Does anyone know if the Orion products are compatible with SQL 2008 SP3?

On my DB servers, I have overridden global thresholds for memory as they constantly run 98% and higher. On the Node Details view, there are no child status indicators on the node's status as the custom thresholds are not violated (99.54 & 100% % custom node memory threshold, 99 % utilization reported). On the network atlas map, these nodes are showing warning and critical as if they are using the global thresholds.

Should custom thresholds be carried through to network atlas?

For example:

Calculated Percent Memory: 98.3 %

Nodes.PecentMemory: 98

Warning Threshold: 99.9

Critical Thresdhold: 100

This node is showing warning on the network map, even though the memory is below the configured threshold.

(Orion Platform 2014.1.0, SAM 6.1.1, NPM 10.7)

Anybody seen this? The Solarwinds Job scheduler has decided to stop working on our 9 Sp2 server.

It get this gobblydegook in the NPM.BusinessLayer.Log file...

2008-08-29 14:50:49,417 [7] DEBUG SolarWinds.NPM.BusinessLayer.NPMBusinessLayerPlugin - { Start entered
2008-08-29 14:50:49,464 [7] ERROR SolarWinds.Orion.Common.SWEventLogging - NPM Service [SWORION01] Started
2008-08-29 14:50:50,308 [7] DEBUG SolarWinds.Orion.Common.SqlHelper - SQL: INSERT INTO Events (EventTime, NetworkNode, NetObjectID, NetObjectType, EventType, Message, Acknowledged)
VALUES (GETDATE(), @NetworkNode, @NetObjectID, @NetObjectType, @EventType, @Message, 0) (@NetworkNode=0, @NetObjectID=0, @NetObjectType=, @EventType=500, @Message=NPM Service [SWORION01] Started)
2008-08-29 14:50:56,681 [7] DEBUG SolarWinds.Orion.Common.SqlHelper - SQL: update Engines set BusinessLayerPort = @BusinessLayerPort where ServerName = @ServerName (@ServerName=SWORION01, @BusinessLayerPort=17777)
2008-08-29 14:50:56,744 [7] DEBUG SolarWinds.Orion.Common.SqlHelper - SQL: SELECT EngineID, ServerName FROM Engines where ServerType not like '%Hot-Standby%'
2008-08-29 14:50:56,775 [7] INFO  SolarWinds.NPM.BusinessLayer.NPMBusinessLayerPlugin - Registering job engine SWORION01
2008-08-29 14:50:56,791 [7] DEBUG SolarWinds.NPM.BusinessLayer.JobScheduler - Channel created to net.pipe://localhost/solarwinds/jobengine/scheduler
2008-08-29 14:50:56,947 [7] WARN  SolarWinds.NPM.BusinessLayer.JobScheduler - ExecutionEngineExists: JobScheduler channel threw CommunicationException. Retries: 0
2008-08-29 14:50:56,947 [7] WARN  SolarWinds.NPM.BusinessLayer.JobScheduler - Job Scheduler Exception:
System.ServiceModel.EndpointNotFoundException: There was no endpoint listening at net.pipe://localhost/solarwinds/jobengine/scheduler that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.IO.PipeException: The pipe endpoint 'net.pipe://localhost/solarwinds/jobengine/scheduler' could not be found on your local machine.
   --- End of inner exception stack trace ---

Server stack trace:
   at System.ServiceModel.Channels.PipeConnectionInitiator.GetPipeName(Uri uri)
   at System.ServiceModel.Channels.NamedPipeConnectionPoolRegistry.NamedPipeConnectionPool.GetPoolKey(EndpointAddress address, Uri via)
   at System.ServiceModel.Channels.CommunicationPool`2.TakeConnection(EndpointAddress address, Uri via, TimeSpan timeout, TKey& key)
   at System.ServiceModel.Channels.ConnectionPoolHelper.TakeConnection(TimeSpan timeout)
   at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
   at System.ServiceModel.Channels.StreamedFramingRequestChannel.StreamedFramingRequest.SendRequest(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at SolarWinds.JobEngine.IJobScheduler.ExecutionEngineExists(Uri executionEngineUri)
   at SolarWinds.NPM.BusinessLayer.JobScheduler.<>c__DisplayClass1b.<ExecutionEngineExists>b__1a()
   at SolarWinds.NPM.BusinessLayer.JobScheduler.ExecuteJobSchedulerOperation[T](String operationName, JobSchedulerOperation`1 operation)
2008-08-29 14:50:57,947 [7] DEBUG SolarWinds.NPM.BusinessLayer.JobScheduler - Channel created to net.pipe://localhost/solarwinds/jobengine/scheduler
2008-08-29 14:50:57,994 [7] WARN  SolarWinds.NPM.BusinessLayer.JobScheduler - ExecutionEngineExists: JobScheduler channel threw CommunicationException. Retries: 1
2008-08-29 14:50:57,994 [7] WARN  SolarWinds.NPM.BusinessLayer.JobScheduler - Job Scheduler Exception:
System.ServiceModel.EndpointNotFoundException: There was no endpoint listening at net.pipe://localhost/solarwinds/jobengine/scheduler that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.IO.PipeException: The pipe endpoint 'net.pipe://localhost/solarwinds/jobengine/scheduler' could not be found on your local machine.
   --- End of inner exception stack trace ---

