deverts ✭✭✭✭✭

To be honest rob.hock, I don't think any vendor has gotten the dependencies correct yet. Define correct: automated or user-friendly to configure, accurate, and self correcting. There are just to many variables. Layer2 dependencies, layer3 dependencies, logical application dependencies, etc., etc.... Some vendors has some…

bobmarley​, Very interested in what you are doing here! I'm in a new environment (new job) and I've only used NPM syslog before. Here, we have Splunk and the security team wants all logs going to Splunk. Instead of sending to 2 syslog servers, I'd be very interested to know more about what you are forwarding along to NPM.…

I'm not aware of VM supporting netflow or sflow. I collect data on my routers and switches, and send that data to NTA. But I'm not aware of a way to do that on VM. D

Perfect!! You sent me down a rabbit hole of goodness!!! Final query I used is below. The ManagedProtocol is still not right, but I'm starting to figure this out. SELECT n.NodeCaption as Node, n.NodeGroup as Location, n.ManagedProtocol as Polling, n.ExecProtocol as Exec, n.CommandProtocol as CLI, n.TransferProtocol as…

Oh, that's just not right! Ok, I might have maybe deserved it just a little bit...but still. 

This is another great option, and it will certainly provide you with the graph look-n-feel. I would caution you that it could get cluttered as you add more and more interfaces. Another option would be to add several Multi-graph resources to a dashboard and individually select the interfaces you want displayed. I was…

I don't believe coincidence when it comes to IT. To many moving parts and everything impacts everything somehow. Your findings sort of push me back towards the SNMP discovery process in IPAM. IPAM tries to use SNMP to pull general system info from devices it located with ICMP. I don't think you can disable the SNMP polling…

Yes to all the above. IPAM does sound like a likely candidate; and if the toolkit is installed, that could be it also depending on how someone has it configured. As a network and network security engineer myself, your IPS and/or firewall should be providing you with the IP address of the source. Did your firewall guy…

I've been working on getting my contracts migrated to this site for 3 days now...since your product launched. D

Try this: SELECT OrionNodes.Caption, OrionNodes.DetailsUrl, OrionNodes.Status, OrionNodes.ChildStatus, OrionNodes.Vendor, OrionVendors.Icon, OrionNodes.IP_Address, OrionNodes.IPAddressType, OrionNodes.MachineType, NcmConfigArchive.DownloadTime FROM NCM.NodeProperties AS NcmNodeProperties INNER JOIN Orion.Nodes AS…

I can personally confirm, this doesn't work in 12.2. But yes, once you've upgraded it should work. D

Rob, I'm sure SW staff has already considered this, but are you looking to incorporate Kiwi Syslog Server, Orion Message Center and Alert Central? Each is a component, and each has things that the others need. Combined as they are today, they are almost the perfect alerting engine...there are only a couple of open requests…

Alright, Jim...you holding out on us? Where'd you get the cool the cool graphics? You know you wanna share your gift with the rest of the class. Please and thank you. D

I think we are not getting enough information to help you correctly. In a switch stack, you have several switches connected via a cable that act like 1 switch and they share only 1 management IP. You should only have to add that management IP and Solarwinds will see all the switches in that stack as 1 switch with tons of…

Cisco 3560G on code version? As long as you are on code 12.2.45.x or newer, you should be golden. 12.2.55.SE12 is the latest recommended code. c3560-ipbasek9-mz.122-55.SE12.bin or c3560-ipservicesk9-mz.122-55.SE12.bin...unless you prefer the .tar install process. That said, if you are on the latest NCM with firmware update…

hdoan, You are correct. This issue appears to be something with NPM 10.4.0 (and .1) when installed with (or integrated with) NCM. There was a big SQL script to correct it, as JakeE indicated, but NPM 10.4.2 has the fix built in. So anyone that has this issue can just install the latest NPM and it should be corrected. I…

My response is based on the assumption that you configured CLI credentials to use the Insight for ASA functionality. If you haven't, start there. If you have... My initial thought is FXOS code, while similar in some ways, is not ASA code. The Insight for ASA functionality is based on ASA code, and the VPN visibility is…

Donald, Now we're cooking with fire! :) I had the same thoughts about my environment. I was thinking about: 1. Primary (NPM, APM, IPAM) 2. Additional Poller 3. NCM 4. NTA 5. SQL (still not convinced on VM vs physical, but I will definitely take the advice and investigate deeper. As we are making everything VM, there may be…

Ideally, I would prefer to see discards "from time to time," that means QoS is doing it's job during peak times. Otherwise, you will have BIG circuits sitting idle not being utilized effectively, costing you money. But that's a philosophy comment, and everyone has their own style. If you are seeing discards during normal…

I have to agree with rschroeder​, this sounds like a trouble ticket. You might also verify the server firewall is disabled, or configured to allow all, to test and ensure it's not blocking anything. If it's not configured, even better, but just a secondary thought to try. D

Now we're getting into the details. I'm going to need to step away, I'm not a Fortinet guru. But I know several Thwacker's in here are, perhaps they have done this already. I suspect it will require some custom SWQL used within the NCM workflow process. But others may have a much simpler way. D

njoylif, That is an awesome idea. I didn't think about using it that way.

Only 1600? To offer some more insight (at least from my perspective at a distance based on what I understand you are requesting), you are really looking for packet loss. But that means different things to different people. To some, discards can cause packet loss for certain, so that can be part of what you are looking for.…

Wow! Not exactly the solution I was hoping for, but I'll investigate my hot fix level now and make sure we are up to date. Many thanks! D

What information are you trying to display on your maps? And what is similar about them? Something on both maps is probably pulling data from a common table, and that table is not able to provide data fast enough. Quite a few things can cause this, but we need to find the common component between the 2 maps first. D

That seems easy enough. First thing is first...categorize your servers by OS. Any Windows server up to 2003 is best monitored with SNMP. Any 2008 R2 Windows server is best monitored with WMI. And any Linux/Unix server is best with SNMP. Without getting into the details of security, it's easiest to start out with SNMPv2 and…

And actually, I should add...Thanks to Matthew in tech support!

Seems like all your issues are with the APE, fortunately for me, we just bought one and it won't be installed until next week once the dust settles from this upgrade. But I absolutely appreciate the heads up! Definitely something I will watch for next week. D

You can totally do this, and I have! I was just thinking about this from an discovery process. It would almost make sense to have a list of options/checkboxes in the "list resources" processes. "box" - Meraki (a check all box) "box" - VPN Router "box" - Firewall "box" - WLC That way we can enable monitoring depending on…

mr.e​ You could be waiting a very long time for SNMP to get corrected. This issue has been around since SNMP was invented, and no one has every fixed it. I actually turn the "reboot" alert off, and just monitor the up/down state of a device. This doesn't come standard out of the box tuned for your environment however. When…