NPM Getting Started Guide 1 Get Started
NPM Getting Started Guide 1 Get Started
Network Performance
Monitor
Version 2024.1
Part 1 of 2: Get Started
This document may not be reproduced by any means nor modified, decompiled, disassembled,
published or distributed, in whole or in part, or translated to any electronic medium or other means
without the prior written consent of SolarWinds. All right, title, and interest in and to the software,
services, and documentation are and shall remain the exclusive property of SolarWinds, its affiliates,
and/or its respective licensors.
The SolarWinds, SolarWinds & Design, Orion, and THWACK trademarks are the exclusive property of
SolarWinds Worldwide, LLC or its affiliates, are registered with the U.S. Patent and Trademark Office,
and may be registered or pending registration in other countries. All other SolarWinds trademarks,
service marks, and logos may be common law marks or are registered or pending registration. All
other trademarks mentioned herein are used for identification purposes only and are trademarks of
(and may be registered trademarks) of their respective companies.
To learn how to start monitoring your network, complete the following tasks:
Install NPM.
See the SolarWinds Orion Installer for system requirements, planning checklists, and
installation instructions. The Getting Started Guide expects that you have already installed
NPM.
When you have finished this guide, see Getting Started Guide: Customize to get familiar with basic
customization procedures and Beyond Getting Started for information about other features.
Existing customers: Access your licensed software from the SolarWinds Customer Portal. If you
need any help, contact our Support Reps.
Evaluators: Download your free 30-day evaluation from www.solarwinds.com. If you need
assistance with your evaluation, contact [email protected].
Use the Discovery wizard to scan your network for nodes and associated entities. You can review
found nodes and elements and add the devices to the SolarWinds Platform database for monitoring.
The first time you discover your network, add a limited number of edge routers or switches,
firewalls and load balancers, and critical physical or virtual servers and hosts. After you have
the monitoring, alerts, and reports set up, SolarWinds recommends adding more nodes.
Discovery checklist
Before you run the Discovery wizard, gather the IP addresses and credentials for the devices you
want to monitor.
Determine the method used to monitor your devices, and make sure it is enabled on the
devices.
l SNMP: primarily used to monitor network devices, such as routers, firewalls, and
switches. To enable SNMP, consult the device documentation.
SNMP requirements
o For correct device identification, monitored devices must allow access to the
SysObjectID.
o Unix-based devices should use the version of Net-SNMP (5.5 or later) specific to
the Unix-based operating system in use.
o You can monitor VMware ESX and ESXi Servers versions 4.0 and later with
VMware Tools installed.
o If SNMPv2c is enabled on a device, by default, SNMPv2c is used to poll the
device for performance information. To poll using only SNMPv1, you must
disable SNMPv2c on the polled device.
l WMI: usually enabled on Windows devices by default. If the polling engine and device
are separated by a firewall, SolarWinds recommends that you deploy an optional agent
to securely monitor Windows servers and applications by WMI.
For Windows servers, SolarWinds recommends using WMI polling. For a non-
Windows server, SolarWinds recommends using SNMP.
The following table outlines the pros and cons of using SNMP and WMI.
SNMP WMI
Determine IP ranges or individual IP addresses you want the system to scan as it discovers
your network.
Determine SNMP v1/2 community strings and SNMP v3 community strings and credentials
of the devices to monitor.
After you have installed and configured NPM, log in to the SolarWinds Platform Web Console and
scan your network for devices to monitor.
1. If the Discovery Wizard does not start automatically after configuration, click Settings >
Network Discovery.
2. Click Add New Discovery, and then click Start.
3. On the Network panel, if this is your first discovery, add a limited number of IP addresses.
As you scale your implementation, you can use the following scanning options.
Option Description
IP Ranges Use this option when you want to scan one or more IP ranges.
If you have many IP ranges to scan, consider adding multiple discovery jobs
rather than including all ranges in a single job.
Subnets Use this option to scan every IP address in a subnet. SolarWinds recommends
scanning at most a /23 subnet (512 addresses max).
Scanning a subnet returns everything that responds to ping, so we recommend
only scanning subnets where the majority of devices are objects you want to
monitor.
IP Use this option for a limited number of IP addresses that do not fall in a range.
Addresses
A network discovery job can take a long time to complete, and soSolarWinds
recommends using this option when you are first starting out.
4. If the Agents panel appears, you enabled the Quality of Experience (QoE) agent during
installation. The QoE agent monitors packet-level traffic. If there are any nodes using agents,
select the Check all existing nodes check box.
This setting ensures that any agents you deploy, including the one on your SolarWinds
Platform server, are up-to-date. If there are no nodes using agents, you can leave this option
unchecked.
