Submit a ticketCall us

WebinarVisual Monitoring Tactics: Getting More Log Search Value from SolarWinds Log & Event Manager with nDepth Webcast

Do things seem to make more sense when they are visualized? Are you an IT professional or security expert with a wish for more cybersecurity tools that provide an intuitive visual experience? Join Alexis Horn and Jamie Hynds from SolarWinds as they demonstrate how the nDepth feature in LEM can help make visualizing log search results a reality.

Register now.

Home > Success Center > User Device Tracker (UDT) > UDT - Knowledgebase Articles > UDT - Frequently Asked Questions

UDT - Frequently Asked Questions

Created by Justin Wyllys, last modified by MindTouch on Jun 23, 2016

Views: 3,821 Votes: 0 Revisions: 7


The following section answers frequently asked questions about UDT.




1) When we add a device to watch list do we get an alert message?

  • You can create an Advanced Alert based on a “Watch List” object type, which lets you alert when that device appears on the network.
  • It’ll show up under the watch list if it appears on the network anyway.

2) What is the difference between network discovery and user device tracker discovery?

  • Network Discovery: This is a part of “Orion Core”. It uses ICMP and SNMP to scan the subnets or IP ranges you enter, and discovers our devices on the network.
  • Customers can choose which of the discovered devices to import then.
  • UDT Discovery means going through the already-discovered switches and routers, to add in UDT ports to monitor.
  • The difference between monitoring an interface in NPM and UDT is, in NPM we gather a lot more statistics – bandwidth usage, errors, discards etc.
  • In UDT its port status and port connections, only. You can monitor a huge amount more UDT ports than Orion interfaces, as the polling is far less intense and the license max for NPM and UDT are very different.

3) If we change the polling interval to 1 min what happens?

  • It will continue to poll until completion, but you will receive banner notifications stating that UDT jobs are proceeding past their poll time. Most UDT scans take 20 mins + to complete due to the size of the SNMP results gathered and numerous sequential SNMP get\getbulk depending on those results.

4) When UDT is polling and the SNMP timeouts, what happens?

  • There’s usually 3 SNMP retries, and the timeout is 2.5 seconds.

5) Where to set up the job status and what these jobs do?

  • Settings -> UDT Settings -> View UDT Job Status. You can run them manually from here as well

6) Where do I just setup the credentials and where do I add up the credentials? What is the usage?

  • To monitor a device, first you use Settings -> Manage Node and add in the switch or router here with its SNMP credentials. Then you can discover it in UDT, no further credentials required.
  • UDT also lets you add in Active Directory credentials to monitor User logins; they’re added from Settings -> UDT settings -> Manage AD Admin credentials
Last modified