Is there a way to configure a High Receive Percent Utilization with Top Talkers alert in such a way that it sends an email notification and the body of email has graph/tables of top talkers embedded in it. I know it can include the link to it but can the actual graphs/tables be included in on the email? Is it possible?
Btw, we are running NPM version 12.0.1
Thanks.
Can someone please navigate me there? Thank you.
Hi All,
I'm looking for the best way to solve this problem, as I'm sure there are multiple ways to go about this.
Essentially we have our ISP connections (primary, backups) being monitored through ICMP, and grouped together to form the parent on which our firewall is the child to. Group will be set to Best. This should report whenever both our primary and backup is down, our firewall is down. Fair enough. We have other dependencies as well, which will likely also face the same issue below, but we currently haven't had the requests....yet.
My issue is that when putting members in the group, on the node details page, the dependency tree only shows the group, not the members. Others have expressed the desire to see what nodes are in the parent/child group. Is there a way to list them, or is there a certain way to configure another resource to display this?
Apologies if this is not the correct place to ask this.
Thanks for any help.
I'm need some guidance, my director is wanting some kind of "visual aid" to show our higher management how we monitor and respond to alerts on the network. So needing to make flow chart and or a diagram describing how me monitor our critical servers and other nodes. I don't want to just send them a link of our SolarWinds dashboard/summary since it can be a lot to take in as non technical person. When I was in the Army I used to just draw pretty pictures in crayon for any grunt to understand, basically want to do that now but more professionally with Visio lol. Anyone have any examples of a alerting flow charts and or can give some advice? Thanks much!
Currently, our ServiceNow SolarWinds integration is functioning to an extent but there is one major issue with it.
It changes State values in most cases as it should but I've been able to replicate our issue by doing the following
I bring node down, creates an incident if there isn't one
I bring Node back up, sets incident state to monitoring
I bring the Node back down, sets incident state to active
I bring Node back up, sets incident state to monitoring
Everything is functioning fine up until this point
So lets say we have verified functionality and their monitoring period is up
I set the incident state to resolved (value 6) within ServiceNow
I bring the Node back down, it sends over work notes but it does not send a state value with it
the payload within the Incident Integrations module shows
{"sys_id":"<incident sys_id>","work_notes":"Orion alert has been reactivated."}
with <incident sys_id> being the incidents sys id
I figured that it might be an issue with the orion integration account not being able to update incidents in a resolved state
to test it, i attempt to bring the node back up, it changes the state just fine on over to monitoring
I figure maybe its an issue with solarwinds attempting to update state immediately following someone manually updating state on the incident (maybe it throws it into an acknowledged state and following that, it doesnt update state)
Made sure that Do not execute this action if the alert has been acknowledged already (Recommended) was unchecked so that it will continue to update the incident following (even though it seems to update fine on node going back up using the same action)
Attempted to see if I could get it to change state from resolved immediately following manual resolve using same action
Brought node down, sets state to active
Manually change state to resolved in ServiceNow
Brought node back up, sets state to Monitoring successfully
Issue is with Reopen state specifically following a manual change within ServiceNow to Resolved
Reopen state works otherwise and if i bring node back up and back down, it will set state normally.
It is only immediately following doing a manual update changing the state to resolved that it does not send over an updated state value
I had thought that maybe it could be the Acknowledge State that is playing with it a bit but i set the Acknowledge State to active from resolved and was still getting the exact same issues
I ran a search within the incident integrations module to see if it ever was able to update the state from resolved to something else using that same action
query goes something like this
comment contains state: "6"
comment does not contain incident_state: "6"
payload contains Orion alert has been reactivated
I get 10 results but these are for things running different actions
In the actions, instead of setting incidents to monitoring, they set them to resolved when node goes back up
When they go back down, it is updating to active just fine meaning that its not an issue going from resolved to active using the Reopen state field
So the issue is narrowed down to,
following a manual modification of the state field, Reopen state fails to include state key value pair in the message it sends to update the incidents state
Any assistance would be greatly appreciated with this issue!
We opened a case number with support a few weeks back and recently, they suggested posting here for assistance along with including the case number
This is a huge issue because when nodes go back down following being resolved, no one is being notified because the state is not changing back to active
A combination of both
Hello,
I'm trying to create a group that is based on the value of a custom property.
the group is fill with a dynamic query: a numeric property higher than a defined value the node will be added to the group then i expect the group to be down / red.
Can you advise on how to create a such group.Cheers
Hi,
Since upgrading to NPM 12.1 we have noticed that we are getting a lot more packet loss alerts.
The other thing we have noticed is that the alert that is coming through isn't right on resets
"Reset: Node <Name Removed> packet loss has dropped from above 40% to below 5% and is currently 50 %."
Has anyone else seen an issue like this with the high packet loss alert?
Good afternoon, I was wondering is there a way to create a url for the real time process explorer or the service manager for a node?
Hello Everyone
We are running Solarwinds NPM, NTA, and NCM on an alwayson SLQ cluster. We have been having tons of issues. Database has tons of errors and needs to be repaired constantly, performance has not been great. We were reading on some other posts that Alwayson is supported by SW but does is not recommended to have full recovery mode. The problem with that is full recovery mode is required for alwayson cluster. Cannot have one without the other.
Is anyone else running SW on alwayson? Are there certain items that need to be tuned? Does anyone have a opinion about this?
Thanks
Dear colleagues,
What workaround or workflow you use for monitoring border devices with mutiple IPs?
