I ran into an interesting issue today. I have 5 additional polling engines with 2 on one domain (Domain 1) and three on another (Domain 2) connected to the same database. I migrated a bunch of nodes off of a Domain 1 polling engine to one of the Domain 2 polling engines and didn't think anything about it until my Network team told me the original polling engine and the one I moved it too is polling the devices!!! I fired up Wireshark and confirmed it. I checked in the Database and verified that the correct polling engine is assigned in the database. I also verified that when I unmanage the device, polling stops on the polling engine I moved the device too but the original polling engine continues polling it. Has anyone run into this before? What was the fix? We are using NPM v11.5.3. Thanks!
↧
Polling Engine gone wild
↧
Tell Us Your Unknown Devices v2.0
Those that have been part of the Thwack Community a while may be familiar with the long running Tell us your "Unknown" devices! thread which had been active since 2007. That thread had become too unwieldy, and most of the user submissions had been implemented many years ago. I recently reviewed each and every posting in that thread, verified what had been implemented in-product, and which ones had not so they could be included in a forthcoming release. With that done, it was time to lock that thread for good and start anew. This time, providing a bit more guidance along the way to ensure everyone is successful in providing the necessary information required to properly identify these devices.
What is an 'Unknown' Device anyway?
Orion does its best to automatically identify and classify nodes as they're added to Orion. There are however, new device types and models released all the time. It's entirely possible you might be managing a device right now that Orion is unable to properly identify. You can find these easily by going to [Settings - Manage Nodes], changing the 'Group by:' option to 'Machine Type' and clicking on the 'Unknown' category. It's also helpful to add the 'Polling Method' column to the layout, as this thread pertains exclusively to SNMP managed nodes.
Any SNMP managed nodes listed under the 'Unknown' Machine Type category are prime candidates for submission to this thread. All that's required is that you provide the devices SNMP System Object Identifier (SysObjectID), as well as the Make & Model of the device associated with that SysObjectID. This post is an excellent example of the perfect submission.
What Exactly is a SysObjectID?
I have yet to find a clearer definition for what the SysObjectID (System Object Identifier) is then the following excerpt which can typically be found written in virtually every vendor's MIB file verbatim.
Object Name: sysObjectID Object ID: 1.3.6.1.2.1.1.2.0 Object Syntax: OBJECT IDENTIFIER Object Access: read-only Object Status: mandatory Object Description: The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining `what kind of box' is being managed. For example, if vendor `Flintstones, Inc.' was assigned the subtree 1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.
Essentially, it's a string of numbers in dotted notation that is (hopefully) unique to at least the manufacturer, and in most cases, to the specific make and model of the device being monitored. It's how we identify for example, that the device vendor is 'Cisco' and the model is a 'Nexus C7018'. All System Object ID's begin with '1.3.6.1.4.1' followed by a number which uniquely identifies the manufacturer. The numbers which then follow typically identify the specific model of the device.
Where Can I Locate the SysObjectID?
If the device is already managed as a Node in Orion then you can locate the SysObjectID in the 'Node Details' resource as shown below, when viewing the node in the Orion web interface.
| Node Details | NET-SNMP |
|---|---|
 | Alternatively, you can use NET-SNMP to query the following SNMP OID to return the unique SysObjectID.
1.3.6.1.2.1.1.2.0
Below is an example of the 'snmpget' command line arguments which will return you the SysObjectID for the device.
snmpget -v2c -On -c public 10.199.5.103 1.3.6.1.2.1.1.2.0
The example above is executed against a device with the IP address of '10.199.5.103' using SNMPv2c, with the community string 'public'. Below is a screenshot of the resulting output from that command. The string of numbers and periods highlighted in yellow below is this device's unique SysObjectID.
|
My Device Incorrectly Appears Listed as 'NET-SNMP'
Linux hosts, virtual appliances, and even some network equipment built on Linux, FreeBSD, etc. are often identified as 'NET-SNMP'. This is because the SNMP Daemon running on those hosts is, you guessed it, NET-SNMP. Unfortunately, these vendors for some reason, have chosen not to implement their own unique SysObjectID, and instead kept the default SysObjectID '1.3.6.1.4.1.8072.3.2.10' which is designated for NET-SNMP. If you have a device such as this, fret not. There are a few options available to you if you'd like these devices to be properly identified by their appropriate vendor's make & model within Orion.
Install The Orion Linux Agent
The easiest solution would be to install the Orion Linux Agent on the device which is reporting itself to be 'NET-SNMP'. The Linux Agent does not rely upon SNMP to identify the machine type or vendor. Instead, the Agent will report the Vendor as 'Linux' and the 'Machine Type' as the Linux distribution running on the device as depicted in the screenshots below.
| Red Hat | Citrix XenServer |
|---|---|
 |  |
Modify NET-SNMP Configuration
Another approach is to customize NET-SNMP and Orion to properly reflect the Vendor and Machine Type. Simply following the steps outlined by adatole's post entitled No More Net-SNMP Nodes. This method uses a script osname.sh which is executed when a particular OID is is queried. Next, you would create a custom Device Poller to query that newly created OID and populate the Machine Type value in Orion for that device.
