rschroeder · NAM SME · ✭✭✭✭✭

How often? All it takes is once, and the labor & duplicated network traffic & resources are wasted. The project involves a new Cisco security analysis tool; if we buy into it, the duplicated Netflow traffic would be a permanent solution. It doesn't matter whether it's built to send to multiple destinations from every…

I could do that. But modifying 800 routers to send duplicate copies of the Netflow to a second source seems a waste of bandwidth and resources. I'd prefer to take the information already sent to NPM's pollers and forward a copy to the third-party tool that wants to analyze that data. But thanks for the thought--it was my…

Thank you, tdowns​. We use a variety of tools, including Gigamon, LogRhythm, and three others. None meet all requirements of completeness and affordability to capture all east-west traffic. We pick and choose are captures based on perceived need and budget. I'm certain our Security team would prefer every key stroke logged…

"Monitoring" east-west traffic is a deep subject, and your options depend on your hardware, your budget, your training, and your definition of "monitoring." If you only want Netflow data for east-west, you could use something like a Cisco 4510 V8 chassis for L2 connectivity. This kind of hardware has the ability to provide…

Please expand more about which features you found that are cool.

DanielleH​ and scott.tietjen​, your thoughts might be useful here for Spincoach​ and martian monster​.

I must confess that after upgrading to NPM 12.2, and adding one more APE along with UDT, IPAM, and VNQM, I've opened many cases with Support. With patience, I make progress on each. But it's not as fast as I'd like. Nor do the technicians completely address all facets of a given problem in one sitting. I've uploaded lots…

Nicely said!

What parameters do you use now for the time required before a report is accurate?

"Greed" comes to mind, as a justification from Microsoft for this. Or "they require it because they can" is another. Oops--my MS history slipping through. My apologies where needed! It doesn't always make great sense to users who have to pay, but it always makes good sense to the bottom line of MS.

If turning off DEP doesn't work (and I DO like that idea!), then: * Run the Diagnostics Wizard. * While it's generating diagnostics, open an online support case with Solarwinds. Set its priority System Down. * Once the case is created, upload the Diagnostics to its Ticket Number. * Then call Solarwinds and reference the…

You're very welcome. My personal recommendations for Missions: * Before you answer any Thwack Mission questions, wait a few hours for others to discover technical difficulties. The folks Down Under are our canaries in the mine, and sometimes they'll discover problems and post them before anyone in The States sees the new…

Using VM's is my preferred path now. A big benefit in VM-world is the ease of making a snapshot for backup purposes immediately before any patching or upgrades. I'm able to move ahead with comfort and confidence, knowing that if there are any issues with the patch or upgrade, my System Admins can quickly restore the…

Thanks, Goliath--this sounds like a good solution. I'll give it a try.

DanielleH​ and other SW / Thwack admins can be a resource for your individual specific mission completion questions. If you have a specific mission that isn't complete, you might find a human resource listed somewhere on the for that mission.

I want the big wall displays up in our Network area, and a duplicate in the Help Desk building, and another one where the System Admins sit, and a fourth showing DPA and SAM and WPM where the DBA's and Apps analysts sit.

That view reminds me a bit of our Cisco USC Performance Manager. What is it from?

I hadn't thought of tracking Firewall High Availability the way you've done it, but it makes perfect sense for our Cisco ASA's. I might just take a note from your book and look into doing that for our HA solutions, of which there are a dozen, these days.

"Smoke Detector"? Is that literally to sense smoke from overheat or a fire? Of does that mean something else to your team? I enjoyed seeing it!

I'd be interested in seeing screen shots of your setups for the EPIC monitoring views, if you can safely share them with us. I'd like to show them to my EPIC team and try to get a foot into the door for monitoring it for them. Maybe expand that single-pane-of-glass concept to include them, or at least create custom views…

I like your idea, but I'm having a "senior moment" when trying to find where the Current Hardware Health resource can be edited. Would you be so kind as to provide the screen shots showing how you got to that area?

I was working with SolarWinds Support yesterday on the current NTA Beta, which I've installed on Server 2016. Support asked me to run the Diagnostics Generator Tool on the server and I tried to use my Windows Server 2012 skills to find it. WindowsKey + E, typing in Solar or Orion or Diagnostics into the Server 2016 search…

You're not the first one to wish for this feature. Unfortunately, it's been all or nothing--we're forced to set everything for six months or six years or six days, with no option to prioritize what information is most important for longer retention or greater detail. There are several Feature Requests and hints and…

Exactly. My problem is that I'm unable to remove that Edit pencil when I follow the suggested steps to do so.

The easy solution: Read all the documentation, use the online installation & migration tools, and use VM. I have everything running on VM. You can even open a support ticket for some hand holding during the process. That's especially helpful if you're upgrading from a much older version. All the Custom Reports, all the…

Thank you for the ideas. Yes, I've tried both of those. Neither presents needed CDP neighbor information such as Node Name, Connected Ports, and Mgmt IP address of the CDP Neighbor node. The first one's output: And the second one's output: Here's a screen shot of the resource I found long ago in Thwack--which works…

Thank you for that. I added that same query to my NPM pages a couple of years ago and it works well. But it doesn't work in SDK; it errors out: "Subquery returned more than 1 value. This is not permitted when the subquery follows =,!=, <, <=, >, >= or when the subquery is used as an expression." Any recommendations for…

I upgraded the latest version of HF2 to my 2019.2 deployment of NAM on Friday (August 16, 2019). So far all Daily & Nightly Jobs seem to have run successfully. The only one that has't fired off yet is a weekly config purge task. I'll watch it, run it manually, and inform Solarwinds if it doesn't run. Thank you for that…

I'm building a view for Read-Only low-level access that only shows down nodes. I don't want users to have access to the Help files at all. What options are there for removing the Help Button from the panes within a very limited View?

These are interesting. I assumed the SolarWinds server simply needed to be "domain joined" and that there had to be a trust between the multiple domains. It shows what happens when I assume. Uff da!