ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

I'm not sure what ur asking here? NPM and the modules that go with it aren't available to run on Red Hat Linux but you can monitor RHEL from it no problem. RWikipedia: R is the eighteenth letter of the ISO basic Latin alphabet. →

I do this today with AD groups... I have a RO one, I have a server admin one (with no access to NCM), I have a network admin one with limited NCM ability, and a network admin NCM group for select network team members that need full NCM ability. IT works great. The permissions are much more granular than they used to be in…

You could try something like this: Remotetly Monitor Orion and SQL Run these vbscripts on another server to monitor the Orion Server and SQL database: OrionMonitorUpDown.vbs This VBS script monitors the ORION server on 3 fronts PING (Is the server there) WMI (Can I connect) Service(s) Status (Are the Orion Services…

There have been improvements but we're not all the way there yet... For example I use two AD groups called NetworkAdmins and ServerAdmins. I don't give ServerAdmins access to NCM... they don't need to see and definitely not change f/w and router/switch configs. I have a RO groups as well. I also have an Admin group with…

You'll have to get more responses from some of people that use PrTG but from past posts I believe they normalize their graphs and also do scaling which as far as I know SW's does not ie. the data is more RAW and displayed exactly the way it's polled in Orion. I asume your other concern was that possibly the the polling…

Here's what I did which is working great: I added custom proprties for the fields I want on my main map. For me it's Asset Tag, POC, LabName. Then after building my map Goto Network Summary Home where the map is dispalayed in your view and hit the maps edit box. At the bottom of the dialog click on custom map tooltips.…

We became multi-tenancy not exactly by choice but by merger... I essentially have three different sets of teams (each with windows, unix/linux, vitualization, and network) all using the same instances of NPM/SAM/NTA/WPM/NCM. Each group has teams used to managing their piece of the big picture. The idea is to eventually all…

Exactly this is a built in feature of NCM. It shows a list of all the nodes that have different running and startups.

@darkshooter netflow export has been verified with 8.2.(1)12 also have you tried adding flow-export enable command?

Version information might help and also what kind of device (I assume server and OS) are you polling? I think I have seen this kind of thing with some Linux boxes... being polled through specific snmp agents.

For all that commented I did open a case with support and Sean helped me figure it was the apache web server logs that show all the accesses to the webserver. It shows IP address and path with either GET or PUT... For me it was my machine doing like 600k GET's to some weird path... it did this for like 6 or 7 days then…

Do I need to start messing with /usr/local or will LEM do something about it growing to fast... otherwise I'm afraid /usr/local may blow up? I know from my own experience that if you harden a linux box like I/we do where I work it'll halt if it can't write to a partition. I may have to open another case as it's showing…

@NasaGeek Any tip on which of the methods seems to be the best way to go when opening a ticket? http://www.solarwinds.net/support/ticket https://forms.netsuite.com/app/site/crm/externalcasepage.nlcompid=638609&formid=12&h=3d0552f20b2e9bd6580b http://www.solarwinds.net/support I assume this is the same as the first one...…

You could add an advanced property to each node called something like "timezone". Set this for each node with whatever you like as the timezone identifier (you could use something like GMT + - minus whatever). Keep your NPM on GMT. Then in your alerts use the variable ${timezone} in the message. This would enable every…

Try some of these oids and see... I'm not positive but I think HP Bladecenter can be monitored through the CPQRACK MIB: http://www.oidview.com/mibs/232/CPQRACK-MIB.html

Remotetly Monitor Orion and SQL Run these vbscripts on another server to monitor the Orion Server and SQL database: OrionMonitorUpDown.vbs This VBS script monitors the ORION server on 3 fronts PING (Is the server there) WMI (Can I connect) Service(s) Status (Are the Orion Services Running) OrionSQLInstanceUpDown.vbs This…

Thanks cobrien​ for all your hard work! Now that the customer success center all points to NPM 12 I've got my work cut out for me!

As long as you have the bandwidth setup correct on the interface and it's reflected on the interface in NPM setup you alert with an interface trigger condition like this: Edit: Sorry left out the COS part... looking for COS part now... I'm not sure if this can be done yet...

Here's a net-snmp unix How-To: http://forums.cacti.net/about15353.html Also I'd make sure you are running the latest net-snmp as there have been some fixes for AIX

There are MIBs for this: https://supportforums.cisco.com/discussion/10582256/mibs-monitor-etherchannel-and-trunks-snmp http://snmp.cloudapps.cisco.com/Support/SNMP/do/BrowseOID.do?objectInput=pagpGroupIfIndex&translate=Translate&submitValu… ObjectpagpGroupIfIndexOID1.3.6.1.4.1.9.9.98.1.1.1.1.8TypeInterfaceIndexOrZero…

I agree a support case might be best. I wonder if there's some bug with Windows 2016 server and the agent? Keep us posted how it goes because I'm actively working with LEM right now as well and interested in your findings toba​

I just started using linux agents for the first time. The push to machines worked great. I'm on latest version of NPM and SAM. What do I lose by not using net-snmp agent with SNMP as well? The linux agent seems to pick up most everything from what I can see.

You could do something like this that's sorted decending on peak transmit... this ones on receive and by sorting by peak decending and running it for a whole 30 days you'll see when the highest peaks are reached.

I would try *OSPF-4-NEIGH_ERR* on the message tab and leave all the sev/fac checked then setup the alert action email. That would catch any message type with that pattern and email on it.

I was thinking you could create an IP Address group with your subnet in it. Then you the search by Endpoint resource and search all your netflow data for flows related to your IP Address group which would be subnet 10.25.0.0. This would bring up all the flows into and out of your address group and at least give you an idea…

When you are under support the new versions will be listed in your portal and if I'm not mistaken they are listed in the order you should install them. I'm currently on Orion Platform 2013.2.0, SAM 6.0.0, NPM 10.6, NTA 3.11.0, IVIM 1.8.1 so I understand exactly what your asking. The easiest thing is to follow the…

Maybe thwack had a little hiccup :}

Are there any firewalls in between somewhere? If so this could be were ping is permitted but not snmp. Also look in the event logs for clues or on one of xp machines run wireshark and look and see if the traffic from NPM is coming in on port 161 from your NPM machine.

 You have to start by looking at where the issue starts? You said a WAN location. First rule out that the network is good from remote site to your core resources. Then... Look at it from the users perspective that is making the complaint. It could be a specific application and not network related at all. Work your way back…

How do you usually invoke this sql agent job? Can you execute if from the command line or from a vbscript? If so they you could setup an advanced alert trigger action to run your job when a node response time is greater some value. You set this up in the Advanced Alert Manager.