verwin_u ✭✭✭✭✭

Hi @"akanechan" NCM validates it base on ios versions and config settings. If vulnerability report seems questionable. You also need to validate if you have the correct MIST Vulenrability data source. Reference:…

Hi @"evivas-ndc" , As i promote support geeks, my question now is what happed to them Have you inform them that you can identify jumbo packet via cisco show command -- show interface. You can use NPM-UNDP if you know the specific OID of packet size. You may inquire to cisco if they could provide you that oid? Else, best…

hi @"evivas-ndc" You can possible use NTA and NCM: NTA: - you can enable NTA on your 2-3 network devices where these jumbo size traverses. - enable these in your NTA record. https://documentation.solarwinds.com/en/success_center/nta/content/nta-required-fields-sw148.htm InterfaceRx10SNMP ingress interface…

Hi @"ImNishat" , Good day! I agree its a bit consuming. But, it does not limit to which port needs to open. You also need to understand what modules do have and what needs to monitor. Who will be monitoring what. You might not need to open agent ports if your requirement might suffice with the basic ports of snmp and wmi.…

 @"ThoThwack" you can create a custom job and assign it as a report or pull a custom poller and create a custom job for vtp configs. Reference: 1. https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-running-a-config-change-report-once.htm 2. Pulling VTP Information from Switches 3. Simple VTP Mode Report…

 @"ImNishat" Start from utilizing report tool documentation.solarwinds.com/.../npm_ob_create_custom_report.htm

Hi @"ImNishat" @"chad.every" and @"vinay.by" have a correct suggestion. You might mis interpreted it. You need to coordinate this concern to your network team to change the "ip-flow destination" to balance the netflow sources (netqork devices) to your flow collector (mpe or ape). Ref:…

 @"ammartalal" Good day! There are lots of possible reason. But these are the most common. 1. DNS entries 2. Duplicate data 3. Retension References: https://support.solarwinds.com/SuccessCenter/s/article/Performance-Impact-and-Risks-of-Switching-from-On-Demand-to-Persistent-DNS…

Hi @"abalur21" There are lots of possible reasons. The most common are: * Nta service is not running in one of your polling engine.…

hi @"ZakWooldridge" this is 2 things. reporting and duplicate data. for reporting, its best faster if you utilize the flow navigator, save it and schedule it to via report manager https://documentation.solarwinds.com/en/success_center/nta/content/nta-creating-custom-views-with-flow-navigator-sw1200.htm…

 @"lbeaule.consultant" Good day! I think this will fall into a feature request. [mention:9ae70f85f52945eda019ee9f15986eaf:fb5d84b10a5745448a7a45dafc1faa43] But to make sure about VLAN ID's. I highly recommend you raise a ticket to SW support. She's one the best engineer handling IPAM. She really knows the ins and out of…

Hi @"KKLOK" Yes, device creation is native to SW-NCM. https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-create-device-template.htm You may also try to check some of the existing device template available in thwack. Cisco IronPort-1.3.6.1.4.1.15497.1.1.1 

 Hi @"Hiro3" Good day! Both action are possible in GUI thats for sure and its possible to automate it via GUI (one time set-up) via schedule discovery. https://documentation.solarwinds.com/archive/pdf/NTM/NTMAdminGuide.pdf You may open a ticket or ask for a sales engineer to showcase the feature of NTM. At the same time,…

Hi @"tronnuyen" , This seems to be a nta collector service issue. I strongly recommend to reach out to SW support engineer to further check your environment. Prepare your logs for faster transaction with SW support. Regards, 

Hi @"simonb2" Its much faster to create a job to run specific show command. https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-jobs.htm#link4

@"kmkrause23" It will show the same flow in that use case. Duplicate flow will differ on your flow direction configuration. Reference: https://documentation.solarwinds.com/en/success_center/nta/content/nta-monitoring-traffic-flow-directions-sw1234.htm

Hi @"mrldg123" Solarwinds follows certain compatibility matrix. We strongly recommmend to reach out in sw support for proper assistance. Reference: https://support.solarwinds.com/SuccessCenter/s/article/Compatibility-of-SolarWinds-Orion-products-for-installation-and-upgrade-and-End-of-Life-Support?language=en_US…

Hi @"sgoff" This is better if you try reaching out to ncm folks (sw support) for much better and faster assistance. You may refer your crons using the following date syntax https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-understanding-ncm-macros.htm

Hi @"Michal83" You need to verify if ncm server is able to connect to affected devices. Reference: https://support.solarwinds.com/SuccessCenter/s/article/NCM-Error-Connection-Refused-by-A-B-C-D?language=en_US

Hi @"Obedasmah5" This faster if you utilized the flow alert tool and report manager to achive this requirement. Flow alert navigator https://documentation.solarwinds.com/en/success_center/nta/content/nta-configuring-flow-alerts.htm Report manager (assign url)…

Hi @"gunjan1952" I strongly recommend filling a ticket to sw support. Support could help you build device template. They'll be asking you couples of CLI questionnaires to ease the building of device template. NCM folks in sw are one bests ;-)

YES. NTM License is a stand alone. You can install NTM in your laptop or any stand alone machine. From that laptop you can scan any network you like. Eg: Connect your laptop to scan office a network. Once done, connect your laptop to office b network and scan it. Do the same to other and so on...…

hi @"dbauman" good day! this could be achieve by utilizing the "configure flow alert" in Netflow. reference. https://documentation.solarwinds.com/en/success_center/nta/content/nta-configuring-flow-alerts.htm incase you need this report to be send in your email. you may also need to utilize the report manager by sending its…

Hi @"stevenstadel" You may use flow navigator to create your specific report. Once you have your desired report, you may integrate it to report manager to send it to you in your preferred schedule. Incase its a one time report, just use flow navigator and export it to pdf. References: Flownavigator…

Totally agree with @"donrobert5" If problem still persist i strongly recommend filling a ticket to sw support for them to assist you and identify where exactly in wireshark is the problem. 

Hi @"MohamedAbdelrazik" NTA DATA differ base on its granulatily. If you really need to review the actual data recieved and displayed by sw nta. Its better you work with sw support. To do so have a 15minutes packet capture for then to extract and review. Reference: support.solarwinds.com/.../NTA-chart-granularity

hi @"LeBeauUK" its shows never on your last received flow. it means device is not sending netflow data to your nta collector. you might need to work with your meraki vendor to verify if it supports sending netflow data to your nta collector. reference:…

Hi @"MohamedAbdelrazik" you can create netflow alert report. it is located near your flow navigator. reference: https://documentation.solarwinds.com/en/success_center/nta/content/nta-configuring-flow-alerts.htm

hi @"lerdalt" i don't think its possible to identify the received flow per second per interface source. but, for sure you can identify the flows received per seconds by using windows perfmon in your NTA collector. refence:…

hi @"shack" this table "dbo.NetFlowFastBitStringHeap" contain only the cache information of resolved ip's by DNS Resolution of NTA. This is safe to truncate as it will automatically populate every time DNS resolution works. you may also disable the DNS resolution settings. but, your nta reports and charts will only shows…