superfly · Senior Network Engineer · ✭✭✭✭✭

You will need to make sure that the Solarwinds server has access to the FW via SNMP. What sort of firewall is it?

Feature requests go here https://thwack.solarwinds.com/t5/NPM-Feature-Requests/idb-p/npm-feature-requests That way people can vote it up

I only keep syslogs for 7 days. As mentioned Solarwinds is not designed for huge syslog stashing. You'll need to use another product for that function.

Originally I used option 3 but then when Orion came up with the Thin AP alert out of the box, I started using it. I did modify the trigger status to be not equal to up. Worked beaut for disconnects but if an AP was disconnected for a long time, I would not receive a reconnect email.

Yes I've always used the thin AP alert successfully. I did change the trigger status to be 'not equal to Up'.

Please add your feature request here https://thwack.solarwinds.com/t5/NPM-Feature-Requests/idb-p/npm-feature-requests

Feature requests for NPM need to be added here https://thwack.solarwinds.com/t5/NPM-Feature-Requests/idb-p/npm-feature-requests But I have Firepowers and these are seen as Machine Type Firepower 2110. I'm on 2019.4

I assume you've added the srx345 into NPM. Is there a firewall in between the srx345 and Solarwinds? Or have you allowed this traffic on the srx345?

Stack switches are added into Solarwinds as a single device. Solarwinds should detect that it's a stack switch and add in the extra left hand view as seen in this image. This article gives you all the info. https://documentation.solarwinds.com/en/Success_Center/NPM/Content/NPM-Monitor-Cisco-Switch-Stacks.htm

Switch to SNMP and you should get the stats you're looking for.

This might be obvious but do the devices that failed support the running all command?

This may help? https://support.solarwinds.com/SuccessCenter/s/scp-npm-exam-guide

Your screen shots aren't displaying. Can you please fix so I can have a look at the issue?

Try removing "version 2c" from your snmp-server host command. It looks like snmp-server view is snmpV3 only.

You could try and use these variables instead ${N=SwisEntity;M=IP_Address} ${N=SwisEntity;M=NodeID}

Using syslog is really easy. For the BGP ones I just look for BGP-5-ADJCHANGE in Message Type Pattern. And for OSPF, I just use OSPF-5-ADJCHG*, OSPF-4-NEIGH_ERR* in the Message Type Pattern. If you have any hassles, just post back.

This is great except that it won't detect flapping links as the detection is too slow. Here's my original post on this from 2013 BGP Neighbour alerts.

In my experience I've noticed that when using the alerting tool for BGP status, it is too slow to alert. So you don't end up seeing any flapping as they are up/down too quick for the alert to notice. I do my BGP alerting through syslog. So I'm instantly notified of any BGP changes.

count me in

Awesome! That works beautifully. Thanks for sharing!

That sounds good. As soon as you have the short term fix, please share.

Ah that's good to know. I will give it a test run EDIT: So I gave it a test run and got the following results. My alert rule is set to check every 1min. For the image below, I received 3 emails. The ones I got an email for were 13:25:16, 13:26:17 & 13:27:20. So you can see I missed 3 syslog email between each one that I…

Actually I have a question for you, with the old syslogs I could look at a node's Summary page and in the Node Related 30 Syslog Messages widget, I could quickly and easily see all the syslogs associated with that node. Now that widget just says "There are no messages". is there a different widget I should be using? Thanks.

Ah that's good to know. I will give it a test run

I've just started using LA and I can't do a simple thing like forward a syslog to an email. Yes I can create the rule to fire off an alert, but I can't attach the actual syslog message to my alert. Here's my thread on this. Syslogs in NPM 12.5 Also in the past I was using syslog for instant alerting on link flapping. How…

If you have NCM then use it to report on Cisco device serial numbers.

SSH access on the node popover would be an excellent addition. This is a feature you can currently do in a competitor's product. Even from a map view. Keep up the good work.

This is great. I've added it in on my web page view so it's easy to see what's currently unmanged.

You're alerting on the average transmit or receive and then for 5 minutes. You need to alert on current transmit or receive values.

Thanks. I don't know SQL at all so this is a very handy list. Thanks for sharing.