5. On the Virtualization panel, to discover VMware vCenter or ESX hosts on your network:
a. Check Poll for VMware, and click Add vCenter or ESX Credential.
b. Select <New credential> and provide required information.
If you do not add the host credentials, the virtual machines (VMs) on the host are
still discovered. However, you will not be able to see the relationships mapped
between the VMs and hosts.
7. On the Windows panel, to discover WMI or RPC-enabled Windows devices, click Add New
Credential and provide the required information.
SolarWinds recommends that you monitor Windows devices with WMI instead of
SNMP.
Discovery can take anywhere from a few minutes to a few hours, depending on the number of
network elements the system discovers.
After you have discovered your network with the Network Sonar wizard, select network elements to
import to the SolarWinds Platform database in the Network Sonar Results wizard. Discovered
elements do not count against your license count; only elements that you import into the Orion
database count against your license.
When you manually run discovery, by default, the system automatically selects all network elements
to be monitored. Clear the check boxes for elements you do not want monitored.
If you are discovering your network for the first time, SolarWinds recommends that you
monitor a small number of devices.
1. Ensure that only the device types you want to monitor are selected, and click Next.
2. Ensure the interfaces you want monitor are selected, and click Next.
SolarWinds recommends that you do not monitor VoIP interfaces or NULL interfaces.
3. Ensure the volume types to monitor are selected, and click Next.
SolarWinds recommends that you do not monitor compact disks or removable disks.
If the status of a node is Unknown after discovery, you may need to check a few settings in
NPM. See Troubleshoot Unknown Nodes for more information.
When you finish the initial discovery and import, consider adding discoveries for other
segments of your IT environment.
Adding a single node offers more detail in monitoring and is recommended for nodes with
high latency. Do not include nodes with high latency in a discovery job.
4. Select the statistics and resources to monitor on the node, and click Next.
5. If you have defined a custom poller and want to monitor the metric on the node, select the
poller on the Add Pollers pane, and click Next.
For critical nodes, you may need to poll status information or collect statistics
more frequently than the default polling intervals.
Change the polling intervals if polling the nodes takes too long.
Navigate NPM
Check out this video on navigating the Web Console.
After you have installed and configured NPM and specified the devices to monitor, you need to wait
a few minutes for the SolarWinds Platform to collect data from the devices.
In the meantime, see the following terms that might be helpful when you explore NPM:
l SolarWinds Platform The common backend platform used by the SolarWinds Platform suite of
products, including NPM, SAM, NCM, NTA, and more. The platform provides the backbone for
navigation, settings, and common features like alerts and reports. It also provides a consistent
look-and-feel across products, giving you a “single pane of glass” for your monitoring tools.
l SolarWinds Platform Web Console: The web interface you see when you log in to the
SolarWinds Platform. It is used to view, configure, and manage all of your monitored objects.
You can access the SolarWinds Platform Web Console from any computer connected to the
Internet.
l View: An individual page in the web console.
l Widget: The informational blocks that make up a view.
l Entity: Anything that can be monitored by the SolarWinds Platform.
When you first log in, The Orion Summary Home view is displayed by default. The My Dashboards
menu includes a submenu for each Orion module. If you have installed only NPM, this menu
includes a Home submenu and a Network submenu.
Overview of an entity
Within a view, entities that appear in green are up and working as expected. Entities that appear red
or partially red need attention. In this example, all nodes are up, but node Cur-Nor5520 has an issue
as indicated by the red square next to the node name. The red square indicates that the system is
monitoring a child of that node, for example, an interface.
To explore a node, place your cursor over the entity to see more details. In this example, one or more
interfaces are down. Click the node to drill down to the node details page.
Some alerts are enabled by default, such as the Node Down alert. Therefore, if a node goes down
(that is, it does not respond to a ping), you will see it immediately in the Active Alerts widget on the
Home page.
If you have configured your alerts to send email, you get an email when a node goes down.
If you do not see any alerts, click My Dashboards > Network > Network Top 10.
The widgets on this page help identify nodes that respond to a ping but have other health problems.
If a node is down (red), this means it does not respond to a ping. To resolve an issue of this severity:
l Use the Network Latency & Packet Loss, as well as the Min/Max/Average Response
Time charts, to see if this is a momentary problem or a continuing issue.
l Depending on what type of node you are monitoring, you may see additional widgets
specific to that type of device. For example:
Hardware health: Reports on physical elements of the hardware for Cisco, Dell, F5, HP,
and Juniper.
Routing table information: For routers and switches, multiple widgets show a variety of
route-related information. Look under the Network subview for routing widgets, such as
Routing Neighbors, Routing Table, or Default Route Changes.
The Nodes with Problems widget provides information about the interfaces associated with each
node. A square in the bottom-right corner of the node icon indicates that the node has an interface
with a problem:
- In this example, a red square indicates that one or more interfaces are down.
