ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

I like the updated guide. It seems that once you start talking dependencies some kind of event correlation starts potentially becoming involved. From what I've seen over the years from HP, SMARTS, and now cisco too with products like ANA some very complex logic can be involved. You can look at how cisco is doing it here:…

I guess the only thing you could do then is alert on the BGP peer state with one of the UDP's like

If the hostname or IP is going to change make sure you get the script from the support team that updates said new hostname/IP in the database (I'm not sure if the new installer can handle this). Otherwise your update should be fairly easy using the new all in one updater. It's really much worse if you are on 11.x.x NPM.

I think the single big offline installer for all the modules is a big step in the right direction... this didn't really even begin to flesh out until 12.2 NPM so it's a recent development. At least with the single installer all the required ordering of upgrade is on the installer and SW instead of us having to figure it…

You can't beat the Sysinternals tools... it's no wonder Microsoft made u know who (Mark Russinovich) a "fellow" at Microsoft. Truth be told Microsoft employees were using Mark's tools for years internally over their own before Systernals was assimilated. :}

Not that it helps but these threads are what have kept me from upgrading my NPM 9.5 SP2 to any later Service Packs for fear that this polling engine problem might start up. Luckily I have had no issues running NTA 3.6RC3 with my NPM 9.5 on SP2.

@WHAT Here's what SQL code reportwriter generated: SELECT Events.EventTime AS Event_Time, Events.Message AS Message, Events.EventType AS Event_Type, Events_EventTypes.Name AS Event_Type_Name FROM (Events INNER JOIN EventTypes Events_EventTypes ON (Events.EventType = Events_EventTypes.EventType)) WHERE ( EventTime BETWEEN…

No problem WHAT. The only other thing I can think of if you are also trying to pull this from the Events table is that I'm still on NPM SP2. I have held off on updating for a couple reasons. For one I'm a believer in if it's not broken... don't fix it and I haven't found a need to update to SP5 on NPM. On my NTA I've had…

Are they unreachable or can they still be reached somehow? Sometimes having snmp working but icmp blocked can cause something that looks like that.

Of all my Cisco devices... it's ASA's that often drop packets... often it will be large number of receive discards on the interface on the ASA. I've seen this across many Cisco ASA interfaces on multiple ASA firewalls in my environment. It seems the busier the ASA the worse this can be. I've always kinda wondered what this…

Thanks Tim... I didn't mean to put you on the spot or anything but I follow you on git and and knew you would have or could find the low down!

That's pretty cool thanks for upping to the content exchange... looks good.

I'm already running NTA3.6RC3 which from what I've been told is the same as the actual release.... so according to your post I should only have to run my 9.5.1_SL500 .exe on my NPM SP2 and everything should be taken care of for me. Since NTA is NTA3.6RC3 and same as release then I shouldn't have to do ne thing else…

One solution in this case is to monitor the actual WAN endpoint interfaces instead of the loopbacks... then you will always know which or if both are up or down. In normal circumstances you want to monitor network devices by loopback... but that is NOT always the case.

Such a huge Relief to read you have 500 alerts... any of these big changes scares me that I'll come in one day and have a bunch of emails saying a bunch of stuff was down and no one got pages or emails all night lol!

Thank's that's a relief to hear.

I usually wait until the next new version is about to be released. I let two systems get too far behind. They were 11.5.3 or something and had to be brought all the way up to 12.2. That was rough... you can see earlier in this thread how many steps it took.

The two window thing doesn't sound good.

I'm getting the follow from tooltip and Avdvanced Alert Engine variable link: Sorry, there was a problem with your last request! Either the site is offline or an unhandled error occurred. We apologize and have logged the error. Please try your request again or if you know who your site administrator is let them know too.

What is it exactly that you are trying to monitor that needs a UnDP?

Exactly if you don't do this NPM won't know what it is unless you set it!

How about the alerts between 11.0.1 and where you're at now byron? I just upgraded to SAM 6.1.1, QoE 1.0, NCM 7.3.2, NPM 11.0.1, NTA 4.1.0 and have been most concerned about the report issues with moving the alerting to the web. What is the groups problem you have been referring to?

Hmmmm interesting I tried copying the query into SQL Server Management Studio and running the query there. It works fine an returns almost immediately using use OrionNetPerfMon. Seems like if it works in there it would work in report writer also. I wonder if it has something to do with the version I'm using? Seems like it…

How long should it take to run? I did the same thing I think and changed use netperfmon to Orionnetperfmon and then ran the query from report writer... it goes to Querying database... and just sits there with the hourglass. I'll let it run for while... maybe someone else can test also. Is it supposed to run quickly or take…

No problem... I know how it is with security scans finding things!

You could use a netflow forwarder duplicator... there are a few of them: How-to configure a free NetFlow forwarder or NetFlow duplicator - Brad Reese

Thanks Brandon... it's good to know things like this. This makes updating to newer version that much more important if you can't extend devices support by just updating the MIB file.

Thanks again janene16​ you really helped me avoid some serious problems and get my alerting back on track!

I don't have this issue and am still running 9.5SP2 even with NTA3.6 with it and tooltip hover overs on the maps are working for me.

Ugh I mean honestly who still uses http on much anymore???