bkyle · Professional Servi ces Engineer

Jason, The AD accounts are not limited to 5.

In this version of Kiwi Syslog, web cache.bin files were created when the web database (SQL Compact with a 4GB limit) gets close to full. This has been resolved in later versions.

Here is the updated KB link: https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_%28NPM%29/Unable_to_Remove_Directory%2F%2FDirectories_in_NPM

Vous recevez des erreurs lorsque vous démarrez Network Atlas?

Please see this link: Create and export a self-signed certificate

What version of the log forwarder are you using?

In an Orion alert, you can create an alert action to send a syslog or a trap.

Are you seeing any errors in the Windows event logs on either system?

In the directory section, replace your entry with C:\Windows\System32\WindowsPowerShell\v1.0\ basically add an \ to the end.

Have you ever ran a powershell command logged in as the same account used by the credential?

If you disable McAfee, as a test, do you see syslogs coming in?

If you get a Wireshark capture, do you see the messages coming over?

Make sure you have .plog files for the dates that correspond with the data that you need in your C:\Program Files (x86)\SolarWinds\ipMonitor\dbstore folder.

That is a no.

I would recommend created a feature request here: Network Topology Mapper Feature Requests

Can you enable capture mode, and post the output here?

Please see this link: https://thwack.solarwinds.com/docs/DOC-187351

Please submit a feature request here: Kiwi Syslog Feature Requests

Richard, ipMonitor supports four different ways to acquire an SSL certificate. Certificates are installed in the Local Machine Store of the ipMonitor host machine and can be selected using the ipMonitor Configuration Program. Self-Signed Certificates During the initial installation, if a certificate has not been selected,…

Please send the prompts that the device is returning in SecureCRT.

What type of log files are you wanting to send?

Try logging in as a local administrator (Not a domain account) and disabling any anti-virus software, and the Windows UAC. 

If you are receiving html reports, this should show you the changes that were seen. You can use the ignore feature to exclude these from your notification.

That is a very old version. What happen whe you run the installer?

To see logon events, you will want to make sure that Audit Success is selected. Please note that in Windows 2008, this will be selected under the Keywords drop down menu.

Please see this link: https://support.solarwinds.com/Success_Center/Orion_Platform/Knowledgebase_Articles/Collect_MIB_walk_data_using_the_Sola…

If you get an SNMPwalk on these devices do that match the same thing you are seeing on the Cisco devices?

You can export as a file, or a Network Atlas map. See this screenshot:

Please post a screenshot of what you are seeing.

Pootie, Check you log file (usually syslogcatchall). You should see it growing as logs come in even if the console is closed.