November 2023 - observium - lists.observium.org

is there an alert kill switch?
by Tony Guadagno 28 Nov '23

28 Nov '23

Hi, when my Microsoft servers patch monthly, they often reboot and that causes an alert that is unnecessary for me. Is there a way (maybe a script I could write) that would disable alerting? I am thinking about making a cron job that would run monthly (at the time I am patching) that would disable alerting...then maybe 2 hrs later, re-enable alerting. Is this possible? Tony Guadagno O +1 585 577 1003 C +1 585 703 6700 E tonyg(a)guadagnoconsulting.com<mailto:tonyg@guadagnoconsulting.com> [cid:image001.jpg@01D84DD6.FC9912E0]

4 7

Security Questions
by Wilkinson, Matthew 27 Nov '23

27 Nov '23

Hello, I am deploying Observium into a secured environment and I've a few questions. * What security measures are in place to protect subscription SVN branch? * Does SVN do any checksums or hashing of the code after it is checkout to the client to ensure no malicious attempts were made in transit? * Is there a contact name and email we can document in cases where we need to get direct support? * Is there a regular notification mechanism for updates to Observium? E.g. via the mailing list or blog post? In other words, how do we find out about new security patches? Thanks for any and all help. Matt

1 0

Recover dashboard and alerts
by Chris James 26 Nov '23

26 Nov '23

We recently had to rebuild our observium server. Of course we lost the custom dashboards and alerts. Everything in the old observium directory was backed off. Can we recover the dashboards and alerts from the old directory? Chris James Vessel Production Systems Manager Infrastructure & Support

2 2

snmp syslocation dynamic geolocation
by Chris James 26 Nov '23

26 Nov '23

Does anyone know a way of integrating dynamic positioning into snmp? Usually you put the location in to syslocation attribute in snmpd.conf file. We have vessels which move about and wondered if there was away of using dynamic positioning. We have plenty of GPS sources onboard so not a problem there. Chris James Vessel Production Systems Manager Infrastructure & Support Telephone: +44 1932 376000 Direct: +44 1932 376817 Mobile: +44 7768 480557 Email: chris.james(a)pgs.com<mailto:chris.james@pgs.com>

1 0

Graph is not showing for a recently added Arista DCS-7020SRG-24C2 Switch.
by Prasun Kumar Mitra (NOC) 24 Nov '23

24 Nov '23

Hello, I am using Subscription version of Observium for over 4 years collecting data on over 35 devices including switch, routers and servers, using it daily I have recently added a Arista switch where traffic graph is not showing [or not getting drawn] although i can see the realtime traffic graph and all other info collected by observium. i have tried removing and re adding it to observium but the graph didn't worked. Can anyone help me resolve this. Observium Version: 23.11.13173 (15th November 2023) Device/ Hardware: Arista DCS-7020SRG-24C2 Device Firmware: Arista EOS 4.30.3M Regards, Prasun Kumar Mitra System Admin Alliance NOC Alliance Broadband Services Pvt. Ltd. P-89,C.I.T Road, Kolkata-700014 [cid:d027dbdc-38bf-4029-89b9-c38dff80934c]

2 1

Teams webhook images green/red
by Ivo van Tulden 21 Nov '23

21 Nov '23

Dear members, We have a webhook link to Microsoft teams for alerting from Observium. This works except for the "green/red" icons for a new alert or a fixed alert. We get "🔥" and "✅" instead of the icon, we have seen this working once but can't get it the work anymore. Do you have a solution how we can fix this? Examples: 🔥[servername] [storage] Disk near full 90% ✅[servername] [storage] Disk near full 90% Met vriendelijke groet, Ivo van Tulden Technical Infrastructure Engineer - IT Department << Security is van ons allemaal >> **** DISCLAIMER: The information sent in or attached to this e-mail is for the addressee only. If this e-mail message is unclear please contact VLISCO by e-mail or telephone. Disclosure or reproduction of this information to a third party without prior agreement of VLISCO is not allowed. VLISCO does not accept any responsibility for the correct and complete interpretation of this e-mail nor for the time of its arrival. VLISCO cannot be held responsible for any claim resulting from negotiations and/or decisions made directly or indirectly based on information contained in this e-mail message. Vlisco Netherlands B.V. Binnen Parallelweg 27, 5701 PH, Helmond, The Netherlands. Chamber of commerce Eindhoven 50751492. Tel.: +31 (0)492 570922 Fax: +31 (0)492 570230 Visit our website: www.vlisco.com ****

