AdRem NetCrunch - NetCrunch

NetCrunch 9 Releases


Version 9.2.0 33 Features, 6 Fixes

(July 8, 2016)

Feature Release

New Features and Improvements

  • Users & Access Rights User accounts and access profiles has been redesigned.

  • Console Login Console requires logon and NetCrunch Administration right now.

  • Solaris Monitoring New monitoring engine and Monitoring Packs are available for Solaris monitoring now.

  • Integration Module Integration Profiles and Actions for: IFTTT, PagerDuty, Zedesk, Freshdesk, Trello, Slack, Twitter, HipChat actions.

  • Event Details New window for better alerting control.

  • SNMPv3 Context NetCrunch supports using context field

  • SNMP String Value Monitoring  NetCrunch supports alerts based on string SNMP value conditions: equals to,not equals to,contains, not contains,matches regular expression, change (any to any)

  • Layer 2 Cisco Monitoring of Layer 2 segments on Cisco using SNMPv3

  • Disk Monitoring Extended monitoring of disks on Unix family systems

  • Improved Performance Views Bar chart has been improved and uses the same color schemes like other chart types. Additionally, small triangle next to the value shows the latest change direction. Charts support SNMP tick unit conversion to standard time units (seconds, milliseconds). All charts perform animations for better change indication.

  • Sensor Testing You can test it's configuration by using new Test button

  • Monitoring Packs Added packs: HP ProCurve Switch, Sophos Antivirus Server, vCenter Server 6.0, Cisco ASA VPN Tunnels Statistics, Cisco Unified Communications Manager, Java Application Server (SNMP), Veeam Backup and Replication Server, Barracuda Firewall, Generic Printer

  • Web Messages Another tab in the external events window. Messages can be send using REST API using HTTP protocol from any application.

  • Extended Trend ViewerNew chart types and, scaling and customizing units.

  • Improved Report Charts Charts in reports supports range charts for better min/max and average presentation on a single chart

  • Monitoring Issues Windownbsp;New window allows easier reviewing and fixing all issue categories. You can select all nodes affected by the issue and fix it with one click.

  • Node Notes Window New window delivers better note management. Each note can be easily commented by NetCrunch users and can have labels and due date. Notes can't be deleted but you can archive them with single click.

  • Disable tasks auto popup Now you can switch off auto popup feature and only observe blue dot with number of tasks that require you attention.

  • New Filtering conditions Now you can create view for nodes having IP address assigned or not assigned.

  • (WebAccess) Node Properties Tab  Node properties are accessible in WebAccess in read-only mode.

  • (WebAccess) Monitoring Issues  Monitoring Issues are accessible from web access now

  • (WebAccess) Auto collapsing Atlas Tree  When no maps are available for the user (due to access rights settings) , the Atlas Tree is automatically collapsed.

  • SNMP MIB search improvement  You can use multiple words when searching MIB objects (i.e. cisco status)

  • Manage Monitoring Packs folders  You can rename and add new folders in Alerting & Reporting Settings window.

  • Atlas Configuration Wizard  New wizard helps you better manage automatic Monitoring Packs. You can disable rules and packs according to you monitoring preferences. Additionally, creating default notification scheme has been improved - you can to set actions on alert close and decide to get notifications only for critical alerts.

  • API Key Manager Allows to manage API keys for applications that need to send data to NetCrunch using REST API. Currently it can be used for two-way PagerDuty integration.

  • Credential Manager Managing monitoring credentials has been moved to separate window and is much easier now.

  • Remote Sessions Window It can be used to see all connected users and to terminate any connection.

  • GrafCrunch 2.6 New GrafCrunch version is based on stable version of Grafana 2.6. The most important feature for NetCrunch users is that you can now connect to multiple NetCrunch servers and create summary dashboards on a single screen.

  • NCCLI Command line utility for resetting admin password

  • Auto Close Local Console  Console run on NetCrunch server using remote access is closed automatically 3 minutes after user disconnected console.

