mcbridea

It looks like you already have NetFlow configured. I know the configurator has some problems with certain platforms. It will configure most Cisco routers, but not all.

Hi Peter, The amount of NetFlow data depends on how many user flows per second per interface you will have. Keeping in mind that all interfaces are not equal WRT user flows, data rate to NTA and SQL is an unknowable quantity at this point. With 50 sub IFs on 70 sites you're looking at 3500 exporters. A couple of things I…

Yes you can

From a packet load POV it will add 1000 packets every 5 minutes.

Unknown is a state determined by Orion so you won't find it in SNMP, or at least not the same unknown as we use. We mark them as unknown when we cannot determine the status of the parent object.

Answers below: 1 - Port does not matter as long as NTA is set to accept flows on that port. The default port for NTA is 2055. You can add 9996 in the NetFlow Settings page using a comma between port numbers (2055, 9996). 2. If the NTA server is on the inside use inside, on the outside use outside. Andy

You are probably over-sampling the statistics data. By increasing the polling ~10X you deminish the scalability of the Orion server ~10X. The adjusted element count (for polling frequency) is ~15K and pollers don't do well with more than ~9K. I suggest carefully examining the need to poll so frequently. If there are…

My advice is to never use the suppression tab. The suppression and trigger logic are evaluated as two completely seperate queries. That means if you have a true condition in the suppression it makes no difference what is in the trigger because the true suppression always suppress the trigger.

Are both interfaces on the router managed in NPM? They both don't need to be in NTA but they do need to be in Orion

Hi yann, That 6 core processor will do the trick. We will examine the recomendations and update where necessary. Andy

I suggest the following: * Check the device in NPM and see if it looks OK there. * CHeck the device configuration to make sure the netflow config is stil in place. * If all this looks good - do a packet capture on the Orion NTA server to see if Netflow (cflow) packets are making to the NTA server.

If the missing IP SLA operation ws placed by IP SLA Manager we will replace it automatically. If it was manually placed we will give you an error message and you should manually replace it.

I don't think you have the ability to define new varbinds for trigger actions. Can someone else chime in who has tried a similar solution?

Does this help? http://support.solarwinds.com/kbase/ProblemDetail.cfm?ID=1153

I believe you can do this by creating groups in the Settings page, then create reports for the groups. My text edits didn't make it the first time. I created a custom report for the subnets in the Austin office and posted it to the web.

Hi Jedski., That one will have to be resolved by a ticket. Have you heard back on the one you have open? If not, please call technical support. Andy

Hi abhi1024, The remote pollers need to have an active connection to the main Orion server to store data so that won't help in the case where one site becomes disconnected from the main Orion/SQL. What would work is to place a full Orion/SQL at each location and use Enterprise Operation Center (EOC) at the main site.…

We use WMI to monitor BES. You need an account on the server but not on the BES application.

Yao can accomplish this by adding NetFlow resources to NPM node views

We poll the iftables for rolling values of inoctetes and outoctets, not Cisco calculated ones.

Hi Ronald, Should there be a screen shot on this post? Andy

NTA is not really a desktop application. Are you using it this way for testing? Make sure you are managing the exporting interface from the device.

Hmmm. Could be a counter issue. Are all 3 using 64 bit counters?

Try the IP SLA Manager module. Does this right out of the box.

I have seen where the SNMP for call manager was not enabled. I'd check that

I'm thinking the < and > qualifiers might be giving you some problems. I would change these to a second level ANY embedded condition group and remove the < and >. * Trigger Alert when all apply * Trigger when ANY of the following apply * Numeric Status = 3 * Numeric Status = 4 * Node Status = Up * Trigger Alert when any…

Number of times violating a threshold is not a trigger condition today, but I'll mark this for a PM to look at.

Hi tnoski, Contact support and they will get you to 3.1. Andy

Dual NIC is fine. The requirement is that Orion has 1 dedicated NIC (not sharing the load w/ other services. Polling a device withteamed NICs is problematic. Thanks to Matt Harvey in support for the assist!

Hello, You can create those resources in Report Writer and publish the reports to any view you want. To make sure this is clear, in SolarWinds terminology resources are the individual displays, such CPU Load or Triggered Alerts, views are the web pages that contain multiple rsources.