Sohail.Bhamani

Hello, I found this in the content exchange area and think it may be a good starting point for you. I havent looked at it yet, but regardless, it should provide something close to what you are asking for based on the description. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

You can control this. If you open up the report file in a text editor, you will find the Category listed in the top. Just know that changing this will reflect immediately, but if you then open it up in the Report Writer, it will go back to what it was. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

That is strange indeed. Disabling UAC is always recommended. Have you tried launching the custom property editor with right click and choosing run as administrator? Are you logging in with a domain account and if so, could you try again with a local one? Sohail Bhamani Loop1 Systems http://www.loop1systems.com

You can use the Real Time Change Notification feature to handle this for you in real time. It clues in on either Syslog or Trap messages from the device sent to Orion. A Syslog or Trap alert then looks for these messages and calls the RTNForwarder.exe that comes with the product. This EXE logs into the device and grabs the…

I think what you are seeing is not related to any rogue pollers but related to a new feature in NPM 10.4. This new feature gets the network hardware health information including what you mentioned. To disable this, you can click on list resources for the node in question and you should see a Network Hardware Health (or…

Hi Sven, Make sure to copy the Reports folder back to the new server if you have any existing custom reports. I would also not delete the old server till the new one was completely up and happy. This may just be me being paranoid. Here is a doc explaining a migration. It has some steps in it for DB migration but you can…

You could start by looking at the Events view under the Home tab. Pull the network object pull down menu and find the device in question. It should list the events that could have caused the device to go to warning. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

The only way to do this would be if the SolarWinds SDK (or api) provides verbs to create group objects. You would then of course need to code a program that makes use of the api in order to call those verbs to do the actual work. As for those data you mentioned (site id, mailing address, and assigned subnet), you could…

I agree with Byrona. A server is a server be it physical or vm when it comes to patching. Seems like MS patching solutions are all over but 3rd party ones are few and far between. I have not run across any that I can remember in my journeys to customers across the US. VM Sprawl is a definite concern for most of the…

It doesnt seem like that is enough config to export flows from an ASA. Here is a KB article showing some of the additional config you will need. http://knowledgebase.solarwinds.com/kb/questions/795/Configuring+Cisco+ASA+devices+for+use+with+Orion+NTA I realize the KB is written for an older version of the ASA IOS, but the…

There are a number of view resources around IP address groups that you can add to a view to provide you this information. By default the IP Address Groups view on the Netflow tab menu bar has most of them on there. The one it is missing by default is the "Top XX IP Groups Conversations" resource. It can be found in the Add…

Hi, I was just chatting about this earlier today. STM has an embedded DB and so it is not recommended to install with NPM. Is your NPM DB also on this same server? The DB is the heart of Orion and any slow performance of it will relate directly to the application itself. Sohail Bhamani www.Loop1Systems.com

Hi, Unfortunately, creation of custom connectors/tools is not currently supported by LEM. Being that this is a custom log, I am not sure SW support would be able to create a connector for us as they normally do. If this was more of a standard type of event log entry, you could create a ticket for SW support to add support…

What you are creating is a SQL query. Thats all that the alert manager does is to provide a graphical frotn end for creating a sql statement used in alerting. So, have you tried using the SQL wildcard string of % instead of the *? This may work. Also, if your goal is to supress child alerts when the upstream neighbor…

SolarWinds Knowledge Base :: Compatibility of SolarWinds Orion Products for Installation and Upgrade Between NPM and SAM there may be some version jumping you may have to do. NPM can go straight to the latest from 10.3x as I did that the other day for a client. Sohail Bhamani Solarwinds Training and Professional Services…

This feature was specifically designed for user access switches. Since folks take their laptops and such home at night, a number of ports on your user access switches will go down or red in the evening. Since the status changes to down, any node status = down alerts you have configured will fire. By marking user access…

Awesome. I needed just this. Thanks for sharing! Sohail Bhamani http://www.loop1systems.com

I can add to this by saying I have recently worked in a very massive environment that took advantage of a large number of additional pollers to handle the extreme polling needs. As Zak, mentioned, the DB will have to have some impressive specs to perform adequately in such cases. Sohail Bhamani Loop1 Systems…

When you add the device as an SNMP device in NPM, does it show you the interfaces as objects that can be monitored when it scans the device? This would be the same as going to this devices Node Details page and clicking on the blue list resources button in the Node Details resource. Sohail Bhamani Loop1 Systems…

You should be weary of having massive Syslog and Trap tables in the SW DB. In my experience with many SW customers over the last year as a Field Engineer for Loop1 Systems, it has been shown that having those 2 tables very large will cause slow downs on the web site. If you aren't experiencing this than you are in the…

Orion does not support TACACS+ or Radius for its internal authentication. The options you have are individual Orion account, individual Windows domain account, or Windows security groups. My recommendation would be to create new AD security groups. Add these groups into Orion making sure to set each group up in Orion to…

If you made your script ssh to the linux box to then run the script, then you can do this it seems. I found this in the more like this section: Remote perl script execution for alert. The answer is marked as correct and it seems very plausible. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

4500's with the netflow feature card do. Also 6500's. Most all routers do, its the switch platforms that are limited from Cisco.

Out of the box, the global volume usage threshold is set to 80% for warning and 95% for critical. Warning makes it yellow and critical makes it red. You can set this by clicking on Settings then Orion Thresholds on the right. Sohail Bhamani Loop1 Systems http://www.loop1systems.com

That sure is strange. I do not have access to my LEM console from my current client, but I do remember the RDP logon type being different from one where a person logs in to a machine directly (ie, not rdp and on the local console). So it is strange, but I think you are just not seeing the logon message as its not being…

Am i the only one using this feature? Or maybe Im the only one experiencing this issue? Weird. Double bump then I promise to let it go.

Is anyone even using the threshold calculations yet? **bump**

Does it show up when you click on Settings, All Devices?

That child status indicator shows that an interface is down most likely. You can either stop monitoring the down interfaces of that node or you can turn off the child status indicators. TO turn off the child status indicator, click on Settings in the top right, then Web Console Settings. Scroll down and find the option for…

If you look under the Home tab, there is now a Virtualization button. Sohail Bhamani Loop1 Systems