New idea exchange ideas in Network Operations Management

Enhance custom poller to query multiple tree MIB instances

ramesh9 — Mon, 13 Jan 2020 08:25:56 GMT

Dear

I am trying to use Custom poller to query WIFI Clients performance using below OIDs,

Client name : 1.3.6.1.4.1.14179.2.1.4.1.3
Client SNR ( Signal to noise ratio ) : 1.3.6.1.4.1.14179.2.1.6.1.26
Client RSSI ( Received Signal Strength Indicator ) : 1.3.6.1.4.1.14179.2.1.6.1.1
Client TX Excessive retries : 1.3.6.1.4.1.14179.2.1.21.1.2

I had configured MIB filter as 1.3.6.1.4.1.14179.2.1.4.1.3

However when I see results, I see no value collected for below OID,

Client TX Excessive retries : 1.3.6.1.4.1.14179.2.1.21.1.2

This is because MIB tree for this OID is different from MIB filter.

Please enhance custom poller to collect value from multiple MIB tree branch or remove MIB filter option to collect values from required OIDs.

HOW TO remove dependencies of a node ( or interface) group as NNMi does not clean up

Andreas Poehlmann — Thu, 09 Jan 2020 07:14:13 GMT

- create a node group
- make use of the group e.g. in NodeSettings of an EvenConfig

=> delete the node group
==> do you want to delete the group and all its dependencies? => YES

I expected proper cleanup - BUT

within NodeSettings the group is still reverenced, no longer by name but by uuid.

Bug or feature?

Questions:
- how to properly remove a node group and its references?
- how to find where a node group was used?

Requesting more flexibility in the way NNMi Catalogs devices to allow for better device management

johnivon — Wed, 08 Jan 2020 16:06:11 GMT

I would like a way to catalog/create a profile using the OID and other variables or sub variables like sysdescriptions to differentiate between dual use device deployments.

Background behind the request. We have an SDLAN ACI deployment.

The aci-n9000-system is a leaf and spine configuration used in the Datacenter environment.

Our configuration has ACI devices with dual usages.

One as a NX-OS(tm) nxos.7.0.3.I7.6.bin device / and one as an aci-n9000-system

We integrate the NNMi inventory with HPNA to backup all device configs.

The HPNA driver can’t support / handle leaf / spines added into NA any other way other than by NA itself (module diagnostic task runs and results in the leaf

spine getting added).

It's a known limitation, so we would need to make sure leaf or spine devices wouldn't get added in thru the integration Module.

We need to filter out that usage to enable HPNA to discover these devices. We do this thru the OID profiles.

NNMi uses Device Profiles (which equate to sysObjectID) to control certain types of behavior.

The Integration Module uses a device group as its input inventory. We configure the group to add or Filter out devices to/from HPNA via the device types and Profiles.

A solution would be to have more flexibility with the way NNMi Catalogs devices to allow for a more granular approach to device management

Provided information is not clear when adding a seed and found duplicate

Bharath Kumar — Tue, 07 Jan 2020 08:58:30 GMT

Hi,

I had gone through few posts:

https://community.microfocus.com/t5/Network-Management-OpenView-NNM/Duplicate-Seed-issue/m-p/561708#M988

https://community.microfocus.com/t5/Network-Management-OpenView-NNM/Duplicate-seed/m-p/615057#M161021

Changing the log level and finding the seed is fine. But my question is:

Lets say we have two hostname's (with 2 interfaces) hostA and hostB. When I add hostA it will get added successfully and when tried to add hostB NNM says "Node not created (duplicate seed)".

Would like to check with NNM team that it will be great if we receive a message saying:

"Node not created (duplicate seed) of hostA" which will reduce troubleshooting time.

Also, it will take much time to get MAC addresses from internal customers to find the duplicate device which is already added in NNM.

Kindly suggest !!!

I tried to open Product Enhancement Request but support team requested me to post here.

Regards,

Bharath Kumar.

Improve custom poller to collect based on filter values

ramesh9 — Tue, 07 Jan 2020 07:57:18 GMT

Dear All

I am using Custom poller to collect client details of WIFI access points based on below MIB variables,

1.3.6.1.4.1.14179.2.1.4.1.3
1.3.6.1.4.1.14179.2.1.4.1.9
1.3.6.1.4.1.14179.2.1.6.1.2
1.3.6.1.4.1.14179.2.1.6.1.3
1.3.6.1.4.1.14179.2.1.4.1.25 ( Client protocol - 5 means client is connecting using mobile )

Now when I define the collection NNM collects all client details, even clients who are connecting from laptop.

I only want to collect client details who are connected from mobile.

Is this possible using custom poller or can we enhance custom poller.

Improve custom poller feature with scripting

ramesh9 — Tue, 07 Jan 2020 07:48:03 GMT

Dears

Currently we can use Custom poller to collect MIB values from target devices.

However I see we cannot use scripting on the values collected, for example manipulate values collected and store the manipulated values. If MIB value returned is integer, I know we can use MIB expression, however if collected value is string or other types we cannot use MIB expression.

Please enhance custom poller to have this feature.

Provide an option to create a list of approved values and use them in compliance rules

Sanjeev_A — Thu, 02 Jan 2020 07:10:12 GMT

Can you make an option to define custom lists that can be defined with approved values and have them refer as variable in the compliance rules? That way the list can be managed centrally for any modification and doesn't need to touch any controls in the policy for modification whenever there is a change in the infrastructure.

e.g. If the requirement is to validate specific IP addresses/subnets for AAA, Logging, Monitoring etc.. can be created and referred in different rules for various devices in multiple policies.

XML Parsing support in NA for configuration compliance

Sanjeev_A — Thu, 02 Jan 2020 07:02:33 GMT

The current compliance is based on parsing the text file configuration of devices. However there are few devices like Juniper SSL-VPN devices, that stores the configuration in XML format and there is no option to parse XML files in the NA tool. Can you add additional capability to validate the configuration compliance of these devices by providing the feature to parse XML files? If you are able to add feature to maintain relation of parent-->child relationship to multiple levels and then have the tag-value pairs validated for specific set of configurations then it would be helpful.

On a side note, is there any plan to introduce multiple blocks in the rule, as we have seen in some configurations like Fortinet FortiGate Firewalls (single VDOM and Multi VDOM configurations), there is a need to maintain checks within an outer block and there are multiple blocks within that configuration from which validation is required to be done?

Provide a tool to manage information collected in VLAN tables.

Bfdx — Mon, 30 Dec 2019 12:26:51 GMT

Cisco Nexus Aggregator interface polling needs to be enhanced

ramesh9 — Sun, 29 Dec 2019 04:32:29 GMT

Cisco Nexus 5000 Switches.

We have Uplink ports created on these switches, however Uplink ports are not been monitored or performance is not getting collected.

Please enhance the solution to get these aggregator interfaces for monitoring and performance data is collected.

bug in NNM-2019.05 Logging in with TLS/PKI. Communication Settings shows a new window not the data

Whitlock Support — Mon, 23 Dec 2019 23:03:04 GMT

Both Firefox, Chrome and Edge have this problem. I won't say it is only a problem with Communication Settings (Monitoring settings do not have the problem), but since the problem exists on all my browsers

This is only a problem with NNM 2019.05 and login with TLS/PKI, though admittedly I haven't tested with user/password login as all my test servers use TLS/PKI. If I select a node and then either from the top level menu or right clicking on the device, when I select Communications Setting, I get a new window. Instead of showing me the data, it asks for a login. If I select Monitoring settings or any other setting I get the normal new window with the data. I tested on Chrome and Edge. I have seen exceptions and it is more consistent when the node is set to critical/red.

