- observium - lists.observium.org

Re: [Observium] Citrix Netscaler vServer
by Richard Wigzell 16 May '16

16 May '16

Thank you all for the replies and screenshots; they have been most helpful. I have one more question regarding the custom OID monitor, has anyone used this to capture BPDU counters? Specific use case: We cannot currently send syslog messages from all our network devices to the Observium host and would be looking to use BPDU counters as an indication that a spanning-tree event had occurred. I would also be interested to hear what others have done regarding spanning-tree alerts etc. Regards [cid:image001.jpg@01CE9215.D39244B0]<https://www.it.ox.ac.uk/> Richard Wigzell Networks, Security and Server Specialist IT Services | University of Oxford 13 Banbury Road, Oxford OX2 6NN T: 01865 616282 www.it.ox.ac.uk<https://www.it.ox.ac.uk/> From: observium [mailto:observium-bounces@observium.org] On Behalf Of Moerman, Maarten Sent: 13 May 2016 14:29 To: Observium Network Observation System Subject: Re: [Observium] Citrix Netscaler vServer Hi, See a LB vserver pool, and the vserver stats below: Vserver lists all services, and aggregated stats of the pool itself Service has: bits, packets, connections, requests, ttfb & surgecount There’s also more tcp stuff & ssl stuff in other tabs Maarten From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Adam Armstrong <adama(a)memetic.org<mailto:adama@memetic.org>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Friday, May 13, 2016 at 1:39 PM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Citrix Netscaler vServer Hi, We don't really have a trial beyond CE (which effectively is the trial), but if you guys have Netscalers, the 150 quid is certainly super cheap for the amount of data we collect from them. Our Netscaler support is developed in conjunction with eBay to monitor their load balancer platform, so it's one of the more actively developed parts of our code. If you ask nicely, perhaps someone will be able to generate some screenshots or something :D Adam. Sent from BlueMail<http://www.bluemail.me/r> On May 13, 2016, at 11:57, Richard Wigzell <richard.wigzell(a)it.ox.ac.uk<mailto:richard.wigzell@it.ox.ac.uk>> wrote: Thank you all for the replies. Is it possible to trial the subscription edition? We would be interested to see this functionality as well as the custom OID monitor. Regards [cid:image001.jpg@01CE9215.D39244B0]<https://www.it.ox.ac.uk/> Richard Wigzell Networks, Security and Server Specialist IT Services | University of Oxford 13 Banbury Road, Oxford OX2 6NN T: 01865 616282 www.it.ox.ac.uk<https://www.it.ox.ac.uk/> From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: 09 May 2016 14:19 To: Observium Network Observation System Subject: Re: [Observium] Citrix Netscaler vServer CE does not support netscaler, you need a subscription for that. Adam. Sent from BlueMail<http://www.bluemail.me/r> On May 9, 2016, at 15:14, prost pierrick <pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: Hello, Have you tried a SNMP WALK on your equipment ? De : observium [mailto:observium-bounces@observium.org] De la part de Richard Wigzell Envoyé : lundi 9 mai 2016 14:51 À : 'observium(a)observium.org<mailto:'observium(a)observium.org>' Objet : [Observium] Citrix Netscaler vServer Hello, we have a Citrix Netscaler (x2 HA) that we monitor but there is no Loadbalancer Tab on the device page. So we are unable to see vServers info etc. Have ensured that the SNMP view is FULL as opposed to Read only on the device themselves. Both nodes are running Citrix Netscaler NS10.5 (Build 57.7.nc) Running CE 0.16.1.7533 (26th January 2016). Am I correct in thinking that I should be able to see vServer info? If so some suggestions to resolve this would be welcome. Regards [cid:image001.jpg@01CE9215.D39244B0]<https://www.it.ox.ac.uk/> Richard Wigzell Networks, Security and Server Specialist IT Services | University of Oxford 13 Banbury Road, Oxford OX2 6NN T: 01865 616282 www.it.ox.ac.uk<https://www.it.ox.ac.uk/> ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

2 1

Missed Allowed Value in CDR/95th Percentile
by ChanTy 16 May '16

16 May '16

Hi, Allowed value is usually missed from Billing report as below: any comment? Regards, chanty

1 0

VMware polling broken?
by Ron Marosko 15 May '16

15 May '16

Hi guys, I think something got broken in polling of ESXI servers… not sure where exactly, but on or about 4 May, the “Operating System” section changed from the full build information to “Operating system VMware (build-)”. In “showtech” it looks like it’s this line: features=>build- Or am I smoking a green leafy substance? ….Ron -- This message has been scanned by E.F.A. Project and is believed to be clean.