  • NetCrunch Audit Pack  New Monitoring Pack for for monitoring NetCrunch login events including failed login attempts.


  • majorProblem with counter names not displayed after compiling a new MIB
  • majorIn some cases wrong time range was displayed in the trend viewer
  • majorIn some cases the secondary interface setting could be deleted
  • majorSome icon captions were incorrect
  • majorProblem with action time restriction
  • majorWebAppSrv stability fixes

Version 9.1.5 8 Fixes

(June 3, 2016)

Maintenance Release


  • majorProblem with SNMPv3 encryption settings caused by misplaced encryption types in editor.
  • majorOpenSSL updated to version 1.02h
  • minor Missing "Windows 10" node type after upgrading to 9.1.4
  • minor "Node is UP" improperly triggered after NetCrunch Server restart.
  • minor Sometimes NCIS process was causing high processor utilization.
  • minor WebAppSrv didn't restart properly in case of failure.
  • minor Web Page sensor wasn't properly handling SSL certificate errors.
  • minor Custom fields were missing in html email format.

Version 9.1.4 14 Fixes

(March 17, 2016)

Important Maintenance Release


  • criticalAfter editing alerting settings in version 9.1, and restarting the server, the settings could be lost. This build restores proper settings from the console cache.
  • majorOccasional date conversion error when collecting inventory data
  • majorSome windows performance (per second) counters could show invalid high values
  • majorSometimes Installer would hang on de-installing previous version
  • majorNetCrunch could flood some HP switches when monitoring interfaces
  • majorUpdated OpenSSL to version 1.02g.
  • majorFixed spontaneous authentication type change to "Custom Credentials"
  • majorNodes with name ending with digits could not be added
  • majorSNMPv1 traps have not been properly filtered
  • majorAdding XML specific character in Action Message was breaking the file
  • majorSometimes custom actions were deleted after upgrading older atlas version
  • majorBars in performance views were not colored according to color scheme
  • minorValues in Trend Viewer hint were displayed as 0.001 instead of 0
  • minorWebhook action now works with HTTPS

Version 9.1.3 5 Fixes

(February 24, 2016)

Bug Fixes

  • majorInstallation hang when IIS was running.
  • majorUpdated OpenSSL to version 1.02f.
  • majorSometimes time restrictions could be wrongly upgraded from version 8
  • minorWhen selecting icon for nodes some captions were wrong
  • minorSome Windows system versions were detected improperly as virtual machines

Version 9.1.21 Feature, 10 Fixes

(February 18, 2016)

Important Maintenance Release


  • Japanese Version Release

Bug Fixes

  • critical Memory overrun could happen in certain conditions and break NetCrunch service
  • critical Sometimes server could spawn too many processes
  • major Fixed problems on NetCrunch Server shutdown
  • major Fixed adding sensor counters
  • major NetCrunch always kept maximum number of threads for monitoring.
  • major Issues with SNMP View on some linux machines
  • major Fixed many layout and translation issues in localized versions
  • major Important performance and stability improvements
  • minor Fixed when map opened in separate window - widgets were not visible
  • minor Scan results could show confusing number of nodes in certain situation

Version 9.1.020 Features, 5 Fixes

(February 2, 2016)


  • Email Alert Sensor Trigger alerts based on an email sender, subject or body. Match content using regular expressions.

  • Mailbox Sensor Monitor mailbox authentication, activity, performance and size

  • Text Log Sensor (XE Edition) Parses text files and converts each entry into a list of properties which later can be filtered like any other type of log.

  • Text Parsing Expressions Parsing expressions allows you to describe how to parse external text data. You can use regular expressions or other patterns. Apache common log format is also supported.

  • New Action:Modify Custom Field You can change or clear the node custom field.

  • New Action:Change Node Monitoring Time You can control node monitoring time when an alert occurs.

