chris.lapoint

The main NTA summary view provides data across all NetFlow sources. You can then expand to show that amount of data per source. This will allow you to at least see it at a glance, but you'll still need to combine the data manually. I can definitely see the use-case for this so I'll mark this down as an enhancement request.…

We are concerned about the additional load placed on the database server, primarily in terms of I/O and finding it difficult to scope what hardware upgrades will be required, and how well it will scale with such a high number of devices. It is extremely important that it doesn't negatively impact the primary purpose of our…

Thanks for the request Donald. Is there another mechanism besides drops that would indicate a class going beyond its bandwidth allocation? I was thinking perhaps we could look at the relationship between the desired QoS and the actual bandwidth being used by that application from NetFlow data. Any thoughts on that?

Can you check the firewall on LF and on Syslog? You'll need to make sure port 514 is not blocked. Having said that, I check with dev and they found it strange that that the test mechanism isn't generating events in the Event log, so that could be an indicator of some other problem. Are you getting an error message when…

The technical reason is that the flows contain interface indexes. If the interfaces aren't managed within Orion, then we don't know which interface to assign the flows to.

Ciag, thanks much for the post! No need to worry about format of requests, I'll take care of entering/tracking these individually. Are these in priority order? If others are out there interested in similar enhancements, please chime in!

The differences are as follows: * Server - license for a single Kiwi Syslog Server installation * Site - allows you to install up to 25 Kiwi Syslog Servers * Country - allows you to install up to 50 Kiwi Syslog Servers * Global - allows you to install up to 150 Kiwi Syslog Servers This of course begs the question as to why…

Did you happen to upgrade Orion NPM after your upgraded NCM to 5.5.1? You can use this workaround in the meantime: http://support.solarwinds.com/kbase/ProblemDetail.cfm?ID=1160

This process is what is documented for NPM. I believe this should work for NCM as well. Thefollowing procedure does not detail the process of either obtaining a requiredcertificate or generating a certificate signing request for a third‑partycertificate authority. It is assumed that the required SSL certificate hasalready…

Please send me an email. Right now the only workaround is to install a back-level version of Log Viewer. We're looking at fixing in a future release.

Do you have NPM? If so, you can install the NCM integration module on your Orion NPM server (this is an additional executable included in your download package). The NCM integration module respects Orion NPM node limitations, which will allow you restrict user access to specific devices.

We're working on a fix, but in the meantime please run a repair on the NCM Integration Module to resolve this issue.

Currently, you'd need to share a single login. However, I've got this on our roadmap. For internal folks, this is being tracked as #989

Absolutely! Create a SmartGroup that matches the one below. Assuming that all your DC Devices have Device Type = Domain Controller (whether set by discovery or manually), they will show up in this SmartGroup.

 Currently, no but this is something we're exploring for 5.1. I can't say whether it will make it at this point

Makes sense. We've got the ability to search based on inventory data in our list of things we're considering. The first step is to ensure that Global Config Search is available in the NCM integration module.

Realtime change detection requires configuring your devices to send syslog or SNMP trap events to NCM for network config changes. Please see the NCM v5 Admin Guide for details on how this is configured. An alternative is to setup a recurring config backup job that runs on some periodic interval (e.g. every 15 minutes).

Was it working before? Have you modified any of the device templates recently? Typically, if you manually select a device template for a device and it still fails, this means that the device template is improperly formatted. Installing/reinstalling Cirrus won't necessarily fix the problem because it should respect your…

Just FYI, the ability to act as a transparent proxy is a feature of Kiwi Syslog Server today. As noted in Denny's post, the direction is to replace Orion Syslog/Trap with the superior Kiwi version but timing is still TBD. In the interim, you could setup Kiwi Syslog to receive your Syslog events and have it forward to both…

Can you please post the full session trace?

If the affected VLAN is available in the trap variable bindings, then you can reference it in 10.0 using alert variables. For example, to reference the first variable binding data (stuff after :=), you can use ${vbData1}. To reference second variable binding data, you can use ${vbData2}, and so forth.

Thanks for the feedback. Are there any others experiencing this same issue with other devices? One workaround would be to setup a Syslog rule specific to each Netscreen devices so that it only triggers RTCD download action for the first event and suppresses further actions for X seconds before triggering again.

I haven't seen this before. Which console are you trying to open the inventory tab? The NCM integration module in your Orion website? Standalone NCM website? I think your best bet is to open a ticket with support and include the responses to the questions above to help with diagnosing the problem more quickly.

If you go to File > Settings > Configs > Comparison Criteria, you can specify a regular expression to ignore this change during comparisons. 

If you go to File > Manage Users and select a user. You'll see the ability to specify Device Login Credentials. HTH.

If there is a MIB that can be polled for status, you can specify the OID in the Custom SNMP Wizard (details can be found on p. 137 of Admin Guide).

We do have plans for new features/enhancements, but there's nothing we can share at this time as we're still going through the prioritization exercise. Are there specific things you are looking to see?

On the feature side, it would also be really nice to be able to log all the output to a single file instead of one file per node, so I don't have to concatenate the output with post-run text processing tools. jswan, in 5.5.1, if you specify a macro in the file name for job results, you'll see there is one file that shows…

Have you tried running your script through the Execute Script job? I believe that the output of the job when performed across multiple devices is all stored in one file.

There is no built-in caching mechanism. To accomplish what you described, you'll need to schedule a recurring run script operation that runs a script that takes care of the forwarding operations.