A way to troubleshoot:

1. Edit web.config in C:\inetpub\SolarWinds and change to True

<add key="HubbleActive" value="False" />

When Hubble is active, it calculates and counts a number of performance related statistics on every page load.

The first value lists how long in milliseconds it took to load this page.

The second value lists how many SWIS queries had to run in order to load the page.

The third value shows the number of business layer calls took place.

The warnings typically indicates duplicated queries, or long running queries.

The last figure is the viewstate size - the larger the viewstate, the more will be stored in memory both client and server side, and the slower the page will load.

Click on the "Details" link to drill down and view more statistics about this page load.

This page will explain in full detail how to read and interpret the detailed statistics: Hubble

Edit web.config in C:\inetpub\SolarWinds and change to False

<add key="HubbleActive" value="True" />

Help you slow SQL:

2. Edit SWNetPerfMon.DB to aid slow DB connectibity in C:\Program Files (x86)\SolarWinds\Orion and change (save the file)

! Connection timeout in seconds

Timeout=40

! Database Command timeout in seconds

CommandTimeout=250

! SqlCommand.CommandTimeout in seconds

SqlCommandTimeout=30

3. Disabled unused NICs and unused system services

Recommendations:

Please exclude the following from AntiVirus software:

“C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto” folder.

“C:\ProgramData\Microsoft\Crypto” folder.

"C:\Windows\Temp\SolarWinds"

“C:\ProgramData\SolarWinds"

SQL database

Please see the link below for SQL File Segregation

Separating the data files from the log files in storage can boost performance significantly. The SolarWinds Orion database consists of data files with .mdf or .ndf file extensions, and log files with an .ldf extension. These files exist for the main database and for the temporary (temp) database SQL uses for moving data

File Segregation --> http://www.solarwinds.com/documentation/Orion/docs/OriondbBestPractices.pdf

++ Basically we would like to see your SQL database on a RAID 1 for better IO performance ++

The better your SQL performs the better the overall Orion products will do.

Other Resources:

How-to Measure Database File I/O Performance and Configure Cloud DB Monitoring

https://thwack.solarwinds.com/docs/DOC-175542

Database Performance Analyzer Guided Tour

https://thwack.solarwinds.com/docs/DOC-175527

Creating a new view name: blank canvas

1. Click Settings
2. Manage Views
3. Click Add
4. Type Name of New View “blank canvas” – Type of View = Summary

     5. Click Submit

     6. Click Done

     7. Click Add

     8. Click Admin

     9. Click Customized Menu Bar

   10. Edit the Menu Bar: Admin

   11. Drag the blank canvas view to your Admin bar

   12. Click Submit

   13. ++ Now at this point you should have a blank canvas option on your menu bar

   14. At this point you can begin adding resources or views to your blank canvas

   15. Click Customized Page

   16. Click the PLUS sign to add the resources you want to your view

   17. Resources examples:

   18. Click DONE

          Results/View :

    19. Click Customized Page

    20. Check “NOC View”

   21. Click DONE & go to NOC

         See results:

You are DONE

I have all these router configs on NPM and I want to sort the configs with 1 particular line in all the configs. So I was wondering if there is a way to do so. Please advice.

We have a 10.7 deployment that we planned on upgrading to v11 next month, but with 11.5 and 12 on the horizon, we're wondering if we should wait. Also, what is the upgrade path? We thought 11 was upgrading to 12, but with 11.5 being released at the same time as 12 are they separate upgrade paths? Can we upgrade directly to 12 or do we have to go through 11 and 11.5 to get there? Can we go directly to 11.5?

Hi Everyone,

I recently created a custom Orion View for our helpdesk which contains 3 columns that are each filtered based on custom properties such as 'Network Hierarchy' and 'Network Rack' to show down switches and would like to additionally have them show up in a grouping with the headings of another custom property named 'Building'.  As of now I was able to easily setup the filtering by editing the resources utilizing 'Filter Nodes (SQL)'. but have been unable to get it to show a grouping.  Ideally I would like to use Group By within the filtering as shown below but they don't have any examples of how to do this.  I am also somewhat of a SQL newbie so if it's a syntax issue I'd appreciate a little guidance however if it's it's a functional limitation with what I'm trying to do I would like to know that as well.

