Quantcast
Channel: THWACK: All Content - Network Performance Monitor
Viewing all 21870 articles
Browse latest View live

Dynamic IP and releasing polling IP address?

$
0
0

Issue/Question: Is there a way, when the FQDN can't be resolved to release the polling IP?

 

Have an issue when using Dynamic IP Addresses and not releasing the polling IP address.

 

In our environment, systems come up and check an IP out from a Server (similar to but not DHCP) and then a DNS record is created. When the system goes down the IP is released and the DNS record is deleted.

 

I can track nodes just fine by adding their FQDN. The issue is the node shows the polling IP and does not release this IP when the DNS is deleted. When the original FQDN comes back up, a topology change happens and the polling IP updates.

 

The issue is the polling IP gets handed back out to another server, with a different FQDN, and NPM shows the original node as up even though it is not giving a false positive on status.

 

Is there a way, when the FQDN can't be resolved to release the polling IP?


Struggling with Automatic Network Discovery filtering

$
0
0

I feel like I'm missing something regarding the filtering options for automatic network discovery.  Under "Monitoring Settings" within one of my discoveries I have it set to "Automatically monitor based on my defined monitoring settings".  Within "Define Monitoring Settings" I want to make it so that things like removable media, Windows Scheduled Tasks, and some interface descriptions simply don't show up in the results.  To this end I've tried numerous different things within the interface settings, where it currently looks like the image below:

 

I've also tried setting the drop down to "does not match regular expression" with a value of "ISATAP|Miniport|Teredo|Lightweight|Async|Software Loopback|Multiplexor|Kernal|sit0|Null|Backplane|Extended", which did not work.  Further within the "Define Monitoring Settings" my volumes and applications settings look like this:

 

However, regardless of these settings (or any others I've tried) I *always* get those interfaces, Compact Disks, Floppy Disks, and Windows Scheduled Tasks.  For example:

 

What am I missing?

Enumeration Map Issue

$
0
0

I am trying to enumerate values taken from the following table poller.

 

I created a map

 

 

And applied it to my devices. 

It's the one in yellow

 

But here all I see are the raw value's instead of my mapped values.

 

Same here.

 

 

Any idea what I am doing wrong?

SQL Server Compact Edition 3.5

$
0
0

Hi,

 

I understand this is needed as part of the job engine but our security team has just jumped all over my back as it is EOL and support ended back in April 2018.

 

Version 4 is available but i'm not sure i can just go install the latest version without causing any issues, has anyone got any experience with this and how to keep the security team happy??

 

Thanks

Can you use SWQL functions within SWQL queries in Alerts?

$
0
0

Background: We want to set up Orion so that certain teams get alerts on their own nodes.  We want to leverage custom properties to do this, so that one alert for "Node Down" can cover all teams (such as how people have done here: https://thwack.solarwinds.com/docs/DOC-177456).

 

I was wondering if it is possible to utilize SWQL functions within the query.  For example, I have a customer property called "TonyTest".  It contains the following info: "FirstName LastName (email@domain.com)".  In SWQL Studio I've written and successfully executed this query:

 

SELECT SubString(TonyTest,(CharIndex('(',TonyTest))+1,((CharIndex(')',TonyTest))-((CharIndex('(',TonyTest))+1))) AS TonyTest

FROM Orion.NodesCustomProperties

WHERE NodeID = '1491'

 

This succeeds in just pulling the email address, by only grabbing the string of text in between the opening and closing parenthesis.  The idea being we can have the custom property contain both a descriptor for the group as well as their email address, but just pull the email address out.

 

However, when trying to create the query for the alert's email To: field I am not having any luck.  I am trying the following in the To: field:

 

${N=SWQL;M=SELECT SubString(TonyTest,(CharIndex('(',TonyTest))+1,((CharIndex(')',TonyTest))-((CharIndex('(',TonyTest))+1))) AS TonyTest FROM Orion.NodesCustomProperties WHERE NodeID = '${N=SwisEntity;M=NodeID}'}

 

When I click "NEXT" I get an error of "Please specify a valid email address." and it won't let me proceed.

 

Can you use SWQL functions within the query type like the ones that start with "${N=SWQL"?

Network Latency and Packet Loss graph question

$
0
0

Hello! I have taken this graph below however can you explain what does the red area on the right means? does it mean that we experiences up to 80% packet loss during that time?

