tpfannes

Comments

  • Yeah, all of a sudden the Security team is all about Solarwinds. Thanks for the link, it's perfect. Though you would think there would be an easier way to do this.
  • bsciencefiction.tv Thank you for the help (and I apologize for my poor typing skills). It worked as expected, but I did get a couple hundred email notifications (it fired off the entire 10 minutes). What I ended up doing is modifying the command to look like this: WHERE CAST (LastSync AS TIME) BETWEEN '11:59:00' and…
  • bsciencefiction.tv, I selected Type of Property to Monitor: Custom SQL Alert Set the Trigger Query to: Node WHERE CAST (LastSyn AS TIME) BETWEEN '8:45' and '8:55' And received the error: SQL Error: -2147217900 - Invalid column name 'LastSyn'. I am running Orion Alert Manager 2011.2.0. Is there a SQL plug in I have to…
  • Bluefunelmental, That will work great. The problem is when I log in (I'm not a member of marketing I'm a member of ITS) it defaults to the Marketing map and I will have to change it back to my default map (ITS). Then when Marketing logs in they will see my map (ITS) and will have to change it back to Marketing, and so on,…
  • All, I finally got it to work (lots of tinkering), this is my config: flow record FR1 match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input collect ipv4 source prefix collect ipv4 source mask collect…
  • Maybe that's why after an hour of Googling it I couldn't find where it was queued. You are correct; I modified the policy and no flood of emails/pages. Thank you!
  • Bluefunelmental, Thanks for the reply. I did create a custom view, I guess I cant figure out how to change the default map. If I select 'Manage Views' and select 'Marketing' -> Edit I get this screen: As you can see the only option I have is 'Map'. The problem is I have created a couple of maps in network atlas and it…
  • Mav, Thanks for the quick reply. I just did a capture and packets are getting to the Solarwinds server. Looking at wireshark output they are on the correct port 2055 (CFLOW) and they are version 9. Thanks, tim
  • Extremely helpful, thank you.
  • Canned report but we have utilized custom SQL queries in the past. I'm not fluent in SQL but if the table is there we can find someone to report on it. Thanks.
  • v_andrewj, If I did that it would never reset correct (so I would only get the alert once)? The device I'm monitoring never goes down. bsciencefiction.tv, I selected Type of Property to Monitor: Custom SQL Alert Set the Trigger Query to: Node WHERE ( (Nodes.IP_Address = '10.0.1.1') AND (CurTime() Between '12:00' and…
  • He wants proof that the actual alerting functionality is up and running. 
  • Thanks, I was thinking something like this (not sure if this is possible with Custom Table): I have mad artistry skills.
  • Nice! Didn't know that was an option. Thank you.