Quantcast
Channel: THWACK: Discussion List - All Communities
Viewing all 22890 articles
Browse latest View live

Adding Palo Alto 3020 using SNMPv3

$
0
0

I though on sharing these steps on adding a Palo Alto appliance into Orion just in case anyone is having a problem.

 

Step 1 - Enable SNMPv3 on the Palo Alto appliance with the following settings

 

Create the SNMP view and use this exact OID "1.3.6.1.6" and Mask "0x80"  (This information was provided by Palo Alto's tech support).

 

palo alto view.JPG

 

Once you created the view, you will need to create the SNMPv3 user (use your own password for Auth and Priv, they can be the same if you want)

 

palo alto snmpv3-1.JPG

click o.k and "Commit" changes on the appliance. (save configuration).

 

Step 2 - Add the Palo Alto host into Orion.

 

When adding the host enter these settings only under SNMPv3 Credentials.

Leave  "Read / Write SNMPv3 Credentials" blank.

 

Solarwinds-SNMPv3.JPG

 

Click "Test" and you should get a "successful" message.

 

I hope this help.


Enterprise Monitoring

$
0
0
Hi;
i am seraching for enterprise monitoring software which will help to monitor, analyse and report the network ,servers and databases.....
if you know any one or solarwidns have that one then let me know the product name......

Thanks.

Package Boot customizations overwritten by Package Content Editor

$
0
0

If I open the Package Content Editor for a package that has a customized packageboot.xml, I get a prompt stating that packageboot.xml differs from the local console client cache and will be overwritten. If I click Yes, the package boot file is overwritten with a default file, wiping out any customizations. I can cancel the dialog, but this prevents me from making any modifications to the package contents. The only way that I can find to change the contents of a package with custom package boot is to first export the XML from the Package Boot Editor, then update the files and finally re-import the XML.

 

Isn't there a better way?

Auditing and Managing Static NAT assignments on Cisco PIX Firewalls

$
0
0

One of the biggest challenges we face is managing the over 400 static NATs defined in our PIX firewalls. Servers are constantly being retired or reallocated or users leave the company and their Static NAT assignments should be removed. Unfortunately, the network team is never told to remove the NAT assignment which leads to wasted IP addresses and worse, a security vulnerability if the inside address is assigned to a new server or user.  It would be nice to be able to have a way to audit these assignments to see if they are still valid.

Palo Alto with SNMP V3

$
0
0

Does anyone know how to set up a Palo Alto firewall to use SNMP V3 with NPM. V2 was easy to set up. I can't figure out V3.

Palo Alto EngineID - SNMPv3 Trap Setup

$
0
0

Some of you may have some trouble on finding the EngineID on a Palo Alto appliance when trying to setup SNMPv3 traps.

 

Here are the steps I took to find the EngineID of the Palo Alto 3020.

 

Step 1 - Enable SNMPv3 on the Palo Alto.

 

Here is a quick tutorial on how to do it Adding Palo Alto 3020 using SNMPv3

 

 

Step 2 - Download the the GetSNMP tool from here: http://www.snmpsoft.com/freetools/snmpget.html

 

- Save the "SnmpGet.exe: file on the "C:" drive

- Open the Command Prompt and make sure you are on the C:\

- Enter this command

 

c:\>SnmpGet.exe -r:10.4.5.6 -v:3 -sn:admin -ap:SHA -aw:solarwinds -pp:AES128  -pw:solarwinds -o:1.3.6.1.6.3.10.2.1.1.0

 

-r:           = Palo Alto IP address

-sn:        = SNMP user name

-ap:        = Authentication Protocol

-aw:        = Authentication Password

-pp:        = Privacy Protocol

-pw:        = Privilege Password

-o:          = OID of the "Engine ID"

 

Once you press enter, you should get this result:

 

palo alto engine ID.JPG

 

I hope this was informative.

 

gine

What we are working on post NPM 10.4

$
0
0

As always, since NPM 10.4 has been released recently we are already working on the next release of NPM. Here is a preview:

 

  1. New web based reporting including native support for charts in reports.
  2. Support for routing information including alerting for major routing protocols (RIP v2, OSPF v2,v3, BGP).
  3. UI improvements for interface discovery filtering (possibility to select interfaces based on pattern).
  4. Multicast traffic information monitoring and alerting
  5. Performance enhancements (specifically focused on the database)
  6. Interface auditing/logging
  7. Spanning tree & VLAN information

 

PLEASE NOTE:  We are working on these items based on this priority order, but this is NOT a commitment that all of these enhancements will make the next release.  We are working on a number of other smaller features in parallel.   If you have comments or questions on any of these items (e.g. how would it work?) or would like to be included in a preview demo, please let us know!