To be able to use NNM licenses in NOM to use the NOM features

binuj — Sun, 22 Dec 2019 06:44:26 GMT

Currently there are 2 products which are NNM and NOM. NOM has additional functionality included like NA and also has options like CDF and also integration to BVD. These features are missing for NNM.

There should be an option to use NOM with NNM license whereby only the features of NNM are enabled and if NOM license installed then you should be able to use the full features of NOM.

This will help to have one product and also the customers to be able to use the new enhancements of NOM and also to have it installed on CDF and integrations to BVD etc

Automatically delete connections for disabled links after a period of time

Vicente Navarro — Fri, 20 Dec 2019 10:18:22 GMT

This is a repost of the legacy Enhancement Requests QCCR1B151773 and QCCR1B119433 in Idea Exchange.

When the interfaces that are part of a connection are disabled (ifAdminStatus=Down), the connection becomes grey and NNMi will never remove that connection automatically. That connection may still exist physically or not, and it may make sense that the user wants to keep it or not. But in cases that the connection is undesired (i.e. the link is disabled because it is no longer there), it may create strong confusion in the map. Currently, the workaround to remove that connection if it is undesired is to enable again the interface and: -->rediscover the nodes --> set deletion of inactive connections (which have been down for X number of days) in discovery configuration But that involves re-enabling again the interface, which may be not possible at all! Alternatively, nnmconnedit.ovpl could also be used for this, but it would be highly inconvenient to a large network. Therefore, NNMi should provide a way to remove connections for disabled interfaces. This could be as simple as adding an additional option next to "Period (in Days) to Delete Connections that are Down" for "Period (in Days) to Delete Connections that are Disabled"

Enable security access to QA site

ramesh9 — Tue, 17 Dec 2019 10:09:09 GMT

We had configured 100s of UDP IP SLA QA probes in our environment and we are creating QA sites based on source and destination.

We need to segregate sites based on users who will access them. For example user1 should have access only to site1 to site5, user2 should have access only to site6 to site10.

We are not seeing any possibility of doing this in QA SPI configuration or from NNM point of view.

Please introduce security access to QA sites created.

kubernetes integration with HP NNMi

anishrana2001 — Fri, 13 Dec 2019 07:24:41 GMT

Hello Team,

I am wondering if Mircofocus would provide support and documentation to integrate Kubernetes into HPNNMi server. As of now, Microfocus is being on top while using monitoring tools, and also work on future technology to cop its customer's needs. However, when I talk about Kubernetes, it is absent. It would be great if Microfocus support new Vendors like Kubernetes. If it is not possible to provide the support ASAP then a workaround, such as REST API, will also be work.

Thanks,

Anish Rana

NNMi: Web Service for direct mapping between trapOids and nodeGroups and Incident Configuration

Radmilo — Thu, 12 Dec 2019 21:33:57 GMT

We need to have this service to be able to have direct mapping between trapOids and nodeGroups and Incident Configuration on DB level - because it is not possible to do it in the current NNMi versions.

It will allow creating reports/output based on Node Groups/Interface Groups for all Traps or Management Events giving us details about attributes for each Trap and ME like: Actions, Dampening, Suppression...

For example, now it is not possible to create report for all Payload Filters within Actions/Dampening/Suppression for SNMP Traps/Management Events - based on Node Groups/Interface Groups...

Thanks
Radmilo

For MultiConfig drivers a section enumeration / collapsible display is needed

Denny123 — Wed, 11 Dec 2019 17:31:19 GMT

For the drivers like A10, Checkpoint or any Linux based we need a way to easily enumerate/list the parts included. There is no way to check what sections are included other than scrolling through all the config lines.

It is very difficult to work with many sections on many lines of config without having a collapsible display such as is done with the current Cisco IOS driver. With Cisco ISO driver sections are enumerated at the top and can also be collapsed by clicking on the beginning of the section line

If you take a look at the example screenshot below that was provided of a Cisco IOS config where there is already links to the various sections of a device config at the top which will take you to the various sections of the config and also a + to expand or - to collapse sections of a config. We are asking for the same feature (like for Cisco example screen capture) to be added to the devices like the A10, Checkpoint or any Linux based ones .

Example Cisco IOS multiconfgCurrently when you have devices that have hundreds of thousands of lines of config data it is difficult to scroll down and find the section you are looking for. Sometimes the config is so large that you can't even scroll to the bottom of the config without having browser issues.

Need to be able to clone enrichment payload filters via the GUI

heybails1 — Mon, 09 Dec 2019 17:04:36 GMT

It's very time consuming to constantly have to recreate the same payload filter over and over again inside a single configuration for a trap or a management event. Is there any way that a filter can be created, then copied so that the next filter can simply be edited? This would be great for a single trap producing multiple severities and alarms with long filters.

Thanks

Fix/Update Bundled Documentation in NMC-NNMi-Lin-2019.11.tar.gz

UTBrandon — Mon, 09 Dec 2019 15:22:16 GMT

The upgrade document
interactive_Upgrade.htm

bundled with NMC-NNMi-Lin-2019.11.tar.gz
Refers to upgrading to 2019.05

3.) "Upgrade NNMi to the version 2019.05 by running the installer program on the standby server"
b.) Extract the contents of the NNMi 2019.05 media (or mount the media).
4.) "Upgrade NNMi to the version 2019.05 by running the installer program on the active server"

The offline upgrade document bundled in the download to install 2019.11 was not matching
https://docs.microfocus.com/NNMi/2019.11/Content/Install/install_files/nnmi/NNMi_Upgrade/Content/Interactive_Upgrade.htm

Also the online doc
https://docs.microfocus.com/NNMi/2019.11/Content/Install/install_files/nnmi/NNMi_Upgrade/Content/Interactive_Upgrade.htm
when you select Linux still shows the tip about windows servers.

Option to exclude content from Comparison Startup/Running

BeniG — Mon, 09 Dec 2019 14:03:59 GMT

Sometimes the vendors are not fully consistent with their output of a running-configuration and the startup-configuration. A few examples:

Device: Nexus7000, Cisco NXOS 8.4(1) => difference in the ordering of the access-list on the vty:
RUN:
line vty
access-class VTY-ACCESS in
access-class VTY-DENY-OUTBOUND out
STARTUP:
line vty
access-class VTY-DENY-OUTBOUND out
access-class VTY-ACCESS in

Device: TH3030S, A10 AX 4.1.4-GR1-P1 => Additional "exit-module" in startup
RUN:
vrrp-a common
   device-id 1
   set-id 1
   enable
STARTUP:
vrrp-a common
   device-id 1
   set-id 1
   enable
   exit-module

Problem: This can lead to wrongly tagged devices with "Startup and Running Configurations differ". Well, not wrongly, but in this case the error can be ignored. Since this usually affects all devices, the devices that have a valid config-diff between running and startup will get lost in the amount of devices.

