tonyreel · Mr

What thaw said, the one thing I would change from above would be to use the application ID instead of the name. That way if the name ever changes the alert will still work.

Hi foonly​ Thanks for the updates. I hate it when you think you have something fixed and then it comes back again I am continuing to work through my case with support and development. They have asked for details from the "ActiveBackupStateStorage" table - which I believe hold the flow template details so I think they have…

Hi foonly​, Thanks for the update. I was doing a similar thing this morning and couldn't find the 'phantom' interfaces in the captures either. The flow captures from the ASA say 'no template found' and in my support case the engineer is saying that means it is an issue with the ASA and for me to contact cisco. Tony

Hi foonly, Did you get any resonse to your case? WE have the same issue at the minute. Thanks T

Hi, Thanks for replying. I have opened case 183379 shortly after posting here as I can replicte the issue on the solarwinds website demo Orion install so I don’t think this issue is isolated to our install. Open Orion demo website Go to IP SLA Select any of the ICMP Echo operations (IcmpEcho – Core -> Bastogne) Click on…

I was disapointed to see the 'list resources' option gone from system manager, though I do understand the reasons - not that i am happy but i understand :) But it would be good if the web 'list resources' also listed the interfaces/volumes that are already assigned to that node. For example if we have a volume D being…

Awesome, You are correct sedmo - although its * and not % ;) I have used the follow so as to also include anything that is Unknown as well. StatusDescription Like '*Down*' OR StatusDescription Like '*Unknown*' AND UNMANAGED=0 AND Status<>11 Thank-you. You don't happen to have a solution to putting the alerts into a tree…

I had to use that workaround a few months ago and it did the trick.

ok my mistake. What I should have said was: I want to filter the Applications tree so that it shows Application operations that are not up

Node down tree is a great idea. 

I think sonar.exe will do the job. I have a feeling this might be part of the management toolset tho, so hopefully you have that.

Hi Jasper, Here are a few screen shots of the 3 alerts we use. We use 3 separate alerts so the trigger time can be different (volume is longest as it is polled less often) and the alert text is also different. Basically our 1st line checks if the device is working ok as when a server hangs it can continue to respond to…

Thanks for sharing

Was just looking at this tonight. I found this article and says if you face the "Unexpected error occurred. Call cancelled" message, you need to clean all *.tmp files and increase the polling interval and timeout from 300 to 600. Large number of .JET files in C:\Windows\Temp - SolarWinds Worldwide, LLC. Help and Support I…

Support have replied with the below hotfix. I have applied the fix and my first test has been successfull :) I am now waiting to see if APM will sort itself out or if I will have to reapply the monitors.

Hi Craig, You need to add the action "Stop Processing Syslog Rules" to the same rule that discards the message. The parser runs through all the rules from top to bottom unless it is told to stop by a triggered rule, so make sure your discard rule is above any other rules that forward messages.

So we are facing an upgrade situation which I don't think is covered in any of the scenarios I have seen and wonder if anyone has any advice. We have NPM 12.1, NTA 4.2.2, NCM 7.6, SAM 6.4, VNQM 4.4.0, SRM 6.4 and will add VMAN during this upgrade. On 1 x PPE, 8 x APE, 4 x AWS, 1 x FSDB We have two complications to get…

So we disabled both the DNS and NetBIOS options and my word what an improvement. The summary page load times went from >60 to <10 and all the other netflow related resources also had a massive boost. Can't believe we lived with that pain for so long. As I said in the original post because of our NATing the lookups would…

One other area that came up when reading the various help docs on improving NTA performance was re-indexing the Netflow tables in Orion. Re-index NetFlow tables in the Orion database - SolarWinds Worldwide, LLC. Help and Support Has anyone done this and noticed an improvement - is there a way of checking it needs done?…

We also faced the same issue and had to remove the events resource from our customers views. We have also noticed that Syslog and Trap messages where being related to the incorrect NodeID and therefore visible to the wrong customers. We believe this is due to the Polling IP also being a registered IP on another customers…

bit of a long shot, but check add remove programs and make sure there is not an old NCM program still there.

Hi Mark, Did you ever get a solution to this? Currently we have an internal account for each customer (made easier as accounts are controlled via AD groups) but its a pain logging in and out. One option is we could pass the limitation via the URL as you suggested above. Or if we had a way of quickly changing internal users…

We have also been waiting years for this. I can see it has been talked about for some time and I did notice the percent error stat appear in perfstack. Looking at the last post in this idea link it looks like there is something in SQWL. Now to get it into an alert...

Hi Guys, I know this is an old post but it is relevant to what I am working on so thought I would give it a shot. We are introducing an alert to detect when an AP goes into an unknown or down state. It looks like we need to adjust the setting so that Orion does not remove the unknown APs. But how does it work when an AP is…

Hi mdriskell, I believe if you use the old discovery .exe that is in one of the solarwinds folders that it works. I have not done it myself but seen it discussed. not sure what the name is. Ill have a look

Hi, This was also happening on our APM 2.5. We upgraded to APM 3 about a week ago but it was still happening. I thought it may have been due to the poller being overworked so tonight we spread the load accross some of our additional pollers. Unfortunatly I am still seeing the issue. There does not seem to be any obivous…

mmm, I wonder would this work: Rule No 1. Match against any syslog message. Trigger threshold is set to 100 in 1 min and "suspend further alert actions" is set to 5 minutes. Alert Action is to send an email saying Syslog parser is overloaded. Rule No 2. Match against any syslog message. Trigger threshold is set to 100 in 1…

Hi, Did you get a solution for this? I would be very interested in the outcome of your support call. Thanks T