1 0

Alert on high availability status change on Checkpoint
by Robin Cook 13 May '16

13 May '16

Hello, We have a few checkpoint firewalls and I am looking to generate email alerts when the HA status changes from OK to critical. The Observium logs look a bit like this when it occurs: 2016-05-12 16:58:30 High Availability (standby) Status Alert: cpnew02 High Availability (standby) entered ALERT state: CRITICAL (previous: OK) 2016-05-12 16:58:28 cpfw04 Features -> ClusterXL inactive or machine is down 2016-05-11 10:30:04 High Availability (standby) Status updated: checkpoint-ha-state haStatCode.0 High Availability (standby) 2016-05-11 10:28:03 High Availability (standby) Status Ok: cpnew02 High Availability (down) entered OK state: OK (previous: CRITICAL) Does anyone have any advice on how to build the alert checker for this? The high Availability icon looks to be a traffic lights one while the devices themselves show as the normal device icon - so I think they may be discovered as separate entities. I am also a bit unsure on how to filter to the OS "Check Point GAiA R77.45 (standby)" so for now have just been using device type firewall. Many thanks, Robin -------------------------------------------------------------------------------------------------------------------------------------------------- This message is for the designated recipient(s) only and may contain privileged, proprietary, and/or confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited. Any views or opinions expressed are solely those of the author and do not necessarily represent those of MDSL. -------------------------------------------------------------------------------------------------------------------------------------------------- Registered Information MARKET DATA SERVICES LIMITED, FLOOR 2 BUILDING 4, CENTURY PLACE, LAMBERTS ROAD, TUNBRIDGE WELLS, KENT, TN2 3EH, UNITED KINGDOM Company No: 03031342 | VAT Reg. No.: GB624962327

2 1

(no subject)
by Andy Lemin 13 May '16

13 May '16

Haha, Yea I'm not brave enough to cut myself on bleeding edge ;) Just "Stable" here as its prod.. Thanks for being so quick! On Fri, May 13, 2016 at 2:46 PM, Adam Armstrong <adama(a)memetic.org> wrote: > That was done 10 minutes ago... > > Unless you're all confused and running stable! :DDD > > adam. > > On 13/05/2016 14:43:03, Andy Lemin <andy(a)brandwatch.com> wrote: > Haha, damn hipster hidden pages.. Haha ;) > > Thanks Adam, I have added "$config['web_enable_showtech'] = 1;" to my > config.php > > I will await the code update :) > > Thanks, Andy. > > On Fri, May 13, 2016 at 2:31 PM, Adam Armstrong <adama(a)memetic.org> wrote: > >> I've added this to the device "cog" menu, when enabled in the config >> (web_enable_showtech = true in config.php, or Web UI -> General -> Enable >> 'show tech' option in web-config editor) >> >> adam. >> >> On 13/05/2016 14:17:23, Adam Armstrong <adama(a)memetic.org> wrote: >> Shh. You're not supposed to know that tab exists! :P >> >> adam. >> >> On 13/05/2016 14:15:17, Andy Lemin <andy(a)brandwatch.com> wrote: >> Hi, >> >> Does anyone know how to unhide the "showtech" tab for all the devices? >> >> For example, go to somewhere like; >> https://observium/device/device=17/tab=ports/ >> >> And change the "ports" for "showtech". >> >> http://observium/device/device=<device_id>/tab=showtech/ >> >> This page is useful, and would be nice to have the button on >> the device page instead of having to remember a URL hack, when debugging >> missing data or problems monitoring devices etc (esp when using rancid and >> smokeping like we do). >> >> Hoping their is a secret config.php switch :) >> >> Thanks, Andy. >> _______________________________________________ observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >> >> >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >> >> > _______________________________________________ observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > > > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > >

1 0

Unhide the hidden showtech tab
by Andy Lemin 13 May '16

13 May '16

Hi, Does anyone know how to unhide the "showtech" tab for all the devices? For example, go to somewhere like; https://observium/device/device=17/tab=ports/ And change the "ports" for "showtech". http://observium/device/device=<device_id>/tab=showtech/ This page is useful, and would be nice to have the button on the device page instead of having to remember a URL hack, when debugging missing data or problems monitoring devices etc (esp when using rancid and smokeping like we do). Hoping their is a secret config.php switch :) Thanks, Andy.