  • New View:Responding Nodes with Pending Alerts The view contains nodes that are not down but have some alerts pending. The separate view shows all Unresponsive Nodes

  • Improved Dynamic Views Now you can create dynamic views on pending alerts and relative time expressions.

  • Event Log:Recently Resolved Views New event log views that allow you to see resolved issues within a selected time range. Followings views has been added: resolved after hour, resolved after day, resolved in less than 10 minutes.

  • Extended XML & JSON support Alerting actions now can use XML or data formats (write to file, run SSH script, run Windows script)

  • Support for 64bit interface counters Interface monitor supports 64bit counters if available.

  • Redesigned Message Format Editor The new editor is much easier to use and allows you to create custom formats.

  • Alert on Issue Trigger alert on monitoring issues. For example when authentication fails.

  • SSH Public Key Authentication Now you can choose to use passwords or public key authentication for SSH monitors (Linux, BSD, Mac OS X)

  • Set Web Page Sensors for multiple ports Now you can add multiple sensors with the same url but different ports when you run multiple HTTP servers on a single node.

  • Monitoring ESX Datastores Now you can set alerts on ESX datastore metrics. The datastore view is also available in the Node Status window.

  • Extended NetCrunch Service Restart Option You can schedule restart of NetCrunch service weekly at given time. You can also see when next restart is planned.

  • Multi-instance counters Use single counter definition to trigger and specify multiple instances at once. In this way you can selected disks to be monitored or interface or any other counter with instance.

  • Encoding Support for Syslog & Traps You can specify code page encoding for Syslog and SNM traps.

  • Performance Improvements Optimized processor usage for monitoring threads.

Bug Fixes

  • majorFixed Open Monitor CSV file format processing
  • majorNodes Switched to be "Secondary Interfaces" are now set to simplified monitoring mode.
  • majorConditional Alerts issue fixed (Event happened at least after...)
  • majorIt's possible to define "Pending" alert without closing event.
  • majorFixed problem with flow dashboard refreshing

Version 9.0.12 Fixes

(December 16, 2015)

Maintenance Release

Bug Fixes

  • major Fixed monitoring of HTTPS services
  • major Receiving some SNMP traps could make NetCrunch Server unstable (Premium XE only)

Version 9.0.0Initial Release

(November 02, 2015)

Initial Release

See what's new in version 9

NetCrunch 8 Releases


Version 8.7.31 Improvement, 7 Fixes

(September 08, 2015)

Maintenance release


  • Flow Server will automatically recognize data of NetFlow and sFlow protocols regardless of the port the data comes to.

Bug Fixes

  • major Monitoring Pack state in Node Status depends on pending events related to it.
  • major Significant memory consumption reduction and stability improvements
  • major Trend Viewer issue where viewer could stop responding in some situations
  • major Trend Viewer issue causing 100% processor utilization
  • major Updated OpenSSL 1.0.2d
  • minor Alert "Node should not be alive" did not work properly
  • minor Missing system types and domains for some servers in the details view.
  • minor Web Access used wrong colors for event states

Version 8.7.22 Features, 11 Fixes

(July 08, 2015)

Number of fix improving stability and fixing issues that came up with new features in 8.7.1.

Features and Improvements

  • Basic Http Sensor Added ability to check only HTTP header

  • Global Counters (Open Monitor and Flows) can be used by map widgets now

Bug Fixes

  • major issue where new flows did not appear sometimes
  • major issue with web access maps where nodes could not be clicked
  • major issue with sometimes broken map layout
  • major issue with SMS messages where information about node was missing
  • major issue with Connection Broker sometimes losing connections and passwords to servers
  • major issue if node was down the SNMP Location field was empty
  • major improved importing NetCrunch Atlases from older NetCrunch versions (7.x and older)
  • major auto-start option in Connection Broker couldn't be disabled
  • major issue related to Email Sensor (IMAP4/POP3) - content search event wasn't triggered
  • minor while console in automated full screen mode screen saver has to be disabled
  • minor decoding incoming flow frames (for both sFlow and Netflow)

Various other minor issues have been fixed.

