superfly · Senior Network Engineer · ✭✭✭✭✭

I personally didn't have much luck with the Routing Neighbours alert as the polling can't be made to 1 second so flaps are missed. So I report on the BGP down syslog message. I use syslog viewer to look for BGP messages and email me accordingly. That way I don't miss any BGP changes at all.

Have a look to see what you've configured in the IPAM Settings section. In there you can configure the "Max number of Simultaneous Scans:". Mine is set to 2. If you're scanning heaps of ranges at the same time, it will put extra load on the server.

Do you have other identical firewalls that you can backup successfully? if so, then you'll need to get your credentials checked.

Yes you can definitely alert on interface utilization. I've set an alert for all my WAN links to alert me if utilization is over 90% for a continuous 10 mins. It email me when that occurs. In the email I include a link directly to the interface, so you can just click on it and using NTA see what's causing the high traffic…

I've realised now that other Admin users are clicking on the Dismiss Message button which means I no longer get to see the alert. Anyone know how to stop this? Or allow me to see what the previous messages were?

Your results on the ping response time should be the same provided your machine and the Solarwinds server follow the same path to get to the destination. Do a traceroute on both your machine and the server and see if the paths are the same.

Does Netpath work ok if you trace a path to a node or device where there's no firewall in between it and the source?

I assume you've configured this So what is the actual problem? Solarwinds fails to connect to device via SNMP? If so, check settings and see if there's a firewall or something inline blocking the snmp traffic.

Normally on the right hand side there would be a Export and/or an Edit button. But your image has that cut off. What sort of node is it? And if you click on Customize Page, what is this view called?

Easiest way is to manage all the device with the same username and password that only Orion uses. Then all you need to do is change the password for it. This is done in NCM settings and select Connection Profiles (in Global Device Defaults). Or alternatively you can just select all the device in NPM, click on Edit…

You are correct in saying that the Top XX Netflow Sources by % utilization is indeed limited to 100. You can put in a feature request have to this increased. Post back here when you done and I'll vote it up. But in the meantime if you can add a key word to the interface description of each Netflow interface such as the…

Can you post up a screen shot? But firstly are you sending netflows to the server? If not, configure some routers up to send their netflows to the Solarwinds server and then open the TAB again.

Congratulations! I've got number 3 due in August. The other 2 are 12 and 6 so it will be hard to get back into the swing of things. Enjoy!

Check out this clip. It gives Best Practices for Solarwinds SolarWinds Orion Scalability Best Practices and Futures - YouTube

I used to just run a job each day that compared all the startup and running configs to see if they were the same. If not, then I'd have them listed in an email. I would then execute a "write" job to all those devices.

Hi, just follow these steps Go to Settings > Network Sonar Discovery. Create a new discovery, and enter the credentials. Note: When prompted for the Network Selection, select Specific Nodes Discovery type from the box on the left. Copy in the IP addresses from your spreadsheet. Note: One IP address per line, with no other…

Try removing the email alert from your Trap Viewer rule. So in trap viewer, you just have the "excute and external program" only. I've you'd like an email, turn this option on in NCM Settings (see image below), then in the Real-Time Change Detection settings tick the "Include Real-Time Notification details in email and…

This may help Add devices to NCM You can find nodes how every you wish in Manage Nodes and then modify them all at the same time.

The default settings for RTCD should do the majority of Cisco devices. Does it work for any of your cisco devices? For me, I only had to custom write a RTCD rule for the Cisco Nexus devices. I do it via the Syslog Viewer. (you can also do it via SNMP) Do your devices send the appropriate config update syslog to Solarwinds?…

This might be an obvious question but is netflow configured correctly on the node?

Point 1: Is the node in NMS? If it is, are you saying it shows as green when it is down? Point 2: Same as point 1 For a node to show up/down in NMS, you need to be monitoring it in NMS. Best way to monitor is to use ICMP. If you manage the device by SNMP, you be able to alert on interfaces etc as well. Again if you monitor…

When you ping these devices, what sort of response time are you getting? If it's always <1, then the chart will look like it's recording nothing.

What does it show in License Manager? Does it still have DL1000 or does it now show DL3000? And what does it have in your customer portal? Does it show the DL3000 and does it show your server as being registered? If it all of the above show correctly, then I'd log a call with Solarwinds. I just updated my NPM license to…

Check to see if SNMP still works on the device. Go into 'Edit Properties' for the node and click on the the Test button beneath the Community String settings. If that works, then the ifindex has changed. You could use the command "snmp-server ifindex persist" to stop them from changing. If that doesn't work, then make sure…

Is there any device like a firewall between the Solarwinds and SMTP server? And does this happen to random nodes or the same ones each time?

Some excellent advice here to help you on your knowledge journer. You're lucky though as Solarwinds is a very easy program to get going on. The more you dive into it, the more you will learn.

Please post in the correct forum. SAM - Server & Application Monitor And yes you can monitor space.

You could do what mharvey has suggested or you could add in a bandwidth statement on the interface. Solarwinds will use it to set the interface speed automatically.

Does this help? Success Center

Sounds to me like once the alert has been triggered, it doesn't reset at all. Which means you will get no more alerts until trigger is reset. To check if I'm correct, open Alert Manager and select View, then Active Alerts. If your alert appears in this list, it will not trigger again until is disappears out of the list.…