SolarWinds Hybrid-Cloud-Observability-Network-Monitoring - Hybrid Cloud Observability Network Monitoring Exam

If the web console shows a router as “down” but it is actually operational:

ICMP is blocked: If the polling engine cannot ping the device, it will be reported as down.

SNMP is blocked: If SNMP polling fails (for devices polled via SNMP), detailed data and status cannot be retrieved, resulting in a down state.

Agent connection issues may apply for agent-based monitoring but are not typical for network routers. Node dependency configuration could affect child node status display but would not cause the parent node to show “down”.

SolarWinds platform allows for customizing threshold behavior to reduce false positives and tune alerting sensitivity. The three primary customizable threshold settings are:

Single poll: A threshold is triggered immediately if the value breaches the limit in a single polling cycle.

X consecutive polls: The threshold must be exceeded in X consecutive polling intervals before being considered breached.

X of Y polls: The threshold is triggered if the value exceeds the limit in X out of Y most recent polls.

" X concurrent polls " is not an available threshold customization in the SolarWinds platform.

Device Studio in SolarWinds allows you to build custom pollers for several device-level metrics. According to the SolarWinds Administrator Guide:

Device Studio can be used to create pollers for multi-CPU/memory, single CPU/memory, and VLAN details. These templates allow you to monitor resource usage and VLAN assignments.

" You can build templates for node details, but those are standard node properties, not supported by Device Studio pollers. "

The official SolarWinds documentation specifies that the minimum RAM requirement for setting up log collection (Log Analyzer/LA) in Hybrid Cloud Observability is 16 GB. This ensures optimal performance and stability for log collection, processing, and storage within the SolarWinds environment.

Exact Extract from Official Guide:

“Minimum hardware requirements for Log Analyzer and log collection: 16 GB RAM, quad-core CPU, and sufficient storage depending on log volume.”

— (Log Analyzer Administrator Guide, “System Requirements” section)

For secure syslog (Syslog over TLS), the standard port used is TCP 6514. SolarWinds Log Analyzer and Platform listen on TCP port 6514 for secure syslog messages.

Exact Extract from Official Guide:

" Log Analyzer supports receiving secure syslog messages over TCP port 6514, in accordance with the RFC 5425 standard. "

— (Log Analyzer Administrator Guide, “Syslog Configuration” section)

SolarWinds Log Analyzer supports secure syslog forwarding using the TCP protocol. The industry standard and the default port used for secure syslog (Syslog over TLS/TCP) is port 6514. This is referenced in SolarWinds documentation where it specifies:

" For secure syslog forwarding, Log Analyzer uses TCP port 6514, which is the default for syslog over TLS, as defined by RFC 5425. "

This ensures that log data is encrypted during transmission, enhancing security over the default UDP port 514 (which is used for non-secure syslog).

The Universal Device Poller (UnDP) allows administrators to define custom SNMP OIDs for statistics (like UPS battery status) that are not natively polled. You can assign a new UnDP to an existing node to monitor additional values such as UPS battery status, provided the device supports the necessary OID.

Device Studio is designed to enable support for complex devices and can poll multiple OIDs as part of a single custom poller definition. While Universal Device Poller (UDP) is also used for custom SNMP polling, it is generally limited to a single OID per poller. Device Studio is intended for use cases that require combining and correlating multiple OIDs for richer, template-based device monitoring.

SolarWinds Log Analyzer and Hybrid Cloud Observability support log collection from current, supported Windows operating systems, such as Windows 10 (workstation) and Windows Server 2019. Older or unsupported versions like Windows Vista or Server 2012 may not be supported.