- observium - lists.observium.org

Observium with Radius
by Peter Derissen 15 Oct '20

15 Oct '20

Hello all, I have setup Observium with radius auth. Today I noticed that everyone is getting full admin rights in Observium. I changed my own radius settings and tested. Observium is running on 10.230.11.81 and radius on 10.230.11.111 This is the radius response: (587) Sent Access-Accept Id 94 from 10.230.11.111:1812 to 10.230.11.81:43443 length 0 (587) Juniper-Local-User-Name = "remote" (587) Filter-Id = "pfy" <-- (587) GENIE-USER-PRIVILEGE = PRIV-ADMINISTRATOR (587) Infinera-User-Category = "administrator" (587) Service-Type = Administrative-User (587) NS-Admin-Privilege = All-VSYS-Root-Admin (587) Class = 0x6e65 Config.php: $config['auth_radius_groups']['admin']['level'] = 10; // Full administrative access $config['auth_radius_groups']['cto']['level'] = 7; // Global read access with secured info (ie rancid configs) $config['auth_radius_groups']['pfy']['level'] = 5; // Global read access [cid:image005.png@01D6A21D.84BFC540] Any idea what I'm doing wrong? Met vriendelijke groet, Peter Derissen Eurofiber Nederland Network Engineer Safariweg 25-31 +31 (0)6 11587110 3605 MA Maarssen [cid:image006.png@01D6A21D.84BFC540]<https://www.eurofiber.nl/> Volg ons op Twitter<https://twitter.com/Eurofiber> | Linkedin<https://www.linkedin.com/company/eurofiber> | Facebook<https://www.facebook.com/eurofiberNL/> | Youtube<https://www.youtube.com/channel/UC6DavgEm7-ktAD8_Co_qnMA> Wilt u op de hoogte blijven van technische ontwikkelingen aan ons netwerk, nieuwe ICT ontwikkelingen en klantervaringen? Meld u dan aan voor onze maandelijkse nieuwsbrief<https://marketing.eurofiber.com/acton/fs/blocks/showLandingPage/a/15570/p/p…>. [cid:image007.jpg@01D6A21D.84BFC540]<https://www.eurofiber.nl/> ******** IMPORTANT NOTICE ******** This e-mail (including any attachments) may contain information that is confidential or otherwise protected from disclosure and it is intended only for the addressees. If you are not the intended recipient, please note that any copying, distribution or other use of information contained in this e-mail (and its attachments) is not allowed. If you have received this e-mail in error, kindly notify us immediately by telephone or e-mail and delete the message (including any attachments) from your system. Please note that e-mail messages may contain computer viruses or other defects, may not be accurately replicated on other systems, or may be subject of unauthorized interception or other interference without the knowledge of sender or recipient. Eurofiber only sends and receives e-mails on the basis that Eurofiber is not responsible for any such computer viruses, corruption or other interference or any consequences thereof. Eurofiber Nederland B.V. is registered in the Chamber of Commerce of Amsterdam with number 34134377, VAT number NL 8088.51.524 B01. Eurofiber N.V. has its registered office at Belgicastraat 5 bus 7, 1930 Zaventem and is registered under national number 0435.204.851.

2 2

How to create Alert Checker for a specific port?
by Brian Bianchi 15 Oct '20

15 Oct '20

Hi folks, I have an application running on port 7990. I would like to create a custom Alert Checker to check if this port is functional. I have read the documentation here: https://docs.observium.org/alert_checker/ https://docs.observium.org/alerting_examples/ The "port is operational but functionally down" option looks like the one for me. But how the heck do I select a specific port of 7990 to be monitored? Thanks! [cid:image001.png@01D6A15A.75CD84A0] Brian Bianchi Senior Release Engineer o: +1 (781) 213-6483 e: bbianchi(a)vestmark.com Learn more about Vestmark! View our introduction video here<https://vimeo.com/374253696>. Check us out on Social Media: [cid:image002.png@01D6A15A.75CD84A0] <https://www.linkedin.com/company/vestmark/> [cid:image003.png@01D6A15A.75CD84A0] <https://www.glassdoor.com/Overview/Working-at-Vestmark-EI_IE263618.11,19.htm> [cid:image004.png@01D6A15A.75CD84A0] <twitter.com/Vestmark> This e-mail and any attachments hereto, are intended for use by the addressee(s) only and may contain information that is confidential information of Vestmark, Inc. If you are not the intended recipient of this e-mail, or if you have otherwise received this e-mail in error, please immediately notify me by telephone or by e-mail, and please permanently delete the original, any print outs and any copies of the foregoing. Any dissemination, distribution or copying of this e-mail is strictly prohibited.

