Sohail.Bhamani

He is correct in that it will vary from device to device. The best bet is to collect data for some time and then go back and evaluate per device what values have been seen. Then setting threshold per device can become quite useful. Since SW has not provided this feature, another Thwack person made this post about how to do…

My recommendation to you would be to create multiple discovery sessions and stagger them using discovery scheduling. This way your session will actually complete, you can stagger them so there isn't any massive data flood on the network (although it wouldn't be that much anyway), and you can then control what gets scanned…

In the positions I held through out my career, it has always been the sys admins jobs to perform the patching. These are the guys who are responsible for the servers and so it seemed to always fall onto them. I feel that security guys should be the ones who test the impact of the patch from a security perspective, however,…

You are right. There is basically 2 mib db's in use here. The MIBs.cfg file you mentioned is where UnDP gets its information from. Things like type of counter, trap information, and other such information is stored in this. This can be updated by you by going to the additional downloads section of your customer portal.…

It almost sounds like the SNMP port 161 is being occupied by TSM. Open a command prompt and run 'netstat -aon' and look for port 161 in the local address column. If found, check the PID on the very left column and then open task manager to see which process is using 161. This may point you in the right place. Hope it…

You could do a couple of things to see how many users are using the site at once. There is a perfmon counter you could monitor using SAM if you own a license for it. You could also send the IIS logs through something like Awstats to see the number of sessions and what not. I think your minimum is 0. The maximum before an…

You can use the Unmanage Scheduling Utility to perform this. It uses WIndows Task scheduler for the launching at a specific time. RDP to your server, click on start, programs, solarwinds orion, advanced and it should be there. There is a section in the Online admin guide specifically covering the use of this utility.…

Could it be that being the secondary in a HA setup disables the interfaces since it is acting as a backup? This is how it is in the pix/asa HA active/passive world. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

This is definitely possible. I found this in the content exchange which may aid you in getting to where you are wanting to go. Device_Outage_byDuration.OrionReport This is going to need an advanced sql report. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

The vlan labelled unrouted is the layer 2 vlan and the other is the layer 3 vlan. It seems to me you may not have set the ifindex persist command on your routers/switches. The command on a cisco device is: snmp-server ifindex persist This command persists interface index snmp uses when asking the device for statistics on a…

That would be a feature request. After the nodes are in, you can multi-select a number of them from Manage Nodes and edit the custom properties there. You could use SQL UPDATE statements against the Nodes table and update custom properties that way as well. Or, if you are on the 10.4 RC, you can specify values for the…

Your setup seems to be too loaded toward to application server and not enough towards the database server. How many elements are we talking here? I would probably increase the RAM to the DB server and make sure to set the SQL max memory value to ensure that the OS is not starved of RAM. That would be a good place to start.…

You can just type in the sql server hostname or IP in the box. If you are using the default instance, that is all you would do. You could also include the instance name if it is not the default one by <sql server hostname/ip>\<instance name>. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

If you check the NCM admin guide on page 154 in a section entitled "Pre-Command and Command Template Variables:, you will find information on the line to enter in the device template for those devices that allows you to send a key stroke to bypass the menu. This is what it shares on that page: <Command Name="Precommand"…

There is no mention of Cisco only support in the admin guide. It does mention that it will work for any SNMP capable switch. I am assuming this means any MIB2 compliant SNMP switch. If you had a desktop switch plugged into a managed switchport, you should see multiple mac addresses on that managed switchport. Hope this…

It has gone GA as of a week or 2 ago and should be in your customer portal. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

Are you asking about the windows log event forwarder client? If so, it should be available in your customer portal.

If dealing with the demo vm snapshot dance routine is too much, the entry level licenses are pretty cheap. If you catch it at the right time, you can get pretty good deals too. The Beta and RC programs are excellent as Richard pointed out. Solarwinds says that the RC version is supported, but I am unsure if this has to be…

I believe if the node has already gone down and the initial alert already triggered, it will remain "triggered" even though it has been moved to Unmanaged state. This does warrant the question of why are you unmanaging down nodes? This seems like it is outside the intended use of that feature. You guys might want to…

This will be highly dependent on the number of conversations that are being summarized by Netflow. Luckily its just a summary and carries no actual payload. Each UDP datagram carries information for many flows as well. Netflow v5 is 30 flows per datagram in right around 1500 byte packets. I can say that in all the customer…

Any reason why you would use WMI over SNMP? SNMP provides interface datga as well as topology data where WMI does not. Also, you can use the SW free tool called SNMP Enabler to install the snmp service and configure it remotely. Sohail Bhamani http://www.loop1systems.com

Hi, I have accomplished this in a number of customer environments using the line numbers of an ACL in order to put the needed line in the right spot on the ACL. Here are some links on editing cisco ACL's inline using line numbers: http://www.petri.co.il/csc_edit_cisco_ios_acl_using_line_numbers.htm…

The Bind support is going to be a huge help for many of my customers. Nice work, Sohail Bhamani Loop1 Systems http://www.loop1systems.com

Triple threat Thursday!!!! Dropping 3 releases in one day! Its like Christmas! Sohail Bhamani Loop1 Systems http://www.loop1systems.com

There is great information about this here: http://support.solarwinds.com/kbase/ProblemDetail.cfm?ID=1264 The bug is known on versions before 8.2(11). The bug has to do with the ASA not sending the ifIndex in the netflow packet to Orion NTA. This would still show data, but it would show from the wrong interface (ie Null0,…

Hi, Loop1 Systems provides a series of hands on classes on the core SolarWinds technologies that are available either onsite in lovely Austin, TX (the winner hands down in location no doubt), and also in a virtual format over the internet (including video!). Our classes create a bond of learning and sharing among the…

Sweet!!!! Numbers 1 and 3 will be super welcomed by all! Keep up the great work guys! Sohail Bhamani Loop1 Systems http://www.loop1systems.com

Have you seen this post:

If you RDP to the NPM server, you can then run the report writer application. Open the report you want and then click File, Save As in the report writer to save it to a new file name. One little feature is if you rename the report then click File, Save As, the new report title will automatically be the file name it prompts…

Rfletcher is correct. Your purchase of the unlimited license for those products provides the additional poller components you would install on the additional polling engine. Your purchase would just be an additional polling engine license. This is also assuming you have unlimited licenses as that is really the only…