aLTeReGo ✭✭✭✭✭

I've disabled "Remote Access Connection Manager" service on my SeUM machine but I'm not seeing any of the events you reference in the Windows Event Log. It is possible that you have a local or group policy configured for Dial-Up or VPN access that may be initiating the start of this dial-on-demand service?

I'm fairly certain this isn't possible

Are these hosts VMware ESX/ESXi or Hyper-V?

The standard MySQL template simply requires a user account with read only access to the "INFORMATION_SCHEMA" database.

This can be painfully done using the SNMP WMI Provider, but it does not map to SAM's native Hardware Health Monitoring. It would require creating your own WMI Monitors within an application template to query the WMI equivalents of the SNMP values.

THe database can be unmanaged through the web interface.

To limit downtime, I would recommend moving those nodes to the primary Orion server while the APE is being rebuilt. Once the rebuild is complete, simply move those back to the APE. That will reduce downtime for monitoring of those nodes. If it helps you to keep track of which nodes were on which polling engine, I generally…

Yes. In the example you provided above, enabling NetFlow, sFlow, JFlow, or IPFIX on any device between the client and the servers would provide you with the information you're looking for.

The node must be managed via WMI, and the "E:\" volume monitored by Orion to gather disk I/O performance statistics. This information is not available for nodes managed via SNMP or ICMP.

Is this an ASCII/Text Log file or just a different category in the Windows Event Log that doesn't appear in SAM's Windows Event Log Viewer?

You may want to consider posting this request in the where our Report Gurus normally frequent, as this will require some advanced SQL to get the time frame correct for each month within the same report.

When does this error appear? Based on the information above it looks like you're running an application discovery. Are you running SAM 5.0.1? Also, have you tried re-running the configuration wizard?

You might want to take a look at this thread too.

Has anyone had a problem with Universal Device Poller taking like a whole minute to finally open? It's also very sluggish to navigate. If yours only takes one minute to open you're doing pretty good. Mine takes 2 minutes at least and there are reports here in the forums of upwards of ten minutes top open. It seems related…

The SAM Admin role fully adheres to account limitations by limiting users based on node or application. It doesn't however prevent users from viewing, accessing or modifying the list of available templates. This is because account limitations can't be made to template, only to assigned applications, nodes, etc. I recommend…

Changing the servers IP address is simple and requires no changes to the product. Changing the name of the server itself however is a different story altogether. This is because Licensing is tied to the server name, as well as all objects being monitored are also tied to the server name for polling. If you rename the…

SAM 6.2 and later allows for greater control and flexibility for defining alerting permissions to a user or a group.

The databases files are not specific to x64 or x32 so you can easily restore your database onto your x32 box without issue. Good luck

One thing you'll need to consider is that this alert will trigger ONLY when the value is exactly what is specified in the alert. So if poll returns 301 for DAT_COUNT the alert will not fire. In most cases when trying to ensure the number of files doesn't exceed a specific value you would want to use "greater than" instead…

The following report I just posted is probably a good starting point. Windows Event Log Report

SAM 6.1 includes a new SNMP status method where status availability (up/down) is calculated based on SNMP responsiveness. Another option is to create an advanced alert for when a volume or interface goes into an "Unknown" state. Volumes and interfaces derive their status from SNMP polling, so if they are unable to poll via…

After further investigation it appears that this issue may be related to a recent Microsoft update of .Net 2 that was released on 12/29. To resolve the issue you should backup your existing web.config file (just in case) and make the following changes. please add: <add key="aspnet:MaxHttpCollectionKeys" value="2000" /> to…

Have you tried a different browser? I'm not expecting different results but I would still try from a different machine or use a different browser all together to see if you get a different result. Also, have you applied SP1 to APM yet? If not I would install SP1 and see if that resolves the error. Failing those steps I…

melvinj​, in what capacity does your security tool state that SAM is vulnerable. DROWN can only be exploited when there is a listening port which uses OpenSSL encryption. The website itself is run on IIS which does not use OpenSSL, and the Information Service (TCP Port 17778) uses WCF, which also does not utilize OpenSSL…

Try #2 - Still triggering for GigabitEthernet9/6 and GigabitEthernet9/38

Application Template Tags are located in the [dbo].[APM_Tag] table.

WPM Transactions and Steps can be added directly to any Network Atlas Map as seen in the screenshot below.

I use the Solarwinds event log forwarder on my Orion server and point it to the Solarwinds syslog server where I have alerts defined to notify me when Orion Specific services fail. I also use APM to monitor the Orion services. This way I'm covered. If APM dies the Syslog service will notify me, and if the syslog service…

The Report Scheduler was migrated to the Orion web console in SAM 6.1. I would recommend using this instead of the Win32 Report Scheduler utility and Windows Scheduled Tasks.

By default SAM stores 90 days worth of data in the database. This is a configurable option, located under [Settings -> SAM Settings -> Data & Database Settings]. You can use the Report Schedule to email reports to your inbox on a daily, weekly, monthly, etc. basis. This can be found under [Settings -> Manage Reports ->…