- observium - lists.observium.org

Observium - how to encrypt data at rest with AES 256
by Ryan Tee 05 Apr '22

05 Apr '22

Hi. Would like to inquire followings : How to encrypt data at rest with AES256 in Observium systems ? We plan to use 256-bit AES encryption ensures data is secure at rest. Could share with us information if any. Thank you. Regards Ryan

3 4

Observium - database Security Server and TCP database port uses TLS v1.2 or above for communications
by Ryan Tee 04 Apr '22

04 Apr '22

Hi , We would like to check followings in Observium systems. How to make sure that, in Observium systems, database Security Server and TCP database port uses TLS v1.2 or above for communications. This is to ensure communication is secured. Appreciate share with us, to configure setting config.php file in Observium systems. Regards Ryan [cid:image001.png@01D84810.72D22180]

3 4

questions about email alert notification formats
by Tony Guadagno 01 Apr '22

01 Apr '22

Hi, I have 2 questions about this. First, is it possible to attach a notification format per contact. We are sending out text alert notifications using number(a)vtext.com<mailto:number@vtext.com> and I think the format is too big for vtext.com to accept. Is it possible that on a contact, scale down the notification? Second, is it possible to change the format of the general "recover" email? thanks Tony

5 9

unix-agent for Proxmox
by walter＠onda.ch 01 Apr '22

01 Apr '22

Hello Adam Is it possible to collect also LXC with this script? Or maybe in the future? The command for do this ist: pvesh get /nodes/$(hostname)/lxc --output-format=json-pretty Regards Walter

3 3

Re: [Observium] Observium LDAP integration
by Nirmolak Singh Bajaj 31 Mar '22

31 Mar '22

Hi, I am having an integration problem with my LDAP server. This is my config for the LDAP. It is based on what the Observium website shows. Could you let me know where I am going wrong? Looking forward to your support. $config['auth_ldap_binddn'] = "CN=Administrator,CN=Users,DC=lab,DC=local"; $config['auth_ldap_bindpw'] = " "; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_attr']['dn'] = "distinguishedname"; $config['auth_ldap_objectclass'] = "user"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "lab.local"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",OU=mvc,DC=lab,DC=local"; $config['auth_ldap_group'] = array("DC=lab,DC=local"); $config['auth_ldap_groupbase'] = "DC=lab,DC=local"; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_groupmembertype'] = "nodn"; $config['auth_ldap_groups']['mvc']['level'] = 10; [cid:image001.png@01D84552.881C71F0] [cid:image002.png@01D84552.881C71F0] Warmest Regards, Nirmolak Singh

2 1

What to do when all optimizations fails ...
by Graf Vincent 31 Mar '22

31 Mar '22

Hello, Although I double check every tuning guide from the website, I'm in trouble with my Observium installation. First of all, the size of the network is huge... From the Statistics on about page : - 1023 Devices - 57K Ports - 51K Sensors - 128 GB RRD - 20GB DB I run the latest version of Observium with PHP 7.3 on a Debian 10 physical server. It is a dual Intel Xeon 6248 2.5Ghz (20C/40T) equipped with 3 RAID groups : - RAID1 for the OS - RAID1 for the RRD files and Observium application - RAID5 for the database All the disks are SSD. The number of poller is set to 48 and the whole polling time has an average of 264s and a max of @334s (I just increase the poller to 60 today...). I do housekeeping every week to cut off the event log and other stuff older than 30 days. I also use fast userspace caching with php-apcu For the port discovery, some of ports are ignored like vlans, control plan, stack interface, voice-port, etc... The installation runs like a big diesel machine ... not so fast but very robust. My problem is that it takes more than 30 seconds to get the detail of simple 48 ports switch ... and much more when I try to load a detailed backbone with many more ports. Do you have any suggestion to improve the GUI responsiveness ? Thank you for your time Kind regards Vincent