So For Example:

This is what i currently have:

This is what I would like to have:

Hello,

I am wondering if there is a way to monitor the up/down status of virtual servers, pools, and the pool members on an F5 device. I am very inexperienced with MIBs and OIDs, but am willing to learn how to use them. Also if this functionality is coming in a newer version of the solarwinds software(s) than i might just wait for this functionality.

I found some information on what a MIB and what an OID are cited here (How do SNMP, MIBs and OIDs work? | Paessler Knowledgebase)

MIB stands for Management Information Base and is a collection of information organized hierarchically. These are accessed using a protocol such as SNMP. There are two types of MIBs: scalar and tabular. Scalar objects define a single object instance whereas tabular objects define multiple related object instances grouped in MIB tables.

OIDs or Object Identifiers uniquely identify manged objects in a MIB hierarchy. This can be depicted as a tree, the levels of which are assigned by different organizations. Top level MIB object IDs (OIDs) belong to different standard organizations. Vendors define private branches including managed objects for their own products.

I am basically thinking of a MIB as a table with hashes. I also found that i can poll devices with the snmpwalk tool on my solarwinds servers under the Solarwinds\Orion\ folder called snmpwalk.exe. I ran this against one of my F5 load balancer devices and was able to get a text file out of the deal. But at this point im stuck trying to figure out what exactly i need from it to start polling each virtual machine seperately.

Has anyone else done this? can you point me in the right direction if you have?

Thank you,

It is in my portal.  Is it in anyone else's?  If so does anyone know where the release notes to documentation is?

If you want to quickly test a database connection this is it.

You can also use this to quickly execute sql command and see the output in a grid.

Provides exception information to help troubleshoot connection issues. for more details please find the link below.

Database Connection String / Command / SQL Tester Utililty Download Link

Database Connection String &#47; Command &#47; Sql Tester - Home

********* DOWNLOAD LINKS FOR SQL SERVER EXPRESS EDITION  ******

SQL 2005

http://www.microsoft.com/en-us/download/details.aspx?id=21844

SQL 2005 SP 4

Download SQL Server 2005 Express Edition SP4 from Official Microsoft Download Center

SQL 2008 RTM (MGMT TOOLS INCLUDED )

Download details: Microsoft® SQL Server® 2008 R2 SP2 - Express Edition - Microsoft Download Center

SQL 2012 SP1 CTP

Download Microsoft® SQL Server® 2012 Express from Official Microsoft Download Center

http://www.microsoft.com/en-ie/download/details.aspx?id=34700

Download Microsoft® SQL Server® 2012 Express from Official Microsoft Download Center

********** HOW TO INSTALL SQL SERVER STEP BY STEP GUIDE ***********

http://www.sqlserverclub.com/essentialguides/how-to-install-sql-server-2008-step-by-step-guide.aspx

http://blog.sqlauthority.com/2008/06/12/sql-server-2008-step-by-step-installation-guide-with-images/

http://www.sqlcoffee.com/SQLServer2008_0013.htm

******************************************************************************************

********** DATABASE CONNECTION SETTINGS REQUIRED DURING NPM INSTALLATION *********

In order to verify connectivity from Orion NPM server &  SQL DB Server  .

Please download SQL Studio Management Client and install on Orion Server to verify the connectivity from Orion server to required SQL Server.  ( Please chose required Version as matching with your SQL Server installed )

If you have failure with SQL Studio Please consult your Database Manager for further support.

SQL 2008

http://www.microsoft.com/en-ie/download/details.aspx?id=7593

SQL 2005

http://www.microsoft.com/en-ie/download/details.aspx?id=8961

SQL 2012

Download Microsoft® SQL Server® 2012 Express from Official Microsoft Download Center

http://freewareupdate.com/developer-tools/4446-2935693919883077577837190221163836935304436249923857738807915379845127

Step-by-Step: Installing SQL Server Management Studio 2008

http://www.codefrenzy.net/2011/06/03/how-to-install-sql-server-2008-management-studio/

http://blogs.msdn.com/b/bethmassi/archive/2011/02/18/step-by-step-installing-sql-server-management-studio-2008-express-after-visual-studio-2010.aspx

Video Help

How to install SQL Server 2008 Management Studio Express on Windows 7 - YouTube

Please Note . Orion Configuration Wizard shares the same information as above during installation while connecting with SQL Server .

Please use the same connection information with Orion Database Manager as below

Hello,

    I have to set monitoring for ASA S-t-S VPN. I am new in Solawinds and MIB, however, I read the forum and couple of article about MIB.

