bkyle · Professional Servi ces Engineer

Are the IPs sequential, Like 10.10.x.x?

Is the device sending the syslogs in a different location?

Try reinstalling the Kiwi web access. The installer is located in the C:\Program Files (x86)\Syslogd\Setup directory.

I am happy to help.

Stefan, As a test, try running the CatTools service under the same account that you are logged in with when doing the test.

I would recommend opening a case with technical support, so that we can look deeper into your issue.

Susan, Are you running a licensed version or an evaluation version of NTM?

I would open a case with support so this issue can be tracked.

Susan try logging in as a different user, and run NTM.

Check and see if you have an anti-virus, that has an E-mail scanner.

Please try sending a test message, and see if it matches my example.

Did you need any authentication? Also is Comcast using TLS/SSH for authentication?

Stefan, You should see sometime like this: 2015/07/22 14:23:08LOG<W>EHLO domain<CRLF>2015/07/22 14:23:08LOG<R>250-SMTP1.swdev.local<CRLF>250-8BITMIME<CRLF>250 SIZE 10485760<CRLF>2015/07/22 14:23:08LOG<State>22015/07/22 14:23:08LOG<W>MAIL FROM:<CatTools@yourcompany.com><CRLF>2015/07/22 14:23:08LOG<R>250 sender…

See Nanda' screenshot above.

Susan, I would disable the windows UAC and any anti-virus software (If they are running) and install it again over the top of the current install.

Susan, Please try to reinstall NTM over the top of your current install, as the local administrator (not a domain account).

Try going int the .\SolarWinds\SolarWinds Log Forwarder for Windows directory and delete the LogForwarderSettings.cfg file. Then re-enter your syslog server IP, and recreate the subscription.

Susan, Check under Windows features and see if the 3.5 box is checked

Stefan You will want to make sure you have verbose logging checked on the mail setup screen. This will show communication with your SMTP server. See this screenshot:

Peter, Please see this link: http://www.kiwisyslog.com/help/cattools/index.html?cus_customscripting.htm

How do you ssh into the devices through Putty?

Yes, you will telnet into port 25 or whatever port the SMTP server is running on, sometimes 587.

Can you telnet or ssh into this device, and get to a CLI?

Try disabling all monitors, and then enable them in groups to see if you can find any monitor causing the issue.

In this case you may need to use a Device.CLI.Send commands activity. You can create one activity and modify it using the commands you need to change the account password. See this link: SolarWinds CatTools

Please attach a screenshot of your new settings.

As a test, can you save and clear the security .evtx file, and then try adding the subscription?

Ray, i will test with the free version, and let you know.

Have you tried sysgen on the Kiwi Syslog server?

After you click Add New Device, you should see the following screen: You can select a credential that has at least local admin rights on the Windows Server 2008 R2 server that you want to monitor. If you don't have an existing credential you can add one.