Can someone assist me with finding out how to connect the Kiwi Syslog Server to the Log and Event Manager. I am trying to see the Kiwi syslog traffic in LEM not send LEM to the syslog server. I have placed an agent on the windows server that the Kiwi Syslog server is running on but can't get the LEM to pull in the syslog events. It seems that it is pulling in only the server events.
↧
Need help pulling kiwi syslog server to LEM
↧
SRM agent unzipping failure
Hi all
I downloaded SRM: profiler module agent(windows) but it fails to open the zipped file. it says "Windows cant open the folder" . see attached snip to see the actual error.
Thank you
↧
↧
Report Scheduling -
I'm setting report schedules to run on the 1st of each month at 7 am and I'm finding that it sends an email as soon as I save the job without waiting for the scheduled time. Is that by design?
Thanks,
Jason
↧
Trying to filter on a hostname that is an IP Address in Kiwi Syslog server.
I am trying to filter on the hostname which happens to be an IP address. Kiwi syslog server gives me a red X whenever I attempt to test the filter. I can't convert it using DNS so I have to use the IP address. It keep telling me to put quotes around it but when I do it still doesn't work. I am trying to filter so I can dump this host in a separate LOG file. Any ideas?
↧
Question about SCP exam
Hi all,
I am trying to prepare for SCP exam and I had confused about a question concern access list topic as below:
Refer to the following configuration snippet of a Cisco IOS router:
snmp-server community private RO 60
snmp-server host 192.168.15.4 private
access-list 60deny 192.168.12.0 255.255.240.0
access-list 60 permit snmp 192.168.15.4
The network management system (NMS) IP address is 192.168.15.4, and it is receiving
SNMP traps from the router, but it is not able to poll the router.
Why is the NMS unable to poll the router?
A. SNMP is not enabled on the router.
B. No public community string is configureD.
C. The access-list is denying SNMP access from the NMS.
D. The NMS requires a read-write community string.
the answer is C ... but I see command that said '' access-list 60 permit snmp 192.168.15.4 '' in router configuration and that's mean snmp its already permitted and router accepted snmp traps also !! so why router deny the poll from NMS ? and why the answer is C?
Thanks for prompt reply
↧
↧
Orion source
Hi,
After a couple of times running the wizard, my Orion source have stopped.
Alerts is only coming in from the email server.
I have tried to remove the Orion source and reboot, but still no alerts.
Any suggestion?
//Jan
↧
The End of Alert Central Updates?
I just convinced my boss of the nice features of Alert Central to be able to better manage our Orion NPM/NCM alerts (as well as other alerts from our other monitoring software) and finally deployed a test Alert Central server to show off some proof of concepts. I've been hoping that they have the respond by SMS feature and CC features working by the time I actually get this thing running. SolarWinds hasn't made any updates in over a year (even though its on their "roadmap") and the forum looks pretty dead over there. After digging around someone said SolarWinds has stopped development of that product. So for some closure (and possibly a better email alerting system), is it true that Alert Central development has been pretty much scrapped?
↧
Alerting on dynamic citrix servers
We have a couple of Citrix farms that dynamically turn individual servers up and down as the load necessitates.
Does anyone have a good way to monitor these and eliminate false alerts. I want to monitor each of the servers like any other server, but if Citrix determines that it is no longer needed for a while and shuts one (or several of them) down I don't want to get an alert on something that is supposed to be down. As it is now my status on Windows servers is constantly Yellow as there is always one or more of these servers down - and not always the same one(s).
Is there maybe monitoring I can do on the Citrix master that would give me the overall health status and not need to monitor each individual server?
↧
AppInsight for IIS issues with shared config and directories
There is an issue using the app insight for IIS with a shared directory (web farm) or a single server where the site data resides on a NAS or a share. The site directory info monitor is always "unknown." This causes all the sites on the server to show as unknown.
Does anyone have a workaround for this? I am assuming it is related to this same error: http://knowledgebase.solarwinds.com/kb/questions/4916/AppInsight+for+SQL%3A+A+database+is+mistakenly+being+reported+as+having+0+bytes+free%2C+triggering+false+alerts.
The WMI method for enumerating the folder and files doesn't work on shared folders. I hope this gets fixed soon, because this is a common way of building web farms.
↧
↧
APM Exchange mailbox monitor
Can APM monitor a mailbox and produce an alert based on seeing an email with a particular subject line or text in the message body?
We have an example of needing to confirm if a particular cloud based solution is emailing our clients, and wish to add a BCC onto every email to be sent to an internal mailbox that we can monitor via SolarWinds, and if it doesnt see an email in that mailbox for a certain time period, then produce a critical alert.
The only way I can work out how to do this is using Exchange powershell scripts for APM to use to monitor the mailbox. Makes a somewhat easy monitor very complicated to produce.
↧
Inactive Interface on Netscreen HA pair shows as "Testing"
I've got Juniper Netscreen firewalls in an Active - Passive cluster. There is a "heartbeat" interface between the firewalls (ethernet1/1 and 1/2 in my screenshot), and the passive one puts its non-heartbeat interfaces into "Inactive" state when the firewall is in the passive state.