- In this example, a gray square indicates that the status of one or more interfaces is unknown.
In your environment, you might not have any down interfaces. To find an interface with issues that
need to be investigated, click My Dashboards > Network > Network Top 10 to open the Network Top
10 view. Review the following widgets on this page.
l Discards: A packet that was received without errors but was dropped, usually because
interface utilization is near 100%.
When you have found an interface with a problem (or, if all your interfaces are healthy, an interface
with high utilization, errors, or discards), troubleshoot the issue:
l Click the interface name in any widget. The Interface Details page opens.
l Check the Percent Utilization widget for the last-polled value of transmit and receive
utilization. If those values are high, you can also check the Percent Utilization – Line Chart to
see the duration of the problem.
l The Interface Downtime widget displays the interface status for the last 24 hours. If the
interface status changed, you can see it in this widget. In the following example, the interface
had one period when its status was unknown during the last 24 hours, but it is currently up.
l The Interface Errors & Discards widget can also indicate problems. Since this device has high
discards, and high discards are generally caused by a full buffer, check the Node Details for
this device and determine if the buffer is full.
These widgets indicate an unknown increase in traffic that occurred at approximately 1:30 PM,
leading to higher interface utilization, CPU load, and dropped packets. Values are not yet critical and
no alerts have been triggered, and so it might not be a concern, but if you wanted to continue
troubleshooting, you could perform the following actions:
l Determine if there were any configuration changes around that time. If you have Network
Configuration Manager, you can use it to look up configuration changes.
l If you are monitoring traffic (for example, with NetFlow Traffic Analyzer), explore the cause of
the traffic spike.
Many predefined alerts are enabled by default, so if there are problems, you are alerted as soon as
you discover your network and add discovered devices toSolarWinds Platform.
SolarWinds recommends that you identify who will receive warning or critical alerts.
By default, alerts do not send emails and text messages. You need to configure the default
information in the email action first.
By default, alerts appear in the Active Alerts widgets on the Orion Home page.
To see all alerts, click the All Active Alerts button in the Active Alerts widget, or go to Alerts &
Activity > Alerts. On this page, you can:
l Acknowledge an alert that you are working on
l Click on any alert to go to the Alert Details page for more information
l Click Manage Alerts to enable/disable, add, or edit any alert
You can create your own alerts, either by modifying a predefined alert, or by creating a custom alert.
See Getting Started Guide 2 - Customize.
When an alert is triggered, any associated actions are executed, and the alert appears on the All
Active Alerts page.
2. To view the details of the network object that triggered the alert, click an object.
3. To acknowledge an alert:
a. Click Acknowledge.
Action types
You can configure an alert to trigger one or more actions, such as send an email including a web
page, power a virtual machine on or off, or log the alert and send a file.
A complete list of alert actions is available on the Add Action dialog box that you see when
you configure an alert.
This alert action requires that you configure a designated SMTP server. When you configure a
default email action, you can reuse the action for all alerts, which means that you do not need to
enter email parameters for each alert.
1. Click Settings > All Settings > Configure Default Send Email Action.
2. In the Default Recipients section, provide the email addresses of default recipients, separated
by a semicolon.
3. Under the Default Sender Details heading, provide the default Name of Sender and the default
Reply Address.
You can run an ad-hoc report, or schedule reports to be sent to you automatically, as a PDF, a web
page, or email. For example, use a schedule when you want to receive the bandwidth usage from the
last 7 days report every Monday morning.
SolarWinds recommends that you identify who needs to receive performance or status
reports, and how often they should receive them.
Run a report
SolarWinds provides predefined reports for eachSolarWinds Platform product.
To provide meaningful data, some reports require that you monitor the devices for a certain
time period. For example, it takes two weeks for baseline reports to populate.
1. Click Reports > All Reports to see the available predefined reports.
2. On the All Reports page, click the report title to run it immediately. The report populates with
data. To share the report, click Export or Print in the top right corner.
To access the Report Scheduler and the Report Manager, your user account needs to
have the Report Management rights.
You can also access the view from Reports: Click Reports > All Reports, and then click
Manage Reports in the top right corner of the view.
2. Select a web-based report, and click Schedule Report > Create New Schedule.
3. On the Schedule Properties panel, type a name and description and click Next.
4. On the Schedule Frequency panel, click Add Frequency.
5. On the Add Frequency dialog box, type a name and select a time interval.
Now that you've gotten started with NPM, check out the SolarWinds Platform Administrator Guide
and NPM Administrator Guide for more information about using other features.
l Use Network Insight for F5 BIG-IP, Cisco Nexus devices, Cisco ASA, and Cisco ACI
l Forecast capacity
You can also connect with the NPM user community on THWACK, where you'll find training videos,
blog posts, and information about what the team is working on.