Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Network Performance Monitor (NPM) > Syslog or Traps warning above threshold reached

Syslog or Traps warning above threshold reached

Created by Interspire Import, last modified by MindTouch on Jun 23, 2016

Views: 1,083 Votes: 7 Revisions: 25

Overview

The Orion Console displays a warning that the syslog or traps has reached a specific number of rows, which is above the predetermined warning threshold. 

Environment

All NPM versions

Cause

The syslog or trap messages exceeded the warning threshold.

Resolution

Perform one of the following procedures:

  • Adjust the syslog or trap message threshold in your Orion database
  • Reduce or delete the syslog or trap message threshold in your Orion database.

If you need to keep the large number of syslogs or traps for operational needs, adjust the threshold. 

Adjust the syslog or trap message threshold in your Orion database

  1. Back up your Orion database. 
  2. Go to Start > All Programs >SolarWinds Orion > Advanced Features > Database Manager.
  3. Click Add Default Server.
  4. Expand your SWL instance (normally Netperfmon or SolarWinds).
  5. Right click Syslog or Traps and click Query Table.
  6. Adjust your syslog warning threshold (if required).

    Execute:

    Update settings set Currentvalue = xxxxxxxx Where SettingID = 'Syslog-MaxRowCount'

    where xxxxxxx is the new threshold.

  7. Adjust your traps warning threshold (if required). 

    Execute:

    Update settings set Currentvalue = xxxxxxxx Where SettingID = 'Trap-MaxMessageAge'

    where xxxxxxx is the new threshold.

Reduce or delete the syslog or trap message threshold in your Orion database

  1. Back up your Orion database. 
  2. Go to Start > All Programs > SolarWinds Orion > Advanced Features > Database Manager.
  3. Click Add Default Server.
  4. Expand your SQL instance, normally Netperfmon or Solarwinds.
  5. Right-click Syslog or Traps and then click Query Table.
  6. Clear the provided query.
  7. Enter the following query to delete all syslog messages, traps, and trap variable bindings older than a designated date (which you can change as desired).

    Execute:

    Delete from Syslog Where datetime <= '4/1/2016 12:59 AM'

    Delete from Traps Where datetime <= '4/1/2016 12:59 AM'

    Delete from TrapVarBinds where TrapID not in (select TrapID from Traps)

  8. (Optional) Delete all existing syslog messages, traps, and trap variable bindings using the following Truncate commands:

    Truncate Table Syslog

    Truncate Table Traps

    Truncate Table TrapVarBinds

 

Last modified
23:42, 22 Jun 2016

Tags

Classifications

Public