elkinst · Network Engineer

Allowing the option of setting built in and custom fields to mandatory would be helpful.

Sorry for the confusion Custom Field of logged in user who modified IP node record.

@"[Deleted User]" Did you find a solution to this, I have this issue now. I was able to modify the SQL DB to give it rights, but don't trust everyone doing that when a new group has to be added.

used to have this in the past for a compliance check. I just build a new config type for this and had no issues. I've included my custom template, but highlighted the part for VTP You may have done some of these, but adding just in case. 1. build new config type yoursolarwindsURL/ui/ncm/configTypes my was VTP_test, adn I…

Recently started experiencing the same issue. Fix action?

on the bright side: https://www.zdnet.com/google-amp/article/microsoft-and-industry-partners-seize-key-domain-used-in-solarwinds-hack/ Not sure what to tell you about the install file. I was really surprised that SolarWinds doesn't show hash values for their downloads. I have several layers of protection on the servers,…

Sorry for the late response, for primary, with having to start over and reboot about 90 min. APE, was about 30 min.

@"fakeusername" Oh that's not good, that is not good at all, that is what HF2 is supposed to address. I suggest you run the MS Safety Scanner for your Orion servers: https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download Additionally if you have rights to your firewall, I'd…

@"sum_giais" Just ran your query, Nice!

The sad thing is that using the Web GUI, My Deployments, Updates & Evaluations, shows that there are no updates/hotfixes. I'm at 90% (configuring Orion) with HF2 now, then the APE to deal with.

@mestasew I posted to your other thread as well. This is a query I keep in notepad on my server and run via database manager It will help with the newly added node, but you would have to know the old NodeID to find out who deleted it. SELECT TOP 10 * FROM [dbo].[NodesData] where IP_Address = '10.10.0.###' get the node ID…

Oh, I see what you are looking for. Do you use any logging/SIEM (splunk, sumo etc)? If so look there, here is an example on one used to determine when we upgraded to 2019.4

Primary poller had an error at the end, and didn't get to the normal web optimization etc. Ran the update again, and showed it updated specific modules. Site was unreachable, completed reboot of primary and site is operational, and looks normal. moving on to APE. Update: APE updated, failed on virtualization manager when…

@"rsprim" I know, right. I couldn't believe it either. Luckily I've been through this many times, at least the upgrades and updates have gotten more automated over the years.

@"bogdan.stan" Will do.

@"mestasew" This is a query I keep in notepad on my server and run via database manager It will help with the newly added node, but you would have to know the old NodeID to find out who deleted it. SELECT TOP 10 * FROM [dbo].[NodesData] where IP_Address = '10.10.0.###' get the node ID from above and use below. SELECT TOP…

@"esundberg" HF2 is now available. It has the same name, but today's date; installing in my environment now.

@"fakeusername" HF2 is now available. The install has the same name, but todays date; I'm updating my servers now.

@"LouieBrown" I have two questions: 1st I'd like to ask are your devices in "install mode" (boot points to packages.conf) or "bundle mode" ( bundle mode the boot command just points to a .bin file in flash). I'd like to hear more about how your install mode is working out (other than the slow copy). 2nd are you actually…

@"jimmy_mccubbins" You can update multiple at a time. Option1: Got to manage nodes, search for the nodes you want to update, and click the box next to each, then select edit properties. Scroll down to the custom properties section, click the box next to the Value you want to update, then just submit at the bottom. Option…

It would be more accurate to state everyday felt like a Monday.

Do you use any logging/SIEM (splunk, sumo etc)? If so look there, here is an example on one used to determine when we upgraded to 2019.4

I had to download it again, it listed a date of 15 dec.

1. Run the installer, it will show current versions for the modules you have. 2. Look at the footer of the solarwinds webpage 3. you can look at /Orion/Admin/Details/OrionCoreDetails.aspx Not really helpful unless you know what the old values where

Changing these had no impact.

reduced the polling time and collect stats to 1/2 of what it was. Will check in a few minutes on that node.

I created a new custom poller to get the same data, but told it to label it by looking at the field. I was not able to just update the existing poller, and get it to change what it used for labels. Hope that clears things up.

soleilion​ Yes, you will need to modify the firewall. I assume that since you said the devices are managed in NCM and NPM any NAT/PAT translations are already being taking care. If so, you need to specifically allow port udp/514, between the zones on the firewall where the router sits and where the SolarWinds server sits.…

Thanks zennifer​ It being a F/W I of course set to SSH for login and request, but left as SCP, and ended up with the same issue as cstimpert Changing the transfer from SCP to SSH2 fixed it. Thanks

Thanks jhosee​. I found the fix, I could not rely on the Palo Alto Configuration messages, I had to create a System level filter,and update the alert.