Version 8.7.111 Features, 6 Fixes

(June 09, 2015)

Update Flow Server with sFlow and Cisco NBAR support, 2 New Sensors and Dashboard improvements...

New Features and Improvements

  • NetFlow/sFlow Complete update of NetCrunch Flow Server, with new analytics, sFlow support, custom application classification, Cisco NBAR support and more. Now all dashboards charts are clickable for drill down analysis. For instance you can click on the internet traffic peak, and see what type of traffic has caused the spike. Improved performance allows NetCrunch to handle up to 1M flows per minute.

  • Summary Dashboard Tiles about Monitoring Packs and Network Services are fully clickable, details about which nodes are affected are showed in popup after click.

  • Top Charts Dashboard Now you can compare trends for displayed values with one click.

  • Sensor Summary Sensor summary for sensor based monitors are available on summary dashboard and in node status window.

  • Automated Full Screen Flow dashboard can be added to display loop.

  • File over HTTP Sensor It can check file presence, file size or modification time. It also allows you to search the file content or it can be used for finding new text log entries.

  • Basic HTTP Sensor Sends simple HTTP requests like GET, HEAD or POST and checks the response code or search for text in response content. It supports regular expressions for text analysis. It also allows you to measure response time and response length.

  • New Event Log Views there are 8 new pre-defined event log views to display only Syslog or SNMP traps or Web Page/HTTP events and others.

  • SSH/Linux/OS X/BSD Added support for latest OpenSSH (> 6.7) implementations requiring stronger encryption.

  • Touch Screens Improved touch screen support in dashboards (reordering tiles, zooming)

  • Trend Viewer Selected trend line is now highlighted on chart.

Bug Fixes

  • majorProblem connected to widgets about displaying values for counters without instance.
  • majorAuto-Switch User Objects Consumption on long run.
  • majorAfter console lost connection (for example server is restarted) window layout is properly restored on multiple monitors.
  • minor Various Widgets stability and UX improvements.
  • minor Various fixes in map editing
  • minor Maps are centered now

5 Features, 5 Fixes

(April 28, 2015)

Graphical Data Widget for maps, Automated Full Screen and new email sensor...

New Features and Improvements

  • Map Data Widgets (7 types) allowing to display live performance data on maps

  • POP3/IMAP Email Text Sensor allowing triggering of alerts based on mail Subject and Sender fields.

  • New Monitoring Packs: Exchange 2013 Client Access Role, Exchange 2013 Mailbox Role

  • Automated Full Screen (Auto Switch View) - automatically switch between atlas views and view pages (map, summary, top charts) at full screen.

  • Added tooltips with data point highlight to all performance charts and other charts in the program.

Bug Fixes

  • majorFixed file and folder monitoring on local NC node when non empty credentials has been set.
  • majorFixed missing dates in performance reports
  • majorCustom fields parameters were missing from "Run windows program" action
  • majorFixed monitoring of Windows Event Log on NC server node
  • majorFixed displaying node performance view for nodes with thousands counters monitored
  • majorImproved performance of monitoring nodes with several hundreds interfaces

22 Features, 13 Fixes

(April 2, 2015)

Redesigned dashboards, NetApp support, Redesigned Event Log views and over 400 improvements...

New Features and Improvements

  • Event log database is now in Unicode format (data migration is required)

  • Faster Layer 2 Monitoring it is 5 times faster now. This decreases load on switches, especially these with a large number of ports

  • Redesigned and improved event log views and summary view

  • Added search ability to all node and event views

  • Improved and simplified selecting SNMP counters for monitoring

  • Webhook Action allows you to send REST requests as a response to alerts

  • Improved Alert Triggers can wait for given time before triggering alert (i.e. value must be over a given threshold value for 5 minutes)

  • Added 4 NetApp Monitoring Packs

  • Expanded Dynamic Views It's now possible to use all nodes' detail fields to create dynamic atlas views.

