martinstenner ✭✭✭✭✭

kirill_a I believe that the current limitations of alerting for NTA traffic/events will not allow you to achieve this. Perhaps head over to the NetFlow Traffic Analyzer Feature Requests page to make a suggestion.

I'd suggest you start by checking the licensing type you have. Settings -> Details -> License Details This will tell you the total number of nodes supported in your Orion license versus what you have in use at present.

From NPM, make sure you are monitoring these interfaces. NPM homepage -> Manage Nodes->Find your ASA, select and click 'List Resources' Ensure you have all the interfaces selected and then click 'Submit'. NTA homepage -> Manage Sources -> Show 'All' rather than 'Exporters only (last 15 minutes)' Drill down into Cisco->then…

SolarWinds-DesktopToolset-v11.0.exe

Did you manage to get this query working? If so, would you be able to share please?

Put a space before the ${Notes}

I then noticed that you're using LEM of which I have no experience - so my original comment may be unhelpful here.

I would suggest you're better off keeping it physical. That is a considerably larger deployment than ours. I suppose you could consider upping the RAM though?

So, the SMS message is going to come from the 'Execute program : powershell.exe ... "C:\Alert_Scripts\SMS_Alert.ps1" action. This action is called for both your trigger and reset This would be a custom powershell script written by somebody in your organisation. I would suggest reviewing this powershell script if necessary.…

If you look at Active Alert (View->Active Alerts) under the Alert Manager application running on your Solarwinds server, you should be able to see the Alert Name which corresponds to the object or node that triggered the alarm. The same is possible in the web console under 'Alerts'. Once you know the alert you need to…

What version of NPM do you currently have installed? Might be worth raising a support ticket if it's a recent version.

You'll want the full client installation then, not the web version. The web version appears to have far less tools at present. I believe the package you download from the customer portal has both versions in it.

Yes, I see devices that send syslog logging in the list. I would only expect to see devices in there that have had syslog communication.

I would suggest that you edit the event log monitor template you're using, and change the 'Match Definition' to custom and set 'Exclude events' for keywords or a regular expression for the text you want to avoid:

If I have understood correctly: Some circuits have the capability to burst over the allocated bandwidth, depending on the bearer they're delivered on (for example, 512Kbps circuit on a 2Mbps bearer). This could possibly come down to traffic shaping or quality of service rules laid down by your provider.

You could use the 'Unmanage Scheduling Utility' on the Solarwinds server. You might benefit from adding a custom property to your nodes, call it 'ScheduleUnmanage' with a true/false value, as an example. If the Down value is sufficient, then no need. You could then use this customer property and value to schedule an…

As choly‌ has already mentioned, you need to enable IPFIX and state the exporter/collector configuration (check the 'Serviceability menu'). I've achieved this in the past using ERS 8300/8600 switches - but as I recall, when we acquired some 56xx switches, the IPFIX port appeared to be restricted and couldn't be changed…

Check the WMI service is running and WMI is permitted in the firewall of the server you're attempting to connect to.

I've had a similar issue in the past with 'SAM Database Maintenance Is Overdue'. I opened a support case (Case #619240) and the following fix was provided. I hasten to add you might want to refer to Solarwinds Support before attempting this as your issue could be different. Are you running the latest version of SAM? **…

To do what? If you want to add a node into NPM for monitoring, you'll need to know the SNMP credentials if you plan on collecting volume information.

Network Performance Monitor would need a metric to go on. I'll assume whatever equipment you have terminating the fibre links is capable of 'reading' light levels? If so, it might be possible to make a custom poller to interpret this information and then in turn create an alert based upon certain thresholds being breached.…

I have it on good authority (read: somebody from Fortinet) that this is supported under the OS so doesn't appear device specific. The 500D or 'D' models in general are the newer more powerful appliances with higher ASIC capability that the previous 'C' models. If in any doubt, I would contact your technical sales…

The FortiOS 5.2.0 CLI reference shows you can configure for netflow export. I asked the exact same question myself recently as 500D is also in consideration. Page 585 http://docs.fortinet.com/uploaded/files/1981/fortigate-cli-52.pdf‌ "netflow Use this command to configure sending flow data to a NetFlow collector. Syntax…

Hi - our default menu bar is as follows:

Are you running the native resolution for your display?

Browser specific? What happens if you use Internet Explorer or Chrome? Update your display adapter driver?

From the NPM homepage, go to 'settings->Network Sonar Discovery' The Network Sonar Wizard will display. On the SNMP credentials page, enter all the known SNMP credentials for the devices you want to discover. You can repeat this action. Once added, 'Next' through all the other selection options as appropriate (VMWARE, add…

We have very few Cisco devices, but I use NCM quite happily with Nortel/Avaya equipment. In some cases you have to manually create (or edit existing) device templates to suit.

Are you confident that conditions for firing the alert are being met and the credentials you're using to execute against the device are correct? I believe if you're testing the alert, you may find that the script does not execute and you'll get a blank result. I have an alert to notify when a Cisco device reboots and to…

We monitor all Orion services, including netflow and TFTP server from SAM. Also have a poller in for the netflow storage service running on the flow storage server. It makes sense to me, as although SAM and NPM are both virtual machines, they're running on separate physical hosts.