I did review MIB ietf-flow-monitoring but I am not sure if what I want to do is possible.

I am interested about following OID: 1.3.6.1.4.1.9.9.171.2.0 Cisco SNMP Object Navigator

however, CISCO shows that only cipSecTunnelStart and cipSecTunnelStop are supported. 

Cisco ASA 5500 Series Configuration Guide using the CLI, 8.4 and 8.6 - Configuring SNMP [Cisco ASA 5500-X Series Next-Ge…

The above brought me to following conclusion:

1) I would like to be informed when VPN tunnel is down (not cause to tunnel Lifetime)

     set trap on ASA "snmp-server enable traps ipsec stop"

2) Use Trap Viewer and poll earlier associated OID from ASA to gather more information

3) Use Universal Device Pollers (UNDP) to poll OID: 1.3.6.1.4.1.9.9.171.1.4.2.1 including:

-- ----------------------------------------------------------------------------

-- The IPsec Phase-1 Tunnel History Table

-- ----------------------------------------------------------------------------

ikeTunHistTermReason OBJECT-TYPE

   DESCRIPTION -   "The reason the IPsec Phase-1 IKE Tunnel was terminated.

  Possible reasons include:

  1 = other

  2 = normal termination

  3 = operator request

  4 = peer delete request was received

  5 = contact with peer was lost

  6 = sequence number rolled over

  7 = local failure occurred."

  ::= { ikeTunnelHistEntry 2 }

Cisco SNMP Object Navigator

That would give me information about what happened.

If the reason appeared to be 5 = contact with the peer was lost - send notification email.

Can I do it the way I described and via the tools I mentioned?

Thanks

I'm having an issue where I cannot add our 3600 series F5 load balancers to Solarwinds.

We have them configured for snmp v3 with read only permissions. The top level OID specified on the devices are set to only .1, however, we've also tried it all the way down to .1.3.6.1.4.1.3375 which is the F5 OID but I understand that as I wouldn't be able to snag any hardware information if I used just that OID, so we opened it up to do .1. Either way, I keep getting back a test failed.

Running wireshark reveals the F5 is responding back with a packet wireshark is labeling with encryptedPDU: privkey Unknown

When we saw this we thought maybe that we mistyped one of the keys so we retyped them and still received that same message. After that didn't work we tried simply making an account with incredibly simple (username: test password: test) credentials and still receive the same message so I'm thinking that message might not be indicative of the issue I'm having. Really unsure though.

Any help is appreciated.

It took me a while to get the right combination of AIX SNMP Version 3 settings that will work with Authentication & Privacy enabled for Solar Winds.

Hopefully the steps below will help you get it working too. A list of sources which provided the clues I needed is at the end, its a long one as no single place had everything you will need. Hopefully this doco corrects that.

AIX Configuration

These steps worked ok on "AIX 6 TL08" and "AIX 7 TL 03".

• Install the snmp.crypto fileset to enable encryption (Obtained mine from AIX 6 Expansion Pack DVD 5765-G62 11/2012)

> lslpp -cl snmp.crypto

#Fileset:Level:PTF Id:State:Type:Description:EFIX Locked

/usr/lib/objrepos:snmp.crypto:6.1.2.0::COMMITTED:I:56-bit DES Encrypted SNMPV3 Support:

/etc/objrepos:snmp.crypto:6.1.2.0::COMMITTED:I:56-bit DES Encrypted SNMPV3 Support:

• Backup the /etc/rc.tcpip file as it's about to be modified
• Turn on encryption with the snmp switch command:

> /usr/sbin/snmpv3_ssw -e

This command will create symbolic links as required to enable/disable the encrypted/non-encrypted versions of snmpd & clsnmp

• Confirm and update /etc/rc.tcpip so that the following lines are no longer commented. Comment out dpid2 if it hasn't already been by the above.

---cut---

# Start up the Simple Network Management Protocol (SNMP) daemon

start /usr/sbin/snmpd "$src_running"

# Start up the hostmibd daemon

start /usr/sbin/hostmibd "$src_running"

# Start up the snmpmibd daemon

start /usr/sbin/snmpmibd "$src_running"

# Start up the aixmibd daemon

start /usr/sbin/aixmibd "$src_running"

---cut---

It looks like /usr/sbin/dpid2 functionality has been rolled into one of the above from at least AIX 6 TL08 onwards.

