cnorborg · Network Professional IV · ✭✭✭✭✭

Hmm... I'm not 100% sure, but I'm going to guess the answer is "probably not". But I'm not 100% sure. So, when you save an analysis, you end up with a URL something like this: "ui/perfstack/PSTK-666255AED77E59BE45FCB409CE1CBFFF190E92EA" That loads the saved perfstack and does what you told it to contain. I don't think…

Nope, the one rule catches >all< VTY blocks. Remember, if VTY 4 is configured differently than VTY 0 3, it will be a separate block too. You can't count on the blocks being "vty 0 4" and "vty 5 15". Not to mention this adapts to those sites that only have VTY 0 4 and no VTY 5 15... My regex works no matter what VTY blocks…

Hmm... I just checked myself and what I'm seeing in my Database files doesn't 100% jive with what searching by and endpoint in UDT does. If you check out the UDT_PortToEndpointCurrent table and find the entries for your devices (which would be in the UDT_Endpoint table), I'd be curious to see if it matches up with the…

Well, once again, with NTA 4.X the database version doesn't matter, so all you have to do is make sure your NPM works with it and you're ok. I'd recommend upgrading to the newer Orion versions first, then upgrade your SQL server, that way you won't have compatibility problems with your old software and a new SQL server.…

Wow, how did I miss that, we are running 6.1 but my eyes just never noticed that in there before!! That's the quickest implementation of a feature I've ever seen!! :-)

Hmm... Ok, you might be running into a pager problem here. Make sure you're device type is set to ASA in "Edit Properties" at the bottom of the page in the "Communication" section. If you don't it will probably auto-detect as a Cisco IOS device which means it tries to use "terminal width 0" and "terminal length 0" instead…

How many active interfaces are there? After you changed the default polling intervals, did you hit the "Re-Apply Polling Intervals" button? If you only hit submit, it would only change it for new interfaces managed I believe. The way you can check this is by bringing up Node Details on that node and then clicking on one of…

Hmm... Let's go over your questions: can we use same SQL server for both primary and secondary solarwinds products like sever 2 primary NPM and server 4 secondary NPM? One thing you have to understand is a huge benefit to Solarwinds is the integration of the products. Due to this, you really want to install all your…

Ah, I see one other thing it really fails on, inconsistency between vendors in the "InterfaceDescription" field. On Cisco's you always get the long description of the Interface, which is nice, but on other vendors like Fortinet, you get what they named the interface, kind of the Alias in Cisco. Annoying...

Ok, not seeing the total correlation between what you're saying and what you did a screenshot of. Your asking for hostname, MAC, IP and Vendor. But the screenshot shows Port #, Hostname, IP, MAC, VLAN and VRF. Not many common fields there. But, I'll give you a couple examples in SWQL, which you can find in the OrionSDK,…

Hmm... I think you missed the point on that one, the quality of my RDP session had nothing to do with it beyond covering up the real culprit. The real culprit was how the console or physical hardware was configured as if you were sitting in front of the server. Now, since you aren't coming in via RDP might mean your…

Well, unless you have a very small environment, I wouldn't recommend running it on the same server. Definitely not a good idea. There is a possibility that they didn't think anyone would do that, because of how bad an idea it is, and didn't accommodate for that in the update script. I would open a case with tech support,…

Where is the list of all the functions that SWQL supports? Like the date related items and such. Haven't been able to find it in the WIKI, but it was quite easy to find in the PDF...

It shouldn't, the "state = 2" says to only do it for nodes that are down. Are you sure the query looks the same as what I posted, except for maybe some spaces?

SWQL is definitely different than SQL. Refer to the Orion SDK.pdf document included with the SDK for what functions are or are not available. Someone did help me once with figuring out the whole day of the week thing though. It was in this discussion and if I remember right it did work, although I never took the time to…

 Oh wait, this is on my "Additional Web Server", which I just downloaded a new copy yesterday and reinstalled BTW. On my 9.0 main server it definitely is saying "SP2" and it is putting the DoTW in the graphs rather than the random times... Still think there should be ticks or something there showing where midnight is. Now…

I'd go with a big huge "Yes" on whether or not you should customize it. The included Compliance reports do just that, they check and see if your config's comply to the standards that they are set for. ie: the HIPAA reports check for HIPAA compliance, which may or may not apply to you. They also check for pretty generic…

I think that's whats happening to me too. I've figured out if I just cycle the services via Orion Service Manager (first shutdown everything, then start everything) that I can then import. I think some patches were supposed to fix this, but hasn't yet for me.

Should we take the answer marked as correct meaning you solved your log in problem?

So, define what you mean by "not able", is it not logging in? Or is it not getting the config you think it should?

cnorborg, can you provide more information about what auditing you would like to see? Currently, we only get name information based on the local server's resolution. However, for other activities, we have fairly detailed logging available. The DNS use case is a good one, got any more :-) That's exactly it. Currently the…

Well, this particular video was showing "Windows Service Monitor", but you can also use WMI or SNMP or a couple others. You do have the Server and Application Monitor module on your server right? I think by default that prefers to use WMI. You can even use an Agent now, that I believe would allow you to monitor a custom…

Glad to hear your seeing data now! Yea, with all the components it can be a bit tricky sometimes figuring out how the info gets in there (ie: polled, inventoried, does the port have to be monitored, etc). Once you know a bit and sit down and think about it though, it all makes sense. So, why are 531 nodes discovered and…

So, I did a little testing and figured out a bit more about snmpwalk. If you have an incorrect SNMP v3 username, it complains. But, if you have the encryption type wrong or something, it will say "Found 0 OIDs (timed out)". Is this what you're getting? Or is it not timing out and just returning 0 OIDs? I don't have any…

The Rogue Device can do just that if I'm not wrong, but I don't use it much. But, in order for it to function the way I think you want it to, you might have to do one more step and that would be to set up your "White List" in the UDT settings section of the Settings page. What that does is it defines a set of rules of…

I'd still believe that looking for the SYSLOG message for when the errdisable took effect might be easier than creating a UnDP and alerting on it. Have you looked into what SYSLOG messages are generated when that state occurs?

 Hmm... One person say's it doesn't, the other says it does. What is it supposed to do? And if it can, how can I get it doing that again?

Chrome has a remote desktop built in that isn't bad. I like "Teamviewer" quite a bit also... Teamviewer you can set up a profile that will get you in I think even if it's at a login prompt.

Sure, I'd actually do things a bit different though. I'd use the first line in your advanced config search as the config block start. No need to repeat it in both places, might make your rule run quicker/better... Then its just a matter of in the "Remediation" section to click on "Run script on each config block in…

Well, I think your confusing alerting with monitoring. Alerting when you hit a hard threshold on something like CRC's isn't too useful. Here is why. If you have two routers you enable this threshold alert on, both freshly rebooted so they both have a 0 count on the SNMP counters. Let's say that router #1 hits the…