3 6

Probes running from pollers
by Ahmed Rahal 15 Oct '20

15 Oct '20

Hi, After successfully trying out probes, I was wondering if the nagios plugins (that's what probes are) are run from the designated poller or from the default poller only. Ahmed. -- Ahmed Rahal Administrateur de Systèmes / Systems Administrator *Fibrenoire* - www.fibrenoire.ca A: 550 , avenue Beaumont, bureau 320, Montréal (Québec) H3N 1V1 arahal(a)fibrenoire.ca Twitter: @fibrenoire

2 1

how will create Custom OID alarm for power supply
by Brij Mohan 13 Oct '20

13 Oct '20

Hi Anyone can help to create a custom oid alarm in OBS. [image: image.png]

2 12

Why sometime graph are missing on the dashboard ?
by Aulia Rahman 13 Oct '20

13 Oct '20

Dear All, I've sometimes found that some server graph RAM / CPU / Traffic is missing on the dashboard. So, I can't view the graph at that time. But when I check on the next time, that graph shows again. What caused it and how to solve it ? My detail specs: Device Monitor: 400++ VM (various OS Linux & Windows) CPU: 8 Core RAM: 12 GB ( Use Ramdisk ) Storage: 500 GB on SSD Observium 20.1.10233 (20th January 2020) OS Linux 3.10.0-514.el7.x86_64 [amd64] (CentOS 7) Apache 2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/7.0.19 PHP 7.0.19 (OPcache: ENABLED) Python 2.7.5 MySQL 5.5.52-MariaDB (extension: mysqli 5.5.52-MariaDB) Demikian yang dapat kami sampaikan, terimakasih. Regards, Aulia Rahman

3 4

Alerting on running processes?
by Johann Mallet 12 Oct '20

12 Oct '20

Hello, Is it possible to create an alert on the number of running processes? (=hr_processes graph) I have tried to search in Device/Counter/Sensor/Status alert type without success. Many thanks! Johann

2 2

Re: [Observium] observium Digest, Vol 123, Issue 8
by Sachin Guda 12 Oct '20

12 Oct '20

Hello Team, Any update on 3. Syslog problem with Arista and Nexus device (Sachin Guda) __________________________________________________ Sachin Guda Managed Services • Itiviti Network Engineer -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Saturday, October 10, 2020 1:00 PM To: observium(a)observium.org Subject: observium Digest, Vol 123, Issue 8 Send observium mailing list submissions to observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org You can reach the person managing the list at observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Alerting on running processes? (Johann Mallet) 2. Re: Alerting on running processes? (Adam Armstrong) 3. Syslog problem with Arista and Nexus device (Sachin Guda) 4. Re: how will create Custom OID alarm for power supply (Brij Mohan) 5. Re: how will create Custom OID alarm for power supply (Adam Armstrong) ---------------------------------------------------------------------- Message: 1 Date: Fri, 9 Oct 2020 13:50:14 +0200 From: Johann Mallet <johann.mallet(a)zayo.com> To: Observium Network Observation System <observium(a)observium.org> Subject: [Observium] Alerting on running processes? Message-ID: <CAK5-Kt2biva=smV11B-kNPM5aF_jnk_5LBcGtH+YL960etpBSA(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hello, Is it possible to create an alert on the number of running processes? (=hr_processes graph) I have tried to search in Device/Counter/Sensor/Status alert type without success. Many thanks! Johann

