superfly · Senior Network Engineer · ✭✭✭✭✭

Has the device that you're running Real Time Netflow Analyzer on been given access to this firewall?

I use the Syslog Viewer for this. I write a rule based on the syslog that gets triggered when the fan fails. I then forward that email onto the network team.

I used this knowledge base article to fix the issue when I had it but I wasn't using NPM 10.5 http://knowledgebase.solarwinds.com/kb/questions/3202/ Just turned on automatic index defragmentation on the NPM database.

If you edit an alert, the alert will not re-trigger. If you create (or copy) a rule, then it will trigger on what ever the condition is even if it's the same as an existing rule.

How are you running this script?

Add all the devices to the Ignore List. Then go into the Ignore List and select all the devices and click on Remove from Ignore List. Then they should all be re-discovered on the next scan. I've not tried this but it looks like it will work.

I would guess that a syslog would be logged when this occur. I would then alert on that syslog message. I do this for the Cisco chassis switches.

What notifications are you expecting? If the notifications were sent after a restart, that would be due to all the alerts being reset. Do you alerts have the reset tab filled out? If not, then whenever an alert is made active (notification sent), it won't trigger again until it is reset.

I would assume a syslog would be logged for a faulty power supply. So from this syslog create an email alert for it. As for statistics, Solarwinds does provide some power statistics for certain devices and IOS's but otherwise you can write some custom SNMP pollers to get the info you're looking for. This example may get…

Are you monitoring all the interfaces in NPM?

I get a compare email as part of my weekly config backups. At 1am I backup all the Startup configs. At 2am I backup all the Running configs. As part of this backup Running configs job, I get it to compare the running config to the startup config. So once it completes backing up all my Running configs, I get another email…

Are you using the Cisco Adaptive Security Appliance template? I'm using this template to successfully download configs from ASA's. On the template it shows the same as yours

Have you tried to recreate another backup job to see if it runs? Also I read in another thread that some people are having issues with scheduled jobs running since applying HF2. Backup Schedule job is not running.

What do you mean by synchronization of nodes with solarwinds syslog? Syslog just receives syslog messages, I'm not sure what you mean by the synchronization bit.

There's no Download option as they are not in NCM. Have you tried to just manually add them to NCM? You can do this by going to Settings, NCM Settings and then 'Add or Manage Nodes'. Find the node on this page, tick the box for the node and Click on 'Add Nodes to NCM'.

You'd have to set an account limitation for each user. There's about 30 options for account limitations. Pick one that best differentiates what objects they can see. Easiest one to use might be "Group of Nodes" and just pick which nodes you want the particular user to see. I use "Node Name Pattern" as different sites have…

As mentioned you need to delete the interface that no longer exists and add in the new one that you'd like to monitor.

Yes you can. Click on Customize Page and add in the resource 'Report from Orion Report Writer'. Then click on Configure this resource or the Edit button on the resource itself. Then just select the report you wish to show. You can also change the Title of the window to something more meaningful than 'Report from Orion…

What alerts are you talking about? You'll need to provide for details as your description is vague. But generally you have either a , or ; between different email accounts.

This is what I use Node ${NodeName} (${IP_Address}) was reported as ${Status} at ${DateTime} Some of my alerts though have ${NodeCaption} which displays the same as ${NodeName} so I'm not sure what the difference is supposed to be.

The message you need to monitor is actually *Configured from vty*. I only have the logging server xxx.xxx.xxx.xxx command in my config. What output do you get when you do a show log? I have the following. I don't use a loopback address, I'm using mgmt0 interface. You may just need to set your severity level. Logging…

You need to add the node into NPM first and that's where you assign the CLI & SNMP credentials. To add a device for monitoring in the Orion Web Console: * Log in to the Orion Web Console as an administrator. * Click Settings in the top right of the web console. * Click Manage Nodes in the Node & Group Management grouping…

Open Trap Viewer on your server and create a rule to discard the unwanted SNMP trap.

Or are you talking about NCM? You do this in Settings, NCM Settings and then either select Global Device Defaults or Connections Profiles depending on which one you want to change.

1) I hardly visit the solarwinds.com website. Only if I need to log a case or check my licenses. 2) I use the customer portal to log a case which is hardly ever. 3) I inherited Solarwinds when I joined our national team. A quick google brought me to thwack to find the info I was looking for. I joined thwack about 6 months…

On the SNMP trap rule select the Alert Actions Tab. Then click on the Add Action and then select Windows Event Log. Then select Log Messge in Event Log on NetPerfMon Server. That should show it up in the Alerts.

I would just create the 1 job with all the subnets in there. You just have to make sure if completes before the Discovery timeout passes. That way only 1 discovery is ever running at a time. I have about 50 sites nationally and only use the 1 Solarwinds server with no extra polling servers. It's been running like that for…

Check out this clip, it explains all about Best Practices SolarWinds Orion Scalability Best Practices and Futures - YouTube

Anything that you monitor in Solarwinds can be reported on. So it can email you if an interface goes down to an ISP etc. As for maps, you can create these in Orion Network Atlas. You can monitor the link in the map for up/down status. If it goes down, the link will turn red. So I colour all my monitored links in green so…

I'm not sure if that information is shown anywhere but here is the list of oids ASA 5510 OID list · GitHub Let us know what you find.