reports in LEM Reports. You might find some interesting statistics there.

Yes, it's on the roadmap. Over the course of the next couple of releases, APM will do everything that IPM does and a whole lot more.

I have the same issue. What was your upgrade procedure? Was it this? * Shutdown all * Run SAM 6.2.3 full installer * Start all * Install additional polling engine edit: I contact SLW Tech support this morning and linked your post to let them know that I'm not the only one with the issue.

Shame because the product looks like a move to building service models i.e. that server and that application forms a components of that service but without availability reporting it is a bit pointless in my environments. 

 That's already a high priority in the 2008 roadmap.

They represent the min and max values for the CPU during that interval. For the third interval in the graph, the average measured value was around 40%. The minimum Orion saw was in the high 30's, while the max was in the low 50's. Every value Orion polled in that interval would be in the box.

 I entered the first as a feature request. The second one, if I understand it, is to allow you to create an account limitation on your list of custom properties.

One possibility is that these measurements were taken at different times.