cmgurley

Comments

  • Rather than stopping services, would an application-level "Suspend All Polling" feature address the use case? I can see this being useful in other situations, and it would keep more features within the Orion web UI. Plus, if it was an application setting, then the FoE would respect the setting since nothing would go down.…
  • I can try to find an IE8 box on my network to test more scenarios, but before I do, can you try one more thing for me? Create/login to Orion as a user other than "Admin" and then try the external link. My tests weren't identical to yours because my users were always different. 'Just thinking that perhaps if the usernames…
  • If you choose that option, you won't get stats on those ports. You'll just see if they are up/down. My guess is that you wouldn't want to click that on your switches (I like to see stats--i.e. traffic/errors--on my switches). As for impact on NPM performance, I have a couple 4506's with quite a few ports and a bunch of…
  • Interesting... Sounds like it might be a case for SW support (though reproducing it on demand is gonna be hard). What version of ASA are you running on your 10s and 20s? On the one of mine that spiked, I'm running 8.4(2). My others are running 8.3(2), but didn't have a spike last month.
  • Sort field is vm.cpuCount
  • Glad that helped . As for the dashboard, since the whole thing is Flash, it can be a bit cludgy on the refresh. The default behavior is to refresh roughly every 5 minutes (I haven't counted, but it seems to be about that). I'd make sure you're running the latest version of Flash, etc. For my part, I find it runs best in IE…
  • Dustin, Sounds like your polling capacity is probably fine, but just to make sure, you should check it out: * In Orion, click "Settings" in the top right * Then, in the "Details" section on the right, click "Polling Engines" * The second to the bottom line shows "Polling Rate" Mine's at 17%, but that probably varies on the…
  • Just want to second this thread. I thought this had been added already, since it is nearly impossible to keep an unmanage job up to date with our ongoing addition and removal of devices, but apparently not. Dynamic group integration is essential. 'Would love to see even a beta of this before our next monthly maintenance…
  • What browser/version are you using? We've seen some bugs with IE9 (not yet supported) and Search in NPM; 'just curious in case that might be the issue here.
  • Agreed. The same concept of "Maintenance Mode" that isn't really present in NPM either (Unmanage Utility doesn't count--it's too static). +1
  • I know this is an old thread, but thanks anyways for the syntax. That did the job for me, and answers some newer threads out there as well. And just for extra customization, in my case, the custom property (Interface_Type) has several values (WAN, Internet, etc), so the WHERE clause looks like: WHERE…
  • Word from support on the case I opened seems to be that there's nothing we can do about the speed/bandwidth changes. They are logged by the switch and so NPM reports the same. I'll echo the original post and following: we need to be able to filter those out. Otherwise, events are useless (since important events are drowned…
  • Hey Brandon, You aren't incorrect about your assumption that users demand access 24/7. The thing is whether their "demand" is valid. Ask our payroll folks when's a good time to take down the tax and payroll processing servers (we're an ASP/PEO), and they'll tell you "never". Give them two options to choose from or simply…
  • If I understand the question right, I think the recommended/supported method would be: For Menu Bars themselves (i.e. the tabs up top), create new bars with the names and sub-items you want. Then, go to Manage Accounts and change the "Default Menu Bar and Views" to those new bars. For the items on menu bars, just remove…
  • Yeah, and it's arbitrary. Some metric triggers it and then later will clear it without much of an indication why. I'm all for recommendations, but perhaps it should be of the alerting variety but rather reporting. SW/PM staff: any updates coming with fixes for this?
  • Chris, I'm having trouble accomplishing the reverse of what you say v10 enables. I would like to create an Event in NPM based on a Syslog message. While Syslog Viewer may be able to retrieve node variables for its alerts, I do not see any where in Advanced Alerting to create an Event based on a Syslog message. Also, in…
  • I'm guessing this will be a case of differing methodologies. My thinking is that if the parent is down (state: down) or expected to be down (state: unmanaged), the same child monitoring action should apply. In this case, I have hosts (ESX servers in this case) which have interfaces. I monitor the hosts as well as the…
  • @ET: I'll load up Wireshark on two boxes and hope they flag soon. We just did a network-wide restart of the SNMP agents, in order to add another management station for troubleshooting this, so everything is actually working for the moment. I'm sure that won't last long, though, so we should have more data soon. Let us know…
  • Hey Ron, Glad to help. Yeah, IE's protected mode can be buggy like that. Two woots for Firefox . ~Chris
    in NPM log out Comment by cmgurley May 2012
  • Hey Jon, So Hyper9 keeps a history, but is it exposed to the end user in an event log format (like Orion NPM)? I'd love to be able to click an "Events" tab at the top and see all events, changes, and alerts across the infrastructure (again, very much like Orion NPM). That way I can browse back to a specific time and see…
  • John, Mike's link is correct in holding the answer. Interpretting it for your environment (default ping of 120 seconds), you'll see this behavior and alert time (numbers indicate poll count): * Every 120 second poll fails (#1, max elapsed downtime = 120 seconds, assuming node failed immediately after last poll) * Enters…
  • Good high-level breakdown. I see that the cloning recommendation is straight from the PDF, but have you run this in production? SQL Server has never been fond of host name changes and AD, of course, would require a sysprep to keep things savvy with the SID. MS TechNet talks about cloning SQL servers more here: Installing…
  • Thanks, Jiri. That was the fix. At some point since 4/14, the NCM Caching Service had stopped (maybe during the 7.0.2 upgrade). 'Might be a good feature request if Orion monitored its own health and alerted in the top bar (like where new blog posts and updates are advertised) when a service isn't running. 'Appreciate it!…
  • Hey Phil, While replying, I wrote a lot about how this and that didn't work and even how one of those KBs was wrong, but eventually started to figure out a few of the caveats (i.e. "Any Alerts" under "Alert Groups" -- very important or else it'll filter out more than you expect). I'm far from loving things, but it's at…
  • What version of Windows? SNMP or WMI checks?
  • Thanks, guys. Yeah, the VMan alerts definitely call for a good amount of tweaking and even disabling on a few, depending on your environment. We'll see if anyone else out there has a favorite or magic recipe for reducing the count, especially of the automated variety .
  • Gotcha. Yeah, back in 5.3, I think, one of the advertised features was the ability to use Kiwi Syslog Server as your log source, so we assumed that extended to all device types (even those w/ agents). For our part, the only reason we'd insist on Kiwi/Windows is the Java dependency of the agents. If those could switch to a…
  • @jswan, Yep, same experience here, especially with Win2k3. @krfitzgerald, Let us know what the fix was...
  • Thanks, Nicole. What you said in the second paragraph is exactly what I'm looking for. ~Chris