Page 1
ADMINISTRATOR GUIDE User Device Tracker Version 3.2.4 Last Updated: May 30, 2017 Retrieve the latest version from: https://support.solarwinds.com/Success_Center/User_Device_Tracker_(UDT)/UDT_Documentation...
Page 2
SolarWinds. All right, title, and interest in and to the software and documentation are and shall remain the exclusive property of SolarWinds and its respective licensors.
To evaluate the software without a license To license the software on a server with Internet access To license the software on a server without Internet access Finishing SolarWinds UDT Installation Moving SolarWinds UDT to a New Server Licensing Maintaining Licenses with License Manager...
Page 4
Adding a Node (Add a Single Device) Manage Nodes User Device Tracker Port Discovery Adding Orion Nodes to UDT Event Notification for Nodes and Ports added to UDT Adding Active Directory Controllers and Users Managing Active Directory Credentials Adding a New AD Credential...
Page 5
Defining Credentials for Polling Across Domains Setting WMI Namespace Security Adding a New AD Credential Managing the UDT White List Enabling DNS Resolution for Wireless Nodes Adding Endpoints to the White List Add Endpoints to the DNA Whitelist by Adding Rules...
Page 6
Customize Customize Menu Bars Color Scheme External Websites Manage Alerts Manage Advanced Alerts Product Updates Available Product Updates SolarWinds product Team Blog Views Manage Views Add New View Views by Device Type Settings Web Console Settings Polling Settings Orion Thresholds...
Page 7
Using the Device Tracker SSID Details Using the Device Tracker User Details Viewing User Data in Tooltips Common Tasks with SolarWinds UDT Finding the switch and port where a particular hostname, IP, or MAC address is or was connected Seeing Rogue Endpoint Connections in Real-time...
Page 8
Finding Wireless Endpoint Connections Finding a User's Connections Finding Endpoints in a Subnet Resolving IP Address Conflicts with IPAM and UDT Integration Alerting and Reporting Editing Alerts Configuring SolarWinds UDT Alerts Configuring a default UDT alert Setting up the alert trigger action...
Page 9
Creating a Custom Summary View Creating and Editing External Website Views Customizing the Orion Web Console Customizing Web Console Menu Bars Changing the Web Console Color Scheme Changing the Web Console Site Logo Configuring the Available Product Updates View Updating Your SolarWinds Installation...
Page 10
Custom Object Resources in the Orion Web Console Editing a Custom Object Resource Selecting Custom Objects and Resources Available Custom Resources Integrating SolarWinds Engineer's Toolset Configuring a Toolset Integration Adding Programs to a Toolset Integration Menu Accessing Nodes Using HTTP, SSH, and Telnet...
Page 11
Viewing Node Data in Tooltips Editing Object Properties Promoting a Node from ICMP to SNMP Monitoring Viewing Node Resources Setting Device Management States Unscheduled Device Polling and Rediscovery Monitoring Windows Server Memory Scheduling a Node Maintenance Mode Time Period Managing Groups and Dependencies Managing Groups Creating Groups Editing Existing Groups...
Page 12
Managing SolarWinds UDT Polling Engines Viewing Polling Engine Status in the Web Console Configuring Polling Engine Settings Orion Platform Polling Settings Polling Intervals Polling Statistics Intervals Database Settings Network Calculations & Thresholds Calculating Node Availability Node Status Percent Packet Loss...
Page 13
Alert Escalation Understanding Condition Groups Using the Advanced Alert Manager Adding Alert Actions Available Advanced Alert Actions Sending an E-mail / Page Playing a Sound Logging an Advanced Alert to a File Logging an Advanced Alert to the Windows Event Log Logging an Advanced Alert to the NetPerfMon Event Log Sending a Syslog Message Executing an External Program...
Page 14
Groups: Historical Groups Status Historical Volume Usage Reports Inventory Viewing Reports Viewing Reports in the Orion Web Console Viewing Reports in the SolarWinds UDT Report Writer Using Report Writer Preview Mode Design Mode Creating and Modifying Reports General Options Tab...
Page 15
Customizing the Report Header and Footer Image Exporting Reports Example Device Availability Report Using Orion Report Scheduler Creating a Scheduled Report Job Using Orion Report Scheduler with HTTPS Troubleshooting the Orion Report Scheduler Reports and Account Limitations Monitoring Syslog Messages Configuring the Orion Syslog Port Syslog Messages in the Web Console Syslog Resources...
Page 16
Removing Custom Properties Filters Creating Account Limitations Using the Account Limitation Builder Creating an Account Limitation Deleting an Account Limitation Managing the SolarWinds UDT Database Using Database Manager Adding a Server Using SQL Server Management Studio Database Maintenance Running Database Maintenance...
Page 17
Copying the Default Reports Troubleshooting Checking Device Compatibility Scanning a Device Analyzing Test Results Node Discovery Completely Fails Node Discovery Fails for Some Devices UDT Missing User Data UDT Polling Spikes CPU on Target Device(s) Wrong Hostname Reported for Endpoint...
Page 18
No Layer 3 Data for a Device No Layer2 Data for a Device No User Data Retrieved Via WMI (Windows Server 2003) UDT Not Receiving User Data from Domain Controllers Event code setup Adding a Deleted Port Back into UDT...
What Is a Device? A device is a MAC address, hostname, or IP Address. SolarWinds UDT allows you to search on this information to find where the device is connected in the network and where it has been connected in the past.
Generates 7 new predefined reports on connected devices, device capacity, and AD users How SolarWinds User Device Tracker Works Using SNMP calls to your network framework, SolarWinds User Device Tracker provides real time feedback on your monitored devices and users and trending through statistics stored in the Orion Platform database.
SolarWinds UDT is a standalone product. It can be installed by itself or with other SolarWinds products (for example SolarWinds Network Performance Monitor) to provide an integrated experience.
SolarWinds services from properly identifiying your UDT server. While UDT is supported on Windows Server 2008 R2, it is not supported on Windows Server 2008. Microsoft IIS, version 6.0 and higher, in 32-bit mode.
2 GB 5 GB 20 GB Note: A RAID 1 drive for server operating system, SolarWinds installation, and tempdb files Hard Drive is recommended. The SolarWinds installer needs 1GB on the drive where temporary Space Windows system or user variables are stored. Per Windows standards, some common files may need to be installed on the same drive as your server operating system..
Page 24
SQL Server database and SolarWinds UDT data and log files. RAID 5 is not recommended Hard Drive for the SQL Server hard drive. The SolarWinds UDT installer needs at least 1GB on the Space drive where temporary Windows system or user variables are stored. Per Windows standards, some common files may need to be installed on drive as your server operating system.
Knowledge Base for information on retrieving user data across domains. Scalability By adding individual polling engines, you can transparently scale your SolarWinds UDT installation to any environment. Additional Polling Engine and Web Console For more information see " "...
Finally, the number of simultaneous users accessing SolarWinds UDT directly impacts system performance. When planning an SolarWinds UDT installation, there are four main factors to keep in mind with respect to polling capacity: CPU, memory, number of polling engines, and polling engine settings. For minimum...
Enabling IIS on Windows Vista and Windows Server 2008 (R2) IIS is enabled automatically after UDT installation and prior to the start of the Configuration Wizard. If the Configuration Wizard detects that IIS is not installed on Windows 2008 R2, it installs IIS. The following manual procedure is provided for Windows Vista, or in case problems occur with the automatic IIS installation for Windows Server 2008 R2.
15. Click Install on the Confirm Installation Selections window. 16. Click Close on the Installation Results window. 17. If you are currently enabling IIS as part of an SolarWinds UDT installation, restart the SolarWinds UDT installer. Enabling IIS on Windows 7 SolarWinds only supports evaluations of SolarWinds UDT version 2.0 and later on Windows 7.
SolarWinds Network Performance Monitor" in the SolarWinds Network Performance Monitor Administrator Guide. Note: If you have any additional SolarWinds UDT web consoles or pollers, you must upgrade them too by repeating this procedure for each additional SolarWinds UDT poller or web console. Be sure to use the correct installers for pollers or web consoles, since these are different from the standard installer package.
7. If you cannot find an activation key in the Unregistered Licenses section, contact SolarWinds customer support. 8. Return to the Activate UDT window, and then enter the activation key in the Activation Key field. 9. If you access Internet web sites through a proxy server, click I access the internet through a proxy server , and enter the proxy address and port.
10. Provide the Machine ID from Step 5, and then download your license key file. 11. Transfer the license key file to the server. 12. Return to the Activate UDT window, browse to the license key file, and then click Next . Finishing SolarWinds UDT Installation...
Click Next and then click Finish. Licensing The SolarWinds UDT license you purchase is based on the number of allowed nodes and monitored ports. If more ports are selected for discovery than your license allows, you will be prevented from continuing the discovery.
Contact SolarWinds about upgrading your SolarWinds UDT license if needed. SolarWinds UDT licenses do not have to mirror the license count of any other installed SolarWinds product. For example, you can install SolarWinds UDT with a 50 node license on an SolarWinds NPM server with an unlimited node license.
Excluding Orion Data Directories from Anti-Virus Scanning Anti-virus programs may lock files used by the SolarWinds Job Engine v2 during scanning. This can cause the SolarWinds Job Engine v2 services to stop and restart, causing delayed polling and gaps in data for a poll cycle.
The Orion Web Console is displayed. You can login by default by entering the User name Admin and no password. Then click LOGIN . Internet Explorer Security Settings If you are using Internet Explorer, SolarWinds recommends that you add the URL of your Orion website ( http://FullOrionServerName/ ), the URL of SolarWinds support ( http://support.solarwinds.com ), and about:blank to the list of trusted sites.
This chapter describes the process of discovering network devices and ports and then adding them to the Orion Platform database. Adding devices in SolarWinds UDT is a two-step process. First you add network devices to monitor, and then you add the ports on those devices to monitor.
Sonar Discovery Wizard. To discover multiple devices on your network: 1. If the Network Sonar Discovery Wizard is not already open, click Start > All Programs > SolarWinds Orion > Configuration and Auto-Discovery > Network Discovery . 2. If you want to create a new discovery, click Add New Discovery , click Add New Discovery .
Page 38
If you are adding a new VMware credential, select <New Credential> in the Choose Credential dropdown menu, and then provide a new credential name in the Credential Name field. Note: SolarWinds recommends against using non-alphanumeric characters in VMware credential names. d. Add or edit the credential User Name and Password, as necessary.
Page 39
Network Sonar reads the routing table of the designated router and offers to discover nodes on the Class A network (255.0.0.0 mask) containing the seed router and, if you are discovering devices for an SolarWinds NPM installation, the Class C networks (255.255.255.0 mask) containing all interfaces on the seed router, using the SNMP version chosen previously on the SNMP Credentials page.
Page 40
13. If multiple Orion polling engines are available in your environment, select the Polling Engine you want to use for this discovery. For nodes already being monitored within UDT, if you want to change the polling engine with which a Changing Polling Engine Node Assignments node is associated, see "...
The following steps detail the selection of discovered objects for monitoring in SolarWinds UDT. To select the results of a network discovery for monitoring in SolarWinds UDT: 1. On the Device Types to Import page, check the device types you want SolarWinds UDT to monitor, and then click Next .