  • Improved Event Log View Event log hides confirmation events (events ending alerts) by default now, so you can better focus on alerts.

  • Improved Event Log View Alert duration is displayed for closed alerts

  • Full Screen Support Dashboards can be opened at full screen now (in console and web access).

  • Node Status UX Node Status window now shows the number of Pending Alerts in the header

  • New Top Charts View includes new tiles and displays recent values by default now. You can now zoom the display with up to 10 rows without scrolling.

    New Charts
    • Network Utilization total bytes on interfaces (for server and switches separately)
    • Disk IO Utilization (ESX, Windows)
    • Slow Responding Nodes (by PING check time)
    • Processes (CPU)
    • Processes (Memory and Virtual Memory)
    • Network Interfaces - % Utilization
    • Network Interfaces - traffic in/out
  • New Summary Dashboard displays much more information using the same screen space. The Dashboard can be zoomed to adjust to your screen resolution.

    New dashboard sections:
    • Monitoring Pack Status
    • Network Services Status
    • Histogram of alerts in last 24 hours
    • Pending alerts
  • Every created sensor has assigned reports and events by default now.

  • Trend zooming - is now possible in performance trend viewer.

  • Node Status UX window can be resized or maximized to full screen

  • New Node Performance View Old Counters view has been replaced with new Performance view showing current and last 24 hours

  • NetFlow You can click on top talkers in the NetFlow dashboard to see node menu (if node is in the Atlas)

  • Updated OpenSSL to version 1.0.2

  • Over 400 improvements and fixes overall

Bug Fixes

  • criticalNewly compiled MIB's had not been visible in console
  • majorRemoved many unwanted (false) alerts. Alerts fixed: node down on nodes that have never been monitored yet, connection reliability degradation alert was triggering improperly, processor queue length alert is now related to number of cores and is not influenced by spikes.
  • majorInstalling service NetCrunch service on domain account was confusing for many users, now NetCrunch installs and runs on a Local System Account. Users which want to monitor their network using a domain account can switch NCServer service settings to the desired account manually (the account must have admin rights to NetCrunch server otherwise program has no access to its own data and computer).
  • major According to Microsoft documentation, NetCrunch was displaying only "non wizard" marked counters. It's well known fact that Microsoft does not read own documentation and perfmon displays counters at its own discretion: NetCrunch will now do the same. All windows counter are available.
  • majorSNMP monitoring engine is now more forgiving to communication errors
  • majorProcessing some Japanese syslog messages
  • majorProblem with Web Access on IE running in compatibility mode
  • majorFree Disk space top chart did not show Linux/Mac/BSD volumes
  • majorDevice type of Linux devices has been reset to unknown improperly
  • minorNode caption format can be now changed in multi-selection mode
  • minorOccasionally, after some error during console load an empty layout could appear
  • minorFixed using ODBC driver to access NetCrunch event log data
  • minorFixed trend export to MS Access files

10 Features, 18 Fixes

(January 16, 2015)

Improved SNMPv3, UX improvements and stability fixes

Minor Release

This is strongly recommended update for all existing customers as it contains over 200 bug fixes and improvements.

New Features and Improvements

  • Improved performance of SNMPv3 monitoring (new optimized SNMP engine).

  • SNMPv2 is now the default setting and program uses bulk requests to lower network footprint.

  • Renewed WMI Tools

  • UX It is possible now to open node settings or execute tools directly from search results window.

  • Web Page Sensor - extended support for handling different login schemes (support for standard HTTP authentication and custom scripts).

  • It is possible now to export/import view template and use it for new views.

  • Alert & Report Settings - edit or delete user common alert definitions.

  • Improved handling of DNS queries

  • Many other UI improvements and fixes.

  • Overall stability and performance improvements.