Is it possible to properly show this as "Inactive" instead of "testing" for the interface status, and a node state other than interface warning and appearing on the problem nodes resource?
-=Dan=-
↧
9.5 Stat. about SNMP TRAP forward action ?
Hi
I think that forward stat. action is is counting syslog only and not SNMP TRAP
Will be nice to have counters about that action as well.
↧
Getting secureCRT to work with SW
Hi guys,
I found this link in here Enable SSH Putty on Orion Node page where you can you get putty to work with your orion node page, but I would like to get my secureCRT to work with this page.
Is there anybody there can help here??
I used on my old job a script similar to this for putty but I cannot get it to work here.
I have attach the files in here.
In my old job, we had a jumphost that we connected to gain access to our cisco devices, this is not the case here, since I can connect directly to the devices now.
Looking forward to get some feedback here
Frank
↧
↧
Service Now Integration
Is anyone integrating Solarwinds with Service Now to provide Network CIs like switches and routers? @ArjunaRahman
↧
WMI Polling
Hi all
Im adding windows servers using WMI. I can add some but I cant add others. I downloaded WMIdiag diagnostic tool from Microsoft, I ran this tool on the server which I added to solarwinds and also ran it in the server which is refusing wmi(test failed). below is the partial results I get from the tool:
NB: if you can check that UAC is disabled from 1 and enabled in server 2. I don't know if enabling UAC will solve my issue in server 1
- I attached two notepads for server 1 and 2 for more detailed info.
Server 1(Test failed):
28660 09:58:35 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.
28661 09:58:35 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
28662 09:58:35 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
28663 09:58:35 (0) ** privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
28664 09:58:35 (0) ** to ensure that administrative privileges are granted. If a Local User account is used for remote
28665 09:58:35 (0) ** accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
28666 09:58:35 (0) **
28667 09:58:35 (0) ** Overall DCOM security status: ....................................................................................... OK.
28668 09:58:35 (0) ** Overall WMI security status: ........................................................................................ OK.
Server 2 (Successful added):
32671 10:38:01 (0) ** INFO: User Account Control (UAC): ................................................................................... ENABLED.
32672 10:38:01 (0) ** => WMI tasks requiring Administrative privileges on this computer MUST run in an elevated context.
32673 10:38:01 (0) ** i.e. You can start your scripts or WMIC commands from an elevated command
32674 10:38:01 (0) ** prompt by right clicking on the 'Command Prompt' icon in the Start Menu and
32675 10:38:01 (0) ** selecting 'Run as Administrator'.
32676 10:38:01 (0) ** i.e. You can also execute the WMI scripts or WMIC commands as a task
32677 10:38:01 (0) ** in the Task Scheduler within the right security context.
32678 10:38:01 (0) **
32679 10:38:01 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
32680 10:38:01 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
32681 10:38:01 (0) ** privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
32682 10:38:01 (0) ** to ensure that administrative privileges are granted. If a Local User account is used for remote
32683 10:38:01 (0) ** accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
32684 10:38:01 (0) **
32685 10:38:01 (0) ** Overall DCOM security status: ....................................................................................... OK.
32686 10:38:01 (0) ** Overall WMI security status: ........................................................................................ OK.
Thank you
↧
Custom powershell monitor without a statistic (Just UP or DOWN)
I am writing a powershell scrip that checkes to see is an application is up or down via a rest call... It seems that SW expects a integer value returned. So how do I make it pik up UP or DOWN and then alert on that? I am currently using a 1 or 0 and then alert on that, is that the only way?
↧
Syslog Crashing Everyday
I see my syslog service crash everyday multiple times. I am running NPM 11.5.2 on a Win 2008 R2 VM. I looked at the event log and found a memory error. I did some digging and found that 32 bit apps can run into this because of the 4GB limit. Any ideas on how to fix or is there a 64 bit version?
Problem signature:
P1: syslogservice.exe
P9: System.OutOfMemoryException
↧
↧
Not all nodes showing as managed in Orion
I have just recently setup and deployed my Virtualization Manager and for the most part it works wonderfully. I am having an issue with nodes not being able to be managed from the Orion web console. When I go to open a various node from the console and select Virtualization summary from the left hand side I get a message stating that I need to configure the manager. This is not always the case though, some nodes work just fine. Any thought?
↧
Search for Multiple devices in a single go? Search overrides grouping, how to stop that?
1.Is it possible to search for multiple devices in a single go? I want to configure/edit properties/node details for a number of devices(changes weekly) but they do not have a common key(type,vendor,etc). Is it possible to search for these in a single go, say 'Node Name' 'is one of' 'comma_separated_node_names_here' or something along these lines, as with manage node I'm just able to search for a specific node or nodes whose names start with a specific set of words?
2. Even if I select a grouping method if I search for a device it overrides the grouping and searches for the node in all the groups. Is it possible to search within a single group for a device?
↧
I have a scenario where I want the node status to be down and show a green ICON. When UP it's Red. Basically reverse logic. Ideas?
I have a scenario where I want the node status to be down and show a green ICON. When UP it's Red. Basically reverse logic. Any ideas on how to accomplish this?
↧