 

SolarWinds Agent using 2-3+ GB RAM

$
0
0

We're noticing that the SolarWinds agent is consuming a significant amount of RAM on our servers.

In this instance, it's using over 3GB.

 

Restarting the agent does temporarily alleviate the issue. I'm thinking of running a scheduled task on all my servers to restart the agent daily, but that seems to be masking the problem.

Does anyone have any ideas on how to resolve this?

Change EngineID of pollers

$
0
0

We will upgrade to NPM version 12.3. We are currently running version 12.0.1. We have new servers built and will take the db from 12.0.1 and install 12.3 on that system. How can I update the polling enginesID to match the one on the 12.0.1 version


SSH from Node details screen

$
0
0

In NPM Is it possible to change the Node detail screen to allow SSH from that screen instead of telnet?

Anyway to Generate Alert After Threshold Has Been Hit X Number of Times?

$
0
0

Hello,

 

I'm looking for a way to have an alert generated when the utilization threshold is hit a number of times, say 10 times in a week span? We already have alerting for high receive / transmit utilization on interfaces, and I am looking for a way to receive a specific alert when this trend continues on any given interface. This would be very helpful for bandwidth capacity and circuit upgrade evaluations. Is there a way to achieve this?

 

Thanks!

 

Jonathan

APE Error while editing Nodes Properties -The formatter threw an exception while trying to deserialize the message: There was an error while trying to deserialize parameter http://schemas.solarwinds.com/2008/Core:GetNodesByIdsResult. The InnerException me

$
0
0

Hi team,

 

Need your help with the below mentioned error. It is popping up when editing nodes of Additional Poller.

 

The formatter threw an exception while trying to deserialize the message: There was an error while trying to deserialize parameter http://schemas.solarwinds.com/2008/Core:GetNodesByIdsResult. The InnerException message was 'Member '_compareInfo' was not found.'. Please see InnerException for more details

Cisco IOS 16.6.3 no longer shows a PRI D channel as a seperate channel

$
0
0

We monitor the up/down status of PRI's with NPM by monitoring the D channel of the PRI.  (Channel 23:Signaling).  Beginning with the implementation of Cisco IOS 16.6.3 on routers, we see that that channel has disappeared from being discovered by NPM.  We now see only the 24 voice channels.  Doing an SNMP walk of the MIB confirmed this.

 

Have others noticed this?  How are others monitoring the up/down status of PRI's using NPM?   I was thinking that possibly monitoring channel 23 would accomplish up/down monitoring, but if this is truly only the voice portion of the circuit, it won't work.  Appreciate any input others have.

 

Getting an error while clicking on Edit Node.

$
0
0

Hi,

I am getting an error when clicking on edit node " " Unexpected Website Error

The formatter threw an exception while trying to deserialize the message: There was an error while trying to deserialize parameter http://schemas.solarwinds.com/2008/Core:GetNodeWithOptionsResult. The InnerException message was 'Member '_compareInfo' was not found.'. Please see InnerException for more details"

I have traced the https packets and it is getting aborted. Can you please let me know what can be the reason for the same?

 

Rogue AP detection

$
0
0

Do you have a need to detect rogue APs connected to your network?

How to service-now integrate with solarwinds

$
0
0

Hi Team,

 

we are planning service now integrate with solarwinds.

I saw option available in service now(ALL SETTINGS -->Manage service now instance)

 

any one please guide to me.

 

We are using NPM-12.3

 

Thanks and Regards,

Kishore.


Allied Telesis - CPU/Memory stats for standalone/VCStack devices

Netpath Services Purged

$
0
0

I noticed that all of the netpath services I configured previously have been purged. I installed Orion Platform 2018.2 HF5 recently and I'm wondering if this was the cause and if anyone else has experienced this problem with this or earlier releases.

AT&T U110 devices, dial backup monitoring

$
0
0

Hi,

 

We have a requirement to monitor the AT&T U110 devices Dial Backup related monitoring.

 

The monitoring should be neabled to trigger an alert, if the U110 devices Have been in Dial Backup for more than a defined number of minutes

 

 

Has anyone is monitoring the above requirement or any idea? Geek Speak - Whether traps can provide this information?

 

 

 

Node Downtime with Duration and Minimum Length Filtering

$
0
0

**REQUIRES ORION PLATFORM 2018.2 OR ABOVE**

 

I had assembled this based on a much older SQL report, and then updated it to SWQL, then added some more intelligence to it so you can filter it based on the duration of the outage, search by the device names, and it has a method of letting you know when nodes have been down so long they aged out of the events table.