Management. For more information, see " ." 3. On the Volume Types to Import page, check the volume types you want SolarWinds UDT to monitor, and then click Next . If you are not sure you want to monitor a specific volume type, check the volume type in question.
6. Check Scan device for ports. 7. Based on the list of discovered ports, check the ones that you want UDT to monitor. 8. Review the polling properties and adjust as needed. When you are ready, click OK, ADD NODE.
5. A notification banner appears "New Ports will be imported to UDT by next polling interval". Event Notification for Nodes and Ports added to UDT To know whether an Orion node was added to UDT, event notifications are triggered and can be found in the Last 25 Events resource in the UDT summary page.
Page 45
The event message notification for a failed importation due to license limit of a single node is "Some ports for [number of nodes] have been imported as unmonitored due to license limit." All event notifications related to nodes importation are displayed in the UDT Events resource.
AD-associated users on your network. UDT tracks user activity by reading an event log on the AD domain controller. Reading that log requires UDT to have the Event LogReader permission on each AD controller through which it is tracking user activity.
3. Enter a Credential Name. For example, if this credential were the one that you want UDT to use in retrieving event log data from an AD domain controller, you might call it Event Log Reader. 4. Enter a User Name (Domain\Username) that is known within a specific domain.
Follow these steps to add a new AD domain controller into UDT. 1. Click Manage Active Directory Domain Controller in the Track Users and Endpoints area in UDT Settings ( Settings > UDT Settings ). 2. Click Add AD Domain Controller .
3. Click Delete . 4. If you want to delete the node from UDT , select Delete node and data from UDT only. 5. If you want to delete the node from all SolarWinds products , select Delete node from all modules.
Enabling UDT to poll user data, essentially by retrieving event log data, on an AD domain controller outside the local domain of the UDT server requires setup both in UDT and the AD domain controller. UDT supports the following methods for getting event log data from another domain: Eventing6 This is the preferred method and depends on the AD domain controller running Windows 2008 R2.
2. Click Add UDT Credential . 3. Enter a Credential Name. For example, if this credential were the one that you want UDT to use in retrieving event log data from an AD domain controller, you might call it Event Log Reader.
The White List enables you to tell UDT which endpoints on your network you consider safe. Using that list UDT can report a list of endpoints on the network that you do not consider safe, and these endpoints appear in the Rogue Devices resource.
UDT uses inclusion rules to determine which endpoints connected to UDT-monitored devices are safe and unsafe. Endpoints UDT determines are unsafe, in that they are not covered by White List rules, appear in the list on the Rogue Devices resource.
Add Endpoints to the Whitelist by Enabling Rules 1. Click Add New on Included . 2. Click a Selection Method and add the appropriate information. Device (to add endpoints associated with a UDT device) Enter the appropriate string. Click Add More to add another device, as needed.
2. Click Disable . Ignoring Endpoints in UDT UDT uses ignore rules to determine which endpoints connected to UDT-monitored devices are irrelevant to tracking. Endpoints UDT determines are irrelevant, in that White List they are covered by rules, do not appear in UDT resources.
You can ignore endpoints in the by adding rules (described below) or by enabling rules Follow these steps to ignore endpoints in UDT by adding new rules. 1. Click Add New on Ignored . 2. Click a Selection Method and add the appropriate information.
Managing the UDT White List 1. Select the rule in the list under Ignored . 2. Click Enable . Deleting White List Rules To delete a white list rule: Select the rule in the list and then click Delete .
Settings page. You can manage SolarWinds UDT nodes, groups, accounts, alerts, views, and settings. You can also manage the navigation and look of SolarWinds UDT and view information about available product updates.
Customize Customize Menu Bars Color Scheme External Websites Manage Alerts Manage Advanced Alerts Product Updates Available Product Updates SolarWinds product Team Blog Views Manage Views Add New View Views by Device Type Settings Web Console Settings Polling Settings Orion Thresholds...
Network Discovery For more information, refer to " .". Add a Node Click Add a Node on the Settings page to add a single device to your SolarWinds UDT. Adding a Node (Add a Single Device)." For more information, see "...
The Credentials category provides commands to add, edit, and delete credentials. Manage Windows Credentials Click Manage Windows Credentials on the Settings page to add, edit, and delete credentials that can access the Orion Web Console and UDT. Customize The Customize category provides commands to customize the navigation and appearance of your Orion Web Console.
Color Scheme Color Scheme Click Color Scheme on the Settings page to select a default color scheme for resource title bars. Changing the Web Console Color Scheme For more information, refer to " " External Websites Click External Websites on the Settings page to designate any external website as an Orion Web Console view, appearing in the Views toolbar.
SolarWinds UDT updates that can include version upgrades and service packs. SolarWinds product Team Blog Click SolarWinds product Team Blog on the Settings page to view regular posts from members of the SolarWinds product team to help you take full advantage of features provided by SolarWinds UDT and other SolarWinds products.
SolarWinds UDT polling engine. Orion Platform Polling Settings For more information refer to " " Orion Thresholds Click Orion Thresholds on the Settings page to configure SolarWinds UDT threshold settings. General Thresholds For more information refer to " ." UDT Settings...
License Details Click License Details on the Settings page to display details about both your SolarWinds UDT license and your monitored network, including the number of current monitored ports and allowed ports as well as the current nodes and allowed nodes.
Community Port Management The Port Management category gives you access to the commands that allow you to manage and discover ports. Keep in mind that for UDT a port is a physical connection on your network device. Manage Ports Click Manage Ports in the UDT Settings section to add, configure, and delete ports.
Click Data Retention in the UDT Settings section to specify how long SolarWinds UDT keeps historical information in the database. By default this is 90 days. Port Thresholds Click Thresholds in the UDT Settings section to set the level at which a port will be included in a High Port Utilization Report.
View UDT Job Status View UDT Job Status Click View UDT Job Status in the UDT Settings section to view the status for the UDT jobs for each node, showing the node name and IP address, job type, date and time for the last time the job was run, date and time for the next time the job will be run.
Click UDT thwack Forum in the UDT Settings section to browse the information provided in the UDT thwack Forum. UDT Credentials UDT Credentials allows you to add, edit, or delete the credentials by which UDT will access AD domain controllers. Manage Active Directory Administrator Credentials...
Customize Page . All UDT Nodes The All UDT Nodes resource provides a list of nodes, grouped by node property, with a status icon and the node name displayed for each node. Expanding a node displays the ports for the node with a status icon and the port name displayed for each port.
Page 71
User Search (type in a username) to limit the list to the logins by a specific user. Active Alerts Provides a list of the active alerts associated with UDT devices and ports. Top XX Nodes by Percent Ports Use Provides a list of the nodes with the highest percent of ports used. Because comparing disparate statistic measurements is of limited use, we suggest you create Statistic Data resource containing filters to limit the statistic sources.
The Device Tracker Port Details view opens when you click on a specific port on a node in UDT Nodes, and provides the following resources. You can customize which of these resources appear on the page by clicking Customize Page . You may see different resources depending on the item you are viewing.
Viewing Status: Device, Port, User, SSID Viewing Node and Port Data in Tooltips Node and port tooltips in SolarWinds UDT provide immediate status overviews of monitored nodes and ports. To view a quick overview of any monitored node or port in the web console, hover over a node or port.
Using the Device Tracker Access Point Details Interface Type The interface type of the port. Active Whether the connection is active or not. Connection VLAN Displays information about the VLAN. Duplex Displays the Duplex mode: FullDuplex, HalfDuplex, or Unknown. # of connected Number of connected IP addresses # of connected Number of connected MAC addresses...
Page 75
Viewing Status: Device, Port, User, SSID All Endpoint Connections Shows all endpoint connections on a specific access point or SSID. The information is presented in a table by Endpoint Name, Last User Login, Connection Duration (in minutes), and the name of the SSID (only if the resource is displayed on an Access Point Details view).
Using the Device Tracker SSID Details Using the Device Tracker SSID Details The Device Tracker SSID Details view opens when you click on a specific SSID in Top 10 SSIDs on the Device Tracker Summary view, and it provides the following resources.
(rows) to display for from the user record. Note: the UDT database receives all the information from the AD domain controller that the administrator has not blocked due to internal or other policies.
Viewing User Data in Tooltips Viewing User Data in Tooltips User tooltips in SolarWinds UDT provide immediate status overviews of monitored users. To view a quick overview of any monitored user in the web console, hover over a user in the list. Depending on the selected user, and the policies on the AD domain controller, the information in the relevant user record is displayed.
1. Click the DEVICE TRACKER tab, if not already selected. 2. Locate UDT Search (just below the menu bar near the top right of the page). 3. Click the menu button in the search box, and select the desired option(s) for the search.
UDT server. UDT checks the database for trap-related information at set intervals. If an endpoint connects to a UDT device, and the endpoint is not on the White List, UDT posts an alert in the web console.
UDT to check for new trap messages. 6. Click Save . 7. To verify your setup, connect a device to the network that is not on the UDT White List. 8. Wait for the time you allotted in Step 5 and then check the "Active Alerts" and "All Triggered Alerts"...
Page 82
13. Click the plus (+) above the column in which you want the new port status resource to appear. 14. Select Total Ports Currently Used under UDT Port Charts and then click Done . 15. Click Edit in the new Total Ports Currently Used resource.
Shutting Down a Network Device Port Scenario: UDT is listing an endpoint on my network as rogue. I want to shut down access to the endpoint immediately while I investigate. To find and shut down the relevant device port: 1.
To find a user connection: 1. Click the DEVICE TRACKER tab, if not already selected. 2. Locate UDT Search (just below the menu bar near the top right of the page). 3. Click the menu button in the search box, and select user name.
To find all endpoints on a subnet: 1. Click the DEVICE TRACKER tab, if not already selected. 2. Locate UDT Search (just below the menu bar near the top right of the page). 3. Click the menu button in the search box, and select the desired option(s) for the search.
Page 86
Common Tasks with SolarWinds UDT 4. Enter the desired term for the search. This example uses IP address '10.199.3.*" as the target subnet. In this case we are searching for an exact match. In general, specific matches are required sought unless wildcards are used in the search term. This means...
Resolving IP Address Conflicts with IPAM and UDT Integration Integration with UDT and IPAM is available with UDT v 3.2 and IPAM v 4.3 or higher. If you are running both products, the built-in integration provides a view of end-to-end mapping of an IP address to any connected user/device, along with the device port and connection details all in the same window.
Page 88
Common Tasks with SolarWinds UDT See port and user information related to an IP address or host DNS assignment View port usage and capacity on every switch Detect endpoint devices having IP address conflicts Shutdown a port through the web interface...
Page 89
Resolving IP Address Conflicts with IPAM and UDT Integration 1. Click on the node port in the IPAM "Current Network Connections" resource on "Endpoint Details". 2. Click Shutdown in the "Port Details" resource.
Note: Only advanced alerts may be used for SolarWinds UDT-specific purposes. Basic alerts cannot be configured to trigger on SolarWinds UDT conditions or events. Configuring an alert for SolarWinds UDT is similar to configuring an alert for Orion Network Performance Monitor.
