I'm currently getting the following stack dump. Please fix.

08:33:22.689 [http-bio-8443-exec-103] ERROR c.s.o.orion.web.OrionAlertSubscriber - Failed to process Orion indication

java.lang.IllegalArgumentException: Bad request: invalid indicationType: 'Orion.AlertCleared'

  at com.solarwinds.oncall.orion.web.OrionAlertSubscriber.onIndication(OrionAlertSubscriber.java:119) ~[oncall-orion-1.1.6-SNAPSHOT.jar:na]

  at sun.reflect.GeneratedMethodAccessor289.invoke(Unknown Source) ~[na:na]

  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.7.0_04]

  at java.lang.reflect.Method.invoke(Method.java:601) ~[na:1.7.0_04]

  at org.springframework.web.method.support.InvocableHandlerMethod.invoke(InvocableHandlerMethod.java:213) [spring-web-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:126) [spring-web-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:96) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:617) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:578) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:80) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:923) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:852) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:882) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:789) [spring-webmvc-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:647) [servlet-api.jar:na]

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:728) [servlet-api.jar:na]

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305) [catalina.jar:7.0.33]

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) [catalina.jar:7.0.33]

  at com.solarwinds.oncall.web.MdcFilter.doFilter(MdcFilter.java:102) [MdcFilter.class:na]

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) [catalina.jar:7.0.33]

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) [catalina.jar:7.0.33]

  at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:311) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:116) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:83) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:201) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:173) [spring-security-web-3.1.0.RELEASE.jar:3.1.0.RELEASE]

  at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346) [spring-web-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259) [spring-web-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) [catalina.jar:7.0.33]

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) [catalina.jar:7.0.33]

  at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88) [spring-web-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) [spring-web-3.1.1.RELEASE.jar:3.1.1.RELEASE]

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) [catalina.jar:7.0.33]

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) [catalina.jar:7.0.33]

  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222) [catalina.jar:7.0.33]

  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123) [catalina.jar:7.0.33]

  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) [catalina.jar:7.0.33]

  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99) [catalina.jar:7.0.33]

  at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:931) [catalina.jar:7.0.33]

  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) [catalina.jar:7.0.33]

  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407) [catalina.jar:7.0.33]

  at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004) [tomcat-coyote.jar:7.0.33]

  at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589) [tomcat-coyote.jar:7.0.33]

  at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312) [tomcat-coyote.jar:7.0.33]

  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) [na:1.7.0_04]

  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) [na:1.7.0_04]

  at java.lang.Thread.run(Thread.java:722) [na:1.7.0_04]

Wanted to see if anyone has tried or uses something similar to what I'm trying to accomplish.  So currently if there is a outage at a site, procedures have us fill out a note to email our locals to advise of a network outage.  There is also a note sent when service is restored at the site.  Currently, I have a spreadsheet with macros that you input the event log and manually put in some information, such as time zone difference and ticket number.  I'm re-designing a majority of our tool and I'm wondering if there's a way to generate this from the SW custom node view.  So for example node X goes down at 12:00 on 6/30 and this site is located at 123 Jane Street.  Is there a way to have a reference on the details to pull all this from the node details and the time/date from the event logs?  Also being able to hyper link a ticket would help as well.  Appreciate any help on this.

We are successfully using NTA 4.1.0 with other data sources and have now configured our Cisco 5508 Wireless Controllers to export NetFlow to NTA and are seeing the following error:

The WCS controllers are running software version 7.6.120.0

Is there any solution to this or do I need to make a feature request to support NetFlow in NTA from Cisco Wireless

Howdy.

I'm aware that you can poll Windows servers for an instance of a specific Event ID from the Windows Event Log.  Normally you then use that component monitor's status in the resulting alert.  Does anyone know how to use the specific Event ID that was detected in an alert?  I know I'm probably looking at custom SQL somewhere but I can't find the specifics from perusing the database.

You may be asking "why do this?  You already know the event ID since it's part of the Component definition?!?"  I need to do this to draft the logic on the reset action.  Here's the scenario:

We have Citrix servers that all get their licensing information from a central licensing server.  If the licensing server goes down or if an individual Citrix box cannot contact the licensing server for whatever reason, a series of events are written in the Event log.  We can detect that with no issues.

There's a subsequent message written to the Event Log after things are fixed.  Different ID number.  Ultimately I want to look for the presence of the second ID as the reset condition for the initial condition.  If I need to include that ID in the Component monitor so that it's part of the dataset that is available that's fine but I then need to filter the alert to not trigger if the detected ID is X but still trigger if it's Y.  And that variable still needs to be available to craft the reset condition.