If you find it more fun to follow along, you can watch adatole walk you through the entire process in the following video.
Can't I Just Upload My Vendor's MIB File Here And You figure it Out?
While it would be nice if that's how it worked, unfortunately many (or most) vendors don't include this information within their MIB files. MIB files include a listing of all possible OIDs which could be polled across a wide variety of different devices (typically an entire product family), but it doesn't include the values which are returned by the devices (Enums notwithstanding). For that reason we need users, such as yourself, to post the SysObjectID's in this thread, along with the device vendor and model information so it can be included in our database.
If you'd still like your device's MIB file included in the Orion MIB database, for use with Network Performance Monitor's Universal Device Poller, or the Orion Platform's SNMP Trap Receiver, simply follow the steps outlined in KB article at the link below. The latest version of the MIB database, containing your submissions, can always be downloaded from within the Customer Portal.
↧
↧
NPM 12.3 Consuming All Memory
Since upgrading to NPM 12.3 / SAM 6.6.1 / VNQM 4.5 / NTA 4.4, my main server and both APE (Additional Polling Engines) boot up and run fine at a small fraction of the available memory, but as time passes, they consume it all.
Last week, I rebooted my main server since it was no longer functioning correctly (stops rendering pages) at noon on Thursday. It was running fine using 6.6GB of 16GB of RAM. By Friday at 6am, the server consumed all physical memory. My APEs both have 12GB of RAM. They work fine after a reboot, but consume available RAM in 12 hours. Also after the reboot, virtual memory starts climbing. That seems to peak at 80%. Eventually, the systems become unstable (not collecting data or rendering pages) and I reboot to clear. Systems work great after a reboot.
Are other having this issue?
↧
Splunk app for Solarwinds
I am currently learning Splunk and found that an app was recently released to display Solarwinds data inside Splunk. I have created a simple dashboard with some pretty generic stats.
Has anyone else had a chance to use this app,and if so what have you done with it?
↧
Using Your Custom HTML Resource To Properly Display SWQL Query Results
↧
↧
When you installed NPM, did you add Nodes manually or did you run discovery?
We would like to improve user experience and for such reason I'd like to better understand if our users prefers INITIALLY to add nodes manually or run product network discovery in order to import devices to NPM
↧
APE Error while editing Nodes Properties -The formatter threw an exception while trying to deserialize the message: There was an error while trying to deserialize parameter http://schemas.solarwinds.com/2008/Core:GetNodesByIdsResult. The InnerException me
Hi team,
Need your help with the below mentioned error. It is popping up when editing nodes of Additional Poller.
The formatter threw an exception while trying to deserialize the message: There was an error while trying to deserialize parameter http://schemas.solarwinds.com/2008/Core:GetNodesByIdsResult. The InnerException message was 'Member '_compareInfo' was not found.'. Please see InnerException for more details
↧
ASA SERIAL NUMBER
Hi All,
I have upgraded recently NPM 12.2 but I am not getting ASA Node View like below. can you please suggest?
↧
Configuring SolarWinds server to comply with DISA STIGs
I have searched the Thwack community and found a few posts that provide bits of information, so I wanted to see if there was a single source guidance document or site that will provide guidance for configuring a Network Management System (NPM, NTA, EOC, UDT Modules) for STIG compliance.
The boxes in question are utilizing: SQL Server 2016 and Windows Server 2016, and Microsoft IIS 10.0
If you need more information, please let me know. I am applying the .NET STIG as well.
↧
↧
Data gaps for interfaces with custom bandwidth
We commonly set custom bandwidth for monitored interfaces. If actual bandwidth exceeds the custom bandwidth, even by a single decimal point, the traffic isn't reported (extreme example in graph below). This behavior has existed since I started using SolarWinds over 7 years ago. Instead of setting the bandwidth to be slightly higher, is it possible to alter how SolarWinds handles the data instead of dropping it to the floor?
↧
Creating a Custom Usage Report.
Hi everyone,
Newbie to solarwinds so please go easy.
I have been tasked to find out the ISDN usage across our VoIP network (all cisco)
Currently i'm using a UNDP poller (cpmActiveDS0s) and polling devices every 5 min.
Currently im running the report on all devices for the last 30 days with min, avg and max.
How ever if I compare it with the actual daily usage the numbers seem off.
Is it possible to get a daily report for the last 30 days on all devices?
BTW im running this on report writer.
Any help/suggestions welcome.
Thanks,
↧
NPM: Create ServiceNow Incident showing warning message 'Some currently selected values are no longer valid'
The alert Trigger Action 'Configure Action:Create ServiceNow Incident' has started showing the following message "Some currently selected values are no longer valid. Please configure Incident properties.". Unfortunately Solarwinds does not specify which values are no longer valid. Our SNOW admin does not see any incorrect values being sent.
