superfly · Senior Network Engineer · ✭✭✭✭✭

This is a self cleaning process so I'm unsure as to what you are worried about. This information is cleaned out once a day. Unless there's a "clean out instantly" option, there's always going to be expired IP addresses. It's the way it is supposed to work.

What have got you "Delete expired data" in Database Settings set to? Once a day?

adatole wrote: "Suppress" is the Alert item I wish would go away. It does not work the way ANYONE things it is supposed to. Specifically, the rules in THAT tab do not cross-reference the rules in the trigger tab. I totally agree. That tab needs to be re-written or removed.

Yeah I was just gonna say, do you do any work? My view of world has improved dramatically in the last year. For many years I was in an office that had windows but I was not near one. Then I started a contract where I worked in an office with no windows. Then I got a window view on a Level 1 office. Now I'm in a building on…

Where do I find this export button?? This is what I see in Log Viewer.

Yup what Detroiter has said is correct. And also remember to modify the email message for the Reset Action.

You can use Solarwinds IPAM to find duplicate IP address. It comes with a build in alert.

I agree with this. Post up the view. As mentioned most widgets are able to be filtered in what they show.

The original question doesn't make any sense to me which is why I didn't comment. Have you played around with this Tab?

I tested this for the OP and found that setting the time on the Solarwinds server to 24 hours does not change the alert displayed time. So I tried it on my local machine as well and again the alert displayed time did not change. So I'm not sure where it is pulling the clock info from. If no one else replies, open a case…

I use syslog for alerting on OSPF failures. Can you manage either end?

I do the same. I've just created custom fields that get filled in for each site. Once it's all set up, it's easy to maintain.

^^ What he said.

I've changed mine the SNMP polling so I'll see how that goes. Thanks for the tip.

I increased my polling time but it just made the up/down alerts happen less often but they still did happen.

I get exactly the same thing. Since I made the Node Status Polling 5 mins we are seeing less of these down/up alerts. I don't know why Orion fails to see it on occasions. I'm assuming the device is too busy at the time. I just ignore them, hopefully they'll be upgrade to Palo Alto's in the near future

Maybe the cause is this? All interfaces showing status as Unknown - SolarWinds Worldwide, LLC. Help and Support

My original journey sounds pretty similar except someone had set up a basic config of Solarwinds. I then kept building on it. It too was a single box with everything on it inc NTA database. Then eventually I moved databases onto a proper SQL environment and virtualised the server. At the end it was still a single server…

As holyguacamole mentions, have you got UDT?

I'm using this But this failure does not show up in the report. In the report I get entries like this But when I go to the node and look there I see this Why does the report say critical? Thanks!

Double check your SMTP setting in the Reset Action "Send an Email/Page".

Most cisco device will log a syslog alert for a power issue. So make sure you are sending those syslogs to your Orion syslog server. e.g logging trap notifications logging 10.10.10.10 <- ip address of syslog server Then in Syslog viewer on the Orion server go into View and select Alerts/Filter Rules. Add a New Rule and…

All you need is logging server x.x.x.x and set the correct severity level. This has all the details Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.0(2)N1(1) - Configuring System Message Lo…

Have you made sure that you get a syslog from your Nexus 5K each time you make a change to the config? Unless a syslog is received, the syslog rule won't work. If you receive the syslog, please post the details of the syslog here.

I don't think that's possible. These are the only options related to your question. I'm still using the GUI version of Advanced Alert Manager.

Only as a script.

I'm using Google Chrome on a desktop PC. But I tried it in IE as well and same deal. I've found the same as remi f‌ that the T (in THWACK) and c (in community) do have the link. I didn't notice that yesterday. I'll use that for now

How have you got it configured? I run mine out of hours and have no performance issues.

Have you checked your browser settings on the Orion server as per Pavel's suggestion? Go to Tools, Internet Options. Click on the Languages button and you'll see the following. Make sure the Language is set correctly to a language that uses mm/dd/yyyy.

Excellent, I thought I was going mad not being able to find the option. Unfortunately I don't have the resources to be involved in beta testing but I look forward to its release. Thanks.