1 0

Syslog problem with Arista and Nexus device
by Sachin Guda 09 Oct '20

09 Oct '20

Hello Team, I am running latest Observium version, Syslog is configured on switch to send logs to observium server. They send logs to observium (verified with capture on server interface) but observium doesn’t show it in syslog tab it says- No syslog entries found! This device does not have any syslog entries. Check that the syslog daemon and Observium configuration options are set correctly, that this device is configured to send syslog to Observium and that there are no firewalls blocking the messages. See Syslog Integration <https://docs.observium.org/syslog/> guide and configuration options <https://docs.observium.org/config_options/#syslog-settings> for more information. At the same time syslog can be seen from other devices like cisco CAT switch, ASA firewall and Cisco ASR. __________________________________________________ [image: http://itiviti.com/email_signature_logo_2017_120.png] <http://www.itiviti.com/> *Sachin Guda* Managed Services, Itiviti Network Engineer Direct: +46 8 506 477 52 Mobile: +46 73 901 02 53 Sachin.Guda(a)itiviti.com <%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20mailto:Sachin.Guda@itiviti.com> Kungsgatan 36 , P.O. Box 7742 10395 Stockholm , Sweden Fax: +46 8 506 477 01 *Visit: itiviti.com » <http://www.itiviti.com>Read the latest news from Itiviti » <http://www.itiviti.com/news/>* -- ______________________________ <https://www.linkedin.com/company/10438325/> The information contained in or attached to this email is strictly confidential. If you are not the intended recipient, please notify us immediately by telephone and return the message to us. Email communications by definition contain personal information. The Itiviti group of companies is subject to European data protection regulations. Itiviti’s Privacy Notice is available at www.itiviti.com <http://www.itiviti.com/>. Itiviti expects the recipient of this email to be compliant with Itiviti’s Privacy Notice and applicable regulations. Please advise us immediately at dataprotectionteam(a)Itiviti.com if you are not compliant with these.

1 0

Trouble with Active Directory group config on Observium CE v20.9.10731
by Brian Bianchi 08 Oct '20

08 Oct '20

Hello, I am trying to configure Active Directory authentication on my Observium CE v20.9.10731 server using this page as a guide -> https://docs.observium.org/authentication/#active-directory I am passed the point where my username and password are authenticated. It is the group config I am confused about. I have an Active Directory group "eng-admins" that I want to give administrative privileges to, of which my login (bbianchi) is a member. And I have an Active Directory group "eng-team" that I want to give generic non-admin privileges. My domain is hq.viviport.com. It is not clear to me how to configure these lines to achieve this: $config['auth_ldap_recursive'] = TRUE; $config['auth_ldap_recursive_maxdepth'] = 3; $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",DC=hq,DC=viviport,DC=com"; $config['auth_ldap_group'] = array("CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com"); $config['auth_ldap_groupbase'] = "OU=Groups,DC=hq,DC=viviport,DC=com"; $config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['CN=Observium Admins,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 10; $config['auth_ldap_groups']['CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 1; I have enabled debug logging. Here is what I am getting below. Any help would be greatly appreciated. Thank you in advance. --B [cid:image008.png@01D69BBE.684DA9A0] [cid:image001.png@01D69BBE.92743870] Brian Bianchi Senior Release Engineer o: +1 (781) 213-6483 e: bbianchi(a)vestmark.com Learn more about Vestmark! View our introduction video here<https://vimeo.com/374253696>. Check us out on Social Media: [cid:image002.png@01D69BBE.92743870] <https://www.linkedin.com/company/vestmark/> [cid:image003.png@01D69BBE.92743870] <https://www.glassdoor.com/Overview/Working-at-Vestmark-EI_IE263618.11,19.htm> [cid:image004.png@01D69BBE.92743870] <twitter.com/Vestmark> This e-mail and any attachments hereto, are intended for use by the addressee(s) only and may contain information that is confidential information of Vestmark, Inc. If you are not the intended recipient of this e-mail, or if you have otherwise received this e-mail in error, please immediately notify me by telephone or by e-mail, and please permanently delete the original, any print outs and any copies of the foregoing. Any dissemination, distribution or copying of this e-mail is strictly prohibited.

3 4

Observium in HTTPS
by Olivier CALVANO 08 Oct '20

08 Oct '20

Hi We use Observium Version 20.9.10749. currently it is http, observium accepts to be in https? Regards Olivier

4 4