November 2023 - observium - lists.observium.org

Security Questions
by Wilkinson, Matthew 27 Nov '23

27 Nov '23

Hello, I am deploying Observium into a secured environment and I've a few questions. * What security measures are in place to protect subscription SVN branch? * Does SVN do any checksums or hashing of the code after it is checkout to the client to ensure no malicious attempts were made in transit? * Is there a contact name and email we can document in cases where we need to get direct support? * Is there a regular notification mechanism for updates to Observium? E.g. via the mailing list or blog post? In other words, how do we find out about new security patches? Thanks for any and all help. Matt

1 0

Recover dashboard and alerts
by Chris James 26 Nov '23

26 Nov '23

We recently had to rebuild our observium server. Of course we lost the custom dashboards and alerts. Everything in the old observium directory was backed off. Can we recover the dashboards and alerts from the old directory? Chris James Vessel Production Systems Manager Infrastructure & Support

2 2

snmp syslocation dynamic geolocation
by Chris James 26 Nov '23

26 Nov '23

Does anyone know a way of integrating dynamic positioning into snmp? Usually you put the location in to syslocation attribute in snmpd.conf file. We have vessels which move about and wondered if there was away of using dynamic positioning. We have plenty of GPS sources onboard so not a problem there. Chris James Vessel Production Systems Manager Infrastructure & Support Telephone: +44 1932 376000 Direct: +44 1932 376817 Mobile: +44 7768 480557 Email: chris.james(a)pgs.com<mailto:chris.james@pgs.com>

1 0

Graph is not showing for a recently added Arista DCS-7020SRG-24C2 Switch.
by Prasun Kumar Mitra (NOC) 24 Nov '23

24 Nov '23

Hello, I am using Subscription version of Observium for over 4 years collecting data on over 35 devices including switch, routers and servers, using it daily I have recently added a Arista switch where traffic graph is not showing [or not getting drawn] although i can see the realtime traffic graph and all other info collected by observium. i have tried removing and re adding it to observium but the graph didn't worked. Can anyone help me resolve this. Observium Version: 23.11.13173 (15th November 2023) Device/ Hardware: Arista DCS-7020SRG-24C2 Device Firmware: Arista EOS 4.30.3M Regards, Prasun Kumar Mitra System Admin Alliance NOC Alliance Broadband Services Pvt. Ltd. P-89,C.I.T Road, Kolkata-700014 [cid:d027dbdc-38bf-4029-89b9-c38dff80934c]

2 1

Teams webhook images green/red
by Ivo van Tulden 21 Nov '23

21 Nov '23

Dear members, We have a webhook link to Microsoft teams for alerting from Observium. This works except for the "green/red" icons for a new alert or a fixed alert. We get "🔥" and "✅" instead of the icon, we have seen this working once but can't get it the work anymore. Do you have a solution how we can fix this? Examples: 🔥[servername] [storage] Disk near full 90% ✅[servername] [storage] Disk near full 90% Met vriendelijke groet, Ivo van Tulden Technical Infrastructure Engineer - IT Department << Security is van ons allemaal >> **** DISCLAIMER: The information sent in or attached to this e-mail is for the addressee only. If this e-mail message is unclear please contact VLISCO by e-mail or telephone. Disclosure or reproduction of this information to a third party without prior agreement of VLISCO is not allowed. VLISCO does not accept any responsibility for the correct and complete interpretation of this e-mail nor for the time of its arrival. VLISCO cannot be held responsible for any claim resulting from negotiations and/or decisions made directly or indirectly based on information contained in this e-mail message. Vlisco Netherlands B.V. Binnen Parallelweg 27, 5701 PH, Helmond, The Netherlands. Chamber of commerce Eindhoven 50751492. Tel.: +31 (0)492 570922 Fax: +31 (0)492 570230 Visit our website: www.vlisco.com ****

4 3

help with a filter
by Arnoldo Vidal Bravo 20 Nov '23

20 Nov '23

Hi, When I look into a device (any brand), I can't view only ports down. [image: image.png] When I apply Hide UP, nothing happens, but Hide DOWN works fine -- Saluda cordialmente

