stuartd · Senior Dogsbody · ✭✭✭✭✭

I did have a lovely precis of my career in IT but the late 2025 THWACK upgrade nuked it. My TLDR: been in IT for 40yrs from a fledgling delivery & installation person to field repairs to in-house guru to network engineer to monitoring maverick!

Comments

  • Ahh yes - that's what is happening more and more. End devices get an OS upgrade and now CatTools (or NCM) don't work. Unfortunately I can't advise as I don't use CatTools. I suggest you reach out to your Customer Service Manager or open a ticket. I did find this Reddit thread which may help…
  • It's a mismatch in ciphers between the node and CatTools. I don't use CatTools but we see very similar issues with NCM and what we have to do is downgrade the default cipher in use on some of our nodes. Once NCM is caught up, then we can revert to the better cipher. Anyway, see…
  • I've never dealt with Arista before so can't answer. What I can say is with Cisco, they introduced a command in their OS to 'fix' the IFIndex years ago to overcome this very issue. Dells have the same problem but there is no way to 'fix' their indexes.
  • You might, for testing purposes, want to restrict your query so edit the select line to be: SELECT TOP 10 rt. etc And you can drop the rt.NodeID if needed - I just added it in for my own sanity 
  • I can't hep with the Date function but your base query in SWQL would look like this: SELECT rt.NodeID, Availability FROM Orion.ResponseTime AS rt WHERE (rt.Node.CustomProperties.BRANCH_Type = 'non-atm') This makes use of the implicit JOIN to Orion.Nodes to pick up on your custom property.
  • Presumably the node in question is (or was) being monitored via SNMP and the interface prior to shutdown was being monitored OK. You don't state what manufacturer and model the node is, but my best guess from the info provided is that it is a Cisco and that the IFIndex has changed. Either that, or the other possibilities…
  • Hi Sadiq, Trust me - as a complete novice on SWQL is to do two things, well 3 actually. * Always post your code using the "Insert > Code" option * Always format your code - even if copied from elsewhere. I find it easiest to use Notepad++ and then add the 'Poor Man's T-SQL Formatter' as a starting point. Doing this makes…
  • I don't think so... But utilising aspects like CDP, LLDP SolarWInds (Network Atlas and/or Orion Maps) should be able to build a map anyway.
  • You'd probably be better served by asking here: [mention:de87ce885b14491598fc3011ec387ff2:23b05a61c3e5445190d9bfa00453bce4:label=Server%20%26amp%3B%20Application%20Monitor%20%28SAM%29] as this is the NPM sub-topic. That said, this is a widget with which you will need to recreate the S(W)QL behind it for a report.
  • Best bet is to see the docs from Meraki for 'how to' do SNMP on their devices. Start here: https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/SNMP_Overview_and_Configuration After that, you just need to ensure your SolarWinds deployment can see the Meraki environment and add the node the same…
  • First off - I'm no SQL expert either. Second, this is SWQL which is similarish to DQL but different enough to hurt ones brain. Next, the code is entered in the Alert Configuration stage and you simply change the drop down to the "Custom SWQL Alert (advanced)" option. It hard codes the top section, and then you'd paste…
  • We do something similar for Fortinet FW HA. Basically the SWQL checks to see if the state has changed from the last time it was polled. You could try that - code block below for editing/adjusting to suit. This bit is fixed and you can't edit it if you go this way: The code we then use is: INNER JOIN ( SELECT…
  • Hi - can you provide more info... What make and model of F5 and OS level? Are you trying to backup the underlying 'appliances' or the platform itself? What is, or isn't working, and how are you trying to backup? I ask as we tend to use SCP rather than SSH as it appears to be more reliable with any F5 setup. Also, I'm not…
  • We don't use SAM so I don't know. You'd be better asking the question here: [mention:de87ce885b14491598fc3011ec387ff2:23b05a61c3e5445190d9bfa00453bce4:label=Server%20%26amp%3B%20Application%20Monitor%20%28SAM%29]
  • With just NPM then no, you can't. You can monitor (and alert) on drive space, CPU - basically all the hardware bits except interfaces. You'd need the SAM module to monitor services.
  • Ahh, right understood. The timestamp does show date and time but you need to define your time period. So we have a report that shows average CPU use for a bunch of F5's from yesterday. In the 'Edit Table' section of your report you need to select the TimeStamp block and then pick the options in there you want. I'd leave…
  • Could you clarify where you are when you say 'manage entities'? I don't recognise that as a part of NPM or my brain reads it as something entirely different. 
  • Presumably you can see the Thin APs via the wireless tab? Assuming yes, then what we did was create a custom SWQL query widget with the following code: SELECT wap.DisplayName as [AP_Name], CONCAT('/Orion/Wireless/ThinAccessPointDetailsView.aspx?NetObject=WLTAP:',wap.ID) as [_linkfor_AP_Name],…
  • Direct from 2020 I don't think you need any specific steps outside of the usual 'backup your database' - but your extras are always a good shout to check or backup.
  • I've bot done precisely what you are asking, but yes you will need to cerate a 'Traps' rule. Go to the Traps dashboard and click settings top right and then in the new screen click on create. Follow this for…
  • Yes, there is a workaround. Not quite sure what is meant by this: found 4331 is not in SNMPV3 compatibility list but so long as you can talk to it via SNMP, then you can create a node poller via 'Settings > All Settings > Manage Pollers' - you will need the OIDs for 7 different aspects from RAM to CPU to SysObjectID. That…
  • First thing to say is welcome to THWACK and SolarWinds. Second is to pick on your words. A report is different to an alert which I am sure you are aware of - so my first query is do you want a report, or do you want an alert or do you want a report on the alerts? The three are very different. But, on the presumption you…
  • We have upgraded 3 of our environments to 2023.4.2 now and all went smoothly with no obvious issues and certainly nothing that we've spotted or had reported to us. two small, single server deployments and one multi server, multi APEs and HA. I will add if you are on 2023.2.x or .3.x then make the jump. It fixes loads of…
  • Based on that code, the only issue I see is the WHERE line, so start off by removing it altogether for testing. Secondly, the WHERE line presumes that all your Thin APs have 'WAP' in its name somewhere - correct? Here's what I did to test in our environment... Removed the region CP as we don't have that but replaced it…
  • Again, the full code block would be much more useful than bit parts. Can you share the whole thing?
  • I'd suggest you need to look at ACL's on the ISE - check their logs as well to see if there is any more help, but strongly smacks of the SolarWInds IP not being recognised by the ISE and getting rejected.
  • You can try and do a trace: https://solarwindscore.my.site.com/SuccessCenter/s/article/Generate-session-trace-logs?language=en_US Alternatively go into 'edit properties' of the node and scroll down to the NCM config section. If you are on a new enough version of SolarWInds then you should see an 'Advanced Test' button.…
  • [quote userid="2230" url="~/products/network-configuration-manager-ncm/f/forum/100928/ncm-not-able-to-backup-cisco-9000-series-switches-anymore/316568"]But who has the "blame" here? [/quote]Neither I'd say... just SolarWinds are slow (or slower at least) in playing catch-up with the ever evolving world of security…
  • It would be more helpful to show the FULL code you have. Your issue could be in the SELECT clause or something else. If I do this, for example: SELECT i.NodeID, c.CDPIndex from orion.nodes i LEFT JOIN ncm.ciscocdp c on c.node.CoreNodeID = i.NodeID I get results showing that the JOIN is working just fine.
  • Is this for F5's? Certainly looks like it. In which case let me suggest you use F5's community to ask and get responses on this...
    in irule Comment by stuartd January 2024