↧
Are your Orion server and SQL database server in the same Active Directory domain?
↧
When you installed NPM, did you add Nodes manually or did you run discovery?
We would like to improve user experience and for such reason I'd like to better understand if our users prefers INITIALLY to add nodes manually or run product network discovery in order to import devices to NPM
↧
↧
Monitoring Datastores in NPM (no VMAN).
I'm trying to monitor our UCS datastores in NPM, I don't have Virtualization Manager, and I doubt I will be able to get the cost of the module approved.
I have added UCS management to the Vcenter management server, and it is polling successfully.
So I can see the datastores now as logical volumes on the host:
But I cannot for the life of me find them in the database. I've searched the tables high and low.
Anyone know where these values may be? My VIM tables are empty, as I don't have Virtualization Manager.
↧
Tell Us Your Unknown Devices v2.0
Those that have been part of the Thwack Community a while may be familiar with the long running Tell us your "Unknown" devices! thread which had been active since 2007. That thread had become too unwieldy, and most of the user submissions had been implemented many years ago. I recently reviewed each and every posting in that thread, verified what had been implemented in-product, and which ones had not so they could be included in a forthcoming release. With that done, it was time to lock that thread for good and start anew. This time, providing a bit more guidance along the way to ensure everyone is successful in providing the necessary information required to properly identify these devices.
What is an 'Unknown' Device anyway?
Orion does its best to automatically identify and classify nodes as they're added to Orion. There are however, new device types and models released all the time. It's entirely possible you might be managing a device right now that Orion is unable to properly identify. You can find these easily by going to [Settings - Manage Nodes], changing the 'Group by:' option to 'Machine Type' and clicking on the 'Unknown' category. It's also helpful to add the 'Polling Method' column to the layout, as this thread pertains exclusively to SNMP managed nodes.
Any SNMP managed nodes listed under the 'Unknown' Machine Type category are prime candidates for submission to this thread. All that's required is that you provide the devices SNMP System Object Identifier (SysObjectID), as well as the Make & Model of the device associated with that SysObjectID. This post is an excellent example of the perfect submission.
What Exactly is a SysObjectID?
I have yet to find a clearer definition for what the SysObjectID (System Object Identifier) is then the following excerpt which can typically be found written in virtually every vendor's MIB file verbatim.
Object Name: sysObjectID Object ID: 1.3.6.1.2.1.1.2.0 Object Syntax: OBJECT IDENTIFIER Object Access: read-only Object Status: mandatory Object Description: The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining `what kind of box' is being managed. For example, if vendor `Flintstones, Inc.' was assigned the subtree 1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.
Essentially, it's a string of numbers in dotted notation that is (hopefully) unique to at least the manufacturer, and in most cases, to the specific make and model of the device being monitored. It's how we identify for example, that the device vendor is 'Cisco' and the model is a 'Nexus C7018'. All System Object ID's begin with '1.3.6.1.4.1' followed by a number which uniquely identifies the manufacturer. The numbers which then follow typically identify the specific model of the device.
Where Can I Locate the SysObjectID?
If the device is already managed as a Node in Orion then you can locate the SysObjectID in the 'Node Details' resource as shown below, when viewing the node in the Orion web interface.
| Node Details | NET-SNMP |
|---|---|
 | Alternatively, you can use NET-SNMP to query the following SNMP OID to return the unique SysObjectID.
1.3.6.1.2.1.1.2.0
Below is an example of the 'snmpget' command line arguments which will return you the SysObjectID for the device.
snmpget -v2c -On -c public 10.199.5.103 1.3.6.1.2.1.1.2.0
The example above is executed against a device with the IP address of '10.199.5.103' using SNMPv2c, with the community string 'public'. Below is a screenshot of the resulting output from that command. The string of numbers and periods highlighted in yellow below is this device's unique SysObjectID.
|
My Device Incorrectly Appears Listed as 'NET-SNMP'
Linux hosts, virtual appliances, and even some network equipment built on Linux, FreeBSD, etc. are often identified as 'NET-SNMP'. This is because the SNMP Daemon running on those hosts is, you guessed it, NET-SNMP. Unfortunately, these vendors for some reason, have chosen not to implement their own unique SysObjectID, and instead kept the default SysObjectID '1.3.6.1.4.1.8072.3.2.10' which is designated for NET-SNMP. If you have a device such as this, fret not. There are a few options available to you if you'd like these devices to be properly identified by their appropriate vendor's make & model within Orion.