2 4

Re: [Observium] Citrix Netscaler vServer
by Moerman, Maarten 13 May '16

13 May '16

Hi, See a LB vserver pool, and the vserver stats below: Vserver lists all services, and aggregated stats of the pool itself Service has: bits, packets, connections, requests, ttfb & surgecount There’s also more tcp stuff & ssl stuff in other tabs Maarten [cid:389CB59F-C0E4-4CE5-9B5B-3F1307456575][cid:F9A6342F-F0EE-4362-A4FE-4CF6889949F4] From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Adam Armstrong <adama(a)memetic.org<mailto:adama@memetic.org>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Friday, May 13, 2016 at 1:39 PM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Citrix Netscaler vServer Hi, We don't really have a trial beyond CE (which effectively is the trial), but if you guys have Netscalers, the 150 quid is certainly super cheap for the amount of data we collect from them. Our Netscaler support is developed in conjunction with eBay to monitor their load balancer platform, so it's one of the more actively developed parts of our code. If you ask nicely, perhaps someone will be able to generate some screenshots or something :D Adam. Sent from BlueMail<http://www.bluemail.me/r> On May 13, 2016, at 11:57, Richard Wigzell <richard.wigzell(a)it.ox.ac.uk<mailto:richard.wigzell@it.ox.ac.uk>> wrote: Thank you all for the replies. Is it possible to trial the subscription edition? We would be interested to see this functionality as well as the custom OID monitor. Regards [cid:image001.jpg@01CE9215.D39244B0]<https://www.it.ox.ac.uk/> Richard Wigzell Networks, Security and Server Specialist IT Services | University of Oxford 13 Banbury Road, Oxford OX2 6NN T: 01865 616282 www.it.ox.ac.uk<https://www.it.ox.ac.uk/> From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: 09 May 2016 14:19 To: Observium Network Observation System Subject: Re: [Observium] Citrix Netscaler vServer CE does not support netscaler, you need a subscription for that. Adam. Sent from BlueMail<http://www.bluemail.me/r> On May 9, 2016, at 15:14, prost pierrick <pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: Hello, Have you tried a SNMP WALK on your equipment ? De : observium [mailto:observium-bounces@observium.org] De la part de Richard Wigzell Envoyé : lundi 9 mai 2016 14:51 À : 'observium(a)observium.org<mailto:'observium(a)observium.org>' Objet : [Observium] Citrix Netscaler vServer Hello, we have a Citrix Netscaler (x2 HA) that we monitor but there is no Loadbalancer Tab on the device page. So we are unable to see vServers info etc. Have ensured that the SNMP view is FULL as opposed to Read only on the device themselves. Both nodes are running Citrix Netscaler NS10.5 (Build 57.7.nc) Running CE 0.16.1.7533 (26th January 2016). Am I correct in thinking that I should be able to see vServer info? If so some suggestions to resolve this would be welcome. Regards [cid:image001.jpg@01CE9215.D39244B0]<https://www.it.ox.ac.uk/> Richard Wigzell Networks, Security and Server Specialist IT Services | University of Oxford 13 Banbury Road, Oxford OX2 6NN T: 01865 616282 www.it.ox.ac.uk<https://www.it.ox.ac.uk/> ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

