d09h · Senior Principal Systems Engineer · ✭✭✭✭✭

Comments

  • You can assign an email address per node: https://support.solarwinds.com/SuccessCenter/s/article/Use-Custom-properties-when-sending-email-alerts
  • I *think* using enumeration will force you to enter one row per integer (based on how I'm using it). At the same time, I don't think you need to use enumeration. You could create a report (SWQL or even in report writer) and handle some of that substitution that way. I like the enumeration feature too. It would be mindless…
  • I created a web page to show this Report. I email that web page in response to a portsec violation. I was also doing this via syslog, but that would show last XX syslogs rather than a line per occurrence.
  • Wouldn't user account limitation as well as page limitation (page that the map is on) handle your concern? 
  • At one time the unmanage functionality created a batch file that read arguments from an XML file. That XML file was essentially a list of nodes. I'm not sure what's different now or any reasons why this couldn't still work. It's been a while since I needed to worry about unmanage functionality in bulk, but that's how it…
  • You didn't mention any errors or specific issues. Here is a generic uninstall procedure: http://www.solarwinds.com/documentation/en/flarehelp/npm/content/npm-uninstalling-npm-sw1446.htm Uninstall SolarWinds NPM This is a general uninstall procedure, and it may differ slightly from version to version. SolarWinds recommends…
  • Mike, have you already configured an SNMP Process Monitor? I believe SAM polling intervals are whatever you designate in NPM. Not the entire solution you asked for, but when I created my SNMP process monitors, it was pretty straightforward. We then used Report Writer to create a report showing NODE, APPLICATION…
  • Found some possibilities here AskF5 | Manual Chapter: Monitoring BIG-IP System Traffic with SNMP but those possibilities seem to be TCL scripts you could create to make info available via SNMP polls. From the same link, it looks like you can create traps and use OIDs from this range: .1.3.6.1.4.1.3375.2.4.0.300 through…
  • See step 5 http://www.solarwinds.com/documentation/en/flarehelp/orionplatform/content/core-creating-groups-sw2591.htm ... Automatically select group members based on shared properties by clicking Add Dynamic Query and creating conditions. Click Preview to verify that the dynamic query is selecting the intended objects.
  • Any chance your alerts are set to use an SMTP server that is different from the one configured globally? Or perhaps you have authentication parameters wrong? Do you have anything set in Admin --> Reports and Alerts --> Manage SMTP servers? If so, is it different from what is specified in an alert definition? Just a few…
  • Have you identified a MIB that gives this information? A MIBwalk might be a good to identify which MIB if vendor documentation doesn't help. Are you already successfully polling the data you would alert on?
    in Wireless Alert Comment by d09h June 2015
  • All Nodes - Tree - SolarWinds Worldwide, LLC. Help and Support ​ If you have a custom property DeviceFunction and it's populated with Core Switch or Internet Router then make your three levels 1) Device Function then 2) Vendor then 3) Status Steps * Clicking Edit allows you to edit the All Nodes - Tree Resource Title and…
  • Do you run into the same issue if you handle like this? https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Create_a_web_based_report_from_a_Universal_Device_Poller
  • Via Report writer: Ensure your report is 'Current Status of Nodes, Interfaces' and then https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Knowledgebase_Articles/Add_a_Universal_Device_Poller_to_a_report Via web interface:…
  • Since you mentioned reducing alert noise: https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Define_and_use_dependencies_in_Orion_NPM
  • You could create a group with the two as members. Set the group status rollup to worst case. Create an alert for the group. If one member of the group is down, the whole group is down so an alert configured for a down group would catch this.…
  • Have you created an alert? And disabled your scheduled report?
  • Which type of device? You mentioned Cisco...can you be more specific? These may work for you: 1.3.6.1.4.1.9.9.42.1.5.4.1.41 Destination to Source Latency one way Min 1.3.6.1.4.1.9.9.42.1.5.4.1.48 Destination to Source Latency one way Avg 1.3.6.1.4.1.9.9.42.1.5.4.1.42 Destination to Source Latency one way Max…
  • Poll this MIB: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-2mt/bsm-ntp4-mib.html NTPv4 MIB The Network Time Protocol Version 4 (NTPv4) MIB feature, which is based on RFC 5907, defines data objects that represent the current status of NTP entities. These data objects are accessed using the Simple…
  • Even personnel who do need admin privileges should use a non-privileged account whenever possible, and the privileged account whenever necessary.
  • http://cwe.mitre.org/data/definitions/266.html
  • https://attack.mitre.org/wiki/Privilege_Escalation
  • If I were you I would document your conversation with him. Save the email. Might need an "I told you so" or perhaps an "I told him so". For CYA. Also, based on information from your profile, he might find the HIPAA rules pertinent:…
  • Surely there are many. Here's one: https://www.us-cert.gov/bsi/articles/knowledge/principles/least-privilege
  • Is there something that's not working for you? Here's SolarWinds' demo site monitoring a WAN link on a Juniper device: http://oriondemo.solarwinds.com/Orion/Interfaces/InterfaceDetails.aspx?NetObject=I:1540&view=InterfaceDetails This speaks to some of the SNMP trap monitoring of RPM services:…
  • In a Report Writer report, the interface caption is the configured description on a Cisco switch. You can MIB walk to verify, but that's what led me to start including that field on reports with interfaces. Here's a report and corresponding SQL: SELECT Interfaces.Caption AS Interface_Caption FROM Interfaces
  • I gave up on maps and leveraged dynamic groups. For reasons you mentioned but also due to the rollup status flexibility via groups that seemed lacking in maps. This was an easy decision to make since devices had DNS entries and hostnames that looked like: region-function-001. Since I maintained five installations and…
  • I think I handled this once by creating a custom property to which I mirrored the nodes poller number. Between custom property directly or a indirectly by a group that is populated dynamically by custom property, one of these may work for you. Unless these feel like too much of a workaround. (Sometimes today's workaround…
  • The Node Details "last boot" information can help you in sorting out what lost power and what did not. Regarding planned maintenance, you could make use of the Unmanage Scheduler so that there is no outage to account for. Backups at my datacenter were killing availability figures until I started unmanaging hundreds and…
  • Is AD authentication a requirement? One solution I used for this scenario was a separate domain account .adm for any user needing a limitation different from what AD group would give. Sysadmin team had to create individual accounts for these folks and I had to define them as admin/ power users in SolarWinds. My use case…