- observium - lists.observium.org

Observium @ Ubuntu - - TLS v1.2 and TLS v1.3 is for communications between webservers and database servers ( different systems and machines )
by Ryan Tee 13 Apr '22

13 Apr '22

Hi We are concerned security between Observium that running in Ubuntu systems ( 18.04 and 20.04 ) How to check and confirm TLS v1.2 or above had been configured as default , for communications between webservers and database servers ( different systems and machines ) Do share us information if any comments. Thank you. Regards Ryan

1 0

Re: [Observium] ping only device monitoring
by adama＠observium.org 13 Apr '22

13 Apr '22

No one else is reading because at some point I accidentally replied directly instead of to the list 😊 But I did now! Adam. From: Tony Guadagno <tonyg(a)guadagno.org> Sent: 13 April 2022 17:54 To: adama(a)observium.org Subject: RE: [Observium] ping only device monitoring Adam, I separate list that is independent would be good also…I hope others reading this will voice their support!!!!!!!!!!!!!!!!! Thanks From: adama(a)observium.org <mailto:adama@observium.org> <adama(a)observium.org <mailto:adama@observium.org> > Sent: Wednesday, April 13, 2022 12:52 PM To: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: RE: [Observium] ping only device monitoring This is why we recommend the probe is attached to the Observium server’s own device entry in Observium. The ping-only host thing isn’t feasible in the existing devices paradigm, it would break the UI and a lot of other expectations about devices. Observium is 95% “showing data we got from SNMP”. The thing we’d likely create is a separate list of devices that didn’t support SNMP and didn’t actually interact with anything that currently exists in Observium, except probes, so we’d need a bunch of exceptions to the probe code to handle things with a device record and things without in the probes code. No one seems to ask much about it once we show them how to do the probes workaround, so we don’t look at it much. Adam. From: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Sent: 13 April 2022 17:22 To: adama(a)observium.org <mailto:adama@observium.org> Subject: RE: [Observium] ping only device monitoring Adam, I was able to get this all working, thanks for your help. Please excuse me if I am preaching to the choir but I do have some feedback. I want to start out by saying that I would love it if all devices supported SNMP, that would be ideal, but reality is that there are devices that will never have SNMP agents on them. In this particular case, it’s a banks ATM’s. For security reasons, SNMP will never be a feature for these devices. There are other examples as well, for instance, I also want to my ISP’s router so I can tell when I go down, are they down as well. So, ping only devices are abundant and persistent, they will not be going away. Setting up a probe will get me by, but there are several problems. The first is it seems you need to associate the probe with an existing host...so it looks like the probe is for that host (even though it is not). What happens if I delete the host...will the probes go away? Also, I have not yet seen a notification, but does the notification show the hosts name associated with the probe? If so, that will be confusing to techs who might not be aware they have to read further. What is really needed is the ability to add a device that is ping only and stand alone, not dependent on any other host. Obviously, all the info for that device would be unavailable except ping times but this would be much clearer. I think, given how important ping only devices can be, it should be a priority to get this right. Finally, let me say that I have worked in the past with MRTG and HP Openview and more recently with NagiosXI, PRTG and Shinken. Observium is BY FAR, the best of them. A ping only host is one of the few things that they all can do, but you cannot. Thanks for listening, if you want, I would be happy to put in a feature request. From: adama(a)observium.org <mailto:adama@observium.org> <adama(a)observium.org <mailto:adama@observium.org> > Sent: Wednesday, April 13, 2022 11:19 AM To: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: RE: [Observium] ping only device monitoring Same way you alert on everything else, it’s just another entity type, similar to status with ok/alert status https://docs.observium.org/entities/#probes Adam. From: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Sent: 13 April 2022 16:17 To: adama(a)observium.org <mailto:adama@observium.org> Subject: RE: [Observium] ping only device monitoring Oh, so you just pick a host in the pulldown, but that gets ignored when you use -H? ok. is there a way to alert on a probe? From: adama(a)observium.org <mailto:adama@observium.org> <adama(a)observium.org <mailto:adama@observium.org> > Sent: Wednesday, April 13, 2022 11:12 AM To: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: RE: [Observium] ping only device monitoring You just override the default arguments on the probe, the documentation should explain that. Host is *almost* always -H Adam. From: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Sent: 13 April 2022 15:48 To: Observium <observium(a)observium.org <mailto:observium@observium.org> > Cc: adama(a)observium.org <mailto:adama@observium.org> Subject: RE: [Observium] ping only device monitoring Adam, I have been looking at probes, but the thing I don’t understand is how to add a probe when the device is not listed in Observium. I tried to overwrite the pulldown, but it does not allow that. Is there a way to add a device to the list? From: observium <observium-bounces(a)observium.org <mailto:observium-bounces@observium.org> > On Behalf Of adama--- via observium Sent: Wednesday, April 13, 2022 10:44 AM To: 'Observium' <observium(a)observium.org <mailto:observium@observium.org> > Cc: adama(a)observium.org <mailto:adama@observium.org> Subject: Re: [Observium] ping only device monitoring This is mentioned in the probes documentation. Just create ICMP probes on the Observium-server entry (or the closest partitioned poller) We might do something specific at some point, but it’ll basically just be the same thing but with the probes separated into a different list. Adam. From: observium <observium-bounces(a)observium.org <mailto:observium-bounces@observium.org> > On Behalf Of Tony Guadagno via observium Sent: 13 April 2022 15:41 To: Observium <observium(a)observium.org <mailto:observium@observium.org> > Cc: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: [Observium] ping only device monitoring Hi, I know this has been asked and answered before, but I cannot find anywhere to search old threads, so I need to ask again…. How do I configure Observium to monitor a device with ping but no SNMP ability? Thanks Tony