Install The Orion Linux Agent
The easiest solution would be to install the Orion Linux Agent on the device which is reporting itself to be 'NET-SNMP'. The Linux Agent does not rely upon SNMP to identify the machine type or vendor. Instead, the Agent will report the Vendor as 'Linux' and the 'Machine Type' as the Linux distribution running on the device as depicted in the screenshots below.
| Red Hat | Citrix XenServer |
|---|---|
 |  |
Modify NET-SNMP Configuration
Another approach is to customize NET-SNMP and Orion to properly reflect the Vendor and Machine Type. Simply following the steps outlined by adatole's post entitled No More Net-SNMP Nodes. This method uses a script osname.sh which is executed when a particular OID is is queried. Next, you would create a custom Device Poller to query that newly created OID and populate the Machine Type value in Orion for that device.
If you find it more fun to follow along, you can watch adatole walk you through the entire process in the following video.
Can't I Just Upload My Vendor's MIB File Here And You figure it Out?
While it would be nice if that's how it worked, unfortunately many (or most) vendors don't include this information within their MIB files. MIB files include a listing of all possible OIDs which could be polled across a wide variety of different devices (typically an entire product family), but it doesn't include the values which are returned by the devices (Enums notwithstanding). For that reason we need users, such as yourself, to post the SysObjectID's in this thread, along with the device vendor and model information so it can be included in our database.
If you'd still like your device's MIB file included in the Orion MIB database, for use with Network Performance Monitor's Universal Device Poller, or the Orion Platform's SNMP Trap Receiver, simply follow the steps outlined in KB article at the link below. The latest version of the MIB database, containing your submissions, can always be downloaded from within the Customer Portal.
↧
Polling Engine gone wild
I ran into an interesting issue today. I have 5 additional polling engines with 2 on one domain (Domain 1) and three on another (Domain 2) connected to the same database. I migrated a bunch of nodes off of a Domain 1 polling engine to one of the Domain 2 polling engines and didn't think anything about it until my Network team told me the original polling engine and the one I moved it too is polling the devices!!! I fired up Wireshark and confirmed it. I checked in the Database and verified that the correct polling engine is assigned in the database. I also verified that when I unmanage the device, polling stops on the polling engine I moved the device too but the original polling engine continues polling it. Has anyone run into this before? What was the fix? We are using NPM v11.5.3. Thanks!
↧
↧
OSPF Neighbor Down Alerting
Hello Thwackers,
It would be a great help if someone provides me the solution for OSPF alert configuration.
NPM has out of the box alert for OSPF Neighbor State change based on the SNMP Polling( using OID - 1.3.6.1.2.1.14.10 to get OSPF neighbor states).
But what i observed is if any OSPF neighbor went down, the entries also disappear in the OSPF routing table(show ip ospf neighbor) and this makes solarwinds will get only either FULL or TWOWAY OSPF neighbor state entries and there will be no alerts for other states.
Can someone please explain how you are monitoring OSPF neighbor state changes?
Thanks,
Karthik A
↧
Repetitive Email Alerts (Noise) - MUST HAVE REPORT!!!
< BACK TO TO THE MAGIC OF SQL SCRIPTS SERIES LIST
My Dear Thwackers,
If you are sick and tired of having to deal with continuous noise from hundreds of alerts and customer complaints due to missed problems - you must have this report, now!
Fact: 80% of your alerts and frustrations come from 20% of stuff within your infrastructure!
