RichardLetts ✭✭✭✭✭

NPM (interfaces): Network interfaces that you want alerts and graphs for. i.e. you probably do not want user workstation connections UDT (ports): Network interfaces that you MAC/IP tracking on. I.E. probably everything. you might have the same network device interfaces configured in both products.

RFC822 was written in 1982 -- it's surprising that people have a really quaint idea about what a valid email address is today. specifically "ANYTING@you!like%here"."&not_what you+expected?"@domainname is valid addr-spec = local-part "@" domain ; global address local-part = word *("." word) ; uninterpreted ; case-preserved…

personally I like Alert Manager -> Active Alerts -> Disable all alert actions This will disable alert actions, but still allow the alerts to appear in the console during the maintenance. [this is an obscure checkbox in the upper right corner of that screen] Otherwise, yes, stopping the Alert engine service will do it.

Yes: Solarwinds support should be able to help you out. that would be my first place to start in this kind of issue. I do not know: what is in your logfiles?

It's the process that does different module-specific polling beyond up/down of NPM, for example collecting wireless controller data, pulling ARP and bridge mac data, etc... Given these are Active Directory high ports... Do you have SAM installed? or UDT and collecting AD information? do you have any WMI polled nodes?

I don't have a group with that number of elements directly in it, instead I have a hierarchical structure, e.g.: SECTOR whose members are "SECTOR BUILDING" whose members are NODES My largest sector (the UW) has 351 buildings in it (and ~4300 nodes spread across those). I did once put them into one group, but it didn't give…

here is what SW reports: Network Elements 23,004 Nodes 5,709 Interfaces 17,295 Volumes 0 Events 87,676 Pollers 337,936 Polling Engines 5 We have 16 spindles on our database server holding the database split across two raid sets (one for Data, one for Log), and 96GB of RAM. SQLserver is consuming about 64GB as I write this…

it should be fairly easy as a custom SWSQL query resource... there are many examples of this around thwack noting that the first column will always be the unmanaged icon. the second would be the node caption, plus a link to the node details page third colum is the time left before the node becomes remanaged. Ticket# -- I…

in 3.0.2/1.7 the tables are: UDT_portToEndpointCurrent and UDT_portToEndpointHistory UDT_IPAddressHistory and UDT_IPAddressCurrent <--- maps IP address to an endpointID and UDT_Endpoint <-- has a MAC address in it

Customer Portal Login | SolarWinds You can download any previous version from there. First pick NPM, then use the drop-down to change the version from 11.5

I'm sorry, but the matching algorithm is so far off in NCM7.3.1 as to render this a useless exercise. Firstly, I have: seems like there is a lot of data missing from your database as several thousand of these devices are in EOS Next, if I go into the (few) nodes with matching data I get matches like this: While I can see…

the flow of information into solarwinds for traps is this: SNMP TRAP -> trapreceiver (+ trap rules from DB) -> database The only out of the box processing the trap receiver could do for inbound traps that affects alerts is interface up/down, AND you have to explicitly configure this (it is not turned on by default) Note:…

Any success? I'm looking for something to provide drill-down type reporting into the data that is there?

Others have commented, but missed the point of the question -- like the original questioner, on my additional polling engines (and main server) I cannot see what system resources are constrained in such a way that I need to install another server to support more load (the boxes have spare CPU, RAM, IO bandwidth) other than…

if you unmanage the node/interface the the data can be retained (still subject to your retention settings). There is a idea request for a datawarehouse to hold this data so it can be held separately from the monitoring data.

yes, for all practical purposes it is.

Is there an API to set the node location do they appear on the [new] worldview maps? Can this be a design goal: if a new product feature is added then an API has to be added to SWIS to support it...

Apart from loading the SNMP agent, what is not working?

you can do it using a custom SQL query (search my posts on this topic), but for a BGP neighbor down it's better to define a custom node table poller and alert from that in 10.6 and later NPM collects routing neighbor status, but I have not used that for alerting (yet)

that was our experience too -- I had a couple of glitches because the firewall rules were not installed properly but the application engineers love the netpath views to their major cloud service providers! aside: has anyone else looked at the netpath to outlook.office365.com!

You need to configure actions in the Advanced Alert Manager (on the server) to send email when a node down alert triggers. here is the Google doc on how to send mail through their service; pick the most relevant one for your specific situation: https://support.google.com/a/answer/176600?hl=en

We monitor router interfaces and inter-switch links ( mostly trunk interfaces, but a couple of thousand switches are on non-VLAN subnets and those don't have trunks defined between all of the switches.). We do not monitor every trunk interface because some (like the ones in my office) are actually converged voice/data…

yes. NPM 11.5.x see: http://www.solarwinds.com/documentation/en/flarehelp/orionplatform/default.htm#orioncoreagalertvariablesgeneral.htm?Highlight=AlertTriggerTime

If you're into using an API for this, check out Twilio SMS - Build SMS Text Messaging Into Your Web Apps | Twilio This can send SMS, has a text-to-voice API, or you can play an audio file. I don't know if the post-to-url function is enough to trigger the API [We have a layer on top of twillio that manages notification…

Why not simply use the database editor [on the app server], open up the relevant table in 'edit mode', and simply make the change there?

Yes, kind of... You can only have one map where you edit everything, but on the page where you display the map you can use a custom property filter on the map item like this: nodes.CustomProperties.Sector='K20' I think this is a little better than using view limitations since you can then have multiple maps on one page

Create a custom SQL report: select count(*),hostname,nodeid from traps group by hostname,nodeid order by count(*) desc on field formatting copy the URL for nodeid and make it a hidden field Paste the URL onto the hostname field settings (will make it a clickable link in the report taking you to the node) If you only need…

I think that you might need to build some personal relationships with them. the CISO here (Kirk Bailey, founder of the Agora security forum) has spoken extensively on the importance of building strong personal relationships between security folks. Part of the relationship building process might be to invite them to…

Which model of Brocade switch, what switching mode, and what interface cards? The hardware and switch operating mode affects what they report using SNMP. [I have Brocade MLXe and TurboIrons, and they both report LAGs. if I remember correctly neither report per-valn stats on the LAG though] Richard .

we're looking at Evanios integrated with our Service-Now install