kweise · Director, Solutions Engineering · ✭✭✭✭✭

Comments

  • Charpham, You should be able to create that report just using report writer. I don't think you'll need a custom SQL report. Create a new "Current Status of Nodes, Interfaces, etc." report. On the Select Fields tab, add the Node Name field from the Node Details menu under Network Nodes. Add another Field for Status from the…
  • conynea, Depending on what your data retention settings are, it is possible to see different numbers once you move to a 3 month time period. For example, your detailed statistics retention might be set to 30 days. After 30 days, those numbers are summarized into hourly statistics. If your hourly statistics retention time…
  • For the Orion web page, if site in IIS was tied specifically to the old IP address (instead of All Unassigned), that would probably cause you problems getting to the web console. For your statistics collection, it could be an ACL issue. We have ACLs on our devices that define what IPs or subnets can poll snmp data. If the…
  • Erik, I vaguely remember reading something that stated the amount of NetFlow traffic you'll receive is about 1% of the size of the data flow you're monitoring. For example, if you're seeing 100 Kb worth of traffic on an interface, you'll receive about 1Kb worth of traffic from NetFlow. I've got NetFlow configured on…
    in Netflow Comment by kweise December 2008
  • I'm not sure how helpful this is, but I can tell you that an event of 1 signifies a node has stopped responding. An event type of 5 indicates a node is responding again. If you don't have any type 1 events in the events table, you won't get anything in the report. 
  • John, If you aren't seeing all of the interfaces you want to see, you can click the List Resources button either from the nodes detail page or in the Manage Nodes list. That should pull up all of the available interfaces on the switch and allow you to check a check box to monitor whichever interface you want to add. Hope…
  • Really, you want to look at both. The top applications will tell you which applications are the top bandwidth hogs and the top conversations will tell you which endpoints are hogging the bandwidth. Knowing which applications lets you determine if the traffic is supposed to be there or not. Knowing which hosts are the top…
  • cfry, Probably the easiest way to generate a report like that would be to use custom properties to help you filter the interfaces you want included in the report. It will take a little bit of work to get the custom property assigned to the appropriate interfaces but once you have that set up, that should get you the report…
  • I don't think that version of IOS supports the ip flow ingress and egress commands. You'll have to use the "ip route-cache flow" command. That command only captures data on the inbound traffic, so to see both inbound and outbound traffic, you'll need to put the command on both the ethernet and serial interface of the…
  • jkeberle, You could kinda, sorta do this through Node Management, but it would be rather kludgey. You could group your Node Management list by machine type and do a select all and then click Edit Properties. You could change the Node status polling and Collect Statistics settings for all of the selected nodes. Like I said,…
  • I found a report in the Content Sharing Zone that generates a report similar to what you are trying to do. Here is the link: Hope this helps.
  • Jeremiah, That is coming from NTA. I can't remember for sure, but I think it was added during the last (or maybe previous) NTA service pack. You can change the maintenance options for NTA in the admin page under Settings | NTA Settings. There is a database maintenance settings section where you can configure how often the…
  • Andrew, That looks like a bug. I have reports that I filter for business hours using the same type of filtering you're doing and they work just fine. The only thing I can think to suggest you check is to see what the SQL statement that the wizard is creating looks like. In Report Writer, go to Report | Show SQL. This will…
  • Jeremy, There isn't a lot to the NetFlow config on the 2800s. ip flow-export source <interface> - the key here is you have to source NetFlow from the same interface that has the IP address of the node in Orion. For example, if the node was added to Orion using the IP address on the serial interface, you have to set the ip…
  •  I am also receiving this error. Currently, we only have routers configured for NetFlow. I've seen it on a few of the nodes detail pages as well as ethernet interface details page. I'm not sure if this is related or not, but on one node, I've also received an error on the nodes detail page under Top 5 Converstaions (Last 2…
  • Alex, It's a Windows security issue. The following procedure worked on our servers. dcomcnfgExpand tree: Component Services ->Computers ->My ComputerRight-click My ComputerPropertiesDefault Properties Tab: Checked, Checked, Connect, Identify, not checkedCOM Security Tab:1) Click Access Permission, Add "Authenticated…
  • I've seen this question before too. I think it has to do with IOS version and the version of PFC card you have in the 6500. According to Cisco, if you have a PFC3A card, you can only collect NetFlow stats on routed traffic. You need a PFC3B or PFC3BXL to get layer 2 data. You also need to be running IOS 12.2(18)SXE or…
  • Damian, I believe if you have the node on a map, you'd see an indicator when a sub-component of a system has crossed a threshold as in the picture below. Is this what you're looking for?
  • There is a thread about serial number reporting here:
  • I think what you need to do is use is a simple condition for the cpu load and then a condition group for the node names. I don't think there is a way to paste a sql query for an alert trigger (at least not in the gui.) I attached a screen shot of how the trigger would look. Hope this helps.
  • On the Time Frame tab, look at the Relative Time Frame section. You should be able to select the Relative Time Frame radio button and set the Show data over the past x to 2 and then change the drop down to weeks. You can then use the Orion Report Scheduler to schedule the report to run at whatever interval you need it. The…
  • Hi cmga, The only thing I can think of would stop the notifications completely until the reset condition were met and then you'd get the reset message. Under Trigger Actions, edit your Send E-Mail/Page action. On the Alert Escalation tab where you set up the escalation to send a notification every 30 minutes, there should…
  • I could be wrong, but I think this change would be picked up during the rediscovery cycle of the node. If you go into Node Management in the web console, search for your device, check the box next to the devices you want to rediscover, then go to the More Actions drop down list and select Rediscover from the list. By…
  • jswan, Do you have your ip flow ingress and egress statements configured on the physical serial interface or on your sub-interface. If you have sub-interfaces configured, it's been my experience that you won't see all your traffic unless you configure the ip flow statements on your sub interfaces. You also have to monitor…
  • I don't believe they are in there by default. You'll need to use a UnDP to poll for the serial numbers. I have two UnDPs that I use to gather model type and serial numbers for Cisco gear. Unfortunately, these OIDs don't always return a value. They work for most of our devices though. OID - 1.3.6.1.4.1.9.3.6.3 Name -…
  • I've done this using a custom MIB poller, but not all my devices reported their model number and serial number. I set up two pollers, one using the chassisId MIB (1.3.6.1.4.1.9.3.6.3) and one for chassisType (1.3.6.1.4.1.9.3.6.1). There is also a file in the content sharing zone that is Cisco specific () but I had better…
  •  The times I've had to troubleshoot advanced alerts, I would select the "Log the Alert to a file" along with any other trigger and reset actions. That way I could see if the alert was firing or not. If I saw an entry in the log file, but didn't receive an email, I knew the issue was email related. If the log file didn't…
  • I think I figured it out. You'll have to create a custom SQL report instead of trying to use the report wizard. To do that, just open the default report, go to the Report header in Report Writer and select Show SQL. That will add a SQL tab to the report in the Report Designer view. Go to that tab, copy the SQL query and…
  • Ballzo, I just ran into the same issue the other day when I was creating a new report based on the default Daily Node Availability report. I'm not much of a SQL writer, but I'd be willing to try the queries from the other thread too. Can you post a link to the other thead? Thanks!
  • spdd3mn, Here is a link to a guide that might help you troubleshoot gaps you're seeing in your data: http://support.solarwinds.com/kbase/ProblemDetail.cfm?ID=814 Hope this helps.