superfly · Senior Network Engineer · ✭✭✭✭✭

If you've added in your AP's as separate nodes into Orion, then it will be using Node Polling interval to check the status. But if you are looking at the AP's as part of your WLC, then it's using Statistics Collection interval to get details on the AP.

There has to be a difference. You should be able to modify email alert action with no worries. To me it sounds like the SMTP server details are not filled out on your template, or time of day is not configured correctly. But to know for sure, please post up a picture of each of the 5 tabs in the E-Mail/Page Action trigger…

Can you please post up the email part of your alert? I'd like to see how you're calling the node details. Also if you rename a Cisco device, NPM will automatically update the name once the device is repolled. I'm not sure though if your device is a Cisco as you've not specified.

You could create a tunnel interface at each end and monitor the tunnel on your map. So if the tunnel goes down, link goes red. Another option is to use UDLD.

As mentioned compliance reports are the way to go. You just search for a string and it will report back on it. So it's not an alert as such, it's a report you use for what you'd like to achieve. You can also run jobs where you can execute a command on all your devices such as 'show ntp associations' and then you can look…

I personally didn't have much luck with the Routing Neighbours alert as the polling can't be made to 1 second so flaps are missed. So I report on the BGP down syslog message. I use syslog viewer to look for BGP messages and email me accordingly. That way I don't miss any BGP changes at all.

Have a look to see what you've configured in the IPAM Settings section. In there you can configure the "Max number of Simultaneous Scans:". Mine is set to 2. If you're scanning heaps of ranges at the same time, it will put extra load on the server.

Do you have other identical firewalls that you can backup successfully? if so, then you'll need to get your credentials checked.

Yes you can definitely alert on interface utilization. I've set an alert for all my WAN links to alert me if utilization is over 90% for a continuous 10 mins. It email me when that occurs. In the email I include a link directly to the interface, so you can just click on it and using NTA see what's causing the high traffic…

I've realised now that other Admin users are clicking on the Dismiss Message button which means I no longer get to see the alert. Anyone know how to stop this? Or allow me to see what the previous messages were?

Your results on the ping response time should be the same provided your machine and the Solarwinds server follow the same path to get to the destination. Do a traceroute on both your machine and the server and see if the paths are the same.

Does Netpath work ok if you trace a path to a node or device where there's no firewall in between it and the source?

I assume you've configured this So what is the actual problem? Solarwinds fails to connect to device via SNMP? If so, check settings and see if there's a firewall or something inline blocking the snmp traffic.

Normally on the right hand side there would be a Export and/or an Edit button. But your image has that cut off. What sort of node is it? And if you click on Customize Page, what is this view called?

Easiest way is to manage all the device with the same username and password that only Orion uses. Then all you need to do is change the password for it. This is done in NCM settings and select Connection Profiles (in Global Device Defaults). Or alternatively you can just select all the device in NPM, click on Edit…

You are correct in saying that the Top XX Netflow Sources by % utilization is indeed limited to 100. You can put in a feature request have to this increased. Post back here when you done and I'll vote it up. But in the meantime if you can add a key word to the interface description of each Netflow interface such as the…

Can you post up a screen shot? But firstly are you sending netflows to the server? If not, configure some routers up to send their netflows to the Solarwinds server and then open the TAB again.

Congratulations! I've got number 3 due in August. The other 2 are 12 and 6 so it will be hard to get back into the swing of things. Enjoy!

Check out this clip. It gives Best Practices for Solarwinds SolarWinds Orion Scalability Best Practices and Futures - YouTube

I used to just run a job each day that compared all the startup and running configs to see if they were the same. If not, then I'd have them listed in an email. I would then execute a "write" job to all those devices.

Hi, just follow these steps Go to Settings > Network Sonar Discovery. Create a new discovery, and enter the credentials. Note: When prompted for the Network Selection, select Specific Nodes Discovery type from the box on the left. Copy in the IP addresses from your spreadsheet. Note: One IP address per line, with no other…

Try removing the email alert from your Trap Viewer rule. So in trap viewer, you just have the "excute and external program" only. I've you'd like an email, turn this option on in NCM Settings (see image below), then in the Real-Time Change Detection settings tick the "Include Real-Time Notification details in email and…

This may help Add devices to NCM You can find nodes how every you wish in Manage Nodes and then modify them all at the same time.

The default settings for RTCD should do the majority of Cisco devices. Does it work for any of your cisco devices? For me, I only had to custom write a RTCD rule for the Cisco Nexus devices. I do it via the Syslog Viewer. (you can also do it via SNMP) Do your devices send the appropriate config update syslog to Solarwinds?…

This might be an obvious question but is netflow configured correctly on the node?

When you ping these devices, what sort of response time are you getting? If it's always <1, then the chart will look like it's recording nothing.

What does it show in License Manager? Does it still have DL1000 or does it now show DL3000? And what does it have in your customer portal? Does it show the DL3000 and does it show your server as being registered? If it all of the above show correctly, then I'd log a call with Solarwinds. I just updated my NPM license to…

Check to see if SNMP still works on the device. Go into 'Edit Properties' for the node and click on the the Test button beneath the Community String settings. If that works, then the ifindex has changed. You could use the command "snmp-server ifindex persist" to stop them from changing. If that doesn't work, then make sure…

Is there any device like a firewall between the Solarwinds and SMTP server? And does this happen to random nodes or the same ones each time?

Some excellent advice here to help you on your knowledge journer. You're lucky though as Solarwinds is a very easy program to get going on. The more you dive into it, the more you will learn.