Submit a ticketCall us

Webinar: Web Help Desk for HR, Facilities and Accounting Departments
This webinar will focus on use cases for HR, Facilities and Accounting.

Having a unified ticketing and asset management system for all the departments in your company can provide end-users with a seamless experience and make things easier for your IT team. Yet, with different business tasks and objectives, many departments don’t fully understand the capabilities of Web Help Desk and how the software can be customized for effective use in their departments.
Register Now.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA 4.2.3 Administrator Guide > NTA Troubleshooting > Last 25 Traffic Analyzer Events

Last 25 Traffic Analyzer Events

This resource provides a list of the last 25 SolarWinds NTA events. These events can include but are not limited to stopping or starting the NetFlow Receiver service and the reception of NetFlow data on an unmonitored interface.

For more information about events, see Events.

Depending on the type of event, clicking a link in a listed event may open a SolarWinds NPM view.

Edit the resource

  1. Click Edit in the resource header.
  2. Edit the following attributes:
    • Title reflects the name of the resource.
    • Subtitle is an optional field you can use to further define your resource.
  3. Click Submit.

 

Errors

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png NetFlow Receiver Service Stopped

SolarWinds NTA informs you that SolarWinds NetFlow Service stopped.

"NetFlow Receiver Service [service name] Stopped."

To resolve the issue, restart the SolarWinds NetFlow Service:

  1. Start the Orion Service Manager in the SolarWinds Orion > Advanced Features program folder.
  2. Check the status of the SolarWinds NetFlow Service.
  3. If it is stopped, select it, and then click Start.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png License limitation

SolarWinds NTA informs you that your SolarWinds NTA license does not match your SolarWinds NPM license, and SolarWinds NTA thus cannot monitor your flow traffic.

"License limitation doesn't fit Orion license!"

To resolve this event, make sure your SolarWinds NTA license matches your SolarWinds NPM license. Both NPM and NTA must be at the same license level. For more information, see SolarWinds NTA licensing.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png No valid license

SolarWinds NTA informs you that your license is expired.

"License status check failed: no valid license were found for [license key not in brackets]"

To resolve this event, log in to the SolarWinds customer portal, and procure an appropriate SolarWinds NTA license.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png No space left on your NTA Flow Storage Database disk

Triggered when there is less than 1MB free on your NTA Flow Storage Database disk. SolarWinds NTA cannot store flows any more.

No space left on your NTA Flow Storage Database disk. You cannot store flow data any more.  Help
Disk size: xx GB; available space: xx GB.

To resolve the issue, consider the following options:

  • Move your NTA Flow Storage Database to a larger disk. For more information, see Move the NTA Flow Storage Database.
  • Set a lower retention period for saving your flow data. For more information, see NTA Flow Storage Database maintenance. The default retention period is set to 30 days. Consider the size of your NTA Flow Storage Database disk and the number of flows you need to collect. If you need help with calculating the retention period suitable for your environment, contact SolarWinds support.
  • Make some space on your disk by deleting old or unwanted files.
  • If you are using virtual machines, allocate more space to the machine hosting your NTA Flow Storage Database.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png Invalid template

SolarWinds NTA informs you that incoming NetFlow v9 flows have a wrong or invalid template.

"NetFlow Receiver Service [xy] received an invalid v9 template with ID xx from device x.x.x.x. See knowledge base for more information."

To resolve the issue, check the template and its settings:

  1. Log in to the appropriate device and check the template.
  2. Make sure the device exports an appropriate template in one-minute intervals.
  3. Make sure the template includes all required details. For more details, see Required fields.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png Invalid IPFIX template

SolarWinds NTA informs you that the IPFIX template does not include required fields.

"NetFlow Receiver Service [xy] received an invalid IPFIX template with ID XX from device x.x.x.x. "

To resolve the issue, check the template and its settings:

  1. Log in to the appropriate device and check the template.
  2. Make sure the device exports an appropriate template in one-minute intervals.
  3. Make sure the template includes all required details. For more details, see Required fields.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png No template received

SolarWinds NTA informs you that there is no NetFlow v9 template received for incoming NetFlow v9 traffic.

