Hi,

On e of our customer has for the time being a SW server with an IP address like x.y.z.131, the gateway is x.y.z.1.

The customer wish to setup the HA mode and wish also to keep the current IP address as the HA vip address.

Based on SW doc we have to convert the IP address to binary and compare to the gateway IP address.

Unfortunalty in our case

the gateway is

the VIP address is

we only match on the first 24 bits.

What could be the valid ip address in order to keep th VIP address the polling address ?

Cheers

I'm pleased to announce that the Network Performance Monitor (NPM) 12.4 Beta 1 is now available!

This beta includes certain items that are mentioned in What We're Working on for NPM (Updated June 1st, 2018) post.

At SolarWinds, being customer-driven and responsive to customer needs is a fundamental part of how we build software. Beta feedback is one of the key avenues we use to inform and adjust what we're building so that it can fit your needs and your environment. We'll take feedback anytime we can get it, but now is the best time to provide feedback that can affect the product.

As an added incentive, beta users who submit feedback will receive 3,000 THWACK® points to buy swag at the THWACK Store. That's enough points to score yourself all sorts of stuff.

To get access to the beta, you need to be a customer on active maintenance for NPM and sign up here. To share feedback, please post on the NPM Beta forum.

Sincerely,

NPM Team

Since upgrading to NPM 12.3 / SAM 6.6.1 / VNQM 4.5 / NTA 4.4, my main server and both APE (Additional Polling Engines) boot up and run fine at a small fraction of the available memory, but as time passes, they consume it all.

Last week, I rebooted my main server since it was no longer functioning correctly (stops rendering pages) at noon on Thursday. It was running fine using 6.6GB of 16GB of RAM. By Friday at 6am, the server consumed all physical memory. My APEs both have 12GB of RAM. They work fine after a reboot, but consume available RAM in 12 hours. Also after the reboot, virtual memory starts climbing. That seems to peak at 80%. Eventually, the systems become unstable (not collecting data or rendering pages) and I reboot to clear. Systems work great after a reboot.

Are other having this issue?

Hi,

Is there a way to stop alerts from triggering when doing a maintenance? I've tried pausing the alerts before the maintenance, but when I resume the alerts after the maintenance is complete I get a flood. I would rather not unmanage all my nodes because(and correct me if I am wrong) then when I go to re-enable them by selecting all, couldn't that enable devices that were manually unmanaged?

Thank you, Pat

I just upgraded (Orion Platform 2015.1.1, SAM 6.2.0, QoE 2.0, NCM 7.3.2, NPM 11.5.1, WPM 2.2.0, IVIM 2.0.1) and found the Capacity Forecast stuff... too cool!  I have been telling my self to do this through some sort of custom report, but you have save me from spending the time!

One issue (I know, why look a gift horse in the mouth)....

I think the Storage/Volume Capacity Forecast is based off percentage, this works great until you add space to the drive.  Then the forecast is useless for months on that node.  If you used consumed space and the calculated the percentage using current total, it would not go all wonky after adding space.

This is not exactly a situation I would have thought of if I made my report, but now that we are on the other side, I would change it to handle this.

Is this a bug?  Feature request?  first report?

Hi,

I am trying to stop alerts coming in for nodes behind a switch. I created a group for the nodes behind the switch and increased the polling for those device as to not trigger before the switch...this works for node down alerts. I can reload the switch and not get any "node down" alerts. We are also monitoring these devices behind the switch for slow response time, so those alerts still come in.

Is there a way I can include these "slow response time" alerts in the dependency somehow so I don't get them when I reload the switch?

Thank you, Pat

Good morning all,

Very (very) new to the community and Solarwinds products.

I have a question regarding the AWS throttling emails. We receive them and they are very generic in content.

For example, we currently get this information...AWS Throttling applied on Cloud Instance ${N=SwisEntity;M=Name} for account "${N=SwisEntity;M=CloudAccount.Name}" while calling EC2 API in region ${N=SwisEntity;M=CloudRegion.DisplayName}. Whereas we would like the email to state...AWS Throttling applied on Cloud Instance Rotuer1 for account "Account Name" while calling EC2 API in region Name Of Region.