 

Based on popular requests I figured it was time to put it out here to make it easier for the Thwackers to find and use.  This is intended to be used inside the Custom Query Resource


 

select n.caption as [Device]
-- shows the current status icon
, '/Orion/images/StatusIcons/Small-' + n.StatusIcon AS [_IconFor_Device]
-- makes a clickable link to the node details
, n.DetailsUrl as [_linkfor_Device]
-- shows the timestamp of the down event, if there is no timestamp then is says the event was greater than the number of days in your event retention settings
, isnull(tostring(t2.[Down Event]),concat('Greater than ',(SELECT CurrentValue FROM Orion.Settings where settingid='SWNetPerfMon-Settings-Retain Events'),' days ago')) as [Down Event]
-- shows the timestamp of the up event, unless the object is still down
, isnull(tostring(t2.[Up Event]),'Still Down') as [Up Event]
-- figures out the minutes between the down and up events, if the object is still down it counts from the down event to now, displays 99999 if we cannot accurately determine the original downtime, and 
, isnull(MINUTEDIFF(t2.[Down Event], isnull(t2.[Up Event],GETUTCDATE())),99999) as Minutes


from orion.nodes n
left join (SELECT    
 -- Device nodeid used for our join   
 StartTime.Nodes.NodeID     

 -- Down Event time stamp in local time zone    
 ,ToLocal(StartTime.EventTime) AS [Down Event]      
 -- Up Event time stamp in local time zone    
 ,(SELECT TOP 1    
 ToLocal(EventTime) AS [EventTime]    
 FROM Orion.Events AS [EndTime]    
-- picks the first up event that is newer than the down event for this node
 WHERE EndTime.EventTime >= StartTime.EventTime   
-- EventType 5 is a node up 
 AND EndTime.EventType = 5    
 AND EndTime.NetObjectID = StartTime.NetObjectID    
 AND EventTime IS NOT NULL    
 ORDER BY EndTime.EventTime    
 ) AS [Up Event]      
-- This is the table we are querying    
FROM Orion.Events StartTime      
-- EventType 1 is a node down
WHERE StartTime.EventType = 1        
) t2 on n.NodeID = t2.nodeid


-- this is how I catch nodes that are down but have aged out of the events table
where (n.status = 2 or t2.nodeid is not null)


-- If you want to filter the results to only show outages of a minimum duration uncomment the below line
--and MINUTEDIFF(isnull(t2.[Down Event],(GETUTCDATE()-30)), isnull(t2.[Up Event],GETUTCDATE())) >  60


-- if you want to use this query in a search box of the Custom Query resource uncomment the below line
--and n.Caption like '%${SEARCH_STRING}%'


order by t2.[down event] desc

 

-Marc Netterfield

    Loop1 Systems: SolarWinds Training and Professional Services

Tell Us Your Unknown Devices v2.0

$
0
0

Those that have been part of the Thwack Community a while may be familiar with the long running Tell us your "Unknown" devices! thread which had been active since 2007. That thread had become too unwieldy, and most of the user submissions had been implemented many years ago. I recently reviewed each and every posting in that thread, verified what had been implemented in-product, and which ones had not so they could be included in a forthcoming release. With that done, it was time to lock that thread for good and start anew. This time, providing a bit more guidance along the way to ensure everyone is successful in providing the necessary information required to properly identify these devices.

 

What is an 'Unknown' Device anyway?

 

Orion does its best to automatically identify and classify nodes as they're added to Orion. There are however, new device types and models released all the time. It's entirely possible you might be managing a device right now that Orion is unable to properly identify. You can find these easily by going to [Settings - Manage Nodes], changing the 'Group by:' option to 'Machine Type' and clicking on the 'Unknown' category. It's also helpful to add the 'Polling Method' column to the layout, as this thread pertains exclusively to SNMP managed nodes.

 

Any SNMP managed nodes listed under the 'Unknown' Machine Type category are prime candidates for submission to this thread. All that's required is that you provide the devices SNMP System Object Identifier (SysObjectID), as well as the Make & Model of the device associated with that SysObjectID. This post is an excellent example of the perfect submission.

 

What Exactly is a SysObjectID?

 

I have yet to find a clearer definition for what the SysObjectID (System Object Identifier) is then the following excerpt which can typically be found written in virtually every vendor's MIB file verbatim.

