bkyle · Professional Servi ces Engineer

In Orion, you will go to Settings\SAM Settings\Manage Templates, and click the Shared Templates on Thwack tab. 

Tim, Have you tried any of the templates here on Thwack?

You will want to configure your device to send messages to the kiwi syslog server. A syslog server is only a listener, and by default waits for syslogs to be sent on UDP port 514.

How are you importing the devices into CatTools?

Have you tried Network Topology Mapper?

I would recommend looking at our Orion solution. You can evaluate the products, and the are expandable to well over 10,000 monitors.

The best way to increase performance is to increase the polling time. This is due to the amount of request that are being sent out.

Are you able to relay mail from the Kiwi Syslog server using the exact same information?

You can go straight from 9.x to the latest version.

ipMonitor can be purchased here: ipMonitor - Monitor IT Infrastructure Performance | SolarWinds There is a new PM for the product, but ipMonitor is still in development.

What are the device and activity types?

Did you virtualize your WIN2008R2 server?

If you get a Wireshark capture, what IP address do you see?

Gabriel , Are you using a local SMTP server?

Please post a screenshot showing your filters for this rule.

Also look in your C:\Program Files (x86)\SolarWinds\Kiwi Syslog Web Access\html\App_Data folder and match the dates with the dates of the syslog messages in the web console.

It is most likely showing the logs that are in the SQL Compact database. If log to web access is disable it will use the older sdf files.

The syslogs for the Kiwi Syslog web access are stored in SQL Compact database files. First you will want to check the setup, and make sure you are still logging to Syslog Web Access. Please see below: If web access is enabled, remember that there is a 4GB limit on the SQL Compact database. If you have a high volume of…

Are you using or WMI for your monitors?

Please try the following: * Click the configuration tab * Click SNMP Monitor Wizard * Type in the IP address of your Unix system in the section "IP address or hostname:" * Change the Community as needed * Click Next You should get a value for system uptime. This will confirm that all SNMP settings are correct.

I use our Log Viewer tool to sort through logs. Please see this link: http://www.kiwisyslog.com/products/kiwi-log-viewer/product-overview.aspx We have a free version of this tool. 

There are issues with ipMonitor and newer versions of TLS when monitoring an HTTPS website. Make sure you are running 10.8.2, and there is a patch for TLS support.

To backup what airsun said, here is more information: http://www.kiwisyslog.com/help/cattools/index.html?dev_devicevariations.htm

Phillip this really depends on your logging compliance needs. Most of the traffic most people receive (up to 98%0 are informational messages. I would configure your devices to send notice and above. This should drastically reduce the number of syslogs coming into your Kiwi Syslog server.

If you go to File\Enable capture mode, this will enable debugging. This will create a file in your \CatTools3\debug folder. You will be able to see communication between CatTools and your device.

Have you tried using a generic device type? I so, I would recommend opening a support case with us.

I have some questions for you: 1. What version of Log Forwarder are you running? 2. Has Log Forwarder ever started? If so have you added any information? 3. Have you disabled the Windows UAC or any antivirus software? 4. Have you tried installing as the local admin (not a domain account)?

Like Jiri asked, this could be due to the volume of messages that you are sending to the web database.

I would recommend the following: 1. In NTM, click Help\Support Tools\Grab SNMPWALK 2. Enter the IP address of the Juniper nodes with the correct community string, and click Scan 3. Save the text document Do a find in the text file and search for both the correct and incorrect names in the file

Tam, I am not seeing any changed to the device type. Are you getting any errors during the backup?