Submit a ticketCall us

Quickly Address Software Vulnerabilities
Patch Manager is an intuitive patch management software which extends the capabilities of WSUS and SCCM to not only patch Windows® servers and workstations, and Microsoft® applications, but also other 3rd-party applications which are commonly exploited by hackers. Learn more about our patch management solution.

 

Home > Success Center > Network Performance Monitor (NPM) > Syslogs Older than 24 hours are missing from the Syslog Viewer

Syslogs Older than 24 hours are missing from the Syslog Viewer

Created by Con Finucane, last modified by MindTouch on Jun 23, 2016

Views: 9 Votes: 0 Revisions: 8

Overview

Syslogs older that 24 hours are missing form the Syslog viewer. By default, Syslogs are retained for 7 days.

Environment

All NPM versions

Cause 

A script used to clean up large tables removed all data older than 24 hours from the Syslog table.

Resolution

  1. Check the Syslog retention settings: on the Orion Console  go to Settings > Polling Settings >Database Settings.
    1. Note: Syslog Messages Retention by default this is 7 days.
  2. Open the Database Manager to check the syslog table:
    1. Start > All Programs > Solarwinds Orion > Advanced Features > Database Manager > Add Default Server.
    2. Expand the NPM Database (default) SolarWindsOrion.
    3. Select syslog table and then right-click Query Table.
    4. Run this query:
      SELECT * FROM [dbo].[SysLog] order by datetime asc
      This shows the oldest syslog in the database.
  3. Check with your Database Administrator to see what is removing the syslogs. The messages are being removed from the database by an external script outside the Orion application.
Last modified
23:42, 22 Jun 2016

Tags

Classifications

Public