 

Object Name: sysObjectID
Object ID: 1.3.6.1.2.1.1.2.0
Object Syntax: OBJECT IDENTIFIER
Object Access: read-only
Object Status: mandatory
Object Description: The vendor's authoritative identification of the  network management subsystem contained in the  entity. This value is allocated within the SMI  enterprises subtree (1.3.6.1.4.1) and provides an  easy and unambiguous means for determining `what  kind of box' is being managed. For example, if  vendor `Flintstones, Inc.' was assigned the  subtree 1.3.6.1.4.1.4242, it could assign the  identifier 1.3.6.1.4.1.4242.1.1 to its `Fred  Router'.

 

Essentially, it's a string of numbers in dotted notation that is (hopefully) unique to at least the manufacturer, and in most cases, to the specific make and model of the device being monitored. It's how we identify for example, that the device vendor is 'Cisco' and the model is a 'Nexus C7018'. All System Object ID's begin with '1.3.6.1.4.1' followed by a number which uniquely identifies the manufacturer. The numbers which then follow typically identify the specific model of the device.

 

Where Can I Locate the SysObjectID?

 

If the device is already managed as a Node in Orion then you can locate the SysObjectID in the 'Node Details' resource as shown below, when viewing the node in the Orion web interface.

 

Node DetailsNET-SNMP

Alternatively, you can use NET-SNMP to query the following SNMP OID to return the unique SysObjectID.

 

1.3.6.1.2.1.1.2.0

 

Below is an example of the 'snmpget' command line arguments which will return you the SysObjectID for the device.

 

 snmpget -v2c -On -c public 10.199.5.103 1.3.6.1.2.1.1.2.0

 

The example above is executed against a device with the IP address of '10.199.5.103' using SNMPv2c, with the community string 'public'. Below is a screenshot of the resulting output from that command. The string of numbers and periods highlighted in yellow below is this device's unique SysObjectID.

 

My Device Incorrectly Appears Listed as 'NET-SNMP'

 

Linux hosts, virtual appliances, and even some network equipment built on Linux, FreeBSD, etc. are often identified as 'NET-SNMP'. This is because the SNMP Daemon running on those hosts is, you guessed it, NET-SNMP. Unfortunately, these vendors for some reason, have chosen not to implement their own unique SysObjectID, and instead kept the default SysObjectID '1.3.6.1.4.1.8072.3.2.10' which is designated for NET-SNMP. If you have a device such as this, fret not. There are a few options available to you if you'd like these devices to be properly identified by their appropriate vendor's make & model within Orion.

 

Install The Orion Linux Agent

 

The easiest solution would be to install the Orion Linux Agent on the device which is reporting itself to be 'NET-SNMP'. The Linux Agent does not rely upon SNMP to identify the machine type or vendor. Instead, the Agent will report the Vendor as 'Linux' and the 'Machine Type' as the Linux distribution running on the device as depicted in the screenshots below.

 

Red HatCitrix XenServer

 

 

Modify NET-SNMP Configuration

 

Another approach is to customize NET-SNMP and Orion to properly reflect the Vendor and Machine Type. Simply following the steps outlined by adatole's post entitled No More Net-SNMP Nodes. This method uses a script osname.sh which is executed when a particular OID is is queried. Next, you would create a custom Device Poller to query that newly created OID and populate the Machine Type value in Orion for that device.

 

If you find it more fun to follow along, you can watch adatole walk you through the entire process in the following video.

 

 

 

Can't I Just Upload My Vendor's MIB File Here And You figure it Out?

 

While it would be nice if that's how it worked, unfortunately many (or most) vendors don't include this information within their MIB files. MIB files include a listing of all possible OIDs which could be polled across a wide variety of different devices (typically an entire product family), but it doesn't include the values which are returned by the devices (Enums notwithstanding). For that reason we need users, such as yourself, to post the SysObjectID's in this thread, along with the device vendor and model information so it can be included in our database.

 

If you'd still like your device's MIB file included in the Orion MIB database, for use with Network Performance Monitor's Universal Device Poller, or the Orion Platform's SNMP Trap Receiver, simply follow the steps outlined in KB article at the link below.  The latest version of the MIB database, containing your submissions, can always be downloaded from within the Customer Portal.

 

Request additional MIBs to the SNMP MIB browser database - SolarWinds Worldwide, LLC. Help and Support

Viewing all 21870 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>