jeffreyc ✭✭✭✭✭

Michal, we have recently purchased a SIEM tool. We currently send Syslog messages to the SIEM from a variety of systems. I was looking for a way that I could have all of the events that show up in the NetPerMon Event log forwarded using the syslog protocol to the SIEM tool. I know I could modify each individual alert in…

Thanks all set. Jeff

I did get this working by doing the above and setting the alert like this Alert on Group Trigger Condition Group Name is equal to CertainGroup Group Member Group Member Status is equal to Down How could I do this type of alert for cpu and disk utilization while still using members of a certian group.

I would like to be able to alert when the status is anything other than Normal. This is the status that is displayed in current hardware health for the node. I have set the alert trigger to "hardware sensor status is not equal to Normal". This doesn't seem to be working. I am getting the alert triggered constantly. I don't…

Sweet thanks Jeff

The advanced alerts page on the web console should work for me. I am trying to change the number of entries displayed on that page and I can not find anywere that I can change that. I would like to have it display all my entries on 1 page . I think you would normaly do that under manage views but I dont see that page as an…

Wan Killer mostly

Yup your are correct. I changed the lines to 0. I also put a pattern in for lines I want to ignore. Works great now. My only qustion now is how do I get it to write the file to the config archive everytime. When I do a change multiple times on the same date it just overights the config in the config archive.

Changed to 5 minutes, polling rate jumped all the way to 22%. I think I'm good. Thanks Jeff

Well mine's at 21% so I should be good. Thanks Jeff

Another problem with this is if I set a time of day period on the alert it looks like it realerts for every MAC. We thought it would be nice to set this alert for after hours time period to see if any suspicious MACs were showing up on the network. I was hoping that once all the MACs were learned things would settle down…

Yup and for virtual desktops I don't want to make them all nodes. I can get to the Virtual desktops but I have to search through every host until I find the one I'm looking for. A VM search seems like basic functionality that was missed.

There is no way to search for a VM on the Virtualization Summary page or anywhere else. The appliance could definitely do that.

Using VMAN 8.1 in Orion. VMAN tools such as power off VM are only available to the "admin" user. When logged in as AD user that I have assigned admin rights to I don't see those tools. Is that as intended?

So if I am alerting on a volume should I use ${Node.customer.email} I think this works

Jiri, I did get this to work. Thanks Jeff

I would like to see this feature also.

OK so I rebooted the virtual appliances after reading others having the same issue. All the alerts started showing up . To many alerts. I tried removing all alert routing and even deleted the connection to Orion. I can not stop alert central from sending emails to me . Thousands of emails. I had to shut the appliance down…

Thanks Jeff

It is unbelievable to me that you can not create an alert for node down only for members of a certain group. This is very disappointing. This seems like a very basic function that many companies would want. Server group, datacom group, desktop support etc....

Having a problem getting the screen shot pasted but basically this message is what shows up when in the Application Discovery Scan Status after it completed or in this case fails. Windows Server 2003-2008 Services and Counters Status: unassigned Failure reason: InsufficientMatch

I have my netflow database located on a seperate server but I can not remember the path to the actuall netflow data. Where can I find what that path is?

When you add the Node to UDT it lets you select which ports to monitor. Just add the node but dont select any ports. By adding your layer three switches/routers UDT will be able to associate MAC addesses with IPs. I do this exact thing. I do not monitor core ports but have the core switches in UDT. I monitor closet…

After upgrading to version 9.6.2 my problem seems to be resolved

Cisco announces the end - of -sale and end - of life dates for the Cisco Nexus 1010 Virtual Services Appliance. The last day to order the affected product(s) is December 14, 2012. Customers with active service... www.cisco.com/en/US/customer/prod/collateral/switches/ps9441/ps9902/eol_C51-716591.html 14 Sep 2012

Its hard to believe that this functionality doesnt exist in SW. Having links change color on a map according to utilization is about 15 years old in other products. I think mapping is the only disapointment I have with this product.

Figured this out. Works as expected

I'm not sure this is practical seems like everytime a MAC table chnages in an upstream switch I get a new alert. The only way this will work is if I can alert only on direct connection not indirect.