- observium - lists.observium.org

Question re: failing discovery of a device
by Chris Moody 09 Jan '14

09 Jan '14

Hello. Running Observium CE 0.13.10.4586. I've run into a strange situation with a single device that I am unable to discover and get added into observium's inventory. The device is an F5 Load-balancer. I have 51 other F5's all working beautifully, yet this one seems to be giving me grief for some reason when I try to discover it. I am able to ping and snmpwalk the device beautifully from the observium server, yet every attempt to run add_device.php returns with the following: ========= root@observium:~# ./add_device.php lb1-prod-c-qcy examplecommunitystring v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Observium v0.13.10.4586 Add Device USAGE: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] add_device.php <hostname> [any|nanp|anp|ap] [v3] [user] [password] [enckey] [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] EXAMPLE: SNMPv1/2c: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] SNMPv3 : Defaults : add_device.php <hostname> any v3 [user] [port] [udp|udp6|tcp|tcp6] No Auth, No Priv : add_device.php <hostname> nanp v3 [user] [port] [udp|udp6|tcp|tcp6] Auth, No Priv : add_device.php <hostname> anp v3 <user> <password> [md5|sha] [port] [udp|udp6|tcp|tcp6] Auth, Priv : add_device.php <hostname> ap v3 <user> <password> <enckey> [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] ========= yet, as you can see, when I snmpwalk this device, I get responses back just fine. ========= root@observium:~# snmpwalk -v2c -c examplecommunitystring lb1-prod-c-qcy | head SNMPv2-MIB::sysDescr.0 = STRING: Linux lb1-prod-c-qcy 2.6.18-164.11.1.el5.1.0.f5app #1 SMP Mon Mar 5 12:40:48 PST 2012 x86_64 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (3523019831) 407 days, 18:09:58.31 SNMPv2-MIB::sysContact.0 = STRING: NOC SNMPv2-MIB::sysName.0 = STRING: lb1-prod-c-qcy SNMPv2-MIB::sysLocation.0 = STRING: QDC-C SNMPv2-MIB::sysServices.0 = INTEGER: 78 SNMPv2-MIB::sysORLastChange.0 = Timeticks: (2) 0:00:00.02 SNMPv2-MIB::sysORID.1 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance SNMPv2-MIB::sysORID.2 = OID: SNMP-MPD-MIB::snmpMPDCompliance SNMPv2-MIB::sysORID.3 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance ... ========= I've tried the discovery via v1 as well as v2c, no difference. Every time I try a walk, I get results back consistently...so it's not like I'm seeing intermittent responses or anything. I was able to get it to finally discover when I specified the port & transport fields to add_device.php. Any thoughts as to what might be failing or not satisfying the add_device.php utility that it would flag this host as not replying? Why would port/transport being specified make a difference if it's still just standard 161/udp? Any hints or suggestions are appreciated. Cheers, -Chris

1 0

Re: [Observium] Alerting system: multiple associations
by Stefano Cordio 08 Jan '14

08 Jan '14

Bump :-) From: Stefano Cordio [mailto:stefano.cordio@gmail.com] Sent: martedì 24 dicembre 2013 11:42 To: 'Observium Network Observation System' Subject: [Observium] Alerting system: multiple associations Hey guys, I have the following alert checker: As you can see, the checker is applied only to server devices but Id like to extend that to storage devices. Is there a simple way to modify the device match rule in something like type equals (server or storage)? I tried searching any suggestion on the wiki and on the mail archive, but I didnt find anything. Thanks for any hints, Stefano

2 1

Need help getting the new alert system to send mail
by Thomas Raabo - Zitcom A/S 08 Jan '14

08 Jan '14

What i did ☺ //Alert $config['alerts']['alerter']['default']['descr'] = "Observium Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contact'] = "tr(a)zitcom.dk"; $config['alerts']['alerter']['default']['enable'] = TRUE; No emails are send on alerts So I tried to change the email backend $config['email_backend'] = 'sendmail'; That did not help. So I did a test to check the php mail module. <?php $to = "tr(a)zitcom.dk"; $subject = "Test mail"; $message = "Hello! This is a simple email message."; $from = "test(a)mgmt3.network.zitcom.dk"; $headers = "From:" . $from; mail($to,$subject,$message,$headers); echo "Mail Sent."; ?> And that worked fine. What is the problem? I have an alert in Observium ☺ [cid:image001.png@01CF07BB.018EAC80] Med venlig hilsen | Best regards Thomas Raabo Netværksansvarlig CCIE #33466 Zitcom A/S Telefon: 70 40 00 00 E-mail: kontakt(a)zitcom.dk<mailto:kontakt@zitcom.dk> Direkte: 69 10 60 18 Direkte: tr(a)zitcom.dk<mailto:tr@zitcom.dk> [cid:image005.jpg@01CEDC86.E897E480]<http://www.zitcom.dk/>