In my case: we have 2+ channels for each branch (main + 1+ reserve, each of them can be used as main in case of some issue on Internet provider side) and I want to have alerts about down device only when all channels/IPs are unavailable.
I've seen the post in KB Multiple IP Addresses for One Node - SolarWinds Worldwide, LLC. Help and Support, it's nice, but from my point of view, more modern and flexible is to have a possibility to add more than 1 IP address for a device.
Guys, any ideas... Got this when logging in...
Server Error in '/' Application.
Runtime Error
Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.
Details: To enable the details of this specific error message to be viewable on remote machines, please create a <customErrors> tag within a "web.config" configuration file located in the root directory of the current web application. This <customErrors> tag should then have its "mode" attribute set to "Off".
<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="Off"/> </system.web></configuration>
Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.
<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="RemoteOnly" defaultRedirect="mycustompage.htm"/> </system.web></configuration>
Has anyone ever experienced an issue where the assigned view to "Unknown Devices" under <Views by Device Type> keeps changing? I keep having this issue where it changes from the default view to another view like Wireless Controller or Cisco ASA. I have asked my team and no one seems to know why or how it keeps getting changed. There does not seem to be an audit trail for this type of change either that I can check.
Thanks,
MC
Are you comfortable with deploying virtual appliances?
We're discussing ways to deploy new products that may interact with your NPM (and other SolarWinds) deployments and one of our options is a virtual appliance.
Both for our customers and our Support department it's very important to have a map, to be able to see the state of our network in one glance in a certain area. Say for example a sea-cable broke near Italy: one look at Italy on the map will show what sites are affected, regardless of whether they're grouped by supplier or whatever.
As far as I am aware, there are only two mapping tools for this purpose available in the NPM:
- Network Atlas
- Worldwide Map
Again as far as I'm aware, there is no way to automate the placement of nodes on the Network Atlas, since all documentation goes through the Network Atlas software tool. This makes this undesirable to use because our network is fairly large and new sites are added or cancelled on a daily basis, making it a real chore to keep this map up to date.
In the Worldwide Map this is, thankfully, possible and pretty easy. I have written a script that transfers(copies) nodes from our previous NMS to Solarwinds' and automatically pushes the node's geolocation (from custom properties) to the Worldwide Map. This was working wonderfully, until at some point the web interface just stopped working. The script kept running happily. It was just the web interface that become non-interactive. After some time I figured out that it was just the pages with a Worldwide map on it and that the Worldwide Map simply can't handle more than a 1000 nodes at one time (where is this even documented?).
Sidenode: 80% of our monitoring is ICMP only, so being able to sync custom properties with the Worldwide Map automatically would be grand.
Question 1:
Is there anything that I have overlooked that can provide such a worldwide map as we need it, for our 5000+ nodes and growing network, that doesn't require manual input? Our previous NMS (PRTG) had no issues with this whatsoever.
Once I found that out, I started investigating whether we could at least show a smaller scale map with just the nodes that are in a certain group on the Group Details page (which is better, but still not good enough). This is in fact possible, but only through a very ugly and cumbersome workaround. (As far as I know) you have to:
1) Create a new view for every group (every Worldwide Map instance seems to have a ResourceID that is linked to a viewID)
2) Edit the Worldwide Map for each view to only show the nodes in that group
3) Append the viewID to the default URL for that group and from now on use that to navigate to it.
Once more I have found no way to automate this process while there are currently ~500 groups to do this for and then we're not even talking about where to leave those ~500 new URLs that everone now has to use, while the intuitive way of navigating is by using the Group Summary.
Question 2:
Is there a way to flexibly change what is shown on the Worldwide map? Thinking beyond groups here, so using custom properties for this would would be nice: only show nodes for a certain supplier, end-customer, device-type, etc.
There was a feature request for a UDT recently for an automated port shutdown, if the connected endpoint is on the "black list".
What would be your other reasons, for which would you want to shut down the port? Lets's go our imagination wild and imagine events like user device infected by a non-deletable virus, peer-to-peer software installed, firewall disabled? Feel free to vote for Other and leave comment. By liking the specific comments you can vote for other ideas.
Thanks!
SYSOBJECTID 1.3.6.1.4.1.9.12.3.1.3.1175
configured through SNMP v3
SOFTWARE IMAGE n5000-uk9
Is there a known bug? i cannot seem to figure out from where the missconfiguration is coming from
also many if not all of the pollers assigned report odd values
Universal Device Poller Status
POLLER NAME CURRENT STATUS LAST POLLED
BGP
BGP_Peer_UpDn 1 value(s) 6:11 AM
bgpLocalIP 1 value(s)
bgpPeerState 1 value(s)
Default Group
chassisId 256 6:11 AM
ciscoEnvMonFanState 256 6:11 AM
Example
ciscoEnvMonTemperatureStatusValue 256 6:11 AM
Default Group
ciscoSlbExtMIB 256 6:11 AM
DeviceTemperature 492.8 6:11 AM
FanStatus 256 6:11 AM
BGP
Peer_IP_Address 1 value(s)
Peer_UpDn 1 value(s)6ph
Network Device Stats
Reboot_Reason 256 5:44 AM
BGP
Remote_AS 1 value(s)
Hi all,
I have launched a new discovery Node with IP Range (10.2.0.0 to 10.2.255.255), several nodes are discovered by icmp & snmp but after the result it only displays two devices to import on DataBase.
thank you for your help on this issues.
Kind regards.
KABBAJ