Please note that we are in the process of rolling out NPM, so we have the default values in place. My boss has tasked me with cleaning up the emails. I just need to know how to get the specifics in them for now and I'll work on taking training classes at a later date.

How can we customize them so that we know specifically which node is down or experiencing trouble?

Thanks in advance.

Hello Thwack Community,

we are in need of upgrading our Solarwinds environment.

This is how our current Solarwinds infrastructure is setup:

Separate Server WIN SQL 2012 SP4 Database Server (Shared with other Databases)

Seperate Server WIN 2012 R2 Dedicated for NTM (Latest version installed)

Separate Server WIN 2012 R2 Solarwinds Orion Server (2015.1.3) Containing the following Modules:

NCM 7.4.1

SAM 6.2.1

NPM 11.5.2

IVIM 2.1.1

DPA 9.2.0 (Does not appear to have been integrated with any databases)

NTA 4.1.2

Separate Server Linux VMAN 6.3.1.575 Migration into the Orion Platform and decommission this server.

We need a clear upgrade path with these stipulations.

We are restricted to staying on the current Orion Server OS Windows 2012 R2. So any upgrade must work with that OS.

Same restriction for the Database Server OS Windows Server SQL 2012 SP4 .

Additionally we may be adding a new module VNQM (VoIP & Network Quality Manager) to the system and wonder if during this upgrade would be the right time for it.

I am getting conflicting advice between the Upgrade Advisor and directly from a support case I created within the Solarwinds customer portal.

Solarwinds Support Advice:

• Upgrade NPM to 12.0 and then to 12.3.
• This will upgrade all the other modules to the latest supported OS versions.

Solarwinds Product Upgrade Advisor:

Initially, the advisor reports that our current environment of NPM 11.5.2 and NCM 7.4.1 are incompatible.  We have not experienced any issues with the server to this point.

Increasing the NPM version number from 11.5.2 to 11.5.3 will allow me to run the advisor with the following results:  (not sure if that makes this advice invalid)

• Upgrade database server to MS SQL server 2012 SP3?  (I asked support on this and they said to disregard that notification as SP4 is compatible)

• NPM from 11.5.3 to 12.0
• NCM from 7.4.1 to 7.5
• SAM 6.2.1 to 6.2.4
• NTA 4.1.2 to 4.2
• NPM 12.0 to 12.3
• Upgrade without download:
• NCM 7.5 to 7.8
• SAM 6.2.4 to 6.6.1
• NTA 4.2 to 4.2.3
• Install VNQM 4.5
• Install  VMAN 8.2.1  (I couldn't list VMAN in current configuration as the version number of the appliance is not available to select)

I have attached the advisor pdf.

My questions are:

1. What advice should I go with?

2. This seems like a large upgrade, could this potentially take 4 or more hours?

3. Should I add VNQM to this upgrade or seperately?

4. Any other advice or potential issues I should be aware of?

Thank you very much in advance for your time and support,

--Chris

Hi could someone please help this SQL novice and provide a little guidance on where I'm going wrong?

I have inherited a deployed system and was trying to apply a filter to the SQL below by adding a where clause (based on the content of the on the caption or NodeName field)

when I add this to the report : -->   Where NodeName like 'INSERT-SOME-VALUE'

a "Query is not valid is received"

has anyone have any insights as to what is causing the error?