3 2

Cisco Small Business series
by support nuckleo 08 Jan '14

08 Jan '14

Hello everybody I would like to share a small workaround in order to monitoring the cisco Small business series sg 200/300 in the right way I have add some mibs in the /opt/observium/includes/defaults.inc.php $config['mibs']['CISCOSB-MIB'] = 1;$config['mibs']['CISCOSB-CPU-COUNTERS-MIB'] = 1; $config['mibs']['CISCOSB-JUMBOFRAMES-MIB'] = 1; $config['mibs']['CISCOSB-vlan-MIB'] = 1; $config['mibs']['CISCOSB-vlanVoice-MIB'] = 1; $config['mibs']['CISCOSB-SMON-MIB'] = 1; Detect your sysdescr sysDescr in this way: snmpwalk -c public -v2c device sysDescr and after I made some changes mapping the sysDescr on the right os so in /opt/observium/includes/discovery/os/cisco.inc.php add else if (strstr($sysDescr, "50-Port Gigabit Smart Switch")) { $os = "ciscosb"; } else if (strstr($sysDescr, "SG200-50P 50-Port Gigabit PoE Smart Switch")) { $os = "ciscosb"; } Then if you have just discoverd, delete your cisco small business devices and rediscovery the devices again. Thats all! Francesco Pansini _____________________________________________________________________ NUCKLEO Information Technology Solutions Support & Delivery Team http://www.nuckleo.com (website) Twitter:@Nuckleo _____________________________________________________________________

4 3

syslog message cisco filtering
by Rory Schramm 08 Jan '14

08 Jan '14

Hi, I have syslog setup in observium with a cisco 1841. However, I'm trying to get it to process nat messages but they arn't showing up correctly. I'm using syslog-ng for syslog. ie 192.168.2.1||local2||info||info||96||2013-12-31 00:53:15||5d00h: %IPNAT-6-DELETED: tcp 10.10.10.118:62249 192.168.12.1:62249 192.168.33.30:80192.168.33.30:80 ||99 gets truncated too 2013-12-31 00:53:15(info)*62249 192.168.12.1:62249 <http://192.168.12.1:62249> 192.168* : This only happens for the nat messages. ie 192.168.2.1||local2||notice||notice||95||2013-12-31 01:13:05||5d01h: %SYS-5-CONFIG_I: Configured from console by console||100 shows up as 2013-12-31 01:13:05(notice)*SYS-5-CONFIG_I* : Configured from console by console The raw nat syslog messages look like the following (aka not filtered by syslog-ng for observium): Dec 31 01:16:59 192.168.2.1 101: 5d01h: %IPNAT-6-CREATED: tcp 10.10.10.118:62713 192.168.12.1:62713 192.168.33.30:80 192.168.33.30:80 config settings: syslog-ng.conf options { chain_hostnames(0); time_reopen(10); time_reap(360); #sync(0); log_fifo_size(2048); create_dirs(yes); #owner(root); group(adm); perm(0640); #dir_owner(root); #dir_group(root); dir_perm(0755); use_dns(no); #dns_cache(yes); #log_msg_size(2048); stats_freq(0); bad_hostname("^gconfd$"); }; source s_net { udp (); }; destination df_router { file("/var/log/router" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); }; destination d_observium { program("/opt/observium/syslog.php" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); }; log { source(s_net); filter(router_f); destination(df_router); }; filter router_f {host(192.168.2.1); }; observium.conf: $config['enable_syslog'] = 1; Kind Regards, Rory

3 3

December 2013 Changelog
by Adam Armstrong 08 Jan '14

08 Jan '14

Hi All, Compiled changelog for December 2013 is at http://www.observium.org/wiki/Changelog#December_2013 Thanks, adam.