1 0

OpenBSD uptime
by Bryan Fields 16 Nov '23

16 Nov '23

I've setup a couple hosts running openbsd and note that uptime as reported in observium (I'm on the latest stable 13154) is showing incorrectly. Last reboot is showing as Jan 1 1970 as well. Has anyone else seen this on OpenBSD? Thanks, -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

4 9

WMI Polling shows only 3 services
by Scott Kohnert 15 Nov '23

15 Nov '23

First time posting and hopes that someone can assist. Been using Subscription version of Observium for over 10 years collecting data on over 150 server farm using it daily and have been asked to now add monitoring of Windows Services. I started to do this via Probes and SNMP checks but due to the shear volume of services and servers involved this would be a tedious process. I would like to use WMI to monitor Windows Services as it appears to poll faster. Unfortunately I ran into an issue where it only displays 3 services at a time. Windows Server has over 200 services by default, I don’t plan on monitoring all of them but at least a couple dozen. Using WMI would be a much easier way to setup alerts if I could get the full listing to appear, which is where I am needing help. Here is my setup to reproduce the issue (generalized information used for security) Follow the WMI setup in the help documentation for my UB 22.04 server Global Settings > Polling > WMI (turn on) Server discovered via SNMP Open Properties of Server and edit WMI information (per server polling only no global settings) WMI Hostname = nacn_ip_TCP:hostname.domain.local[sign] WMI Domain= domain WMI Username = username WMI Password = password After a couple of minutes, I get the results of only showing 3 services not a full list. AllJoyn Router Service Remote Desktop Service Themes I have tried this on multiple servers and the same 3 services appear each time. I began to look into the code and run the wmic query on the web server itself using the following query wmic -U “domain\username%password” //ncacn_ip_TCP:hostname.domain.local[sign] “select DisplayName, Name, State, Status from Win32_Service” It gave me the full listing results and from what I can see this is where the issue lies. CLASS: Win32_Service DisplayName|Name|State|Status AllJoyn Router Service|AJRouter|Stopped|OK Application Layer Gateway Service|ALG|Stopped|OK Application Identity|AppIDSvc|Stopped|OK … Telephony|tapisrv|Stopped|OK CLASS: Win32_TerminalService DisplayName|Name|State|Status Remote Desktop Services|TermService|Running|OK CLASS: Win32_Service DisplayName|Name|State|Status Themes|Themes|Running|OK Storage Tiers Management|TieringEngineService|Stopped|OK … The first item of the WMI services is the AllJoyn Router Service, then about halfway down the listing it produces a different CLASS:Win32_TerminalService and the headers. Then it has Remote Desktop Services and starts again with CLASS:Win32_Service and headers again, and the third entry to be displayed Themes. Looking through the code I think the issue resides in the /opt/observium/includes/wmi.inc.php code and the function wmi_parse. This is the function that is used (from what I can back trace) for performing the parsing of the WMI call and populating the database with the WMI entries. But when running the mysql query for the services listing it only shows these 3 listed and not all the services that the manual query performed on the server displays. I would like to ask if someone can look into the WMI process and check the coding to allow the WMIC query to populate ALL the service results in the web site. As a separate test I also went into the Global Settings > Discovery > WMI AutoDiscoveryOptions and added in several services manually (list of 10) not including the Remote Desktop Services and the results I get on the Windows Services tab show the Remote Desktop Services. So the 2nd CLASS that appears for this service appears to be causing the issue. Any help is appreacited.

2 2

Aruba Instant AP wireless info? (clients, etc)
by Wolf Noble 14 Nov '23

14 Nov '23

howdy all! does anyone else have the problem of seeing no wireless stats in observium from Aruba instant APs? [= The contents of this message have been written, read, processed, erased, sorted, sniffed, compressed, rewritten, misspelled, overcompensated, lost, found, and most importantly delivered entirely with recycled electrons =]