Proposed solution: Even though this is a device-issue, NA should offer the user a possibility to exclude such details from the comparison. Not deactivation of the whole comparison (e.g. "ignore_startup") but exclusion of individual lines. Like what is in some driver's "cake.snapshot.pattern_diff", but in the GUI.

Best would be to have this as a setting per driver, or even OS-Version.

Beni

To add decimal places to the formatted string send to Netcool

quesadro — Wed, 04 Dec 2019 13:03:56 GMT

Customer sends the summary strong to Netcool like this:
High input error rate on $sourceObjectName, $ifAlias. Current value: $cia.thresholdMeasuredValue Threshold: $cia.thresholdLowerBound [Netcool_Filter:$xxxx.device.netcool Mgmt_IP:$xxxxx.device.ip]

The problem is that $cia.thresholdMeasuredValue is showing 0.0 instead of 0.00000007, seems like there is some truncation. Need to know how we can show more decimal places in the summary text we send to Netcool.
==============================================================================

In the current product, there is no configuration option available to set the decimal points precision. A similar problem with the NPS team has been reported. Looks like, the decimal point truncation to 2 places exist everywhere in UI and in NPS reporting too.

Here are ERs raised for the same (check them via MF Support Page)
QCCR1B162547 NNMi bar graphs display bars for lower fraction values but show rounded off zeros as data points for the same.
https://softwaresupport.softwaregrp.com/doc/group/softwaresupport/search-result/-/facetsearch/document/LID/QCCR1B162547

QCCR1B161023 Dashboard table headers are incorrect
https://softwaresupport.softwaregrp.com/doc/group/softwaresupport/search-result/-/facetsearch/document/LID/QCCR1B161023

This is another ER submitted against NNMi SPI Performance for Metrics for the very same requirement.
QCCR1B135216 How to increase a NPS report precision (decimal points)
https://softwaresupport.softwaregrp.com/doc/group/softwaresupport/search-result/-/facetsearch/document/LID/QCCR1B135216

Have a product wide task to deploy ACL on devices similar to create VLAN task.

Vivek M S — Mon, 02 Dec 2019 06:51:56 GMT

Today we have a task to delete ACLs and snapshot task can parse and show the ACLs. Behind the scenes each of the drivers handle this for the respective devices with device specific syntax. Similar behavior or task would be useful to deploy ACLs which can be used for cross launch or trigger from NNMi based on certain analysis

Need REST interface for NOM/NNMI account maintenance

tom_santanello — Sun, 01 Dec 2019 19:51:22 GMT

We need a REST interface for NOM/NNMi account maintenance. Currently, there is no REST interface that we can use with OO to perform NNMI add, modify and delete user like we can with NA. Ideally this capability would be added to NNMi and NOM in order to support mixed-mode deployments. The complete list of capabilities is:

1. Add user
2. Delete user
3. Add user group
4. Delete user group
5. Add user to user group
6. Delete user from user group
7. Add user roles
8. Delete user roles
9. Assign roles to user groups
10. Deassign roles from user groups

Need a command for just extract/list incidents from incident database

emonzo — Wed, 27 Nov 2019 09:42:19 GMT

Actually, its possible to list and trace incidents through incident browser, even you can export these list to an spreadsheet. There is also another method but implies conecting directly to the database using Postgres utility 'psql' and this is not recommended. So it could be very useful to have a command for listing and extracting incidents from the incident database that allows to specify a node, view of node group and for an specific time frame.

Temperature, Fan status and IP Address reachability reports in NPS

narkodu — Wed, 27 Nov 2019 06:59:52 GMT

HI Team

We need Temperature, Fan status and IP Address(not management IP) reachability reports in NPS, however these metrics details are collected by NNMi, but not sending to NPS, can you please enable this option with reports in NPS.

Getting ifLastChange status report

ihulki — Mon, 25 Nov 2019 08:18:47 GMT

We are looking for a report which can give us the list of interfaces with its last change status. It is possible through snmp query and we would like to run a snmp query against each interface on a device and report the status to NA database. When we are extracting the report for the interface it should provide the latest status.

trap/incidents attributes (CIA) should be displayed as text not just as OID

Robert_224 — Thu, 21 Nov 2019 10:13:43 GMT

example:
a powersupply trap
cefcPowerStatusChange / .1.3.6.1.4.1.9.9.117.2.0.2
delivers 2 trap variables: cefcFRUPowerOperStatus and cefcFRUPowerAdminStatus
In the custom Attributes of the trap you only see:

.1.3.6.1.4.1.9.9.117.1.1.2.1.2.14: on
.1.3.6.1.4.1.9.9.117.1.1.2.1.1.14: on
The ".14" ist the instance number

I would like to get a NNMi function to convert the OID to a textual name for the message text field like this:
$cianame<$1> = $text<$1>
which should result in:
cefcFRUPowerOperStatus.14=on
there is already the function $oidtext, which provides this feature for the value of the variable- but no function for it's Name.
(i.e. trap var .1.2.3.4 octetstring "1.3.6.1.4.1.9.9.117.1.1.2.1.1.14")

the new function should convert ".1.2.3.4" to a textual name

Get the temperature that is triggering TemperatureOutOfRangeOrMalfunctioning in the event

Vicente Navarro — Thu, 21 Nov 2019 10:07:23 GMT

This is a re-submission of the legacy Enhancement Request QCCR1B133481in Idea Exchange.

For TemperatureOutOfRangeOrMalfunctioning management events, we should be able to see the measured temperature value that is triggering the event.

TemperatureOutOfRangeOrMalfunctioning

add Brocade NETIRON CES to the DDP - NNMi

alhossain_marzouk — Wed, 20 Nov 2019 15:37:34 GMT

Dears,

Please note that we need to add Brocade to the supported devices and to make sure that it is discovered properly as now it give some missing data

AlHossain Tarek Marzouk

+201140990100

IPT to co-exist with NNMi in FIPS mode

Parul_G — Tue, 19 Nov 2019 05:07:56 GMT

This is an Enhancement Request for IPT to co-exist with NNMi in FIPS mode without any impact to IPT functionality.

Need database field "SRC_TENANT_NAME" in "NMS_QA_CBQOS_POLICY" to support more char's

Kim Andre Espeseth — Mon, 18 Nov 2019 09:55:09 GMT

This field is today limited to 36 char.

Because of this we are not able to collect QoS statistic on nodes that have a tenant name longer then 36 char.

The SNMP data will not be stored i the DB

NNMi reports for incidents

Vesselin Kotaro — Thu, 14 Nov 2019 16:10:51 GMT

On top of all reporting capabilities, PerfSPI is lacking basic one - reports on incidents.

Ideally such reports would include incidents per node with grouping options per type, severity, priority, etc... just bring the incidents to PerfSPI, we will manage the reports 🙂

BR,

Vesko.

Bulk Mode script to have increase flexibility

PSCSupport — Wed, 13 Nov 2019 16:55:53 GMT

Bulk mode works and line-by-line fails when deploying a simple change plan like:

int range gig1/0/1-48 , gig2/0/1-48 , gig3/0/1-48 , gig4/0/1-48 , gig5/0/1-48

auto qos voip cisco-phone

Bulk mode deployments complete successfully in both scenarios above ; however bulk mode is not what we need for this type of script because the Cisco device will not invoke the internal process to generate additional configuration parameters for QoS setup when the ‘auto qos voip cisco-phone’ command is received via a bulk config update via transfer protocols like tftp, ftp, etc. This command requires that NA connect to the device shell and issue the command explicitly.

