I want to pull out NTP association status to see if any NTP configuration failed due to wrong server IP or missed out firewall rules. How can I bulk execute this command and obtain output in a single page to scan through?
Does Orion NCM SDK support remote execution of commands?
Hi,
What has happened to the RTCD setup in NCM v7? It seems like a lot has changed and none of the changes have been documented or reflected in the administrator guide.
Use of the rtnforwarder.exe for Syslogs seems to have been made redundant, and the Configure Real-Time detection page in the NCM web console doesn't provide any details as to what or where the trigger rules have to be setup, to look for specific message patters? Do I mix and match prerequisites and setup in NCM from the old v6 and v7? If so, which parts of the guides do I have to follow?
Regards,
Deltona
Hi,
Has anyone had any luck in getting NCM to backup the system context of multi-context ASA? The admin and firewall contexts can be referenced by IP and hence backed up, but the system context not so.
Thanks in advance.
Regards,
Rob
So I'm using the built-in template (although I have tried the template assistant and got the same results) to backup Netscalers running 9.3 code. NCM is able to connect and download the config. However upon further investigation it seems we aren't getting the entire config.
When running the template assistant everything appears fine and the preview comes up and it is clear I don't have the entire config. When looking at the viewer somewhere about halfway throught I see in green Command Complete Cmd:Download
Is there a limit to the size of the configs that can be captured or any other reason my configs are being truncated?
I'm trying to set up RTCD for HP Procurve routers and switches, and then alert on them as well. Is there a step by step for this? I can't seem to get the syslog triggers to ever work right and I'm starting to wonder if I'm just not configuring them correctly or something.
So I'm wanting to compare a large chunk of config with a policy in Policy Manager (to a bunch of devices within NCM) which is roughly 30 lines long - the section for console access; line con/vty/tty on Cisco devices. This is of course possible by making ~30 rules, one for each line, but I'm pretty sure it would be easier if there's just a way to indicate to Policy Manager that a new line is there, since these same 30 lines will be identical within all of our Cisco devices. I'm aware that there's other Solarwinds software that can compare standard config files, but for something as simple as this I don't think I'll need to go to such lengths.
I tried it initially with a RegEx search rule, and \n to indicate a new line...but that didn't seem to work. In other words, I replaced:
line con 0
login
with
line con 0\n login
Anyways, that's essentially what I want to do...I'm sure this has got to be possible, that I'm just missing something really simple. We've been using Solarwinds at our office for years and I'm just now starting to use it myself, so I'm not exactly formally trained 
I want to wrtie and execute a script using NCM to clear counters on Cisco devices.
The command is easy enough - "Clear counters"
However IOS asks for confirmation - see below.
There are no IOS command switches to get around the confirmation.
Any ideas?
c617rt0#clear counters gigabitEthernet 0/0
Clear "show interface" counters on this interface [confirm]
c617rt0#
All
We've run into a odd situation involving running vs startup config comparisons for Cisco firewalls. When we do a config comparison we see that on some lines the entry for the startup config shows up two lines down. by the I mean that in the running config the entry might show up on line 40 but in the startup config it shows up on line 42. I can't see any particular pattern to this but in every firewall config comparison we are getting any where fro 10 to 15 entries like this and these show up in the "Overall Running vs. Startup Config Conflicts" chart for NCM. We do not see the same issue with Cisco Routers or Switches. These are all newer Cisco firewalls not the old PIX firewalls. The configs are actually correct just showing as different. Unless we can fix this we're going to have to stop monitoring firewall configs. From my perspective this is not a comparison criteria issue since that is really just a method to ignore lines. Any one have any ideas?
Hello All,
We have a Cisco environment that has a default ACL on almost every port. I need to change the default ACL but at the same time make sure i do not apply it to ports that have another ACL or none at all.
I was thinking somewhere along these lines for logic, but I'm not sure of the syntax.
For every interface that has "IP access-group X in"
enter "IP access-group Y in"
I have a single node that is incorrectly listed as 'Down' in NCM. I am able to ping it from within the NCM Win32 console, I can query it via SNMP, and can even log into it via NCM. However, the node status shows up as 'Down' and I can't figure out how to get it to update. Orion NPM shows the node as 'Up'.
What metrics does NCM use to determine a down node?
Hello,
I am fairly new to the NCM Policy reporter and was hoping that there may be some information out there on creating a policy that queries interfaces for predefined configuration - e.g.
interface.*\n (hoping to catch all interfaces without specifying FastEthernet*/* or GigabitEthernet*/* or any other derivatives)
shutdown (or)
switchport mode access (or)
switchport mode trunk
any help would be appreciated and thanks in advance.
Ross
Greetings earthlings
My master has compelled me to create a slew of new policies for NCM compliance reports, but I am unable to create a new grouping for these. there is an attached screenshot depicting my aspirations; you will forgive my inability to draw a clean circle, if i was to cut off all of your limbs then you'd understand my plight.
These groupings are vital to my master's reporting abilities, any one wise enough to reply with a missing tutorial on creating or editing these groupings will be in high standings with the Empire.
Do not let me down,
D.V.
p.s. - NCM version 7.1.1
I'm configuring NCM's Global Device Defaults and came across with the possibility of choosing 3 different protocols for the following actions.
Can someone tell me what does Config Request really mean?
