adatole ✭✭✭✭✭

I would advise everyone to tune into SolarWinds lab #40 (which is the February episode) when we go over EXACTLY this information! This is awesome stuff. Keep it coming. Hey patrick.hubbard‌ do you see these guys? It's like we're all on the same team or something!

I'll hit the good part of the question first - NCM installs right onto your existing poller, and uses the same database as NPM. Now for the less-good part: NTA was split out the way it was specifically because of the performance hits users saw when it was part of the Orion database. So putting the flow storage db onto…

Honestly it's going to vary from machine to machine, app to app and situation to situation. For example, MS-SQL automatically allocates 80% of the machine's RAM. It doesn't matter how much you give it. So alerting at 80% across the board is going to wake up (and piss off) your dba's. Some machines run "hot", or run hot…

Then that's your problem. You are collecting CPU stats every 5 unless you've shortened the "statistics collection" metric for the entire server (or specific nodes). So what you REALLY have done in this alert is injected a 2 minute delay before collecting CPU statistics to put in the email. More than enough time for the…

What is the trigger delay for this alert? If you have it set to "0 second", then it's going to be difficult to catch the culprit since it has to spike CPU for such a small amount of time. By setting a trigger delay, you ensure that a process has been spiking CPU for a longer duration, and is therefore more likely to be…

I know this may not be the week for it, but if rebooting the polling engine fixes the issue, then the challenge might be the connection between the poller and the database and/or the database's ability to write new data. A few questions to consider: 1) what storage is your database on? If it's RAID5 I'm going to have some…

Ah, this is topic near and dear to my heart. Can I suggest that you actually do it the other way: Set up a load balancer doing UDB round-robin to a pool of Kiwi Syslog servers (they can be virtual machines) Set up rules on the kiwi systems to * write all messages to a database (a built-in action) * filter out the garbage…

Can you send the specific alert (screenshot or just transcribe it here).

I don't have an SSL website now, but I did 3 years ago (still 10.1) and my updates were NEVER this painful. This is non-typical. While it sounds extreme, what are the odds you could simply scrub and re-install the poller some long weekend (or overnight. It doesn't really take THAT long). Also, why port 8787? Can't you just…

Great suggestion. You should suggest this under the "Feature Request" page for SAM and let the community vote on it. I know our developers pay CLOSE attention to the things that get votes in that area. Server & Application Monitor Feature Requests

This should clarify: SolarWinds Lab Bits: SAM Port Monitor Components - YouTube

If you open just SNMP (UDP port 161 and 162) you can get hardware stats, process stats (up/down, CPU and RAM - but not the ability to restart) and any custom MIB items. But you won't be able to get PerfMon counters, service stats, and windows eventlog. If you open RDP (TCP port 138, 139 and a few others) you can get those…

Let's see if aLTeReGo‌ has any thoughts. That's a self-contained separate executable, so it may not work the same as other elements of SAM.

Let me know when you are coming to Cleveland.

Another option is to create a "local" solarwinds account that has limited rights - no edit capabilities whatsoever. Then you publish (ie: tell people about) a link that embeds the custom account into the URL: http://myserver/Orion/Login.aspx?AccountID=<username>&Password=<password>

Someone else asked a similar question here: http://thwack.solarwinds.com/thread/49393 You *can* set up an alert on a single CPU. It would look like this: Start a new alert. Set it to be a Node alert. Then change it to be a Custom SQL query (with the sub-type still Node). In the box where you can type your query, add: join…

While I am still coming up to speed on IPAM, if you check out our DEMO pages you can see that nodes are definitely mapped to ports Here's the UDT summary page: http://oriondemo.solarwinds.com/Orion/UDT/Summary.aspx And here's a "rogue" MAC that is connected to Fa0/0:…

Yep, you are on the right track. But might I suggest you look at the idea of custom properties? You could set up a property for "alertwindow" and make it a 1 (business hours) or 2 (24/7) fill out that custom property for all your systems (you can do it in bulk) NOW in your alert your conditions you can set up one alert for…

No need to make the second block a complex condition (field name xxx is equal to value yyy). Just make them simple conditions (node caption is equal to yyy) and it will run just fine. Other than that you have the right gist. There may be more graceful ways to do this depending on scope, but this is a good start.

Isn't this just a repeat of the question you asked here:

note that (with one exception) all those "audible alert" choices (make a sound, text to speech, etc) all happen ON THE POLLING ENGINE. So unless you have your polling engine in a public place, they are (somewhat less than) useless. The only sound-related option worth noting is in the Manage Accounts area, where you can set…

Brilliant!

That looks pretty messed up. I'd open a ticket on this one. You SHOULD be seeing up/down/unavailable/etc.

Since there's been no response on these boards, I logged this as ticket 411411. I'll update this thread with whatever I find out.

The short answer is that "suppress" doesn't do what you think it does. Never ever ever use it.\\ https://thwack.solarwinds.com/message/204905#204905

Kimberly Deal Andy Fox albert.wong

Welcome to the kludgiest solution I can think of. And before I dig into it, let me reinforce rob.hock's suggestion - SAM is designed to do this. NPM is not. It may have no other value to you, but it beats the heck out of building a solution yourself (or doing what I'm about to suggest) * Get a linux server * on the linux…

It's a pretty simple utility to use. However, here is the page that has documentation, videos, and other syslog-y goodness: https://thwack.solarwinds.com/docs/DOC-170777

This goes back to one of my pet peeves - monitoring memory as a volume. I have yet to see any explanation of why one would want to do this. My take is that you should never add those two items as volumes, and remove them whenever you find them being monitored. That would cause the issue you describe to go away. And the…

We've seen this on other (cisco) device types when there is faulty IOS. It's a known bug for some versions. One test you can do is run "snmpwalk.exe" (in the main SolarWinds install directory) and point it at the target device. by default it will do a full snmpwalk and you can see if: A) that walk causes a CPU spike B) if…