Another difference between the two examples above which may contribute to how NA processes the change is the amount of time that it takes for the device to respond after issuing the first command (‘int range…’).

Repairing the mplsjboss process when doing the ovstatus

davidsarwono — Wed, 13 Nov 2019 14:23:58 GMT

NNMi environment shows that mplsjboss is running normally but it doesn't have PID and seems to have two process.

We have open ticket but the result is telling that this situation is harmless for the system

But my idea is to repair the result of ovstatus for making a better and unvoiding some unwanted misunderstading

since this is already a known error why not just fix it?

[root@nnmi1 ~]# ovstatus -c
Name                   PID  State          Last Message(s)
OVsPMD                5087  RUNNING        -
ovjboss               4403  RUNNING        Initialization complete.
nnmaction            52162  RUNNING        Initialization complete.
nnmtrapreceivermd     5133  RUNNING        Initialization complete. Trap Receiver is running.
nmsdbmgr              4327  RUNNING        Database available.
mplsjboss                -  RUNNING        Initialization complete.
mplsjboss                -  RUNNING        Initialization complete.

Enhance path view tool

ramesh9 — Wed, 13 Nov 2019 10:41:05 GMT

Dears

Path view tool is not working correctly

If I select node and and select path view tool, it gives error 'unable to resolve source host'

If I select source and destination host, it also gives me the same error.

One thing I noticed in path view tool it is not showing full FQDN of the device for both source and destination, not sure whether that is the issue.

We need to use for troubleshooting purposes.

Sizing Tools for NOM

ThibaudA — Wed, 06 Nov 2019 21:13:14 GMT

Hello,

Could you please provide a Sizing tools for the NOM suite to size the server as you provide on OpsBridge.

Regards

NNMi Node added event

Nicolas3 — Wed, 06 Nov 2019 09:29:32 GMT

Hello,

It would be great to have a "Node Added" event generated when a new node arrive in the inventory ( seed or by Discovery)

It is for automation & integration purpose

"Node Deleted" would also be great

Regards,

Nico

Make device contact a searchable field similar to device location

aaron9060 — Mon, 04 Nov 2019 16:00:42 GMT

Similar to device location, device contact could be parsed from a device's SNMP configuration and be provided as a search field option.

Currently, the only way to search devices by contact is to use the 'configuration text' search which is not ideal.

Need QoS Packet Loss in kbps/mbps threshold value

Monojit Kundu — Mon, 04 Nov 2019 13:23:18 GMT

Brief Description:

Currently for QoS Packet loss we have threshold to apply on packet loss based on % , but we are having various classes of different bandwidth within it . So, the problem here is that % on Qos drops is not catching drops on high BW ports and is catching everything on low BW ports. If you have 1% threshold default trigger here is the behavior:

On 1 G link it will catch drops higher than 10Mbps
On 10Mb class it will trigger already at 100kbps

Benefits / Value: It will help to get defined loss in kbps/mbps based on class bandwitdh defined and will not face scenario as previously described.

Design details: If we can include both percentage and kbps/mbps as option for threshold event triggering.

It will help in various kind of network design scenario.

NA: For Policy / Rule - Add ability to match multiple text within a block

Chris_Powers — Thu, 31 Oct 2019 14:08:46 GMT

We have had requests from users who want to be able to ensure that blocks are compliant. As an example, a user wants to match text (VLAN) on one line within a block with text (VLAN) on another line within that same block.

Currently, even with using Reg-Ex that works outside of NA, this won't work within the rule.

There is an option to create custom scripts (diags) and parse the data and then have a policy that looks at the diag, however, for us the option to do it all within the policy (rule) is preferable as we already have the data - no need to run additional tasks to collect and store additional data, so not as streamlined as all within the policy (rule). Also, for us, it would be easier once we can have the functionality, we could add new rules that do the same/similar matching (just matching on different text within a block).

As an example:

interface GigabitEthernet1/0/1
description to the moon and beyond
switchport access vlan 8675
...
authentication event fail action next-method
authentication event server dead action reinitialize vlan 8675
authentication event server alive action reinitialize
...
!
interface GigabitEthernet1/0/2
description to the moon and beyond
switchport access vlan 201
...
authentication event fail action next-method
authentication event server dead action reinitialize vlan 8
authentication event server alive action reinitialize
...
!
So, for the blocks above, the user is looking to ensure that the VLANs above match. If the do not match, the interface block is not in compliance.

For us, this has many use cases where we want to ensure that within a rule defined block, they can ensure that one bit of a line matches another (above we showed VLAN, could be ACL or route or other). But all of these rely on being able to parse lines and then match that parsed text with other parsed text.

Thank you for your consideration,
Chris

Self Serve Selection of Data stored into Database

UHCougar83 — Wed, 30 Oct 2019 18:38:37 GMT

There needs to be a methodology where the customer can select what data is stored into the database or discarded. As we move into a big data analytics world, there are going to be numerous times where analytics will identify a problem, then what? If I only had this data, I could take the next step. The self-serve model with selecting what data is stored would address the needs of data-overload and what is needed as each customer needs would vary. Furthermore the constant hamster wheel where the realization of additional data is needed, submit feature request, wait to get included, then only to find you need something else, repeat isn't going to be sustainable today where analytics is in its infancy.

netpath tool like solarwinds

ramesh9 — Wed, 30 Oct 2019 10:18:41 GMT

Do we have netpath tool like Solarwinds.

I remember in NNM 7.x, we were having netpath service, does it still exist in later versions of NNM.

mplsjboss shows running but doesn't have PID

davidsarwono — Tue, 29 Oct 2019 03:52:01 GMT

NNMi environment shows that mplsjboss is running normally but it doesn't have PID and seems to have two precesses.

Want to know the why.

Ability to search the node using registration id in the NNMi UI Find Node Menu

knag — Mon, 28 Oct 2019 17:35:47 GMT

When we are referring to the NNMi product logs for troubleshooting (especially in the customer system via remote session) we find the registration number used largely in the log messages.

At sometimes, to relate these registration numbers the customer need to search the nodes one by one or we are forced to login to the database and use SQL statements to find out the node.

Currently, the Tools, Find Node option allows us to use Name, Hostname, System Name, IP address and latest releases the UUID also. The support for searching the node using registration ID should be added.

It is a small addition but can be very useful while troubleshooting in a slow remote session environments and saves time.

VCenter 6.x Driver Support for Network Automation

MMelendez — Mon, 28 Oct 2019 16:54:43 GMT

Hello,

With latest driver pack loaded (144-092819) we noticed that VCenter 6.x servers/hosts are not yet supported on Network Automation. Hoping this can be implemented soon as 6.x is becoming more prevalent in the field. Any assistance/guidance you can provide is greatly appreciated.

Console timeout based on user account/group

Maarten_K — Mon, 28 Oct 2019 12:51:13 GMT

Currently NNMI only has a global Console based timeout. We would like to use multiple timeouts depending on the group.

For example:

We set a global timeout of 1 hour.

A user (User1) has 2 groups. The admin group and a self defined group called engineers. We would set the timeout on the engineers group to 8 hours. So the user (User1) would have a 8 hour timeout.

User2 that only has the admin group would have the global timeout of 1 hour.