"NetFlow Receiver Service [xy] received NetFlow v9 flows without any template for decoding them. Configure the device x.x.x.x to export an appropriate NetFlow v9 template at 1-minute intervals. See help for details."

To resolve the issue, check the template and its settings:

  1. Log in to the appropriate device and check the template.
  2. Make sure the device exports an appropriate template in one-minute intervals.
  3. Make sure the template includes all required details. For more details, see Required fields.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png Not enabled NetFlow data export

SolarWinds NTA is receiving NetFlow traffic from a wrong interface (restricted or unsupported)

"NetFlow data export on device x.x.x.x is not enabled. If you cannot see NetFlow data from the device in SolarWinds NTA, make sure the device is configured to export NetFlow. Learn more."

The event is generated when both indexes are 0. This can happen in two cases:

  • Incorrectly configured device. For more information about configuring the device, see Set up network devices to export NetFlow data.
  • If data from the node are visible in SolarWinds NTA, it is safe to ignore this event. In this case, this event only makes you aware of internal node configuration.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png NetFlow time difference error

This event informs you that the time difference between your servers (SolarWinds Orion database server, NTA Flow Storage Database, and the SolarWinds NTA Service server) is above the critical threshold. The critical threshold is hard-coded to 300s.

"Time on NetFlow Receiver Service [xy] is: xxx. DB server time is xx. The difference is: 719 s. Which is above critical threshold. The data won't be correct. Synchronize the clocks and restart the service."

To resolve the issue, synchronize time settings on all servers (SolarWinds Orion database, SolarWinds NTA polling engine(s), and NTA Flow Storage Database server).

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_error_red_background.png Cannot connect to NTA Flow Storage Database

This event informs you that NTA Flow Storage Database is currently unavailable.

"Cannot connect to NTA Flow Storage Database. SolarWinds NTA cannot save any flows now."

To resolve the issue, make sure that the NTA Flow Storage Database server is running, port 17777 is open, and no firewall is blocking the connection.

 

Warnings

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_grey.png Unmanaged NetFlow Node

This event informs you that SolarWinds NTA is receiving NetFlow traffic from a node which is not managed in SolarWinds NPM.

"NetFlow Receiver Service [xy] is receiving NetFlow data stream from an unmanaged device (x.x.x.x). The NetFlow data stream from x.x.x.x will be discarded. Please use Orion Node management to manage this IP address in order to process this NetFlow data stream, or just use Manage this device."

To resolve the issue, click Manage This Device and complete the Add Node wizard to add the node in SolarWinds NPM. For more information, see Adding Devices for Monitoring in the Web Console in the SolarWinds Network Performance Monitor Administrator Guide.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_grey.png Unmanaged NetFlow Interface

This event informs you that SolarWinds NTA is receiving traffic from an interface which is not managed in SolarWinds NPM. However, the corresponding node is managed in SolarWinds NPM. Click Add this interface or Edit this interface to add the object to SolarWinds NPM for monitoring.

"NetFlow Receiver Service [xy] is receiving NetFlow data from an unmanaged interface 'interface1name To interface2name'. Click Add this interface or Edit this interface to manage interface and process its flow data."

To resolve the event, click Add This Interface or Edit This Interface, and add the interface to SolarWinds NPM for monitoring. For more information, see Adding Devices for Monitoring in the Web Console in the SolarWinds Network Performance Monitor Administrator Guide.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_grey.png Unmonitored NetFlow Interface

SolarWinds NTA informs you that it is receiving flow traffic from an interface, which is managed in SolarWinds NPM, but not monitored in SolarWinds NTA. This happens if the Enable Automatic Addition of NetFlow Sources in SolarWinds NTA Settings is disabled.

