superfly · Senior Network Engineer · ✭✭✭✭✭

I guess I answered question 1 and 2 so for question 3, what do you have in your Summarization tab? Here you can summarize by week. If question 1 is not answered, then please post up the information I asked for before. Without this information, it will hard to help you.

From memory, I believe you run NCM jobs from the Solarwinds server. Open the NCM application , click on Schedule and select "Create New Job". It should be pretty similar to what's listed above.

All I can suggest is to recreate the user in question.

Yeah but isn't that something you'd do anyways?

There's is no such thing that I'm aware of. The map just shows the status of nodes that you place on it. You can't show a map at a point in time. You have to look at nodes individually (or as a group) on their status over time. However it does sound interesting enough, you should do a feature request for it.

Is there a syslog created when one link switches to the other? Surely something must get logged when the primary interface changes. Have a look through your logs and if there is something that's logged, then you can report on that message.

What have you configured for "ip netstream record"? And what is the configuration for the netflow on the actual interface? This website shows how to configure this up https://www.plixer.com/blog/huawei-netflow-support/

Maybe it needs flash? This is what it looks like

Can you actually see the traps appearing in trap viewer? Sounds like you do get the traps but I just wanted to double check. So there must be an issue with your alert. Did you try changing the conditions tab to something more "generic"? Basically try getting the trap viewer to send you emails for any snmp trap that comes…

Try doing a synchronize in Solarwinds License Manager.

You first need to decide what you want to discard and then create a rule for it. In the Add New Syslog Rule window, you'll need to fill out the General and/or Message Tabs for what you wish to discard. Then click on Alert Actions tab and select Add New Action and then select Discard The Syslog Message.

It shouldn't happen. Could you have another rule in place that is sending you the email? Maybe add in the alertname variable in your email and just confirm whether or not the group email alert is sending you those extra emails.

If you can ping the loopback address, then it should be discoverable by that address. So SNMP is being blocked. Check your ACL's to see if it's blocking SNMP access to the loopback address.

I don't exactly follow what you're saying now sorry. But all alerts (dependencies included) know when to fire an alert off. So it knows if a cable has failed as opposed to an interface being admin shutdown. Please post up your alert and describe what you are hoping to see it will do. I will take a look at it for you. BTW,…

I don't believe Netflow will show concurrent connections.

Bummer, it's back and incorrect. If you like I can stop going on about it as it's no big deal but if you are still trying/wanting to fix it, I'm happy to report back.

I see you've fixed the issue by removing the Last Logged In section nicely played.

Here's my preferences. And today it says my last logged in date is 3 September 2015, just as I expected as it's seeing my local date as 9/3/2015. What is happening is that Thwack is taking by local date of 9/3/2015 (DD/MM/YYYY) and Americanising it to be 3rd of September 2015 (MM/DD/YYYY). So the Last Logged In date is set…

Ok please supply your alert that you think should've triggered. So since the reboot it has no longer worked? Make sure your Solarwinds Alerting Engine is running. In fact check that they are all running. If that's ok, let's check your alert.

There isn't a simple answer. It all depends on your environment. I've read a suggestion on thwack to set it to the 95th percentile over the past month which I think it a good idea. Have a read of this Solved: What is the max bandwidth of a L3 VLAN ... - Cisco Support Community

This needs further information. If you use your trigger like this and then say if a device goes down at 5am, you will get an email at 6am stating this device is down. But the email message will say that the device went down at 6am. Or you can do your alert this way and In this scenario you will still get the email at 6am…

You are talking about NPM, the above question is about removing and adding nodes in NCM. To remove a node in NPM, just click on Manage Nodes, find the node you're looking for and tick the box. Then just click on Delete.

You are correct, when the interface is part of a port channel, you won't see the VLAN info unless you look at the port channel itself. Then you'll see the Assigned VLAN's.

Sounds like something has changed. My guess is that the Type of Property to Monitor has changed.

It's changed since 2011. This is how you do it. Select Customize Page Then add in the following resource. Then save that and go the page and find the newly added resource which will look like. Then click on Select a Report and pick which one you wish to display.

Create a job for downloading configs and set it to occur periodically.

No, it's only applicable on device views.

Sorry yeah I missed the vital word, archive. Only way I know then to compare 2 configs, is by using a file comparison program such as Diffchecker in that case. Cut and paste in the 2 files you wish to compare.

Great! Once you're all good, can you please mark this question as answered. Thanks.

What sort of device is anyone?