RichardLetts ✭✭✭✭✭

We use a UDP reflector running on a linux host as the target of the netflow from the network devices, and then have it forward the ackets on to the consuming systems. Yes it's a SPF for this, but that is a lot easier to manage than reconfiguring flow support on hundreds/thousands of devices. GitHub -…

We might be getting some of these at work -- any tips/pointers for managing them? thanks

... and once you've got the missong nodes added you might want to link the historical data, so here the the queries for the database manager CAUTION DRAGONS AHEAD, proceed with caution beyond this point fix trap data update tset t.nodeid = n.nodeidfrom traps tinner join nodes n on n.ip_address=t.ipaddresswhere t.nodeid=0…

This post was impetus to knock up a couple of reports See: Traps from unknown devices report Syslog from unknown devices report Hope this is helpful for tracking down people who add random assets to the network.

for SNMPv1/v2 They get stored in the database (as do syslogs); unfortunately the NODEID will be zero. (I don't have any SNMPv3 devices sending traps) You can search for them by IP address (if you know it).

I monitor: * physical interfaces connecting things I monitor <-- I use LLDP to determine this * LACP bundles * VLANs at the highest-level object (e.g. if there is a LACP bundle I monitor the VLAN at the LCAP bundle, otherwise, the VLAN at the interface level) I do not monitor loop-backs -- they rarely tell me anything…

ARE YOU IN ARTILLERY? There is no version 10.16.1; assuming you mean 10.6.1: unlimited. What you can practically support is a different question, what problem are you actually having?

NTA has to be on the same backend infrastructure as NPM. it is possible to separate different pieces of functionality out, but the licencing becomes challenging (and possibly expensive) Instead of asking us if a solution to an unknown problem is viable, how about sharing what the problem is that you're trying to solve. If…

traps are one-way notifications from the device, you need to configure them in the trap receiver. they are very different from the MIB variables retried by snmpwalk what are you trying to do?

I'm going to make some assumptions here: a) you have the basic format of the email message you want to send out, and you are trying to figure out how to put a blob of text with the SNMP traps into the body of it. [I'm going to skip explaining this bit, because that should be trivially easy. If you can't even get an email…

what vendor? it works for Aruba (thank goodness!)

Use the Event log forwarder: http://www.solarwinds.com/free-tools/event-log-forwarder-for-windows then you can write some reports or swql queries to extract them out... [things are vague here because I don't know what the format of your messages would be] here is an example of what I use it for: app1…

List Resources on a node checks if the node is up using before proceeding, It expects the ICMP reply comes from the address pinged. Can you ping the customer node from your orion server? Does the ICMP reply packet come from the address you're pinging? On the affected Polling Engine Check that it ignores the return address…

Show where? I assume this is an edge router with a default route pointing to a hub site? if so, I'd go for the routing table and see which interface has the default route. that would return the InterfaceIndex which is a column on the Interfaces table that would (with the NodeID) give me the InterfaceID that I can then use…

If I were building my SQL server again I'd go for: C + Backup: 4*300GB SAS (RAID5) Database: 2*300G SSD (Mirrored) Log: 2*300G SSD (Mirrored) this would give me 300GB for data and log, plus ~600GB for backups of my SQL data. it would fit in one chassis and I would not need an external disk array. the system disk for…

There are many many pollers, and what they poll is documented in the knowledge base. Ask questions like "What OIDs does Orion poll for ..." e.g.: SolarWinds Knowledge Base :: What object IDs (OIDs) does Orion NPM poll for information about multicast interfaces? SolarWinds Knowledge Base :: What OIDs are polled for F5…

Yes. Assuming you have two different pages with map resources on them (call them screen1 and screen2) then you can add the wordmap to both pages (which will initially have all of your nodes on it) You can then use the edit map [not manage map] to filter what is displayed: Our state map with the WA state K20 nodes on it has…

use the 'Views by device type' page... a) create a new view for the new device type -- clone this from an existing view using Settings -> Manage Views -> Copy b) set a specific view for the device type using Settings -> "Views by Device Type" to chnage the view that gets displayed for a particular sysObjectID. /RjL

the remote pollers only really push the data into the database that they have obtained using SNMP, so if you're polling remotely now, about that much traffic. Database replication won't reduce the WAN load since the same database updates that happen from the poller are the ones that need to be replicated (and indeed it…

if you have NCM/NPM [>7.2.1/>11.x] (and are performing a nightly inventory) below is the SQL SELECT TOP 1000 N.Caption,NI.InterfaceName,NI.InterfaceAlias --,BP.* FROM [dbo].[NCM_BridgePorts] BP inner join NCM_NodeProperties NP on BP.nodeid=NP.Nodeid inner join Nodes N on N.nodeid=NP.CoreNodeid inner join NCM_Interfaces NI…

Do you have a HA install? Yes: you need to take the servers out of HA before you upgrade (at that version) No: if you stop all of the Services in the Service manager on the console it should stop -> if it's not then make sure the Service Manager Service (one of the three services below the line) is stopped before killing…

UDT has not had an update in over 2 years; I'm not sure I would use that to sway my opinion on the technical merits of one over the other but there are crickets on the UDT boards for the product. What we are working on for UDT 3.3 (Updated on April 24, 2015) There is a UDT 3.3 release candidate, but the download file is…

see: Re: Unable to add data series for a report's SQL-driven custom chart you need to include references to a couple of variables so the graph layout offers a time range that is used to drive the display i.e.: AND datetime > ${fromtime} (and if you want a range of times datetime between ${fromtime} and ${toTime} )

Danger, Will Robinson... the few times I have had this happen I've done the following... in the past I have had to work in C:\ProgramData\Solarwinds\JobEngine.v2\Data - stop the job engine 2 - delete the JobEngine35.sdf - copy JobEngine35 - Blank.sdf to JobEngine35.sdf - start jobengine2 the .sdf file gets re-populated…

Not SQL: but if you do not not need to move the historical data, just the monitoring configuration then there are powershell script examples to do this in either the SDK, or on the SDK forum.

MIB oids are really cheap (a few hundred dollars) Companies also buy in SNMP support and don't bother changing to a vendor-specific OID(almost all Net-SNMP nodes) buy other companies (Intel/McAfee; HP/digital/compaq; cisco/netgear) use the wrong oid because they appear to have not known what they were doing…

SolarWinds Toolset v11.0.3 is the only one NOT used by the other Orion modules! * SolarWinds Active Diagnostics* this is used to collect diagnostics and send them to support * SolarWinds Collector* This process collects stats and stores in the database * SolarWinds Information Service* The heart of the product! *…

a) Universal device poller to pull the value out of the TCP MIB b) alert on the values returned. I'm not sure what the actual problem is you are trying to solve, I work better with specifics. If it's not in the TCP MIB, then you're probably talking about SAM, and that's a different forum, and product of which i have no…

use a custom property to select the nodes in 'Manage nodes...' (using Group By) and unmanage all of the nodes e.g. I have a custom property 'Building' for buidlings on campus: I should add that if you want to disable alerts instead of simply stopping polling you could also use the same selection idea to modify another…

add the All Nodes table resource, and apply a SQL filter like this: unmanaged=0 and systemUptime between 1 and 14400 sysUptime is in seconds, ICMP and other nodes not supporting polling sysuptime will have a sysuptime of zero seconds, hence the '1'