5. Click Edit. 6. Click the Trigger Condition tab. 7. Select the appropriate UDT item from the Type of Property to Monitor list. 8. Adjust the trigger condition as needed. Most likely you do not need to adjust this statement. For example, the default trigger for "Alert me when a new MAC address appears on the network"...
Page 92
Setting up the alert trigger action 5. Click Insert Variable. 6. Select the relevant variable category from the list and then select the appropriate variable. Continuing with the Watch list alert as an example, select Watch List from the Variable Category list, select WatchItemType from the Select A Variable list. 7.
SolarWinds UDT information is easily presented in a variety of formats using SolarWinds Report Writer. SolarWinds provides Report Writer as a quick and easy way for you to extract data from your database, including SolarWinds UDT statistics, for presentation in a useful form. A number of predefined SolarWinds UDT-specific reports are available with your installation of SolarWinds UDT.
As an example, the following procedures use the Connected MAC and IP Addresses report. Viewing a predefined UDT Report 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Report Writer . 2. Click File > Open .
Page 95
Report Writer . 2. Click File > New Report . 3. The example calls for a report MAC and IP addresses, so select UDT Connected MAC and IP Addresses , and then click OK . 4. By default the Connected MAC and IP Addresses report appears in the UDT Connected Devices Report Group.
Page 96
Viewing and Editing Reports 5. Select Landscape for the paper orientation, and then confirm that Make this Report available from the Orion website is checked. 6. Click Select Fields. 7. Review the current Field .selections. 8. To change the order of defined Field values, right click the relevant Field value and click Move current field forward (to reposition one slot down in the list) or Move currrent field backwards (to reposition one slot up in the list).
Page 97
Alerting and Reporting 11. For any Field item click the sort asterisk and select the desired sort type (none, ascending, or descending) to affect the sort order for the report. 12. Click Execute SQL Query to view the report in the resorted form. 13.
Reports ". Filtering and Grouping Data in Resources You can reorganize and filter data within a resource using or SolarWinds Query SWQL Language ( ), a SQL-like filter syntax. The filter description on each resource tells you whether to use SQL or SWQL.
Alerting and Reporting Wildcards The wildcard character in SQL syntax is: * . Example: Node.Caption Like 'AX3*' Filtering by Custom Property The property syntax to filter by custom property is: dataType .CustomProperty. propertyName Example filter to only show nodes with the custom property City that matches Atlanta: Node.CustomProperty.City = 'Atlanta' Filtering by Status...
Page 100
Node.CustomProperties.City = 'Atlanta' Filtering by Built-in Properties Many properties have the same name between data types. To prevent ambiguity, SolarWinds UDT prefixes the property names with the data type. Examples Example filter to show data from Cisco devices: Node.Vendor = 'Cisco' Example filter to show data from Windows Server 2003-2008 applications: Application.Name = 'Windows Server 2003-2008'...
Page 101
Alerting and Reporting Down Warning Critical Example filter to only show monitors that are not down: MonitorStatus.Availability<>2 Built-in SWQL Nodes Properties Node.AvgResponseTime Node.CPULoad Node.Caption Node.Contact Node.DNS Node.Description Node.GroupStatus Node.IOSImage Node.IOSVersion Node.IPAddress Node.LastBoot Node.LastSync Node.Location Node.MachineType Node.MaxResponseTime Node.MemoryUsed Node.MinResponseTime Node.NodeID Node.ObjectSubType Node.OrionID Node.PercentLoss Node.PercentMemoryUsed...
The Discovery Central view is subdivided into categories corresponding to the SolarWinds products you have installed. For SolarWinds UDT, Discovery Central is divided into Network Discovery and User Device Tracker Port Discover; and each of these categories provides current information about the network objects currently being monitored.
Network Sonar Results Wizards are available. This chapter provides instructions for quickly populating your SolarWinds UDT database with the network objects you want to monitor and manage with SolarWinds UDT. The Orion Web Console also provides an easy-to-use Web Node Management wizard suited to discovering and adding individual network objects.
Network Discovery Using the Network Sonar Discovery Wizard Network Discovery Using the Network Sonar Discovery Wizard SolarWinds products employ the easy-to-use Network Sonar Discovery Wizard to direct you in the discovery of devices on your network. Before using the Network...
Page 105
If you want to delete an existing discovery profile, select a currently defined discovery and then click Delete. 4. If the devices on your network do not require community strings other than the default strings public and private provided by SolarWinds UDT, click Next on the SNMP Credentials view.
Page 106
Choose Credential dropdown menu, and then provide a new credential name in the Credential Name field. Note: SolarWinds recommends against using non-alphanumeric characters in VMware credential names. d. Add or edit the credential User Name and Password, as necessary.
Page 107
Class A network (255.0.0.0 mask) containing the seed router and, if you are discovering devices for an SolarWinds NPM installation, the Class C networks (255.255.255.0 mask) containing all interfaces on the seed router, using the SNMP version chosen previously on the SNMP Credentials page.
Page 108
Network Discovery Using the Network Sonar Discovery Wizard 11. If you already know the IP addresses or hostnames of the devices you want to discover and include in the Orion Platform database, complete the following procedure: a. Click Specific Nodes in the Selection Method menu. b.
Page 109
SolarWinds Core Components 12. Configure the options on the Discovery Settings view, as detailed in the following steps. a. Provide a Name and Description to distinguish the current discovery profile from other profiles you may use to discover other network areas.
Results or Import New Results is clicked for a selected discovery. For more Network Discovery Using the Network Sonar Discovery Wizard information, see " " The following steps detail the selection of discovered objects for monitoring in SolarWinds UDT. To select the results of a network discovery for monitoring in SolarWinds UDT:...
Page 111
" 2. If you are discovering devices for an SolarWinds NPM installation, check the interface types you want SolarWinds UDT to monitor on the Interface Types to Import page, and then click Next . Note: If you are not sure you want to monitor a specific interface type, check the interface type in question.
Nodes option is used with a seed file to import devices into the Orion Platform database. Note: A Seed File discovery option is available in SolarWinds NPM prior to version 10. To import devices from a seed file: 1. Open your seed file.
Page 113
Delete. 5. If the devices on your network do not require community strings other than the default strings public and private provided by SolarWinds UDT, click Next on the SNMP Credentials view. 6. If you need to supply new SNMP credentials to discover the devices in your seed file, click Add New Credential , provide the required information, and then click Add .
Results are compared between discoveries, and results are listed on this tab. The following procedure provides guidelines for managing discovery results. To manage scheduled discovery results: 1. Click Start > All Programs > SolarWinds Orion > Configuration and Auto- Discovery > Network Discovery . 2. Click Scheduled Discovery Results .
Often, devices are found during a network discovery that you never intend to monitor with SolarWinds UDT. The Discovery Ignore List is a record of all such devices on your network. By placing a device on the Discovery Ignore List you can minimize the SNMP processing load associated with discovering devices that you never intend to monitor.
Page 116
Using the Discovery Ignore List 3. If you want to add devices to the Discovery Ignore List, complete the following procedure: a. Click Scheduled Discovery Results . b. Check devices you want to ignore, and then click Add to Ignore List . 4.
Orion Web Console and Chart Settings Using Node Filters Custom Charts in the Orion Web Console Custom Object Resources in the Orion Web Console Integrating SolarWinds Engineer's Toolset Accessing Nodes Using HTTP, SSH, and Telnet Using Integrated Remote Desktop Managing Orion Web Console Configurations...
To log in to the Orion Web Console: 1. Launch the Orion Web Console using either of the following methods: Click Start > All Programs > SolarWinds > Orion Web Console. Or launch a browser on your Server and enter http://ip_address or http://hostname, where ip_address is the IP address of your Orion host server, or where hostname is the domain name of your Server.
Discovering and Adding Network Devices " If you are currently using SolarWinds UDT to monitor any VMware ESX or ESXi Servers, the notification bar can display messages communicating the number of ESX nodes found during any discovery, and, if any discovered ESX nodes require credentials, the notification bar tells you.
Home view displays when you click Home from any view in the web console. Device Tracker (SolarWinds UDT) If you are viewing the Orion Web Console on a server on which SolarWinds UDT is also installed, the Device Tracker tab opens a menu of default views for some of the resources SolarWinds UDT can monitor.
1. Log on to your server using an account with administrative access. 2. Open web.config (default location C:\Inetpub\SolarWinds\ ) for editing. 3. In the <appsettings> section, locate the following setting: <add key="DisableBreadCrumbs" value="false"/>...
Managing the Orion Web Console 4. Change "false" to "true" , as follows: <add key="DisableBreadCrumbs" value="true"/> 5. Save web.config . Note: If you run the Configuration Wizard after editing this setting, your changes may be overwritten. Administrative Functions of the Orion Web Console The following sections describe the primary administrative functions performed by an Orion Web Console administrator.
Page 123
Clicking VMware Settings opens the VMware Settings view, where you can view both a list of currently monitored VMware ESX Servers and a library of the VMware credentials SolarWinds UDT uses to monitor your ESX Servers. For more information, see "Virtualization" in the SolarWinds Network Performance Monitor Administrator Guide.
Page 124
Managing the Orion Web Console Clicking Manage Groups opens the Manage Groups view. To a greater degree than previously available with custom properties, groups enable you to logically Managing organize your monitored network objects. For more information, see " Groups ."...
Page 125
SolarWinds UDT. The Available Product Updates view allows you to configure regular checks for SolarWinds UDT updates that can include version upgrades and service packs. The SolarWinds product Team Blog offers regular posts from members of the SolarWinds product team to help you take full advantage of features provided by SolarWinds UDT and its modules.
Page 126
Orion Web Console and Chart Settings " " Polling Settings define the configuration of polling intervals, timeouts, statistics calculations, and database retention settings for your SolarWinds UDT polling Orion engine. For more information about configuring Polling Settings, see " Platform Polling Settings "...
Handling Counter Rollovers The Counter Rollover setting configures SolarWinds UDT to properly handle counter rollovers. SolarWinds UDT is capable of handling either 32-bit or 64-bit counters, but, by default, SolarWinds UDT assumes counters are 32-bit. 32-bit counters have a maximum value of 2...
Calculations & Thresholds area. Notes: If Method 2 is selected, SolarWinds UDT will intentionally skip a poll if a polled value is less than the previous polled value to permit counting to Orion fully supports the use of 64-bit counters; however, these 64-bit counters can exhibit erratic behavior in some implementations.
Page 129
Level , but lower than the value set for the Error Level , display in High Percent Loss reports and resources. Gauges for these devices also display as red. SolarWinds UDT calculates percent packet loss using ICMP ping requests made on the Default Poll Interval. The software pings monitored devices and records the results of the ten most recent ping attempts.
Average Response Time is expressed as the average response time of these last 10 ping requests. If SolarWinds UDT does not receive a ping response within the Default Poll Interval, SolarWinds UDT will attempt to ping the nonresponsive device once every 10 seconds for the period designated as the Warning Interval.
Creating New Views Copying Views Deleting Views Views by Device Type Resource Configuration Examples Creating New Views You can customize the Orion Web Console for individual users by logging in as an administrator and creating new views as shown in the following procedure. 1.
Page 132
Managing the Orion Web Console 4. If you want to change the column layout of your view, complete the following steps. a. Click Edit to the right of the column widths. b. Select the number of columns under Layout. c. Provide the width, in pixels, of each column in the appropriate fields.. d.