Bug Fixes

The following issues have been fixed:

  • critical Windows Event Log monitoring in localized versions now works properly.
  • critical Windows Event Log fixed broken "like" support in queries.
  • critical Fixed problem of re-connecting some engines after server restart (ESX, Netflow).
  • critical Several server deadlocks fixed (causing server to emergency restart).
  • major Fixed memory leak in Administration Console.
  • major Problem with duplicated nodes should be resolved now.
  • major Problem of invalid login to Web Access resolved.
  • minor NetFlow charts were not displayed properly when server and remote console located in different time zones
  • minor Fixed editing alert actions inherited from multiple packs/policies
  • minor Fixed rare invalid assertion error in NetFlow Server
  • minor Fixed and updated trend export wizard (added support for MySQL 5.6)
  • minor Fixed improper message format used for speaking alerts (missing source node address and name)
  • minor Console could run improperly when started shortly after starting the server
  • minor (SysLog) Fixed processing process names of 32 byte length
  • minor Speak alerts action now works properly when "Do not disturb" mode is active.
  • minor Fixed adding multiple SNMP counters
  • minor Print preview window did not work properly in some cases
  • minor Missing pictures in program help fixed


4 Features, 4 Fixes

(November 14, 2014)

2 New Sensors and other improvements

Minor Release

New Features and Improvements

  • New Mailbox Sensor allows monitoring of email mailboxes (SMTP/POP3/IMAP)
  • New FTP/FTPS/SFTP file sensor for remote file and folder monitoring
  • Active Directory discovery can filter only infrastructure devices now
  • Routing map is automatically created after Atlas creation.

Bug Fixes

The following issues have been fixed:

  • minorEvent correlation for some sensors has been fixed
  • minorFixed displaying last 24h event in Web console
  • minorEvent "interface is up" brought back
  • minor Other minor issues fixed


5 Features, 17 Fixes

(September 19, 2014)

Stability Improvements, Bug Fixes and improvements...

This is strongly recommended update for all existing customers.

Minor Release

New Features and Improvements

  • It is now possible to discover infrastructure devices only
  • Added Services Discovery in node popup menu
  • Active Directory "Organizational Units" can now be used for nodes filtering and map creation.
  • Added option “Do not disturb” to the desktop notification window.
  • Warning about database size now depends on type of hard disk used. (HDD or SSD)

Bug Fixes

The following issues have been fixed:

  • criticalFixed event database stopping after backup of large database
  • criticalFixed memory leak in Unix/Linux monitoring process
  • criticalSNMPv3 performance improvements allow to handle large number of devices now
  • majorFixed disappearing custom map layout
  • majorFixed event generation in language versions (DE, FR, PL)
  • majorFixed action execution for sensor events (DE, FR, PL)
  • majorFixed problems with migration of the policy maps
  • majorFixed "Processor Queue Threshold" counter no longer generates false alerts
  • majorMonitoring Issues are now cleared when monitoring engine is disabled
  • majorSpeedup of loading Node alert statistics in node status
  • minor Max number of event's in Windows Event Log can be changed.
  • minor Fixed Save to file option in NCStatus on Windows 2003
  • minor Fixed Trend Viewer timescale issue
  • minor WMI tools now works for nodes in workgroup
  • minor "Disk Free Space" in performance counters is now visible.
  • minor Improved performance of report creation for large number of nodes
  • minor Over 100 other issues fixed


Version 8.1.63 Fixes

(July 7, 2014)

Maintenance Release

This is strongly recommended update for all existing customers. The following issues have been fixed:

  • CriticalOut of memory when importing data from NetCrunch 7.
  • CriticalOut of memory during backup of large number of daily trend files
  • MajorFixed performance issues when accessing SNMPv3 nodes

Version 8.1.5 2 Fixes

(June 23, 2014)

Bug Fixes

Maintenance Release

The following bugs and issues have been fixed:

  • MajorNo action when clicking on dashboard tiles.
  • MajorOverall performance and stability fixes

Version 8.1.4

(June 11, 2014)

Initial Version 8 Release

See what's new in version 8