RichardLetts ✭✭✭✭✭

These are two questions... for reports -> slack, because these can be sent out as email, simply send the report to slack using something like this: https://get.slack.help/hc/en-us/articles/206819278-Send-emails-to-Slack for posting messages to a channel I use this perl script c:\path-to-perl\perl.exe…

Monitoring only some ports puts you in that embarrassing situation of being ignorant I know, and unfortunately I have to accept this situation :-( I have >>6000 switches, or 286648 user ports -- that would be 20 more APE (above the 4 we currently have) It would be nice if UDT gathered (say) daily error counts on ports -- I…

On the WMON you can limit the nodes displayed by a custom property. 1. set a custom property (e.g. Campus) on your nodes, 2. on the WMON map page select 'edit' (not Manage Map) You would then and then limit what is displayed: Filter Nodes (SWQL): nodes.CustomProperties.Campus='Bothel'

might be set by the device? if you look at entPhysicalTable you get the sensors (on an ASR920 anyway); on the entSensorValueTable a 'status is reported, and SW might be using the 'ok' value entSensorType entSensorScale entSensorPrecision entSensorValue entSensorStatus entSensorValueTimeStamp entSensorValueUpdateRate…

anything is possible with a custom SQL alert on an interface something like this where interfaceid in (SELECT interfaceid FROM (SELECT Sum(in_totalbytes) TB, interfaceid FROM [dbo].[interfacetraffic_detail] WHERE in_totalbytes IS NOT NULL GROUP BY interfaceid HAVING ( Sum(in_totalbytes) > 2e12 )) X ) 2e12 ~= 2TB chnage…

I think you've illustrated why Network Sonar discovery doesn't work on large networks, but I've given up flogging that dead horse. We have about 15,000 network devices and we don't (didn't run discovery). when we install something our Change process has someone add it to our CMDB and we populate Solarwinds. UDT requires…

I know of no NMS that offers this functionality (HP openview, NAGIOS, etc), they all have some way to interface to your existing notification service, either by running a script (which then send email or fire a message to a pager service) In your case, assuming network connectivity, I would look at installing…

erm, I think the condition is okay... he has a not equal in there

I think that this might be a case for running periodic discovery against the nodes and reviewing the results. I assume you're billing the client for time when they make changes, so you only really need to find an efficient way to handle that.

Suppose you want to turn on hardware monitoring for all of your nodes at once. there is no way to do this through the UI. turn on CPU stats collection for all nodes turn off routing table collection for a chunk of nodes (e.g. switches). no way to do that with the UI (and it's not possible with the SWIS API either I think)

at NPM 12.01 none of the JobScheduler and jobEngine.v1 Executable files have been touched since April 2012 -- over 5 years ago. (some libraries were touched about 4 years ago) So I'm going to guess that people do not normally have enough problems with them to raise tickets to get a fix. Further aside: is your environment…

I've put forward an idea to allow us to do this -- we've had a thread with thousands of suggestions for new mappings from oid to vendor/machinetype: it's time we had a way of doing this ourselves. vote up: http://thwack.solarwinds.com/ideas/1952 /RjL

Wow. SolarWinds need to seriously have someone review the SQL on customer-facing pages select Caption,IP_Address from nodes where not Caption in(SELECT distinct[FullName] FROM [ContainerMemberSnapshots] where [EntityDisplayName] = 'Node')\ this requires a sort and lots of string compares for the IN portion select…

there is a default settings column in the same table; but here they are UDT.DataMigration.WaitForDoneTimeoutMinutes15UDT.DiscoveryJobTimeout10UDT.DnsJobTimeout30UDT.Layer3JobTimeout15UDT.PollingJobTimeout15UDT.RouterDiscoveryJobTimeout120UDT.SnmpTimeout5 Soalrwinds keeps telling me that it works and that they have larger…

I honestly think the UDT support folks are sticking their fingers in their ears and making the la-la-la-la sound.

Yes, we opened support case I was on vacation when the community change happened, and the other SWO sysadmins hadn't seen this before. Someone thought it was a good idea to store the community in the jobengine v2 SDF database

you can also check lastsystemuptimePollUTC < dateadd(minute,-3,getutcdate()) which will pick nodes even if there are o child interfaces/volumes (my poll time is 2 minutes, so one missed poll shows up)

That table is empty in our install, and the only time its ever had some rows in it is pre-12.x when the UDT plugin was crashing the module engine every couple of hours. What is more... the query removes pending notifications for any subscriptions that do not start with either https or https post-upgrade there are no…

I've had the same advice and pushed back on it. I think shrinking the database is a really bad idea that comes from support staff parroting what they have seen in other tickets. If your queries are not making uses of indexes because they are badly written then they will still read all of the data after the shrink because…

Danger, Will Robinson update the nodeid, interfaceindex, interfacename, InterfaceType, InterfaceTypeDescription, Caption on the old interface to point to the new nodeid, interfaceindex, interfacename, InterfaceType, InterfaceTypeDescription, Caption [and maybe update the pollers -- FWICS the same poller is used for all of…

In fact, a rule of thumb that I've observed over the last 11 years of building and maintaining monitoring systems (Tivoli, BMC Patrol, Nagios, Zenoss, SiteScope, etc) is that any single server performing a "polling" type action typically chokes at 10,000 elements. It has more to do with the number of open file handles…

the KB article says the DSK supports subscribing to alerts: SolarWinds Knowledge Base :: What SolarWinds products support alert data sharing? is there an example now? Thanks

You can use a custom SQL alert on a node to generate an alert. e.g. if you have received a BGP trap in the past hour indicating that a session has gone down: WHERE NODEID IN ( select NODEID from traps INNER JOIN trapvarbinds tv ON traps.trapid = tv.trapid WHERE traps.traptype = 'BGP4-MIB:bgpTraps.0.2' AND Datediff(hour,…

The Compatibility matrix needs to be updated to include the FOE compatibility with other products, like UDT, NCM, NTA, etc. and the additional pollers. for example the current FOE is not compatible with additional pollers for NCM 7.1 and later (breaking one of the major reasons I did the upgrade) Richard

Contact support -- they will walk you through removing and regenerating the certificates used by the various components to talk with each other. I think these are stored in the windows certificate manager (certmgr.msc) and in a database table (when I've had to fix these I've been working with support as this looks to be a…

${VALUE} is not a simple string, it could be a number of rows from the database and you will get nothing in the alert email if you have more than one interface that matches the locMinRSL Try something like this, all in one line... try it in the database editor to make sure it returns a simple string. {SQL:SELECT A.value +…

Check you are allowing syslog (UDP port 514) through windows firewall.

I use Orion extensively in an VRF environment, for NPM and NCM it does this fairly well for most of the out-of-the-box functions (at least with JunOS devices). Where it falls down are on the vrf-specific tables (notably the ARP table that affects IPAM, UDT, NCM), and the Routing tables (that affects NCM), and if you have…

How about an agent on the domain controller capturing the login events and forwarding those to the server? Then you could expose that API to enable customers with non-AD controllers to forward login events from other systems (e.g. Shibboleth, Radius).

please reference Understanding Interface Naming Conventions on EX Series Switches - Technical Documentation - Support - Juniper Networks [MX/M/T series routes use the same naming conventions] Thanks