ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

Also keep in mind that all the new ASA such as ASA5506-X and ASA5512-X have the integrated IDPS. I'm in the process now of trying to learn the Firesight VM to manage the IPS/IDS aspects of the new ASA's... essentially all our new ASA's are running Cisco version of sourcefire snort inside since Cisco aquired them.

I'm also curious about this what about devices connected through terminal servers (Cyclades) as well? I'm sure someone has done this somehow before. Can NCM do something like this?

Couldn't you export to a comma delimited file from the toolsets network monitor... and then import the file as a seed file into NPM's autodiscovery bulk import?

If it's not that difficult both would be nice. Then the question is would this be a global syslog setting either on or off for every forwarded syslog message? Didn't mean to suggest this as an answer.

There are multiple methods people have used:

Mine is definitely wrong. The point total on the list is also wrong. Only up by my profile in top right is my point total correct. It seems to be a bunchball problem if I had to guess.

I'm not positive but I think HP Bladecenter can be monitored through the CPQRACK MIB: http://www.oidview.com/mibs/232/CPQRACK-MIB.html

Sounds like it could be a bug then maybe since smoke_angus has the same problem.

smoked_angus is right what are the exact type of false positive you are seeing. I've used WPM myself some and have a small active license for it.

You can't really put an additional poller at remote location without anything else... it has to talk to the database and talking to the database over the WAN isn't really practical. You really need to either stack pollers in one main site and monitor everything remotely or use multiple instances.

versus doing it from the webpage you can from system manager when you list resources hit a few extra buttons: Select All Select All Volumes Select All Interfaces Select All Active Interfaces This may help some.

I believe theyare using: For servers (Windows, Unix, Linux, etc.), they use HOST-RESOURCES-MIB::hrProcessorLoad (1.3.6.1.2.1.25.3.3.1.2).

I'm not positive but this sound likes a bug in the version and if I'm not mistaken I seem to remember something like this with some 9.1 versions.

This has always been a problem... its just what happens when you use a normal sort on IP addr's just like it would sort in excel. I also agree a fix has to be for all the way to class A... NOT just for class C and work on VLSM's.

I think this happens to all of us at some point or another. We use service accounts that change on a much longer time period for anything automated in Orion. The last time this happened to me it was WPM which I had set up a series of actions in the player and it was using my credentials... of course when I change my…

Perhaps setup a group for them then alert on the group? That's how I do it.

I add resources from our solarwinds system to Sharepoint all the time! Almost anything that's displayed in Orion can be used somewhere else. I put links in sharepoint that link to utilization and availability resource graphs from NPM. If you view as resource you link to anything as long as it has credentials. I use an…

I'm not 100% it wouldn't register as packet loss on a busy circuit being CS0 TOS

Wow this is exciting!

This may be obvious... but how do you show node status in a pie chart? Usually pie charts display various parts of some whole. Do you mean if half your nodes are down then half the pie will be red and half green or ????

Still same problem... I may just try upgrading to version 1.5.0 from 1.4.1. It looks like SWJobEngineSvc2.exe service won't stay running. If I try and start this service from services it just immediately dies.

Good to see you Andy! I don't have the answer but since I'm doing a huge upgrade tomorrow I'm sure I'll run it this soon and also would like to know that answer.

Can't you use the advanced alert called Alert me when a node reboots? It's trigger condition looks like this: And emails like this:

This is a cool thread: Regards, Bill

If I'm not mistaken I have seen tdanner refer to this issue before which would explain the 3 bugs that are posted. If you want to look at it it's all up on github.

Incorrect bandwidth statements on the router?

Good luck on the job! With the low unemployment you've got a great chance!

I've also noticed if you try and use ${variable} variables/custom properties in a view name you get: View name cannot contain invalid characters.

If it helps at all the original URL for report on the menu bar is: http://orionservername:8787/Orion/AllReports.aspx I had a hard time understanding what exactly you did but it sounded like you lost the original Reports menu bar URL and now it linked to one specific report.

By including MVP's and allowing purchase of the SCP exam for one year with 60k thwack points this is a step in the right direction. Also I think I understand a little better now why the cost is there... the tests are now going to be proctored by a 3rd party network. I can understand the $200 to take the test. I still think…