0 Replies Latest reply on Oct 13, 2017 8:56 AM by shaun_9999

    Missing alerts.

    shaun_9999

      Hello people.  I have a weird problem:  I had a dozen alerts die a couple of days ago, but it indicated that alerts were never sent.  I am the only who has the permission to acknowledge alerts, plus I have the emails sent to me and the helpdesk mailbox.

       

       

       

       

       

      Here are the emails that were sent to the mailbox

       

       

       

       

       

       

      EBUG" 6368 "2017-10-12 01:20:21.734" "Performing SSL/TLS handshake for session 125925. Verify certificate: True, Expected remote host name: cust19890-1.in.mailcontrol.com"

      "DEBUG" 5548 "2017-10-12 01:20:21.765" "Certificate verification failed for session 125925. Expected host: cust19890-1.in.mailcontrol.com, Windows error code: -2146762481, Windows error message: The certificate's CN name does not match the passed value."

      "TCPIP" 3632 "2017-10-12 01:20:21.797" "TCPConnection - TLS/SSL handshake completed. Session Id: 125925, Remote IP: xxx.xxx.xxx.xxx, Version: TLSv1.2, Cipher: , Bits: 128"

      "SMTPC" 3632 125925 "2017-10-12 01:20:21.797" "xxx.xxx.xxx.xxx" "SENT: Server name"

      "SMTPC" 6928 125925 "2017-10-12 01:20:21.906" "xxx.xxx.xxx.xxx" "RECEIVED: 250-cluster-a.mailcontrol.com Hello [xxx.xxx.xxx.xxx], pleased to meet you[nl]250-ENHANCEDSTATUSCODES[nl]250-PIPELINING[nl]250-8BITMIME[nl]250-SIZE 1073741824[nl]250-DSN[nl]250-ETRN[nl]250-DELIVERBY[nl]250 HELP"

      "SMTPC" 6928 125925 "2017-10-12 01:20:21.906" "xxx.xxx.xxx.xxx" "SENT: MAIL FROM:<Noreply@solarwinds.com>"

      "SMTPC" 7108 125925 "2017-10-12 01:20:22.031" "xxx.xxx.xxx.xxx" "RECEIVED: 250 2.1.0 <Noreply@solarwinds.com>... Sender ok"

      "SMTPC" 7108 125925 "2017-10-12 01:20:22.031" "xxx.xxx.xxx.xxx" "SENT: RCPT TO: Supportmailbox"

      "SMTPC" 5136 125925 "2017-10-12 01:20:22.047" "xxx.xxx.xxx.xxx" "RECEIVED: 250 2.1.5 <supportmailbox>... Recipient ok"

      "SMTPC" 5136 125925 "2017-10-12 01:20:22.047" "xxx.xxx.xxx.xxx" "SENT: RCPT TO:<my mailbox>"

      "SMTPC" 6928 125925 "2017-10-12 01:20:22.047" "xxx.xxx.xxx.xxx" "RECEIVED: 250 2.1.5 <dc email address>... Recipient ok"

      "SMTPC" 6928 125925 "2017-10-12 01:20:22.047" "xxx.xxx.xxx.xxx" "SENT: DATA"

      "SMTPC" 6248 125925 "2017-10-12 01:20:22.062" "xxx.xxx.xxx.xxx" "RECEIVED: 354 Enter mail, end with "." on a line by itself"

      "SMTPC" 6248 125925 "2017-10-12 01:20:22.062" "xxx.xxx.xxx.xxx" "SENT: [nl]."

      "SMTPC" 6760 125922 "2017-10-12 01:20:22.219" "xxx.xxx.xxx.xxx" "RECEIVED: 250 2.0.0 v9C0KJ4m017781 Message accepted for delivery"

      "SMTPC" 6760 125922 "2017-10-12 01:20:22.219" "xxx.xxx.xxx.xxx" "SENT: QUIT"

      "SMTPC" 7108 125922 "2017-10-12 01:20:22.219" "xxx.xxx.xxx.xxx" "RECEIVED: 221 2.0.0 rly28a.srv.mailcontrol.com closing connection"

      "DEBUG" 7108 "2017-10-12 01:20:22.219" "Ending session 125922"

      "DEBUG" 6752 "2017-10-12 01:20:22.219" "External delivery process completed"

      "DEBUG" 6752 "2017-10-12 01:20:22.219" "Summarizing delivery result"

      "DEBUG" 6752 "2017-10-12 01:20:22.234" "Summarized delivery results"

       

      Looking at some of the nodes, some display that the node went down, some also pointed that just the component went down

       

      (Node A)

       

      (Node B)

       

      Here's some of the SMTP traffic from the server.  It was sent, but I can't find the alerts.  So what's the deal?  Am I being dense?  Has someone cleared the logs that I am not aware of (I have checked to see who logged on and no one initially logged on to the server to clear the logs.

      No one has access to the admin password.

      So I'm not sure what's going on.  Yeah, I can fix it easily, that's fine, but I don't want a fix, I want to discover why it hasn't done what it should be doing.