I'm having trouble tracking down what these invalid values are, are there specific logs for the SNOW integration that somebody could point me in the direction of please?
↧
Network Atlas Throwing Error for Linked Background in Fresh NPM 12.3 Install
I just finished a build out of NPM 12.3 using fresh Server 2016 VMs. I was testing out some new weather maps for our new main dashboard and I'm getting an error on the Network Atlas when I link to the National Weather Service's radar. I am getting the error "no image could be found at the specified location." It works fine in IE on the server.
Is anyone else getting an error on their environment with this link?
↧
↧
OSPF Neighbor Down Alerting
Hello Thwackers,
It would be a great help if someone provides me the solution for OSPF alert configuration.
NPM has out of the box alert for OSPF Neighbor State change based on the SNMP Polling( using OID - 1.3.6.1.2.1.14.10 to get OSPF neighbor states).
But what i observed is if any OSPF neighbor went down, the entries also disappear in the OSPF routing table(show ip ospf neighbor) and this makes solarwinds will get only either FULL or TWOWAY OSPF neighbor state entries and there will be no alerts for other states.
Can someone please explain how you are monitoring OSPF neighbor state changes?
Thanks,
Karthik A
↧
How to switch 10GE upstream transmission to GE upstream transmission of the upstream port on the Huawei MA5800 X15?
How to switch 10GE upstream transmission to GE upstream transmission of the upstream port on the Huawei MA5800 X15?
↧
When you installed NPM, did you add Nodes manually or did you run discovery?
We would like to improve user experience and for such reason I'd like to better understand if our users prefers INITIALLY to add nodes manually or run product network discovery in order to import devices to NPM
↧
HTML POST fails in 12.3
I have had some fun with the latest release where it appears that the configuration wizard does not correctly set up the IIS directory on Server 2016.
Initially I was on version 12.2 and I upgraded the server to 12.3.
The first thing that I noticed was that when going to the website, it redirected me to /Orion/Logout.aspx and then errored saying too many re-directions. Changing the URL to /Orion/Login.aspx got around this iddue but all users experienced this same issue until the changed the URL once even if they tried clearing the cache or used a clean machine. From then on they did not get redirected to Logout so didn't encounter the issue again.
However, we also use several custom resources that use HTML POST commands with PHP as the backend. These all fail to function as when you click on submit, it continues to the requested FORM page (normally itself) but does not provide any POST data. Please see my attached very simple test file.
Note that using another website on the same server, same IIS instance etc works correctly but it is a different site from Solarwinds NetPerfMon.
I have also tried with a vanilla build of the server with a clean install of Solarwinds NPM without it even on the domain with the same issue.
I have also noted that in the Solarwinds site, opening Handler Mapping for any Handler named *-Integrated-4.0 (see attached). When opening *-4.0_32bit and *-4.0_64bit works without error.
Other sites and the root/parent Handler Mapping has no errors and POST works correctly.
Has anyone else seen this or has anyone any suggestions that may help in resolving my issue?
I did raise a case with Solarwinds Technical Support but they have said that as this is with IIS and Customer Resources it is not something they will help any further with (although I was given a few idea which I tried without any success) even though I feel this is an issue with their Configuration Manager building the WebSite as this is something out of our control and appears to be where the issue lies.
Thanks in advance
↧
↧
Bulk Update Polling IP Address - Loopback IP
I apologize if this has already been addressed, I tried searching for this question/information and cannot find it.
When we first installed NPM and added our devices, we started using the LAN IP as the Polling IP Address. We have decided to start polling on the Loopback IP instead and I see where we can change the polling IP in the properties of the individual nodes but I have a need to update in bulk due to the large number of nodes in our environment.
We have over 3700 nodes so updating one at a time is not feasible. I tried a network discovery but since the devices were already in the DB, the polling IP did not change.
I really do not want to delete all the devices and start over due to history being lost so any help is much appreciated.
Thanks,
↧
Trap Viewer and Syslog Viewer Stopped Working
At one of our sites we recently started receiving an error when trying to launch Trap Viewer or Syslog Viewer. Any time one of the applications is launced, the following error is received.
The same general error appears for Syslog Viewer as well, except is says "Syslog Viewer has stopped working". We have checked our other sites and this seems to be the only one having this issue.
This instance is on a Windows Server 2012 R2 server. Current Orion Platform is 2017.3.5 SP5, NPM 12.2. The other instances that ARE working are on the same platform and product versions as well, with the same level of of Windows patches applied.
We have already tried rebooting the server and running a repair of Orion Core Services, neither of which helped. We have an open support ticket on this, but thought I'd reach out to the community to see if anyone has experienced this before or has any recommendations. Any help would be appreciated! Thanks.
↧
UDP Testing
Hi Team,
I use PortQry for testing udp port status.
The issue is that the community in the commands should be in exclamation marks(!).
portqry -n 127.0.0.1 -e 161 -p udp -cn !secure123!
How can we test the udp port if the community string includes the exclamation marks(!).
Thanks
Prashant
↧