Since it is the only action that supports SNMP, I'm guessing that by seting a RO community it gets the configuration from the device, and leaves it ready to transfer using FTP or other.
Is that correct?
I'm new to the forum, and it would be really helpful if someone could tell me where can I find some documentation about NCM, like an advanced user guide or official SolarWinds documentation.
Thanks in advanced
Im backing up ten of these daily on my works network, however I want to test one as I raised a solarwinds support ticket and got advised it only backs up 90%....versions we are running are 10. 2.1 (I think, need to check) ......I need to find out the "10% " it doesn't backup
so I'm going to install F5 trial version on a VM and see what it backs up
anyone know how to do this from command line?also it's not a ucs file it backs up (u can only do that in version 11)...
any help here would be great as I'm doing next week and will post my results on this thread 
Hi,
Has anyone had any luck in getting NCM to backup the system context of multi-context ASA? The admin and firewall contexts can be referenced by IP and hence backed up, but the system context not so.
Thanks in advance.
Regards,
Rob
So I'm wanting to compare a large chunk of config with a policy in Policy Manager (to a bunch of devices within NCM) which is roughly 30 lines long - the section for console access; line con/vty/tty on Cisco devices. This is of course possible by making ~30 rules, one for each line, but I'm pretty sure it would be easier if there's just a way to indicate to Policy Manager that a new line is there, since these same 30 lines will be identical within all of our Cisco devices. I'm aware that there's other Solarwinds software that can compare standard config files, but for something as simple as this I don't think I'll need to go to such lengths.
I tried it initially with a RegEx search rule, and \n to indicate a new line...but that didn't seem to work. In other words, I replaced:
line con 0
login
with
line con 0\n login
Anyways, that's essentially what I want to do...I'm sure this has got to be possible, that I'm just missing something really simple. We've been using Solarwinds at our office for years and I'm just now starting to use it myself, so I'm not exactly formally trained
Hi All,
I have a Customer who wants to import Nodes not by Discovery but from another Asset Management System
They are providing a EXCEL or TXT File with the Information we need ( DNS Name / SNMP Community String etc.) We are free to specify that.
I was trying to accomplish that by using SSIS Packages but unfortunately this is a bit more complicated Than I expected.
Has anyone done this before and can point me into the right direction.
ORION and NCM are latest versions. I think this is also something I need to take into account because Replication between the ORION and the NCM Database has to be done as well.
Thanks for your Input
NCM 7.x has several node management improvements (common with Orion Core/NPM, new Discovery Sonar…).
Due to these changes, NCM 7.x has stricter rules related to node uniqueness and duplicate nodes are not allowed anymore in NCM 7.0 (because NCM nodes are being handled by Orion Core, which does not support duplicate nodes).
This NCM 6.x capability was sometimes used to deal with devices such as the Cisco ASA, which require management of multiple contexts.
The solution in NCM 7.x (can work in NCM 6.1 as well) uses multiple Config Types:
Solution:
1. In Win32 NCM application, add a new Config Type for each context (for example Context1, Context2).
2. Specify in your device template, how to switch to each context (see example below).
3. Include the${ConfigType} macro in the Reset Command.
4. Make sure to specify the RegEx value in the Reset command. Depending on your prompt settings, the value should be '#', '>', ']', etc.
5. Avoid using ${ConfigType} macro in the DownloadConfig command. Make sure the command is the right one, e.g. "show running-config".
Device Template Example:
<Command Name="RESET" Value="${ConfigType}" RegEx="#" />
<Command Name="Context1" Value="command to switch to Context1" />
<Command Name="Context2" Value="command to switch to Context2 "/>
<Command Name="DownloadConfig" Value="show running-config"/>
Explanation:
When NCM downloads a configuration, the first command issued is the ‘Reset’ command defined in the device template.
The ${ConfigType} macros will be replaced by the appropriate switch context command, based on the config type selected for the dowload.
The context will be dynamically switched before the download command is executed.
When the context is changed, so is the prompt. In order to recognize the prompt, a regular expression (RegEx) must be used to ignore the variable part of the prompt.
Example:
Let’s assume the command mode prompt after login is : Tex-3750#
- After switching to Context1, the command mode prompt becomes Tex-3750-Context1#.
- After switching to Context2,the command mode prompt becomes Tex-3750-Context2#.
The RegEx to use in the reset command should match the common portion of the prompt in both contexts. In this example this could be RegEx="#".
An NCM user shared the result of his work (FWSM on NCM 6.1):
Should work the same in NCM 7.0. Thanks csowerby
Cisco FWSM Virtual Context Template
Message was edited by: Jiri Cvachovec
I've captured the configs on about 500 routers, but on about 10 of them, I get the following error in config download every time:
Connectivity issues, discarding configuration (or configuration is too short)
How do I troubleshoot this? I can login manually, and do a show configuration without a problem.
All routers should have identical configuration and IOS version.
Hello all,
I am new to NCM, and I have one question for which I can't seem to find answer in documentation. Can anyone explain me configuration retrieval process when SNMP/TFTP is used. I was under impression it is possible to retrieve (download) Cisco switch configuration by reading it using SNMP RO string and transfering it using TFTP to TFTP server that is up and running on SolarWinds NCM server. Now that I've written it like this, I am not really sure it is possible. What is the correct procedure and is there a way to keep network environment more secure by not enabling RW access from SolarWinds NCP server (and still being able to get config)?
Thanks, MSM