thanks in advance

Andy

        DECLARE @StartDate DateTime
        DECLARE @EndDate DateTime

        SET @StartDate = ${FromTime}
        SET @EndDate = ${ToTime}

        SELECT Interfaces.InterfaceId,
        Nodes.NodeID,
        Nodes.Caption AS NodeName,
        Interfaces.Caption AS Interface_Caption,
        Maxbps_In90,
        Maxbps_Out90,
        Maxbps_In95,
        Maxbps_Out95,
        Maxbps_In99,
        Maxbps_Out99
        FROM Nodes
        INNER JOIN Interfaces ON Nodes.NodeID = Interfaces.NodeID
        INNER JOIN (
        SELECT InterfaceID,
        dbo.GetInBpsPercentile(InterfaceID, @StartDate, @EndDate,90) AS Maxbps_In90,
        dbo.GetOutBpsPercentile(InterfaceID, @StartDate, @EndDate,90) AS Maxbps_Out90,
        dbo.GetInBpsPercentile(InterfaceID, @StartDate, @EndDate,95) AS Maxbps_In95,
        dbo.GetOutBpsPercentile(InterfaceID, @StartDate, @EndDate,95) AS Maxbps_Out95,
        dbo.GetInBpsPercentile(InterfaceID, @StartDate, @EndDate,99) AS Maxbps_In99,
        dbo.GetOutBpsPercentile(InterfaceID, @StartDate, @EndDate,99) AS Maxbps_Out99
        FROM InterfaceTraffic
        WHERE InterfaceTraffic.DateTime >= @StartDate AND InterfaceTraffic.DateTime <= @EndDate
        GROUP BY InterfaceID
        ) TrafficStat
        ON Interfaces.InterfaceID = TrafficStat.InterfaceID

Hi Team,

We are using percentile utilization report and it is good to get the data in terms of bps.

Could someone help to get this data in terms of percentage usage of configured bandwidth?

Thanks

Prashant

After upgrading NPM from 12.2 to 12.3 I've had an issue with using a filter on the "Volumes with High Percent Usage" resource. We've been using this filter for years to keep a few dozen volumes that it is acceptable to have a volume with high percentage usage out of this table. There must have been a change between these reversions and this has rendered my filter that relies on a custom property value useless. I see that there is a "CustomProperties" SWQL entry under the resource but I have not figured how to use filter with my custom property value.

Does anyone use "CustomProperties" to filter volumes? Can you please provide an example of how you are tying in your custom property value into the filter?

Thanks for any help!

The other thread is closed so I figured I would start a new one I usually get more help here than actually contacting support.

So same issues as before but instead of the server not responding in 36 hours or so it took maybe a week but it is the SAME issues. 

1. Server stopped sending alerts out sometime around 11AM on the 4th.

2. Logged onto server and opened Orion service manager and both the module engine and the administration service were going back and forth between running and stopping. 

3. Orion could not connect to SQL

4.  I have some alerts that at are going out but not sure if they are legit or not. 

5. After the reboot I notice that a good chunk of my nodes interfaces are 'unknown' this looks like it fixes itself but again something else going on. 

I have applied the 'hotfix' that you all pushed out to try to fix this.

I have done the change from streaming to buffered

I have done the registry change for the ports

The only thing I have not done is revert the snap shots back to June 14th prior to the update so Solarwinds is stable again. 

At this point I am going to schedule a task in VM Ware to reboot the server every night.  That is pretty much the only way I will know Solarwinds will actually work. 

Thoughts?  serenaaLTeReGo

NPM: 12.2

For those of you who want to know which nodes have been muted in your environment, this is how I found nodes that have been muted using Microsoft Access. The table names and columns should be the same across SQL server, MS Acess SQL, and SWQL. To use it in the different areas, you will just need to modify the syntax.

The following tables will need to be mapped in MS Access:

SELECT dbo_AlertSuppression2.SuppressFrom, dbo_AlertSuppression2.SuppressUntil, dbo_AuditingEvents.AccountID AS ChangedBy, dbo_Nodes.NodeID, dbo_Nodes.IP_Address, dbo_Nodes.Caption, dbo_Nodes.StatusDescription, dbo_Nodes.Vendor, dbo_Nodes.MachineType, dbo_Nodes.UnManaged, dbo_Nodes.UnManageFrom, dbo_Nodes.UnManageUntil

