cnorborg · Network Professional IV · ✭✭✭✭✭

Maybe via an alert action? ie: have the trigger condition for the alert based on the custom property that you are polling. Then in the trigger action choose the "Set Custom Status" action. That will let you set the status indicator of a node to whatever you want. This is an "advanced use only" so it may behave a bit funky…

The easiest way I know of doing this is via the "Comliance" portion of NCM. Compliance can be a little intimidating to set up, but the basic rules are actually pretty easy. There are Reports, Policies and Rules. Reports contain one or more policies. Policies contain one or more rules, and policies is also where you limit…

You would have to decide how this is done, could be by model #'s, routing protocol existence as suggested, or even just a manually or dynamically set up "Group" of devices. If a group is too formal, you could just set up a custom tag of device type and assign your routers to a type of "router" or something. So quite a few…

Just a thought, I think it would be easy to use this. In the UnDP application on the server, that you used to set up the pollers, you can also set up something called "Transform"'s. It allows you to perform math on one or more pollers. Maybe subtract the current number from the max, which should give you what's still…

There are two hardware monitors for Cisco boxes. You can set which one to use by default in Settings / Polling Settings and then near the bottom under "Hardwrare Health Polling" where it says "Preferred Cisco MIB". You can set it for a node individually under "Edit Properties" for the node and "Hardware Health Polling"…

What brand of AP's do you have? Most serial numbers are contained in the Orion.HardwareHealth.HardwareInfoBase, but when I do a look at what vendors I have in there its only a fraction of the vendors I have, and Aruba is not in there. Might be vendor specific as to what it maintains... Here is all the vendors in mine?…

By EOC, do you mean that your making it a resource on the page? One thing I've noticed is if you don't have a sort order clearly defined you get strange errors. Can you just run this as a scheduled report in the Web Report writer or something?

More importantly would be what information is available via SNMP for LLDP. If you go into SWQL studio, you can look at it by doing a simple query. Or, if you add this as a "Custom Query" resource to the Node Details page it will give you a bit nicer output that's specific to a node. SELECT LLDP.RemoteIpAddress AS [IP…

I've heard that different web servers can have different authentication methods, although I have yet to test this out. That would mean if you purchase an Additional Web Server (AWS), which aren't very expensive, that you can set up different authentication methods on the different servers.

I'm guessing there is an OID/MIB you can query to get this same value, and poll it periodically via an Universal Device Poller (UnDP)? That way you can store it, chart it, etc... Maybe this is what you're looking for? - Total number of RAS sessions : 1.3.6.1.4.1.9.9.392.1.3.1.0 - Number of IPSec VPN tunnels :…

Are you trying to get the MAC of some random IP on a VLAN, or of the VLAN interface itself? Not quite sure what you're asking. But, the answer to pretty much any question like that is "yes", it just depends on exactly what you're looking for as to how you get it? If I was looking for the MAC address associated with the…

Not sure what you're asking, need more details? If you're getting that error and trying to figure out what is wrong, the best first step is to install an SSH client, such as putty, onto the Solarwinds poller/server and try the SSH connection using it. Be sure to use the same credentials that Solarwinds would be using. If…

I thought the Network Insight for Cisco ASA firewalls did something like this, which is part of NPM, not SAM. A bit confused by you saying that you can see some things in SAM in the original posting in general as it should deal with servers, not firewalls like this. You will need to configure it properly in NPM, including…

An SQL query would probably be easiest. Something like: SELECT P.PollerID, P.PollerType, P.NetObjectID, I.InterfaceName, Enabled FROM Pollers P JOIN Interfaces I ON (P.NetObjectID = I.InterfaceID) WHERE ((I.InterfaceName = 'x3') OR (I.InterfaceName = 'x4')) AND (P.PollerType = 'I.StatisticsErrors32.SNMP.IfTable') Should…