2 1

Re: observium Digest, Vol 160, Issue 8
by Luis Olavarrieta 14 Nov '23

14 Nov '23

Is there something to use with the api? This email is confidential and / or may contain inside information. If you are not the addressee or authorized to receive your emails, you must NOT use, copy, disclose or take any action based on this email or any other information herein, please notify the sender immediately by reply this email and delete this email and its attachments.Privacy note a: www.wynnmex.com Este correo electrónico es confidencial y/o puede contener información privilegiada. Si usted no es su destinatario o no es alguna persona autorizada por éste para recibir sus correos electrónicos, NO deberá utilizar, copiar, relevelar o tomar ninguna acción basada en este correo o cualquier otra información incluida en el, favor de notificar al remitente de inmediato mediante el envío de este correo y borrar a continuación totalmente este correo y sus anexos. Consulta nuestro aviso de privacidad en:www.wynnmex.com El 14/11/23, 10:47 a.m., "observium-request(a)lists.observium.org <mailto:observium-request@lists.observium.org>" <observium-request(a)lists.observium.org <mailto:observium-request@lists.observium.org>> escribió: Send observium mailing list submissions to observium(a)lists.observium.org <mailto:observium@lists.observium.org> To subscribe or unsubscribe via email, send a message with subject or body 'help' to observium-request(a)lists.observium.org <mailto:observium-request@lists.observium.org> You can reach the person managing the list at observium-owner(a)lists.observium.org <mailto:observium-owner@lists.observium.org> When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: reporting (Ahmed Rahal) ---------------------------------------------------------------------- Message: 1 Date: Tue, 14 Nov 2023 11:01:51 -0500 From: Ahmed Rahal <arahal(a)fibrenoire.ca <mailto:arahal@fibrenoire.ca>> Subject: [Observium] Re: reporting To: Observium <observium(a)lists.observium.org <mailto:observium@lists.observium.org>> Cc: "observium-request(a)lists.observium.org <mailto:observium-request@lists.observium.org>" <observium-request(a)lists.observium.org <mailto:observium-request@lists.observium.org>>, Luis Olavarrieta <luis.olavarrieta(a)wynnmex.com <mailto:luis.olavarrieta@wynnmex.com>> Message-ID: <CAHaNNBUL=BOdS=QK5nmW3BF4DHtpSiO+sjMSdVKWm01HNUER6Q(a)mail.gmail.com <mailto:QK5nmW3BF4DHtpSiO+sjMSdVKWm01HNUER6Q@mail.gmail.com>> Content-Type: multipart/related; boundary="0000000000005bc91f060a1ee823" Hi Luis, Observium does not produce reports, but the API can provide you with most of the things you need for reporting. HTH, Ahmed. Le ven. 10 nov. 2023, à 09 h 22, Luis Olavarrieta via observium < observium(a)lists.observium.org <mailto:observium@lists.observium.org>> a écrit : > Hi Team: > > > > Is there a way to generate / export info to generate a monthly report? > > > > > > > > > > [image: signature_3057771358] > > > > This email is confidential and / or may contain inside information. If you > are not the addressee or authorized to receive your emails, you must NOT > use, copy, disclose or take any action based on this email or any other > information herein, please notify the sender immediately by reply this > email and delete this email and its attachments.Privacy note a: > www.wynnmex.com > > > > Este correo electrónico es confidencial y/o puede contener información > privilegiada. Si usted no es su destinatario o no es alguna persona > autorizada por éste para recibir sus correos electrónicos, NO deberá > utilizar, copiar, relevelar o tomar ninguna acción basada en este correo o > cualquier otra información incluida en el, favor de notificar al remitente > de inmediato mediante el envío de este correo y borrar a continuación > totalmente este correo y sus anexos. Consulta nuestro aviso de privacidad > en:www.wynnmex.com > > > > > _______________________________________________ > observium mailing list -- observium(a)lists.observium.org <mailto:observium@lists.observium.org> > To unsubscribe send an email to observium-leave(a)lists.observium.org <mailto:observium-leave@lists.observium.org> > -- Ahmed Rahal Administrateur de Systèmes / Systems Administrator *Videotron/Fibrenoire* - www.fibrenoire.ca A: 612 Rue Saint-Jacques, Montréal, QC H3C 1E2 ahmed.rahal(a)videotron.com <mailto:ahmed.rahal@videotron.com> Twitter: @fibrenoire

1 0