Guys/Gals,
Wondering how you all have your UDT implementation configured. We are sitting at around a 50k port count using 10 hour intervals across 3 polling engines but still having problems. I'm interested in seeing how other environments are configured where UDT is actually working.
Thanks
Perhaps I am missing something obvious which is a distinct possibility. So can someone direct me on how to find switchport interfaces and their configured, associated VLAN (id or name) using SolarWinds?
The ideal output would look something like the following but more is always better.
Hostname Interface Name VLAN ID VLAN Name
switchname1 GigabitEthernet1/0/49 101 vlanname101
I have NPM, NCM, UDT (where I would expect to find it), and IPAM modules installed.
Versions are: Orion Core 2012.2.1, IPAM 3.1.1, NCM 7.1.1, NPM 10.4.1, NTA 3.10.0, UDT 2.5.1
UDT - Is there a way to search by VLAN?
Here is a SQL Query I found on Thwack posted by sean.martinez (thanks Sean if you happen to read this!) that works but is not something I can share with the team when they need to locate VLANs on a switchport.
"SELECT IPAddress, HostName, MACAddress, ConnectedTo, PortNumber, PortName, VLAN, NodeStatus, NodeID, PortID, ConnectionType, FirstSeen, ConnectionTypeName FROM UDT_AllEndPoints"
NCM - A report called Cisco VLANs is worthless.
We run MST (Multiple Spanning Tree) so all VLANs show up on each switch even when they have no interfaces assigned to a specific VLAN. Also, the report includes VLANid 1002, 1003, 1004, and 1005 which means the report isn't very polished.
IPAM - Ehh, only if I manually entered all of the VLAN ID stuff would it help.
Any help is appreciated!
Thanks,
Clint
“ “ ~~Marcel Marceau.
Hi ... Can anybody help please?? I use Universal Device Tracker, which I have to say is a fantastic tool when users don't move, but once they relocate, the UDT isn't detecting them in their new location, therefore doesn't report accurately. Unfortunately, the size of our environment, we cannot tab every PC that moves and only realise this issue, when they have a problem and we can't trace them through UDT! Maybe there is something I haven't configured properly?? Any advice is appreciated,
TIA
Trish
At the bottom of every Orion screen there's a reminder of the version of each product and it also lists other products such as the core platform, DPA, QOE, etc It's also shown in Settings, but I can't find anywhere that tells me the point version.
I'm on the verge of installing the SolarWinds Orion Platform 2015.1.3 QOE Hotfix 1 which says it requires
- This hotfix requires SolarWinds Orion Core 2015.1.3.
- This hotfix requires SolarWinds Orion QOE v2.0.593
and goes on to say that v2.0.600 will be installed
The Core version is easy to find and it reports as 2015.1.3, but my QOE version only lists v2.0 without a trailing point number
How can I inspect the version so that I can be sure that I'm compliant with the requirements of this HF?
Hello there,
I currently use UDT 3.2.3 and I have a issue with it
I add some nodes manually, and next when I managed ports of my cisco switches with it, I get the ip address but I'm not able to get the hostname no matter what I do.
I try to restart services, server, delete the node, adding it again, poll it several times, no way it doesn't work
Thanks
Valentin
2I have just installed UDT and can only see some IP Addresses and hostnames. I can only see the IP addresses and hostnames on one vlan. What do I need to do to get the IP addresses and hostnames to show up for devices on all the different vlans? I am running UDT 2.0.0. Yes I know that version is old, but our maintenance expired.
We have a bunch of switches added in NPM and whomever added them previously did not scan for UDT ports when adding the nodes. Now, I'd like to have those switches scanning with UDT ports and I can't seem to find a way to additionally add that on the existing node. The only way I've seemed to find was to delete the node, re-add it, and then click "scan for UDT" while finalizing the addition of the node. Is this this only way, or am I simply missing something?
Hello SolarWinds community,
Is there a way to tell what is connected to a switch using UDT? I remember there used to be port history, but I am not sure what changed because this information is no longer available. Is this a default setting for UDT? To identify and catalogue what is connected to a port on a switch? If so, what settings can I check to enable this feature again?
Will Layer 3 polling support for Cisco ASA firewall be included in the next release? My network is HEAVILY firewalled and the lack of ASA L3 support is making UDT half as usefull as it should be.
I can't seem to find reference to this in my searches so I apologize if it has been covered.
