mdriskell ✭✭✭✭✭

Why would I use APM for monitoring a router/switch/firewall network. I am referring solely to network devices. I am looking for the ability to do this from the front end.

 Thanks for everyone's thoughts. After opening a ticket with SW it appears that my issue has been resolved. I know this thread has been dead but there is nothing I hate worse than trying to find an answer and reading thread after thread and never seeing a resolution.

No suppress actions configured. I have also noticed that sometimes I only get the Reset actions on alerts that should have been triggered. Action taken is to send an email Trigger Conditon Node Status is not equal to UP Vendor is equal to Cisco

Ok so I pulled the queries out of the alerts you provided (thanks) to run directly in my SQL console. If I run the volumes query I get several results showing that volumes are not polling. However if I run the Nodes query I get nothing back and I know for a fact that I have servers not getting SNMP data (CPU & Memory)…

Do a list resources on the node in question. On each interface you will see a little triangle next to the name. From there you can select if you want traffic and/or errors monitored.

Alterego, I'm not looking to return just the string in the email but the entire line within the log it was found. The log data applies some context to the error letting the user know more details about the issue.

Mdriskell, Can you explain what it did in 8.1 vs. what it's doing now? Denny In general terms it is not acknowleging the alarm....it is deleting it. Solarwinds then goes out and sees the node is down and creates a new alert. On 8.1 I would acknoledge the alert which would stop any escalation but the alert would still…

I don't really have any insight on this topic but found it amusing that I'm reading this thread while sitting here at 5:15 waiting on MS patches to apply to my Solarwinds servers. 

Here is what I did for this although I'm certain there are multiple ways to tackle. I wrote an alert every time circuit utilization exceeded X% for 30 minutes. Then I wrote an NPM event that gave the following text RouterName Interface name currently has a bandwidth over X%. I set this action to trigger every thirty…

Yes that is an option now. That didn't exist at the time of this post however.

This is how I did it for all of the NOC screens I created. I sat in my NOCs at the time and created custom views that fit the monitor real-estate perfectly. Trying to design a view on my laptop and then looking at it on a 60 in screen just didn't play well

Chris first of all I love the ideas and as someone who managed a NOC for 6 years I have created several different views to accomplish some of the tasks you are referring too. One thing I have been doing recently is utilizing Google Chrome for my browser when it comes to the views we put up on our Video Wall. There is a…

Once installed, you can either: * disable the stock snmpd agent and enable the net-snmp agent * reconfig the net-snmp agent to listen on a different port (1161 for example) and then run both in parallel. I suggest option 2 as there are HP dependencies that may break if you disable the stock agent. Chris, I have a UNIX…

I have tried the SNMPWalk and it fails every time after scanning about 10000 OIDs with the following error. Value was either too large or too small for an Int 32. I have tried scanning that particular OID 1.3.6.1.2.1.25.2.3.1.3. area manually with the UnDP and none of that table are supported by the devices.

That should work...however the greater issue is that the nodes keep falling out of sync (at least on my system). I haven't re-engaged support but what I have done is removed a node from NCM first then deleted it. I've found when I just delete first sometimes I fall out of sync.

Tim, Awesome news...thanks for the quick reply.

Thanks, I think I posted the original template I wrote for this before I added in the wait condition. This particular monitor would keep firing but always be good the next time so I made this simple change and the monitor is now stable.

When finished just import one of the devices, doesn't matter which one. I don't remember in which thread I saw it but one of the SW staff posted recently that you don't even need to do the import the discovery is sufficient. I know this is going to be altered in the new release....I can't wait :)

I was just getting ready to post the same issue.....I will wait for your reply. Thanks, Mike

In a multi poller environment you can point SNMP/Syslog at any poller you have regardless if it's actually doing any "Get" polling of it's own. I have one polling engine that receives all of our traps but doesn't poll any devices. Works well for us.

I have uploaded the report to the content exchange. Here is the link.

Having trouble with the actual alert conditons for the Volume usage Here is my alert As soon as I fill out the highlighted field the field in the same condition reverts back to *...I then set that back to Volume Space available and then the highlighted field goes back to *...It only accepts one field statement in the…

Adatole, First of all I want to say great post. I just found this thread yesterday. Up until a month ago I changed employers where in my previous role I managed a NOC where we provided much the same type of managed services you described. I had created several custom alerts based on different thresholds. If only I had…

What I did for this exact issue was on the Trap Details I added *linkUp* and then had a discard rule for this. The reason I did this is because different devices were sending different OIDs that matched LinkUp and I wasn't matching all. By turning it on in the trap details section I now have them all filtered.

Sorry wrong button my eyes are tired...I meant to suggest sirpaw's answer as correct not verify it. He is correct though the database user is setup by the installer and there is no default it is defined by the user while configuring.

I'd be willing to bet this was why I used to get reboot messages from Shoretel switches every night. We ultimately turned off the alert because we knew they weren't reboots but couldn't figure out what was causing the misinterpretation.

Another suggestion that we use for our NOC was to install a third party plugin to force IE to refresh on a scheduled basis (I have it set to 2 minutes) Since the refresh setting in Solarwinds is global we didn't want everyone to refresh that often so doing it with a third party plugin gave us additional control. I created…

FYI I prefer this method because you can use graphs and charts whereas report writer will give you straight numbers only. I use something similar to this to create scheduled executive summary views.

Thanks for sharing Stuart....I remember seeing that post. Very good stuff.

Netlogix thanks as always for your help For the way to use the _, it would be [_] (i.e. like '/a1[_]test' (that is a [ _ ] with out the spaces) I found this as well since I posted which seems to work 'a1&_test' Escape '&' I don't how to do a group for 'like', but, why are you using like? Could you use VolumeDescription in…