It is quite obvious that most of the negative impact on performance and productivity within the NOC is being caused by noise and repetitive alerts that is just keep coming through... non-stop. Ability to highlight them in a most efficient manner has never been easy, until now
I am here to offer you a gift - a custom made report that has served us for years in attacking and eliminating all the noise. It is compatible with Orion Platform 2015.1.2, NPM 11.5+ (also works with latest NPM 12)
Download > Import > Run > Action
... and just for fun - please publish a screenshot in the comments below of the top 5 stats that you will get- it is very interesting to know how this will play out in your environment
To your monitoring success,
Alex Soul
[UPDATES]
[30/08/2017]: Below we have discussed some bug fixes around extracting EmailTo from description. In the attached report this workaround was implemented, so, it should work for you straight out-of-the-box
[31/08/2017]: I have added % column, which will calculate percentage from total umber of email alerts sent over the defined period. I have also updated they way variables are being defined, so, you can now just open SQL script and change them all in one place defined in SET function on top of the script
[04/09/2017]: As suggested by tdanner - there is a better way of extracting EmailTo and EmailCC. This has been implemented in version 1.3 of the report
↧
Rancher Monitoring in Solarwinds Orion
Hello,
is there a way Solarwinds NPM and SAM can monitor Rancher and the containers?
Has anyone configured it before? It would be really helpful if someone can help me to get it sorted out.
Thanks,
Deepthi
↧
How often are F5 sync/failover status polled?
Does anyone know how often F5 sync and failover status is polled? I see it doesn't seem to be stored in the database historically anywhere.
I assume it fall under node statistics polling?
↧
↧
NPM - Cisco Stack Power Alerting
Hi all,
Just to put it out there, I'm relatively new to the thwack community, but happy to be here! I have learned a lot from these threads.
My question is in regards to alerting us to stack-power issues within our environment. We use stack-power on 3850's, and now will be doing the same with the catalyst 9300's as well. However, I just cannot seem to get Orion to alert me on when the stack-power ring goes down. Switch stack rings alert just fine, but not stack-power. I have tried using the "stack power redundancy lost" alert, and have made my own as well to try and fiddle with the settings.
Has anyone encountered issues like this? If so, any tips on how to resolve?
- Cisco 3850's
- Stack-power group mode = power sharing strict
- Cisco 9300's
- Stack-power group mode = power sharing strict
One of the alerts I have tried (2 screen grabs):
Another alert I have tried (1 screen grab):
↧
Migrating NPM from physical server to VM
Hi,
Our current environment is a physical server which is our primary poller, and we have a secondary poller which is a VM. Our primary poller is about three-five years old and is running 2012 R2. I read that in future NPM releases, 2012 will no longer be supported.
To those of you that running your primary poller as a VM, how close to the recommended specifications did you follow? We have 5 modules which they recommend 16 cores and 24GB of RAM. Also, do you dedicate a physical NIC for your deployment? On our secondary poller today, we have a shared NIC.
Thanks in advance,
↧
Limiting User to a single view ID / URL
I was given a request to create an account without a password so that anyone in the company can view a single noc view that I have limited to show very specific information.
The account is created without any permissions, a homepage view and default summary view as that noc page and no other access. However if the user were to change the view id in the url they can view other noc views which have a wide variety of information depending on the view. This is obviously a security risk. I have seen older posts on this issue but I have not seen any resolutions.
Anybody have any ideas how to lock down the users view so that it only shows the one id/url?
Thanks for your time.
↧
List of resources page not saved -CPU and MEMORY ?
Hi Guys,
I am working Vmware nodes. facing issue from 2 days. Please let me know
Click on list resources. we have list of volumes,interfaces and CPU &memory everything it appears. I click check box(tick mark) on CPU and memory after submit button
Again I checked CPU and Memory mark(tick mark and check box mark) not appears. Please give me suggestion.
Thanks and Regards,
Kishore.
↧
↧
Splunk app for Solarwinds
I am currently learning Splunk and found that an app was recently released to display Solarwinds data inside Splunk. I have created a simple dashboard with some pretty generic stats.
