thamizh85

I am assuming that you are doing regular expression match. The choice of newline characters varies from device to device. Even among Cisco devices I have found newer versions are using just '\r' whereas older versions have \r\n. The most reliable way to identify why the regex failed is to open the config file using…

We would really like to see Solarwinds being more intelligent in detecting abnormal states. There are many indicators when something goes wrong on the network. NPM should be more flexible in detecting these conditions, not relying on administrator to hardcode the anomaly logic (ICMP down or SNMP down). Even if required to…

I tried this option before posting here. For some reason that didn''t work either. That made me wonder if this is some restriction regarding AD authenticated users to connect to SWIS API.

SDK is 1.6, Orion is 10.3 I am actually interested in connection to Cirrus which is running on NCM 7.0

Looks like I need to move to 7.x very soon! But I see another problem, the management IP address for some of our devices are different for NPM and NCM (the reason being NPM uses an additional poller located on-site whereas NCM uses the remote IP address). Does this setup permit this double IP address somehow or I should…

Thanks Richard! I am running NPM 11.0.1. Do you know how APE transmits log messages to DB? Using UDP/514 or other mechanism? If it is TCP, at least it offers the benefit of reduced packet loss.

Can you tell me how to collect these data? I do have Anti-Virus software but can't turn it off due to lack of rights.

I want the output of each executions on a single file so that I can analyze. When I run from NCM GUI, the output is on individual tabs. Imagine consolidating the output from 900 nodes and running awk on that.

These are quite good apart from the jarring color choice. Can anyone tell me how to get arrow connectors like above and how to get different arrow heads for transmit/receive.

When it comes to multi-line matches, another issue to look out for would be the line break styles. Mostly we try to match with \n but there are config files which uses UNIX EOL character "\r\n". So as a rule of thumb one should use (\r)?\n when trying to match newline characters. If you are not sure, open the config file…

Thanks! I didnt notice the new type of property.

It does, but how do you make it working in a production environment? In our setup, if a new Monitoring station needs to manage our devices, lot of changes need to be done such as updating SNMP ACL's, Firewall rules, Syslog hosts, snmp-server hosts etc., Testing it over a few local devices is also not satisfactory, since…

Didn't realize it is that simple! Thanks!!

Update: I was able to get in touch with team lead who lined up an APE to work with us. He even offered to arrange an APE to review our upgrade preparation going forward. The chasm between the skill level of APE and first level support is huge and needs bridging. For something as simple as cleaning up left over programs…

Regarding the licensing issue that I faced, it was flagged way back in 2013 and yet to be resolved. It looks like a simple license problem yet Solarwinds would like its customers to call support and get temp license key, instead of fixing it. I would not be frustrated if I was able to contact support in the first place.

The MIB for Interface status is: "1.3.6.1.2.1.2.2.1.8" For last change time, the MIB is: "1.3.6.1.2.1.2.2.1.9" measured as timeticks (100th of a second) since sysup. To calculate the time since last used, we need to subtract it from sysup time ("1.3.6.1.2.1.1.3.0") and divide by 8640000 to measure in days. @Network_Guru:…

I wish I got this answer earlier. I was looking for the exact same solution before. http://thwack.solarwinds.com/message/189391#189391

Yes, there syslog messages generated but they were more specific to the problem. I need a more generic method to catch the symptoms that the device exhibhits, such as failed SNMP polls. In any case, I think there should be a separate alert message for failed polls, since in a bulk deployment there is possibility that some…

Goliath wrote: Hi - First thing, you may need to upgrade the IOS version of your 3750 stacks. We had the same issue with a number of them last year, and it turned out to be a couple of bugs that meant the SNMP engine on the switch slows and then stops responding: other indications are that a sho interface status command…

There are several occasions when I want to stop the monitoring. For instance if I have to do some task on my DB, I need to stop the application before taking down the DB process. I could sense the technical problem here that both FoE and Service manager seems to be de-coupled from each other and so their actions can get…

Yeah, it is because of the terminal paging. As recommended, if I use the correct Device template it should setup "term pager 0" automatically. I have set it up and waiting for some config change to confirm it works. You should also try to fix up the template since it has an option to execute the terminal pager command…

\s* will match zero or any number of occurences of White space and by definition it ignores all differences in the lines. In practice that is what I observed in the config change report as well. The correct definition should be ^\s+$ but for some reason the white spaces are not matching against this regex. And that is why…

Yup, if Interface flapped polling cannot spot it, traps would be the way to go.

I had investigated that option earlier, but those alerts rely on LastSycn value in Nodes table, which gets updated even for a successful ICMP poll. As you can ping the node, these alerts will not be triggered even if SNMP polls fail. And this is the exact scenario I am keen to monitor.

NPM cannot provide such report. If you have engineer's toolset or other SNMP tools, you can try to automate the procedure explained here: OTOH, if you have NCM installed, it is much easier to pull out automatic report. Others have created SQL reports to automate this. For instance: Note that this relies on the inventory…

Bump!

Thanks tdanner​. Sorry my question may be misleading. I am aware of the Cirrus.ConfigArchive entity, Perhaps the challenge is just a matter of constructing the SWQL query. I am looking at something like this: SELECT TOP 1 Config from Cirrus.ConfigArchive C WHERE C.NodeID IN (SELECT NodeID from Cirrus.Nodes WHERE…

Thanks! That worked!

Check the alertname filter: alertdefinitions.alertname like '%updown%' Update the filter to match the node down alerts that you are interested in. you can check which alerts will be fetched by this report by using the query: Select AlertName from AlertDefintions Where AlertName like '%updown%' But I am not sure this report…

It works but I don't think the output of Show Run is suitable for recovery purposes. It contains lot of non configuration related items such as System uptime etc., TFPT seems to be the best way to backup WLC config.