cnorborg

No, you have to use either SWQL Studio, or put it in a resource. I personally have something similar in a resource in one of my pages. Easier than loading SWQL Studio. Edit a page, go to page settings, add a resource to one of the columns of the type "Custom Query". Then preview the page and make the title you want and put…

in How to query SNMPv3 Credential Information for Nodes Comment by cnorborg June 15

Wow, very little info here. But, wild guess. Problem with a rule on the firewall.

in NCM issue for onboarding Firewall Comment by cnorborg June 15

So, you want them both to be bad, or both to be good? You should note that there is a couple arrows in the middle of the link, pointing at each other. These are signifying that one side of the link is outbound from one interface, while the other side is showing outbound on the other side of the link. Neither interface…

in Link label metrics on an intelligent map Comment by cnorborg June 9

Well, it depends on what you want in the alert. Using Variables, you can do things like have the name of the node dynamically change and have just one alert for a given trap. You can probably even have the name of the trap as a variable and stick that in there, and do one alert for all of them? However, trap names are…

in Trap alerting Comment by cnorborg June 8

Maybe one of these might help? https://documentation.solarwinds.com/en/success_center/whd/content/helpdeskconfigureoutgoingemailaccounoffice365.htm

in How do I enable the SMTP server using Microsoft Graph? Comment by cnorborg June 1

I don't think we're having that issue? So you have configured the Netflow on the device to send to the VIP and not the primary poller, right? Do you have firewall rules that might prevent it? Are both of your HA pair on the same subnet?

in Netflow collection not working on VIPs Comment by cnorborg May 21

Well, unless you have the HA device managed via an OOB interface, its probably not going to be managed well. That does depend on the brand and how they implement it though. If you do manage it through an OOB interface, you can always add the connections manually if they don't show up? Not sure how useful it is though.

in Intelligent Maps - How do you handle multiple physical devices that are virtually one? Comment by cnorborg May 15

Is SAML an option? Much easier to work with if so…

in CAC installation for Solarwinds Comment by cnorborg May 13

Configure the firepower device to ignore traffic like that from the SW server. Just pass it through.

in DNS Lookups causing Firewall alerts Comment by cnorborg May 13

Try reading through this article. Odds are that Solarwinds hasn't seen the devices to add them. https://solarwindscore.my.site.com/SuccessCenter/s/article/Add-MIBs-to-the-SolarWinds-MIB-database?language=en_US

in Config Manager Won't Categorize Cisco Device Correctly Comment by cnorborg May 13

It does, but not in the NPM part of Solarwinds. That uses simple SNMP polling to download very simple bandwidth usage. For getting QoS based information, you need to be configuring and using the NTA module, or "Network Traffic Analysis" and configure up Netflow or something similar on your devices. You should be able to…

in QoS Class Monitoring Comment by cnorborg May 12

Yes, there is absolutely no easy way to take a DISA STIG file and import it into Solarwinds, neither now or in the past. @CourtesyIT did a ton of work to get the STIGS into Solarwinds Compliance rules for us. That being said, you really don't want simple DISA STIGs imported anyways. ie: a DISA STIG rule says you should…

in Importing DISA Stigs on air gapped network Comment by cnorborg May 12

Hmm… Do you mean one physical device that is split into multiple virtual devices? Or something like a firewall redundancy HA setup where you have two physical devices where only one is active at any given time? No idea on either, but a bit confused as to what you're really asking about?

in Intelligent Maps - How do you handle multiple physical devices that are virtually one? Comment by cnorborg May 12

Solarwinds is very browser oriented, and for some auditors who want to just be able to click on a link and have it open their preferred SSH tool rather than some funky HTML5 SSH client like Solarwinds uses, I created a simple resource that is just a simple link that a browser can open. It goes to "ssh://<IP ADDRESS>" and…

in SSH/RDP Connection Manager Comment by cnorborg May 12

Here is an update for you! You can no longer say that the last post was from 2023, there is now a post from May 2026 entitled "Any Updates - ANYBODY????". 😁😜

in Any Updates - ANYBODY???? Comment by cnorborg May 11

It also depends on what you do with each service? ie: We send the vast majority of our syslogs to a Splunk instance, which is really beefed up, we only send config logs to SW so it can do RTCD. So, putting our logs on a separate database doesn't make a lot of sense. Same with Netflow, if you only have a few things going to…

in Seperate SQL Instances OR One SQL Instance Comment by cnorborg May 11

Doing direct CAC authentication, or leveraging SAML to get you in? We use SAML, so far haven't had any issues, but I haven't upgraded all of our environments yet.

in CAC single sign on issues after 2020.2.6 HF2 upgrade, anyone one lese having issues and how did you resolve Comment by cnorborg May 11

I don't envy you! Just a quick FYI - agents are MUCH easier and probably even safer…

in Troubleshooting WMI account lockout issues - lessons learned Comment by cnorborg May 11

But, don't forget to go to the http and error logs on the destination system also. I think the odds are the error is there from the error message you're getting. It should give you guidance as to what you need to solve…

in Alert action to do a HTTP API POST to out ticketing system Comment by cnorborg May 11

Ok, so here is the fixed query with that change… SELECT n.Caption AS [Node], i.InterfaceName AS [Interface], i.InterfaceTypeName, i.PortStatus AS [Port Status], m.PortType AS [PortMode_Code], 'Access' AS [PortMode_Interpretation] FROM NCM.Interfaces i JOIN Orion.Nodes n ON n.NodeID = i.node.CoreNodeID JOIN…