Remove interfaces based on aging

ramesh9 — Sun, 27 Oct 2019 11:26:51 GMT

Currently I am not sure whether NNM/NPS is removing interfaces which are discovered and disabled if both admin and operational state is down.

My request is when admin is up and operational status is down for interface, after specified number of days, NNM discovery module should do below,

1. Remove the interface from NNM database.
2. Do not re-discover the interface again if admin state is up, but operational status is down.

Nowadays network engineers are putting interface operational down when they no longer need the interface and keep admin status up.

Device Uptime Alert

Joe — Thu, 24 Oct 2019 21:12:18 GMT

Create a function that would alert if a device is above or below a particular threshold for uptime.

Scenarios would include Device uptime > 365 days

or Device uptime < 1 hr.

This would serve to show devices that have been up for too long, or devices that rebooted due to a power outage and were back online or missed during a 5 min polling cycle.

Interface - Scheduled Outage

Joe — Thu, 24 Oct 2019 21:07:31 GMT

Description

When work is done on the network it would be nice to be able to schedule an outage for an interface vs. the entire node. Putting an entire Node into "Out of Service" results in a loss of too much information. I

Benefit

Allows for maintenance to occur while still monitoring the rest of a device. Important in an enterprise environment.

Design Details

Model it after "Schedule Outage" for nodes.

Create NA custom attributes for Policies

Alpha-gray — Thu, 24 Oct 2019 14:03:56 GMT

Currently there is no way to create a custom attribute for a Policy, this would be nice to have for things like radius hosts or ACL names that are shared amongst multiple rules. Perhaps even something more global that could be shared against multiple policies; a server level variable.

Certifiy large deployments of Cisco Crosswork Data Gateway with the NNMi SNMP Proxy module

Vicente Navarro — Wed, 23 Oct 2019 15:08:22 GMT

One of the features of Cisco Crossworks Data Gateway is to behave like a large-scale SNMP Proxy for a large network introducing some kind of cache so that data that does not change is not requested every time that it is requested and SNMP requests to nodes is highly reduced.

We need NNMi to officially certify that it can work properly with large deployments of Cisco Crossworks Data Gateway and that the SNMP Proxy module in NNMi can support accessing thousands of nodes through a large-scale SNMP Proxy such as Cisco Crosswork Data Gateway.

Request NNM to handle the Access Points ( unified APs/controller Aps) as nodes

martinschmitt — Wed, 23 Oct 2019 15:00:35 GMT

We like to enrich incidents based on the name of unified Access Points (controlled by a cisco Wirelless Lan Controller). At the moment in version 10.50 we did not managed to do that. Our task is: if an access point is no longer available we like to manipulate the incident to add a causecode to the event that gets forwarded to OMI for ticket creation based on this causecode. For switches or interfaces we enrich the incident based on node group or interface group so that help desk knows which IT group is responsible to solve the issue. Due to the fact that Access Points are cards of the WLC all manipulation we where able could only be done with attributes belonging to the WLC node. Any suggestions are welcome.

NNMi iPSPI QA: path echo

UliW — Wed, 23 Oct 2019 13:51:13 GMT

Would like to have the path echo protocol supported by NNMi iSPI QA (and NPS).

Right now, path echo is mentioned in Manage QA probes but doesn't work and seems to not be supported. Also, the data source for reports is missing in NPS:

This enhancement would be usesfull when troubleshooting WAN Performance.

Configurable input queue limits for JVM

AndyKemp — Wed, 23 Oct 2019 11:23:26 GMT

In deployments with larger sized devices and more complex topologies the working queues for the com.hp.ov.nms.disco.analyzer.AnalyzerManager class can exceed the ability of the server (either Regional or GNM) to effectively process them and the JVM will halt as the Survivor reaches 100% and garbage collection stops. Currently, the only way to impact this is to do things like removing small-subnets from discovery.

Nessus Scans: built-in Java in NNM suite servers is not secure.

timsmfadmin — Tue, 22 Oct 2019 14:12:10 GMT

NNM software comes pre-loaded with Java 1.8. It is not a supported piece of software in a STIG'd environment. Is there a reason why MicroFocus does not update the bundled Java ever? Can we get a patch to migrate to an acceptable version of OpenJDK please? Also, Oracle Java is not an approved software for our infrastructure.

Nessus scan result:

Oracle Java SE 1.7.0_231 / 1.8.0_221 / 1.11.0_4 / 1.12.0_2 Multiple Vulnerabilities (Jul 2019 CPU) (Unix)

Nessus proposed solution:

Upgrade to Oracle JDK / JRE 12 Update 2 , 11 Update 4, 8 Update 221 / 7 Update 231 or later. If necessary, remove any affected versions

Cisco WLC Upgrade with pre-downloading AP software

OpenLine — Tue, 22 Oct 2019 07:03:46 GMT

We would like to propose a feature request regarding a Cisco WLC upgrade in NA.

A Cisco WLC consists of a controller and associated Access Points (APs).
The WLC and APs need to be on the same image version to function correctly.
The devices can therefore be upgraded in two ways: the standard procedure or with predownloading the new software images to the APs.

With the standard procedure, the new image is pushed to the WLC, the APs then download the new image from the WLC and all devices (WLC + APs) reboot.
As you can imagine, it takes some time for the APs to download the new image and reboot. This would happen in one maintenance window.
Therefore there is an option to predownload the images to the APs. With this option it’s possible to predownload the image to the APs (during the day) while they keep functioning so that the image is already available to the APs.
Then, in the maintance window, the WLC and APs only have to reboot, since the download has already happened.
This reduces the needed time in the maintenance window itself.

Our question here is: is it possible in Network Automation to somehow use this predownload image feature of the WLC / APs?
Normally, this feature can be used with the command: “config ap image predownload primary all” on the CLI of the WLC.

"Graph incoming traps" still requires Flash in NNMi 2018.11

AkashDeep — Mon, 21 Oct 2019 18:03:07 GMT

Apologies, but this message has been moved to a new location. This placeholder will expire 2 days from the time of the move.

GNM should hint RNMs on connected interfaces

Vesselin Kotaro — Mon, 21 Oct 2019 13:27:21 GMT

We have two nodes managed by separate RNMs. GNM has the complete topology and is correctly representing the link between these nodes with respective interfaces.

However, the connecting interfaces are not considered as such by RNMs because they have no knowledge on the opposite node.

Since interface monitoring policies are applied by RNMs, the interfaces forming the described connection don't have monitoring policy for "Connected" interfaces applied.

In such cases GNM must be able to push a "Connected" flag to RNMs so they can apply appropriate monitoring policies on interfaces that are connected outside of their managed topology.

When will NA Satellite 2019.05 be support Suse SLES 12, like NA core already does?

gero_1 — Mon, 21 Oct 2019 12:55:22 GMT

Since 10.30 till the latest version of NA Satellite, 2019.05 SUSE Linux Enterprise Server 11 SP3 (or later service pack) is supported, 12 is not.

The NA Core is supported on SLES 12

See for example https://docs.microfocus.com/itom/Network_Automation:10.50/Install/Support_Matrix/1.00.0_Requirements#filename.7C

Now SLES 11 support will stop END 2019

When will be the NA Satellite 2019.05 be supported under Suse 12 as well?

