d09h · Senior Principal Systems Engineer · ✭✭✭✭✭

Comments

  • For information on using custom properties with alerts, refer to https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Core-Use-a-Custom-Property-in-Alerts-sw1100.htm
  • The behavior you are describing is normal for the 'rollup' status of groups. Using a custom property on relevant interfaces and making that a part of your logic would be beneficial. Note that the custom property could include circuit identifiers or other useful information--the kind of information that your ticket could…
  • Have you tried the DirectLink account with a limitation? https://support.solarwinds.com/Success_Center/Network_Configuration_Manager_(NCM)/NCM_Documentation/NCM_Administrator_Guide/180_Configure_automatic_login/030_Using_the_DirectLink_account
  • Have you tried a filter: Use node filters - SolarWinds Worldwide, LLC. Help and Support​ In the above documentation, there is an example of filtering by custom property (City being the example property).
  • (edit-- this is no longer a syslog solution, and requires a per-node custom property of type True/False or Yes/No...in the case of the below, that custom property is named PortSecurityApplied) As a temporary workaround, I have a report shown on a web page that I email in response to an alert on my Universal Device Poller.…
  • I'm fighting this as well. I get syslog messages approximately every two minutes hitting NPM syslog. This for one switch with one port security violation. I've also polled cpsIfPortSecurityStatus (OID 1.3.6.1.4.1.9.9.315.1.2.1.1.2). I have not gotten per-instance (per port security violation) alerting working here. I do…
  • You could configure one or more servers to send traps on CPU utilization to help validate processor utilization.
  • Is your alert based on node status?
  • http://www.solarwinds.com/topics/storage-capacity-planning Warning: $eparately licen$ed module
  • https://support.solarwinds.com/@api/deki/files/34902/NPM_Installation_Guide.pdf p. 20 indicates 'The Orion server and the SolarWinds Orion database must use separate servers.' Check out the guides here https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/NPM_Documentation, especially the 'Getting…
  • Does SNMP work on all of them? Can you list resources on all of them? If SNMP connectivity was not successful, you may have only had ICMP discovery of the 'unknown' switches.
  • If you also save your configs to your server filesystem, you can get Windows to search the relevant folders as well. This should catch configs that are older than your database retention setting, since this is a search of the filesystem and not of the database.
  • Set up a discovery against the 300 servers. Whem importing results, only select the C drive. Reference: http://www.solarwinds.com/documentation/en/flarehelp/npm/content/npm-orion-network-sonar-results-wizard-sw66.htm .
  • Are you aware of the 'execute script' option? Just throw in a few lines: conf t, ip route ... This is the 'intended' way to do this via NCM. It's the reason the 'execute script' resource exists.
  • For nodes in each group, have you set an email address as described here? https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Use_Custom_properties_when_sending_email_alerts
  • Do you have QoS configured on one or more interfaces of the node? If so, does the QoS policy show drops? Also, you can validate the presence of errors independent of SolarWinds using SNMPwalk: High number of reported discards, errors and interface statistics on monitored devices - SolarWinds Worldwide, LLC. Help…
  • I've done as bobmarley described in the past. I had two installs that were almost identical...each running NPM and SAM (and quite a few other modules). Using the SAM template was helpful for each to monitor the other. You didn't mention, so I will ask...do you have SAM module? Just the one SolarWinds installation?
  • Whatever you determine are non-essential interfaces could be added to discovery ignore lists. In the future, when you are adding nodes, you will be able to prevent addition of certain types of interfaces.
  • Don't monitor any of these interfaces: loopback/ null/ VoIP. You might also choose to monitor only uplink ports on switches. Not sure how many you have and how many your license supports. But if you monitor no other ports, monitor uplinks. If you monitor a device behind a switch port, you might decide not to monitor the…
  • Obviously the &dataformat=xls or &dataformat=csv could indicate a different format, although it should be one your browser is configured to work with (IE will inherit somewhat, others may need explicit configuration per format). And this export functionality is not necessarily just useful for SolarWinds.
  • It seems like you could just poll both values and do a transform. Then just alert on the transform. I handled a similar use case like this. I polled total swap space and I polled swap space available...and then subtracted the second from the first with a transform, alerting when the transform was over 100 MB. Mechanically…
  • Perhaps set interfaces to 'unpluggable'? Unpluggable Port Mode
  • dgsmith80 for your question in Slack channel, try this SWQL in an alert.
  • I think I know a way that won't scale well. Any chance you are concerned with a very small number of nodes?
  • Do they show up when the device is SNMPwalked?
  • Have you been doing something similar to step 8 below? https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Volume_alert_setup_ Volume alert setupOverview This article provides steps on how to create a Volume alert. Environment NPM 11.5.0 and later Steps * Login to your Web Console with full…
  • Use Server and Application Monitor module. Specifically the component monitor 'SSL Certificate Expiration Date monitor': http://www.solarwinds.com/topics/ssl-certificate-monitor http://www.solarwinds.com/documentation/en/flarehelp/sam/content/sam-ssl-certificate-expiration-date-monitor-sw3311.htm Also, AppInsight for IIS:…
  • Server and Application Monitor module can be used for this. Do you have this module licensed? Process monitor Create monitors for processes, services, and performance counters - SolarWinds Worldwide, LLC. Help and Support
  • You can block as shown in the link I gave and also as ekis​ has shown. If things ever get undone in one place, the other should still prevent. Might not hurt to pick it off in a network firewall too.
  • Thought I had read about this somewhere before. Disabling NetBIOS over TCP/IP may help: https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Turn_off_WINS_Netbios_resolution https://thwack.solarwinds.com/message/167178#167178