Submit a ticketCall us

WebinarVisual Monitoring Tactics: Getting More Log Search Value from SolarWinds Log & Event Manager with nDepth Webcast

Do things seem to make more sense when they are visualized? Are you an IT professional or security expert with a wish for more cybersecurity tools that provide an intuitive visual experience? Join Alexis Horn and Jamie Hynds from SolarWinds as they demonstrate how the nDepth feature in LEM can help make visualizing log search results a reality.

Register now.

Home > Success Center > Network Performance Monitor (NPM) > NPM - Knowledgebase Articles > Syslog or Traps warning above threshold reached

Syslog or Traps warning above threshold reached

Created by Interspire Import, last modified by MindTouch on Jun 23, 2016

Views: 12,240 Votes: 7 Revisions: 25

Overview

The Orion Console displays a warning that the syslog or traps has reached a specific number of rows, which is above the predetermined warning threshold. 

Environment

All NPM versions

Cause

The syslog or trap messages exceeded the warning threshold.

Resolution

Perform one of the following procedures:

  • Adjust the syslog or trap message threshold in your Orion database
  • Reduce or delete the syslog or trap message threshold in your Orion database.

If you need to keep the large number of syslogs or traps for operational needs, adjust the threshold. 

Adjust the syslog or trap message threshold in your Orion database

  1. Back up your Orion database. 
  2. Go to Start > All Programs >SolarWinds Orion > Advanced Features > Database Manager.
  3. Click Add Default Server.
  4. Expand your SWL instance (normally Netperfmon or SolarWinds).
  5. Right click Syslog or Traps and click Query Table.
  6. Adjust your syslog warning threshold (if required).

    Execute:

    Update settings set Currentvalue = xxxxxxxx Where SettingID = 'Syslog-MaxRowCount'

    where xxxxxxx is the new threshold.

  7. Adjust your traps warning threshold (if required). 

    Execute:

    Update settings set Currentvalue = xxxxxxxx Where SettingID = 'Trap-MaxMessageAge'

    where xxxxxxx is the new threshold.

Reduce or delete the syslog or trap message threshold in your Orion database

  1. Back up your Orion database. 
  2. Go to Start > All Programs > SolarWinds Orion > Advanced Features > Database Manager.
  3. Click Add Default Server.
  4. Expand your SQL instance, normally Netperfmon or Solarwinds.
  5. Right-click Syslog or Traps and then click Query Table.
  6. Clear the provided query.
  7. Enter the following query to delete all syslog messages, traps, and trap variable bindings older than a designated date (which you can change as desired).

    Execute:

    Delete from Syslog Where datetime <= '4/1/2016 12:59 AM'

    Delete from Traps Where datetime <= '4/1/2016 12:59 AM'

    Delete from TrapVarBinds where TrapID not in (select TrapID from Traps)

  8. (Optional) Delete all existing syslog messages, traps, and trap variable bindings using the following Truncate commands:

    Truncate Table Syslog

    Truncate Table Traps

    Truncate Table TrapVarBinds

 

Last modified

Tags

Classifications

Public