• Backup your existing snmp configuration files

---cut---

/etc/snmpdv3.conf

/etc/clsnmp.conf

/etc/snmpd.boots

/etc/snmpd.peers

---cut---

• Pick one of your servers /etc/snmpd.boots files and make that file uniform across all your servers. Here's an example of its contents:

---cut---

00000002000000000A454172 0000000082

---cut---

The first value is your EngineID, which can be something you made up, or one provided by the vendor. The second is the number of times snmp has been restarted. If you ensure this file is consistent across your AIX servers you can reuse your /etc/snmpdv3.conf file across them all. In turn, you can reuse the credentials when adding the nodes to Solarwinds. The auth/priv keys are married to the EngineID and won't work on another server if the EngineID is different there.

• Generate a new auth key with your local EngineID.

---cut---

pwtokey -e -u auth <auth password> $(cat /etc/snmpd.boots | cut -f2 -d' ')

Display of 16 byte HMAC-MD5 privKey:

5xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx0

Display of 16 byte HMAC-MD5 localized privKey:

axxxxxxxxxxxxxxxxxxxxxxxxxxxxxx5

---cut---

Make a note of the non-localized key value. E.g 5xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx0 of the two above. Also ensure you make a note of the passwords of course. You _must_ use the passwords when adding the node to Solarwinds. Attempts to use the key instead met with failure, likely due to the need for the EngineID to be paired up with the key somehow (context field didn't help).

• Generate a new priv key with your local EngineID. Again you're only interested in the non-localized key value. I'll use axxxxxxxxxxxxxxxxxxxxxxxxxxxxxx7 below for this.

---cut---

pwtokey -e -u priv <priv password> $(cat /etc/snmpd.boots | cut -f2 -d' ')

---cut---

• Clear your command history if you're worried about maintaining the privacy of these keys (good habit but a touch paranoid!)

---cut---

> ~/.sh_history

---cut---

• Update the /etc/clsnmp.conf file so it has an entry for local snmp testing. I'm using swro aka Solar-Winds-Read-Only. I might dabble with read-write later and want them segregated. Plug in your freshly generated auth/priv keys.

---cut---

/etc/clsnmp.conf

#winSnmpName  targetAgent  admin  secName  password  context secLevel authProto  authKey                           privProto  privKey

#----------------------------------------------------------------------------------------------------------------------------------------------------------

swro          127.0.0.1    snmpv3 swro     -         -       AuthPriv HMAC-MD5   5xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx0  DES axxxxxxxxxxxxxxxxxxxxxxxxxxxxxx7

---cut---

You can replace the first "swro" with the local server name if you like. In fact multiple duplicate lines with each server/IP (and consistant snmpd.boots & snmpdv3.conf files) will allow you to kick off clsnmp commands from this server to any other that has been updated with this process. Handy if you want to setup scripting to pull specific MIB/OID values etc from all servers etc.

• Update your snmpd.peers file to ensure it has the details required for the snmpd process to access other components (e.g hostmibd/snmpmibd etc) for specific MIB/OID resources.

---cut---

/etc/snmpd.peers

###############################################################################

#

"gated"     1.3.6.1.4.1.2.3.1.2.1.2     "gated_password"

"dpid2"     1.3.6.1.4.1.2.3.1.2.2.1.1.2 "dpid_password"

"muxatmd" 1.3.6.1.4.1.2.3.1.2.3.1.1 "muxatmd_password"

#

# Enables cpu & volume information visibility to snmpd

"xmtopas"       1.3.6.1.4.1.2.3.1.2.1.3 "xmtopas_pw"

#

## EOF

---cut---

The default AIX set of "passwords" is being used above (and in the following snmpdv3.conf) which should get you sorted. Sing out if you spot any issues with this approach as it depends on locking out non-local access to snmpd via the snmpdv3.conf file except for auth/priv key holders.

For example, I didn't have an entry here for xmtopas. Once I put that in place the SolarWinds discovered resources list suddenly included "Volume Utilization" values aka filesystem and logical volume info. Once selected they appear in the "Asset Inventory" tab under logical volumes.

• Update your /etc/snmpdv3.conf file with the one below. Swap out the auth/priv keys with the ones you generated above.

---cut---

##

## Solar Winds Specific Entries

##

#

USM_USER swro 00000002000000000A454172 HMAC-MD5 5xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx0 DES axxxxxxxxxxxxxxxxxxxxxxxxxxxxxx7 N -

