nrms

2 quick questions: 1. What IP address are you using to monitor the flow in NTA? 2. Is port 9995 listed in the list of monitored ports on the NTA box? I think normally only 2055 is configured by default.

Might be worth having a look in the C:\ProgramData\Solarwinds\Logs\Orion\RunOrionJob.log file to see if any errors are shown. Also, make sure the job is ticked in the list of alerts to ensure it is active!

Knew I should have tried this first, but didn't think my work PC would let me... Just reset the date to Feb 28th and both WorkspaceStudio and the CLI Switch Port Mapper work again! Change to March 1st and it also works again! Sorry, but someone (MS or SW) has to chalk that one up to EPIC FAIL!

What happens if you change ip route-cache flow to ip flow ingress on your vlans? See if http://www.plixer.com/blog/general/ip-route-cache-flow-or-ip-flow-ingress-which-do-i-use/ helps.

When you create the report you need to play with the "Filter Results" tab. Ensure the "Select records where" is set to "all", then add 2 tests on the Date/Time > Hour of Day (24 hour format). One should be "is greater than or equal to 6" and the other "is less than 18" and that should sort out your results for you.

The usual cause of this behaviour is the SNMP service restarted. For some reason (and there have been many discussions and change requests on this) SolarWinds gets its "Uptime" from the SNMP service rather than the node's underlying OS. This means that whenever the SNMP service restarts the "Uptime" being monitored is…

Assuming that all the switches are the same model and are receiving the same image (or you know which switches are involved so that you can select only the target switches),and you know that the flash is large enough to fit the new image (or you can safely erase everything that currently exists in the flash) you could…

Are you using Outlook? Assuming you are since you're running Exchange, it's worth checking your Junk Email setup. I was having an issue where some of my email alerts were being received but others weren't, even though the Exchange server showed them as being accepted and sent to me. On a hunch, I checked the Junk Email…

Hmmm... I did reply to this, but it seems to have gone missing. (I had a URL in so it may have gone into a moderation queue.) The basic answer was download the 30-day trial of SolarWinds' Engineer's Toolset if you're not already using it. Within the toolset there is a program called "WAN Killer" which is a traffic…

I don't think NPM or APM have any built-in traffic generators. If you have the Engineer's Toolset from SolarWinds there is a program called "WAN Killer". It doesn't actually kill your WAN, but instead it is a traffic generator. You can set the (claimed) bandwidth of the link and then set a %age of this bandwidth you wish…

I'm not 100% certain on this, but I suspect what you are planning is not a wise idea. Usually when software is updated (particularly with major versions like APM 3 to 4) changes are made to the database structure as part of the upgrade process. Therefore, if you just do a new install of 10.2/4.2 and point that at the…

Unfortunately, I don't think it's possible to track who did what. Auditing is one area where Orion could (and probably should) be enhanced! You may get some joy from the IIS logs, but I'm not entirely sure what to look for. If you want old information, I can only think to suggest grabbing relevant data from an old database…

It may be worth having a look at OID 1.3.6.1.4.1.9.5.1.3.1 This presents a table which shows details on each switch in the stack, including a "moduleStatus" field. Exactly what this would do in the event of a switch going down, I am not sure; but it may give you something to start with. An alternative would be to just poll…

Your best solution may be to create a Custom Property for Interfaces called, for example, "Critical" and assign the ones you are interested in with a common value like "Yes". the Custom Properties are then available in the alert manager so you just do a filter where the Custom Property has your assigned value.

Are you using McAfee on the test machine? If so, check the Access Protection logs as McAfee has a default behaviour that blocks programs (unless explicitly excluded) from sending data to port 25 (spam sending protection). If McAfee is blocking the email attempts you will need to add the .exe file to the list of allowed…

Couple of questions... Am i right in thinking you want a single figure for each of those that is the sum of all your servers? And is this just for fixed disks (i.e. C: D: etc) and not to include memory?

Am I right in thinking you want a different Subject / Body depending on the device type? If that is what you're after, create a Custom Property called something like "Device Type" and populate that on all your servers with "Server" all your switches with "Switches", etc. You can then grab that Custom Property's contents…

Yes. In the Syslog Viewer on your SolarWinds server go to the "View" menu and click on "Alerts/Filter Rules..." Click on "Add New Action", fill in the relevant information and you should be up and running.

Just had a quick look at my NetFlow stats for my NPM server, and you're right in that it uses a "Random High Port". Doesn't give any actual port numbers to me, so I can't say what range. I doubt there'd be an easy way to restrict it to certain ports without potentially re-writing parts of SolarWinds or even SNMP itself!

Quite easily I've put a screenshot of just such an alert I have set up on my system below. Give me a shout if you need any further help.

As I understand it, the source sets the IP address of where the flow data is coming from, and this address must match the address being used on the flow course node in SolarWinds. The actual data that it will send is an agregate of the interfaces where you have put the 'ip flow [in|e]gress' lines. The 'ip flow-export…

This is were Universal Device Pollers come in useful. Just create a new custom poller based on your OID and assign it to the relevant node(s). You can also create alerts and reports based on UnDP items, as well as displayig the table on the node info page. It seems more difficult to get the node alias however. Just tried…

Assuming you mean the Windows Event Logs (Application, Security, System, etc) then no. What you need is the new Log & Event Manager software SolarWinds have. Information at: http://www.solarwinds.com/products/log-management/log-management.aspx However, NPM does have a built-in syslog server, so anything that is reported to…

If you're using NCM v6 go to the software console and there is a checkbox on the "Download Config" tab of the "Edit Job" dialog box that says "Only save configs that have changed". I suspect this will do what you are asking. If you're on NCM v7, afraid I can't help as I've not upgraded... yet!

Your alert is based on all the conditions being true, which therefore includes the test (Poller Name == x) AND (Poller Name ==y) in there. Is that correct, or do you actually mean (Poller Name == x) OR (Poller Name ==y)? If you want the test for either of the poller names, you will need to add a new Condition Group which…

Hi Jason, Shouldn't be any requirement to have Windows admin rights. I have 2 accounts at work - 1 "normal" account for my day-to-day work, and 1 admin account for when I need those extra functions. The account I use for SolarWinds is my "normal" account. Do your normal user accounts have any logon restrictions, such as…

I think what you need here is the SolarWinds Orionn Application Performance Monitor. Unfortunately our trial has just run out, so I can't confirm if it will do exactly what you want. But I can say from our licenced NPM that NPM would not be the tool for your needs beyond CPU/Volumes.

I get the feeling that a load of variables have been renamed. My old report of hardware problems now shows a load of stuff that is "Up" :-| If I get chance tomorrow (I'm being asked to go to our Customer's Customer to do some SolarWinds "consultancy" - whatever that means) I'll upload a screenshot of my report to see if we…

I'd have a look at the IPAM settings page http://<server>/Orion/IPAM/Admin/Admin.ScanSettings.aspx There are options here to reduce the number of simultaneous scans, number of pings per device and "Delay between pings" which is, according to the help page, the number of ms between pings (SolarWinds... Why is not labelled…

There is a "Down Nodes" resource available as standard. You can find it under "Summary Reports" when you add a resource when customising a page. Otherwise, use an All Nodes resource and you can apply filters from the "Edit" screen. You could either have this on the NPM Summary page, or create a custom view with just that…