The following limitations are defined by default: Orion Web Console View Limitations Single Network Group of Nodes System Location Pattern Node Node Name Pattern System Name Pattern Single Interface (SolarWinds NPM) Machine Type Group of Machine Types Interface Status (SolarWinds NPM) Pattern Hardware Single Hardware...
1. Click Settings in the top right of the web console, and then click Views by Device Type in the Views group of the Orion Website Administration page. 2. Select available Web Views for the different types of devices that SolarWinds is...
Selecting a Network Map Network maps created with SolarWinds Network Atlas can give a quick overview of your network, right from the main web console view. For more information about Creating Network Maps creating maps, see "...
Page 136
Managing the Orion Web Console Displaying a List of Objects on a Network Map When your web console view includes a network map, it can be helpful to maintain a list of network objects that appear on the map. The following procedure enables a resource listing network map objects.
Page 137
Resource Configuration Examples 3. Click + next to the view column in which you want to display the custom list of network maps. 4. Click + next to Network Maps . 5. Check Custom List of Maps , and then click Submit . 6.
Page 138
Managing the Orion Web Console following Time Period . 10. Click Submit . Specifying User-Defined Links The User-Defined Links option may be used to create quick access to external websites or customized views. URLs of your customized views can be copied from their preview pages and pasted in a User-Defined Links field.
Page 139
12. Click Submit . Specifying a Report The web console is able to incorporate reports that you have created in SolarWinds Report Writer into any view. The following procedure will take a report that you have created with Report Writer and include it within a web console view.
Page 140
8. Click Preview on the Customize YourView page. 9. Click Edit in the title bar of the Report from SolarWinds Report Writer resource. 10. If you do not want to use the default title provided, enter a new Title for the included report.
Page 141
6. Click Preview on the Customize YourView page, and then click Edit in the title bar of the Report from SolarWinds Report Writer resource. 7. If you do not want to use the default title provided, enter a new Title for the header of the reports list.
Page 142
Managing the Orion Web Console 11. If you want to filter your node list by text or IP address range, provide the text or IP address range by which you want to filter your node list in the Filter Text field, as shown in the following examples: Type Home in the Filter Text field to list all nodes with "Home"...
Page 143
SLA values, the Orion Web Console will display the appropriate line on your charts. Notes: Interface data is only available in SolarWinds NPM. For more information, see the SolarWinds Network Performance Monitor Administrator Guide. The SLA line may not appear immediately. It may take several minutes for the change to be detected by the Orion Platform web engine.
Managing the Orion Web Console 1. Click Start > All Programs > SolarWinds Orion > Grouping and Access Control > Custom Property Editor . 2. Click Add Custom Property . 3. For "Create a new custom property based on the selected object type," select Interfaces from the pull down window and click NEXT .
Exporting Views to PDF 5. If you only want to see certain types of messages, filter messages as shown in the following steps: a. If you want to view alerts, confirm that Show triggered alerts is checked, and then select the type of alerts to display. b.
Custom Summary view, and then click the corresponding resource type. Creating and Editing External Website Views With the external website view feature, any SolarWinds UDT administrator can select any external website and designate it as an Orion Web Console view, as shown in the following procedure.
Customizing the Orion Web Console 1. Click Settings in the top right of the web console. 2. Click External Websites in the Customize grouping of the Orion Website Administration page. 3. If you want to delete an existing external website, click Delete next to the website you want to delete, and then click OK to confirm the deletion.
Page 148
Managing the Orion Web Console 3. If you want to modify an existing menu, click Edit beneath the menu bar you want to modify, and then click and drag items between the Available items list on the left and the Selected items list on the right until the Selected items list includes all the items you want to include in your edited menu.
The SolarWinds.com End User License Agreement prohibits the modification, elimination, or replacement of either the SolarWinds.com logo and link on the menu bar or the SolarWinds copyright line at the bottom of the page. 2. Place your graphic in the images directory.
Configuring the Available Product Updates View The Orion Web Console can automatically check for the availability of any updates to your currently installed SolarWinds products. By default, the web console regularly checks for product updates automatically, as indicated by the dates and times reported as Last Check and Next Check , but you can click Check Now at any time to see an up-to-the-minute update.
Orion Web Console and Chart Settings 6. Save and then execute downloaded installers. For more information, see either the readme.txt file packaged with the downloaded update or review related www.solarwinds.com documentation available at Orion Web Console and Chart Settings The Orion Website Settings page allows an Orion Web Console administrator to set a number of options that apply to the web console user environment.
Managing the Orion Web Console Help Server is the URL of the server where online help for SolarWinds products http://www.solarwinds.com is stored. The default location is . If you are in an Internet-restricted network environment but require access to online help, download the entire online help, copy it to a web server, and then change the Help Server URL to that of the web server.
This option allows you to indicate whether or not you want to be notified when removable volumes are added to your network and discovered during network discovery. For more information about network discovery in SolarWinds UDT, see " Discovering and Adding Network Devices "...
Managing the Orion Web Console Filter the results to only show nodes that are not Up : Status<>1 Only show Cisco devices: Vendor = 'Cisco' Only show devices in Atlanta. (using a custom property named City): City = 'Atlanta' Only show devices beginning with "AX3-": Caption Like 'AX3-*' Only show Nortel devices that are Down: Vendor Like 'Nortel*' AND Status=2...
Page 155
Customizing Charts in the Orion Web Console You can also configure any custom chart resource in the Orion Web Console directly from the resource title bar either by selecting from the dropdown menu of options or by clicking Edit to display the Edit Chart Title view, as described in the following sections.
As a result, charts may not display if the time period is too long or if the sample interval is too small. The Trend Line option allows you to enable the trend line feature of SolarWinds UDT charts. By enabling trend lines on SolarWinds UDT charts, you can see potential future results as they are extrapolated from collected historical data.
Percent Memory Used Packet Loss and Response Time The following charts are available to display historical statistics about packet loss and response time for nodes monitored by SolarWinds. Availability and Response Time Average Response Time Average Response Time and Packet Loss...
Managing the Orion Web Console Min/Max/Average Disk Usage Shows both the total disk space available and the average amount of disk space used on the selected volume. Bars are also included to show minimum and maximum levels of disk usage. Percent Disk Usage Shows the total available disk space and the average amount of disk space used, as a percentage of the total available, on the selected volume.
Page 159
Custom Chart View Select a predefined period from the Select a Time Period: menu. Provide custom Beginning and Ending Dates/Times in the appropriate fields in the Time Period area. Sample Interval The sample interval dictates the precision of a given chart. A single point or bar is plotted for each sample interval.
Managing the Orion Web Console Custom Object Resources in the Orion Web Console The Orion Web Console provides a Custom Object resource that enables you to configure any of a wide array of resources to display performance data for any specific monitored objects.
Integrating SolarWinds Engineer's Toolset When you are browsing the Orion Web Console from a computer that already has a SolarWinds Toolset installed, SolarWinds UDT allows you to launch Toolset tools directly from your web browser. Right-clicking any monitored object listed in an Orion Web Console running the Toolset Integration displays a menu of available Toolset tools and functions.
Server (e.g. < InstallVolume >:\\Application\ ). 3. Double click that the SolarWinds Toolset Integration Tray Application on the Windows taskbar and verify that the service is running.
Page 163
8. Click Import . Follow these instructions if you are using a previous (not 10.9) version of Toolset. To add a program to the SolarWinds Toolset Integration menu: 1. If you want to add an external script to the Toolset Integration menu, save the script in an appropriate location on the install volume of your server (e.g.
Sometimes it is necessary to console into a remote server to troubleshoot an issue. If you have an installation of UDT that is integrated with SolarWinds Toolset, you can access your device from within the Orion Web Console as follows.
SolarWinds UDT Database " 1. Log in to the Orion Web Console as an administrator. 2. Click Start > All Programs > SolarWinds > Advanced Features > Web Configuration Backup . 3. Click Create Backup . 4. Confirm that the Orion folder is open or browse to it, located, by default within <Volume:>\Program Files\Solarwinds\ .
1. Log in to the Orion Web Console as an administrator. 2. Click Start > All Programs > SolarWinds > Advanced Features > Web Configuration Backup . 3. Click File > Clear Web Configuration .
Managing Devices in the Web Console Managing all the monitored devices on your network is greatly simplified with the Node Management feature of the Orion Web Console. Using this tool, you can easily add and remove devices and quickly view and edit device properties. Any user that has been granted node management rights can directly access the Node Management tool either from any All Nodes resource or through the Orion Website Administration page.
Orion Web Console. Note: This procedure does not specifically address the addition of objects that are specifically monitored solely by individual SolarWinds products, as in the case of monitoring interfaces with SolarWinds NPM. For more information about adding interfaces, see the SolarWinds Network Performance Monitor Administrator Guide.
Page 169
Adding Devices for Monitoring in the Web Console 8. If you are adding a VMware device, check Poll for VMware to ensure that SolarWinds NPM acquires any data the Vmware device provides to SNMP polling requests, and then complete the following steps to provide required Virtualization vCenter or ESX Server credentials.
Page 170
SNMPv3, select SNMPv3. If SNMPv2c is enabled on a device you want SolarWinds UDT to monitor, by default, SolarWinds UDT will attempt to use SNMPv2c to poll for performance information. If you only want SolarWinds UDT to poll using SNMPv1, you must disable SNMPv2c on the device to be polled.
Deleting Devices from Monitoring 12. If you want to save the provided credentials as a credential set, provide a Name , and then click Save . 13. If you want to delete a currently saved credential set, select the set to delete, and then click Save .
To view a quick overview of any monitored node in the web console, hover over the device name. The information in the following tables displays immediately. Note: If SolarWinds NPM is installed, interface data is also available in tooltips. For more information, see "Viewing Interface Data in SolarWinds NPM Tooltips" in the...
Editing Object Properties Node Data Current status of the node. (up, down, warning, unmanaged, or Node Status unreachable) IP Address The IP address currently assigned to the selected node Machine The vendor icon and vendor description of the selected node Type Average The measured average response time of the selected node as of...
Select <New Credential> in the Choose Credential dropdown menu, and then provide a new credential name in the Credential Name field. Note: SolarWinds recommends against using non-alphanumeric characters in VMware credential names. b. Add the credential User name and Password, as necessary.
Page 175
Promoting a Node from ICMP to SNMP Monitoring 5. In the SNMP area, select the SNMP Version for the promoted node. Note: Orion Platform SNMPv2c by default. If the promoted device supports or requires the enhanced security features of SNMPv3, select SNMPv3 . 6.
Managing Devices in the Web Console 14. If you want to change the default polling settings for your promoted node, edit the Node Status Polling or Collect Statistics Every values in the Polling area, as appropriate. Note: The Node Status Polling value refers to the period of time, in seconds, between the node status checks Orion Platform performs on the promoted node.
OK . Unscheduled Device Polling and Rediscovery SolarWinds UDT polls devices for statistics and status regularly, according to the polling settings available for configuration on the Polling Settings view in the Orion Orion Platform Polling Settings Web Console.
Rediscover . Monitoring Windows Server Memory When SolarWinds UDT polls a Windows server for CPU load and memory utilization, it pulls the amount of physical memory to define the 100% level, and then it totals the amount of memory in use by each allocation to compute what percentage of the physical memory is in use.