#

VACM_GROUP swrogrp - swro readonly

#

VACM_VIEW swroview internet                    - included -

VACM_VIEW swroview 1.3.6.1.4.1.2               - included -

VACM_VIEW swroview 1.3.6.1.4.1.2.2             - included -

VACM_VIEW swroview 1.3.6.1.4.1.2.3             - included -

VACM_VIEW swroview 1.3.6.1.4.1.2.5             - included -

VACM_VIEW swroview 1.3.6.1.4.1.2.6             - included -

VACM_VIEW swroview directory                   - included -

VACM_VIEW swroview mgmt                        - included -

VACM_VIEW swroview mib-2                       - included -

VACM_VIEW swroview system                      - included -

VACM_VIEW swroview aix                         - included -

VACM_VIEW swroview 1.3.6.1.4                   - included -

VACM_VIEW swroview 1.3.6.1.6                   - included -

VACM_VIEW swroview 1.3.6.1.6.3.1.1.5           - included -

VACM_VIEW swroview 1.3.6.1.4.1.2021            - included -

VACM_VIEW swroview 1.3.6.1.4.1.2.3.1.2.2.2.1.4 - included -

#

# Include snmpv3 managed MIBs with this view

VACM_VIEW swroview snmpModules                 - included -

# Include aixmibd managed MIBS with this view

VACM_VIEW swroview 1.3.6.1.4.1.2.6.191         - included -

#

VACM_ACCESS swrogrp - - AuthPriv - swroview - sworoview -

##

## AIX Internal SNMP Agent Specific Entries

##

#

# Allow localhost(only) SNMPv1 general access

COMMUNITY public public noAuthNoPriv 127.0.0.1 255.255.255.255  -

VACM_GROUP group1 SNMPv1  public  -

VACM_ACCESS  group1 - - noAuthNoPriv SNMPv1   defaultView - defaultView -

#

VACM_VIEW defaultView internet                    - included -

# Exclude snmpv3 related MIBs from the default view

VACM_VIEW defaultView snmpModules                 - excluded -

VACM_VIEW defaultView 1.3.6.1.6.3.1.1.4           - included -

VACM_VIEW defaultView 1.3.6.1.6.3.1.1.5           - included -

# Exclude aixmibd managed MIBS from this view

VACM_VIEW defaultView 1.3.6.1.4.1.2.6.191         - excluded -

#

# Access to data from gated/muxatmd/xmservd/dpid

smux   1.3.6.1.4.1.2.3.1.2.1.2   gated_password  # gated

smux   1.3.6.1.4.1.2.3.1.2.3.1.1   muxatmd_password #muxatmd

smux   1.3.6.1.4.1.2.3.1.2.1.3   xmservd_pw   #xmservd

smux   1.3.6.1.4.1.2.3.1.2.2.1.1.2   dpid_password   #dpid

#

#

# These entries appear to be for IBM director at a guess

#  They allow it to participate with the above

#VACM_GROUP director_group SNMPv2c public -

#VACM_ACCESS director_group - - noAuthNoPriv SNMPv2c defaultView - defaultView -

#

# Trap definitions

NOTIFY notify1 traptag trap -

TARGET_ADDRESS Target1 UDP 127.0.0.1 traptag trapparms1 - - -

TARGET_PARAMETERS trapparms1 SNMPv1  SNMPv1  public  noAuthNoPriv -

##

## Global Defaults

##

#

# Set no access unless explicitly allowed by previous entries

DEFAULT_SECURITY no-access - -

#

# Set log location, maximum size, log level

logging         file=/usr/tmp/snmpdv3.log       enabled

#logging         size=100000                     level=0

logging         size=100000                     level=2

#

## EOF

---cut---

Still a work in progress locking down the AIX Internal SNMP agents and of course getting the right set of MIB included in the Solar Winds view. At least now I've something working I can fine tune and will be looking at other related posts here.

• Stop all snmp related services

---cut---

stopsrc -s snmpmibd;stopsrc -s aixmibd;stopsrc -s snmpd;stopsrc -s hostmibd;stopsrc -s dpid2

---cut---

• Start all snmp related servers (excluding the now redundant dpid2)

---cut---

startsrc -s snmpmibd;startsrc -s aixmibd;startsrc -s snmpd;startsrc -s hostmibd

---cut---

• Test things out locally by using the walk option on clsnmp (yup, IBM included a cleverly disguised snmpwalk command). I'm using the "internet" MIB in this example, lots of output!

---cut---

clsnmp -h swro walk internet

---cut---

If you get an error here, odds are you've a mismatched EngineID and auth/priv keys. Check out your /usr/tmp/snmpdv3.log for more details. As mentioned earlier the "swro" here is a reference to the matching line in /etc/clsnmp.conf. A server name could be used here (if defined there) instead and would result in a remote test.

• Once the dust settles, turn down the log level in snmpdv3.conf (level=0) to avoid excessive logging for daily operation.

Solar Winds Configuration

It should now be possible to add this node in Solarwinds.

Key Values

• SNMP Version: SNMPv3
• SNMPv3 Username: swro
• SNMPv3 Authentication Method: MD5
• SNMPv3 Authentication Password: Use the password from pwtokey above (don't use the key, it doesn't work)
• SNMPv3 Privacy Method: DES56
• SNMPv3 Privacy Password: Use the password from pwtokey above (don't use the key, it doesn't work)

Hit the test button to see if all is ok. If it isn't make sure the services have been started and check the snmpdv3.log for more clues (especially the "did solar winds get here at all" clue).