4 3

wmi issues, need a syntax change
by Tony Guadagno 13 Apr '22

13 Apr '22

Hi, I am guessing that wmi polling is not used very much but I do use it and find it handy. If you do use it, you are probably aware that your event logs are filling up with this error: The server-side authentication level policy does not allow the user domain\wmiuser SID (S-1-5-21-99999-3660327915-2769000259-31856) from address 1.1.1.1 to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application. I am getting 4 eventlog errors every polling interval (5 minutes) on every windows server. This is due to Microsoft enhancing security on wmi. (KB5004442-Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414) (microsoft.com)<https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-wind…>) There is a solution to this, you need to call wmi with pkt integrity enabled (wmic RPC_C_AUTHN_LEVEL_PKT_INTEGRITY support · Issue #41 · greenbone/openvas-smb (github.com)<https://github.com/greenbone/openvas-smb/issues/41>). So, for example wmic --user=domain.local\\user --password= //server.domain.local "select * from Win32_ComputerSystem" - throws the error in the target servers event log...also, this will start failing next year. However wmic --user=domain.local\\user --password= //ncacn_ip_tcp:server.domain.local[sign] "select * from Win32_ComputerSystem" will not throw the error wrapping the target server in ncacn_ip_tcp: and [sign] fixes the issue. So, would it be possible for you to enhance Observium to make the wmi calls this way? Thanks Tony

5 8

ping only device monitoring
by Tony Guadagno 13 Apr '22

13 Apr '22

Hi, I know this has been asked and answered before, but I cannot find anywhere to search old threads, so I need to ask again.... How do I configure Observium to monitor a device with ping but no SNMP ability? Thanks Tony

2 2

Date Preset
by Stuart Dyer 13 Apr '22

13 Apr '22

Hi Everyone, Does anyone know how to change the default date present [cid:image001.png@01D84E76.FA5F0BB0] When viewing a graph I would like the default graph to be the last Calendar month e.g if it is march show April 1 to 30 Regards, Stuart Dyer IT Administrator Phone: +61 2 8020 2063 | E-mail: stuart.dyer(a)innovit.com<mailto:stuart.dyer@innovit.com> [innovit-logo (002) trans 2018] Bringing quality to Master Data MLC Centre, Level 56 19-29 Martin Place <https://goo.gl/maps/2yiiJ2YC4H9SBjYX6> Sydney NSW 2000<https://goo.gl/maps/2yiiJ2YC4H9SBjYX6> Tel: +612 8020 2000 Fax: +612 8020 2099 Web: www.innovit.com<http://www.innovit.com/> Australasia | North America | Europe Follow us on LinkedIn<https://www.linkedin.com/company/innovit-australia-pty-ltd?trk=public_profi…> This electronic mail is solely for the use of the addressee and may contain information, which is confidential or privileged. If you receive this electronic mail in error, please delete it from your system immediately and notify the sender by electronic mail or using any of the following contact details.

