bkyle · Professional Servi ces Engineer

Try polling 1.3.6.1.2.1.17.7.1.4.2 and 1.3.6.1.2.1.17.7.1.4.2.1.2. 

Mark, How complex was your subscription?

Peter, There is no Variations option for the Cisco.Router.noenable device. Try checking the Show Running Config box, and enter the correct command.

As a test, add a display action, and see which syslogs show up.

Were you using WMI or RPC originally to monitor memory?

It should not make a difference, but as a test, I would try both.

Silva, Are you running version 3.10.0?

To follow up on my other post, How many rules do you have in Kiwi Syslog server?

Try running the GA version when it shows up in your portal.

Usually when it is random, this can be due to the number of devices in an activity. If it is the same device every time, I would add it to a new activity, and schedule it to run once a day to see it the error re-occurs.

Try removing the bind to address.

Try this: 1. Do a search on your system for ipmon*.msi 2. Find the latest version of this file 3. Run the file as Administrator, and choose Remove.

This depends on the version that you are running: http://www.kiwisyslog.com/free-vs-paid-edition.aspx Look at the Reacting to Messages section.

Wire shark is free. You can get it here: Wireshark · Download To check and see if Kiwi Syslog server is listening on port 514, you can do the following: netstat -aon | findstr ":514" Open Task Manager, and make sure the PID is being displayed. Make sure Syslogd_Service is application returned by the netstat command.

That is a Visual Basic error. Make sure you have the lates VN6 files installed: http://support.microsoft.com/kb/290887/en-us

Thanks for the update.

You can try disabling and the reenabling the nodew.

T.his functionality is not currently available. I would recommend submitting a feature request.

If you are using SNMP, you can test with an SNPM walk. You will want to go to Help\Support Tools\Grab SNMPWALK

If you are wanting to set up an alert for just this component, you can duplicate and edit the Alert me when a component goes down. On the trigger Condition tab, you will want to select Only following set pf objects from the scope of alert. Use the component name.

TRy to uninstall the Syslog web access. Delete/Move the Kiwi Syslog Web Access folder and then reinstall.

If the service is running under LocalSystem, it will not have right to the remote share. You will need to use an account that does have remote rights.

You can also go into Setup, and then Inputs. Click on UDP, and deselect Listen for UDP Syslog messages. Next try to start the service. If is starts, I would get a Wireshark capture and check the volume of syslog messages coming in.

Appinsight templates are different from standard application monitor templates. The monitors work together. You do have the option to disable monitoring certain databases.

You may want to look into using the Orion SDK.

What OS are you running on?

I would move this question to the IPAM group.

How is your alert configured?

You will want to go to Settings\Manage Nodes. Find the node that you want to remove the drive from and expand it. You can identify the volume by label and delete it.

It is usually the name of the component.