A question, how can I get a report showing all the devices that are monitored as Windows Servers: WMI on my SolarWinds
I really appreciate any comments
A question, how can I get a report showing all the devices that are monitored as Windows Servers: WMI on my SolarWinds
I really appreciate any comments
Hello:
I have a big problem with the Map Objects Icons that I create in the Network Atlas Software. Any Map Object Icon (default or custom) that I create , it shows in the Network Atlas but it doesnt in the Orion Web Console. I did everything, since look for the folders when the images are located and all the steps for example; I did the "Changing the Appearance of Map Objects" help guide, "Adding Custom Icons from Graphics Files" help guide, "Adding Map Objects" help guide, "Pasting Custom Icons from the Windows Clipboard" help guide,I didnt find anything in the forum. The weird part is that I all the background images that I load in the Orion Network Atlas, it appears in the Orion Web Console, but that not happen with the Map Object Icons. I am attaching a example of that, it only appears a gray point in the Orion Web Console, instead the real icon.
Sometimes devices show up in Orion as "unknown". Those devices need to be added to our SysObjectID database. We know about lots of them, but we'd like to hear which items you need.
We need:
SysObjectID (which you can find in Node Details) in System Manager.
Vendor
Model
Got an alert on one of our DNS/DHCP Servers (InfoBlox). When I went to look at it everything was up. However, I never got an up email message. Anyone know why?
Hi there,
I've downloaded most of the SolarWinds trail software which is very impressive. I was wondering if there is a way of receiving an email alert if port security gets tripped on one of our Cisco switches.
Right now its a manual process - a call comes in from a certain location asking if we can check port security. We have the switches send logs back to a syslog server which we don't have access to(security dept.). This is primary used for auditing...who accessed and what time etc.
How would one go about creating a new setup to send possibly an email alert notifying us of a violation? Do I even need the syslog server? Can SolarWinds intelligently acknowledge a port violation and send an alert and if so are there any step by step guides for such a setup?
Green
Hey All,
I've had a few different discussions regarding Cisco UCS monitoring, and I wanted to share the solution we ultimately came up with. This is the product of a lot of different folks that contributed content to these forums.
First, the challenge here is that Cisco does not have any kind of hardware health agent that allows for health polling in the OS. Your only option is to poll the CIMC (Cisco's ilo/drac, for the uninitiated). You can poll the CIMC with a bunch of UnDP's (you can find info on that elsewhere in this forum), however I didn't want to have to go through and establish warning/error thresholds for every poller.
Enter SNMP traps and the world of Cisco Faults.
Within the CIMC, Cisco maintains a fault table for all hardware issues that have occurred. The CIMC can also be configured to send SNMP traps whenever a fault is triggered or changed.
Now, before you shirk away from SNMP traps and start wondering about polling that fault table (as Cisco actually says you can do), let me stop you. While a fault will appear in the table when it is active, the table becomes unquery-able once the fault clears. This means your poller will never see a reset message for that fault. I actually spoke to Cisco about this, and they agreed it was a bad design. No word on if or when it will be improved.
So, we're left with SNMP traps, and our desire to alert off them. To do this, we looked at how the traps come in, and how they are stored in the traps table. What we found is that a "clear" trap always gets sent when the fault clears. Knowing this, we designed a database query to look at the most recent iteration of a fault trap, and treat it as an active fault unless that last instance was a "clear."
Here it is! The only customization you should need is the community string. I would recommend using type-specific communities to keep your incoming traps separate. The reset condition is simply when the query is no longer true.
SQL Condition: Node (SELECT Nodes.NodeID, Nodes.Caption FROM Nodes)
WHERE Nodes.NodeID IN (
SELECT tr.nodeId
FROM [dbo].[Traps] tr
JOIN [dbo].[TrapVarbinds] trv ON tr.trapID = trv.trapID AND OIDName LIKE 'cucsFaultDescription%' AND OIDValue NOT LIKE '%Cleared'
JOIN (SELECT RIGHT(trv2.OIDName, CASE WHEN CHARINDEX('.', REVERSE(trv2.OIDName)) > 0
THEN CHARINDEX('.', REVERSE(trv2.OIDName))-1 ELSE 0 END) faultID,
MAX(tr2.DateTime) DateTime
FROM [dbo].[Traps] tr2
JOIN [dbo].[TrapVarbinds] trv2 ON tr2.trapID = trv2.trapID AND trv2.OIDName LIKE 'cucsFaultDescription%'
WHERE tr2.Community = 'CIMCtrap'
GROUP BY RIGHT(trv2.OIDName, CASE WHEN CHARINDEX('.', REVERSE(trv2.OIDName)) > 0
THEN CHARINDEX('.', REVERSE(trv2.OIDName))-1 ELSE 0 END)) latest
ON latest.faultID = RIGHT(trv.OIDName, CASE WHEN CHARINDEX('.', REVERSE(trv.OIDName)) > 0
THEN CHARINDEX('.', REVERSE(trv.OIDName))-1 ELSE 0 END)
AND latest.DateTime = tr.DateTime
WHERE tr.Community = 'CIMCtrap'
GROUP BY
nodeID,
RIGHT(trv.OIDName, CASE WHEN CHARINDEX('.', REVERSE(trv.OIDName)) > 0
THEN CHARINDEX('.', REVERSE(trv.OIDName))-1 ELSE 0 END)
)
Hey all, I'm in the process of adding our new (and first) UCS systems into Solarwinds, and there are a few questions coming up.
