rdmott

Yes, we're talking Orion. However, it just isn't clear cut on if I need to make the changes within Orion or set up something virtually (IPs) on the server.

I believe the user wants just the traps from a specific cluster IP address.

Ok, I must be drawing a mid-week blank. I've got my MS TCP interface setup. Now, I am looking at setting up some MIBs to capture only SQL traffic. What's next?

Ok, that is starting to make sense. I'll start back on it in the morning. I haven't worked with Orion for all that long, so this request is a little out of my initial scope. Plus, I'm finding out that we don't have many of the add ins that can really help out. Nonetheless, we forge ahead. You've been a great help thus far. 

Yeah, I found it, I meant to update this post. However, with the MS TCP interface, will that allow me to manipulate it to pull traffic that is only going over a certain IP on a system? We have these SQL clusters on servers with several IPs. However, our user doesn't want to capture the entire traffic over that interface,…

I see. That makes sense, however, what I'm wondering about is if the traffic on the NIC that is exclusively traffic for the IP that is used for the cluster can be monitored? I'm going to play around with it a while.

The loopback does show up as an interface on the router. However, the router has one address and the loopback was assigned with a different address. That loopback address is the source. NetFlow sees the data but is dropping it because it doesn't recognize the address. We have tried to add the loopback as a node, but with…

Where do I get to the MS TCP interface? Is that via custom mibs?

Ok, so we might be able to monitor that via Netflow? What I did was set up the clustered drives that are being used for SQL. I was thinking that I would have to set up some custom MIB polling. I guess that's not the case. I'll look into it more on Monday to see what options Netflow will offer. 

58593

Yann, Hello. I haven't recieved that email yet. I did send you a message yesterday showing you that the suggestion is getting me closer to what I need, but instead of running 30 reports showing the Top 10 Applications for each site, I'd like to run one report and have it group each of the 15 sites separately and show the…

There is no ACL blocking ports on the Netflow collection server. We upgraded to Orion 8.5.1 and Netflow Traffic Analyzer 2.2.1 and we now see the flow is hitting the box, but because the loopback0 address is the flow source, it is discarding them because that IP is unknown/unmanaged. We can't add that interface via SNMPv3.…

Thanks, That gave me exactly what I needed. Will use the day version versus hours. Thanks again. Ryan

Thanks

We are pulling data via NetFlow now. We had to change the source to the Gig Ethernet interface. Now, that is working.

The ip flow-export source is loopback0. It has a IP assigned to it. We're seeing the traffic hit the collector, but it is from an unmanaged device. We can only add via ICMP, which negates the purpose...because we're not getting the traffic. I can't add the node/interface via the IP for the loopback0 interface on SNMPv3. Is…

Mark, Our report cache timeouts aren't going any higher than 126 seconds. Is there any other way to increase this?

How would I set that up? The user is on my Hosting team and wants to Orion to give him a view of traffic for the clustered interface and not the traffic for the entire NIC. I don't know if we can pull it out like that.

Andy, Do you know what those workarounds are?

I did, but the tech just told me to check DNS. I'll open up one to see if they can give me the workaround.

Will anyone, even SolarWinds support, offer any support on ANY of my report writer questions????