2 4

Re: [Observium] Observium product evolution
by Adam Armstrong 30 Mar '22

30 Mar '22

Hi Nilesh, We don't really do the sales process thing, we don't have any sales staff at all, only developers. You can see most of the platform using the CE version. Thanks, Adam. From: observium <mailman-bounces(a)postman.memetic.org> On Behalf Of nilesh.patil(a)wwindia.com Sent: 30 March 2022 12:51 To: observium(a)observium.org; observium-owner(a)observium.org Cc: 'Gagan Gupta' <gagankumar.gupta(a)wwindia.com>; 'Mayur Pawar' <mayur.pawar(a)wwindia.com>; 'Rahul Galande' <rahul.galande(a)wwindia.com> Subject: RE: Observium product evolution ++++observium-owner(a)observium.org <mailto:++++observium-owner@observium.org> Regards, Nilesh Patil From: nilesh.patil(a)wwindia.com <mailto:nilesh.patil@wwindia.com> <nilesh.patil(a)wwindia.com <mailto:nilesh.patil@wwindia.com> > Sent: 30 March 2022 16:45 To: observium(a)observium.org <mailto:observium@observium.org> Cc: Gagan Gupta <gagankumar.gupta(a)wwindia.com <mailto:gagankumar.gupta@wwindia.com> >; Mayur Pawar <mayur.pawar(a)wwindia.com <mailto:mayur.pawar@wwindia.com> >; Rahul Galande <rahul.galande(a)wwindia.com <mailto:rahul.galande@wwindia.com> > Subject: Observium product evolution Dear Observium, This Nilesh Patil from Web Werks India Pvt. Ltd. We have been looking for this product for our network infra monitoring and for the billing purpose. For this product can we have the POC for enterprise level. It will also be appreciated if we can have call for initial engagement. Waiting for your prompt response and availability for the call. Thanks & Regards, Nilesh Patil. Manager, Network Web Werks India Pvt. Ltd. Contact : 86565 48433 Data Center Services | Hosted IT Infrastructure | Cloud Services Managed Services | Infrastructure Application | Network Services

1 1

Add peer-name to BGP notifications
by Steffen Klemer 29 Mar '22

29 Mar '22

Hey there, for some reasons not everyone of us is fluent with IPs and AS numbers so I'd like to propose to add some kind of descriptive info to the routing alerts. For us sth. like: /var/www/observium/includes/entities.inc.php:1789 $entity['entity_name'] = "AS".$entity['bgpPeerRemoteAs'] ." ". $addr ." ". $entity['reverse_dns']; would be a good enough/great solution. Merry Christmas for everyone celebrating it and/or some calm days from Göttingen, Germany. Steffen -- Steffen Klemer Arbeitsgruppe "Netze" Tel.: +49 551 39 30204, E-Mail: steffen.klemer(a)gwdg.de ------------------------------------------------------------------------- Gesellschaft für wissenschaftliche Datenverarbeitung mbH Göttingen (GWDG) Burckhardtweg 4, 37077 Göttingen, URL: https://gwdg.de Support: Tel.: +49 551 39-30 000, URL: https://gwdg.de/support Sekretariat: Tel.: +49 551 39-30 001, E-Mail: gwdg(a)gwdg.de Geschäftsführer: Prof. Dr. Ramin Yahyapour Aufsichtsratsvorsitzender: Prof. Dr. Norbert Lossau Sitz der Gesellschaft: Göttingen Registergericht: Göttingen, Handelsregister-Nr. B 598 Zertifiziert nach ISO 9001 -------------------------------------------------------------------------

3 5

Trying to not alert on an interface in monitoring mode
by Lars Joergensen 28 Mar '22

28 Mar '22

Hey all I'm trying to build an alert that will go off in an interface is operationally down but not disabled. A fringe case is a span port where the operational state is "monitoring". It still triggers on these conditions (both are required to be true): [cid:image001.png@01D8405C.2132B5D0] (It says "suppressed" because the previous definition of the alarm was "IfOperStatus notequals up" and we suppressed it at that time) Can anybody help me see through what's wrong in my definition? Best regards Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

2 5

vlan table cleanup?
by Adam Thompson 25 Mar '22

25 Mar '22

We’re noticing that the VLANs page (Ports-->VLANs) is less useful than it could be, because it seems to keep around every VLAN that has ever existed on every device that has ever existed. I also don’t see anything in …/includes/housekeeping/* that would address this. It’s so bad/useless at this point that 1701 records are from devices that don’t even exist anymore (vs. 4409 where the parent device at least still exists, even if the VLAN doesn’t). A similar problem exists in vlans_fdb. Is there some housekeeping mechanism that is supposed to take care of this, that I can go troubleshoot? Or is it just an oversight/omission? And if not, can I just do a “DELETE FROM vlans WHERE NOT EXISTS ( <query on ‘device’> )” (and something similar on vlans_fdb) to clean it up? Thanks, -Adam Adam Thompson Consultant, Infrastructure Services [MERLIN] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

1 0