PerfSPI Bus adapter must trigger health alarm before it stops to write data

Vesselin Kotaro — Sun, 20 Oct 2019 17:38:52 GMT

Currently PerfSPI Bus adapter and PerfSPI Custompoller Bus adapter stop writing metrics after the metrics export folder reaches some predefined size (~1GB by default). This is also the time when alarm is triggered and NNMi health changes to Minor. When NNMi stops writing metrics, performance data is lost.

Proposed solution:

Threshold for PerfSPI bus adapter and PerfSPI Custompoller bus adapter alarms triggering must be configurable to a percentage of the specified folder capacity. This will allow application administrators to have adequate time for reaction without losing important performance data.

Add functionality to tc_tools script to also export Device Access Settings

Chris_Powers — Fri, 18 Oct 2019 14:18:59 GMT

Hello,

Add function to tc_tools / option #2 to also export out Device Access Settings.

Add another column for this data and within each "cell" just list the various settings for that specific row.

This allows us to export the settings for archival and change tracking.

This would work for bother device.csv and network.csv.

Thanks,

Chris

Develop an automation process that will properly install/uninstall provided HPNA hotfixes

bigdogw2x4 — Thu, 17 Oct 2019 18:44:26 GMT

Today we have to manually install or uninstall provided hotfixes in HPNA.. If the hotfixes get out of order, due to other team members receiving a solution before yours, we have to manually uninstall them, then install them in the correct sequence. This is not only risky but very cumbersome, because if there are rcx or configuration files that were updated as part of the hotfix install, we have to back those out as well..

As depicted in the example below (all cases submitted within a few days of each other):

Team member Johnny submits a case for an issue and CPE provides a hotfix(hf168070) solution

Team member Jimmy submits a case for an issue and CPE provides a hotfix(hf168065) solution

Team member Sally submits a case for an issue and CPE provides a hotfix(hfQCCR1B168172) solution

The problem now is that Sally may get her solution first and get it implemented, then Jimmy implements his, followed by Johnny. But Sally's solution is a beta and has to be uninstalled and the final hotfix must be installed. Here is where the problem begins...... And the sequence is in question........

We need an automated way to install hotfixes in HPNA. A script that will look at the system, capture what hotfixes we have installed, verify the hotfix to be install and determine the proper order; make the necessary uninstalls, file changes, etc and log the changes so they can be reviewed if there are issues.

Traffic Path view throwing not friendly errors when loading the analysis panel

SergeyPankratov — Wed, 16 Oct 2019 00:18:42 GMT

The case was classified as an idea due to complicated code changes - QCIM1B169761 Traffic Path view throwing errors when loading the analysis panel

When the Traffic path includes a node which is not in NNMi topology selecting a connection in the path results in the exception as below. It should be friendly message something like "connection is not available because one node is not in NNMi topology". The error is displayed in Analysis pane but also in logs. 2019-05-13 14:54:49.933 INFO [com.hp.ov.nms.ui.framework.analysispanels.PanelDataProcessor] (tomcat-exec-1956) Could not add analysis summary data from provider nms-ui:nnmCoreAnalysisPaneDataProvider: Unable to parse idStr "10.xx.yy.zz" for entityMetadata:Node: java.lang.IllegalArgumentException: Unable to parse idStr "10.xx.yy.zz" for entityMetadata:Node at com.hp.ov.nms.ui.framework.util.ObjectModelUtils.parseIdentifier(ObjectModelUtils.java:1656) at com.hp.ov.nms.ui.framework.util.ObjectModelUtils.parseEntityHolder(ObjectModelUtils.java:1674) There are more exceptions, I am uploading the logs as well. Let me know if something else is needed.

Abillity the modify the nps graphs layout

Ron — Mon, 14 Oct 2019 11:04:34 GMT

Abillity the modify the nps graphs layout Reports with line graphs can be hard to read when multiple line are plotted and the time (x-as) is week, month. Moving the legend from the right side will increase space which can be used for the graph. Our network department uses the reports for troubleshooting purposes, and analizing "long term" graphs can be challenging.

LDAP AD in NNMi 2018.11 or later - create a wizard or on screen interface to configure

UTBrandon — Thu, 10 Oct 2019 20:11:01 GMT

Your team created a gui / web page to configure clustering
Could you do the same for Active Directory integration?

LDAP/AD is too difficult to configure in NNMi.
It took me 5 mins to fill in the gui boxes on OBM 2019.05 but support still cannot after 2 months figure out what is wrong with NNMi attempting to use active directory ldap.

Options:
A.) Rework the LDAP/AD module to be easier to work with

B.) Rework the LDAP/AD config files to match the same settings asked for in OBM Authentication Management

C.) Create a web gui like NNMi Cluster Wizard to configure, connect, and test connection to AD.

-Brandon

Cisco Meraki monitoring via NNMi

nareshkumar1985 — Wed, 09 Oct 2019 20:07:30 GMT

Integration/Monitoring solution required from Microfocus on how to monitor CISCO Meraki devices using NNMi. Since the AP's are using dynamic IPAddress we cannot monitor using NNMi. This has become a change on the monitoring side where we cannot leverage the NNMi application.

Regards,

Naresh

NA Event Reporting Enhancement

Chris_Powers — Tue, 08 Oct 2019 17:09:39 GMT

Hello,

We've had a few support cases recently where we are finding inconsistent behavior in how (skipped) events are reported. Some task types have|had reported them as successful, others currently report them as failed.

This inconsistent handling makes reporting very difficult to do. Just looking at the home page showing events, one would think it is consistent, but it is not.

Our IE is has three options:

1) Do not report skipped task types as either successful or failed - leave them out of event reports.

2) Report skipped task type events as skipped events. Just like successful or failed. It is separate.

3) This would include either option 1 or 2 plus If it is critical for clients to be able to categorize events in the same way (skipped = successful, skipped = failed), provide a RCX line that will do this, so not all clients are forced into this behavior.

This behavior should have been documented somewhere, but as far as we can tell, it isn't. Hopefully going forward, it will be so when the behavior / handling of one task type is different than the other, clients will know about it and if possible, be able to avoid it.

Regards,

Chris

InterfacesDownInNode event

ramesh9 — Tue, 08 Oct 2019 05:22:55 GMT

Dears

We are monitoring required interfaces and we are seeing InterfaceDown incident for that interface.

When few interfaces are down, NNM state poller changes node status to Minor because of few interfaces are down in node.

Is there any way to over-ride this behavior.

If we have thousands of nodes and if more than 500 nodes are having minor status, we are not sure whether minor status is because of few interfaces down in node or because of other issues.

Please provide an flag in NNM configuration file if any customer does not want this InterfacesDownInNode status for any node.

Future Software Releases packaged as RPMs

Chroneh — Mon, 07 Oct 2019 16:50:55 GMT

Hello,

I work for Cerner, a large corporation with many IT assets. We have a Federal presence as well as non-Federal.

In our Federal space, we are required to remediate vulnerabilities quickly and sufficiently.

With that, the Nessus scanner found a vulnerability I wanted to raise here: 33851

https://www.tenable.com/blog/detecting-manually-compiled-network-daemons

I am requesting that all future software release be packaged as an RPM as well as traditional methods too resolve this current Vulnerability. Without this, this vulnerability will be present in all Federal systems with this solution.

