shawn_b

Jiri Cvachovec I cant say that there are non-printable characters produced by the device as all my other scripts work exactly as the telnet sessions no delays when I run the commands in the telnet session. Correct me if I am wrong, but the process NCM uses to execute scripts is to connect to the device and login using the…

I have 2 Check Point firewalls monitored in NPM now I can get NPM data (e.g. Avg Bps in/out, Total bytes transmitted\received, MAC Address, Uptime) but not NTA data (Top conversations, protocols, applications, Type of service etc) I suspect that this is due to a netflow config issue

actually, let me correct myself, I am not sure that this alert can be created as a real-time alert you can get it as a daily report

choly‌, No I have not done this migration as yet as mentioned above, I foresee a lot of re-work on the migrated instance to get it to what I have now I don't have the time presently, so I am working it into my plans

RichardLetts, many thanks for your suggestions. I have checked the UDT polling intervals: my logs were defaulted on Debug I checked the udt.buisnesslayer.log as you have suggested - wow there is a lot in there ! ! ! this is what I am seeing: 2014-04-10 07:16:55,788 [ 3] ERROR - Error while processing job '[N:85|Layer2]'…

I had similar problem like this, except it was happening to ALL of my switches What you can do is run the UDT compatibility checker against the switch that does not keep the devices as well as your L3 device where the IP addresses are registered. You would then see the MAC addresses are being discovered in the L2 job on…

rzwarts you need to send the Checkpoint R76 mibs to Solarwinds support for them to compile, then they will make them available in the weekly mib database, which you would have to download and import into your Solarwinds,then do a discovery of the Checkpoint.

Unfortunately, I didn't

jmarg‌ any info that you can share on configuring Check Point R77 for Netflow would be appreciated. I have 2 R77.20 firewalls configured in NPM, but not getting nay netflow data, NTA is configured to accept Netflow on the monitored interfaces, but no data is received.

Jiri Cvachovec I am running 7.2.1 planning to upgrade to 7.2.2 to see if this helps

Yes, that is what I needed, not 100%, but a 75% start with a bit of tweaking, I was able to get to what I wanted. now I have summary reports for all the required custom pollers for my monitored UPS's as well as individual node reports. the summary reports are great for compliance, while the individual reports have been…

cnorborg‌ Thank you for that SQL code this is what I get with that: I think part number is what we need to display and sort by, or sort by date but display part number, since NCM detects the model of the DELL as Part Number. DELL switches are a bit different in that the default fields often list something else for them,…

I have upgraded to NCM v7.2.2 and I am able to create script execution jobs now Many thanks to all of you

I am not sure if this is currently available, based on this rather OLD thread NTA advanced alerting abilities I have NTA version 3.11 and I do not see the alert in the Advanced Alert Manager You can get a daily report, but I believe that you are looking at a real-time alert Re: Daily Report for NTA bandwidth Utilization…

Really great info Who would've thunk it ? Definitely a thwack moment there

cscoengineer‌, I have that job to move them to a secure share, Thank you for the suggestion all the same on the configuration archive folder

Glad to hear next time it happens, do a filter for snmp traffic on the firewall (Smart Tracker) and see if there are any issues just for curiosity, cuz we all know that issues that solve themselves aren't good CheckPoint firewalls sometimes have a delay in passing traffic when they reboot, but never in my experience as…

jonchill When you edit the node and view the Connection Profile can you successfully test that connection is successful? Example: Hope this helps

rharland2012 The message is not logged when the max datagram size is changed to 1024. Is there a best practice that needs to be followed? say max datagram size = sample size?

Pavel, Thank you for the suggestion. I will try convering the time (2 months) into hours and test. For testing I will use a time of 168 hours (1 week). Once this works it should work for the 2 month time period. I have tried using the "Last Changed" variable instead of "Last Sync", which worked, however I still had to…

superfly99‌ this is how my Trunk port is configured The interface is part of a port channel Switch_1#show running-config interface te1/1/1 channel-group 1 mode on sflow 1 sampling 1024 256 sflow 1 polling 256 description "Uplink_Core_Switch" Switch_1#show running-config interface port-channel 1 description…

I run the scripts from a job and get the results in my e-mail if you need to file results for audit purposes, you can consider this

^^^^ pretty much what he said if the signage box is SNMP capable you can pretty much do a lot once it has a fairly decent set of MiBS written for it, else it may not return much valuable info. That all depends on the brand. I am sure you may want to monitor last update time, runtime, location in addition to it availability

did u make any specific allowances for the firewall to allow snmp to the NPM server IP address?

This is how I have my SW & CheckPoint firewall configured Solarwinds NPM and NTA monitor everything except the ISP Routers The switches and core router are DELL, which are configured for SFlow, CheckPoint is configured for Netflow v5 when I click on the node for the firewall > network tab > Interface for ISP#1 (eth1) and…

Also, make sure you have the snmp and netflow configured from the web management console I am not sure if the Agent Interface selection is what is limiting the reporting on the external interfaces - what do you guys think?

You might be getting 1000's of e-mail probably because you have 1000's of unacknowledged alerts and events check that there are only recent and valid alerts and events in the Alert tab and Event tab

what kind of node is it? switch\router\wireless access point? are you monitoring the hardware health and CPU resources?

So far the IP addresses are still displayed, so I would consider this problem solved.

RichardLetts where would I find that log file ? My searches are turning up the following: neither of which are logs. I have done some investigation into my network and found that my core switch\router has valid ARP entries IP Address MAC Address Interface Type Age --------------- ----------------- -------------- --------…