christopher.t.jones123 · CRIS Solutions Architect/Engineer · ✭✭✭✭✭

@"johnwilly", have you tried restarting the Administration Service on the main poller? are there firewalls or some sort of WAN accelerators that might be messing with the traffic?

@"johnwilly" what's the latency like between that poller and the main poller?

@"jnc" does your SCP/SFTP server have an account provisioned for nms? when you open the application on the polling engine that is receiving the file there are settings for user accounts, it looks like the uploader is trying to use an account that doesn't exist on the SFTP server. This article should walk you through…

@"dennb10" The commands are dictated by Device Templates, if you review what device templates it will tell you what commands it runs against the devices using those templates. That would be the most effective method in determining what commands NCM uses against devices and what privileges the user would need.

@"mwenda" does the destination have a certificate, and does it show up as a valid certificate on the main polling engine?

@"-SGregory-" this is a rather frustrating limit because even if you do contact Microsoft, increasing that limit is not a permanent change that they will make (at least according to what they've told me in the past). The best course of action I can advise is to use API polling to pull the statistics from Microsoft Graph…

oh, I misunderstood, I thought you meant you just moved it to a different polling engine. If you've already removed it and added it again and it's still displaying that, I would definitely recommend you submit a support ticket for it.

@"bharris1" if you are not concerned about retaining historical data you could try to remove and add the node back in. If you need to retain the historical data then you should probably open a ticket with SW support, to have them take a look at that web log and figure out exactly what its barking about.

@"bharris1"from what it looks like there are multiple entries in the DB for this particular node routing statistics and it's getting confused. I could be wrong though. I would run this query in SWQL studio or /Orion/admin/swis.aspx and look to see if there are multiple pollers for topology assigned to the node, the…

@"bharris1"Look in the OrionWeb immediately after refreshing the page, it might provide insight as to why the resource isn't loading, another log that might worth having a look at is the InformationService Logs

@"mwenda"Sorry, I gave you the wrong log earlier, in that same location there is another log named ActionsExecutionAlert.log which might give you more info on what is going wrong. If it doesn't display useful information you can adjust the logging level using the instructions on this link and obtain more information. You…

@"mwenda"if you navigate to this log it after simulating the action, it should give you a little more information why it is failing. Typically in my experience its because the authentication is incorrect, or because the message is formatted incorrectly (either it is expecting a requirement and not receiving it) i've used…

are bosnode.local and atlnode.local a child in any other dependencies? 

@"KMSigma.SWI" Thanks. Appreciate you looking into it.

@"KMSigma.SWI" I did, and unless I'm missing something that doesn't list out the specific DLL versions that were compromised. I am requesting a list of the versions specific to the DLL's.

@"edwardconde" this is the article I use when conducting what you're talking about, there's a query in there that you need to run in order to update the DB entries https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Migrate_SolarWinds_to_a_new_server_with_a_new_IP_and_hostname.htm

@"KMSigma.SWI" Now that there is remediation available, and it would no longer be deemed premature, does SolarWinds plan on providing this to its users? If so, is there an ETA on when we could expect it?

@"tony.johnson" This URL has been unavailable since yesterday. Is there a new KB article to reference?

@"jason.carrier" The article with the versions affected is great. Thanks for providing that.

@"KMSigma.SWI" Thanks for the feedback. This request comes based on the Security Advisor listing the Orion Platform version numbers, it seems SolarWinds users are finding it difficult to determine if they are on 2020.2.1 Hotfix 1 (the mismatching package dates on the products downloads page doesn't make this any easier),…

@"orafik" Thanks, unfortunately this is for an older version that I am not using. I actually found one https://support.solarwinds.com/SuccessCenter/s/article/Setup-SSL-and-enable-Smart-Card-CAC-PKI-user-authentication-for-Orion-Web-Console?language=en_US

@"arnabmk" an option you might be able to try is to set the value for Enabled to False for all the Actions from the "Actions" table 

@"jason.carrier" provided this article in another thread, should be able to help https://support.solarwinds.com/SuccessCenter/s/article/Address-the-SolarWinds-Core-BusinessLayer-dll-security-vulnerability-in-Orion-Platform?language=en_US

one that I notice is not on the list utilized for Netpath is stat.ripe.net, below is a post regarding it, but I noticed after I turned of internet access a number of errors in the event log referencing that it was unable to communicate to that URL via 443…

SolarWinds support got back to me today and said thanks for the bug report, with no timeline for fixing it. They recommended that I put in a feature request as well to raise awareness. Here's the feature request for it.

SolarWinds support got back to me today. They are sending the case to development as a bug with the custom query widget. As they update me I will update here.

Thanks for the clarification

Thanks jiri.prochazka​ for that insight. So "technically" it is still required, but only in an uncommon situation?

I understand. I'm just interested if they removed it as a requirement for the NTA DB maintenance or removed it as a requirement for the config wiz to complete. The reason I would like to know is because if it is still a requirement for NTA DB maintenance and they just removed it as a requirement to get the config wiz to…

Submitted a support case for this. Not getting my hopes up but I'll let you know what the results are of the support case if any.