pseudocyber · Manager of Network Operations

Do you mean the ip sla frequency should be less than the VNQM polling frequency?

Hi Sean, thanks for answering. We don't have web performance monitor. Would it be able to monitor/alert on a loss of connectivity from a server/host to an outside website? I don't want to now if the SolarWinds server can't hit the website, I want to know if the host can't hit it. Can NPM QoE alert if there's a loss of…

Ps. I'm working on writing a blog about this, but Thwack is giving me an error about posting the blog article.

Thanks HolyGuacamole. My goal is to extract useful info from Orion. I'd like to understand how to do the SQL, as when I watch videos or attend SW class, it seems that's where the real experts use to get info out. And I don't have much success at the report writing - not understanding where the data is. At least with the db…

Richard, thanks! This works great! So, the letters are table aliases? Like I.IfName? From Join Fundamentals, When a column name is not duplicated in two or more tables used in the query, references to it do not have to be qualified with the table name. This is shown in the previous example. Such a SELECT statement is…

Thanks Craig - is all the information contained on one table? You don't have to do a join?

I wrote a great article! 5 stars!

I came across this old post, googling for the same issue. I noticed in your config: service-policy input QOS-Trust-Cos-Input-Policy service-policy output QOS-Output-Policy I would suspect your QoS is dropping the traffic. I have a similar config. To examine how your QoS policy is affecting traffic on the link: show…

Second method, with custom fields. I'd suggest a "node status not equal to up", instead of one that is down. Then you'll get alerts on warnings, unknown, etc. Some custom fields we use: * PHY or VIR * Network or Server * Priority 1-5 So, my network alerts will be: node status is equal network, and priority is equal < 2…

We terminate 2 ISP copper ethernet feed into L2 switches, and then L2 through .1q trunk into FW, which does Layer 3 routing. We decided the only thing 2 edge routers was doing for us was adding to expense of build out and yearly maintenance.

We install "low end" Cisco routers specifically for this purpose, even though Internet handoffs are typically copper ethernet with IP's from the provider's equipment (like a cable modem). We'll then use .1q trunk to the router from the two ISP vlans, and do VRF inside the router, so we can run IP SLA and Tracking from the…

cnorborg‌ Craig has alluded to, but you might not be quite clear is: Netflow is originated by Layer 3 devices - routers, switches that can route, firewalls that can route. Some layer 3 Cisco switches can send netflow data, not all. Your results will vary by family, model, version, IOS version, and sometimes,…

I'm a NewB here, but reading over your post, the first thing I thought of is to make sure your SNMP is properly configured, you have the right read community string, and that SNMP is communicating between your nodes and the NPM. I hope this heps, PC

Email says: How to upgrade - NPM Use of the FREE Quality of Experience sensors requires an upgrade to SolarWinds Network Performance Monitor version 11.5.2, which is now available for download in your Customer Portal for those customers under active maintenance. If you haven’t upgraded to Network Performance Monitor…

Ports - the probe and polling engine are on the same box. ICMP 11 is open, and devices are reporting until it hits destination. User configured is tcp 443, which is open between probe and endpoint. tcp 43 from polling engine to bgp data providers is open and reporting path information.

neomatrix1217​ , no it's not solved. Thanks.

Searched for this in Aug 2015 - NPM 11.5.2 - still seeing same problem. Network Atlas 1.14.0.42.

I suppose they're the same path - based on Cisco CEF or port-channel load balancing algorithm.

In my original question, I showed you the output of "show ip route w.x.y.z". Here's a snippet of my same routing table, with just "show ip route". Notice, I have four equal cost routes: D EX 10.24.2.5/32 [170/51210880] via 10.24.90.13, 1w5d, GigabitEthernet0/0/4 [170/51210880] via 10.24.90.9, 1w5d, GigabitEthernet0/0/2…

I'm migrating from Checkpoint to ASA. I've used both over my time - one thing Checkpoint beats ASA hands down on, IMHO, is logging. Checkpoint's logs are called "tracker". It's like a live excel spreadsheet - with columns like date, time, protocol, service(port number translated to english), source (IP - name resolved or…

Here's my ASR Netflow config, which works with NTA. Note, netflow from management vrf on ASR seems to work, whereas it does not work on 4300 ISR routers. NTA 4.1.0 NPM 11.5.2 ASR 03.13.02.S / 15.4(3)S2 flow record ipv4 match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port…

Thanks both of you. This is working: RER2#sh run | s flow flow record ipv4 match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input collect counter bytes long collect counter packets long flow exporter NetFlow-to-Orion…

Ps. NTA 4.1.0

After about 18 hours of monitoring ...

TAC said it's in development, but not supported at the moment. In the meantime, I found a script to run cli commands, export it to a MIB which NPM should be able to read and chart: https://supportforums.cisco.com/discussion/11021931/snmp-oid-get-active-static-nat-number-router It seems to be working on my ISR 4451 with…

I'd like to do the same thing - monitor and trend the number of NAT translations on my edge router. I can "show ip nat translatiions" and it gives me a total. I've opened a case with Cisco TAC, to ask them what the MIB is. I'll post here if I hear anything. I have a ISR Gen2 4451 router.

I copied the alert, and changed to Custom SQL for Trigger Query APM: Application It reads: SELECT APM_ApplicationAlertsData.ApplicationID AS NetObjectID, APM_AppicationAlertsData.Name AS Name FROM APM_ApplicationAlertsData WHERE ( ( (APM_ApplicationAlertsData.Availability = 'Critical') OR…

Jeff, It's not nested. Going to attach screenshot. njoylif, the $(Alert) is in the subject, and the body of the alert.

Thanks! When I try to paste in your text, I get an error: "Only Select statements are allowed as SQL/SWQL macros." If I modify your text to read, SELECT [Caption] FROM [NetPerfMon].[dbo].[Nodes] where nodeid=${N=SwisEntity;M=NeighborID}} Solarwinds replaces it all with ${SQL: SELECT [Caption] FROM…

Thanks jeilers​ . The alert is for a router with a routing protocol neighbor problem between routers A and B. The Caption(node) gives me the name of router A. I'm looking for the name of router B. The ${N=SwisEntity;M=NeighborID} gives me the node id of the neighbor router B, but not the name or caption. So, if I have the…