Citrix Netscaler vServer
by Richard Wigzell 13 May '16

13 May '16

Hello, we have a Citrix Netscaler (x2 HA) that we monitor but there is no Loadbalancer Tab on the device page. So we are unable to see vServers info etc. Have ensured that the SNMP view is FULL as opposed to Read only on the device themselves. Both nodes are running Citrix Netscaler NS10.5 (Build 57.7.nc) Running CE 0.16.1.7533 (26th January 2016). Am I correct in thinking that I should be able to see vServer info? If so some suggestions to resolve this would be welcome. Regards [cid:image001.jpg@01CE9215.D39244B0]<https://www.it.ox.ac.uk/> Richard Wigzell Networks, Security and Server Specialist IT Services | University of Oxford 13 Banbury Road, Oxford OX2 6NN T: 01865 616282 www.it.ox.ac.uk<https://www.it.ox.ac.uk/>

3 4

Re: [Observium] Disk size alert Windows
by Epco Dijk 12 May '16

12 May '16

Hi, Thanks for all your answers. However I didn’t get it to work. [cid:image001.png@01D1AC9A.71C211A0] [cid:image002.png@01D1AC9A.71C211A0] It doesn’t seem to pick it up. Otherwise I would expect it to be in the Matching Entities. When I replace the entity match to * it does get pickup in the alert, but then the alert is useless for me: [cid:image003.png@01D1AC9A.71C211A0] But from the earlier sent attachment you see that Storage_type hrStorageFixedDisk is being returned. If someone can shine a light, much appreciated. KR, Epco From: observium <observium-bounces(a)observium.org> on behalf of Adam Armstrong <adama(a)memetic.org> Reply-To: Observium Network Observation System <observium(a)observium.org> Date: Thursday 12 May 2016 at 20:31 To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] Disk size alert Windows Well, I did write it :D Match does a str_match() style comparison. Easier, faster and sufficient in most instances. Adam. Sent from BlueMail<http://www.bluemail.me/r> On 12 May 2016, at 19:07, "Pål Rydningen" <paal.rydningen(a)gmail.com<mailto:paal.rydningen@gmail.com>> wrote: That changes everything Adam! I was not aware that "regex" could be a test-keyword... You got access to the source-code or something? ;) Seriously tho - this did spur me into looking twice at things and a plain "storage_descr match C*" did the trick. On Thu, May 12, 2016 at 7:50 PM, Adam Armstrong <adama(a)memetic.org<mailto:adama@memetic.org>> wrote: You can use regular expressions. storage_descr regex /^c/ or something? :D adam. On 12/05/2016 18:41:57, Pål Rydningen <paal.rydningen(a)gmail.com<mailto:paal.rydningen@gmail.com>> wrote: CE scrub here; Yes it does - and this checker is a partial success to me: Error! Filename not specified. The only thing I still haven't figured out is how to match particular drive-letters. When its listed as "C:\ Label: Serial Number 58edd0c8" - Im fumbling trying to find a way to match the beginning of the string and look for "C:" I presume there is some magic involved with the "match" keyword and how to use it with a regex? _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -- Pål R. ________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium Epco Dijk Systems Administrator Northpool bv Kanaalpark 140 2321JV Leiden The Netherlands Tel: +31 (0)88 2400300 Fax: +31 (0)88 2400399 E-mail: epco.dijk(a)northpool.nl Web: www.northpool.nl [http://www.northpool.nl/wp-content/uploads/2015/09/signature.png] This message and any attachments (the "message") are confidential and intended solely for the addressees. If you are not the addressee indicated in this message or if this message has been addressed to you by error, you may not copy or deliver this message to anyone but destroy it and kindly notify the sender by reply email. Any unauthorised use or dissemination is prohibited. E-mails are susceptible to alteration. Northpool bv shall not be liable for the message if altered, changed or falsified.