"NetFlow Receiver Service [xy] is receiving NetFlow data from unmonitored interface if name on node. Click Monitor NetFlow source or enable the "Automatic addition of NetFlow sources" option on the NetFlow Settings page to process future NetFlow data from this interface."

To resolve the issue:

  1. Click Monitor NetFlow Source and enable monitoring for the interface. For more details, see Add flow sources and CBQoS-enabled devices.
  2. Click Automatic Addition of NetFlow Sources and make sure the Enable Automatic Addition of NetFlow Sources option is selected. For more information, see Enable flow monitoring from unmanageable interfaces.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_grey.png Not Primary NPM Node IP Address

This event informs you that the mentioned node has more IP addresses and that the IP address through which flow data are coming is not used for polling purposes.

NetFlow data from an NPM device name (device IP address) through an IP address that is not its primary IP address. The NetFlow data will be discarded. Enable the Match NetFlow devices also by not primary IP Address option to process NetFlow data from this device.

To resolve the issue, follow the link to NetFlow Settings and make sure the Allow Matching Nodes by Another IP Address option is selected. For more information, see Enable Flow Monitoring from Unmanaged Interfaces.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_grey.png Running out of free space on NTA Flow Storage Database disk

Triggered when there is less than 5% free space on your NTA Flow Storage Database disk.

You are running out of disk space on your NTA Flow Storage Database disk. Help
Disk size: xx GB; available space: xx GB.

To resolve the issue, provide more free space, or optimize the amount of flows stored in the NTA Flow Storage Database.

For more information about providing more free space for your NTA Flow Storage Database, see How to Provide More Disk Space on your NTA Flow Storage Database Drive.

For more information about optimizing the amount of flows stored in the database, see NTA Flow Storage Database maintenance.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_yellow.png Unmonitored NetFlow Interface Automatically Added

SolarWinds NTA informs you that an unmonitored interface has been added into NetFlow sources automatically. This happens if you enabled the Enable Automatic Addition of NetFlow Sources option in the NTA Settings. For more information, see Enable the automatic addition of flow sources.

"NetFlow Receiver Service [xy] is receiving NetFlow data from an unmonitored interface. The interface if name on service is being added to NetFlow sources."

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_yellow.png NetFlow time difference warning

This event informs you that there is a time difference between your database and SolarWinds NTA servers, but it does not exceed the critical threshold.

"Time on NetFlow Receiver Service [xy] is: xxx. DB server time is xx. The difference is: xxx s. Which is above threshold. Fetched data could be unreliable."

To prevent corrupt data, synchronize time settings on all servers:

  • SolarWinds Orion database
  • SolarWinds NTA polling engine(s)
  • NTA Flow Storage Database server

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_warning_yellow.png NetFlow time difference warning ended

This event informs you that the time difference between the database server and SolarWinds NTA server has been resolved and the server times have been synchronized.

"Time on NetFlow Receiver Service [xy] is: xx, DB server time is: xx. The difference is: 0s. Which is under warning threshold"

 

System information

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_blue_background.png NetFlow Receiver Service Started

SolarWinds NTA informs you that the NetFlow service has been started. This event is triggered when the SolarWinds NetFlow Service starts.

"NetFlow Receiver Service [service name] started - listening on port(s) [port number(s)]."

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_blue_background.png NetFlow Receiver Service settings changed

SolarWinds NTA informs you if the port it is listening on has changed, or if a new port has been added. For more information, see NetFlow Collector Services.

"NetFlow Receiver Service [service name] setting was changed - listening on port(s) [port number(s)]."

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_dark_blue.png NetFlow Event: Interface index mapping is being used for node

SolarWinds NTA informs you that a new device using interface index mapping has been added for monitoring in SolarWinds NTA.

Interface index mapping is being used for node [node name].

SNMP index is a value identifying a specific interface. Flows coming from this device are using different values than SNMP interface indexes and SolarWinds NTA thus needs to establish a relation between the interface index and the values included in these flows.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_dark_blue.png NetFlow Event: Removing interface index mapping for node

SolarWinds NTA informs you that interface index mapping has been removed for a node.