Any ideas on how to access the detected Event ID in the Alerting system? 

It is baffling as to why first throught fifth is listed when trying to suppress alerts for monthly patching(why not "Last"). What is the result when there isn't a fifth day of a given month? Is there a better way to accomplish this? We have production patching that occurs on the last Friday, Saturday and Sunday of each month.

Hi all,

Does anyone know what the SEUM.AGENT.WORKER process does? I have 10 players on a main poller and this process is eating a lot of CPU. Is it associated with the players or with the WPM module?

Thanks

I have seen  a few posts about Solarwinds not working with Cisco's new XR software. I have not seen an official answer about this on any of the threads. Does anyone know if this is currently being addressed?

Thanks,

Jamie

I am using AppInsight for Exchange to monitor my exchange servers.  I have 2 mailbox servers (both are VMs) set up in a DAG.  The problem is that the servers are always in an UNKNOWN state, because the exchange Perfmon counters keep disabling themselves after about a day or so.  I can confirm this on the exchange MB server, in the registry: HKLM\SYSTEM\CurrentControlSet\Services\msftesqllDX-Exchange\Performance, where the "Disable Performance Counters" is non-zero.  I've searched the event logs and can't really figure out why it is getting disabled.  And if I change it back to 0, the counters will start working again, and everything turns green--for about a day.  Then something disables the counters again, and it goes back to Unknown...

I have tried re-installing the libraries from scratch, but the result is the same--it works at first, but then stops within a day.  Everything in the "Information Store" is unavailable (Active Connection Count, Active User Count, RPC Requests, RPC Averaged Latency, etc.)

My active mailbox server also has some other "Custom Statistic Monitors" that are "Unknown".  Not sure if this is related or not...

I know that this is not necessarily a SAM issue, just wondering if anyone had seen this before?

Basically exactly as the title states.  Believed it was just my browser but checked with a few colleagues and they to have noticed this issue.

IT MAY be down to IE 10 and 11 as Chrome seems to be working with no issue.

Page Refresh time is set to 3 minutes within Web Console settings.

Anyone else experiencing this issue?

I have a location with a Point to Point microwave connection.  The radio is connected to Port 23 on my Cisco 3550 switch.  I am monitoring the port for utilization but of course it is reading at 100Mbps, the radio connection is actually about 27Mbps.  How can I change or monitor this interface with a more realistic bandwidth?

we have the alert where if a node is down it will shoot an email to everyone on the list and once they go back online it will shoot another email to everyone saying its back on. Recently it occasionally will not shoot the email for it going back online or in a group of down alerts it will miss a couple of them. Anyone know why this could be happening?

In a smaller environment like mine it’s often hard to justify purchasing a capacity planning or network visualization tool; small teams and even smaller budgets make it difficult to get what are sometimes considered luxury products. Any competent operations staff can survive just fine without them and have proven it time and time again. Resolving issues and planning ahead for growth without the aid of something like a full featured netflow/sflow analyzer can be done, it’s not always easy though.

When I took over operations at my current company, monitoring was typically done through open source and in-house home-brewed systems. They took a lot of time to manage and weren’t providing much more than basic ping checks. In my first few months I purchased some application and network monitoring as well as a few other various tools, after those my goal was a netflow analyzer. I had been scanning our budget for the first opportunity to acquire any collector I could afford. I tried several products which offered free demos to see what would fit best for us (just finding the time to demo a product is a difficult task for most network engineers). After a few futile months of looking at various products, spinning up server after server, configuring ingress and egress collection points, reviewing the data and how relevant it was to my team, I was presented with a major problem on the network: our film and animation labs were experiencing some _severe_ usability issues. Log on times were exceeding 5 minutes, AFP shares were serving out information in kilobit trickles, and all signs pointed to the network.

Now I can run iperf, packet captures, and even mimic functions from other servers in various closets all day long trying unsuccessfully to recreate the issue and logically narrow it down to their servers. There are two primary problems with this approach: first, a snapshot view of an ongoing issue won't always be accurate or useful for troubleshooting, and second, it doesn’t prove anything to an administrator who is convinced the problem lies in the network. What was able to finally make some forward movement and get me access to the systems (and eventually diagnose a bad RAID card firmware and untested OSX server update that virtually killed OpenDirectory) was my ability to visualize the flows and export them into a readable format that anyone even remotely related to IT could understand. Once we could show hard numbers on link throughput, protocol usage statistics, and put it all into context with the rest of the network, we could exclude the switches from the equation and move forward. The advantage we had in this particular case was that our utility delivered results during a trial period and gave the extra push I needed for the budget approval.