Edit system reports

OpenLine — Mon, 07 Oct 2019 13:48:27 GMT

Hi Support,

Is it possible to make it possible to edit system reports the same way as it is possible to edit user reports?
At this moment we want to make reports which need to be accessible for our whole team (that's why we need system report) but we want to change the customer (different partition) every time we run te reports.
We don't want to create a lot of reports for each different customer because this way we have to create a new report once we have a new customer (which is a lot). The power of the report should be that it already exists and saves us the time of doing the search again for each new customer.

NA-Run specific policy(s)

pabharat — Fri, 04 Oct 2019 23:57:26 GMT

under "policies-policy tasks - check policy compliance" looking for a way to select a specific policy to test new policy.

Today have to disabled all other policies and run policy check for faster response.

NA - exempt device group for given time

pabharat — Fri, 04 Oct 2019 22:25:15 GMT

Looking for a way to exempt device group for a given time. Can exempt a individual device but sometime you need to exempt specific model/Os for given time. Can exempt device group too but need a expiry date on exemption, don't want it to seat their for always.

NOM- Uniformity between product lines - NNMi and NA

pabharat — Fri, 04 Oct 2019 22:08:20 GMT

Configuration of LDAP, loggers are different in NA and NNM. Report outputs are different, layout are different. looking for standardization across all NOM components. Missing suite feeling.

NA- Use NA as proxy for SSH interactive ( putty) sessions

pabharat — Fri, 04 Oct 2019 20:34:06 GMT

looking a way to use NA as SSH proxy in putty so everyone only ( indirectly) use NA to ssh any network device.

so all sessions saved in Putty on engineer system but use NA to login to network devices, so all network devices has ACL to allow ssh from NA IP address and some backup IP for emergency.

today it is two step process -

1. SSH to NA on port 8022

2. than use "connect" command from NA

Looking to bypass 1 step and if NA doesn't have device in inventory it should deny ssh to it.

This ensure all devices are in NA and avoid surprises.

NNMi - launching multiple windows/tabs

pabharat — Fri, 04 Oct 2019 19:53:49 GMT

Multiple windows and tabs get opened upon clicking different objects in NNMi and SPIs; When clicking an item - it should be opened in same window. This makes it difficult to manage ; Often have to click save in different windows - hard to keep track!

NOM - Inegrated NNMi and NA dashboard

pabharat — Fri, 04 Oct 2019 19:51:17 GMT

Looking forward for one single dashboard showing policy violation, software version compliance, CPU, memory, disk and other monitored ( custom poller collections) thresholds status, schedule outages, node status.

NA - New rule should show only applicable rule conditions as per selected device family/driver

pabharat — Fri, 04 Oct 2019 01:12:01 GMT

Under "Policy - New Policy - New rule" Once device family selected, NA should only show applicable rules under "rule conditions". it makes it faster to select and less prone to mistakes

Looks like defect.

NA - Add custom compliance policies in NA dashboard

pabharat — Fri, 04 Oct 2019 00:48:09 GMT

Looks like defect. If we are not able to add custom policies in NA dashboard, it never reflect true status of network.

NA - Check Policy Compliance - Task result should show task status and not compliance status

pabharat — Fri, 04 Oct 2019 00:22:56 GMT

This looks like defect. When we run "policies - policy tasks - check policy compliance" result details shows compliance status not the task status. its failed means non compliance, it should be failed if NA not able to test the compliance. succeeded should shows how many devices NA was able to check for compliance. skipped should tell how many devices were not tested as no policy match them.

So network engineer can fix access or rule issues.

Compliance status is available in reports.

NNMi- Too bulky and manual integration between different components

pabharat — Thu, 03 Oct 2019 23:51:06 GMT

Too many system/VM needed to install NOM suite ( even without DR) and need manual integration between all of them. Must reduce VM requirements and automate installation along with integration.

NNMi-Visio export unreadable

pabharat — Thu, 03 Oct 2019 23:36:18 GMT

With 950+ devices, exported Visio is totally unreadable and unmanageable. and of no use.

tamaño de reportes al momento de exportar

microuser19 — Thu, 03 Oct 2019 23:19:57 GMT

cognos es de IMB, entonces no pertenece a microfocus y al momento de querer exportar los reportes, estos cambian de tamaño y se muestran diferente que en el web

NNMi - Schedule auto discovery at a given time

pabharat — Thu, 03 Oct 2019 23:16:16 GMT

Need to schedule discovery at a given time as per local business off hours.

Currently discovery in NNMi is configurable to duration between 2 discovery cycles (like 24hrs). Cannot schedule to be run at 1 am

NNMi - Too many scripts and CLI interaction

pabharat — Thu, 03 Oct 2019 22:37:48 GMT

NNMi needs explicit configuration to be done in OS /CLI, like - SMTP, Certificate exchanges, log level settings, LDAP, etc. It should be more GUI based.

NA - Policy complaince Report - differentiate between non complance and check fail devices

pabharat — Thu, 03 Oct 2019 18:50:06 GMT

Device may have following three conditions -
1. compliance - Yes/No
2. NA not able to execute the diagnostic command on device-reason could be command failed or access failed.
3. no compliance rule applicable to dive family/driver

NA report on policy compliance should reflect right status. should not declare device in last two conditions as non compliant."

Today report doesn't reflect actual compliance status.

NA - set current image as secondary boot image

pabharat — Thu, 03 Oct 2019 18:39:59 GMT

When upgrading network devices via NA, there is no option to set current image as secondary boot image as backup in case device fail to boot with new uploaded image.

NNMi SNMP Trap - add information from custom attirbutes in table

pabharat — Thu, 03 Oct 2019 00:27:02 GMT

Add info from "custom attribute" to SNMP trap table. NNMi has accurate information about trap ( known/unknown) but shows only under "custom attributes" only not in SNMP trap home page table. This will make it easier to search for specific issue and analyze.

NNMi SNMP traps/Incident browser - add make/model/OS info

pabharat — Wed, 02 Oct 2019 23:49:39 GMT

Under "Incident browsing - SNMP Traps/Incidents" add device make/model/OS info for quick analysis of traps. It will help in correlating traps/incidents to specific model/OS and help to resolve the issue.

Allow additional Wireless Access Point attributes to be replicated to OBM/RTSM/UCMDB

j_h_1 — Tue, 01 Oct 2019 17:55:59 GMT

We have NNMi 2018.11 that has "OMi/UCMDB Topololgy Integration" configured to send topology data to OBM 2018.05. We recently added Cisco Wireless Controller into NNMi and saw that all its WiFi Access Points were also created as "Chassis" items. These APs are imported into OBM as "HardwareBoard" CI Type. However, one of the key attributes is not getting populated in OBM: Model Name. Is there a way to enable NNMi to send Model Name value to OBM so that we can search for it in OBM/RTSM, or configure OBM/RTSM to properly import "Model Number" information from NNMi?

Need to send Management IP and Interface IP Addresses to NPS

Monojit Kundu — Sun, 29 Sep 2019 13:44:27 GMT

Brief Description:

There is requirement to get the Management IP Address and Interface IP Address for the associated interfaces in the report in Component Metric and Interface metrics report.

Benefits / Value:

It will help to get the IP Addresses along with hostname, CPU, Memory and interface details on the same report.

Design details:

For Component Metrics we will require the Management IP and for Interface metrics we will require interface IP Addresses.

