cnorborg · Network Professional IV · ✭✭✭✭✭

Comments

  • Seems like an easy no brainer, but how about some auditing capabilities? ie: I want to know when forward DNS doesn't agree with reverse DNS and/or the hostname NPM read via SNMP. Should be a fairly easy item with the info you already have I would think!
  • I'm guessing you actually mean STP (Spanning-tree Protocol) changes, not SPT? If so, you can generate traps when changes occur on Cisco switches with the following command: snmp-server enable traps bridge topologychange you might also think of enabling other similar traps such as "bridge newroot" or port up/down traps. You…
  • That does depend a little bit, are you looking for ports that are managed in NPM, or all ports? For all ports you would need to delve into NCM rather than NPM tables, which of course means you need that module. NPM only keeps info on ports you have managed - or have selected in "List Resources" for each node... Personally…
  • Hmm... Ok, perhaps a little bit on what that regex does. When created, it will then find any values that are NOT contained in the list of IP's that are listed. ie: it should find extra entries that you don't expect, not ones that you do expect. So, from your description of the problem, where its not finding values that you…
  • Here is one possibility that might help you. This one discusses how to do multiline regex's in compliance rules a bit, which I use for some ACL's depending on the length. NCM Regex to find if deny any is present for each ACL If not that, you might look at the solution I gave for this problem. You should be able to…
  • This will do a better job than I can!! Never forget the nice tutorials they have over at the Solarwinds site!! https://www.youtube.com/watch?v=4DkRxGfJW-Y&index=15&list=PLSAG2TJPvS5apBSLHUqwDATeoXV_qXr-y
  • I had the same problem until I upgraded to the latest version at their recommendation. Sounded like a known problem.quote:Originally posted by dancoh Why does not the "Last Boot" alerts reset? And why does old things all of a sudden pop up? I have had "Last boot" activated for 2 weeks and all of a sudden it reports that…
  • Do a config block. Make the start of the config block be: ^interface FastEthernet .*\r\n description Managed by HP SA. Installation=.* and the end of the config block be ^\! Then, check for your "switchport access vlan 99" in the contents of the block. Should work, if not, post a screenshot of what you're doing and I'll…
  • Ok, I thought it could, but I just definitely confirmed it for you. By default it doesn't search on MAC addresses, but there is a down arrow in the search box that if you click on it gives you the option of what fields to search on. I was able to confirm that it does this by going into the database and looking up where it…
  • So, from what I can tell at this point, this is due to Solarwinds taking some shortcuts to try and speed things up a bit. There are two changes you can make in a config file that is in volume:\Program Files (x86)\SolarWinds\Orion\Toplogy The file is "SolarWinds.Topology.Polllers.dll.config". The changes you need to make…
  • So, Solarwinds has apparently decided that this is not a bug. According to them "I've discussed your findings with other members of our team to discuss if there are any other options that we have to resolve your issue. Unfortunately what you're wanting is currently not a feature of the product. You can submit a Feature…
  • So, did some more testing with both an Arista switch and an older Cisco switch. Long story short, its probably not an issue that affects multiple vendors. The Arista switch always returned info when that OID was scanned, no matter how the ports were configured. However, on an old Cisco 2960-24TT-L, I observed the same…
  • Wow, so many things it can be! Have you tried logging into some of the devices from your Solarwinds server using the same credentials that SW is using? Have you reset the credentials in SW to make sure nobody has changed them? Are you using local credentials on the device, or and external authentication source like TACACS?…
  • Have you checked the firewall logs to see if the traffic is blocked? Have you checked connectivity to the ASA from the SW server via ping or SNMP? Sometimes you can get it working easier in a tool like "SNMPWalk.exe" (which can be found in the SW directory) first and then once its working there, configure it in Orion…
  • Maybe this is what you're looking for, works for me... SELECT ToLocal(EventTime) AS EventTimeLocal, EventType, Message FROM Orion.Events WHERE EventType = '1' ORDER BY EventTime DESC Oh, and while this converts it to local time as to where the server is located, it doesn't convert it to my local time which is -2 hours.…
  • Go in to NCM settings and Comparison Criteria. You will need to write a regular expression to match the lines you don't want to have compared in the two configs. Probably something like: ^Generating Configuration.* And make sure you enable it. Next time it downloads the configs it should ignore those lines for config…
  • Many older tools, and even some current, aren't very polite when polling a switch. They'll read large tables in a way that causes significant CPU spikes. Here is an article on how to prevent them from doing it... IP Simple Network Management Protocol (SNMP) Causes High CPU Utilization - Cisco
  • How long has it been? SW does go and clean up after itself a bit later. From the server you can go to "Advanced Features" from the start menu and do database cleanup. That might help, not sure...
  • Try "Rediscovering" and "Polling" the node, might take a few minutes to catch up. If its in NCM that you're seeing it, you might have to re-Inventory the devices by going to Configuration Management, selecting the devices, and then clicking the "Update Inventory" button.
  • One thing I've noticed in the latest version of Solarwinds (11.0) if you convert a node from "ICMP only" to "ICMP & SNMP" that it will change it from using ICMP for node up/down status to SNMP. The problem with this is that SNMP is polled at a much slower rate than ICMP. This could be your problem. To check, open up a node…
  • You might want to check this out Easy way to monitor DMVPN tunnels!!
  • So, I've had this same message pop up in my "Solarwinds Active Diagnostics" and I've made the tiniest bit of progress on it. It's showing up on "Agent Infrastructure" under "Ping all plugins on agents". The error looks like this: I should note that I have "Success" with the same 3 "endpoints" for the "Discovery",…
  •  I'm having similar problems. Similar messages in the logfile. We installed 9.0SP2 for the first time maybe 2-3 weeks ago, everything worked for a week or two then died. At that time they said that we had probably done the initiall install a bit wrong, had us uninstall everything and reinstall. Its been working close to a…
  • With regex's you need to accommodate for white-spaces and the like. In Fortinet configs there are frequently white-space before the actual command happens. Using '^' anchors the regex to the beginning of the line. So, what you probably really want to use for something like that is "^\s*set pre-login-banner enable" to allow…
  •  I think one thing most users (definitely myself) would be interested in is how security (ie: roles/permissions) is delegated. How flexible it is. The online demo doesn't allow you in to look at things, and there isn't much explanation on the website beyond a screen capture that looks promising. Will you be publishing…
  • Thought I'd give it a try for the fun of it. Had problems also, even though configured "correctly" according to gmail, and so are you. The only thing I can suggest is to try using your actual gmail.com address instead of your domain? Neither worked for me though. You'll probably need to get in touch with google's support…
  • I believe you can do that if you get the Engineers toolset and install it as a web add-on to the Orion server. I still use it as a separate tool and haven't integrated it into my Orion, but I think you should be able to use all tools from the web version. Network Engineer Tools - Engineer's Toolset | SolarWinds
  • You might be better off not comparing it to a feature in a competing product, until a couple minutes ago I had no idea what passive service is/was. After reading about it at their site, I still only have a vague idea of what it does or what use it is. Sounds a bit like the Solarwinds Agent that's available for servers,…
  • Yea, I've always considered that to be a bit of a bummer with Solarwinds. If you change routers and/or interfaces for a WAN or even LAN circuit, there are no real choices to save the data. Let's say the old router you had a WAN link on used fa0/1, but the new one uses g0/1. Same connection, just a different name for the…