Network_Guru

The LSASS process runaway issue is a BIG problem for me as well. I've found that using the System Manager "gui" style buttons in the right pane to configure the alerts, causes the System Manager app to hang for about 10 seconds and then just close. Checking the taskmanager after this shows the LSASS.exe process hogging the…

I feel your pain snowjay. I have had the server re-booted at 1AM Saturday morning by the Windows support team installing patches without my knowledge. Thankfully I only get 4 or 5 alerts after a reboot, but it was a rude awakening to be sure! -=Cheers=- NG

I've always had this issue. It is related to the number of devices/elements you are polling, the max polling stats setting & if you have set the initial polling to create a baseline, or wait for the baseline to be built ~15 min. You could try increasing the max polls/sec. of turning on the instant baseline, but I don't…

I am currently doing the same thing. I will be using 32bit OS on the poller & web engine, so that I may install other applications such SW Eng. Edition which is still a 32bit app. I am using 64bit for the DB server which will have 8Gb of RAM. This way SQL can use the memory directly, without having to remap it using PAE.…

Jason, As you have stated, setting up Orion is a real snap. It is very intuitive and gives you instant results. We are monitoring 600 nodes with around 2600 interfaces. As far as monitoring devices, support for Cisco devices is very good. We are monitoring Nortel Passport & Baystack switches, and are able to get port util…

Hi Bryan, I use SNARE to alert on Orion services on my server and send the SNMP trap to a standalone Syslogger to be e-mailed out. See this post for more info -

quote:Originally posted by pwinterhalder So hopefully you should be able to see the top page of my Solarwinds implementation... Looks like some of the link was truncated. This is all that it resolves to: us.f1f.yahoofs.com/.../frontpage.gif -=Cheers=- NG

quote:Originally posted by skrause It seems to happen on the charts and gauges the most and the only fix that I've found once it's occurred is to boot the server. I have had the same thing happen with the charts and gauges on the website, only I am using a local install of the SQL server. quote:Originally posted by skrause…

See the following post: www2.solarwinds.net/.../topic.asp (you need to purchase the Engineer's Edition to make this work) -=Cheers=- NG

It should be quite straightforward using the defaults. Check this post for a link to the migration guide. The only "gotcha" I ran into was this one. 

Have a look at these posts: www4.solarwinds.net/.../topic.asp www4.solarwinds.net/.../topic.asp -=Cheers=- NG

I've created 4 custom reports with report writer which appear on the interface tab of my Node Details page. * TX discards greater than 0 Today * TX errors greater than 0 Today * RX discards greater than 0 Today * RX errors greater than 0 Today This is a generic report that applies to all interfaces in the Orion DB, but I…

Just to be clear, this won't tell you if it's a hub or a switch. It will just let you see that there is a multi-port ethernet device plugged into your switch port. We enable BPDU guard on all our access switch ports to prevent loops in the network & alert us when someone plugs in a switch. We have syslog alerts setup to…

There was a bug in Version 7.2 that caused the polling engine to falsely report packet loss. especially on nodes which were on the same subnet as the Orion polling server. Please chaeck the following forum posts: www2.solarwinds.net/.../topic.asp www2.solarwinds.net/.../topic.asp www2.solarwinds.net/.../topic.asp This…

Hi Boe, Welcome to the world of Networking. If you use a Cisco router on your network, you can use something called NetFlow to do what you want. Just do a search in the Orion forum for Netflow & you will find several discussions & products mentioned that can do this for you. www2.solarwinds.net/.../search.asp Otherwise you…

I believe you can install an an app to send event logs as Syslogs to Orion & alert based on the Syslog. See the following post: www4.solarwinds.net/.../topic.asp [The Link Has been fixed] -=Cheers=- NG

I see something that may be an issue: quote:Exporting flows to 172.25.99.221 (2055) 172.25.99.222 (2055) Exporting using source interface FastEthernet1/0 You should be using the Loopback interface for Orion monitoring, as well as the source interface for your Netflow exports. In this case you are using the Fa1/0 interface,…

I've heard this Remote Admin tool was to be sold as an add-on to Orion, but I have never seen it. I don't know how you got a hold of it, but I've been asking for this for some time now. I was planning on using this to resolve our LSASS - RDP session issue. Looks like you are on your own on this one... -=Cheers=- NG

 Hey Jon, Please have a look at this post. The logic is the same, but you would use the interface table instead of the node table and base it on an interface custom property instead.

 There is another post from today which mentioned the "Allowed to Clear Events" user account property was unchecked for all users after the upgrade to 8.1. You will have to re-enable this for all users which should have CPE update rights, as this is based on the clear events permission being enabled. Also any custom…

You can do this with the Orion Report Scheduler. Have a look at these posts for more info.

Net messaging works fine in our environment crossing 6 routers. It uses TCP/IP or possibly netbios over TCP/IP. -=Cheers=- NG

Damain, One way I have done this with custom HTML pages. Right click on the gauge and select 'properties'. Copy the complete URL for the gauge and past it into a Web page. You can even use the built in ORION web page link. -=Cheers=- NG

Does your custom page have a view limitation? Perhaps you are searching for something which is not allowed according to the view limitation assogned to this page?

What Roger said! I only use the HSRP/VVRP address to calculate availability & latency stats for the site & don't enable SNMP in Orion for this VIP. Best practices are to use loopback IP's on your routers & monitor the loopback IP with ICMP & SNMP. If an interface goes down but the router is still up, chances are you can…

Hey Bleearg - I suspect it may be an SNMP version issue. I saw some posts pertaining to something similar to this in the toolsets forum; www2.solarwinds.net/.../topic.asp -=Cheers=- NG

Have you tried Sawmill. It processes logs <grin> www.sawmill.net/features.html -=Cheers=- NG

I have not yet installed V7.7 and have not yet setup syslogging on our RAS termservers, so I can't help you there Marlon. It shouldn't be too difficult to parse out the data you need, but I believe the Radius accounting on a Cisco ACS server is a much easier way to get the user stats. Modem stats would have to come from…

You should be able to get this info from your Syslogs if you are syslogging the termservers to Orion. Another option would be to use the Cisco ACS server, if it is setup for Radius accounting. -=Cheers=- NG

You may want to bump up the polls per second by 20-30% to give yourself some room for growth. It also speeds up the baselining after a server restart. It usually takes an hour or so to settle down on a large network if you have the polling engine set not to baseline your network after a restart. -=Cheers=- NG