As I've standardized the /etc/snmpd.boot and /etc/snmpdv3.conf files across the estate I can re-use these credentials and have saved them as "aix-swro".

Sources

- IBM Doco

-- IBM SNMPv3 Documentation [http://www-01.ibm.com/support/knowledgecenter/api/content/ssw_aix_71/com.ibm.aix.networkcomm/snmpv3_intro.htm]

-- Creating users in SNMPv3 in AIX [http://www-01.ibm.com/support/knowledgecenter/api/content/ssw_aix_71/com.ibm.aix.networkcomm/HT_commadmn_create_snmpv3_user.htm#create_snmpv3_user]

-- AIX 7.1 snmpdv3.conf file setup [http://www-01.ibm.com/support/knowledgecenter/ssw_aix_71/com.ibm.aix.files/snmpdv3.conf.htm?lang=en]

-- IBM SNMP key generation [http://publib.boulder.ibm.com/infocenter/aix/v6r1/index.jsp?topic=/com.ibm.aix.commadmn/doc/commadmndita/snmpv3_genkeys.htm]

-- Using the clsnmp command [http://www-01.ibm.com/support/knowledgecenter/ssw_aix_53/com.ibm.aix.cmds/doc/aixcmds1/clsnmp.htm?cp=ssw_aix_53%2F1-2-0-2-122&lang=en]

--- Useful to test an snmp configuration as this can interrogate your snmp server to confirm its working ok.

- Solar Winds Doco

-- Solarwinds SNMPV3 Implementation Guide [http://www.solarwinds.com/support/Orion/docs/Implementing_SNMPv3r1.pdf]

-- Managing SNMP credentials guidelines [http://www.solarwinds.com/netperfmon/solarwinds/wwhelp/wwhimpl/js/html/wwhelp.htm]

- Solar Winds Forums

-- Example SNMPv3 Configuration on AIX from Solarwinds forum [https://thwack.solarwinds.com/message/249258]

-- Help with SNMPv3.1 on AIX [http://thwack.solarwinds.com/thread/42695]

-- Using SNMPv3.1 on AIX [http://thwack.solarwinds.com/thread/36507]

-- Configuring 3rd party Net-SNMP [http://thwack.solarwinds.com/thread/19323]

-- AIX Specific mods [http://thwack.solarwinds.com/community/application-and-server_tht/server-and-application-monitor/content?filterID=content~category[application-monitor-templates]&filterID=content~objecttype~objecttype[document]&query=unix]

- Make AIX a Solarwinds client on snmpv3 [http://odme.blogspot.com.au/2012/09/make-aix-solarwinds-client-on-snmpv3.html]

- Configuring AIX snmpd for MIB subagent access [http://odme.blogspot.com.au/2012/09/snmpdv3-wont-talk-to-mib-subagents.html]

-- The aixmbid, snmpmibd and similar subsystems depend on snmp to talk to each other! Here's the settings they use to do so.

-- Very detailed setup of the AIX snmpd for MIB subagent config including extra mib defaultviews [http://forums.cacti.net/viewtopic.php?t=19040]

- Nagios setup for snmp [http://nagios.frank4dd.com/howto/aix-snmp-setup.htm]

-- Examples on using snmpwalk

-- Example snmpdv3.conf for Nagios with highlights for nagios specifics

- [http://lparbox.com/how-to/powerha-cluster/21]

- [http://www.mcpressonline.com/system-administration/techtip-monitoring-aix-with-snmp.html]

- Using snmpwalk [http://www.net-snmp.org/tutorial/tutorial-5/commands/snmpv3.html]

Hi Everyone,

I am new to Linux/Aix monitoring and would like to have SNMP work on AIX machines. I tried couple of Web reference,videos and i am still unable to figure out.

Could someone please help me with the configuration it will be helpful.

This morning a member of our team was looking at processor load over time on a windows 2008 R2 host and noted that what he saw in SolarWinds NPM did not match what he was seeing when he looked at the system's load through Task Manager and later Perfmon on the system  The data in NPM was consistently higher.  He asked me about this and I did a bit of digging and found a disturbing trend in the source data within SolarWinds.

