Questionario

we had the same problem when we changed the logging of the firewalls to informational which created several hundred thousand more syslogs per hour.

Sounds like it might be SQL-performance related problems? what kind of SQL setup do you have? RAID 10? how many hdd's? how fast are the drives? I believe if you can add some high-speed drives you should be able to increase performance.

EDIT: missed the kiwi part, sorry about that :P

I think v2 is the new job engine. While some jobs have moved to the new job engine, some are still running with the old job engine. My guess is that in some future version there will only be the v2 job engine. Therefore yes, both should be running. Please correct me if I am wrong.

id be interested in a UNDP as well :) ive got a different tape library model but it should still work

I would definately like that too :P

if you are experiencing memory leaks, make sure to update to NPM 9.5.1 and APM 3.1. With previous versions I have had memory leaks which lead to Orion utilizing all available RAM until the services were restarted... with the current versions I let them run until they lose connection to the database once, if that happens I…

mhhh, never had this with 9.5 (Win2003 32bit & Win2008 64bit) or 9.5.1 (Win2008 64bit)

nice idea... would make alarming a bit easier... you could set a certain amount of points for each node, like 5pts for memory util, 5pts for cpu util, 10pts for 95% disk usage and 25pts for an interface. then set node warning to 10pts and node critical to 50pts... not sure how you could effectively do it and there are…

Well, I have the config change reports resource on my node details page on NPM so I am positive it works... Have you run the NCM integration plugin so that the NCM website runs on the NPM website? If you have, you should be able to add the resource. If you edit the node details view, you can find what you are looking for…

hi rmmagow, this is expected behaviour, you can limit your scan to a specific ip-range (the ones of your loopbacks), it is safe to just delete the extra nodes but some people want to monitor one node multiple times for exactly the reasons you mentioned, to see if the MPLS link is down but also to see if the node in general…

sounds right... I just created a template with 20WMI monitors, it was a pain to add each one individually so I saved the template to the computer and pasted the same component monitor in 20times, much faster than adding each one in individually but still a pain

Hi, I think if you go to interface details, there is a field called "Last Status Change", not sure if this is available in reports as well but I would assume so... You could filter a report on ports that are up and list the last status change column in the report. I prefer to do it with the switchport mapper from the…

while that is not implemented yet, you can log on to the orion server, open advanced alert manager and disable all alerts... not as comfortable but thats what we do for now...

@Marie: could you mark this for the PM? :)

depending on the server you need to either look through the event log with the event log monitor from APM or you need to find out the OID the manufacturer provides to return the status of the raid. To find the OID you can either do a MIB-walk on the targeted device (probably the fastest solution) or search the web for the…

did you reset the alert? also sometimes it takes up to 2minutes for the alert to actually fire, you need to let the window open for that time. you will see when it fires in the text window

that functionality would be nice but you cannot... however you could monitor that smtp server for either mailflow, open ports, up/down, etc. and create an alert which will use a different smtp server, that way you will at least know that orion can currently not send any alerts through that smtp server :)

Could you please exaggerate what exactly you mean? First I thought you were talking about Orion NPM pollers, which you can purchase to poll data from more than just one server, you download that only once and deploy it as many times as you have purchased it tho so I am assuming you didnt talk about Orion NPM Pollers. You…

Did you delete and re-add that server maybe? try to look into the events if that happened.

I remember we had a memory leak with NPM 9.5 and win2003, you might want to consider upgrading to the newest version (how many times have I heard that from support, haha). also, you are running sql on the same server as orion, this is not recommended and might be suitable for a test-environment but definitely not on a…

Hi cnorborg, during a discussion with Francois I created a regex with your use-case as an example. The following regex will match if it finds the line "ssh <IP> <subnetmask> MgmtInterface" and the IP is not 10.10.10.1/32 or 10.10.10.3/32, you have to create an advanced regex rule that "must not contain" the following: ---…

or you could use some freeware of wget and just call the url with that in a command line...

hmm? I am a bit confused, you are talking about the SQL user experience monitor in order to make a SQL query? Because that monitor has an option called "SQL Server Instance", if you enter the name of the named instance there it works just fine for us :)

I have the same problem...

maybe it was the poller that lost connection?!? If the poller loses connection, all servers would appear as down for it.

you could create separate alerts for each group and define what they are alerted on or you can add a custom property which includes the email of the group that should be alerted, you can then use this custom property in your alert to send the email to the one defined in the custom property.

anybody?

with the new orion version I think you can search and replace strings, therefore you could replace the non-descriptive stuff with your own test thet explains it easier to the user.

1.) check local firewall, try deactivating it for the meantime 2.) on the asa, check that syslog filters for syslog servers are set to the desired level (for you probably informational? (double checking the syslog server is entered and that logging is turned on i probably dont even need to mention) 3.) if that does not…