Trending traffic between IP address groups

$
0
0

I'm looking to find out how I could use NTA to trend traffic between different IP address groups. Ideally, I'd like to have a graph that represents traffic between two IP address groups over a specific period of time. Therefore, I could create a view with these graphs between various IP address groups. Is this at all feasible?


NPM 10.4 RC - Where is the old, reliable Custom Property Editor???

$
0
0

What happened to the Custom Property Editor??  That's great that it can be done in the web interface, however...I have a bunch of custom properties for Volumes.  We use these custom properties to set the alert thresholds (alert if volume free space is below 10GB or 2GB, etc.)  So, when I RDP'd onto the server and went to the Custom Property Editor to go through and change the custom properties for the newest nodes (I usually do this once a month), I found that I can no longer do it.  Instead of the tried and true Custom Property Editor, it opened the web version which doesn't appear to allow me the same flexibility as the old CPE did.  I am hoping that I'm just missing something.  Help!!

Is there a way I can retrieve the information on the custom property for Nodes?

$
0
0

Please advise on if there is a way for this.

A custom property was deleted by the Orion Tech upon my attempt to ask help. Returning the custom property doesn't solved the concern. They said that a certain SQL script can retrieve the data but couldn't help any further as it's not part of their support

Appreciate if you can provide thoughts, help and assistance.

Thank you in advance.

NPM and NCM integration with SCOM-2012

$
0
0

Guys, There is a situation in my current environment.

Currently our client is using Solarwinds NPM and NCM, it is a migration to SCOM 2012(under SCCM 2012 suite).

Now there are certain functionalities of Solarwinds that are next to impossible using SCOM 2012.

After searching over the web, found a solution that there is one management pack available from Solarwinds(Orion MP 1.1.1)  that could be helpful.

Now, it also state that it is compatible with SCOM 2007, not with SCOM 2012.

How true is that, If anyone could help in this case.

And if it not compatible, what is the approach for Solarwinds(NCM & NPM) integration with SCOM 2012.

Please suggest......!!

SQL Variable in an Email

$
0
0

I have created a trigger action to email me with some sql out put to try to troubleshoot an issue with our pollers stopping arbitrally at night.  wanting to track down a pattern, we have 3.

This is the trigger action

 

Engine Count

${SQL:Select EngineID, Count (EngineID) From Nodes Where Status not like '9'  and LastSync <= dateadd(minute, -5, getdate()) Group by EngineID}

Nodes Affected

${SQL:Select Caption, LastSync, Status,EngineID From Nodes Where Status not like '9' and LastSync <= dateadd(minute, -5, getdate()) Order By EngineID, LastSync}

 

 

This is the email out put whenI test

 

 

 

Engine Count
${SQL:Select EngineID, Count (EngineID) From Nodes Where Status not like '9' and LastSync <= dateadd(minute, -5, getdate()) Group by EngineID}
Nodes Affected
${SQL:Select Caption, LastSync, Status,EngineID From Nodes Where Status not like '9' and LastSync <= dateadd(minute, -5, getdate()) Order By EngineID, LastSync}

 

Can NPM not do complicated SQL query variables or am I missing something?

Hot Fix for NPM 10.4

$
0
0

I am looking for clarification

 

We have the NPM plus 2 additional pollers

 

Hot fix 3 says clearly that it goes on both the NPM and additional pollers

 

I am unclear on whether hot fix 1 also goes on the additional pollers or not.

Universal Device Poller - Counter not working as expected

$
0
0

I'm trying to create a performance graph to show HTTP connections per second on our F5 LTM appliances. The OID (1.3.6.1.4.1.3375.2.1.1.2.1.56), reports the running total of HTTP requests. The actual value means very little to me since there is no defined time. The running total probably began last time the appliance was rebooted.

 

I need the ability to get the delta between value of the current poll and the value of the previous poll and then divide by the interval. This would give me the number of requests per interval. I can then use a Transform to convert to requests per second. For example:

Poll 1 (at 11:00am): 1.3.6.1.4.1.3375.2.1.1.2.1.56 --> 1230000000

Poll 2:(at 11:02am): 1.3.6.1.4.1.3375.2.1.1.2.1.56 --> 1230360000

Delta = 1230360000 - 1230000000 = 360000 requests

360000 requests / 2 minutes = 180000 requests per minute or 3000 requests per second

 

When I added the poller and checked the data, it showed the actual raw values from my F5 appliances. I thought setting the MIB value type to Counter would report the delta between the values but it doesn't. I played around with the different settings but couldn't find any option that would help. In the documentation, there is a speedometer example under the Counter section:

As an example, a Counter value corresponds to the value, in miles, returned by a car odometer. To produce results equivalent to a speedometer‑type rate poller, create a clock poller that returns another Counter value, in hours, and then create a poller transform that divides the result of an odometer poller by the result of the clock poller.

