superfly · Senior Network Engineer · ✭✭✭✭✭

So the windows updates made no difference at all. They ended up rebuilding both APE's from scratch and now NCM works. But it seems that RTCD is now configured differently. It looks like the APE's themselves now try and send the email rather than the main polling engine. The APE's were trying to use a really old DNS smtp…

On the syslog server, are you seeing the syslog there from the device which indicates that the config has changed?

I use NCM to back up Riverbed configs. But as mesverrum has stated, you can pretty much backup anything you want by making your own template.

I have just tested your trigger on my Riverbeds and I get the email alerts. This is my poller. And using this email alert, I get the node name and Status which is Healthy. My Riverbeds are CX255 & CX5055.

In NCM it's straight forward. You just search each downloaded config for the statement in question.

With the NCM credentials, when you delete the credential, it tells you which devices it is still associated with and won't delete the credential. I don't monitor Windows boxes so I can't test this theory. It may work for you. Just try and delete the credential, and it should come back and tell you what it is associated…

I've not had this issue before but I've read that to fix this problem instead of creating a new alert, copy one of the out of the box alerts and modify it to suit. Obviously it's a permission issue, so if each alert contained a security tab (like they have in NCM jobs) then it wouldn't be a problem. When you created the…

Here's what you can set in the trap details. Or alternatively you can use the Conditions tab to narrow it down. And in Alert Actions you can 'Forward the Trap' Another thing you can do to help you fill in all the fields, is to right click on the Trap Details part of the trap alert on the Current Traps screen and select Add…

That doesn't sound right. I do sometimes see similar behaviour but I will first receive a down email for the child devices. This can occur if there has been a power outage and the router comes up before the switch which means Solarwinds sees the switch as down. But that's not occurring in your case. What is the rollup…

I monitor uplink ports and any ports that have something worth monitoring connected such as servers etc.

When you hover over the node in Manage Nodes, does Machine Type say Wireless LAN controller? I have 9300 & 9500 and they both show up correctly.

Do you have NCM? If so, you could do a custom job that shows this information and then get it to run on all the 4510 nodes.

You can use Percent Utilization which will show flatlines. Are you sure your network is flatlining? Here's an example of one of my links.

All you need to do is create a job to download all your configs. I have one that downloads all my startup configs once a week. Then an hour later on the same day I also download all the running configs and in that job I compare my running config to the lasted config downloaded so that I can check if others are "writting"…

Not sure if I understand correctly but let's say you want to alert if a link hits 95% utilization, you can do this with Advanced Alert Manager.

Can you actually ping the loopback address from the NPM server? Sounds like you can't which means that you need to take a look at your routing. Once you can ping the loopback address on your switch from the NPM server, you'll be able to use it as the polling address.

Go to Setting and Select Polling Settings. In there you will see (and can change) the default polling settings.

If you've created a custom poller to the correct OID, you could run a report and report on the custom poller's output. You can also display the custom pollers output on the dashboard for the node. I haven't seen anything native for VTP.

This should work for you. It works for me. You should've got an email at 6am stating the node was down. I did a test where I copied my node down alert and changed the alert time frame. So when I turned my node off, I received an email from my normal down node alert. Then when my test alert started, I got another email…

What you've said is correct. You can add whatever you like to your summary page.

I use Syslog alerting for this capability. I alert on syslogs with the message type "IP-4-DUPADDR". Works beaut.

As mentioned, you do this with alert. There's a build in one already called 'Alert me when a node goes down'. You just need to fill in the email details.

Just like you would add in any other device. Go into manage nodes and select Add New. Then put in the ip address and SNMP details etc and add it in.

Because you are shutting down the port, the alerts don't get activated. Shutdown is an admin command. However if you pulled the cable out instead, then your alert should happen the way you say.

Which model firewall?

You could try changing the enable level to "<No Enable Login>".

I've been using Solarwinds for around 10 years and I've never seen this before. Seeing it keeps happening between different versions for you, I think there's something weird just happening in your system. A quick google search revealed no other similar findings as yours. Sounds like there's something random running on your…

It can't be done when the object is a node. But you could look at adding in a CPU object and a Memory object but I would think they would go into warning status as per the polling settings.

Just issue a 'no ntp' before you add in the new ones. So your script will be no ntp ntp server 1.1.1.1 ntp server 2.2.2.2 That should do it.

Can you please post up some pics of what you are seeing?