One of the features I love about UDT is the ability to report on interfaces on a switch that are inactive and how long they have been inactive for. We have a lot of "fully patched" edge switches in our environment so determining which ones are inactive used to be time consuming.
As the number of switches we monitor is quite large (>3000) I use the "daysunused" field and then filter on a specific node ID or other to narrow the results to the number of switches that I want to report on. Unfortunately, I can only generate the report in Win32 on our main server (not available in web reporting) and need to built custom reports any time our field techs are looking for this data.
Ideally I would have a contextual resource when any technician opened a switch detail view in NPM that would show these results. Even the ability to click on a link to generate a contextual report. Maybe I can use my existing report with a contextual variable that is based on the node that is being viewed? I'm not sure if that is possible.
Does anybody know how to do this or is this a new feature request.
Thanks for your help!
Dan
Hi,
We are running UDT as evaluation now along with licensed NPM.
We have need to perform SQL query to UDT tables database which could find nearest switch where user device is connected currently.
Any advice what tables to use for query?
Actualizo información al respecto.
Actualmete tengo NPM instalado....
Al principio al visualizar especificamente un nodo... dejo de mostrar Graficos respecto a su uso de interfaz.
Revisando un poco más a detalle se observa el inicio y stop de los servicios siguientes:
Solar Winds Job Engine v2
Solar Winds NCM TFTP Server
Solar Winds NetPerfMo
Solar Winds NCM TFTP Server (Se creía que este servicio comprometia los antes mencionados).
Sin embargo en la pantalla principal se mostraba el siguiente mensaje:
Buscando un poco más a detalle se observa la siguiente imagen: (Sumarizando los minutos y segundos) se cré q podria ser el motivo por el cual la información no esta graficando.
Por favor, consejos!
Saludos.
Ok, so I'm just starting to get into the UDT module, and finding it to be not as useful as we'd hoped, but maybe quite a bit of that is not knowing how it works. Some things do puzzle me though, one being the "Ad-hoc reporting" page, it doesn't seem to work the way I would think it should.
If I go into the page initially, at the top of the screen it says "No search value specified, displaying all records for fields: IP Address, Hostname, MAC Address". I'm not totally clear what this means. If I go up to the search box and put in an IP, it does change to "Results containing matches for 10.17.4.6 within the following fields: IP Address, Hostname, MAC Address", which makes more sense to me. I guess what doesn't make sense about the first one is it kinda sounds like its just displaying those 3 items, but it does those 3 plus "Connected To", "Port Number", "VLAN", "Last Seen", "First Seen". I'm thinking it would make more sense if it just said "No search value specified - displaying all records". And maybe near the search box, put something there that says "Searchable fields are IP Address, Hostname and MAC Address".
I'm thinking it also looks as-if you can modify the searchable field. Not sure, it just seems a bit confusing...
Now, onto the big one. Mine's been collecting data from all our DC's and quite a few switches/ports for a few days now, but this "Ad-hoc" reporting page always has just one page of stuff. At the bottom it says "Page 1 of 1" and "Displaying results 1-50 of 13". There are 50 items on this page, not 13. I cannot use the page navigation arrows to go to other pages, but if I "Export as file", I get 1478 records. I expect to see the same thing whether I'm viewing it live on the web, or exporting it to a file. On the initial page of 50 items, none of them have the "IP Address" filled in yet, they're all blank. But, if I click on the column header ("IP Address") to sort by it once or twice, I get the first 16 having IP addresses before it starts going into one's that don't have IP addresses. Now, since the original 50 that showed on my screen didn't have IP addresses associated, that tells me that there is more data being hidden away here right now.
To see if its a browser issue, I just opened it with a different browser. I was using Chrome and I loaded it up with IE, getting the exact same thing... There is a very good possibility I haven't used IE on this site since before we installed the module too...
I've tried changing the filters up top, from "Direct Connections" to some of the other choices and same thing with the other fields. I would think with "Historical Results" I would get a ton of data, but still the same results...
Any ideas?
I have a working UDT alert that e-mails me when a new MAC Address appears on the network
I have the alert set to e-mail when triggered.
The following is my e-mail response
Subject: User Device Tracker alert when new MAC address is added.
Message:
MAC Address: ${MACAddress}
Switch Name: ${NodeName}
Alert Name: ${AlertName}
I would like to include the interface name that the MAC is discovered e.g. Interface: Datacenter_Switch_1 Unit: 1 Slot: 0 Port: 3 Gigabit
Can anyone assist me with the SQL variable for this?
