rjnicholson

The article you posted is a bit off. You can do NETFLOW with that version of IOS but only SLT or Flex NetFlow. This is a different type of netflow you can read about it here. http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps10745/product_bulletin_c25-658743_ps6406_Products_Bulletin.html You do in fact need the…

Turn on Syslog on your Cisco devices and use Trap alerts on top of NPM monitoring. This will give you the ability to alert upon when a switch sees an issue and sends a message to the SW Trap service making you proactive and able to see the issue right away since SW would be "listening" for these messages as opposed to…

Ya find out what they want you monitoring is a must.. More so since you have a smaller license and each interface/node/volume count against the license. In your case you might need to go to the SLX model for unlimited nodes. Since it's world wide as well make sure your server will be able to hit those network segments that…

Creating separate Login ID's and then creating separate views that are filtered with Account/View Limitations would be the easiest and most cost effective way for you to achieve this. This is exactly what I have done for several ISP's that use Orion to monitor Network gear and End Points at the Customer Prem. We then…

Don't worry you will get through it even if you had to go through it 1 by 1. I had to do the same thing in the environment I took over except all of the alerts this company pre built were all Basic!!! Ugh.. talk about a headache. I had to custom build all 200 plus alerts in the advanced alert manager. The plus side to this…

I would highly recommend you using a Group E-Mail so you can updated the group in the future to include or take out a member from alerting. Now for your error. I'm not sure how the alert was every working and allowed to be saved unless you added those conditions after the Interface Status is equal to Down. Basically you…

Agreed. This is something that unless is tied to AD is a lacking functionality, and would be very beneficial in large enterprise environments.

I would like to know how you plan to pull any config downloads via SNMP. I for one have never seen this. SNMP is only trying to poll for specific OID's and grab their values and report them to you. I have still to this day only seen TFTP used for accessing and downloading configs from Cisco ASA/Routers/Switches.. You can…

Ya big problem is that I'm OCD and I can't stand having this. Hopefully we can get some insight to this and have it cleaned up. 

I am running 5.0.1, but will be pushing 5.2 in our next Change Control window (Sept 22). I got a reply back on my ticket and it seems that the Components resource chart uses Bytes as its conversion and I'm giving it the number to convert in kB. I wouldn't mind using conversions if they actually stamped the statistic with…

The 0.0.0.0 next hop would be a static default route for all traffic that can't find a route out, or used when all traffic has only 1 exit point needed to the ISP. This wouldn't be of any value when you have a Table full of BGP peers. If you are using BGP and have a Static 0.0.0.0 route then I hope you are changing the AD…

1. OSPF, iBGP/eBGP, EIGRP, Static Routing Tables (doesn't seem useful but I bet someone would love it) 2. See most of the above statements. 3. Table 4. I would expect these have logic built into the Advanced Alerting engine, so I can tailor the alerts to my needs. I hardly have used a built in alert except to customize the…

Here ya go. Check out Chapter 9 starting on page 107. This will get you started. Understanding the way the Alerting logic is built for NPM will help you build alerts faster and cleaner without to many errors or mistakes. http://www.solarwinds.com/documentation/Orion/docs/OrionNPMAdministratorGuide.pdf

Now if you are just trying to hit the Windows portion of the box then you should check WMI and RPC services on the server to make sure they are set up and running properly. Also, check application firewalls on the server, or a firewall sitting in front of the server if you have an internal firewall. I am remote and don't…

Steven, Thanks for the quick response. I had a feeling that this was the behavior of dependencies. Do you think there would be a possibility of adding a statement to the algorithm at some point that would not only check the Parent device of the the listed Child, but also query the routing table of the 2nd Parent device for…

${NodeName}, ${InterfaceName} errors this hour - Recieve ${InErrorsThisHour} and Transmit ${OutErrorsThisHour}, ${DateTime}. Those are the variables that I use to kick off the alert and write to the event log. This alert is on all Routers/Switch Uplinks. I am only seeing the issue on my Juniper devices, but I can't find…

You are correct as I mentioned this above, but there is no way a true Unix admin is going to say Ohhhh sure here is a root account for you to use and SSH into my box and run scripts.. You would want to have them create a SUDO file/table for your user name and then provide a listing of the command some of the templates need…

I just checked and we are using the Auto Determine setting for template use when logging into the IPS module and backing up the config. As I was stating above the only issue I ever had was figuring out the Radius options for these devices had to upgrade the code first since they didn't support Radius at first.. They are…

You don't have to do both if you set them as unplugged. They won't alert up/down no matter what once you set them that way, but you may want to keep the custom property as it will give you a way to filter the reports and metrics you pull. This way your reporting you present will only be for the requested Dorm User traffic.

I always forget about the unplugged setting!!

10.4 that is in beta right now is introducing more in depth monitoring for F5. This should give you a lot more information then in the current release of NPM. You can also download the MIB for F5 right off your device, or do a walk and create any UnDP's you may need outside of what NPM will support as of 10.4 once it…

As stated above by JR TFTP isn't an issue and you can do this many different ways. But you will not be able to do this with SFTP/SCP.

LOVE MULTI EDIT!!!! Adding Oracle SID and changing the client to use the Oracle ODP client was SOOOOOOO much easier with this. 

Check the release notes on 10.3 Nexus 5000 series switches are now properly supported was one of the core fixes in this release. If you aren't using it I would plan an upgrade, and re check your Nexus switches. If you are on 10.3 I would open a support case. Hope this helps.

To expand on this just a bit more without reading through the Cisco article basically you have 2 T1's that are being bonded virtually by the MFR Multi-Link Frame Relay as opposed to just straight Multilink. Both T1's virtually load balance the traffic across them, and allows for you to lose a link and still provide…

Let me also say that I think you had a bad upgrade path. 10.1 to 10.4 isn't something I would have done. I would have at minimum 10.3 to 10.4 (When the new CPE was brought in) then to 10.4.1 (Improvements to the new CPE). If I really was tedious I would have gone 10.2.2 then 10.3 then 10.4 applied hot fixes, and then…

Use syslog messages from the router for now. They should be sending out messages when an IP/Subnet is added/removed to a VRF, and I would assume you are using iBGP to distribute these routes across the core to other core routers where other sites might be built to, so you could also trap BGP messages related to the VRF..…

This isn't anything that has to be fixed as far as a bug goes... This is the way the Logic is built into using the Advanced Alerts and is something that has been known for quite awhile. Pleas look up the feature request on this and vote if you want it changed. This isn't a bug, but how the alerting logic is built. If you…

Tons of replies came in that I didn't see when I was replying to this. If you are logging in and you don't have a logout ability then I can see the session staying open, but you should still be able to have that provider set a timeout on that account of say 30 secs of inactivity, but this still should be taken care of by…

Even if NPM isn't displaying Topology SNMP by design polls ARP and Routing tables. This will happen no matter what you don't display on NPM. NPM just ignores the information it doesn't use from what I can see.