ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

Another answer is to update to NTA 3.6RC3 as it includes both of these reports and will upgrade your NTA without fear of overwriting important files (if you are unsure of making backups and replacing files)

I'm exporting netflow from some of my VMware Distributed switches. It does work. We like getting netflow from inside our VMware environment. It's just as beneficial as it is with real switches. Configure the NetFlow Settings of a vSphere Distributed Switch Enable or Disable NetFlow Monitoring on a Distributed Port Group or…

I don't have the problem but I'd kinda like to know what happened?

In larger networks it definately helps to have the SQL server on a seperate server vs. having it on the same box as NPM and the webserver. It's also not recommended running the SQL server on a virtualized server although many people here have done it successfully.

This might be a way to do long term trending using splunk as a data warehouse... something I think Jfrazier​ has been asking for for a long time from SolarWinds. Perhaps this is why SolarWinds made the new Log Manager module?

We've been having problems getting kiwi syslog server to start under windows server 2012 R2. EMET won't allow the service to start. Has anyone gotten this to work under windows server 2012 R2? This is a serious problem for us. One of my partners has a case 999667 open on this now. Since most of our logging depends on the…

Have you tried looking at using net-snmp agent on solaris? It can even be run with the sun agent: http://www.net-snmp.org/docs/README.solaris.html One good thing about net-snmp is it's been around for long time and well supported.

Jimmy- Here's one of my favorite docs on using snmp with ASA/PIX: http://www.cisco.com/application/pdf/paws/13822/pixsnmp.pdf

Try this solution: http://support.solarwinds.com/kbase/ProblemDetail.cfm?ID=1264 Not sure how well the 501 does netflow but it's worth a try.

Sounds like maybe you would want to setup a trap for certain conditions in the Netbotz so it sends a trap immediately when the condition you are looking for exisits. Then as soon as it happens you'll get a trap for the issue at the NPM. I suppose it might also be able to do this with syslog.

Or maybe simpler for those linux hosts I would lower the alert warning and critical by 5% to accommodate the lack of net-snmp agent providing for the reserve. That's how I would work around it if your hosts usually show around 5% difference with the reserve in place being taken from the disk. This would work in NPM and not…

You can actually expose any resource in the Orion platform by using the url and just putting it up on a webserver or sharepoint server. I did this a lot with sharepoint. I setup an account that's read only for the queries. You can pass the password and username with the url.

Did anyone get anything to get points for the SWUG? I never saw any emails or anything about it?

Two places to maybe start looking: IP-MIB:ipNetToMediaTable OID 1.3.6.1.2.1.4.22 Here's a good reference to what's available in there: http://www.oidview.com/mibs/0/IP-MIB.html Also someone created a custom poller for cisco arp table here:

I got an email this morning (Monday): Reminder: SolarWinds User Group in Phoenix is tomorrow! It confused me because SWUG is Wed. and Thurs. not tomorrow!

One thing I'd like to see more of is security related stuff... SolarWinds tools satisfy many of the 800-53 and 800-171 RMF requirements and seeing how this works would be really good for pretty much everyone. I know everyone isn't a CISSP but we're all stuck with dealing with security these days so it really applies!!!…

Wooohooo here we go PHX SWUG 3.0!!! Phoenix SWUG Do or do not. There is no try. Phoenix SWUG come you must! Bill

I thought they were sorted decending based on RCV+XMIT Utilization but as you can see your second one doesn't fit... maybe a combo of RCV+XMIT and also node name sorted decending???? 140 108 122 121 115 113 102 100 you find some good ones byron... made me look at things I didn't even notice :}

One thought of something to try... try un-managing one node then re-managing it and see if that makes a difference in it's polling? Might be worth a try.

I'm actually considering scrapping my EOC and two primary pollers and just stacking pollers on one IP... I still haven't decided yet. I have one primary poller in AZ with two APE and additional webserver, and another primary in VA with and extra APE. EOC is finally improving but now with stacked pollers I'm considering…

Export netflow from the WAN routers edge interface or tunnel interface to Orion NTA and let it collect for while. Then you'll be able to not only see how much traffic but also what type of traffic you have flowing. Lot of devices can export if it's Cisco it'll be really easy.

Also SAM can do a lot with push or pull agents behind the f/w for your servers but you're right about the network devices. I totally feel your pain of small DMZ networks that could never justify an APE.

I had a similar problem except I couldn't get kiwi syslog server running on w2k12R2 server that was also a DC... we're going to move it to a windows 7 host instead as a solution. I couldn't get the service to start and stay running at all.

Everybody vote up ability to monitor with snmp or wmi only and have ability of nodes to be green without icmp as an option. This enables monitoring nodes behind firewalls that don't allow icmp and being able to report on them as up/up and green in NPM! http://thwack.solarwinds.com/ideas/2287

I think NCM includes a scheduled Orion NPM node import job. Under Schedule, New Job, Import nodes from Orion database. In the job you can filter nodes imported by Vendor, Machine Type, etc. This is one solution as most people usually start with all their nodes in NPM and then use the other apps as a subset of their NPM…

You could have those entries in hosts file you maintain checked before regular DNS lookup. nsookup can resolve using a hostsfile for reverse lookups. Host name resolution generally uses the following sequence: The client checks to see if the name queried is its own. The client then searches a local Hosts file, a list of IP…

WAN tunnel links is what I use it for. When remote sites say they have something slow or it doesn't work... NTA is one of the first places we look.

I wonder if MS may have changed some permissions which broke some functionality. You could try running the OrionPermissionChecker.exe and see if it returns any permissions that aren't set correctly. I've had problems with Group Policy breaking some things like this in my environment. Convert to pdf seems to often be one…

I don't think new guides are created for example every service pack etc. Probably the best bet is to use the link to latest doc from: http://www.solarwinds.com/support/documentation.aspx and hopefully try and keep your versions updated... I hold off on some updates to see what ends up happening before I make the jump with…

It sometimes takes a little while to change status ie. a few polls. You can usually force this by manually polling a bunch of times in succession. If it still says unknown after a little time polling it's definitely something else. I've had some previous posts about it: Simple Application Monitor status stays grey??? Good…