Managing Groups and Dependencies Dependencies and groups enable you to more effectively manage your network. Groups give you the ability to logically organize monitored objects, regardless of device type or location, and dependencies allow you to more faithfully represent what can actually be known about your network, eliminating "false positive" alert triggers and providing more accurate insight into the state of your network.
Creating Groups Creating a group is a straightforward process of selecting the Orion objects you want the group to contain. At creation time, you can also decide how you want SolarWinds to roll up the status of the group members.
To edit properties of an existing group: 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Click Settings in the top right of the web console. 3. Click Manage Groups in the Node & Group Management grouping of the Orion Website Administration page.
Managing Group Members The following procedure manages the objects included within a defined group. 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Click Settings in the top right of the web console, and then click Manage Groups in the Node &...
Page 183
(Mixed Availability) The following procedure configures the method used to determine group status. 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Click Settings in the top right of the web console, and then click Manage Groups in the Node &...
For example, in the case of a typical switch monitored by SolarWinds NPM, when the switch itself goes down or becomes unresponsive, all interfaces on the switch will also be unresponsive, even though they may functioning perfectly well.
Note: Interfaces may be defined as parent objects, but they cannot be defined as child objects. SolarWinds NPM determines interface status directly by polling parent nodes. If the node on which an interface exists goes down, SolarWinds NPM automatically reports any and all interfaces on that node as unreachable.
Editing an existing dependency is a straightforward process, as shown in the following procedure. 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Click Settings in the top right of the web console, and then click Manage Dependencies in the Node &...
Deleting an Existing Dependency 3. Check the dependency you want to edit, and then click Edit . 4. On the Select Parent page, complete the following steps: a. Use the Show only: and Group by: selection fields to customize the list of displayed objects and groups.
Managing Groups and Dependencies 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Click Settings in the top right of the web console, and then click Manage Dependencies in the Node & Group Management grouping of the Orion Website Administration page.
Managing Web Accounts Orion Web Console user accounts, permissions, and views are established and maintained with the Orion Platform Account Manager. When Advanced Customization is enabled on the Orion Website Settings page, you can use Orion Platform Account Manager to customize menu bars and views for different users. For more information about Orion Website Settings and Advanced Customization, see "...
Managing Web Accounts 6. If you selected Orion individual account, complete the following steps: a. Provide a User Name and a Password for the Orion individual account. b. Confirm the password, and then click Next. c. Define user settings and privileges, as appropriate. For more information, see "Editing User Accounts"...
User Account Access Settings Defining Pattern Limitations Setting Default Account Menu Bars and Views Configuring an Account Report Folder Configuring Audible Web Alerts User Account Access Settings The following procedure is a guide to setting user account access. 1. Log in to the Orion Web Console as an administrator. 2.
Alert Sound list. Note: By default, sounds are stored in the Sounds directory, located at C:\Inetpub\SolarWinds\NetPerfMon\Sounds . Sounds in .wav format that are added to this directory become available as soon as the Edit User Account page refreshes.
Page 193
Setting Account Limitations 3. If you want to limit an individual user account, complete the following steps: a. On the Individual Accounts tab, check the account you want to limit. b. Click Edit. c. Click Add Limitation in the Account Limitations section. d.
Managing Web Accounts 6. Select the type of limitation to apply from the list, and then click Continue . Notes: Account limitations defined using the Account Limitation Builder display as options on the Select Limitation page. Account limitations can be defined and set using almost any custom properties.
Setting Default Account Menu Bars and Views (*foo* EXCEPT *b*) AND (*all* OR *sea*) matches seafood and footfall , but not football or Bigfoot . Setting Default Account Menu Bars and Views The Default Menu Bar and Views section provides several options for configuring the default menu bar and views for your user account.
Orion Platform reports. By default, no report folder is configured for new users.The Reports directory is located in the SolarWinds UDT installation directory: C:\Program Files\SolarWinds\Orion\ . 13. If you want to designate default Node, Volume, and Group Details Views for this account, expand General Settings , and then select appropriate Node Detail , Volume Detail , and Group Detail Views .
6. Select the sound file you want to play when new alerts arrive from the Alert Sound list. Note: By default, sounds are stored in the Sounds directory, located at C:\Inetpub\SolarWinds\NetPerfMon\Sounds . Sounds in .wav format that are added to this directory become available as soon as the Edit User Account page refreshes.
Console The Orion Web Console provides the Polling Engines view, giving you immediate insight into the performance of all polling engines in your SolarWinds installation. 1. Log in to the Orion Web Console as an administrator. 2. Click Settings in the top right of the web console.
Managing SolarWinds UDT Polling Engines Configuring Polling Engine Settings Settings for your SolarWinds UDT polling engine are configured on the Polling Settings view within the Orion Web Console. To open the Polling Settings view: 1. Log in to the Orion Web Console as an administrator.
Monitored network devices are also checked for IOS upgrades permitting EnergyWise support. By default, this interval is 30 minutes. Note: In SolarWinds products released prior to SolarWinds NPM version 10.1, the minimum interval allowed is 1 minute. Beginning with SolarWinds NPM version 10.1, the minimum rediscovery interval is 5 minutes.
The following options configure Orion Platform database maintenance and retention settings. Note: Changes to database maintenance and retention settings do not take effect until the SolarWinds Network Performance Monitor service is restarted. Archive Time The Archive Time is the time of day when Orion Platform database Database Maintenance maintenance occurs.
By default, this period is 30000ms. For more information about VMware ESX polling, see "Virtualization" in the SolarWinds Network Performance Monitor Administrator Guide. UCS API Timeout All UCS API requests made by the Orion poller time out if a response is not...
Devices that do not respond to polling within this designated period of time display as Down in the web console. By default, this value is 120 seconds. Counter Rollover This option sets the type of counter SolarWinds UDT is to use. For more Handling Counter Rollovers information, see "...
Calculating Node Availability Calculating Node Availability The Availability Calculation setting on the Polling Settings view provides a choice between the following two methods for determining device availability. Node Status The default method is based upon the historical up or down status of the selected node.
The resulting two sets of data are used to calculate a nearly instant baseline view of your network performance. If you do not need statistics immediately, or if you do not want SolarWinds UDT to calculate a baseline at startup, disable baseline calculation at startup by setting the Baseline Calculation option on the Polling Settings view to False .
Setting the Node Warning Level To reassign nodes to a different polling engine: 1. Click Start > All Programs > SolarWinds Orion > Advanced Features > Orion Service Manager . 2. Click Shutdown Everything . Note: Confirm that you stop the SolarWinds Network Performance Monitor Service on all polling engines.
SolarWinds Technical Reference, " Database ". 2. On your Server, click Start > All Programs > SolarWinds > Advanced Features > Orion Service Manager . 3. Click Shutdown Everything . 4. On your Orion Platform database server, click Start > All Programs > Microsoft SQL Server >...
Page 208
17. In the Value data field, enter the CurrentValue provided in the query above, and then click OK . 18. Close the Registry Editor. 19. Click Start > All Programs > SolarWinds > Advanced Features > Orion Service Manager . 20. Click Start Everything .
Monitoring Network Events in the Web Console SolarWinds UDT automatically logs all events that occur to any monitored devices on your network. These events are then displayed in the Orion Web Console, so you can view and acknowledge them as your network management policies require.
Acknowledging network events is straightforward in the Web Console, as shown in the following procedure. 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Log in to the Orion Web Console, and then click Events in the Views toolbar.
Using Orion Platform Advanced Alerts Alerts are generated for network events, and they may be triggered by the simple occurrence of an event or by the crossing of a threshold value for a monitored Interface, Volume, or Node. Alerts can be set to notify different people on different days, different times of the day, different people for different events, or any combination of times, events, and people.
Acknowledging Advanced Alerts in the Web Console Escalated Advanced Alerts Viewing Alerts from Mobile Devices Creating and Configuring Advanced Alerts SolarWinds UDT allows you to configure advanced alerts with the following features: Sustained state trigger and reset conditions Multiple condition matching Automatic alert escalation...
Page 213
Creating a New Advanced Alert 2. Click View > Configure Alerts . 3. Click New . The Edit Alert window displays, providing an array of configurable alerting options, including trigger and reset conditions, suppressions, and date and time limitations. The following topics provide more information about configuring alert options: Naming, Describing, and Enabling an Advanced Alert Setting a Trigger Condition for an Advanced Alert Setting a Reset Condition for an Advanced Alert...
Use the following steps, after clicking New , Copy , or Edit from the Manage Alerts advanced alert Window, to name and describe an 1. Click Start > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager . 2. Click View > Configure Alerts .
Setting a Trigger Condition for an Advanced Alert 6. Check Enable this Alert . 7. Type the Alert Evaluation Frequency and select Seconds, Minutes, or Hours from the list to set the checking interval for your alert. 8. Click Trigger Condition to set the trigger condition for your alert. For more information, see "...
Page 216
Understanding Condition Groups " To set the trigger conditions for an advanced alert: 1. Click Start > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager. 2. Click View > Configure Alerts . 3. If you want to create a new alert, click New.
Page 217
Setting a Trigger Condition for an Advanced Alert 8. If you select a type of monitored object, complete the following steps: a. Generate trigger conditions in the text field by selecting appropriate descriptors from the linked context menus and by clicking Browse (...) on the left of the text field.
Set specific conditions for resetting an using the following steps. 1. Click Start > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager. 2. Click View > Configure Alerts , and then click New or select an alert from the list and click Copy or Edit .
Because there are many situations where the reset conditions are the opposite of, or are very similar to, the trigger conditions, SolarWinds has provided a function that copies the trigger conditions to the reset conditions. Click Copy From Trigger to add the trigger condition.
Page 220
" and " ." To set conditions for advanced alert suppression: 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager. 2. Click View > Configure Alerts . 3. Click New or select an alert from the list.
You can select the specific time periods and days that your will monitor your network objects with the following procedure. 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager. 2. Click View > Configure Alerts .
Select actions that will occur when your is reset. 1. Click Start > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager. 2. Click View > Configure Alerts . 3. Click New Alert, Copy Alert, or Edit Alert, as appropriate.
Understanding Condition Groups To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged . To execute the action repeatedly as long as the trigger condition exists, check Execute this Action repeatedly while the Alert is Triggered and then provide an appropriate action execution interval.
Using Orion Platform Advanced Alerts Any Condition Group Changing the condition group to Trigger Alert when any of the following apply changes the logic to or statements. In this example, changing the condition group to any would change the alert trigger to: Alert when: (Node Status = Up) or (Percent Loss >= 75) or (CPU Load >= 85) In this situation, if any of the three conditions become true, the alert will trigger.
Page 225
To use the Current Events window to view network events: 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager .
Page 226
Alert views in the Orion Advanced Alert Manager are configured in the Alert Viewer Settings window, as presented in the following procedure. To configure alert views in the Advanced Alert Manager: 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager .
Page 227
Using the Advanced Alert Manager 2. Click File > Settings . Note: The Configure Alerts tab of the Alert Viewer Settings window displays all available network alerts, and from this window you can create, copy, edit, and Creating and Configuring Advanced delete alerts.
