RichardLetts ✭✭✭✭✭

we went ahead and deployed the change to switch and router configurations to send the syslog and trap information directly to the Solarwinds servers at the same time as we weer updating other standard parts of the configurations.

The MAC address alerting question is a UDT feature.

All this does is let you know that updates are available on your customer portal -- if your firewall is locked down i would suggest disabling this and manually checking your customer portal for the updates. there is no automatic update feature that runs on the server (AFAIK): you have to download the updates from the…

Yes. Mention the vendor's equipment, model, and software version would be a start... Is this Cisco, Cienna, or Infinera? ONS15445, 6500, ATN, DTN,... Download the text mib for the device and use your favourite editor (vim, notepad++, vi, grp, emacs) and search for text strings like optical power level, find the name and…

the first step with any new device is to do a snmpwalk of the enterprise mib and look at the variables that are returned. If there is nothing interesting returned then it is a support call to the vendor to get them added to a future software version If they are returned ytou will now know the OID to poll using your own…

Create a report and embed that as a resource? I've uploaded a top 25 errors report here: Top 25 Errors This Hour report it's a custom SQL report, so if you want to modify it you'll have to understand (minimal) transact-SQL. If you need custom time ranges then you'll have to join to the InterfacesErrors_Detail table and do…

here is how you find nodes not in UDT: select * from nodes where nodeid not in (select nodeid from udt_job) I have a custom property 'in_udt' that I sent after importing nodes into UDT so i don't need to do this by looking in the database every time.

I'm at 11.5.1, and it seems quite stable to me. [UDT 3.2.2 is not so much, but that was not the question]

Yes.

Here is what i use to alert on routing issues (BGP/IPv4 or OSPF) which equates to: WHERE ( (NPM_RoutingNeighbor_V.OrionStatus = 2) AND (NPM_RoutingNeighbor_V.IsDeleted = 0) AND (NPM_RoutingNeighbor_V.DisplayName <> 'Idle') ) Note: the columns in the routing neighbor polling are oddly named, and mismatched between the UI…

give that most of the reports have some kind of SQL behind them you could always take that, convert it into SWQL, and use the API to pull the data directly. if you're using the server-based report designer then you can chose 'display SQL' from the designer as a starting point.

1. yes (no) 2. install the additional polling engine if you look at the service manager on the additional poller the syslog and trap receiver should be installed. Given this is windows you may need to add windows advanced firewall rules to let the traps and syslog reach the server processes. all these processes do is apply…

I'd turn up logging on the Alert manager process and read the logfiles from it to see what the process is doing. three ideas: idea 1: It might be as straightforward as the process gets the list of nodes that the reset condition matches it then resets the alert state on those nodes. then subtracts the sets of nodes where…

on Juniper equipment, at least, errors and discards are only counted at the physical layer. e.g. if you have a frame that fails a CRC check, how do you know that the VLANID hasn't been corrupted. Similarly outbound discards where the device has too many packets queued for the physical layer (it might be useful to know that…

when is a 'VLAN interface down' but the underlying physical interface is 'up'? I don't know of any networking equipment from cisco/juniper/hp/slink/smc/brocade/extreme where the VLAN interfcee tracks ifState differently to the underlying physical interface.

I hate to follow up to my own post, but yes, if you trim the vendor OID (making it broader) then it collects the HostResources mib variables, so my Juniper devices now [somewhat ironically] report their OS Version in the 'WindowsSoftware' inventory. I wish there was a manual on how to add your own inventory collection,…

Hard. knowledge used: container membership is materialized periodically, and some nifty SQL to summarize the number of up and down nodes, and noting that when more than of the nodes are down less than half the nodes are up... UNTESTED <-- I have no nodes down right now... use a custom SQL query on the group object…

Wow, that is a lot of upgrades; in my experience we only upgrade a single product at a time, fix that product's problems, then move on. yes, it takes me slightly longer to get through an upgrade cycle, but I only have one upgrade to back-out if it is a disaster. when performance is a problem I always look at the database,…

You can use the Trap manager to execute the actions; but this is somewhat more limited than the Alert support. There is a gap between that you can do with the traps and what you can do with alerts In particular: There is no way to acknowledge an a trap. There is no escalation available for a trap. many of the…

what group properties have you set? If you set the the status rollup mode to the best or "mixed status shows warning" then it'll read 100% unless all of the entries are down. whereas if you set it to 'worst' status then it will show the [worst] availability of the group. if you're expecting the average availability of the…

rumor has it that the database is forked from https://sdm.lbl.gov/fastbit/

my 2cents is to upgrade one application at a time and make sure that works for a week before doing the next one. Admittedly my install is larger than this, but trying to troubleshoot issues when you've three major products upgraded is a challenge I would personally want to avoid. I note that you're on a VM == would…

what does Show Interface actually report? On some routers they count 'L3 incomplete' as errors in the SNMP MIB, also if there is no default vlan and its discarding frames without the right set of tags e.g. if this is connected to a MOE service and Time Warner are sending you data for a wrong VLAN, or you're seeing CDP, or…

Send the sysobjectID's and machineType to the 'Tell us your unknown devices' thread and wait until the next release of the software and hope that they have been compiled in when you upgrade your install Vote for: http://thwack.solarwinds.com/ideas/1952

I think you have to call IPAM_spTouchSubnetCounts(@ids) and possibly IPAM_spTouchGroupCounts(@ids) to update the counters. They both take the subnet ids you want to update the counters for as arguments

1. Have the switch direct IFstate traps to the solarwinds trap server. 9you may have to open up port 162 if you're not processing traps already) 2. create a rule in the trap viewer that changes the interface state on receipt of ifstate traps ( IF-MIB:linkUp and IF-MIB:linkDown) to change the interface state to Up and Down…

you might look at building an interface to twillio -- or perhaps this would be an interesting addition to the Alert Manager? e.g.: something like this http://www.twilio.com/docs/howto/appointment-reminder (where the person taking the call about an alert could choose to 'acknowledge the alert, connect to the NOC, etc...)

The error is really a reminder that NCM doesn't support Account limitations.and applies if you have a MSP-like environment. for example some of my users can only see the 'K20' network devices, but no others. They don't have access to NCM, but if they did their jobs would be able to access all nodes. So, the error with your…

Personally... I'd use not-well-known the check box in the advanced alert manager to disable alert actions before enabling alerts that could fire a lot of actions. wait for the system to settle down, and then uncheck it.,

go out and buy SQL for Dummies. Join Fundamentals basically: say what you want to get out of the tables Say which tables you want the information from Say how the tables relate to each other [On clause] Say how you want to restrict the result set Further [Where] selectI.IfName as Interface,IP.IPAddress as 'IP…