cnorborg · Network Professional IV · ✭✭✭✭✭

Well, regardless of what might have been said, my suggestion would still be to run the Configuration Wizard again! :-D 

Guessing a custom SWQL alert could achieve this? Need to be careful writing them though.

These reports were especially useful for folks that had what is/was known as "burstable billing" where they'd get charge more if the time they were over the 95th percentile was too long. Here is a decent article on it. https://en.wikipedia.org/wiki/Burstable_billing Not super useful for capacity planning? Reports like…

So, Compliance reports are a bit confusing. There are 3 parts, the report itself, the policy, and the rules. You need all 3 to get anything. A "report" has some options to it, but mainly is a collection of policies. And Policies in turn, are a collection of rules. Rules is where all the compliance magic takes place. But,…

What do you mean by "PTP" errors? Off-hand I'm thinking PTP means "point-to-point" but that doesn't make a lot of sense.

So, because of the way NHRP and interfaces work together by default, the interface doesn't go down if the tunnel is actually down. I'm guessing that's why you're looking for OSPF dead-timers? If so, there might be an easier way. On Cisco routers at least, if you put "if-state nhrp" in the interface config, the interface…

In terms of "how much data" the answer is "very little". The polls are 1k packets and when a successful poll happens, there is 1 packet. Statistics polls, ie: every 9 minutes by default highly depends on what you are monitoring. If you're just monitoring a node and no interfaces or volumes, you'd see SNMP queries for CPU,…

I'd actually like this for another reason. On Cisco Nexus boxes, I haven't been able to figure out how to poll the ARP tables of multiple-VRF's at once. To get anything but the default I think, you have to poll different "context"s. But, that limits you to a single context. I'd like to be able to see them all by doing…

Configblockstartline is not a loop, it's simply a string that tells it how to start the config for that particular block. If your compliance rule matches a single interface block, this will create configs for that single interface. If it matches all interfaces, it will generate configs for all interfaces. It's probably…

I've never seen a Cisco switch that wasn't already supported, what kind of switches are these?

Do you know if there are OIDS you can monitor that have those? I'd open a case with Cisco and ask them...

So, I think some of the others have done some of the work for you on the basic queries needed. Here are my thoughts on what direction to go. First, set up a custom property to distinguish what nodes >should< have the pair of neighbors that you mentioned, that way you can query for devices that should have neighbors.…

So, may be totally off track, but it sounds like you're doing some sort of dynamic neighbor assignment, like DMVPN or something similar. I found it easier to track the interface state of an interface, which is always "up" otherwise, by using the "if-state nhrp" in the tunnel interface config. That way the up/down state of…

So, are you sure you filled in all fields? When opening a case, there are two fields that I think you might be having issues with. The first is "Please provide a summary of your question". This should be quite short, and I think there is a limit to the # of characters. The second field is "Provide additional information".…

Well, there is your problem, you're working with Fortinet products!!! :-D Have to ask, are you sure you're assigning it to the same node you're testing on? Might be it worked on one node, but not another one? Everything else seems to look ok, but I can't tell what node you tested on, while you're query is just showing one…

Yes, I think the _IconFor only works in "Custom Query" or similar things. When trying to do something like this on a new dashboard, I find it easier to use the query builder, then under your "MachineType" in "Advanced" you'd need to choose a DIsplay Setting of "Vendor Icon (Watermark)" and it might complain about you…

So, I'm going to assume the actual message you want to alert on does say "exceeded" as that makes a lot more sense than using "cleared"!! I think what you're doing here will only put a message in the "Message Center". I don't see a related alert in what you did. If there was a related "Alert", you should see it, like the…

So, this could be a number of things. And I'm not using Python on my server at this time, so these are generalized guesses that could be relevant for ANY programming language, besides maybe PowerShell which has support built in to Windows. First, and I hope you have this one right. Do you have Python installed on your…

So, there is a workaround of sorts for this. It does require editing the database directly. Basically, if you don't have credentials entered to change the location of the config-archive, there is no setting in the database for this. You can go and add a setting named "Config-Archive" to the NCM_NCMSettings table, and it…

So, either NPM or NCM might be able to give it to you. You might need to either download or create a custom poller for your devices. You can find quite a few in the Content Exchange here on Thwack under Custom Pollers I think? You can change what poller a device uses either under "List Resources" , in Node Details, or by…

NCM can get configs via SSH, TFTP or SCP. Cisco ISE's SSH interface is mainly to set up the IP and such, so very little of the config is available via this method. You can set up a repository in the CLI side of the ISE server, which I think can be an SCP or TFTP server, so that might be a possible way, just using the SCP…

So, in order to use the "IMG" tag, I believe you have to reference an image in the url. I'd also question the "SCR", shouldn't it be "SRC"? By reference an image, it should reference something like "">radar.weather.gov/map.png" or something like that, I doubt this is a valid URL. The problem is, the page you're referencing…

Probably easier using the JOIN as already shown, but SWQL does have "target relationships", what I've also heard described as nested links, between tables. These are pre-defined joins that you can use anywhere without doing a join. In SWQL Studio, you'll see them at the bottom of the table when you expand it out with what…

Best to inquire with Sales on this. In general there are two types of licenses, one where you get a license for each module you want and each node for that module. Usually when you get above 1-2000 nodes you'd go with an unlimited license for that module. This is perpetual licensing There is also the new licensing model…

So, the easiest thing to use AD for users in Solarwinds is not to "import" users, but to put them in AD groups based on what permissions you want them to have in SW. That way you add the group into SW, not each individual user, and the permissions the group has is what the user gets. You can either leverage the browser…

By stuck, do you mean that one or more reports shows the "Waiting" like its updating, or that the date is just not updating on the report? Have you tried selecting the report and doing an "update" or an "update all" to see if it updates manually? The "No devices selected" tends to suggest that the policies attached to the…

I'd disagree with the assertion that NPM is designed for real-time monitoring though. That's one of the key differences between NPM and NTA is how quickly you get data. NPM, by default, works off your default polling interval of 9 minutes. So, every 9 minutes your Solarwinds server polls the network device and asks it for…

Assume you mean KEA DHCP? Sounds like its radically different, so I doubt it's supported unless its specifically mentioned - which I don't believe it is! You should put in a feature request for this, KEA sounds nice!

Great response, although quite often the navigation properties go both ways. So if you'd rather, you could keep your original query and for each variable in the virtual machines you could refer to it by something like NCP.Node.VirtualMachine.DateCreated for one example. Whichever makes more sense to you! If you really want…

Maybe good by the official recommendation, but I wouldn't recommend it! Would probably be better off putting the App server in the cloud near the server, and getting an additional poller to put remotely if you need to. When loading a webpage, the app server makes quite a few queries to the DB server, adding 50ms of latency…