FROM dbo_AlertSuppression2, (dbo_Nodes INNER JOIN (dbo_AuditingEvents INNER JOIN dbo_AuditingActionTypes ON dbo_AuditingEvents.ActionTypeID = dbo_AuditingActionTypes.ActionTypeID) ON dbo_Nodes.NodeID = dbo_AuditingEvents.NetworkNode) INNER JOIN dbo_AlertObjects ON dbo_Nodes.NodeID = dbo_AlertObjects.RelatedNodeId

WHERE (((dbo_AuditingActionTypes.ActionType) Like "Orion.AlertSuppressionAdded" Or (dbo_AuditingActionTypes.ActionType) Like "Orion.AlertSuppressionChanged") AND ((dbo_AlertObjects.EntityUri)=[dbo_AlertSuppression2].[EntityUri]) AND ((dbo_AlertSuppression2.EntityUri) Like "swis://*/Orion/Orion.Nodes/NodeID=*" And (dbo_AlertSuppression2.EntityUri) Not Like "swis://*/Orion/Orion.Nodes/NodeID=*/*"))

GROUP BY dbo_AlertSuppression2.SuppressFrom, dbo_AlertSuppression2.SuppressUntil, dbo_AuditingEvents.AccountID, dbo_Nodes.NodeID, dbo_Nodes.IP_Address, dbo_Nodes.Caption, dbo_Nodes.StatusDescription, dbo_Nodes.Vendor, dbo_Nodes.MachineType, dbo_Nodes.UnManaged, dbo_Nodes.UnManageFrom, dbo_Nodes.UnManageUntil

ORDER BY dbo_AlertSuppression2.SuppressFrom DESC;

NPM: 12.2

For those of you who want to know which nodes have been unmanaged in your environment, this is how I found nodes that have been unmanaged using Microsoft Access. The table names and columns should be the same across SQL server, MS Acess SQL, and SWQL. To use it in the different areas, you will just need to modify the syntax.

The following table will need to be mapped in MS Access:

SELECT dbo_Nodes.NodeID, dbo_Nodes.IP_Address, dbo_Nodes.Caption, dbo_Nodes.StatusDescription, dbo_Nodes.Vendor, dbo_Nodes.MachineType, dbo_Nodes.UnManaged, dbo_Nodes.UnManageFrom, dbo_Nodes.UnManageUntil

FROM dbo_Nodes

WHERE (((dbo_Nodes.UnManaged)=True))

ORDER BY dbo_Nodes.UnManageFrom DESC;

NPM: 12.2

For those of you who want to know node SSL Certificate expiration dates in your environment, this is how I found SSL Certificate expiration dates for nodes using Microsoft Access. This assumes you have set up SSL Certificate Application/Component monitoring already on nodes of your choice. The table names and columns should be the same across SQL server, MS Acess SQL, and SWQL. To use it in the different areas, you will just need to modify the syntax.

Please have the following tables mapped in MS Acess:

In this example, I have only set up SSL Monitoring on Cisco devices so only Cisco devices are showing.

SELECT dbo_Nodes.NodeID, dbo_Nodes.IP_Address, dbo_Nodes.Caption, dbo_APM_AlertsAndReportsData.ComponentStatus, IIf(dbo_APM_AlertsAndReportsData.StatisticData,dbo_APM_AlertsAndReportsData.StatisticData,Null) AS [Days Remaining], IIf(dbo_APM_AlertsAndReportsData.ComponentMessage,Mid(dbo_APM_AlertsAndReportsData.ComponentMessage,InStr(dbo_APM_AlertsAndReportsData.ComponentMessage,":")+1,InStr(dbo_APM_AlertsAndReportsData.ComponentMessage,"/")),Null) AS [Expiration Date], dbo_Nodes.Vendor, dbo_Nodes.MachineType, dbo_Nodes.IOSImage, dbo_Nodes.IOSVersion, dbo_APM_AlertsAndReportsData.ComponentName

FROM dbo_Nodes LEFT JOIN dbo_APM_AlertsAndReportsData ON dbo_Nodes.NodeID = dbo_APM_AlertsAndReportsData.NodeId

WHERE (((dbo_APM_AlertsAndReportsData.ComponentName) Like "*SSL Cert*"))

ORDER BY IIf(dbo_APM_AlertsAndReportsData.StatisticData,dbo_APM_AlertsAndReportsData.StatisticData,Null), IIf(dbo_APM_AlertsAndReportsData.StatisticData,dbo_APM_AlertsAndReportsData.StatisticData,dbo_APM_AlertsAndReportsData.ComponentStatus) DESC;

We are testing Solarwinds NPM for monitoring a LAN&WAN network of over 2000 devices (routers, switches, firewalls). The network is highly resilient with dual connections to most sites and between routers and switches, so we need to rely heavily on interface alerts, not just node down.