Administrator ability to disable User Logins and Stop the NA API Process during App Maintenance

bigdogw2x4 — Fri, 27 Sep 2019 11:45:54 GMT

In addition to Enhancement 1668783 (Task Scheduler in NA needs ability to be paused to stop new tasks from running so that the application can be brought down more gracefully. Today it is difficult to time the shutting down of the application, Users can launch tasks at anytime and API tasks can be run anytime. Additionally it would be nice to pause before shutdown wen tasks are not running so that after restart administrator can check health and if everything is clean remove the pause, this way jboss_wrapper.lod is not flooded with tasks at start up, this would make it a lot easier to validated the application came up clean.);

The NA Admins need the ability to disable user logins and stop the NA API Process during application maintenances. On the Admin Page, under the Start / Stop Services having an option to disable user logins and ability to stop / start the NA API process would be essential during application maintenance windows..

There is not a global way to notify logged on users that we are about to shutdown the application for maintenance. Allowing the Admins to disable logins, keeps users from access the application and having the ability to stop and start the api process (used by other applications to make api calls to NA), would keep other tasks from starting up.

Bidirectional event interface to Micro Focus Service Manager needed

Heinz Nisi — Thu, 26 Sep 2019 07:04:46 GMT

NNM currently does not support a direct incident forwarding to Service Manager.

Autodiscovery rules improvement

Seba — Wed, 25 Sep 2019 06:07:18 GMT

For a specific zone of our network we need to discover only devices following a "x+16" rule in order to exclude any other IP from the same range, like below:

include 10.81.144.[4,20,36,52,68,84,100,116,132,148,164,180,196,212,228,244]
include 10.81.145.[4,20,36,52,68,84,100,116,132,148,164,180,196,212,228,244]
.......
include 10.81.158.[4,20,36,52,68,84,100,116,132,148,164,180,196,212,228,244]

Since NNMi doesn't allow this type of discovery rule, I put an entry "10.81.144.0/20 - Include in rule" followed by hundreds of individual IPs of "Ignored by rule" type (example below).

10.81.144.0/20

Include in rule

10.81.144.177

Ignored by rule

10.81.144.193

Ignored by rule

10.81.144.209

Ignored by rule

10.81.144.225

Ignored by rule

This approach isn't elegant at all and involve a lot of manual work.

It would be very useful to could use the discovery rule as specified above, specifying some specific IPs from a range to be discovered.

Thank you.

Mask User credentials in Telnet/SSH Sessions for copy to FTP.

Steve_281 — Tue, 24 Sep 2019 00:46:25 GMT

Perceived Security Risk.

When connecting to a device and using the CLI copy command that contains user information to an FTP destination, the information is stored unmasked in the Telnet/SSH session logs.

Using a command such as: copy running-config ftp://username:password@<Address>

The entire command is logged. In this particular case, the username and password are visible to users that have access to the Device Session logs.

Discover and monitor VxLAN

Heinz Nisi — Mon, 23 Sep 2019 08:46:16 GMT

VxLAN is extensively used in enterprise networks and is also an essential part of SDN fabrics.

There is a big gap in NNM in that area and discovery as well as monitoring and performance mgmt is needed.

NNMi - QA SPI - convert microsec to millisec

ketans — Fri, 20 Sep 2019 14:34:38 GMT

Product: NNMi/QA SPI

currently, QA (Cisco IPSLA Probe) indicator RTT (microsec) is converted to RTT (millisec). Please also convert Two Way Jitter (microsec) to Two Way Jitter (millisec).

NNM-OBM integration with guaranteed delivery

Panhans — Fri, 20 Sep 2019 13:53:15 GMT

NNM and OMi as products of the same vendor, in the same portfolio should be integrated in a way to address enterprise reliability requirements.

As of now the current OOB integration is SNMP based (async communication approach) which does not guarantee NNM events forwared and received in OMi. Thight integration with the meaning of its words is a crucial Operations Bridge requirement based on the IT4IT Reference Architecture. NNMi/OBM integration is not a rare or special use case – it is THE standard ITOM use case.

There should be no need to develop custom code to solve this topic in a real HA setup.

Requested Solution:

Script to pull incidents from NNMi (policy to poll (pull) incidents from NNMi periodically)
OOB integration script will be invoked by OpsConnector.
OOB integation script will connect to NNMi and pull the incidents from the last polled interval

Pros: If there are incident bursts, this approach can handle better scale.If the OpsConnector is deployed in a cluster, there will always be one active connector which will take care of polling from NNMi.

For the implementation it needs to be considered, that NNM runs as HA setup eventually without Load Balancer. That means the script needs to implement the logic to switch between 2 url’s for the interface used for pulling.

Kind regards,

Thanx for your support

NA: Add additional detail to device group search

Chris_Powers — Fri, 20 Sep 2019 13:07:54 GMT

Hello,

We'd love to see a couple details added to the device group search:

1) Add option to see if the group is | is not | any referenced in any scheduled task

2) For the filters where you can check to see if a group is referenced in or not in something, we'd like to see the details in the result (example: What change plan is the group referenced in, what Policy is the group referenced in, etc).

Thanks,
Chris

Manage Backplane for Cisco ISR/ASR

Cédric MELLON — Wed, 18 Sep 2019 15:37:23 GMT

Hi,

I was surpised that the monitor of backplane was not working on my ISR 4321.

I did some research, and it's quite easy to have it working :

(100 * (ceqfpThroughputAvgRate / ceqfpThroughputLicensedBW))

Here I'm considering real uage against License (not Physical limit).

I can't have this collect working as objects are Counter64 and used as Unsigned64 (no delta to be done).

I think those objects are the same for most ISR/ASR models.

Some exemple values for this expression:

ceqfpThroughputAvgRate / .1.3.6.1.4.1.9.9.715.1.1.8.1.5.9001 = Counter64: 1294715

ceqfpThroughputLicensedBW / .1.3.6.1.4.1.9.9.715.1.1.8.1.1.9001 = Counter64: 50000000

=> 2,58943% of usage expected

# Other usefull/interesting values:

# Refresh interval of ceqfpThroughputAvgRate (set on device configuration) :

# ceqfpThroughputInterval : .1.3.6.1.4.1.9.9.715.1.1.8.1.3.9001 = INTEGER: 300

# Threshold set on the device (for traps, but traps are bad ;-D)

# ceqfpThroughputThreshold : .1.3.6.1.4.1.9.9.715.1.1.8.1.4.9001 = INTEGER: 95

# Status of license utilisation :

# ceqfpThroughputLevel : .1.3.6.1.4.1.9.9.715.1.1.8.1.2.9001 = INTEGER: 1

# This object represents the current throughput level for installed throughput license.
# normal (1) - Throughput usage is normal
# warning (2) - Throughput usage has crossed the
# configured threshold limit
# exceed (3) - Throughput usage has exceeded the
# total licensed bandwidth

Finally, I'm using ceqfpThroughputLevel for now to manage my device (1:OK else NOK), as I can't work with Couters That are Unsigned in Custom Collects ... ;-/

HTH for some people, and that will be considered !!!

Cédric.

Display link usage on map

Quentin DSM — Wed, 18 Sep 2019 13:48:35 GMT

Like other monitoring tools, several customers are asking for having interface usage displayed directly on network maps. It would be greate to enhance map display with link metrics.

Quentin