Has anyone else had a chance to use this app,and if so what have you done with it?
↧
Are your Orion server and SQL database server in the same Active Directory domain?
↧
When you installed NPM, did you add Nodes manually or did you run discovery?
We would like to improve user experience and for such reason I'd like to better understand if our users prefers INITIALLY to add nodes manually or run product network discovery in order to import devices to NPM
↧
Top xxx conversation report for video class of service - last day
Hellow guys,
I need to create a custom netflow report by SWQL or SQL for "Top xxx conversation for video class of service".
Kindly assist me.
Thanks in advance
Regards,
--Ghanshyam Bisen
↧
↧
Alerting Service Actions Failure
Hey Fellow Thwacksters, I have seen an issue with Alerting service in two different client environments this week and have got stumped as to how to proceed.
In both environments, the clients have confirmed that alerts are still being trigged and are showing up in the Orion web console, and dashboards are highlighting status changes (where applicable). However, they get no emails.
If I try and simulate an alert I get an error - "An Error has Occurred"
In the Alerting.Service.V2 log file it is full of errors like this:
2018-07-31 08:41:48,353 [55] ERROR SolarWinds.Orion.Core.Alerting.Service.ActionsResolverInternal.PendingExecutionActions - System.ServiceModel.FaultException`1[SolarWinds.Orion.Core.Common.CoreFaultContract]: ProvideFault failed, check fault information. (Fault Detail is equal to SolarWinds.Orion.Core.Common.CoreFaultContract(Unknown): System.ComponentModel.Composition.CompositionException: The composition produced a single composition error. The root cause is provided below. Review the CompositionException.Errors property for more detailed information.
1) The composition failed because it did not complete within '100' iterations. This is most likely caused by a cycle in the dependency graph of a part which is marked with a non-shared creation policy.
Resulting in: Cannot get export 'SolarWinds.Orion.Core.Actions.Impl.Email.EmailExecutor (ContractName="SolarWinds.Orion.Core.Models.Actions.Contracts.IActionExecutor")' from part 'SolarWinds.Orion.Core.Actions.Impl.Email.EmailExecutor'.
Element: SolarWinds.Orion.Core.Actions.Impl.Email.EmailExecutor (ContractName="SolarWinds.Orion.Core.Models.Actions.Contracts.IActionExecutor") --> SolarWinds.Orion.Core.Actions.Impl.Email.EmailExecutor --> AssemblyCatalog (Assembly="SolarWinds.Orion.Core.Actions, Version=2018.2.5200.5426, Cul...).
I've tried restarting the alerting service but that doesn't resolve the issue. If I stop and restart all the services then it seems to restore service but only for a short period of time.
Permission Checker didn't show any issues
Has anybody seen anything similar and resolved it?
I do have a case open with SolarWinds Tech - CASE# 151769 so will update if I hear anything back from them.
↧
Same alert not working in other instance of Solarwinds
Hi All,
I have the below alert setup for identifying devices not responding to SNMP/WMI which i found in the forum.
But the strange thing that i am observing is, i have 2 customers for which this alert is setup. In 1 its working perfectly fine but in other one its not.
The instance where its not working, its identifying except Windows devices... Not sure why its not able to report on Windows devices... I am using the exact same alert...
↧
OSPF Neighbor Down Alerting
Hello Thwackers,
It would be a great help if someone provides me the solution for OSPF alert configuration.
NPM has out of the box alert for OSPF Neighbor State change based on the SNMP Polling( using OID - 1.3.6.1.2.1.14.10 to get OSPF neighbor states).
But what i observed is if any OSPF neighbor went down, the entries also disappear in the OSPF routing table(show ip ospf neighbor) and this makes solarwinds will get only either FULL or TWOWAY OSPF neighbor state entries and there will be no alerts for other states.
Can someone please explain how you are monitoring OSPF neighbor state changes?
Thanks,
Karthik A
↧