To add an alert action: 1. Click Start > All Programs > SolarWinds > Network Performance monitor > System Manager . 2. Click Alerts > Active Alerts , and then click either Configure Basic Alerts or Configure Advanced Alerts , as appropriate.
Sending an E-mail / Page Using GET or POST URL Functions Dial Paging or SMS Service Sending an E-mail / Page The following procedure configures an e-mail/page action for an advanced alert. Note: Emails and pages are sent in plain text. 1.
Note: Due to restrictions on Windows service applications, the Play a Sound action is not available to SolarWinds installations on either Windows 7 or Windows Server 2008 and higher. To configure a play sound action for an advanced alert: 1.
Logging an Advanced Alert to a File 6. If you want to enable alert escalation, click Alert Escalation , and then check any of the following options, as appropriate for your alert: To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged.
Using Orion Platform Advanced Alerts 6. Select the days on which you want to activate your alert action. If you want to enable alert escalation, click the Alert Escalation tab, and then check any of the following options, as appropriate for your alert: To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged.
Logging an Advanced Alert to the NetPerfMon Event Log 6. Click Time of Day . 7. Enter the time period and select the days over which you want to activate your alert action. 8. If you want to enable alert escalation, click Alert Escalation , and then check any of the following options, as appropriate for your alert: To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged.
Using Orion Platform Advanced Alerts 6. If you want to enable alert escalation, click Alert Escalation , and then check any of the following options, as appropriate for your alert: To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged.
Executing an External Program 8. Enter the time period over which you want to activate your alert action. 9. Select the days on which you want to activate your alert action. 10. If you want to enable alert escalation, click Alert Escalation , and then check any of the following options, as appropriate for your alert: To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged.
Using Orion Platform Advanced Alerts 5. Click Alert Escalation , and then check any of the following options, as appropriate for your alert: To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged. To execute the action repeatedly, while the trigger condition exists, check Execute this Action repeatedly while the Alert is Triggered, and then provide an action execution interval.
Emailing a Web Page Emailing a Web Page The Edit E-mail Web Page Action window includes several tabs for configuration. The following procedure configures an e-mail URL action for an advanced alert. Note: Emails are sent in plain text. 1. Click E-mail a Web Page , and then then click OK . 2.
Note: Due to restrictions on Windows service applications, the Text to Speech action is not available to SolarWinds installations on either Windows 7 or Windows Server 2008 and higher. To configure a text-to-speech output action for an advanced alert: 1.
Note: The only operating systems supporting Windows Net Messaging on which SolarWinds supports SolarWinds installations are Windows Server 2003 and Windows XP. SolarWinds only supports evaluation installations of Orion on Windows XP. To configure Orion to send a Windows Net message upon alert: 1.
Using Orion Platform Advanced Alerts 6. If you want to enable alert escalation, open the Alert Escalation tab, and then check any of the following options, as appropriate for your alert: To disable the action when the alert has been acknowledged, check Do not execute this Action if the Alert has been Acknowledged.
POST URL functions, click OK . Dial Paging or SMS Service If NotePager Pro is installed, Orion can be configured to communicate alerts using paging and SMS services. For more information about installation and configuration, SolarWinds Network Performance Monitor Integration www.notepage.net see " " at...
Orion detects an alert condition on your network. Complete he following procedure to test an alert action. 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager . 2. Click Configure Alerts .
To view alerts in the Web Console: 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Click Alerts in the Views toolbar. 3. If you want to filter your alerts table view by device, select the device to which you want to limit your alerts view in the Network Object field.
WidgetCo IT manager proceed as follows: 1. Immediately, as soon as SolarWinds UDT recognizes an alert condition, SolarWinds UDT generates both an email and a page that are sent to one of the two technicians. An entry is also recorded in the Orion events log.
Creating a Series of Escalated Alerts 3. If the second alert is not acknowledged within 20 minutes, SolarWinds UDT fires a third alert that sends both an email and a page to both technicians and to the IT manager. An entry is also recorded in the Orion events log.
Page 246
Using Orion Platform Advanced Alerts 9. Confirm that the linked text in the alert definition field displays all . Note: Click the linked text to select the number of conditions that you want to apply ( all , any , none , not all ). For more information about linked text conditions, Understanding Condition Groups see "...
Page 247
Creating a Series of Escalated Alerts 23. Click E-mail/Pager Addresses , and then complete the To , CC , BCC , Name , and Reply Address fields for your Level 1 contact. Note: You must provide at least one email address in the To field. When entering multiple addresses in a field, separate addresses with a comma.
34. If you are finished configuring your escalated alert, click OK . Viewing Alerts from Mobile Devices SolarWinds UDT is capable of detecting when you are accessing the Orion Web Console from a mobile device. This mobile alerts view allows you to view and acknowledge existing active alerts.
Orion Network Atlas is also fully compatible with all network maps created with Orion Map Maker used with earlier versions of SolarWinds UDT products. For more information, see the SolarWinds Network Atlas Administrator Guide at...
Over time, your SolarWinds UDT database accumulates a great deal of information. SolarWinds has developed Report Writer to provide a quick and easy way for you to extract data from your database and present it in a useful form. Several standard reports that you can modify are included in the Report Writer distribution, and you can create new reports as necessary.
Creating and Viewing Reports Note: If the report you require is not listed in any of the following sections, you can use SolarWinds Report Writer to create your own custom report. For more Using Report Writer information about creating your own custom reports, see "...
Current Node Status Availability of Entire Network - Last Month Displays the availability of all monitored nodes on the entire network over the last month. Top 25 Percent Down - Last Month Displays the top 25 nodes, by percent downtime, over the last month. For other types of predefined reports, see: Current Node Status Current Volume Status...
Creating and Viewing Reports Current Status of each Node Displays the IP address and a verbal statement of the current operational status of all monitored nodes. Device Polling Details Displays the node, vendor, IP address, machine type, next scheduled rediscovery, next scheduled poll. Down Nodes Displays all monitored nodes that are currently down.
Daily Node Availability Availability Current Node Status Daily Node Availability Events Historical CPU and Memory Reports Historical Response Time Reports Historical VMware ESX Server Reports Groups: Current Groups and Groups Members Status Groups: Daily Group Availability Groups: Group Availability (with members) Groups: Historical Groups Status Historical Volume Usage Reports Inventory...
Creating and Viewing Reports Historical Response Time Reports Historical VMware ESX Server Reports Groups: Current Groups and Groups Members Status Groups: Daily Group Availability Groups: Group Availability (with members) Groups: Historical Groups Status Historical Volume Usage Reports Inventory Events The following network events reports are provided by default with Orion. All Down Events Displays a list of all events in the database involving nodes that have stopped responding to polling over the last 12 months.
Historical CPU and Memory Reports Triggered Alerts - Last 30 Days Displays a list of all triggered alerts over the past 30 days. For each triggered alert event, this report displays the date and time of the alert trigger, the node that triggered the alert, and a message describing the triggered alert event.
Creating and Viewing Reports Current Volume Status Daily Node Availability Events Historical Response Time Reports Historical VMware ESX Server Reports Groups: Current Groups and Groups Members Status Groups: Daily Group Availability Groups: Group Availability (with members) Groups: Historical Groups Status Historical Volume Usage Reports Inventory Historical Response Time Reports...
Historical Volume Usage Reports Inventory Historical VMware ESX Server Reports SolarWinds UDT provides the following VMware ESX Server performance reports by default with Orion. Network Traffic by VM for Last 7 Days For each monitored VMware ESX Server, this report displays the average daily network traffic on the ESX Server per hosted VM for the last 7 days.
Creating and Viewing Reports Availability Current Node Status Current Volume Status Daily Node Availability Events Historical CPU and Memory Reports Historical Response Time Reports Groups: Current Groups and Groups Members Status Groups: Daily Group Availability Groups: Group Availability (with members) Groups: Historical Groups Status Historical Volume Usage Reports Inventory...
Groups: Daily Group Availability Historical Response Time Reports Historical VMware ESX Server Reports Groups: Daily Group Availability Groups: Group Availability (with members) Groups: Historical Groups Status Historical Volume Usage Reports Inventory Groups: Daily Group Availability The following group availability reports are provided by default with Orion. Group Availability - Last Month Group Availability - Last Month Group Availability - This Month...
Creating and Viewing Reports Groups: Group Availability (with members) The following group availability reports that include member availability are provided by default with Orion. Group Availability (with members) - Last Month Group Availability (with members) - Last Month Group Availability (with members) - This Month Group Availability (with members) - This Month Group Availability (with members) - This Year Group Availability (with members) - This Year...
Historical Volume Usage Reports Historical Status of each Group - Last Month Historical Status of each Group - Last Month Historical Status of each Group - This Month Historical Status of each Group - This Month For other types of predefined reports, see: Availability Current Node Status Current Volume Status...
IOS Versions of Cisco Devices For all monitored Cisco devices, this report displays the device name, machine type, and Cisco IOS Version and Image. For available UDT reports see " Using Predefined SolarWinds UDT Reports " For other types of predefined reports, see:...
The following procedure opens reports for viewing in the Orion Web Console. 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Log in to the Orion Web Console, and then click Home > Reports .
The following procedure opens reports for viewing in the SolarWinds UDT Report Writer. 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Report Writer . 2. If report groups are not already expanded in the left pane, click + next to a report group name to expand the group, and then click the title of the report you want to view.
Preview Mode See also: Preview Mode Design Mode Preview Mode Report Writer , Preview mode shows a report as it will print. When you open a Design mode report in Preview mode, or switch to Preview mode from , Orion runs the query to generate the report, and then Report Writer displays the results.
Creating and Viewing Reports Each report offers different configuration options, so, depending on the report, some formatting tabs described in the following sections may not be available. Notes: The SQL query used to generate a report may be viewed in an additional tab. Click Report >...
Select Fields Options Tab 4. If you do not want to make this report available on your Orion Web Console, clear Make this Report available from the Orion website. Note: By default, most reports are made available for display in the Orion Web Customizing Views Console.
Creating and Viewing Reports Filter Results Options Tab create or modify reports When you , the Filter Results tab allows you to generate filter conditions for field data by selecting appropriate descriptors from the linked context menus. Results filters are configured as follows. To configure results filters: 1.
If you receive a SQL Timeout error message, you may edit the timeout setting in the SWNetPerfMon.db file. By default, this file is located in the C:\Program Files\SolarWinds\Orion directory Since the Relative Time Frame is continuously variable, reports run with it may show different results, even if they are run close together in time.
The image that is displayed at the top and bottom of each report can be changed. To add your company logo as the report header and footer, save your logo as Header.jpg in the SolarWinds\Common\WebResources folder, typically located in C:\Program Files\ , and then click Refresh .
Exporting Reports Exporting Reports SolarWinds Report Writer gives you the ability to present your created reports in any of the following industry-standard formats: Comma-delimited (*.csv, *.cdf) Text (*.txt) HTML (*.htm, *.html) MIME HTML, with embedded images (*.mhtml) Excel® spreadsheet (*.xls) Adobe®...
Page 273
To generate an example report of network device availability information: 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Report Writer . 2. Click File > New Report .
