superfly · Senior Network Engineer · ✭✭✭✭✭

Have you got a bandwidth statement on the interface itself?

daveb7114 wrote: Pravin68, I notice from your JPG that the second condition is not indented. That's correct. The Xmit & Recv entries need to be indented for it to work.

Use this expression Message like '%fd read error%'

They've had 4 go's at it with the last one being a full reinstallation of 1 of the APE's. Since then, this APE has been down. They now think it's due to the windows security updates being different between main poller and APE. So I'm in the process of updating the APE.

Hi sja​ I only posted this message yesterday just before I went home for the day. Have you got the same issue? I logged ticket #00424873 just now for the issue. I logged it as a system down so hopefully I'll hear something back soon.

You should make a new discussion for this as this one is marked as answered so not everyone may open it anymore.

I've monitored WLC's in the past with no issues. In regards to the AP you disconnected, did it disappear out of the WLC?

I had a look but I can't see how it can be done. If no one else replies then log a feature request for it.

Yup you can just create a group in AD and add all the users to that. Then add that AD group into Solarwinds and set up the group either using mine or nathan's suggestions.

adatole wrote: To my knowledge, the device stats (CPU, RAM, etc) are purged the night after the delete. Meaning: When you delete the node, the records from the nodes table (and possibly the "holy trinity" tables - nodes, volumes, interfaces - are moved to a temporary "deleted" table (relatively easy to find if you dig…

Excellent, your syslog is receiving the messages so now you just need to set the alerting up. So go into syslog viewer and into View and select Alerts/Filter Rules. Mine had created a rule called NCM Rule: Cisco IOS Realtime Change Notifications. If you don't have it then Add New Rule. General Tab: Give it a name DNS…

Yup and it no longer gets polled whilst in unmanaged state.

Yup sure do. I've selected Netflow Flow History and picked the ones I want, but then I get that error.

But SCP is free.

That makes it tricky. Unless you can have 1 non changing account in TACACS that Solarwinds can use, otherwise I'm not sure what you can do. Might be best to log a call with Solarwinds.

Only downside is that you don't see what period the device is unmanaged for. If you create a report to show unmanaged devices and the period they're unmanaged for, you can display this resource instead. I use this report Unmanaged Until Report

I've just stuck with using syslog for this (both OSPF and BGP). It's quick and reliable. Anything involving the alerting engine, comes with a time delay - so it doesn't pick up flapping links.

Craig Norborg wrote: How do you have your credentials set in "Edit Node"? I find if you can use "SSH2" for "Execute Scripts Using", "Request Configs Using" and "Transfer Configs Using" it tends to work the best. I agree with this, I have my SSH profile set up like this.

You've replied to a 10 year old post. Solarwinds has had parent/child functionality for years now

You are using an old version of NCM so it may not have the Session Tracing option. If this has all been working fine and recently failed, you should log a support case with Solarwinds. If it has never worked, then try reloading NCM again.

Have you tried logging on the user on another pc where they've never logged on?

How often do you backup your configs? If daily then this may work for you. I get a Changed Config report as part of my backup of the configs. (see image below) Basically I backup the Starup config first, then an hour later I back up the Running configs and as part of that task I compare the Running config to the Startup…

Glad you found it!! Can you please mark your question as answered? Thanks.

Yup that's correct. You could label the interface to the AP with something like "Link to AP". Then in your filter you can have interfacealias <> 'Link to AP%' That will stop showing the interfaces in the chart that have Link to AP as their description.

Only thing that comes to mind is that the node wasn't down for 5 mins which is why you weren't alerted the first time. Whenever checking alerts, make the settings so that it will alert more often so in this example you set the trigger action for say 15 seconds, that way you can see if your alert works as most nodes will be…

Excellent. Can you please mark this thread as answered unless you need more info

Shahram wrote: If this works then my question would be how to get an alert based on a specific wording in the trap message. Did you try what I suggested before? "One more thing you could try is rightclicking on the Trap Details section of the alert you're interested in and select Add Rule. This option adds in all the…

Are you monitoring it via ICMP only or ICMP & SNMP? If you're using both, it sounds like there's an issue with SNMP getting to the device. Maybe the community name has changed or access-list has been modified.

Craig Norborg wrote: You can't compare configs from different routers I believe though within NCM. As Jiri mentioned you can do this. I'm still using the GUI tool on the Solarwinds server. On the left hand side in NCM I just highlight the configs from whichever devices I wish to compare (hold down the control key as you…

Which version of NCM? I'm using 7.1.1.