Also I do not get any results for ${NodeName}
the following are my results
User Device Tracker alert when new MAC address is added.
MAC Address: 88:9F:FA:63:AF:56
Switch Name:
Alert Name: Alert me when a new MAC address appears on network
Hello,
Is there any way to import device data form text file like csv into White List of UDT ?
It is inconvenient to regist data via web consolt by manually.
If I have data file, I want to import it into White List.
Could you tell me the way if you know ?
Thanks,
-KH
Hi All,
Just wondering if anyone has figured out how to manually push ip address to mac mapping information to UDT. We are using PaloAlto firewalls which don't expose this info via a MIB but they do have a REST API that i can get the mac to ip mapping from just need to find a way to push this data in to the UDT database on a regular basis.
Any help much appreciated.
JonnyG
I modified the default UDT Connected MAC and IP Addresses report to only pull ports that have more than one MAC address connected.
SELECT Nodes.Caption, UDT_ConnectedMACsAndIPs.PortNumber AS PortNumber, UDT_ConnectedMACsAndIPs.PortName AS PortName, UDT_ConnectedMACsAndIPs.ConnectedMACs AS ConnectedMACs, UDT_ConnectedMACsAndIPs.ConnectedIPs AS ConnectedIPs, UDT_ConnectedMACsAndIPs.PortID AS PortID FROM UDT_ConnectedMACsAndIPs INNER JOIN Nodes ON (UDT_ConnectedMACsAndIPs.NodeID = Nodes.NodeID) WHERE ConnectedMACs > 1
I would like to limit these results to non-infrastructure ports, i.e. user access ports that have no business hosting multiple MAC addresses. I'm curious if anyone with more intimate knowledge of UDT's database might know of a property that I could use to limit the search.
I've considered a limit by interface description, but that would require us to trust descriptions and keep them accurate. I'm willing to do that, but I was trying to come up with a way that was a little more concrete, as we've had issues with folks who "forget" to update descriptions in the past.
I thought that if I could somehow identify a CDP relationship within UDT, I could have the report ignore any ports that have a CDP neighbor. This would require us to police CDP on user ports, but that is good practice regardless and should be implemented.
We eventually plan to move to VoIP, which will introduce new complications with the report. We'll likely just limit it to more than two MACs and call it good. I don't believe they will ever be Cisco IP phones, so the CDP possibility there doesn't worry me. Any IP phones on the network would probably use LLDP.
Thoughts?
You can find the installation packages in your customer portal. This service release delivers:
Hi,
Just installed newest version of User Device Tracker. Have all Cisco Switches. All switches and ports are monitored as well as most of my endpoint devices. On my Cisco Wireless LAN Controller I can see all APs, their IP Addresses as well as the switch and switch port they are connected to. However on my end devices (PCs, Printers, etc) I can not see any info on what current switch and switch port the device is connected to. Should I be able to see that?
I've poked around in the database and can find basic data about switches and ports. Can also find IP and Mac addresses of all my end devices. Just can't seem to find a way to join the two. Anyone have a custom query that will show a switch, all its ports, and the endpoint mac address or Ip currently attached to the port? Thanks.
Charlie
We are looking for SNMP MIB walk from Juniper, HP, 3COM, Dell, Huawei & Allied Telesys switches. We are seeking for users who would be willing to perform SNMP MIB walks against these vendor devices on their network.
You could use the following procedures to gain walks from your devices
1. Use thisSNMPWALK tool, created by SolarWinds.
2. Or use NET-SNMP instead of the tool provided above you can download and install NET-SNMP fromhttp://net-snmp.sourceforge.net/
• Win32 binaries are available here:http://sourceforge.net/projects/net-snmp/files/net-snmp%20binaries/5.5-binaries/net-snmp-5.5.0-1.x86.exe/download
• Run this command from “installation directory/bin/”: snmpwalk -v 2c -c public -O netU 127.0.0.1 1 > output.txt
(change the IP address and community string accordingly, and don’t forget there is 1 after IP address. It means it will scan whole SNMP tree)
Both methods will generate a single file per server containing a complete MIB walk of the device. We recommend naming this file the make and model of the device that was scanned. For example "Huawei S5700.txt".
Once done, please email it to me atcliton.godinho@solarwinds.com
We look forward for your walks and in turn better support these vendor devices.