4 3

help with a filter
by Arnoldo Vidal Bravo 20 Nov '23

20 Nov '23

Hi, When I look into a device (any brand), I can't view only ports down. [image: image.png] When I apply Hide UP, nothing happens, but Hide DOWN works fine -- Saluda cordialmente

1 0

OpenBSD uptime
by Bryan Fields 16 Nov '23

16 Nov '23

I've setup a couple hosts running openbsd and note that uptime as reported in observium (I'm on the latest stable 13154) is showing incorrectly. Last reboot is showing as Jan 1 1970 as well. Has anyone else seen this on OpenBSD? Thanks, -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

4 9

WMI Polling shows only 3 services
by Scott Kohnert 16 Nov '23

16 Nov '23

First time posting and hopes that someone can assist. Been using Subscription version of Observium for over 10 years collecting data on over 150 server farm using it daily and have been asked to now add monitoring of Windows Services. I started to do this via Probes and SNMP checks but due to the shear volume of services and servers involved this would be a tedious process. I would like to use WMI to monitor Windows Services as it appears to poll faster. Unfortunately I ran into an issue where it only displays 3 services at a time. Windows Server has over 200 services by default, I don’t plan on monitoring all of them but at least a couple dozen. Using WMI would be a much easier way to setup alerts if I could get the full listing to appear, which is where I am needing help. Here is my setup to reproduce the issue (generalized information used for security) Follow the WMI setup in the help documentation for my UB 22.04 server Global Settings > Polling > WMI (turn on) Server discovered via SNMP Open Properties of Server and edit WMI information (per server polling only no global settings) WMI Hostname = nacn_ip_TCP:hostname.domain.local[sign] WMI Domain= domain WMI Username = username WMI Password = password After a couple of minutes, I get the results of only showing 3 services not a full list. AllJoyn Router Service Remote Desktop Service Themes I have tried this on multiple servers and the same 3 services appear each time. I began to look into the code and run the wmic query on the web server itself using the following query wmic -U “domain\username%password” //ncacn_ip_TCP:hostname.domain.local[sign] “select DisplayName, Name, State, Status from Win32_Service” It gave me the full listing results and from what I can see this is where the issue lies. CLASS: Win32_Service DisplayName|Name|State|Status AllJoyn Router Service|AJRouter|Stopped|OK Application Layer Gateway Service|ALG|Stopped|OK Application Identity|AppIDSvc|Stopped|OK … Telephony|tapisrv|Stopped|OK CLASS: Win32_TerminalService DisplayName|Name|State|Status Remote Desktop Services|TermService|Running|OK CLASS: Win32_Service DisplayName|Name|State|Status Themes|Themes|Running|OK Storage Tiers Management|TieringEngineService|Stopped|OK … The first item of the WMI services is the AllJoyn Router Service, then about halfway down the listing it produces a different CLASS:Win32_TerminalService and the headers. Then it has Remote Desktop Services and starts again with CLASS:Win32_Service and headers again, and the third entry to be displayed Themes. Looking through the code I think the issue resides in the /opt/observium/includes/wmi.inc.php code and the function wmi_parse. This is the function that is used (from what I can back trace) for performing the parsing of the WMI call and populating the database with the WMI entries. But when running the mysql query for the services listing it only shows these 3 listed and not all the services that the manual query performed on the server displays. I would like to ask if someone can look into the WMI process and check the coding to allow the WMIC query to populate ALL the service results in the web site. As a separate test I also went into the Global Settings > Discovery > WMI AutoDiscoveryOptions and added in several services manually (list of 10) not including the Remote Desktop Services and the results I get on the Windows Services tab show the Remote Desktop Services. So the 2nd CLASS that appears for this service appears to be causing the issue. Any help is appreacited.

2 2

Aruba Instant AP wireless info? (clients, etc)
by Wolf Noble 15 Nov '23

15 Nov '23

howdy all! does anyone else have the problem of seeing no wireless stats in observium from Aruba instant APs? [= The contents of this message have been written, read, processed, erased, sorted, sniffed, compressed, rewritten, misspelled, overcompensated, lost, found, and most importantly delivered entirely with recycled electrons =]

2 1