3 3

FW: Total Core Traffic
by Peter Derissen 12 Apr '22

12 Apr '22

Hello, We have a lot of core links in our network. The total graphs are show on top. [cid:image001.png@01D84A72.89424B20] When I click on 1 of the graphs I get an error. [cid:image002.png@01D84A72.89424B20] When I check the URL I see that its very long. Could that be the problem and is there a way I can fix that? https://10.230.11.81/graphs/type=multi-port_bits_separate/to=1649323537/id=… Met vriendelijke groet, Peter Derissen Eurofiber Nederland Network Engineer Safariweg 25-31 +31 (0)6 11587110 3605 MA Maarssen [cid:image003.png@01D84A72.89424B20]<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eurof…> Volg ons op Twitter<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.c…> | Linkedin<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> | Facebook<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> | Youtube<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> Wilt u op de hoogte blijven van technische ontwikkelingen aan ons netwerk, nieuwe ICT ontwikkelingen en klantervaringen? Meld u dan aan voor onze maandelijkse nieuwsbrief<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmarketing…>. [cid:image004.jpg@01D84A72.89424B20]<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eurof…> ******** IMPORTANT NOTICE ******** This e-mail (including any attachments) may contain information that is confidential or otherwise protected from disclosure and it is intended only for the addressees. If you are not the intended recipient, please note that any copying, distribution or other use of information contained in this e-mail (and its attachments) is not allowed. If you have received this e-mail in error, kindly notify us immediately by telephone or e-mail and delete the message (including any attachments) from your system. Please note that e-mail messages may contain computer viruses or other defects, may not be accurately replicated on other systems, or may be subject of unauthorized interception or other interference without the knowledge of sender or recipient. Eurofiber only sends and receives e-mails on the basis that Eurofiber is not responsible for any such computer viruses, corruption or other interference or any consequences thereof. Eurofiber Nederland B.V. is registered in the Chamber of Commerce of Amsterdam with number 34134377, VAT number NL 8088.51.524 B01. Eurofiber N.V. has its registered office at Belgicastraat 5 bus 7, 1930 Zaventem and is registered under national number 0435.204.851. Eurofiber France has its registered office at 21 Avenue de la Cr?ativit?, 59650 Villeneuve d'Ascq and is registered under national number FR 83.822.249.074.

6 16

Monitoris MSSQL database size
by Rando Sui 12 Apr '22

12 Apr '22

Hello, How do you monitor MSSQL specific measures, I would like to monitor Database size, how do you do that? Could I add database size to my Apps SQL server charts list? [cid:image002.png@01D84E8D.80A79050] Is there any indirect method, I gather7inject data to observium mysql and just display data from database and issue alerts? Greetings, Rando.

1 0

Ubuntu LDAP
by Valerie Lim 10 Apr '22

10 Apr '22

Hi, We would like to check does installing Observium affect any LDAP Ubuntu settings as we are unable to access LDAP server after Observium is being installed. Appreciate share with us, to configure setting config.php file in Observium systems. Regards Valerie

1 0

Re: [Observium] need some help with an alert checker
by Tony Guadagno 07 Apr '22

07 Apr '22

Adam, thanks, I will give this a shot Tony From: Adam Armstrong via observium Sent: Thursday, April 7, 2022 4:04 PM To: 'Observium' Cc: Adam Armstrong Subject: Re: [Observium] need some help with an alert checker Hi Tony, https://docs.observium.org/entities/#status You want something like association status_descr equals Source of Output Power test conditions status_name notequals normal adam. From: observium <observium-bounces(a)observium.org> On Behalf Of Tony Guadagno via observium Sent: 07 April 2022 20:34 To: Adam Armstrong via observium <observium(a)observium.org> Cc: Tony Guadagno <tonyg(a)guadagno.org> Subject: [Observium] need some help with an alert checker Hi, I have been able to write some basic checks but I need a little help with this. I want to write a check to alert when my ups’ switch to battery. I think I can do that by checking if the “source of output power” is not normal, but I do not know how to translate that logic into conditions and associations..can someone help? Thanks BTW, is there an exchange where people post their checks for others to use? Tony

1 0

need some help with an alert checker
by Tony Guadagno 07 Apr '22

07 Apr '22

Hi, I have been able to write some basic checks but I need a little help with this. I want to write a check to alert when my ups’ switch to battery. I think I can do that by checking if the “source of output power” is not normal, but I do not know how to translate that logic into conditions and associations..can someone help? Thanks BTW, is there an exchange where people post their checks for others to use? Tony

2 1