As a first past / proof-of-concept, the only thing I’d like to do is start monitoring ping responses from 1,800 switches.
I started with the Discovery Configuration screen, adding some 150 networks with about 20,000 IP devices spread across them. I’ll sometimes get 100 New Suspect events on a given second, but what I’m finding is that the same IP is repeatedly discovered, “queued for a services scan”, but never getting scanned. Looking elsewhere in the event log, I see Node Added events happening every 120 seconds on the dot (minus unknown down-time, after which I restart OpenNMS to kick-start the service scan process).
In trying to speed up service scanning / node adding I made the following changes:
- In provisiond-configuration.xml I have tried various thread settings, currently running 310 Import and Write threads and 600 Scan and Rescan threads. (As I write this I’m thinking maybe I should drastically reduce the Rescan thread count).
- In poller-configuration.xml I’ve set status=“off” for everything except ICMP (and I just realized https).
At no point does top indicate any system load issues.
- What is the best way to add 1,800 devices (IP address, names, maybe a location field)? Just enter the addresses individually under “Create Discovery Scan” and enter names later on? (Is there a way to import a spread shit (or heck, even using SQL?)
- What is the fastest way to turn those entries into nodes and start monitoring only ICMP responses for them?
Thanks for your time and attention!