 

Applying that example to my case, I have the value in miles returned by the odometer (total HTTP requests). I have no clue what a clock poller or what the rest of that example means.

 

Here is a snippet of my poll below:

 

<CustomPollers version="9.0">

  <CustomPoller UniqueName="sysStatHttpRequests" Description="The total number of HTTP requests." OID="1.3.6.1.4.1.3375.2.1.1.2.1.56" MIB="F5-BIGIP-SYSTEM-MIB:sysStatHttpRequests" SNMPGetType="GetNext" NetObjectPrefix="N" GroupName="F5" PollerType="C" Parser="Counter" IncludeHistory="True" Unit="" TimeUnitId="0" TimeUnitQuantity="0" DefaultDisplayTimeUnitId="0" Formula="" LabelType="" LabelDetail="">

    <Enumerations />

  </CustomPoller>

</CustomPollers>

Grouping applications and adding exceptions

$
0
0

So maybe I'm doing something wrong, but this seems much harder then it should, but here is what I'm trying to accomplish:

 

I have a group of applications that are maintained by a specific department. They want to know when these applications have problems. My department wants to know basic node health like hardware health status, drive space, CPU usage, etc.

 

So I made alerts for them and an alert for us. The "Us" alert basically says "tell us about every problem the happens on every component during. Depending on the time of day, email this address"

 

The "them" alert has the following logic.

Trigger when any

     node name = server1

     node name = server2

     node name = server3

     node name = server5

trigger when any

     application component is down

     application component is critical

     application component is warning

 

So this is all well and good, except server2,3 and 5 have scripts that shut the applications down during a backup window. It turns out that no one wants to be alerted if their machine is down during a maintenance window at 4am. Crazy, right?

So do I need to copy the existing alert, remove the server 1 and set the time of day in the new alert, then remove serve 2,3 and 5 from the old alert? This seems overly complicated to me. There has to be a better way to do this. Why is this so complicated?


Any way to get F5 details in Summary View?

$
0
0

npm I'm very happy to have the new F5 data in 10.4, but it seems that the charts can only be added a "Node Details" view and not a Summary view.

 

This really bums me out, given that the dashboards I build for our NOC are all Summary Views..

 

-Andrew

Display Custom Poller Data

$
0
0

I have Universal Device pollers (MIB) configured that report on Hardware Type, OS Version, and Temp that poll a specific type of device.  I would like to display a table that lists each poller value with the corresponding device.

 

Something like:

 

Device NameHardware TypeOS VersionTemp
Device 1Model 16.489
Device 2 Model 16.2287
Device 3Model 26.2291

 

Should this be accomplished with a Tabular Chart or with a report?  I would like the values be the latest.  Any recommend steps would be useful too.

 

Thanks.

Interface Chart Restricted to Set Interfaces

$
0
0

Is there a way to create an interface chart that only shows specific interfaces? I know you could with the old interface charts, but haven't figured out how to do it with the new charts. I'm probably missing something obvious. Anyone know how to do this?

SNMP stopped receiving traps

$
0
0

I discovered today, while looking as to why I didn't get a page I should have, discovered that my install of NPM is no longer receiving traps.  All 250+ nodes in the network are configured to send SNMP traps to this host, but about 7 months ago it stopped.  I've restarted the server and can't find anything blocking any ports.  I'm at a loss, could someone give me a place or two to look to aid my troubleshooting?

Vote for SolarWinds in the 2013 Network Computing Awards!

$
0
0

Vote Now: SolarWinds Products Nominated for The 2013 Network Computing Awards!

 

Check out the Network Computing Award nominees and click “Vote Now” on the left-side toolbar to endorse your favorite products! See SolarWinds in the following categories:

 

 

NETWORK INFRASTRUCTURE PRODUCT OF THE YEAR

SolarWinds IP Address Manager

 

 

DATA CENTRE PRODUCT OF THE YEAR

SolarWinds Virtualization Manager

 

 

NETWORK MANAGEMENT PRODUCT OF THE YEAR

SolarWinds Network Performance Monitor

 

 

SOFTWARE PRODUCT OF THE YEAR

SolarWinds Network Performance Monitor

 

 

PRODUCT OF THE YEAR

SolarWinds Network Performance Monitor

 

 

COMPANY OF THE YEAR

SolarWinds

Viewing all 22890 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>