choly

Hi, please download NTA 3.11 HF2 from customer portal or upgrade to NTA 4.0.3.

Hi, well, new reporting is a bit tricky I agree :-) NTA resources (charts as on normal view) can't be added to reports yet, because of some technical difficulties. However to create a table-form reports using NetFlow data use Custom table resource and then further specify which data you want to see there - now you would…

Hi Bryan, unfortunately NTA does not support this new feature of Orion. (see KB SolarWinds Knowledge Base :: Unsupported Subviews in Orion NetFlow Traffic Analyzer) You can create a new poll here on Thwack for this feature. * Re: Netflow Interface details view BryanBecker Dec 11, 2012 11:54 AM (in response to Choly)Is this…

Maximum retention period length is 10 years, which I believe is fairly close to infinite. The FSDB size will grow linearly over time, simply do the math for expected size - i.e. if you current FSDB size is 1GB over 14 days, it will be about 26 GB over 1 year and so on. For looking into past data I recommend to use absolute…

Exactly as you described! One installer to rule them all :-) You go first with installation of FSDB, providing it credentials and access to your Orion SQL DB, then once finished you go to your main server launch same installer there, select you have separate FSDB and provide IP/hostname of that server. If you have some…

Hi Shane, try Report Writer, from SolarWinds folder in start menu, you should be able to modify built-in NTA reports easily. There is a tab where you can set the time frame. Nodes can be filtered using condition in filter tab.

Hello, if you are using NTA 3.10 or higher, you should see 'remaining traffic' as a last row in each resource. This row tells you how much traffic haven't fit into current top xx list - e.g. looking at top 100 endpoints, the remaining traffic shows you how much traffic remains on 101-∞ ones. Re: Netflow Node Details -…

As an insider, I can't give you production experience review, however I'll give you couple tips that could make you performance better if using local machine as FSDB server. - To achieve comparable performance level as on SQL, make sure you use similar HW, FSDB technology is faster than SQL, however it stores much more…

The issue has been fixed in one of newer NPMs, I guess 10.5 from the top of my head. NPM 10.5 it is. In case it still won't work with default, there has been added extra settings to increase export timeout in conf. file.

Brian, This may happen if the interface is sending too little data to be worth storing compared to others. Please try to temporarily (couple hours) set NetFlow settings > Top Talker Optimization: from 95 to 99 or 100%. This will force NTA store even small flows, check if you will see data on that interface. If yes, you can…

If you were running SQL version of NTA 4.0.2 (typically because of having 32bit AP in you environment) and trying to upgrade you might see message similar to "Error: Empty hostname or IP address.", to resolve it you would have to uninstall NTA 4.0.2 and then install NTA 4.1.0. This procedure doesn't erase your data. No…

No, it doesn't.

Hi, yes it is possible to exclude certain traffic by specifying filters. I don't know what version of NTA are you using but I expect is NTA 3.8 or higher (if not I highly recommend to upgrade). Just open the flow navigator on the left side of the view -> expand application filter -> switch it to exclude -> select an…

For future reference - there is a HotFix 3 for NTA 3.10 available that addresses the issue.

Hi, with default settings: The top number is a percentage of this row / total amount of bytes in flows matching given filter - so yes, percent of bandwidth matching current filter consumed. The bottom number is a percentage of this row / interface bandwidth - so yes, percent of bandwidth available. Non-default settings:…

Yes, NTA 4.0.1 supports NetFlow v10 (aka IPFIX) format. However it doesn't correctly parse variable length flow fields, so make sure your template/record doesn't contain such fields (usually some device proprietary or text value). List of fields required to be sent in flows is here: SolarWinds Knowledge Base :: Required…

I am sorry to hear you have troubles with NTA installation. The error you have quoted is most probably caused by remnants of older NTA installation (there are some old tables left in SQL DB). To solve the problem either uninstall NTA 4.0 from NPM server, temporarily install NTA 3.8.0 and upgrade it to NTA 4.0 or contact…

Hi Shawn, Does ping -a 64.27.100.131 return you a hostname? If it doesn't, NTA is not going to be different, as it performs the same action... But looking at whois, that IP likely belongs to newszoom.com (64.27.100.131 - Datapipe, Inc Whois)

Well, that is an interesting idea, thanks! Unfortunately it is not currently possible in NTA to disable monitoring of defined classes. What you could do is to hide those classes which you are not interested in using new interactive charts introduced in NTA 3.10, just untick a check box next to class name in table below…

Also if you can't get SNMP working for some reason, and still want to receive flows from that device try to add it as an ICMP only node in NPM. In case you are using NTA 3.10 or newer, it will receive flows from such node, however you will need to manually add 'NTA virtual interfaces' to get it working - there will be an…

Hi, It seems you somehow get the SQL DB schema upgraded, but the installed NTA version on Orion server is an old one (going back in snapshot?) - NTA 3.7 I guess. To remedy, it should be enough to run NTA 4.0.1 installation again (not just configuration wizard).

DNS hostname can be manually re-resolved by going to endpoint details for that endpoint (e.g. using flow navigator) and there is an Endpoints details info resource -> click on [Lookup] button (example). For NTA 4.0 installation requirements and useful tips please check SolarWinds Knowledge Base :: NTA 4.0 Installation:…

Check the NTA website, you should also see NetFlow appears to be down in NetFlow services list. This is probably caused by different hostname of server where you moved. Please run repair on NTA (run installation file - select repair) that should solve the situation. If not, please leave a message here..

Hi Jeremy, unfortunately, this is known issue with NTA 4.0. Currently only way to make it less painful is to carefully plan each IP groups (and applications) update, making all required changes at once and submit all at once. Or speed up you flow storage drive.

Hi Jeff, NTA 4.0.2 upgrade has to be installed on Flow storage as well. The installer on Orion main actually checks FSDB version and won't let you continue without doing FSDB upgrade first. I'll let FAQ to be updated by that. Re: How to upgrade from nta 4.0 to 4.0.2 jeffnorton May 22, 2014 12:53 PM (in response to Choly)…

Strange. I remember I actually saw an IP which returned '.' as a hostname if asked for reverse DNS some time ago... Could you try to click the plus button as line with the mystery host, and click one of devices which reported that traffic - this will lead you to endpoint details page, where you should get listing of IP…

If two groups overlap, data will be shown twice in IP groups resource. Let me explain: Let's say you have 2 IP groups - a bigger one called 4th floor (e.g. range 10.1.1.1-10.1.2.255) and overlapping subgroup HR office (e.g. range 10.1.1.25-10.1.1.30). If there is a 100MB communication from HR office to exchange server -…

Hi, in case you are using SQL express (that came with NPM), follow this guide, in case you forgot SQL password for your NPM installation, please contact SolarWinds support. Correct Answer Helpful Answer * * Re: planning to install nta but dont have sql db credentials used in npm installation wzahoor Apr 24, 2014 1:01 AM…

Hi Andy, links below should help you to set up HA NTA. FoE will keep NTA service coverd after upgrade, but depending on FSDB location you have two options, how to make the FSDB high available: - For separated FSDB server, we recommend to setup MS Failover cluster:…

Generally, to improve FSDB performance, it is recommended to move it to dedicated machine, dedicated drive.