Page 274
Example Device Availability Report 5. Select Portrait for the paper orientation, and then confirm that Make this Report availablefrom the Orion website is checked. 6. Click Select Fields. 7. Click Browse ( ... ), and then select Add a new field . 8.
Page 275
Creating and Viewing Reports 9. Click Browse ( ... ), and then select Add a new field . 10. Click the Field asterisk, and then select Network Nodes > Node Status > Status Icon . Note: While this field makes a distinct visual difference for a report viewed in color, it will make little or no difference if printed in black and white.
Page 276
Example Device Availability Report 13. Click Execute SQL Query to view the report data in the preview window. Note: The report preview should show information about both current and historical status. Current status entries must be relabeled to avoid confusion. 14.
Page 277
Creating and Viewing Reports 19. Click the sort asterisk on the Status field line, and then select descending . 20. Click Execute SQL Query to confirm your choice. 21. Click Browse ( ... ), and then select Add a new field . 22.
Using Orion Report Scheduler 26. Select Relative Time Frame , type 7 in the text field, and then select Days from the list. 27. If you want to break down the report day-by-day, click Summarization and specify your choices. 28. If you want to filter your report, click Filter Results and specify filter rules, as on the Select Fields tab.
4. Click the name of the report you want to schedule. 5. Copy the URL of the report you want to schedule. 6. Click Start > All Programs > SolarWinds Orion > Alerting, Reporting, and Mapping > Orion Report Scheduler .
Using Orion Report Scheduler with HTTPS 15. If you want to email the report, complete the following procedure: a. Confirm that either Email the Web Page (as HTML) or Email the Web Page (as PDF) are selected, and then click Continue. b.
Creating and Viewing Reports d. Click OK. 2. If you are configuring Mozilla Firefox, complete the following steps: a. Open Mozilla Firefox on the user computer. b. Click Tools > Options. c. Click Advanced, and then click the Encryption tab. d.
3. Copy the reports you want the account-limited user to see from the Orion Platform reports folder into the new, account-limited user folder. 4. Click Start > All Programs > SolarWinds > Orion Web Console . 5. Log in to the Orion Web Console as an administrator.
SQL server, so it can handle large numbers of simultaneously incoming Syslog messages from all your monitored devices. SolarWinds UDT uses the SolarWinds Syslog Service to listen on UDP port 514 for incoming Syslog messages. Received messages are then decoded and stored in the Orion Platform database.
Syslog messages within the Orion Web Console. Syslog Resources Viewing Syslog Messages in the Web Console Acknowledging Syslog Messages in the Web Console Syslog Resources Syslog SolarWinds UDT provides the following -related resources for inclusion within web console views.
Page 285
Syslog Resources Advanced Syslog Counts Every Syslog message has a designated severity. For more information about Syslog Severities Syslog severities, see " " The Advanced Syslog Counts resource groups by severity all Syslog messages received by the currently viewed node. For each severity, this resource provides the number of received Syslog messages.
To view Syslog messages in the Web Console: 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Log in to the Orion Web Console, and then click Syslog in the Views toolbar.
Syslog Viewer application for viewing, acknowledging, and triggering alerts in response to Syslog messages on your network. To open the Syslog Viewer, click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Syslog Viewer .
The Date/Time Range must be set to Today , Last 24 Hours , Last 2 Hours , or Last Hour . Syslog Server Settings Use the following procedure as a guide to starting and configuring the Syslog Viewer. 1. Click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Syslog Viewer .
Note: Syslog rules may not be applied to nodes in an unmanaged state. For more Setting Device information about designating nodes as unmanaged, see " Management States " To configure Syslog Viewer filters and alerts: 1. Click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Syslog Viewer .
Page 290
Use the examples listed on this tab to format the list properly. When Use Regular Expressions in this Rule is checked, regular expressions can be used in place of "like" statements. For more information about using regular expressions in SolarWinds UDT, see "Regular Expression Pattern Matching".
Page 291
Configuring Syslog Viewer Filters and Alerts 10. If you want to limit rule application to within a specific period of time, select the Time of Day tab, check Enable Time of Day checking , enter the time period, and then check the days of the week on which to apply the rule. Notes: Enabling Time of Day checking creates more overhead for the CPU.
Monitoring Syslog Messages Available Syslog Alert Actions The following list provides definitions of the actions available for each Syslog alert Configuring Syslog type. For more information about how to assign alert actions, see " Viewer Filters and Alerts " Discard the Syslog Message Allows you to delete unwanted Syslog messages sent to the Syslog server.
Execute an external program Allows you to specify an external program to launch using a batch file. This action is used when creating real-time change notifications in SolarWinds UDT. Execute an external VB Script Allows you to launch a VB Script using the selected script interpreter engine and a saved script file.
Monitoring Syslog Messages 1. Provide the hostname or IP address of the destination to which you want to forward the received Syslog message. 2. Provide the UDP Port you are using for Syslog messaging. Note: The default is UDP port 514 . 3.
Page 295
Syslog Date/Time Variables Current date and time. (Windows control panel defined ${DateTime} "Short Date" and "Short Time" format) ${DayOfWeek} Current day of the week. ${DayOfYear} Numeric day of the year ${H} Current hour ${HH} Current hour. Two digit format, zero padded. ${Hour} Current hour.
${Severity} Syslog Severities message. For more information, see " ". ${Version} Version of the SolarWinds software package Syslog Date/Time Variables See also: Syslog Message Priorities Included at the beginning of each Syslog message is a priority value. The priority value range spans between 0 and 191 and is enclosed in angle bracket ( < and > ) delimiters.
Syslog Severities Note: If you are receiving messages from a UNIX system, consider using the User Facility as your first choice. Local0 through Local7 are not used by UNIX and are traditionally used by networking equipment. Cisco routers, for example, use Local6 or Local7.
Page 298
Monitoring Syslog Messages A condition requiring immediate correction, for example, Alert the loss of a backup ISP connection. Notify staff who can fix the problem. A condition requiring immediate correction or indicating a failure in a primary system, for example, a loss of a Critical primary ISP connection.
UDP port 162 and then decodes, displays, and stores the messages in the SolarWinds UDT database. The SolarWinds Trap Service allows SolarWinds UDT to receive and process SNMP traps from any type of monitored network device, and, because the SolarWinds Trap Service is multi-threaded, it can handle large numbers of simultaneously incoming traps.
Consider having each managed device notify the SolarWinds UDT SNMP Trap Server of any issues without solicitation. In this configuration, a problem device notifies the server by sending a message.
Trap Viewer Settings Trap Viewer Use the following procedure to start and configure the 1. Click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Trap Viewer . 2. Click File > Settings . 3. On the General tab, configure the following Trap server settings: a.
Page 303
." To configure Trap Viewer filters and alerts: 1. Click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Trap Viewer . 2. Click File > Settings , and then click the Alerts / Filter Rules tab.
Page 304
Notes: When Use Regular Expressions in this Rule is checked, regular expressions can be used in place of "like" statements. For more information Regular Expression about using regular expressions in SolarWinds UDT, see " Pattern Matching ". 12. Click Conditions, and then generate trigger conditions for rule application in...
Available Trap Alert Actions 18. Use the arrow buttons to set the order in which actions are performed. Note: Actions are processed in the order they appear, from top to bottom. 19. If you need to delete an action, select the action, and then click Delete Action .
Page 306
Execute an external program Allows you to specify an external program to launch using a batch file. This action is used when creating real-time change notifications in SolarWinds UDT. Execute an external VB Script Allows you to launch a VB Script using the selected script interpreter engine and a saved script file.
Performance Monitor Administrator Guide. Trap Alert Variables The following variables can be used in trap alert messages with the SolarWinds UDT Trap Server. You must begin each variable with a dollar sign and enclose each variable identifier in curly braces as, for example, ${ VariableName } .
Page 308
Monitoring SNMP Traps Current day, date and time. (DAY NAME MONTH DD, YYYY ${DateTime} HH:MM AM/PM) ${Day} Current date. (MM/DD/YYYY format) ${DayOfWeek} Current day of the week. ${DayOfYear} Numeric day of the year ${H}, ${Hour} Current hour. 24-hour format ${HH} Current hour.
Other Trap Variables Other Trap Variables Trap Date/Time Variables See also: Trap Variable Description ${Application} SolarWinds application information ${Community} Node community string ${Copyright} Copyright information ${DNS} Fully qualified node name ${Hostname} Host name of the device triggering the trap ${IP}...
Creating Custom Properties All SolarWinds product installations have access to the Custom Property Editor, which allows you to add a custom property to any monitored device. Custom properties are additional fields, such as country, building, asset tag, or serial number, that you can define and store in your Orion Platform database.
The following procedure provides steps required to create a custom property using the Custom Property Editor. 1. Click Start > All Programs > SolarWinds Orion > Grouping and Access Control > Custom Property Editor . 2. Click Add Custom Property .
Importing Custom Property Data 1. Click Start > All Programs > SolarWinds Orion > Grouping and Access Control > Custom Property Editor . 2. Click Properties > Remove Custom Properties . 3. Check each property you want to remove. 4. If you are satisfied with your selections, click OK .
Note: Orion Network Performance Monitor users may also create filters for interface custom properties. 1. Click Start > All Programs > SolarWinds Orion > Grouping and Access Control > Custom Property Editor . 2. Click Properties > Edit Object Properties , where Object is Node or Volume , as appropriate.
Note: Orion Network Performance Monitor users may also remove filters for interface custom properties. 1. Click Start > All Programs > SolarWinds Orion > Grouping and Access Control > Custom Property Editor . 2. Click Properties > Edit Object Properties , where Object is Node or Volume , as appropriate.
Limit views based on the geographic location of devices SolarWinds UDT provides predefined account limitations that use built-in SolarWinds UDT property to limit user access. For greater flexibility, however, you can use the Account Limitation Builder to create your own account limitations based on predefined or custom properties.
Account Limitations Builder as directed in the following procedure. To create an account limitation: 1. Click Start > All Programs > SolarWinds Orion > Grouping and Access Control > Account Limitation Builder . 2. Click Start on the splash screen.
Page 318
Deleting an Account Limitation 2. Click Start on the splash screen. 3. Click the row of the limitation that you want to delete. Note: Use Shift+click to highlight multiple consecutive rows or Ctrl+Click to highlight multiple non-consecutive rows. 4. Click Edit > Delete Selected Limitations . Note: Although Orion deletes the selected limitations from the table, ensuring that they will no longer be available through the web Account Manager, if you delete a limitation using the Account Limitation Builder, all accounts that have been assigned...
SQL Server, you have the option of installing the SQL Server Management Studio. If you are the database administrator for the SQL Server hosting your Orion Platform database, SolarWinds generally recommends that you install this utility as it provides a number of features that are not currently available in the Orion Platform database Using SQL Server Management Studio Manager.
Database Manager. To add a SQL server to Database Manager: 1. Click Start > All Programs > SolarWinds Orion > Advanced Features > Database Manager. 2. You can select either Add server or Add default server .
Page 321
Object Explorer pane on the left. Note: Expand the Databases folder for any instance to confirm included databases. By default, the Orion Platform database is named SolarWinds . 4. Expand the Management folder, right-click the Maintenance Plans folder, and then click Maintenance Plan Wizard .