All the network devices will be in NPM, but PC / Laptop / Server devices that connect into the switches at the sites are not in NPM (they are not our responsibility)

We want interface down alerts for any interfaces that are used to connect the device we have in NPM together - i.e. (inter site links, router to switch links, switch to switch links etc) but we do not want interface down alerts for the switch interfaces used to connect to PCs / laptops etc.

Obviously, we could use a custom property to mark each interface we wanted to alert on, but that's going to be a massive job to trawl through all the devices and manually mark the interfaces we are interested in.

Given that all the interfaces we want to alert on connect nodes that are in NPM, and that we are using Network Topology Mapper to generate maps, is there any way we can use the topology information to help enable alerts on the interfaces used for interconnects and ignore the "end user device" interfaces?

I need to alert on a routing neighbor going down that includes the VRF Name and the Routing Neighbor IP.

Example:   The neighbor (routing neighbor ip) in VRF (vrf name) on (device name) is down.

So if the following are true:

routing neighbor = 20.20.20.254

vrf name = Corporate_DR

device name = pri_core_rt01

Then the alert would read as "The neighbor 20.20.20.254 in VRF Corporate_DR on pri_core_rt01  is down."

Unfortunately, when I get to the Trigger Actions screen; I am only able to access variables related to the first Trigger Condition I set.  For example, if VRF is first I cannot find the variable for the Routing Neighbor IP.

Any help would be very much appreciated!

Cheers,

Recently in a conversation with some Thwack MVPs there was some lamenting over PerfStack™ color palette. I had a few minutes so I decided to look into it. This is a quick write up from the results of that conversation.

I found the path for the cascading style sheets is here: \inetpub\SolarWinds\ui\modules\perfstack\css

At the moment I do not understand the difference between perfstack.css and the perfstack.min.css - how they interact or if only one is necessary. The kicker for a simple search and replace is the values in perfstack.min.css don't exactly match what is in perfstack.css. An example is .color-1 rgba(181, 34, 0, 0.8) will be in perfstack.css and .color-1 rgba(181,34,0,.8) will be in perfstack.min.css. The spaces are removed and the leading zero on the saturation is dropped. In addition, perfstack.min.css has no CR/LFs, so it is one line. It would be nice to understand the relationship between the two files. Is perfstack.css used as the base and the perfstack.min.css was created after the web server started? Otherwise, it can be a little painful but you only have to do it once.

I thought it would be neat to be able to create several sets of files based on some "top x" list of web color schemes then post them with an article saying, if you want to use this color palette use this perfstack_Iowa_State_.css file set and replace your originals. Or perhaps write a PowerShell script that would take a file containing a color palette of your design and create the PerfStack™ color palette files for you. Alas, I do not have the time right now to do either of these things.

So using the site http://paletton.com and data from the Iowa State University web site I created a scheme based on Iowa State University. There are five basic colors from ISU, but there are 17 in the css. I used the basic colors and had paletton give me the rest of the color palette to create the two files. After making a backup of the original file and storing it in a safe place, simply replace perfstack.min.css on the web server with the perfstack.min.IowaState.css file. Do the same with perfstack.IowaState.css and perfstack.css.

The files use a combination of HEX and RGBA color definitions. The colors are paired up in different classes so that the legends in PerfStack™ and the charts match up.These color changes will effect all your PerfStack™ charts.

I hope to expand upon this as time permits. [I used Iowa State since my boss went there, my undergraduate school didn't have a football team.]