A little searching produced various bits of info, but much of it was from 2013 and prior. Other threads present very limited sections of the process, so I thought we could get a thread going that covers the whole thing.
(Obligatory reference to an old KB on the subject: http://www.solarwinds.com/documentation/orion/docs/settingupciscoucs.pdf)
We're starting with 3 UCS chassis, and two fabric interconnects. Solarwinds NPM is running version 11.5.2.
Configuration steps:
1. UCSM has been configured for LDAP authentication with our corporate AD domain. Connectivity to UCSM has been configured over HTTPS, SNMP has been configured with a secure community string (fun fact, UCSM didn't like the "@" character in its community string), and a domain service account has been established with global read permissions to UCSM.
2. IP addresses for each of the fabric interconnects have been configured and noted, and the virtual IP for UCSM has also been configured and noted. For the purpose of this example, we'll call them:
- Fab1 : x.x.x.1
- Fab2 : x.x.x.2
- UCSM : x.x.x.3
First Issue (Possibly Answered) How are the nodes supposed to be added into Solarwinds? Most instructions refer to adding the primary FI running UCSM first, configured to poll for UCSM information. But if you do that, and UCSM switches to the passive FI, won't you lose UCSM monitoring? Alternatively, I thought I could add UCSM by its virtual IP, but doing that still populates the resources from the FI its currently associated with.
Answer (Maybe): 3. I decided to add each FI as a node without UCSM polling, and then I added the Mgmt VIP with UCSM polling. I configured each FI to poll all interfaces, and I configured the Mgmt node to only poll non-interface elements. The idea here was for the Mgmt node to focus on UCS polling and let the FI nodes handle interface issues. Polling some of the stuff at the top of the list might be redundant, but I wasn't sure if any of it was necessary for UCS blade info.
I'd recommend a service account for the UCS Manager Credentials section, and it will obviously need at least read access to UCSM. When entering domain credentials, you have to specify the domain, but in the format that the domain is linked in UCSM (refer to the LDAP config in UCSM), AND with "ucs-" in front of it.
So for example, if your active directory domain is mydomain.corporate.realm, and you've added this into UCSM and called it just "ADmydomain", the credential has to be entered as "ucs-ADmydomain\mysvcaccount".
Fun fact, I had issues with the service account at first, so I added the Mgmt node without UCS polling initially, and then added the UCS polling once I resolved the service account problem. (Ended up having to launch UCSM as the service account one time to register the account in UCSM.) Doing this, the Mgmt node never successfully displayed UCS blade info. I deleted the Mgmt node, then re-added it and included the UCS polling as part of the initial node creation. Worked fine that time.
4. Once both FIs are added, you should be able to view the node that UCSM is active on and see the UCS Overview page element (ours showed up in the Network tab by default).
Second Issue: UCS Overview displays the status of each FI, and the names of the enclosures and blades, but the status of the blades doesn't populate.
I'll update this post with the additional steps and more pretty screencaps as we go.
Edit 1: 1/21/2016: Added a best-guess answer to the question of how to add the FIs and UCSM. Raised the second issue of blades not populating.
Edit 2: 8/8/2016: It's been a while, but I'm giving this another go. I think I found a better way of adding the FI's and the Mgmt VIP, so that info has been added.
Hello, and thanks...
Is there a way to prevent log entries in the System log for "Microsoft-Windows-DistributedCom" ID 10028 entries when a windows system managed my NPM/Orion is no longer online?
thanks
chris
Anyone else seeing this?
I'm seeing the the 'SolarWinds Information Service V3' service balloon in memory usage 8.7GB and runs the server out of memory and everything crashes. Reboot the server and then it happens again, over and over all day long so far today. Last night I applied HotFix 1 for 12.0.1 and ran well over night. When people are in Orion working during the day it does this. Overnight it seems to run just fine when people are not using the system.
Where do I even start to troubleshoot this?