3 4

Re: [Observium] Customer billing search
by Jan Kuiper 12 May '16

12 May '16

Hi Adam, I found the issue after looking up the source code: mysql> SELECT * FROM `entity_permissions` WHERE `entity_type` = 'bill' GROUP BY `user_id` ORDER BY `user_id` ; +---------+---------+-------------+-----------+--------------+ | perm_id | user_id | entity_type | entity_id | access_level | +---------+---------+-------------+-----------+--------------+ | 1 | 2 | bill | 0 | 0 | …… Strange enough the first record pointed to user_id 2 and this user isn’t in de user table. After changing user_id 2 to 1 (admin account) everything is working again. I don’t know what caused this. Thanks, Jan Kuiper Date: Thu, 12 May 2016 15:16:50 +0100 From: "Adam Armstrong" <adama(a)memetic.org<mailto:adama@memetic.org>> To: "" <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Customer billing search Message-ID: <31e01c31-15c4-4750-aa3c-64677cb4ddff(a)getmailbird.com<mailto:31e01c31-15c4-4750-aa3c-64677cb4ddff@getmailbird.com>> Content-Type: text/plain; charset="utf-8" I mean, your problem is that you have a blank user. You probably want to remove this from the user management area. adam. On 12/05/2016 15:08:01, Jan Kuiper <j.kuiper(a)piramide.nl<mailto:j.kuiper@piramide.nl>> wrote: Hi Adam, Thanks for the assist :-(. I really can't find the place to delete the blank user in the traffic accounting search, nor can't find the place to alter this. It seems to me that this is an issue in the stable version (build 0.16.5.7833), because the 'All Types' filter is working correctly, but the User dropbox is empty and selects an non existing blank user (deselecting the blank user solves the problem). Best regards, Jan Kuiper Date: Thu, 12 May 2016 14:44:46 +0100 From: "Adam Armstrong" To: "" Subject: Re: [Observium] FW: observium Digest, Vol 70, Issue 63 Message-ID: Content-Type: text/plain; charset="utf-8" I've no idea why you have a blank user, that's your problem! adam. On 12/05/2016 14:41:55, Jan Kuiper wrote: Hi Adam, I didn't select anything. Also I found out if I manually deselect the given blank user the search is working again. How can we save the query without the automatic selected blank user? Best regards, Jan Kuiper Date: Thu, 12 May 2016 12:11:28 +0100 From: "Adam Armstrong" To: "" Subject: Re: [Observium] Customer billing search Message-ID: Content-Type: text/plain; charset="utf-8" You have a blank named user selected? adam. On 12/05/2016 12:08:44, Jan Kuiper wrote: Hi Adam, Is there a way to debug it? If I enter a word in the Billing Name nothing is found but I am sure that there are records matching the search string. Also the User dropdown box contains an empty record, could this be the problem because the ‘All Types’ first match is "All Types". See attached snippets. Best regards, Jan Kuiper Date: Thu, 12 May 2016 11:29:06 +0100 From: "Adam Armstrong" To: "" Subject: Re: [Observium] Customer billing search Message-ID: Content-Type: text/plain; charset="utf-8" This seems to work fine for me. adam. On 12/05/2016 09:33:45, Jan Kuiper wrote: Hi, I want to search for a bill, but the bill search function seems to be broken again, even when we clear the search settings no records are found. A refresh (F5) of the page show all records again. Is it possible to fix this? We are running version 0.16.5.7833. Best regards, Jan Kuiper From: Jan Kuiper Sent: maandag 10 augustus 2015 17:11 To: observium(a)observium.org<mailto:observium@observium.org> [mailto:observium@observium.org] Subject: Customer billing Hi, I want to search for bills, but the bill search function does only give all bills instead of the requested Bill Name. Has anyone the same issue, if no what can I do wrong or fix it? I am running the stable version 6833. Met vriendelijke groet / Kind Regards, Jan Kuiper [cid:image001.jpg@01CF62F0.6DBAB760 [cid:image001.jpg@01CF62F0.6DBAB760<cid:image001.jpg@01CF62F0.6DBAB760%20[cid:image001.jpg@01CF62F0.6DBAB760>]] Piramide ICT Services | Kollergang 9 | 7773 NG Hardenberg | Postbus 220 | 7770 AE Hardenberg info(a)piramide.nl<mailto:info@piramide.nl> [mailto:info@piramide.nl] [mailto:info@piramide.nl [mailto:info@piramide.nl<mailto:info@piramide.nl%20[mailto:info@piramide.nl>]] | http://www.piramide.nl [http://www.piramide.nl] [http://www.piramide.nl] | +31 (0)523 261 387 Disclaimer Deze e-mail is uitsluitend bestemd voor de geadresseerde(n). Verstrekking aan en gebruik door anderen is niet toegestaan. Piramide sluit iedere aansprakelijkheid uit die voortvloeit uit elektronische verzending. _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://postman.memetic.org/pipermail/observium/attachments/20160512/aac259f…>

1 0