bkyle · Professional Servi ces Engineer

The issue is System View: return to User View with Ctrl+Z. Please see this link: https://thwack.solarwinds.com/docs/DOC-187351 Instead of "CR" try "CTRL-Z" without the quotes.

Jon, You cab enable capture mode to see communication between CatTools and your device: a. Use the CatTools File menu to select the "Enable capture mode" option. b. Run the activity you are having trouble with. This should create a debug file in the \CatTools3\Debug folder. c. Remember to deselect the "enable capture mode"…

The Log Forwarder application forwards Windows event logs to a syslog server. Here is more information: http://www.kiwicattools.com/downloads/logforwarder/LogForwarder.pdf

Please see this link: SolarWinds CatTools

I would recommend trying a generic device type with Variations. This will allow you to customize the prompts, and send pre-login information. Please see this link: SolarWinds CatTools

I would also recommend checking your message buffer size: Kiwi Syslog Server

How many syslogs are you receiving per hour?

Are you using any filters in Kiwi Syslog?

How are you adding the license details? Are you copying it to the clipboard, and then applying the license from clipboard?

Try logging in as the local admin (not a domain account), and apply the license.

Have you tried using a Send.CLI.Commands activity? Please see this link: SolarWinds CatTools

What issues are you having during the setup of these devices?

When you say stencils, what are you referring to?

Get a Wireshark capture, and see if syslogs are coming in. You can use the filter udp.port==514. This will show you syslogs traffic coming into that system.

As a test, if you add the 2 devices having issues to their own activity, does that activity complete?

Have you seen this post: Kiwi Syslog Server

What is the volume of syslog messages that are coming into the Kiwi server?

Does your Sonicwall support TFTP?

Please see this link: https://support.solarwinds.com/Success_Center/Kiwi_Syslog_Server/Move_syslog_web_filters_to_a_new_machine

Here is a quick comparison: Syslog Server Comparison | Kiwi 

The free version will allow you to split logs based on date, time and priority, but not Input Source, Host IP, Hostame or Message Text.

WMI via DCOM uses a wide ranger of ports. Please see this link: https://support.microsoft.com/en-us/kb/154596

What do you actually need to be alerted on?

Make sure that you are running the latest version. There was an issue with a Microsoft dll (MSWINSCK.OCX) where the last digit of an IP address was being dropped. If the last digit was a single digit, it would show as 127.0.0.1 This issue has been resolved in later versions.

Please see this link: Kiwi Syslog Server

Rahul, Does a Wireshark capture show incoming syslogs from that firewall? The error in your screenshot means that the updater cannot reach our server. If you are using a proxy server, please do the fofollowing 1. In Kiwi Syslog, click File\Setup 2. In the left pane scroll down to the Product Updates section 3. Click Use…

How many devices do you have in that activity?

Hugh, I would recommend using the closest Cisco device, and using our Variations feature to tweak the commands being used.

You will need a way to distinguish the devices from each other. You can try creating one rule for each device, and then specify a different facility for each device. See this link: Kiwi Syslog Server Next, you can create a filter for each rule including only that facility. Please see this link: Kiwi Syslog Server 

Rohith , You will want to make sure that your license is current, and install over the top of your current install. This should retain your current settings. Brian