HolyGuacamole

Try re-entering the password for the provider #1Password

Thanks for the details. Assuming you have re-assigned your CIFS shares for analysis now, you should be fine for any future upgrades. But, we will look into it from our end.

Enable Ungrouped File Type Details from the Settings page and re-run the file scan

You will need to change the 'property to alert on' from Node to 'custom Node poller'.

that's fine. Can you now switch the drop down to 'Custom SQL Alert' and paste the query

If your script runs properly on the server that is running the services to be monitored, you can also consider deploying a SAM Agent to avoid having to deal with WinRM issues. Be sure to expand the Advanced Properties of the Application Monitor, and change the platform setting to be x64 from x86 if PS installed version is…

Sounds like what you need is an Orion Failover Engine - i.e., a standby server in the DR site. Have you discussed this option already?

Log & Event Manager v6.0 RC Now Available: File Integrity Monitoring Included! see instructions in the blog post above

AD authentication is done only upon hitting the login button. If the login page is taking a long time to load, it's something else. You may want to re-run the config wizard and uncheck the 'windows authetication' box if you have it turned on.

I think I know what is going on. The SMI-S provider cannot sync up with the array if its only given monitor access. Please remsys the CX in the Provider and addsys using an account with manager (admin) access. No changes should be necessary in Profiler.

What kind of devices are these? Where are they situated relative to NCM? Anything in the device logs?

Just in case the above response wasn't clear, for your specific example ${vbName4} will give you snAgGblTrapMessage and ${vbData4} will give you MPLS: VPLS HEcustomertest peer is down

PowerShell seems like the best route.

lcfc, I am curious if you had to do anything special on the Palo Alto zones/rules settings to allow Syslog traffic to be permitted to be sent to LEM?

‌if you were to manually run commands to display its configuration, what are the exact set of commands you would enter?

Ok great. You may want to move this to the NCM forum and mark the discussion as Answered

Is solaris your main Orion server name? Does cz\petr.pribyl.ad have full admin rights to the Orion console (not to the Orion server)? Have you tried a non-domain account (like the in-built admin account) that has full admin rights?

${Node.Comments} will provide the value of Comments field in the Nodes table for the affected node ${InPercentUtil} will provide the Receive Utilization for the affected interface. No need to wrap them in a SQL macro.

AFAIK - RPC is lighter on the bandwidth and ports, but WMI is the preferred route if you are not constrained by the two factors. For the ones that are not working (regardless of WMI or RPC), is it consistently in this unknown status (i.e., there was never a successful poll)? Also, since you mentioned 1700 serves - do you…

If you get unsupported message, that means your device doesn't respond to those OIDs. For the byes in, out etc, they seem to be counters. When you define the custom poller, you may want to choose 'counter' as the poller type so that NPM can automatically compute the delta between two consecutive polls. If you search for…

hi qbarry, Thanks for documenting your experience in great detail. See comments inline So seeing as this hasn't generated many responses, I'll document what we found in relation to monitoring Oracle (and SQL Server) with Orion: - Our (SQL Server) DBAs like AppInsight,but the inability to turn off certain components, turns…

You want to alert when the Daily In + Out volume exceeds a certain volume for a specific interface?

Ok great. Please mark the discussion as 'Answered'

No, it's not just for new nodes. you can re-run discovery for existing nodes.

I am absolutely positive the Active Alerts are the ones that have been triggered but not reset. Can you provide an example of why you think otherwise? I am beginning to suspect the Reset condition in your Alerts may not be properly defined, and hence the alerts are staying active.

The Alerts view under the HOME tab shows the Active Alerts by default (i.e., alerts that have not been reset). If you want this as a report, there is also an out of the box resource to choose from in the Web Reporter.

Most databases have some sort of import function from a speadsheet. It is probably quicker for you to export the data to excel from the reports, and import into your database. for NCM, no easy way to query the tables as far as I know. but you can definitely export them to CSV p.s: please mark the discussion as answered and…

If you enabled the connectors with the default output type (which is Alert, not nDepth or Alert,nDepth), then only the normalized events are sent. The normalized events are sent only for the enabled connectors. Is the "excessive" bandwidth coming from 1 agent or multiple agents combined? Where are your agents relative to…

Yes. It is being used in production in various environments.

I don't see anything odd about this output that would make this device to behave differently in NPM. so, you are saying, you add the node and then you click on 'List resources' and don't get to choose any of these 300+ interfaces?