My question to you is this, what methods and/or tricks have you used to either plainly show the usefulness or “convince” the one writing the checks that it’s important to have? How are you justifying the purchase of these systems that are becoming increasingly critical to the proper operations, planning, and troubleshooting of a healthy network?

Hi ,

Is there any way to see the saved credentials for Windows , UCS or VM saved in database?.

I created an Adobe Reader Update Package (from Adobe Subscription).

File is AdbeRdrUpd11012.msp

Defined Prerequisite Rule: Windows Version  - Greater Than or Equal To: 6-1-0-0, Server

Deployed it to one Server with “Update management”.

Adobe Reader 11.0.11 is installed on this Server.

In the Task History there are the following Operation Details:

Operation: Install
Object: Reader 11.0.12 Update
Status: Not Applicable
Details: Update not applicable. Unable to find the Update by ID to perform the requested operation. The update may not be applicable for the selected computer Result Code: 0x80240003

I´m able to download the content from WSUS Server.

Thanks for help!

Does anyone know how to configure Solar Winds Advanced Alert Manager to trigger an alert if an F5 BIG-IP Virtual Server VIP status ever goes down?

I already seem to have a list of simple conditions loaded in already for things like Connctions, Failover Status, Sync Status, but none of them seem to refer to VIP or Pool Status conditions.

I see there is an option to "Import Conditions" so perhaps there is a place where you can find more common conditions to download and import?

Cheers

Mike

Hi

I've been asked to add in a set of user workstations to use solarwinds software / hardware auditing.

Going to use a custom property to exclude from alerts, but thinking these PCs will go up and down depending on use - is there a setting like that in interfaces where you can show it as unplugged rather than down?

Thanks!

I've a baby PS script (cut down from the existing time drift PS monitor) that I'm trying to get to take arguments from the powershell monitor.  Any help would be appreciated.

The below code works fine when I run it in ISA.

# Argument example: time.nist.gov 13

function PortCheck ([string]$remotesystemname,[int]$port) {

$Socket = $null;

$Socket = New-Object Net.Sockets.TcpClient;

$Socket.Connect($remotesystemname, $Port);

if ($Socket.Connected) {

             $stat = 0;

          Write-host "Message: Port $port to $remotesystemname is open.";

         Write-host "Statistic: $stat";

         Exit 0;

             }

        else {

             $stat = 1;

          Write-host "Message: Port $port to $remotesystemname is closed.";

         Write-host "Statistic: $stat";

         Exit 1;   

             }

}

On a normal day, all of a sudden my primary poller will stop showing any status for its CPU/Memory/Health Application/Polling Health monitor/IIS etc. I opened a case and there is not much of progress. Tried resetting the remote registry service, adding the registry entry by following a document from one of the thwack forums for the unknown application issue, tried restarting the server/services. No improvements yet, we were running the polling through WMI and moved to Agent based for all pollers recently. But this issue is not necessarily after we moved to agents as the polling/monitoring was working fine for more than 2 weeks on agents. What happens if I delete my main poller from nodes list and re-add it back. What happens to the polling elements assigned to it? Is there any other way we can try resolve this from any of your experiences before?

Hi,

I have a problem with DameWare Remote Support v9, I am unable to connect using the DameWare Mini Remote Control when the "Permission Required" setting is enabled on the "Additional Settings" tab within the settings of the MRC Client Agent Service on the remote machine. When enabled, this option should prompt the currently logged on user to grant or deny permission for every connection attempt.

Unfortunately when I try to connect from my local machine to remote machine instantly I get an error:

"DameWare Mini Remote Control

Your logon request was declined.

Disconnecting...

Request for permission to remote control encountered an error.

- Failed to send from socket (5). [10047]"

In Windows event log is an error:

'Error: Failed to acquire logon permission.

User Disconnected."

The currently logged on user on the remote computer don't even have a chance to accept or decline my connection (there is no pop up window asking for permission).

When I disable "Permission Required" setting on the remote machine I can establish the connection  from my local machine without any problem but also without asking for permission the currently logged user.

Both computers runs Windows XP Pro 32-bit version.

From the security reason in my computer environment  "Permission required" setting must be enabled on remote machines, but currently it doesn't work.

I would really appreciate some help and advice.

Hi

I have a universal poller tabe that I need to alert on some values in a  row.

on the web the poller look like that

I like to alert when row value is not ok

The alert is "there" just not realy get  triger all the way (status 2)

What do i miss??

Tabular Universal Device Poller