mharvey ✭✭✭✭✭

Yes. You would need to put in each OID as it's own Universal Poller and you the GET Type rather than Get Next or Get Table. This will allow you to get the information specifically for that OID. You can then assign them to the devices you need. Regards, Matthew Harvey Loop1 Systems http://www.loop1systems.com

You should be able to use ${StatusOrErrorDescription} to get this information within your alert message.

First you have to monitor all interfaces, even those that are shutdown. The easiest would be to run a report of anything that was marked as shutdown that day, then the same for things that moved from shutdown to administratively up. Otherwise, you can track based on operational status, but you won't see anything that was…

Yes, you can put custom properties on an interface. The easiest way is to go to the server, into Start > All Programs > SolarWinds Orion > Grouping and Access Control and open the Custom Property editor. From there, create the property, but change the property from Node to Interface in the creation dialogue. Once the…

If the node is already in NPM then the import is going to skip over them as they already exist. If you are looking to update the information on the nodes via a discovery, a rediscovery is run on all monitored devices every 30 minutes by default. The node discovery is for adding new devices to be monitored, or new…

Since the flow data is UDP, I'd remove the TCP allow and just allow the UDT traffic, if this is still an issue.

Did you just migrate servers or did you add it into your SolarWinds Orion installation? If it was the latter, then I believe these get disabled and you have to use the Syslog and Trap Viewer within Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps. I believe this is by design when NCM and NPM are on the same…

APM should be able to read the results of the script if you have the script run from APM. As long as you have the script setup with the information, you should be able to plug the servers into APM, add the script and run it against them. Is the script doing both the lookups and the port checks? Regards, Matthew Harvey…

SCOM still does not support clusters that I have read. Most the times if the element is greyed out it might be something to do with the connection using port 17777 or the credentials you used when configuring the management pack. Regards, Matthew Harvey Loop1 Systems

I don't believe SAM 5.2 supported SQL 2012. I think that came along with 6.0. In regards to the DB connection, it already uses a secure connection to the database, it's not setup to use SSL though. The communication is encrypted however.

To COMPLETELY do it requires going through the registry as well as manually removing the files from \Program Files x86\Common Files, \Program Files x86\, \ProgramData, etc. The registry though is the big pain as not everything is listed out as SolarWinds.

Is there any statistic you are trying to trend out like number of nodes added over the past 6 months? Or something specific you are monitoring from them?

Are you referring to SAM/Application templates? Or are you referring to some other kind of monitoring template? 

The best I've managed is to put the object on the server and put the label to the side. If the label is too big, I rename it with a shorter name that allows me to know what it is. Since their isn't an object, you'd have to drag out the device. It would be great if SolarWinds would use these icons similar to what Visio has…

here's a visio I started with that has helped me before.

Have you made user that you created an exception for UDP port 161? Make sure that you don't put in TCP or it can keep the UDP traffic from coming through. When it comes to the status, you have to make sure that you are allowing ICMP traffic into the firewall. Make sure you have rules that allow ICMP in and out. Regards,…

There's an unmanaged scheduler that your SolarWinds Administrator can use to setup a scheduled point in time on a recurring basis that can match these planned shutdowns and reboots including time of day and how long to stay in that state. This would provide a level of automation that would do this. The only other option I…

If you are using dynamic IPs for your systems then this would be potentially why you are seeing this. UDT tracks user logins to devices based off of IP lookups, not MAC, as the Windows events it's collecting doesn't have MAC information. As such, if the devices are dynamic and resolve to the same IP, it may end up showing…

I would recommend filing this with SolarWinds Support. Looks like while the sensors are 2012 supported, they didn't do support for 2012 R2.

If a get next request isn't returning data, then I'd suspect that the MIB is no longer supported by the OS on the Nexus. You can verify by running the snmpwalk.exe in the NPM install directory and configuring that specific OID. The text output will let you know if the MIB is supported or not. Regards, Matthew Harvey Loop1…

Are you trying SNMP or WMI? If SNMP, have you verified that the Orion server is allowed to talk to that server with the community string you are using? If WMI, have you used wbemtest.exe on the Orion server to see if connection can be established to the target server?

The behavior is in the code. To get it changed, you'd need to submit a feature request and get the user community behind it.

For the most part this should be possible with the report templates in the report writer. Using the current status reports such as APM: Current Status of Components can be used for your example request above. I created a bare bones version of the report that can be downloaded here: Regards, Matthew Harvey Loop1 Systems…

In order to see the Hyper-V information on a server, you have to add it to NPM using WMI and ICMP rather than SNMP and ICMP. The Hyper-V information is only available through WMI. Regards, Matthew Harvey Loop1 Systems http://www.loop1systems.com Putting Knowledge Into Motion

cgregors, Did you ever get the information you wanted on the queries that were running on the website? If not, you should be able to turn on Hubble using the Log Adjuster, then go to details to see how the website is running the calcluation. Matthew Harvey

Greg, The only place the Q-Radar IP should need to be is in the Forward Syslog Action. The entire rule should be set with * to basically say that all syslogs from all IPs regardless of message type or message pattern, and all severities be forward to Q-Radar. If you put the IP of the Q-Radar in anything in the rule, such…

What type of routers are these that aren't working? Is the config multi-page? Can you run a command scriptlet in NCM and look at the version or run something else successfully? Regards, Matthew Harvey Loop1 Systems

Check your email action in the Alert Escalation tab. Make sure the option to execute and a repeated interval is not enabled. Also make sure you don't have multiple alerts set up that would trigger on the same conditions.

It's going to depend on how you are monitoring the VM within Orion. Are you monitoring with ICMP and SNMP? Do you have the poll for VMWare option enabled and polling? Are you trying to alert when someone stands up a new VM or when that VM is added to be monitored in Orion? If Orion isn't monitoring it, it can't really be…

So I rolled back one alert to the older advanced alerts, but now don't see a way to migrate it back to the new alerting engine, and received no real steps from support other than how to start to revert a single alert from the new web alerting to the older advanced alerts.