zyl

Looking forward to this functionality!

in FILTER LOGS BASED ON TAGS Comment by zyl June 2018

Check if your node is present in SolarWinds. I had problems with one machine. Receiving SNMP Traps was fine but without alerting from SolarWinds side. (you can add node as External)

in SNMP Traps and Syslog Traps can raise an advanced alert in NPM Comment by zyl June 2015

Hello, I have fixed this. We had problems with evaluation license (license expiration related to timezone and date) which lead us to discover wrong time settings. Similar problems: https://thwack.solarwinds.com/message/170878#170878 Thanks Nicole for your help! Regards, Matt

in Can’t set correlation for received SNMP Traps Comment by zyl June 2015

moobys How did you manage to receive NetFlow from 5520? I'm getting: NetFlow Receiver Service [PL-L-SWIAPP-L5] received NetFlow V9 flows without any template for decoding them. Configure the device xxx.xxx.xxx.xxx to export an appropriate NetFlow V9 template at 1-minute intervals. See help for details. WLC Software…

in Cisco WLC 5500 netflow Comment by zyl February 2018

I have no problems with other connectors. Security Events (FW) Service Events System Events (PIX and IOS Connector) User Logons (received from LEM Agent) and LEM Agent installed on workstation For those filters above, both InsertionTime and DetectionTime are the same (or similar). Example of InternalNewToolData for Cisco…

in Can’t set correlation for received SNMP Traps Comment by zyl May 2015

+1 You would filter out the whole noise and forward only important messages. Swapping the IP/Hostname, like it was in Orion legacy syslog/trap service, would be beneficial!

in Introducing Log Manager for Orion Comment by zyl June 2018

Hello, Here you go: Remember that this is port-security with "dash" char for Cisco. Regards, Mateusz

in Show Port-Security of multiple switches Comment by zyl December 2013

Hello, Could you please provide sample config? Regards, Mateusz

in NCM Policy Reporter Config Block Regex Comment by zyl December 2013

Hello, Use Blocks in Advanced Config Search: Regards, Mateusz

in Compliance Policy Report - Detailed Results Comment by zyl January 2014

Hello, Unfortunately, it is not possible to get current date/time from switch via SNMP. Instead of monitoring switches for NTP, try to monitor links to NTP Server. I suppose you need this for syslog + maybe some timestaps for configs. Correct me if Im wrong. Is there any other "services" on switch, that actual date/time is…

in OID to get current system date for HP Procurve switches? Comment by zyl September 2013

Hello, I don't know how exactly you want create your script, here is small example: // Loop through selected interfaces foreach (@interfaceItem in @ContextNode.Interfaces) { // we are looking for loopback interface if (@interfaceItem.InterfaceDescription contains 'Loopback') { // For each loopback address foreach (@ip in…

in Mass config change with single variable. Comment by zyl September 2013

Timestamps in "LEM Internal Events" are fine. There is small difference, less than 5 minutes in InsertionTime and DetectionTime. LEM can successfully fire alert on those evens. Problem is with SNMP Traps. I'm filtering by: SystemStatus.ToolAlias = SNMPTrapAlias This is the Filter for all SNMP Traps messages (assigned to…

in Can’t set correlation for received SNMP Traps Comment by zyl May 2015

Dear Jerold, As I said before, negation in NCM RegEx is not supported. You can negate only one character or range of characters. Regarding to Manual (Using Regular Expressions, Character Classes or Character Sets [abc]): CharacterDescriptionExample^ (caret) immediately after the opening [Negates the character class,…

in matching multiple usernames with Boolean rules in NCM policy Comment by zyl September 2013

${CR} Regards, Mateusz

in Simple Reload script Comment by zyl October 2013

Hello, Create script: script ShowSysDescr(NCM.Nodes @ContextNode){ CLI { @ContextNode.SysDescr }} and run against your nodes. This is simply System Description, found in Node Details resource: Regards, Mateusz

in Config template noob - question regarding updating SNMP Comment by zyl October 2013

