d09h · Senior Principal Systems Engineer · ✭✭✭✭✭

Do you have an alert configured for this poller? If so, can you attach a screenshot of its conditions/ trigger? Alerts can be useful for purposes of executing an action or capturing a timestamp, but just showing polled data does not require the alerting utilities in NPM. If your question has nothing to do with SolarWinds…

I didn't vote. If I had, it would be a write-in for a honey badger.

Thanks danner, the CASE option I can do. I have it some of my SQL and SWQL queries. I even have the node status and interface status icons in several SQL and SWQL queries. I guess the part that is trickiest for me is tying to the status icons. I also did as clubjuggle suggested and took a SWQL query I found and further…

In the first like I provided, How to change an SQL query into SWQL query there was a solution provided by blsanner -- note that this is a SWQL query and not a SQL query: SELECT cps.Status AS [Local Interface], cdp.IPAddress AS [IP Address], cdp.DeviceId AS Device, cdp.DevicePort AS [Remote Interface] FROM…

Happy to help.

In my environment, we have a PSCP job that moves configs for the day to a Linux server. Windows Task Scheduler calls it and the job changes to the directory containing the date. Then recursively copies to the Linux server. Authentication via PKI. Perhaps something like that is an option for you? Have those configs in your…

To remove logo and other graphics, append &&printable=true to any given URL.

This looks like a good starting point: http://www.solarwinds.com/documentation/en/flarehelp/netflow/content/nta-configuring-netflow-advanced-alerts-sw1800.htm_ You may get more help with this if you posted in the NTA forum.

Will IP addresses change? If so, will monitored devices allow queries from new IPs? Will firewalls along the way allow new IP addresses? Has any duct tape been put in place that can come out once older servers aren't needed? How long will you have access to the old servers? Might have to go back to them to locate stuff or…

Switch polling method to ICMP or external and then back to SNMP (you didn't mention polling by SNMP...since you didn't mention Windows/ WMI, somewhat of an assumption on my part).

RAM (DRAM) or system memory (processorRam) "Indicates the number of bytes from the memory pool that are currently in use by applications on the managed device." http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html A—"Total(b)" is the total amount of memory, in…

Perhaps this will still work? https://thwack.solarwinds.com/docs/DOC-158046

It's most of your question. I didn't make it, just gave you the link from SolarWinds demo site since I knew it was possible and I was getting you a quick answer without disengaging too much from what I am doing. I think this gets you off to a pretty good start. Don't be afraid to experiment. Make a view and play around. Do…

Yes, you can add transmit/ receive bps. Check out this link for some of the things NPM does (believe this is all relatively default): https://oriondemo.solarwinds.com/Orion/Interfaces/InterfaceDetails.aspx?NetObject=I:1746&ismobileview=false Note the bps resource in the column on the right.

Create and alert on an HTTP monitor - SolarWinds Worldwide, LLC. Help and Support ​ Monitor external website - SolarWinds Worldwide, LLC. Help and Support If you decide to use SAM for this, you might consider posting in the SAM forum: Server & Application Monitor

Cross reference Windows scheduled tasks with the .cmd files they call (they're in C:\Program Files (x86)\Solarwinds\Orion\UnmanageUtility\Tasks\). Examine the .xml files referenced by the .cmd files (.xml files are in C:\Program Files (x86)\Solarwinds\Orion\UnmanageUtility\Jobs\). The Windows scheduled tasks will answer…

Might be a premature assessment. If Palo Alto logs were triggered by a change, then the system/ traffic/ threat/ config information sent over in the trap (or sent over via syslog perhaps) might actually have the before/ after information. If spyfly can post what the traps look like (or syslogs look like), perhaps they have…

Disregard this...the suggestion from brett.holzhauer looks better.

Do both SNMPwalk.exe and NPM fail to work with SNMP? Just NPM?

Re: "There really should be a way SolarWinds can detect that it's losing connection itself and not the nodes" From what I understand about dependencies, you may be able to do this. Couldn't you make everything dependent on the default gateways of the pollers? I actually have not set up dependencies, but your use case…

I have seen that error before. It is possible to add as ICMP or external node and then make necessary changes in the database. Regardless, you can prove what is or isn't happening with packet capture or logs. I would be remiss if I didn't urge being careful if editing the database, but it is pretty straightforward. Seems…

Think this could be done via SWQL? Anyone know how?

I've been trying to get him to do that (browse from server's IE). No luck yet.

So you have restated an answer you were given and then marked yourself correct?

HolyGuacamole has a good point about DirectLink. Seems like less duct tape. I don't use it much, but where I do, it's the right tool for the job. I realize this thread is over two months old...just noticed it.

Can that be done across two nodes?

Per this site, you can download the MIB after creating www.mysonicwall.com account: https://www.sonicwall.com/en-us/support/knowledge-base/170503581936826

Per the post, he is unsure if his scheduled unmanage job works. Hence the discussion about altering alert actions. If manual unmanage and scheduled unmanage are ruled out, then custom properties can be used to keep emails from going out (or to send them to recipients that are all changed by changing the custom property).…

I wish I had a dollar for every time I fought what appeared to be permissions issues and ultimately ended up being HIPS. When Windows permissions are set as they need to be and permission still seems to be lacking, it's right at the top of my list of probable causes. In situations like that, getting HIPS disabled…

If the SolarWinds administrator has himself authenticated via CAC/ AD integration, what is the best way for him to add new users to NPM via the web? The dialog boxes allow for his domain username and a password. I ended up using an existing AD service account and its password in lieu of my username/ CAC PIN as there is no…