mcbridea

You should be able to use the SQL in step 4.

We are making progress. If you could send me a packet capture of the IPflow coming into Orion it would be helpful. Andy

Is it possible that this is an asymetrical interface (more bw one way that the other)?

The issue today is all the other ports need to be managed in Orion. I'm addressing that requirement. You should be able to sflow the downlink port only and see all the traffic involved whith that switch when we make that change.

If you have Cisco routers VoIP monitor will set up the IP SLA for you.

How about FF or chrome?

We are workingon IPFIX support. I can't share any dates at this time. I have been hearing that Nortel charges a recurring support cost to enable IPFIX export. Being that you folks are Nortel shops I'm wondering if this is the case for you. Andy

Is this for NPM or NCM?

I believe FNF relies on v9 exports. We support v9 format but FNF limited to ASA's. What do you want FNF to accomplish?

If you are OK with not monitoring anything during that time I'd stop the services.

I see. I've gotten used to using advanced alerts. I'll pass this along to the Product Manager for his/her input. Andy

Deactivating an alarm just takes a few clicks. The ungagage option is for a select few devices that always trigges, not globally/

It looks like you added all ports during discovery. Most of them are management and console ports. Can you just unmanage those?

Are you using the Real-Time NetFlow tool or the Orion NTA module?

Roll up effects alerts and reports as well.

Hmmm. Maybe someone from our user community has solved this?

Ah - it is an option in advanced alerts

Do you have a DBA on site? If so, the DBA will usually know how to do this. Microsoft can assist also.

Well, actually it will only show NTA node resources at the node level.

I see support is working with you on this now.

Happy to see that fixed it for you!

Be careful with that setting. With 20 min poll cycles devices can go down for 22 min before you get notified. There is a 2 min period where the devices transition from warning to down. The default action for a node down is send Node ${NodeName} is ${Status} to the alert log. I would recommend examining how long the…

Yes you can, but it does require config changes on the router to start the flow cache and exporter.

Sounds good there. Can you do a MIB walk and see if the CCM MIB is there. If so, send me the OID list

here is the Ntop site with all the specifications. http://www.ntop.org/nProbe.html

You can't edit individual resources to move/delete/add columns. You can create similar resources by creating them as reports, and posting them to the web console.

Hi Byron, I hear people talk about five nines but normally when you demonstrate what downtime this allow (26 seconds/month) the person backs off. I know that some carriers offer five nines but they weasel it by making it a global average, not to hard to meet when you have tens of thousands of devices. The comparison I make…

It does not explain why I am getting the message 16 times....It is almost like it is sending an alert for every component listed under IIS. I just want it to send one message...not 16 Yes - your alert trigger is set to trigger on the IIS components being not up. This will apply to all the components. You could suppress by…

Hello, Were looking for a great post from last year that explained a bunch of options for modifying datatime. We don't write custom queries but I'll try to find that post and it will probably get you going in the right direction.

Use the Top talkers alert shown below.