Search 97,742 posts and 786 resources contributed by 57,092 members or post a topic.

Already Joined? Sign in
Need accurate reporting of availability.

Page 2 of 2 (26 items) < Previous 1 2 | RSS

rated by 0 users
Answered (Verified) This post has 1 verified answer | 25 Replies | 6 Followers | 2,217 Views


80 Posts
Points 239
Geoo replied on Mon, Jun 8 2009 9:35 AM
rated by 0 users

Management is looking for an availability report that does not include the time that the node was one a dial backup link.  Orion is currently setup so that the nodes are watch for when they look for a new route to a specific device, and when this occurs it writes to the log and sends out an email. 

Is there currently a report, or one that can be created with SQL, that would give me the availability of each node without it being on dial backup?  Can someone point me in a direction to explore?

Thanks

 

Answered (Verified) Verified Answer


7 Posts
Points 43
Answered (Verified) Lnavin replied on Mon, Jun 8 2009 3:08 PM
rated by 0 users
Verified by Geoo

The query below calculates downtime in minutes based on the Event table.  You can update the where statements to look at the particular events that you need.  This will give you results in minutes.  You can calculate this into a percentage once you have the data.  I did percentages first but was then asked for actual minutes of downtime.

Once you start getting data, you can message it to get what you need. Remeber that this reports uptime of a node so you are going to have to change the event type to the UnDP in the fields.

SELECT      
StartTime.EventTime,      
Nodes.Caption,      
StartTime.Message,      
DATEDIFF(Mi, StartTime.EventTime,       (SELECT TOP 1           EventTime           FROM Events AS Endtime           WHERE EndTime.EventTime > StartTime.EventTime AND EndTime.EventType = 5               AND EndTime.NetObjectType = 'N'               AND EndTime.NetworkNode = StartTime.NetworkNode           ORDER BY EndTime.EventTime))     
FROM Events StartTime INNER JOIN Nodes ON StartTime.NetworkNode = Nodes.NodeID   WHERE (StartTime.EventType = 1) AND (StartTime.NetObjectType = 'N')   ORDER BY Nodes.Caption 

  • | Post Points: 31

All Replies


337 Posts
Points 3,942
Thwack MVP
r0berth1 replied on Thu, Jul 2 2009 2:38 PM
rated by 0 users

I also have one broken down by location for last month between the hours of 7 A.M. and 7 P.M. on the weekdays, and another broken down by location for last moth between the hours of 7 A.M. until 2 P.M. or Sat. they both require some custom fields and disply the % uptime instead of min, but they work great.

Hancock Bank

Network Engineer

  • | Post Points: 1

80 Posts
Points 239
Geoo replied on Thu, Jul 2 2009 3:37 PM
rated by 0 users

If I could bother the community just a little futher.  :)

I almost have something that will work as well.  First I used custom properties to identify which interfaces are primary and which are backups.  Then I created a report to show how much traffic passed a through each interface.  The total of those two should be the total usage for the entire month. 

How can I modify it so that my report shows the total, the broken down usage, and the percentage of the total for both?

Jim

  • | Post Points: 3

337 Posts
Points 3,942
Thwack MVP
r0berth1 replied on Thu, Jul 2 2009 3:48 PM
rated by 0 users

you can set the filter group to any instead of all, and use:

name of custom property = Primary

name of custom property = Secondary

then you can group the report by node name which will show both interfaces under that node. But i am not sure how you would get the total.

 

Hancock Bank

Network Engineer

  • | Post Points: 3

80 Posts
Points 239
Geoo replied on Thu, Jul 2 2009 4:10 PM
rated by 0 users

Yep, and I am at that point.  Just not sure how to get the calculations i need.  I know how to calculate it, but i dont know how to format my SQL statements to calculate it OR if there is already something built in that will get those numbers for me.

  • | Post Points: 3

1,544 Posts
Points 4,391
Thwack MVP
Network_Guru replied on Fri, Jul 3 2009 1:15 PM
rated by 0 users

I had a look at some reports and recalled the issues I ran into trying to use the RAS router syslogs for this.
What I finally ended up doing was creating an alert for all remote routers based on the transmit utilization of the async interface.
When the interface utilization exceeds 100bps, an alert is set (and logged in the Orion Event log). When the transmit falls below 10bps, a reset event is logged.

Since I'm only polling the interface every 5 minutes, it may not pickup a very brief dial-up, and times have a delayed offset of about 5 minutes. The report I created counts the number of dial-ups per site in a 7 day period, to highlight sites with chronic WAN issues.

I was able to use the pre-canned "events" report to create this report.

Another way to do this is based on syslogs from the remote routers.
I created a filter looking for Async up and Async down to calculate the number of dialups per site. A potential problem with this is the syslog may not make it to the Orion server if the router is off-line and in the process of dialing home.

I spent a lot of time trying to use the RAS logs, but was unable to find a way to correlate the site dialing in with the site in Orion.
Now that we have dual routers at each site, the need for dial-backup is no longer required. Instead we use the dial-up line for accessing the site if both routers/links are off-line.

