bkyle · Professional Servi ces Engineer

What device type are you using for you SG500?

NTM uses a VMware API to query data from VMware servers. The API requires a VMware account with at least read-only access to VMware. The data from the VMware API allows NTM to associate host VM servers and the guest virtual servers. To gather complete information about the guest servers, ensure that the guest servers’ IP…

Thanks for the screenshot. If you look at the top, it says (Free Version 9.5). This is why you are getting the "licensed version" message. How long has this evaluation been installed?

Amit, What does Help\About show?

Peter, I would recommend using a Cisco.Router.General device type with our Variations feature. You will want to go to the Additional Commands tab, check the enable box, and delete the word enable. Please see this screenshot:

You can edit the application monitor, expand advanced, and enable debugging. Look at the end of the URL and you will see something likr: NetObject=AA:1. The number is the application ID. On the poller the the node exist, go to the C:\ProgramData\SolarWinds\Logs\APM\ApplicationLogs directory, and look for the AppID folder…

Are you using WMI or RPC for the monitor?

What method are these phones being discovered under? (SNMP, SIP, ect.)

Is there a way to change the prompt? Characters such as #, >, and ] can stop CatTools, as it thinks it is seeing a prompt.

You can try editing the device, and going into the Variation settings. Please try the following:

You will need to find a text string in the event logs that are sent over. Next you will set up a message text filter. Please see this link: http://www.kiwisyslog.com/help/syslog/index.html?filters_simple.htm Add your text to the Include box, and should only give you the event that you need. 

You can use filters to split up the messages per rule. Using a log to file action, will allow you to save the log file to a specific folder such as: Firewall, Vpn, or System.

You can get a 14 day free trial, and see if it is what you need. Please see this link: https://www.solarwinds.com/network-topology-mapper

Try enabling capture mode, and see how the commands are being sent.

compguy I have a few questions: 1. What version of CatTools are you running? 2. What device type have you selected? 3. What type of activity are you running?

Is the D: drive a local drive? If you go to Start\Run and type in D:\Syslog-root can you create a file there?

When you say logging to the wrong drive, what is being logged to it? Also do you have multiple log to text actions?

Try enabling capture mode (File\Enable Capture Mode). This should show you the communication with your switch. The created file will be in your CatTools3\Debug folder.

CatTools give you back what the device provides. If you do a sh int status from the cli on the device, what do you get back?

There is only one license. Once applied you should have a full version.

Are you able to relay mail from the Kiwi Syslog system using the same SMTP server, and account information?

Kiwi can only forward logs that are received after the rule has been created, but not any logs received before.

You can contact your sales person.

If you are looking to exclude certain text from the actions in the rule, I would recommend using a complex message text filter with the exclude option: The stop processing message action keeps the filtered data from going to the next rule. See this link: Kiwi Syslog Server

The SQL CE database is used only for the web interface. By default there is a log to text file action. You can can add a log to database option:…

The SQL CE version is for the web access and has a limit of 4GB. To keep data longer( for a year in your case) you will want a full SQL version, and a log to database action in Kiwi Syslog. The database size depends on the volume of syslogs being received. See this link:…

I would recommend using a generic device type, and Variations. Please see this link: http://www.kiwisyslog.com/help/cattools/index.html?dev_devicevariations.htm

I grabbed your case so that I can get the needed files.

We currently have the option to scan the 1st day of every month. If you only want to scan once a quarter, I would recommend a feature request. Please see this link: Kiwi CatTools Feature Requests

Have you tried copying the setup file locally, and running the setup from there? Also version 9.4.2 is the most recent version.