seigniory

approaches the performance of the Win32 application Speaking as someone who spends a lot of time in the NCM interface, "approaches" isn't quite good enough... The RDP excuse is a terrible one, too. I know quite a few companies that won't let their people access a production infrastructure box by HTTPS, either.

Can someone please post the working solution?? What's the point of a public forum otherwise?

Weird - did anyone else get an email this morning from this thread saying that the first post in the thread was just posted today? I checked the headers and it actually came today... 

Point all your syslogs at a Kiwi Syslog server, and use Kiwi to redirect the syslogs to as many back-end syslog targets as you need. Combined with WinPcap, Kiwi can redirect the syslogs with forged source IP addresses, so that the receiving targets aren't aware they're receiving forwarded messages. Just be sure you don't…

HTML to make it easier to read in my NOC. :-)

Our use case is basically the need to graph out each QoS policy and its hit count over time. This will let us know at a glance (and alert us) when we're exceeding it, when we're below it, and where it's trending.

> an agreed SLA though where you guarantee a response within a certain level > of time, rather than the current random 2 hours, up to 48 hours for a response I have to agree with this statement. 24x7 support is important, but for my money, consistency of response is much more important right now. A 24x7 system worth paying…

Ditto. Configuration Management for BIG IP LTM 10+ :-)

PING! Definitely interested. :-)

> We monitor ESX 3.5 with no trouble. However, there are large issues with 4.0, at vmware's fault. Ditto.

I have a directory on my server that will automatically email me any file that I drop into it. I schedule a cron job to run wget with the URL of the picture, like so: wget --no-check-certificate orion.mydomain.com/.../CustomChart.aspx > /usr/mailer/out/image.jpg

I notice the same things, and would like to add that the missing "whitespace" for the first two entries in the original screenshot are not a manual redaction of sensitive info... my screen looks just like that, too. 

Great! So, what does "support" mean to you? What should we monitor? What data do you wan to see? Glad you asked. :-) Some of my LWAPPs work with a L2 connection directly to the controller (no IP address), and some are H-REAP over L3 in remote offices, so I'll approach my answer from the perspective of being able to gather…

A system that would allow us to report on planned vs. unplanned downtime would be excellent. For example, IPMonitor would always maintain stats for actual availability - this could not be edited. However, it could also maintain a table of "acceptable" outage timeframes that could be considered during the reporting process,…

Agree with this sentiment. Is there no official response on why the NCM experience has taken such a nosedive?

Correct, but correct me if I'm wrong, Orion doesn't (yet) have the "spoof" ability that Kiwi has - so all the syslogs would appear to be coming from the Orion server, and not the original one. For a compliance solution, I figured that it's worth a little extra money to "preserve" the syslog UDP headers, but that's that's…

While I use most of my tools inside a windows VM, I'd love native MacOS tools myself.

I ended up writing a custom postfix setup that reads the on-call info from an iCal database. IPMonitor is set to always email to oncall@mydomain.com, and my postfix relay sends anything inbound to two addresses - our helpdesk / ticket system and the on-call engineer. it wasn't pretty getting there, but it works. the only…

The ASA has no concept of a "read only" SNMP string. Knowing that, it seems counterintuitive that the fix is so put the device's RW string in the RO field in NCM - and to leave the WR field in NCM blank.

I use an external Perl script (vb would work, too, YMMV) that scans my folders based on command line criteria that I specify in the monitor. I wrote he logic in the script to alert IPMonitor when things are not what I expect. For example, if I expect that a new file will be placed into a folder every XX days/hours/minutes,…

Why just the last octet? All 4 octets need to be sorted as 3 digits, not just the last one.

All 8 staff members at my place get the same alert when using FFA 4 and/or 5. It's mostly cosmetic tho, as far as we can tell. 

Have you tried the Cisco MIB Locator? It has a lot of OIDs. Also, when you find the OIDs, add them to our Unknown Devices thread for addition to the SW MIB. Shouldn't these items be part of the standard interface poller collection? These are critical metrics for interfaces, and in my opinion, I'd rather have these more…

I'm running NCM 6.1 on SQL 2008 SP1 for quite some time and haven't had any problems yet... YMMV of course.

I completely agree - there's a definite need to make the determination between what's active and online and what's available but offline. Kiwi Syslog's ability to forward a message while keeping the device's original IP (via local subnet spoofing) is a killer feature.

Got it - thanks so much for the info. I usually don't mind doing this kind of thing if I know it's there, but had completely missed this in my review. Sorry for the fire drill.

I find it better to trigger on the syslog alert that the switch throws when a duplicate IP is detected. There's no guarantee that you'll always have MS hosts properly configured - the switch will always know.

Please add support for non-MS browsers! 

NPM isn't really designed for this. Go with the Engineer's Toolkit, which is designed exactly for what you're looking for and is, oh, around 50x less expensive as a full blown NPM rollout. :-) http://www.solarwinds.com/products/toolsets/engineer.aspx Enjoy!

I'd like to add that we have the same problem on our access points. One of our offices is in a shared building so we log a ton of "discards". In reality, most of these are non-company laptops associating with our APs because their laptops attempt connections alphabetically instead of going right to their own company's SSID.