superfly · Senior Network Engineer · ✭✭✭✭✭

Sorry for being off-topic but are you in The Netherlands? I was born there!

What automated details are you wanting? From your alert, all I see is you getting an email when a serial port goes down. What extra details are you getting over the built in "Alert me when an interface goes down"? Or are you adding in extra information into the email part? This may or may not help but with my interface…

Can you ping the syslog server from the switch? It sounds like the Nexus is configured correctly but it can't see the syslog server.

Good news!

Great news! Can you please mark in "correct answer & helpful answer" (if any) so that this question is marked as answered. Thanks.

Wow can't believe nothing is logged. Have you queried Cisco about it? I'd love to hear their answer. Thanks.

Unfortunately he has not been here since 2017. Best bet is to start a new thread.

Sorry for the late reply, I've been on holidays. Just install the syslog server on your primary Orion server if it's not there already.

Are all three switches turned off at the same time? If yes, please post up your dependency setup and your alert rule.

That's really weird. Have you tried dragging the group 0_SID into a new map and then seeing what it does? If it still doesn't work, I'm out of ideas sorry. You should contact Solarwinds support so they can do a gotomeeting and check out your setup.

You are missing the ( bracket at the start. Here's the full command again. (Nodes.Status=1 AND (Nodes.MachineType NOT LIKE '%37XX%' AND Interfaces.OutDiscardsThisHour > 1000)) But when I ran it, it dropped my Top 20 down to only 3 entries. It took out devices that are not 3750's such as a 2811, 4506, firewalls (that were…

Have you tried to re-create the whole alert from scratch? It's worth a shot.

Can you SSH to these devices from the Solarwinds server but using something like Putty?

I've noticed that as the AP's are lightweight, you only seem to get an up email if the outage was fairly short. If the outage is of a longer duration, it seems the AP is forgotten about so it just appears as a new AP. What are your polling times set to?

Voted

maryan.dmytriv wrote: Here is a command line how to uninstall IPAM 4.6 HF1 from the system Msiexec /package {35799498-505e-47ef-a712-4aa25d1cc09e} /uninstall {1d6bce2d-803b-4787-80fc-375fdc9710f5} /passive and HF2 Msiexec /package {35799498-505e-47ef-a712-4aa25d1cc09e} /uninstall {cbe2f84b-8101-4da5-b962-a626f6dab527}…

I have the exact same dll versions as you. And I also downloaded "HF2" or so I thought. These are the 2 downloaded files. They both have the same name but are different in sizes. And when I run it, I too get the message that I'm up to date already. I will try to uninstall "HF2" and install the real HF2. Will the real HF2…

Cool, if this all works then please mark this question as answered.

He's talking about logging onto your Solarwinds server. Then clicking on Start, All Programs, Solarwinds Orion, Syslog and SNMP Traps, then select Syslog Viewer. Once the application opens up you'll see the Syslog Viewer. Then click on the icon I've circled in this image. Also check how long you retain syslog messages for.…

As above, please make sure there isn't another rule in play. Let me know how you go.

The only way to verify it is once you've changed it. I have it set up that way and it all works perfectly. I then have users either use a Solarwinds account or I've given their AD account rights to Solarwinds. Remember as well to give NCM access within the Manage User section as per below. So set up all your accounts,…

I agree. I've not found any use for this tab at all. It too confused me when I first started working with Solarwinds.

interfacealias <> '%Tunnel%'

You could try and connect via snmp manually. The device needs to be able to be accessed by Solarwinds via SNMP otherwise Solarwinds can not report on it.

I guess you're not seeing the packet loss due to no packet loss continuously for the polling time. I think even at 10 seconds, you'll still miss the packet loss. Check the duplex settings on the node. And what is the node?

justa2e2 wrote: Ok...after spending a few hours this morning looking at it I have found that when I test credentials from the manage credentials engineers toolset I don't see any traffic leaving from the server in my wireshark captures. The windows firewall is turned off. I can see the ICMP traffic leaving the server but…

Your alerts look ok. Unnecessary alert supressions is done via dependency groups. Have you created a group where the interface is the parent and the nodes are the child objects? Then if the parent goes down, alerts for the child objects are supressed. This concept happens automatically with nodes and interfaces. So if a…

I agree with lcsw2013. it should be configured to monitor on "node". i don't believe server's CPU just shoots up to 100% every 30 mins. You should check on the server to see what it thinks. If it also shows CPU going up to 100%, try and see what's causing the spike. If it's 'normal', then you'll have to throw extra…

You should be able to find all the individual files on the Solarwinds server. Check in the settings where your files are going.

In the SMTP settings are you using a DNS name or IP address? If using the DNS name, try the IP address.