rschroeder · NAM SME · ✭✭✭✭✭

I can think of a few ways to find those last few devices that have your user name in them, depending on what tools you have. * If you use NCM for daily backups, select all the devices' config files and search for your user name in their configs. The devices that still have it present should pop right up. I use that method…

That's MUCH easier to accomplish. Simply use NCM to create a baseline for every device it backs up. NCM can alert you, can show graphs, e-mail reports, etc., that will list all devices that have deviated from their baseline.

This is a report that is provided by default with the product. Carefully review the options you've chosen to get to this page; I bet you'll find you went somewhere slightly different than what I displayed originally. The steps to check: 1. Go to http://<server name that hosts your npm>/Orion/Reports/ViewReports.aspx 2. In…

The problem still is present. Is there any hope for a way to easily filter out these interfaces from being monitored by NPM when using the List Resources button? I mean, easier than manually unchecking 796 ports on every 4510? I'm imaging some dynamic port filter during discovery of ports, and automatically monitoring or…

I'm on NPM 12.2 as well. I don't know why you don't have the option. Might it be possible you don't have sufficient Admin rights to work with this? If you're not certain (or if you ARE certain) about having sufficient rights, I recommend reaching out to SolarWinds Technical Support to get this resolved.

Perfect--as long as you're future-proofed and not caught in the bind of buying the least expensive switch ports today, at the risk of having incompatible equipment that must be replaced to support tomorrow's technologies. I use dual 3850's for HA Distribution Switches at my medium sites; they do a nice job.

Excellent! I've used it many times to identify causes of slow performance due to someone or some application taking all or most of a WAN pipe's bandwidth. I'm glad NTA is useful to you and your organization.

Thank you. I mistakenly thought the first "dot" meant the pattern must only begin with a dot, then the asterisk indicated any character was allowed between the dot and the AAA. And later, the search would only return results if the phrase was terminated by a dot followed by any character. I appreciate the knowledge share.

Another option might be to import all the nodes from one site into the other site's NPM. Then use NCM to push new syslog and trapping information into all the devices in the one site, so they report to the other site's logging & trapping solution. Also import the one site's NCM node backup solution into the other site. NCM…

I think you'll be happy with the 2016 solution. i know my monitoring environment proved easy to move and faster to use after going through the migration & upgrade. Thanks for your thoughts on the database warehouse idea. They're practical and relatively low cost. They don't tie into the single pane of glass that is…

Splunk takes all incoming traps or syslogs and analyzes them for patterns recognized to be possible trouble. It then uses its algorithms to determine the most likely cause of the pattern, and reports to us the probable cause, the significance or risk of the event(s), and the best understood remediation for them. It's very…

What do the switch's log files show? Is it rebooting, or showing errors? Are you monitoring its uplink port(s) with NPM? If so, you may be able to identify bandwidth issues that could be associated with a broadcast storm. Similarly, if you're monitoring all of its access ports with NPM, it can show you high utilization,…

If/when you find a more graceful solution, or even a Draconian solution, please share it here. Others may benefit from your tales of woe, and your successes and challenges.

I like it. Again, I never considered additional web servers. My environment's not quite that big yet. Thanks!

That's not a graceful solution, but I can see how it could achieve the goal. I was thinking of something lower-level, something that tracked sources making the hits and reported those sources. Plus, many smaller customers don't have load balancers--may only have just one main NPM instance and no APE's. It would have to be…

It this turns out to be a VNQM limitation, are you participating in the current VNQM Beta? It's a great place to discover what the new version can do, and it's the right location to make folks aware of a short-coming or a need.

Prior to NPM 12, I had best luck with Firefox. Check it out and see if it performs better or not.

I was pretty hopeful, but it doesn't give the view I want. I built this: I used this Data Source info: And I got this: The top view is missing the red icon for down status, and it also includes two nodes I don't want. What do I have to do to get that red icon showing, as in the lower "Down Nodes" view, and then filter out…

Thank you for the info, Jeremy. I'll work on capturing the hung process next time I see if it happen. My APE's are all in the Central time zone, and configured that way. They're not that far apart as the packet flies--just six milliseconds across and back over our 10G Wave, covering the driving distance of 240 miles (one…

I like the idea--it sounds like it might do what I need/expect. Can its information be exported into a third-party tool, like a CMDB from LANDesk? Does it show the switch & port to which every MAC / IP address / device is attached? I wouldn't need RW access via snmp to leverage its benefits, but I think that's kind of…

I'd expect you to have ISE or at least sticky-MAC security in a PCI environment, and all non-active ports unpatched and administratively disabled. Under what circumstances would you see new MAC addresses showing up in a PCI world, if they weren't authorized and allowed? Shouldn't strangers' devices automatically shut down…

In the past, SW tried to steer customers away from trying monitor two different assets that use the same IP address. In this case you could monitor them from two different pollers. Going down this path, SW's Enterprise Operations Console may be required:

Haw, there's no being bad, no needing patience. The product line and all the options are too much for a single person to keep in the front of their mind. Shoot, just reading the documentation & retaining enough to be competent seems virtually impossible. It's a good reason for this forum to be here. I ask questions about…

* Start off by setting your routers to report syslog information to your Orion NPM solution. * On the NPM server, open up the Syslog reporter application * Create an alert for anything containing "EIGRP" or "BGP" or anything you want special alerts on* Edit the Alert and insert all the appropriate information for who to…

The red dots will appear until one of the following occurs: * The condition causing the Compliance Report violation has been removed, AND a new configuration file reflecting that change has been downloaded, AND NCM's Compliance Report concerning that issue has been "updated" so that it reviews the corrected devices'…

Can you share a screen shot of what you're trying to do, and what's failing?

Thanks for the kind words, brett.holzhauer. The pressure was on, and I wanted to try to get the right answer quickly for seanchc​. Just don't come to me for brevity. ;^)

David, I'm in Networking, and my team manages our Solarwinds suite of products. We rely on NetPath to troubleshoot issues with WAN services, and here's an example: Partner Site A allowed us to install a VPN appliance within their network, to facilitate installation and use of a PC owned and managed by my company, which is…

Open the device in NCM. On the right, scroll down to Communication and open this section. Verify you have the desired method in the three areas called "Excecute scripts using", "Request Configs Using", and "Transfer Configs Using". If you have them set to SSH (or whatever you want/allow), the process should work properly…

Ping me next Wednesday (3/21/2018); I have 7K's that might be of use to your Flow needs.