So, I rewrote it quite a bit just to make it more readable to me, although I won't include that here. Not that the way it was written wasn't valid, I just don't follow it as well with the way it was written. I got to a point where I was getting a similar message, and in tracking it down, I noticed if I put in the into the…

A bit confused. You have HA set up, is it across the comcast link you set up? Could you describe your environment a bit more? I'd assume your main server (not the HA) is in the same location as the database server? Where are the AWS's also? For running web pages over a 175/25 link, I don't think there should be much of an…

Without more details its tough to figure out what might have gone wrong, can you give us an example of what you did and we might have more details? That being said, you might be missing a better solution, my favorite part of NCM, the compliance portion. The compliance portion of NCM is made to check configurations to make…

I've been told that a big part of the issue is that the SW Agent doesn't have root permissions, so there is no way for it to run things on the server on its own. Doesn't allow it to do things like that, but solves other security issues of having an agent on the box. The only way I can think of remotely executing something…

I ended up getting my dba's to create some "triggers" they called it to watch specific fields in a couple tables to see when changes were made and what changes they were. They put what changed into a couple different tables that I can then query to see what changed. Planning on doing some reporting to make it easier on…

So, its "normal" for UDT compatibility checker to return "Unsupported" on some tables like that. On my 3850's there are some predefined VLANS that it picks up (1002, 1003, 1004, 1005) that the compatibility checker returns unsupported on. Plus, since we remove VLAN 1, it tries to scan that and fails. If there are other…

Try using the "netflow-original" records rather than your own. Pretty sure you're missing some stuff that needs to be there. Just change your flow monitor to have "record netflow-original". You can show the "netflow-original" record by doing a "show flow record name netflow-original". Is the interface shown below…

Well, the first thing to know is that the Solarwinds Syslog server typically has not been designed for a large number of Syslog messages, and from past experience I'd say 20,000 is well within that classification. It can usually take quite a few, but when the database grows larger, the whole system gets slower. That being…

Well, if you only have one in and one out, the traffic going through the box is pretty much identical on either interface. The only difference would be that the traffic on one interface would be classified as "ingress" while on the other it would be "egress". Let's take a bit of traffic coming from your LAN to the Internet…

Sure, super simple... SELECT OrionNodes.Caption, OrionNodes.DetailsUrl, OrionNodes.Status, OrionNodes.ChildStatus, OrionNodes.Vendor, OrionVendors.Icon, OrionNodes.IP_Address, OrionNodes.IPAddressType,OrionNodes.MachineType, NcmConfigArchive.DownloadTime, NcmNodeProperties.NodeGroup FROM NCM.NodeProperties AS…

Huh, thought this would be an easy answer, you used to be able to set it in "Node Properties" where there was a dropdown of node types, and it was usually just set to "Auto Detect" or something like that. Investigating further, but anyone else know where it went? Or am I just missing it?

It's been awhile since I worked with Fortinet products, and unfortunately the experience wasn't a good one. Its a very difficult platform to actually work with, they tend to obfuscate getting to a lot of information, simple things like debugging something tend to be very cryptic both in how to do it, and the results it…

That's a little unusual, unless you've purchased Log Analyzer or something, the SW syslog server isn't the best, so usually people have their syslogs going elsewhere, like to a rsyslog server and forward to the SW syslog server what they might want displayed with the devices. Maybe it would make better sense to set up your…

There are quite a few good ones on the Internet. Or, you could use some excel functions I wrote to build your own subnet calculating spreadsheets. Those are available via links here: http://the8thlayer.blogspot.com/

Oh, almost forgot. Where you set up the config archive, its a path that you archive the configs to, this could even be on another server or fileshare. Additionally, there is a place to specify a template for the naming of the config files. Initially its: ${NodeGroup}\${Caption}\${Date}\${Caption}-${ConfigType}.Config So,…

Ok, when you refer to "ConfigID" and "NodeID", you sound as if you are referring to the database of the Config Archives, which is contained on the database server. While you might have quite a few pollers, you only have a single database server. So there is no way to replicate this data to the pollers simply because they…