d09h · Senior Principal Systems Engineer · ✭✭✭✭✭

Any chance the Palo Alto can send an SNMP trap on App Version Changes and URL Filter Version? If so, you could alert on the trap. https://live.paloaltonetworks.com/t5/tkb/articleprintpage/tkb-id/Management-TKB/article-id/1596​ TRAPSPAN-OS supports the well-known traps, as defined in RFC-1907. Additional traps are sent as…

Creating an alert for the 80% criteria with a 'condition must exist for ...' option might be an easy way to handle this, since that functionality is built into the alerting. Your report could be done from the perspective of alerting. I would think any other approach would involve lots of SQL / SWQL pretty fast. Unless I'm…

Believe config wizard would do this.

Have you configured groups and dependencies? https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Define_and_use_dependencies_in_Orion_NPM https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2015/03/12/cutting-down-on-alerting-noise…

I've read that others are doing email addresses as custom properties. Something I probably need to do myself soon but have not yet.

Cast your vote: https://thwack.solarwinds.com/ideas/1145#start=75

https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Create_a_report_for_interface_percent_utilization

http://www.solarwinds.com/documentation/en/flarehelp/sam/content/core-emailing-a-web-page-sw1049.htm?Highlight=Alert%20action%20email%20a%20web%20page http://www.solarwinds.com/documentation/en/flarehelp/sam/content/core-emailing-a-web-page-sw1049.htm?Highlight=Alert%20action%20email%20a%20web%20page * RELEASE NOTES *…

Do you have a web page or report/ query already showing the last 10 data points collected?

For alerts you can use a custom property that you set to be the threshold. Then alert if over that custom property. Modify that property as often as you need without touching your alert again. If you're not referring to alerts you may want to describe your use case.

You could use an IPSLA job and monitor via SolarWinds (custom MIB poll or use VNQM module). You could use Engineer's Toolset proxy ping. http://www.solarwinds.com/engineers-toolset/proxy-ping

Is it possible you can get everything you need using the web resource Universal Device Poller Top XX (where XX is the number of devices you've assigned the poller)? Customize page --> Add resource --> Universal Device Poller Top XX Sometimes after I've gone the SQL route (and asked for help) I end up finding a more…

Try an SNMPwalk to determine if anything comes back. What do you mean when you say server is responding? Can you attach part of an SNMPwalk?

oskare, One option for you if you have SAM and don't mind reinventing the Universal Device Poller as a SAM component monitor...you would only get red/yellow/green icons to leverage down/warning/ up thresholds though: Re: showing Universal Device Poller temperature with an down / warning icon or even red/ yellow color Re:…

NPM hardware requirements

No problem at all. I've had nodes polled from two different SolarWinds environments as well as NetQoS application, Cacti application, eHealth application, NetCool application, and probably a few others I've left out. I just had to ensure that each system was allowed through ACLs at various boundaries.

Do you have access to any proxy servers or any other network gear in the path? Can you install Wireshark on your server? Or temporarily SPAN/ RSPAN a port?

https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Use_DirectLink_account_to_share_views_with_non-Orion_Web_Console_users I would use DirectLink account.

Are your pollers in a group?

Possibly SNMP write credential issue per this documentation? https://support.solarwinds.com/SuccessCenter/s/article/Cannot-download-Running-config-No-response-using-the-specified-credentials-TFTP-Host-A-B-C-D

You would need persistent routes. Apologies if I'm stating the obvious. You mentioned 'sending traffic to our SolarWinds server', which sounds like SNMP traps. Wouldn't you also be doing polling? Queries originating from one or both NICs with responses being sent back?

Helpful? Configure SSH button on Orion NPM Node Details view to use SSH version 2 instead of SSH version 1 - SolarWinds Worldwide…

For the browser you use, if you type SSH://a.b.c.d where a.b.c.d is IP of a node in SolarWinds that you want to SSH to, what happens? Also, look at your control panel--> Programs --> Default Programs Do you have anything for ssh:// If not, that's where you can add it. Disclaimer...so many changes from one version of…

Believe you want the AuditEvents table in the database. I recall digging exactly that information out of that location, usually due to someone doing a poor job of adding the node. If memory serves me correctly, AD-authenticated users were identified as expected (ACME/roadrunner), but for any application accounts that added…

I think you would find it easier to define an alert and show the alert status instead. Use duration in the alert trigger - SolarWinds Worldwide, LLC. Help and Support I am sure there is a SQL way or SWQL way too.

You could also choose a node alert and copy it. Then limit its scope to nodes with a custom property matching a certain value. Then you would know from the onset where it did and did not apply.…

Here is one way: https://webcache.googleusercontent.com/search?q=cache:-QCuOVAwrjcJ:https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Knowledgebase_Articles/All_alerts_this_object_can_trigger_resource+&cd=1&hl=en&ct=clnk&gl=us&client=firefox-b-1-d Success Center link is no longer working, so…

Can the standby/ active status change generate a trap? Which MIB are you polling? Which vendor/ model?

Believe this will work: {poller1}-{poller2} Universal Device Poller - common calculations for poller transforms​ You don't have NCM, do you?

Re: 'groups have limited functionality' Have you considered creating groups dynamically defined by custom properties? When managing, just manage the custom property assignments to affect the groups. Instead of a True/ False property, use some meaningful name. Not knowing the business use in your case, I'll try to…