Page 322
Managing the SolarWinds UDT Database 15. On the Define Cleanup History Task view, check the types of historical data to delete, and then set the threshold age for historical data removal. 16. Click Next . 17. On the Database Back Up (Full) view, complete the following steps: a.
Database Maintenance Database Maintenance The primary tasks that are available for maintaining a SQL database are data summarization and database compaction. Data summarization occurs automatically as a part of the nightly maintenance program. You can also run database maintenance on demand from the Windows Start menu. Running Database Maintenance See: Running Database Maintenance...
Creating an Alert to Discover Network Device Failures You are the SolarWinds administrator for your company. Your job requires you to provide 24x7 support for any type of IT related issue. You must have notification of any issues when you are away from the office. Orion Advance Alerting can notify you of any failures when you are away from the office.
Page 325
To create and apply a custom location property: 1. Click Start > All Programs > SolarWinds Orion > Grouping and Access Control > Custom Property Editor . 2. Click Add Custom Property .
State custom property for the node triggering the alert. To create a new advanced alert: 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager . 2. Click Configure Alerts .
Common Orion Tasks 3. Check Alert me when a node goes down , and then click Edit . 4. Click the Trigger Actions tab, and then click Add New Action . Next : See this topic for instructions on adding a number of alert actions to a selected alert.
Page 328
Create a Local Alert Log The following procedure configures a local alert log on the computer hosting your SolarWinds NPM evaluation. 1. Open an alert you want to enable on your network for editing. Note: For more information about opening an alert for editing, see "...
Page 329
Common Orion Tasks 5. Browse to an appropriate folder, and then type ExampleAlertLog as the alert log file name. 6. Click Save . 7. In the Message text box, type Node ${NodeName} in ${State} network is currently down. 8. Click OK . Send a Syslog Message The following procedure configures an additional action that sends a Syslog message to a designated server when this alert triggers.
Page 330
4. Type 127.0.0.1 as the Hostname or IP Address of the Syslog Server , and then type Node ${NodeName} in ${State} network is currently down in the Syslog Message field. Note: The ${ variable } syntax is required for SolarWinds NPM variables. 5. Click OK . Send an SNMP Trap...
You do not have to actually experience a device failure to confirm that your alerts are working. SolarWinds NPM provides a Test Alerts function that allows you to ensure that you have configured your alerts properly, as shown in the following procedure.
Page 332
Creating an Alert Using a Custom Property Configuring Alert Actions Testing a Configured Alert 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Advanced Alert Manager . 2. Click Configure Alerts . 3. Check the alert you want to test, and then click Test .
SolarWinds > Syslog and SNMP Traps > Trap Viewer . Scheduling and Emailing Business Hours Reports You are the SolarWinds administrator for your company and you have just been assigned the task of sending daily reports to your Executive team in regards to peak response times to devices on your network.
The following procedure creates a monthly report of network node availability and response time during peak business hours, defined as between 7:00 AM and 7:00 1. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Report Writer.
4. Click the name of the report you want to schedule for email. 5. Copy the URL of the report you want to schedule for email. 6. Click Start > All Programs > SolarWinds > Alerting, Reporting, and Mapping > Orion Report Scheduler.
Each region is responsible for their area and they have no need to see what other regions are doing. You now have the task of creating customized views for each region that only reflect the resources they are responsible for monitoring. Orion UDT allows users to create specialized geographical views for each region.
The following procedure creates a custom group of monitored objects in a defined geographic location. 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Log in to the web console as an administrator. 3. Click Settings in the top right corner of the web console.
Page 338
Creating a Custom View 1. Click Start > All Programs > SolarWinds > Orion Web Console . 2. Log in to the web console as an administrator. 3. Click Settings in the top right corner of the web console. 4. Click Add New View in the Views grouping of the Orion Website Administration page.
Page 339
Common Orion Tasks 12. If you want to rearrange the order in which resources appear in your view, select resources, and then use the arrow keys to rearrange them. 13. If you have finished configuring your view, click Preview . Note: A preview of your custom web console displays in a new window.
System requirements for an Additional Polling Engine are the same as system requirements for a primary UDT polling engine. Notes: UDT is not able to add nodes to an Additional Polling Engine if DNS cannot resolve the name of the server hosting the Additional Polling Engine.
Note: After completing the following procedure, SolarWinds UDT polling engines emulate the same behavior as SolarWinds NPM additional polling engines. They monitor only those ports on nodes associated with the SolarWinds UDT additional polling engine. To install an Orion Additional Polling Engine: 1.
Page 342
Server database and Authentication information, and then click Next . 13. Configure the database by selecting Use an existing database , and then selecting the name of the SQL Server database for the SolarWinds UDT server. Then click Next .
Additional Polling Engine. In general, the steps to configure an Additional Polling Engine are the same as those required to configure a primary SolarWinds UDT polling engine, with the following additional considerations: If you are using custom properties to monitor your network, you must copy related schema (*.schema ) and configuration (*.config and *.cfg ) files from...
" ". Note: During configuration, the Additional Polling Engine will shutdown temporarily with the result that, if you are actively polling, you may lose some data. SolarWinds recommends configuring polling engines during off-peak hours. Changing Polling Engine Node Assignments...
Ensure you schedule an appropriate maintenance window in which to install the additional Web Console. To install the additional Web Console: 1. Log on to your current SolarWinds UDT additional Web Console server with a Windows administrator account. 2. Run the SolarWinds UDT installer. The installer automatically detects the SolarWinds NPM Additional Web Console if present.
Copying the Default Reports Additional Web Console installations do not include the default UDT reports. To ensure your default UDT reports are available on your Additional Web Console install, copy the Reports folder to your Additional Web Console server. This folder is...
Troubleshooting The following topics address some issues that users of UDT have encountered and resolved. Checking Device Compatibility Scanning a Device Analyzing Test Results Node Discovery Completely Fails Node Discovery Fails for Some Devices UDT Missing User Data UDT Polling Spikes CPU on Target Device(s)
UDT requests for specific OIDs (Type and Status) and how long it takes (Duration). This way you can easily identify if the device is currently not supported by UDT or it timeouts on some requests.
Node Discovery Completely Fails Below is a very brief description of some of the objects UDT query to get the data. To Cisco get more details and understand what the individual values mean use the SNMP Object Navigator Discovery and Layer 2 Job Statistics These two jobs query similar OIDs.
Solution These are the paths to resolving this issue: UDT Discovery always runs on main poller even if the nodes are affiliated with additional poller. Make sure the machine where main poller is installed has access to the selected device (try ping etc.), Make sure the SNMP requests/responses are not blocked by a firewall.
UDT Polling Spikes CPU on Target Device(s) UDT is set up to retrieve user data from domain controllers but no user data is displayed in the UDT web console. Solution To verify that assigned credentials have sufficient privileges, attempt to re-add the domain controller into UDT.
Troubleshooting Wrong Hostname Reported for Endpoint Issue The data returned for an endpoint has an incorrect hostname. Solution Keep in mind that the Endpoint Details view displays both current and historical data. Use nslookup to verify the hostname associated with the IP address. Connect the relevant network device and verify in the ARP table that the IP address is associated with the correct MAC address.
Connect to the relevant network device to which you think the endpoint is actually connected; check the value for the endpoint in the MAC address table. Connect to the relevant network device to which UDT says the endpoint is connected; check the MAC address routing table.
(Settings > UDT Settings > Advanced Settings) In UDT.BusinessLayer log verify the job's results are processed successfully Use nslookup from the UDT server to get DNS information on the device. No Layer 3 Data for a Device Issue A device is added to UDT but doesn't display data (Layer3).
No User Data Retrieved Via WMI (Windows Server 2003) Issue If you are running UDT on Windows Server 2003, and setup WMI retrieval of user data from a Active Directory domain controller outside of the local UDT server's domain, and using an account with limited permissions, UDT is able to connect to the remote AD controller but does not retrieve user data.
Troubleshooting Adding a Deleted Port Back into UDT Issue You deleted a device port from UDT but now need to monitor it again. Solution Re-run UDT Port Discovery. To add a UDT port: 1. Open the Orion Web Console. 2. Click Settings > UDT Settings > User Device Tracker Discovery .
SolarWinds Network Performance Monitor Service using the available shutdown tool that you can locate as follows: Click Start > All Programs > SolarWinds Orion > Advanced Features > Orion Service Manager . For a complete refresh of the system, reboot the computer.
Note: Before you run the Configuration Wizard, you should close all open applications and stop the SolarWinds Network Performance Monitor Service in the Windows Services Control Panel. It will be restarted by the Wizard at the end of its process.
Slow Performance on Windows Server 2008 Redefining Windows System Temporary Directories Following established Windows standards, the Orion installer may use Windows User and System TEMP and TMP variable directories as temporary scratch spaces for file expansion and execution. If you do not have the required scratch space available in the default User or System TEMP and TMP directories, use the following procedure to redefine your default locations.
Page 360
Troubleshooting 1. Click Start > All Programs > Accessories . 2. Right-click Command Prompt , and then click Run as administrator . 3. If you are prompted by User Account Control, click Continue to open the elevated command prompt. Note: In some cases, having User Account Control (UAC) enabled on Windows Server 2008 and Windows Vista (evaluation-only) can lead to installation errors.
Regular Expression Pattern Matching When editing comparison criteria, the following regular expressions can be used for pattern matching. Examples are provided at the end of this section. Characters Character Description Example Any character All characters except the listed special except characters match a single instance of a matches a [,\,^,$,.,|,?,*,+,(,),...
Page 362
Regular Expression Pattern Matching Starts a character class. A character class matches a single character out of all of the possibilities offered [ (opening by the character class. Inside a character class, square different rules apply. The rules in this section are bracket) only valid inside character classes.
Anchors [\d\s] Shorthand character classes matching digits 0-9, matches a word characters (letters and digits) and whitespace character \d, \w and \s respectively. Can be used inside and outside that is a character classes digit or whitespace Anchors Anchors Description Example matches a in...
Regular Expression Pattern Matching Matches at the end of the string to which the regular expression pattern is applied. Matches a position rather than matches f a character. Never matches before line breaks, except for the very last line break if the string ends with a line break. abc\ndef Matches at the end of the string to which the regular matches f...
Page 365
Quantifiers Repeats the previous item once or more. As many items matches as possible will be matched before trying permutations "def" #NAME? with fewer matches of the preceding item, up to the point "ghi" in where the preceding item is matched only once. abc "def"...
Regular Expression Pattern Matching Description Example Character Matches any single character except line . matches x or most any . (dot) break characters \r and \n. other character Word Boundaries Word Description Example Boundary Matches at the position between a word character (anything matched by \w) and a non-word character (anything matched by [^\w] or \W) as well as at the start and/or end of the string matches...
Regular Expression Pattern Matching Examples Regular Expression Pattern Matching Examples The following examples illustrate uses of regular expression pattern matching. snmp-server community public Finds any line that includes the text snmp-server community public . There can be text before and/or after the string on the same line. service tcp-keepalives-in.*\n(.*\n)*.*service tcp-keepalives-out Finds the first line service tcp-keepalives-in and then looks for service tcp- keepalives-out on any line after that.
Need help?
Do you have a question about the UDT and is the answer not in the manual?
Questions and answers