choly

Yes, that's correct. For more info about NTA upgrades from older versions, please see this SolarWinds Knowledge Base :: Compatibility of SolarWinds Orion Products for Installation and Upgrade

Please check you config against SolarWinds Knowledge Base :: Configuring Cisco ASA devices for use with Orion NTA.

Almost correct Sean :-) In fact it is: NetFlowDetail_NodeID_Timestamp where timestamp is in 15 minutes increments since epoch beginning. Once those tables are old enough they are summarized into summary1 table and automatically deleted.

All changes made directly into SQL tables are unsupported, and might result into stored data corruption! Definitely not try without database backup, better do not try at all. (Btw. the query above is not affecting CBQoS data, only flows.)

Unfortunately, there is currently no mechanism to delete particular unwanted data from FSDB (neither on node nor interface level). Only data removal happens when data fall behind retention period, and this is done on daily basis. So beside of obtaining bigger drive or moving FSDB to other storage your only option is to…

Please migrate to NTA 4.0 or higher (4.0.2 recommended) on 64 bit OS. It stores data into proprietary Flow Storage Database, keeping 1-minute granularity throughout whole retention period.

Well, as Wireshark doesn't see any cflow packets coming you have to find a cause somewhere on your network. SNMP packets are related to Orion monitoring that device. Could you post here NetFlow related part of your device config? * Re: Nodes Traffic problem rulob Dec 11, 2012 12:25 PM (in response to Choly)Here are the…

Correct :-) In case you will decide to go with NTA 4.0 while using the SQL express DB please check following KB: SolarWinds Knowledge Base :: Installing NTA 4.0 Evaluation with Remote NTA Flow Storage: How to Get Orion Database Crede… it will guide you how to obtain needed SQL credentials.

Yes you can. Windows server is recommended for production evironment - considered to be be more stable.

Yes, .NET 3.5 and 4.0 installation is needed even for Flow Storage. Flow Storage installer does it automatically in case they are not present on the system (online download, quiet installation).

Both are supported, for ICMP only you just need to manually add interfaces from events on NTA summary view to receive flows from it.

NULL value returned means that you don't have any detailed tables in your DB. 1) Make sure you run script against correct DB, in SQL management studio right click your Orion DB in Object Explorer and choose New Query, than paste the script and hit F5. 2) You might not have any detailed tables because you: a) Already…

Jswan is right, and I will just add that there are also average counters for PDU Per Second in NTA 3.9, average value is computed from last 5 minutes.

Hi, you have nodes still assigned to old engine. First you should migrate all nodes to new engine, go to Orion Settings >Manage Nodes > select group by = no grouping > select all nodes > In More actions select Change polling Engine > Switch from old to new one. Now you will be able to delete the old one using method I…

The event is trying to aware you that time difference between SQL server and NetFlow service may lead to incorrectly saved data. It is mostly intended for multiple servers configurations (remote SQL server, additional netflow receiver, etc.). In your case it seems to be just timing issue like following: Netflow service…

It took me a while too... but I believe the complaint goes to 1 month != 30 days. Unfortunately no HF or workaround that I would know of :-( Let me create a feature request internally.

Hi Shawn, Just curious - have you had a chance to migrate already? Any issues encountered? O.

Sure, please navigate to Orion settings > Manage views > find NetFlow Inteface Details for Alerts > Edit > add/remove whatever you want > Done.

For future reference, the variable length fields compatibility has been added in NTA 4.1 release.

Hi, I have same problem after upgrading the NPM and NTA. Unfortunately, i also had to change the computer name. All the netflow services seems to be up using orion service manager and task manager. I have tried to restart both services and machine countless times without progress. I will sincerely appreciate any assistance…

SolarWinds is taking this issue seriously, so we decided to temporarily disallow more people to upgrade until we find a root cause of that. People who are already having troubles with hanging/crashing service after upgrade to NTA 4.0.2 can use following revert procedure to get back to NTA 4.0.1: * Uninstall NTA 4.0.2 using…

better to follow this kb: SolarWinds Knowledge Base :: Changing the NTA Flow Storage Location as help article quoted above is outdated (already asked to update it).

We have tried briefly with NTA 4.0.3 + NPM 10.7 and it seems fine here. Please contact SolarWinds support with this issue.

Hi Thamizh85, I assume you already have NTA, so you are looking into report which will provide such information. The easiest way to do that is: * Open Report Writer (Start > Program Files > SolarWinds Orion > Alerting, Reporting, and Mapping > Report Writer) * Find Top 100 CBQoS Post-Policy - Last 24 Hours report * Modify…

Ok, so it seems you will end up with 6-7 times bigger load than you currently have. While splitting the load evenly between main and aditional receiver should be enough on Orion side, the biggest problem use to be on DB side. Be prepared on ~ double size of DB (mainly FG3) + increase in RAM consumption (I would recommend…

Just make sure those two machines see themselves on TCP 17777 port (+ SQL server on TCP 1433). Such latency should be ok. Bandwidth required should be averaging around 5 Mbps, with bigger spikes each minute.

sean.murray Feb 19, 2013 9:22 AM (in response to Choly) That was it! Thanks!

Just to answer also the question from thread subject - "Please enter a valid domain" means that either there are no data for such domain or entered domain is invalid.

Also make sure you have same time (and timezone) set on Orion and remote Flow Storage server.

Hi, it should be already supported in NTA 3.10+. You should be getting events in NTA saying that you are receiving flows from IP address that belongs to the vSphere switch> click manage link in that event > add as ICMP or External node > then check NTA again after minute or two, and there should be another event saying you…