ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

Thanks AE... when I first saw them I thought one of my admins that adds/removes nodes added them... So I immediately started looking for any nodes with the properties filled in. When I didn't find any I was like wth who did this???... then search audit and found SYSTEM did it. It all makes sense now.

I've also read that this breaks the installer from running correctly and also that it will reset after patches or updates??? I had hoped this was fixed but this link make me think not. Re: HTTP vs HTTPS frustration

Sounds like maybe you busted them on the saving only changed configs?

Make sure the database recovery mode is configured as simple... See this post:

Did you check the permissions on the actual SolarWinds.CloudMonitoring.Strings.dll file?

I think I can say for most it's a best practice to monitor devices from a loopback interface that's always up and doesn't change.

For windows to send event logs to syslog you can use this free util from Purdue: http://code.google.com/p/eventlog-to-syslog/ It supports vista, windows 7, and server 2008 and can be compiled for 32 or 64 bit environs you can also use SolarWinds log forwarder which they have improved in the latest version. For cisco…

I just love Corgi... they're such great dogs!

That was my point! Patching to .NET 4.6.1 breaks NPM! I just asked because a bunch of people have been recently burned by this.

I know this is an older thread but thanks @Karlo.ZatyIny for some insight into the worker threads and identifying what they are!

Also here's some GP info: QoS Group Policy Settings and Registry Entries The following Group Policy settings and registry entries are associated with QoS. Each registry setting has a corresponding Group Policy setting. The registry settings appear at four locations in the registry; most of the settings are repeated in…

This doesn't need to be done via the application. Since NPM in on windows server there's a couple step involved depending on what kind of QOS you want to use. Here's a good article on how to enable and use it... probably easier than me trying to explain it :} technet.microsoft.com/.../2007.02.cableguy.aspx

Yes just add a filter to the report in report writer something like this:

One good thing about the newer version of Net-SNMP: As of Net-SNMP 5.4, the Net-SNMP agent is able to load the Windows SNMP service extension DLLs by using the Net-SNMP winExtDLL extension

Temp files are temp files.... For me Solarwinds creates a directory C:\WINDOWS\Temp\SolarWinds and in there sometimes creates temp files in a NetworkAtlas or JobEngine folder.... deleting files from temp especially if they still aren't locked or recent shouldn't cause any problems at all. What report's seemed to disapear?…

You said it Toilet :} I still haven't dove off the 9.5.1 boards yet. :}

We haven't fully integrated yet but my comment about showing the data correctly refers to the research that was done showing how NPM wasn't showing CPU correctly versus vman and vcops... This was proven and is not in the process of being fixed. I believe it may have been byron that was instrumental in pointing this out as…

I said if there were two different agents. From my experience you usually monitor all of a devices interfaces through one IP address (on routers/switches best practice many times is through a loopback address because the interface is always up as long as the device is reachable). From this one IP the agent's MIB is polled…

Oh yeah quick correction... For getting data with the UnDP, the MIB doesn't actually have to be in the Orion MIB database. You only need to provide the OID in the proper field and Orion will be able to get the data.

There are some MIB editors in the market but if yours will be fairly small and you really want to delve into SMI you might want to start with rfc's: SNMPv1 Data Definition * RFC 1155 - Structure of Management Information * RFC 1215 - Convention for defining Traps for use in SNMP SNMPv2 and SNMPv3 Data Definition * RFC 2578…

You might try looking in here and search for temp: https://netdot.uoregon.edu/trac/browser/trunk/mibs/nortel/s5reg.mib?rev=1601

This is good 2 know G... thanks for the info :}

I can relate to dealing with this as well... it's a LOT of work. I'm a TA as well so that's more stuff to deal with and more tokens and PIN's and all that goes with it.

No kidding I can relate to that but we all have unclassified networks too... we have a report phishing button in outlook and also send users fake phishing emails to test and train them throughout the year.

I would open a ticket and also request feature enhancement. I've also noticed some events are often missing the userid or machine name. I too am using SEP14 now. Before I upgraded from SEP12 to SEP14 I was getting millions of SecurityCenter Errors Service Warning Provider SID SecurityCenter 17. I looked it up and MS said…

That's the exact same thing I told you to do but I even made the report the way you wanted it TX separate from RX.

I uploaded a transmit and receive report example for you Grimey: Interface Utililzation Receive Top10.OrionReport Interface Utililzation Transmit Top10.OrionReport These may get you a start you can customize it further and put these anywhere you want in NPM.

@Nicki Can't you just view the report then right click on it and select export to excel? That's what I do.

True... no matter what you're going to have to update some things... it's not an easy fix.

Welcome to the community bredahealy​! The support team can use all the help they can get. I'm just glad it was SolarWinds support he was routed to... by the way it was explained I was a little concerned it was some other company and NOT SolarWinds.