In short - NPM appears to be recording the same value for min and max CPU  (and hence average CPU) in the CPUMultiLoad_Detail, CPUMultiLoad, and CPULoad tables (my guess would be that the latter is derived from the former).  I am guessing that this is the result of one of the following:

• Stupid-Human-Trick 1 - I'm looking at the wrong tables in the database (but the data I see in the table aligns with what I am seeing in the graphs which are out of line with the graphs that we are seeing in the other sources - so I doubt this is the case)
• Stupid-Human-Trick 2 - I made a mistake on installation which resulted in this averaging before population (possible - although I was pretty careful during the portion of the configuration in which actual decisions were being made).
• Fixed Bug - There is a known issue in the software - apply the update... (note - I did do a bit of digging and did not find this listed
• Active Bug - There is a known bug that is not resolved
• Other?

My money is on the second or third option - but searching for a few did not provide any information on this symptom.  Data and system version information below...

Thanks in advance...

DATA / SYSTEM INFORMATION

For example - the data for the node in question for the last couple of windows from each table follows:

FROM CPUMultiLoad

FROM CPUMultiLoad Detail

FROM CPULoad

SO - The values in the MinLoad, MaxLoad, and AvgLoad fields in the CPULoad table are each the same, and each the rounded average of the full set of values for all processors in the node for the same window in CPUMultiLoad.  I have to assume that there is an issue with my configuration that is causing this behavior (or at least I HOPE that this is not the intended behavior as it certainly is not "good data" regarding min/max/avg CPU load since the last poll.

Am I looking at the wrong data in the database?  What causes this?

Environment Details:

FROM SETTINGS: Orion Platform Details (redacted a couple of items not germane to the question - like the hostname)

Hi,

I have been trying to configure snmpv3 on AIX server with AES encryption method.

I have followed the creating snmp user as suggested by IBM,after configuring,when we try to test it on solarwind with username and passwd and MD5 authentication,the connection fails.

Here is what i configured on snmpv3.conf and clssnmp.conf file..

USM_USER u1 - HMAC-MD5 aeeb841545d74939fjkdfhfd77b31a479e2 - - L -

VACM_GROUP group1 USM u1 -

VACM_VIEW group1View            interfaces         - included -

VACM_VIEW group1View            tcp                   - included -

VACM_VIEW group1View            icmp                  - included -

VACM_VIEW group1View            system             - included -

VACM_VIEW group1View            sysObjectID        - excluded -

VACM_ACCESS  group1 - - AuthNoPriv USM group1View - group1View -

VACM_GROUP group1 SNMPv1  public  -

VACM_VIEW defaultView       internet            - included -

VACM_VIEW defaultView        1.3.6.1.4.1.2.2.1.1.1.0    - included -

VACM_VIEW defaultView        1.3.6.1.4.1.2.6.191.1.6    - included -

# exclude snmpv3 related MIBs from the default view

VACM_VIEW defaultView        snmpModules                - excluded -

VACM_VIEW defaultView        1.3.6.1.6.3.1.1.4          - included -

VACM_VIEW defaultView        1.3.6.1.6.3.1.1.5          - included -

# exclude aixmibd managed MIBs from the default view

VACM_VIEW defaultView        1.3.6.1.4.1.2.6.191        - excluded -

VACM_ACCESS  group1 - - noAuthNoPriv SNMPv1  defaultView - defaultView -

NOTIFY notify1 traptag trap -

TARGET_ADDRESS Target1 UDP 127.0.0.1       traptag trapparms1 - - -

TARGET_PARAMETERS trapparms1 SNMPv1  SNMPv1  public  noAuthNoPriv -

TARGET_PARAMETERS trapparms1 SNMPv3  USM     u1        AuthNoPriv -

#COMMUNITY public    public     noAuthNoPriv 0.0.0.0    0.0.0.0         -

DEFAULT_SECURITY no-access - -

logging         file=/usr/tmp/snmpdv3.log       enabled

logging         size=100000                     level=0

smux            1.3.6.1.4.1.2.3.1.2.1.2         gated_password  # gated

---------------------------------------------------------------------------------------------------------------------------------

clsnmp.conf file ...

#

# Format of entries:

#   winSnmpName  targetAgent  admin  secName  password  context secLevel authProto  authKey  privProto  privKey

#

#----------------------------------------------------------------------------------------------------------------------------------------------------------

user1  xxxxxxxxx  SNMPv3  u1  -  -  AuthNoPriv  HMAC-MD5 278369e8d9sewjel;a442478c50d38a4121a - -

Could anyone suggest or post the exact snmpv3 configuration steps for AIX clients.

Thanks in Advance...

--

chad

Hi People

I'm looking to link the Map view to dedicated screen. Just wondered if there is a way you can view the map you can create for the summary view without having to login in the server? As part of creating a trial it would be nice to be able to say we can display this all the time and see when site links go down etc.

Thanks

James

Does anyone know if the solarwinds syslog portion of NPM qualifies for PCI DSS 3.0 compliance?