Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Network Performance Monitor (NPM) > Syslogs Older than 24 hours are missing from the Syslog Viewer

Syslogs Older than 24 hours are missing from the Syslog Viewer

Created by Con Finucane, last modified by MindTouch on Jun 23, 2016

Views: 16 Votes: 0 Revisions: 8

Overview

Syslogs older that 24 hours are missing form the Syslog viewer. By default, Syslogs are retained for 7 days.

Environment

All NPM versions

Cause 

A script used to clean up large tables removed all data older than 24 hours from the Syslog table.

Resolution

  1. Check the Syslog retention settings: on the Orion Console  go to Settings > Polling Settings >Database Settings.
    1. Note: Syslog Messages Retention by default this is 7 days.
  2. Open the Database Manager to check the syslog table:
    1. Start > All Programs > Solarwinds Orion > Advanced Features > Database Manager > Add Default Server.
    2. Expand the NPM Database (default) SolarWindsOrion.
    3. Select syslog table and then right-click Query Table.
    4. Run this query:
      SELECT * FROM [dbo].[SysLog] order by datetime asc
      This shows the oldest syslog in the database.
  3. Check with your Database Administrator to see what is removing the syslogs. The messages are being removed from the database by an external script outside the Orion application.
Last modified
23:42, 22 Jun 2016

Tags

Classifications

Public