cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 9

Logged In user info not available - UDT 3.2

Hi Forum,

We have a new Solarwinds implementation we have Orion Platform 2015.1.0, QoE 2.0, IPAM 4.0, NCM 7.3.2, NPM 11.5, NTA 4.1.0, UDT 3.2.0, IVIM 2.0.0. Our UDT suddenly broke, it was working fine for a week then suddenly logged in user stopped updating and UDT started killing our Domain controllers ( we were getting more then 40K logins to Domain from UDT account every 24hours). Seemed like something was stuck somewhere. We removed all DC's and related credentials and the DCs were happy again (600-800 logins only). We added all the DC's back again but UDT is now not showing any user data. The polling status shows a "Polling OK". I tried purging all data by dropping down the retention to 1 and then restored back again after a few days, still i am not getting any user info. Can anyone help so throw some pointers. Also the Polling Status is always stuck at "Checking Polling Status" see below images.

TIA

pastedImage_1.png

~ManipastedImage_2.png

0 Kudos
4 Replies

Hi Mani,

just wondering, did this happen after an upgrade of any of the named products or just like that? Also, isn't it possible there was a change in AD setup so UDT stopped polling needed events?

Peter

0 Kudos

Hi Peter,

We stopped getting 4769 events from the the AD, AD guys pushed a GP that disabled those events . For every 4768 event we should get a corresponding 4769 event for UDT to log that user info.

Regards,

Mani

0 Kudos

Hi Mani,

without event 4768, UDT can't correlate user name with IP address. Also 4769 even is generated only in case of secure AD configuration: UDT: User Logins, Event 4768 YES, Event 4769 NO .

Peter

0 Kudos

Hi Peter,

Exactly!  Support confirmed that 4769 is expected withing 20secs of 4768 event, else user info will not be logged.

~Mani

0 Kudos