cnorborg · Network Professional IV · ✭✭✭✭✭

I think the problem is that you're checking the "Entire Config File" vs. the "Config Block", so its simply looking for either of those two anywhere in the config. You probably want to configure up a "Config Block" for interfaces and have it iterate on those. Of course as-is it will violate on any trunked port, as well as…

I think that depends on a number of factors. First you have to think of how Orion polls nodes. For response time / availability it does it every "X" minutes usually. If you have this polling interval set to 5 minutes, then you should be able to produce reports that give you 5 minute intervals. You can customize your…

Yea, I know I'm late for your deadline, but decided to finally share mine via email with you. There are a bunch of things our "customers" would like to have that we either can't, or find difficult to do. Nothing huge, mostly "cosmetic"...

Very nice, look what I got yesterday (they were a bit delayed)!! Got my MVP polo also, no sign of the t-shirt yet though... Thanks DanielleH‌ and team!!

It's saying the remote box is refusing the connection for whatever reason. Check the credentials you gave Solarwinds, make sure they're ok. Install a client (SSH/Telnet?) on your poller and try logging in from there. Maybe enable authentication logging on the remote device and see what its seeing/saying? Check any ACL's…

You know, come to think of it, shouldn't "pall3s01" come before "palrtr01" also? Hmm...

The short answer - yes. The long answer really depends on how you have things set up. For the subnets in question, have they been added into IPAM? I'm assuming so. If you go into "Manage Subnet Scan Settings", how are things set up? Hopefully you have ICMP scanning, and probably SNMP scanning, both enabled? If you go to…

Looks like the Nexus 3000 is using SFlow, not Netflow. Interesting. Here is an article on how to configure it: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/system_mgmt/503_U5_1/b_3k_System_Mgmt_Config_503_u5_1/b_3k_System_Mgmt_Config_503_u5_1_chapter_010010.html#d10764e267a1635 This might help…

Is the goal somewhat merging the data, or reducing the # of servers? Even if you could merge data onto one server, the usefulness of some of the data at that point, such as that regarding latency or response, would be minimal. I would think the response time would rise quite a bit moving it into the US. However, if you…

This fixed the problem I was having, thanx!!

I'm going to give this a "probably". The default search is a bit restricted, but if you click on the down arrow in the search box, it will drop down a box of fields you can search on. There is both "Group Description" and "System Description". Selecting both of these will probably get you what you want, you can always trim…

Got an answer from the support guys at Solarwinds. Turns out we had a custom field that had a special character in it's name. You should only use letters, number, "-" and "_" when creating special fields. In our case someone had used a "#" which caused it to stop working.

Hmm... Same timezone as me! Your probably not using the correct functions. Check the SWQL SDK reference guides and check into ToUtc ToLocal GetUtcDate (instead of GetDate) or possibly even ChangeTimeZone A little correction in how your doing your query should accommodate for the timezone problems you're having...

Your regex's are a bit confusing and has some stuff I'd consider to be superfluous. Let's take the first one. ^\s{1,}authentication event no-response action authorize vlan 666[\r\n]*$ The "^" is good, you're anchoring it to the beginning of a line so you know where you want to start comparing. The "\s{1,}" is a bit odd to…

Agreed, there should be no need to purchase APE's in your scenario. We have 5507 nodes that we're monitoring across probably 2-3000 sites nationwide and we monitor all of them from a single orion server. However, that single Orion server also uses a separate SQL server and another server for running the NTA FSDB. As…

Not positive its still happening or not, but for some time NCM has been either collapsing multiple blank lines or removing blanks altogether. It's best to not have blank lines in your scripts. If it requires a simple <return> to choose whatever the default is, lets say it needs a "y" answer, go ahead and put the "y" in.…

The short answer - "yes". Check here, it depends on exactly what you're doing as to what is available. Variables and examples

Well, that's funky! I'd definitely open up a case on that!!

What kind of firewall? Have you set the logging source-interface on it? Kiwi tends to log only what it see's, so its probably in the configuration of the firewall somewhere...

Hmm... Wow, lots of effort put into that script!! I'm going to suggest another route for you though. Rather than using that rather complex script, have you thought about using the Compliance Management section of NCM? In it I have a couple rules set up that are SSH related. The first rule I have checks to see if SNMP v2 is…

You might want to include your netflow config so we can have an idea of what you're doing. 2960x's only do "Netflow lite", rather than returning stats on every packet that goes through them, at the most you'll get 1 out of every 32 packets reported on, which is configurable. You might have to manually set a sampling rate…

We have quite a few Arista devices, do you still need these or are there any specific ones your looking for?

You might be interested in this voting topic BTW!!

Never heard of that happening? Maybe some more details like the configuration of the interface for the subnet its doing this for? Brand of router? Assuming your doing "Network Discovery" in Orion, or are you using another method of adding them? Are you scanning for loopback interfaces, management interfaces or a physical…

I'm assuming you mean the resource that produces a series of bars showing availability of your networks for a given time period? It doesn't poll anything itself, it uses the values already in the database for availability. Usually these values are generated off of ICMP pings, but you can change this to SNMP in "List…

Hmm... The problem is that most sites like these (and specifically these) aren't unique "applications" as far as Netflow is concerned. For something to be an application, it has to have a unique attribute like a port number. For example TCP port 25 is SMTP, TCP 110 is POP3, TCP 22 is SSH, TCP 80 is HTTP, TCP 443 is HTTPS,…

Oh wow. Could be I suppose!! The newer versions are much nicer, if you have support on it definitely upgrade!!!

Not sure about the ASA, but our 3850's are getting serial #'s ok. Maybe an IOS upgrade? Or are you sure they were discovered properly with inventory? You can manually update the inventory by going to "Configs" / "Configuration Management", choosing the device and clicking "Update Inventory". Make sure it completes...

There is no option on the forwarder to keep the original IP? Like on syslog-ng there is the keep-hostname() option that allows you to do that...

Vote on solving this issue!