-=Cheers=-
NG

(1) Orion v8.1 SLX polling engine & web site
(1) Orion v8.1 SLX polling engine
(1) Orion v9.1 SP4 SL2000
(1) Orion v9.5 SP5 SL2000 :-(
(1) APM AL500 RC 2.5, (1) VoIP monitor V2.0, (1) NCM V8.3, (1) EOC
(1) MS SQL2005 SE - 14GB Ram, 3 disk Raid 0
(2) MS SQLExpress2005 c/w 3 & 4 SCSI disk Raid 0

  • | Post Points: 1

80 Posts
Points 239
Geoo replied on Thu, Jul 9 2009 10:29 AM
rated by 0 users

Lnavin:

The query below calculates downtime in minutes based on the Event table.  You can update the where statements to look at the particular events that you need.  This will give you results in minutes.  You can calculate this into a percentage once you have the data.  I did percentages first but was then asked for actual minutes of downtime.

Once you start getting data, you can message it to get what you need. Remeber that this reports uptime of a node so you are going to have to change the event type to the UnDP in the fields.

SELECT      
StartTime.EventTime,      
Nodes.Caption,      
StartTime.Message,      
DATEDIFF(Mi, StartTime.EventTime,       (SELECT TOP 1           EventTime           FROM Events AS Endtime           WHERE EndTime.EventTime > StartTime.EventTime AND EndTime.EventType = 5               AND EndTime.NetObjectType = 'N'               AND EndTime.NetworkNode = StartTime.NetworkNode           ORDER BY EndTime.EventTime))     
FROM Events StartTime INNER JOIN Nodes ON StartTime.NetworkNode = Nodes.NodeID   WHERE (StartTime.EventType = 1) AND (StartTime.NetObjectType = 'N')   ORDER BY Nodes.Caption 

Back to this type of solution, I think.  What would I need to change in this SQL statement in order for it to look at the event message (ie; 'DialBackup Interface Down')  instead of the event type.  The reason is because if I do event types 10 and 11 to show when the interfaces came up or down then I would get all up and down interfaces, and I am only interested in the dial backup interface.

 

 

Thanks   

  • | Post Points: 3

7 Posts
Points 43
Lnavin replied on Thu, Jul 9 2009 11:01 AM
rated by 0 users

You can update the query with an additional where clause to limit it to the Dial-up events by matching on the exact message generated by the event.  You will also nee d to add the where statment to the nested Select.

Sample Where clause

Where events.message LIKE 'Enter message here'

  • | Post Points: 1

28 Posts
Points 71
afsprau replied on Thu, Jul 9 2009 11:20 AM
rated by 0 users

Hello,

I am trying to do something much like this, getting a report that tells me how often the backup circuit has saved the day.  In my case the backup circuits are DSLs and T1 with Tunnels built on them, sometimes on a 2nd router sometimes on the same as primary.  

As of right now i monitor the HSRP as a node and if those go down i know the site is down, ( if no HSRP i have site marked in comments as NO HSRP my report knows to treat that node as the HSRP)

 

If can pull information like flow from the backup if that goes above the set rate = site is on backup.

Then if both reports can be combined we would then know  A) when the site was down hard  and B) when it was limping along on the backup circuit.

 

 

 

  • | Post Points: 3

337 Posts
Points 3,942
Thwack MVP
r0berth1 replied on Thu, Jul 9 2009 12:45 PM
rated by 0 users

You can add a custom interface property and mark the backup interfaces with Backup or something like that. Then you can filter from that.

Hancock Bank

Network Engineer

  • | Post Points: 1

80 Posts
Points 239
Geoo replied on Thu, Aug 6 2009 11:06 AM
rated by 0 users

If I am logging up/down dial backup messages to the Orion syslog server, can I change this to look at that instead of the event log? 

  • | Post Points: 3

1,544 Posts
Points 4,391
Thwack MVP
Network_Guru replied on Fri, Aug 7 2009 4:46 PM
rated by 0 users

Sadly, the Orion Report Writer does not have access to the syslog DB.

-=Cheers=-
NG

(1) Orion v8.1 SLX polling engine & web site
(1) Orion v8.1 SLX polling engine
(1) Orion v9.1 SP4 SL2000
(1) Orion v9.5 SP5 SL2000 :-(
(1) APM AL500 RC 2.5, (1) VoIP monitor V2.0, (1) NCM V8.3, (1) EOC
(1) MS SQL2005 SE - 14GB Ram, 3 disk Raid 0
(2) MS SQLExpress2005 c/w 3 & 4 SCSI disk Raid 0

  • | Post Points: 1
Page 2 of 2 (26 items) < Previous 1 2 | RSS

© 2003 - 2010 SolarWinds, Inc. All Rights Reserved.

Who is SolarWinds?

SolarWinds is rewriting the rules for how companies manage their networks. Guided by a global community of network engineers, SolarWinds develops simple and powerful network management software and network monitoring software for networks of all sizes. SolarWinds also offers a network certification program to become a SolarWinds Certified Professional (SCP).

What is thwack?

thwack, SolarWinds online community site, was designed by network engineers, for network engineers. thwack is a vibrant, growing community of more than 30,000 IT pros who share a passion for technology.

Explore Resources, Answers, Templates, and Advice

Download Free Networking Tools


Learn More About SolarWinds Products