cnorborg · Network Professional IV · ✭✭✭✭✭

Comments

  • Yea, but we're constantly adding and removing nodes while the sites stay consistent. If I added it as a custom property I'd have to go in and be constantly working on keeping those updated. Cross referencing another table just seems to be a much sleeker way of doing it. Ideally I'd love to cross reference another database.…
  • Check out this link... Success Center
  • The basics of what he said are correct, but you might need a little guidance in figuring out the data you come back with and where you actually want to query. If you are querying tables from NPM, it will generally only return those interfaces that you are monitoring. ie: If you have a 24 port switch with 24 FastE ports and…
  • We had the problem before we moved to 9.1 on occassion. Post 9.1 upgrade the problem doesn't seem to happen anymore when the NPM service shuts down, but we did come across another odd problem. And it didn't start happening until we had been on 9.1 for a little while. In this case the server would appear to stop polling, no…
  • I feel your pain, sounds like the problem I posted in this posting I've had suggestions it might be due to our routing protocols, which didn't make sense. Also suggested it might be because our interfaces had crypto-maps on them, which they didn't... I am seeing traffic that terminates on the routers though, SNMP and…
  • Ah, forgot to mention that I've already done that. That was the first thing I thought of when I thought it was missing data. As you can see here, its definitely set that way.
  • Can you post your configs in text? And make sure you have the base configuration for netflow/netstream as well as the interface configs. I think the "display ip netstream" command might give all this. Here are some possibly useful articles otherwise? NetFlow Traffic Analyzer 3.8 on Huawei NE20E not working Configuring…
  • You could either do two rules, one for 'deny' and one for 'drop', or you could do a regex to match both, ie: "(deny|drop)". Not sure what you mean by "role function", is that a custom property you set up to distinguish between device types or something? You set up what devices you want the report to target in the "Policy"…
  • beyond doing a simple search for "static mac-address dynamic", I don't believe the search functions in SW will be of use. But, you can do compliance rules which have a richer set of regular expressions you can use. Making a compliance rule and setting it to regular expressions and then doing something like static…
  • Well, the good news is that my inbox is no longer screwed up. Even though the comment from mtgilmore1​ is still in the SAM discussion, the reference to it in my inbox is just plain gone, so its behaving again. However, they definitely did remove comments by radioteacher and replies to his comment by rschroeder​, bobmarley​…
  • To the best of my knowledge, you cannot do pie charts in reporting. That being said, not really sure what you're asking for either. A Pie chart is good for maybe showing parts of a whole, lets say the whole pie is all your devices, and maybe a big slice of that is "Cisco Devices", while another chunk might be "Windows…
  • Agreed, if you're looking for interfaces use discovery, works great. You should be able to customize a scan to select the type of interface you want (ie: up/trunk, up/access, etc). For devices I tend to use CDP Neighbor for that and have written an SWQL query that produces a table of nodes that I see via CDP neighbor but…
  • It also adds one more single point of failure. Not a fan of that concept. I would only use something like the samplicator when I needed to, either had a netflow source that wouldn't send to multiple collectors if I needed it, or maybe use it as a proxy for a netflow source that didn't have direct access to the collector. A…
  • Yes, it was the hostnames with special characters. Hopefully this will be handled better in the future as I'm seeing Internet hosts with odd characters also. Not a fan of putting entries in a "hosts" file to fix it...
  • How is your ignore commented lines configured? I think the "out of the box" configuration for that doesn't work right. My regex pattern is "^:" which seems to work for me I believe... I might have other lines to compensate though...
  • Hmm... Never really played with that before. Definitely close to what I want in some ways, but in some ways not so nice of results. Definitely don't like that you get the "for Datasource 1" and the "Ordered by" before your table headings. No way to get rid of those AFAIK. I tried sorting in my query first, but it seems to…
  •  We use something called "Web Screen Saver Builder" http://www.dswteam.com Cheap, easy to use, does a good job of doing it... Great for a machine sitting there and cycling through pages... 
  • Guess this is similar on Arista's https://thwack.solarwinds.com/ideas/9401#comment-331040
  • Will there ever be a way to adjust the polling intervals for this separately? From what I understand it does it at the same rate as interface polling, once every 10 minutes? What if you were ok with doing it every half hour?
  • Hmmm... We've had problems getting actual usage out of Fortinets using Netflow. When I opened a ticket with them about this in Dec 2015, the response I got was below. This was after a couple weeks of being persistent with them about the traffic I was seeing being wrong. There aren't many systems, esp. low end, that use the…
  • Yea, I'm having a meeting with an SE today, don't have much hope on it. Actually took time to look at the query they're using and I think its flawed, difficult for me to prove though. I have a concept in my mind for getting around it though. I'm thinking of setting up an SQL job to run every day and basically take a…
  • silverbacksays‌ is most likely correct, although many people have problems figuring out where to make this change. If you bring up a Node Details for the device and go to "List Resources". When its done discovering resources, you want to make sure that "Status & Response Time" is set to "ICMP (Ping) - Fastest" and not…
  • Aw man, I'm very allergic to cats!!!
  • Group your nodes by building and put the GPS coordinates on the group. Then limit the map to doing groups, works much quicker and is easier! We dynamically add our nodes to the groups based on our naming scheme. Works out really nice for us and much easier to work with!!
  • Well, I have heard of a product called Nextgres, that supposedly allows you to run your MS SQL Server, MySQL or PostgreSQL app on Oracle, but I'm guessing that this wouldn't be considered a "supported" configuration for Orion. You could give it a try though...
  • Agreed. Having everything on your core polling engine and adding APE's when you exceed your polling is the way to go from everything I've heard. EOC is mean to tie together multiple very large Orion instances and provide a single summarized pane. You don't get the full functionality of a single integrated Orion instance.…
  • If you have a L3 interface for a VLAN on a switch, you can shut it down but still have the VLAN itself up... Not common, but...
  • Yes, I think the key is that as superfly99‌ said, monitor the WAN interface in NPM. Since your question is in the NTA forum I think its a problem with trying to use the wrong product. NTA is more about getting granular detail of what traffic is traversing a link, not peaks and averages. NPM however does this quite handily…
  • I'm considering adding all interfaces and setting all the ones that are down, or might go down, to "Unpluggable", which you can do in the Interface Details under "Edit Interface". Could probably also do it via the API programmatically... Has anyone else used this approach?
  •  I think the install/upgrade process has been going a bit downhill over the years, to the point with 9.1 I never did get a completely clean install. Had problems with starting/stopping the polling engine which messed up other things. Its up and running, but we have seen problems like that. At least you have fixed it so you…