Running NPM 12.0.1 and SAM 6.3
Server 2012 R2
VM on VMware
12GB RAM
4vCPU
I am looking for a way to create about 1000 fake interfaces so that I can track some unassigned custom properties
I had considered temporarily monitoring a device on and then leaving down but that would only get me the number of interfaces on the device
I am going to be upgrading NPM from 11.5.2 to 12.0.1 next week. I am not able to find the Additional Polling Engine file to download from the Customer Portal. The release Notes state to go to Settings > All Settings > Polling Engine from within the Orion Web Console. Is this only after I have installed NPM 12.0.1? I can't seem to find this in my current install of 11.5.2. Any other ways to get it ahead of time?
Hi,
I'm editing a custom SQL report to include 95th percentile interface traffic Recv & Xmit and I'm looking for the column and the table where the 95th percentile data for interface traffic is held or does Orion resolve the 95th percentile on the fly?
Cheers
A question, how can I get a report showing all the devices that are monitored as Windows Servers: WMI on my SolarWinds
I really appreciate any comments
Hello SQL Expert Folks,
I was trying to create a 95th percentile CPU and memory utilization for Virtual Cluster. But unfortunately, no data display when I added the datetime
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
CREATE FUNCTION [dbo].[GetVIMMaxCPULoad95th]
(
@ClusterID int,
@StartDate DateTime,
@EndDate DateTime
)
RETURNS real
AS
BEGIN
DECLARE @ResultVar real
SELECT @ResultVar = Max(MaxCPULoad)
from (
SELECT TOP 95 Percent MaxCPULoad
from VIM_ClusterStatistics with (NOLOCK)
WHERE ClusterID = @ClusterID and DateTime >= @StartDate and DateTime <= @EndDate
ORDER BY MaxCPULoad ASC
)AS AA
RETURN @ResultVar
END
GO
CREATE FUNCTION [dbo].[GetVIMMaxMemoryUsage95th]
(
@ClusterID int,
@StartDate DateTime,
@EndDate DateTime
)
RETURNS real
AS
BEGIN
DECLARE @ResultVar real
SELECT @ResultVar = Max(MaxMemoryUsage)
FROM
(
SELECT TOP 95 Percent MaxMemoryUsage
from VIM_ClusterStatistics with (NOLOCK)
WHERE ClusterID = @ClusterID and DateTime >= @StartDate and DateTime <= @EndDate
ORDER BY MaxMemoryUsage ASC
)AS AA
RETURN @ResultVar
END
GO
--------------------
SET NOCOUNT OFF
SET ROWCOUNT 0
DECLARE @StartDate DateTime
DECLARE @EndDate DateTime
SET @StartDate = cast ((ROUND(CAST(GetDate()-7 AS FLOAT), 0,1)) as datetime)
SET @EndDate = GetDate()
SELECT VIM_Clusters.ClusterID, VIM_Clusters.Name, Mem_95, CPU_95, VIM_ClusterStatistics.MaxCPULoad, VIM_ClusterStatistics.MaxMemoryUsage, DateTime
FROM VIM_Clusters INNER JOIN VIM_ClusterStatistics ON VIM_Clusters.ClusterID = VIM_ClusterStatistics.ClusterID INNER JOIN (
Select ClusterID,
dbo.GetVIMMaxMemoryUsage95th(ClusterID, @StartDate, @EndDate) As Mem_95,
dbo.GetVIMMaxCPuLoad95th(ClusterID, @StartDate, @EndDate) As CPU_95
FROM VIM_ClusterStatistics
WHERE DateTime >= @StartDate AND DateTime <= @EndDate
GROUP BY ClusterID
)ClusterPer
ON VIM_Clusters.ClusterID = ClusterPer.ClusterID
WHERE
(
(DateTime > (GetDate()-7))
AND
(NOT (DATEPART(weekday, DateTime) = 7))
AND
(NOT (DATEPART(weekday, DateTime)=1))
)
ORDER BY Name
We've just upgraded to NPM12 and I've been pushing how great NetPath is to everyone on the team.
Unfortunately, I'm not seeing any external hops on the Network Paths I've set up.
These examples are both external websites, accessible by anyone.
I don't think it's down to our access provider, as the sites I'm trying to get to aren't hosted by them.
I'm guessing it's probably something firewall related, any ideas anyone?
I'd be interested to see what other users see if they do a NetPath to them.
We would like to improve user experience and for such reason I'd like to better understand if our users prefers INITIALLY to add nodes manually or run product network discovery in order to import devices to NPM
Any updates on this error? SAM 6.3 RC & NPM 12.0.1 RC
Hi Experts,
I just installed NPM 12.1 offline version while doing license part it showing error 'corrupted license store' error.
Please help sort this issue.
Regards,
Ishant Walia