Hello, It should be: AND (ArpTables.MAC LIKE '00809f%') after your Filter Results (look at screenshot with notepad). Regards, Mateusz

in Need to create report to get ip's of phones in Vlan's on switches through NCM Comment by zyl November 2013

Create two separate Rules, one for Gig interfaces and another one for Fa interfaces. Put those into same Policy and then into Report. Your Report should have two columns and violation should be related only to specific switch model (of course you can have 100M switch with 1Gig uplinks and report will include those).…

in Show Port-Security of multiple switches Comment by zyl April 2018

From UCS Manager: Equipment tab Equipment -> Chassis -> Chassis X -> Servers -> Server X Inventory tab CIMC tab UCS Manager release 2.0, 2.1 or 2.2. You can easily find Config Guide on Cisco webpage. GUI or via CLI

in Solarwinds not able to retrieve UCS information with UCS Central configured Comment by zyl December 2015

Hello, /\d\n! Indicates interface with no configuration (In searching Block: slash, number, newline, exclamation mark) This RegEx expression works on InterfaceTypeX/X/X format. Different rule will be for X/X/XX: /(\d|\d\d)\n! Regards, Mateusz

in NCM Policy Reporter Config Block Regex Comment by zyl December 2013

Hi, Thanks for your response. I decided to move Player on SolarWinds Server. It is working. Those SEUM-User-X accounts should have local admin or be inside Administrators group. Unfortunately, I left with no success using Player installed on my PC. Tried both methods – same results. Best regards, Matt

in Player problems Comment by zyl May 2015

You should check if there is no additional "space" char after a line. You can also try with .* (dot and asterisk) before ending line (\n). Keep in mind that if you select RegEx expression in string, you must use backslash for escape special characters (e.g. parenthesis). Regards, Mateusz

in How do you configure interface compliance rules Comment by zyl September 2013

Hello, NTP fixed. Without success. I have tried with SNMP Traps from my PC: DetectionTime is still different. Should I do another tests? btw. how LEM is parsing SNMP messages? Best regards, Matt

in Can’t set correlation for received SNMP Traps Comment by zyl May 2015

It used to be $150 then company moved to 3x free attempts.

in SolarWinds Certified Professional Launch Comment by zyl February 2018

Please fix the link. It should be LEM-v6.2.0-HotFix2.zip HotFix is also available from Customer Portal.

in SolarWinds Log & Event Manager version 6.2 HotFix 2 - Now Available Comment by zyl November 2015

jreves Sorry, please ignore my comment - I was wrong! NetFlow-Lite is simply a sampling type (minimum 1:32) of flow data. So this means The NetFlow Replicator should be able to forward traffic as it supports sampled flow data.

in SolarWinds Flow Tools Bundle Quick Reference Guide Comment by zyl January 2019

I wish this support the NetFlow-Lite and replicate (transform) to a v5 or v9 format!

in SolarWinds Flow Tools Bundle Quick Reference Guide Comment by zyl January 2019

Hello, Try to use: .*,\s\sload average: \s - stands for whitechar (e.g. spacebar, tab) EDIT: Not working for me, trying to find solution... dbruynb Could you please provide sample config? Regards, Mateusz

in Regular Expression Help Comment by zyl November 2013

Hi, Keep in mind differences between databases in Orion Platform 2014.2 and 2015.1: http://knowledgebase.solarwinds.com/kb/questions/6263/Database+changes+between+NPM+11.0.1+and+11.5+(Orion+Platform+2014.2+and+2015.1 Regards, Matt

in NPM 11.5 rollback process Comment by zyl April 2015

Jodros, 1x A5500 4x A5120 Without problems! When we addedd to SolarWinds some custom pollers were created (for CPU). Also, for NCM Module was created custom Device Template with "super" (no success with RADIUS bypass into level 3 privilege) Regards, Mateusz

in H3C Monitoring Comment by zyl September 2013

Hello, Did you tried debugging this? NCM Settings -> Advanced Settings: Enable Session Tracing Session trace files in Session-Trace directory. Try different upload method (e.g. TFTP). Regards, Mateusz

in Upload config to DELL PowerConnect 6248 & 7048 not working Comment by zyl November 2013

Comments