Kuz

There may have been a problem with website registration. You can check the website, by running it manually (from command prompt). From this directory: <program files>\UltiDev\Cassini Web Server for ASP.Net 2.0UltiDevCassiniWebServer2.exe /run <program files>\SolarWinds\Kiwi Syslog Web Access\html Gateway.aspx NNNN Where…

Hi jswan, Adding support for interesting message types to the script isn't difficult. Try making the following changes to Script_HostCount.txt. (This will keep counts for the three message types you are interested in. To include other message types, add them to the ... messageType(N) = "xxxxx" ... section of the script).…

If the MIB database is missing the definition for NICE-II, then I'd suggest downloading the latest version of the MIB database, from here: http://www.kiwisyslog.com/kiwi-syslog-server-latest-mib-database/ If the latest version still doesn't include the NICE-II MIB file, then you'll need to source the NICE II MIB file, and…

The messages will be lost. KRDP is the only protocol that supports resending of messages if the remote host is down, and for that to work you would need another Kiwi Syslog Server instance as the recipient.

Kiwi Log Viewer is an additional application, that can be purchased from here: http://www.kiwisyslog.com/kiwi-log-viewer-overview/

Hi Jason, There's a custom "Top 'N' Hosts" script in our content exchange area, that'll allow you to customize a Daily statistics e-mail as much as you like. Kind Regards,

What DBMS are you logging to?

OK, my bad. The line continuations shouldn't have any comments after... Replace the "SQLcmd=" block with this: SQLcmd = "INSERT INTO " & DatabaseTable & " (" & DatabaseFields & ") VALUES (" & _ Quote(.VarDate) & "," & _ Quote(.VarTime) & "," & _ Quote(.ConvertPriorityToText(.VarPriority)) & "," & _ Quote(.VarPeerAddress) &…

I think I see the problem: Quote(.VarDate) & "," & should be: Quote(.VarDate) & "," & _ (underscore is line continuation in vbscript)

Hi Oristilli, I'm not sure I understand the problem then. Rather than spend a lot of time with back-and-forth's on thwack, perhaps you could raise a support ticket? There may be some other issue with your configuration. http://www.kiwisyslog.com/technical-support/ Kind Regards, Mike. 

If your Event database is that large then don't worry about sending it. Instead, what would be most helpful is if you could submit your Kiwi Syslog Server Tech-support file (Kiwi Syslog Server Manager > File Menu > Create Tech support). If you can send in that file, I'll check the support ticket and let you know what I…

Sorry, I meant to say just to check out the .zip file in the KB article. (You're right - The article itself will probably not make sense). I just thought I'd mention it since it touches on the use of XML stylesheets (in combination with XML wrapper) I haven't actually tried any of this, but I'm assuming that the advice…

Hi snakethejake, We've recently discovered that this is a bug with Kiwi Syslog Server (that we don't have a workaround for currently). The bug happens when Kiwi Syslog Server tries to determine the Gateway IP address for the selected adapter. This call fails, and so the MAC address of the Gateway cannot be determined…

OK, sorry - the connection variable isn't called "DSN", it should be called "ConnectionString". ie. ConnectionString="DSN=****;Description=****;UID=****;PWD=****;APP=Kiwi Syslog Server;WSID=FILTER-DATA;DATABASE=****;"

All I meant by configuration, is the Ruleset that you are using with Kiwi Syslog Server. ie. Your Rules, Filters, and Actions. The KB article has instuctions on how to replicate the rulesets (configuration) between instances. (http://knowledgebase.solarwinds.com/kb/questions/2093/Load+Balance+Kiwi+Syslog+Server) The…

The event is either from Snare or SolarWinds Log Forwarder for Windows. You might want to check out this RunScript: <program files>\Syslogd\Scripts\Script_Log_snare_events_to_odbc.txt It will parse the MSWinEventLog message format, and enable you to insert the event in to a database table. More detailed information is…

Interesting... That was more or less the breakdown I was expecting to see - except for the (75) bit :) Can I ask what version of Kiwi Syslog you're using? We have had problems with accuracy of the stats reporting in older versions... Whatever the case, if you employ a custom Top 'N' Report then you can track (and report…

It's currently not possible to automatically delete contents older than x days from Web Access database (Event.sdf). There is an automated maintenance procedure that ensures that the Event.sdf database does not grow beyond 4GB (the maximum size of a SQL CE database). Whenever the Web Access Event.sdf database approaches…

PST = UTC - 8 hours Looks like your times are in UTC. Dealing with UTC <-> Local time conversion in vbScript can be a bit of a pain, but here's a snippet you should be able to include in your script to cater for the UTC conversion. TimeOfAccess = DateAdd("s",DelimitedFields(2),"1-Jan-1970 00:00:00") ' Fetch ActiveTimeBias…

I guess you'd say that (technically) it's running in 64-bit. The WOW subsystem translates between 32-bit and 64-bit calls, thus allowing a 32-bit application to run on 64-bit architecture. It's still a 32-bit app though.

You would use the E-mail action in Kiwi Syslog Server to achieve this, eg: Rule "OSPF" Filter +-Input Source="SNMP" +-... Action +-Email message: %MsgText

I'd recommend you look here: http://www.kiwisyslog.com/help/syslog/databaselogger_disabledata.htm It explains how to disable the database cache altogether.

I'm not 100% sure on what your wanting here, but "Store and Forward" for a given time of day should be able to be done with a single rule, as follows: Rule "Time Range, Store and Forward" Filter +- Time of day Actions +- Log to file (store) +- Forward to another host (and forward)

Searching in UDT uses wildcard matching. eg. Rice*

BTW, if you really want to know what process has which port locked up, run netstat -aon from cmd. Check for PID binding to UDP 0.0.0.0:162 (default SNMP port) Correlating PID to Task Manager process list will tell you what process (name) has the lock.

Screenshot

You may also want to try the Time interval (Flags/Counters: Timeout) filter if the Threshold filter doesn't suit. Time Interval filter Overview This filter will trigger once, then wait for a set time interval before triggering the filter again. The Flags/Counters filters need to be placed after all the other filter types…

stevenstadel, I can confirm that this error may occur in environments with none or limited internet access. SolarWinds Log Forwarder for Windows is a digitally signed binary, however the .Net framework automatically tries to access the Certificate Revocation List on the internet to validate that the certificate used to…

Mian, The default rule in Kiwi Syslog Server is pre-configured with a Log-to-file action, which will log to <Program Files>\Syslogd\Logs\SyslogCatchAll.txt

Hi potha, Are you talking about forwarding Windows Event Log information to Kiwi Syslog Server? If so, check this out