Removing interface index mapping for node [node name].

For more information, see NetFlow event: interface index mapping used for a node.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_dark_blue.png NetFlow database maintenance

SolarWinds NTA informs you that the database maintenance has been completed.

NetFlow Database Maintenance: Deleted x expired endpoints in x.xx seconds.

For more information, see SolarWinds Orion database maintenance.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_dark_blue.png Scheduled shrink performed

SolarWinds NTA informs you that the SolarWinds Orion database has been compressed.

Scheduled shrink performed. DB size before shrink xMB, DB size after shrink xMB, released space xMB. For more information, see SolarWinds Orion database maintenance.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_dark_blue.png Updating data to be used in Top XX Aggregated resources

SolarWinds NTA informs you that data aggregation settings for Top XX applications, Top XX Conversations or Top XX Endpoints has been changed.

Updating data to be used in showing Top [x] [Conversations, Applications, or Endpoints].

This event only occurs in SolarWinds NTA 4.0 using SQL for storing flows and in older SolarWinds NTA versions.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_arrow_dark_blue.png Windows Firewall is turned on

SolarWinds NTA informs you that the NetFlow service has started or restarted and it is blocked by a firewall.

"Windows FireWall is turned on and its current exceptions do not allow the NetFlow Service to receive packets. Run the Configuration Wizard for Services to remedy."

To resolve the issue, complete the Configuration Wizard for Services:

  1. Start the Configuration Wizard in the SolarWinds Orion > Configuration and Auto-Discovery program folder.
  2. Select Services and complete the wizard. For more information, see Complete the Configuration Wizard.

You can also add an exception to your firewall settings.

 

Information

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_sw_grey.png NetFlow Licensing

SolarWinds NTA informs you that you are running an evaluation version, which has not been licensed yet.

Your SolarWinds NetFlow Receiver Service Evaluation [receiver name] will expire in x days. Please contact SolarWinds support to purchase a licensed version. Thank you.

To resolve the issue, purchase a license and activate it. Your SolarWinds licenses can be activated directly during the installation process. However, SolarWinds also provides a powerful License Manager which allows you not only to activate your licenses, but also deactivate a license on a certain machine and re-activate it elsewhere.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_info_yellow.png Unable to start listening on port

SolarWinds NTA informs you that the port SolarWinds NTA is listening at is being used by another listener. SolarWinds NTA thus cannot collect flows.

Unable to start listening on port x. Waiting until the port is free.

To resolve the issue:

  1. Log in to the device and check what applications use the port SolarWinds NTA is using. Port 2055 is the default.
  2. If the port is being used by another application, close the application.
  3. If the port is being used only by the SolarWinds NetFlow Service, restart the service:
    1. Start the Orion Service Manager in the SolarWinds Orion > Advanced Features program folder.
    2. Check the status of the SolarWinds NetFlow Service.
    3. If it is stopped, select it, and click Start.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_info_yellow.png Port is free, listening

SolarWinds NTA informs you that the port it is listening at is free again, and that the issue has been resolved.

Port x is free, listening.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_info_green.png Notification Event Status Reset

SolarWinds NTA informs you that you have reset the Last 200 Events view by clicking Clear Notification.

"Resetting unknown traffic notifications events."

For more information about seeing cleared events, see Filter events and display historical events.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_info_green.png Enough disk space available on NTA Flow Storage Database

This event is triggered after the lack of free space on your NTA Flow Storage Database is resolved.

You have enough free space available on your NTA Flow Storage Database disk now.
Disk size: xx GB; available space: xx GB.

 

File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0C0/icon_info_green.png Connection to NTA Flow Storage Database has been restored

This event is triggered when the connection to NTA Flow Storage Database is restored.

Last modified
06:40, 9 Oct 2017

Tags

Classifications

Public