orionofmyeye

ok moving on. anyone use this on juniper firewalls?

 can you by chance let me know what OIDs you use for the VIPs? thanks 

just got word from tech support to ensure the user id/password was valid. i changed it and sure enough it worked. thanks for your input.

 i agree. i really want to be able to monitor the status of our VIPS in our F5s with Orion and alert on them. MOM mib alerting only gets IP addresses which isnt good enough.

oh and the funny thing is that looking on the web interface my tests are listed under the Last 10 Config changes.....

thanks. i disabled all of them and still get the same thing in rtn.log 12/10/2008 10:38:51 AM : Started SyslogJob - 50734 : Job-610191 CUSTX-M01301-011S: downloaded and discarded Running config - no change ___________________________________________________________________________ 12/10/2008 10:38:56 AM : Completed…

problem i have with syslog is that we require a very high level (or low) amount of logging to our security team. we log to more than one location and it overwhelms my cirrus server. right now i can't even keep syslog running cause it crashes due to the logging levels.

i am not sure where that would be. can you point me in the direction?

you know how long that it will be for this? are there other options that are easier than recreating the maps? in my haste i took a leap of faith and bought this app when we added another orion server so our ops group could use it. now i am late on my project and just getting to this and under the gun to get maps from two…

sorry, i meant to upload the screen shot too. after the last time, i went back to it and it was working. i don't know what i did but it looks good now.

i went ahead and opened a case. tried on other nodes and have the same issue.

Having the same problem here. I set it up. Make a change and get the same thing in the log. 

that did not work - refreshing the node. i have also exited the app, run inventory on it, downloaded configs etc.

i'd like to do the same thing. i have created a "proxy ping" so i can poll one node from another using wmi ping status. works great but it is just up/down. i can poll response time of ping too. i'd love to be able to chart this as well. i guess worst case i may be able to create a text file and pull it in a custom html for…

looks much better. seems graphs don't want to do to well here. i have my table in and i may have to just deal with that. could not seem to get a graph without the menus. would the user work with the DirectLink ID?

Thanks David! I will try this and let you know. Scott

what ever came of this. i see this now on an ASA 5580

ok i got it. i tried adding another with a additional naming but it didnt work either. guess it is very specific on name. i thought i would one per unit (we have 6) cause based on Chris's instructions you must change the prompt to reflect that unit's name. i tried the same modified config with a different unit and it…

thanks. i did a test and saw what i needed. this backs that up. only issue now is that i tried to re manage that node and it is still showing greyed out. it has been over an hour. i have'nt tried checking it with a report but you can download configs and update inventory. not sure why it isnt going green. i will give it…

would i be better off using wmi and Win32_PingStatus?

 anyone know what the discards are looking at? case open with cisco and here is first iteration Were you referring to the "drops" of the "show interface" command? I believe that is what Orion would report as discards. Is that correct? Usually these discards are ACL drops, incorrect vlan packets, error, it could be…

ok thanks. seems like it would be easy to do. maybe something for the future

if anyone is interested - got it. had to set credentials with fqdn and it works great. non admin account, proxy ping

it really should be. it leaves us completely blind to some really important monitoring

i am interested too

Thanks Chris. Where is that done and if it is what does it do?

ok, looks like i got it. looks like a file naming issue. now i just need to get the prompt right i guess because it failed. is there a way to debug the config download process?

 did you ever validate this? we discovered the same thing. is it acl drops?

thanks josh, so then do you think it is feasible to do this with ping.exe to ping an ip from a remote server? i'd even be ok with hardcoding ip since i only have a few. trying to monitor status between two nodes (one which cannot be pinged from orion). obviously this script wouldnt work. if you think it can be done i will…