1 0

Alert Checker issue
by Daniel Rolfe 08 Jan '14

08 Jan '14

HI, I know this is all work in progress but I'm trying something very simple which should at least trigger It's likely something simple that I've missed Please see attached Thanks in advance,Daniel

5 9

ssl
by Zach Underwood 07 Jan '14

07 Jan '14

I am trying to move my observium to ssl only. I have ssl working right now when I use https://observium.mydomain.net . I want to redirect people if they connect to from http to https. OS=centos 6.5 version=4861 -- Zach Underwood (RHCE,RHCSA,RHCT,UACA) My website <http://zachunderwood.me> My photos <http://zunder1990.openphoto.me>

4 4

I may have some Stuff to contribute
by Sascha Schaal 07 Jan '14

07 Jan '14

Hello, my Name is Sascha Schaal. I´m a Developer for a medium sized ISP in Germany and former Nato IS-Admin. I would like make some contributions to Observium, which i think is one of the best approaches to a NMS in the Unix world together with Nagios. So i have 3 Things for you to offer, which i think could be a usefull addition to Observium. 1. Implementation of WSMan I could write a Subsystem for Observium to detect Devices and OS´s via the WSMan-Protocol. I think you must have came in contact with a Subset of this Protocol (CIM/SOAP) within the VMware API. This will require HTTP-POST´s to the Devices WSMan-Listener. These will contain SOAPed chunks of XML which tell the Listener to perform Task´s. You can then iterate through Classes on the WSMan-Provider which contain Perf-Data or Inventory Data and Stati of Devices/or Entitys. I have developed an easy to use complete OOP Subsystem written in Perl which i would like to convert to PHP for Observium. There are very few dependancy´s like LibXML2 and Data:UUID which i will try to resolve to turn it into PHP, i have some Idea's already. The best thing is the common Namespaces and Classes in WSMan will make Autodiscovery quite easy with lot of verbose Information to hand over to the User. It goes totaly along with ur approach to a NMS. Already WSMan capable Devices and OS´s are for example Unix via OpenWSMan, Microsoft Windows and Baseboard Management Controllers like Dell´s iDrac or HP`s iLO. WSMan has several advantages over SNMP which made the Nagios Dev's plan it for implementing. my GIT´s on that matter: https://github.com/rage1985/WSMAN--easy https://github.com/rage1985/check_wsman-Suite Which leads me dirctly to: 2. Discovery, Inventory and Monitoring of Windows OS Metrics The WSMan ( MS calls it WinRM) is more willing to talk than the SNMP Service on Windows. With the WSMan empowered Observium Nagio´s NS++ Client which has to be installed locally and needs a sh**load of config will look like a joke in comparison. For the Windows Admin WinRM Setup should be piece of cake. And i know where to find the Interesting Data, and i am willing to share. 3. Statistical Prediction and Forecasting using RRD´s Hold-Winters Algorithm. I´ve done this several times in my current occupation. Predicting Trends of both Linear and Non-Linear Sets of Data, togehter with Abberant Behavior Detection. I am willing to develope a subsystem for Observium to Predict Trend, Behavior for all the Data gathered in a scalable manner. But therefor i suggest to provide Graphs with fixed timeranges, in a new tab or seperate presantation. I suppose the most users don´t have a clue of the math behind statical analysation of Data. Time is always an important factor in forecasting , u just can´t tell from a month of gathered data what e.g. the traffic next year will look like. So we have to help him out in interpreting his Data. This is done best with sane and easy to read Graphs. I think this kind of Feature will be more than usefull. I will also help you out understanding the math, the meaning of several values we will stumble upon during developement. And last but not least the Documentation. Here´s is some intro to the techniques and math involved (not from me but good intro): https://www.usenix.org/legacy/events/lisa00/full_papers/brutlag/brutlag_htm… Kind regards, Sascha Schaal

1 0

Cisco Wireless Lan Controllers
by Carlos Martinez 07 Jan '14

07 Jan '14

Anyone do anything with Cisco WLC 2100 and 2500 series to get some details about how the attached light weight access points are functioning/performing? ________________________________ This message may contain confidential or privileged information. If you are not the intended recipient, please advise us immediately and delete this message. See http://www.datapipe.com/legal/email_disclaimer/ for further information on confidentiality and the risks of non-secure electronic communication. If you cannot access these links, please notify us by reply message and we will send the contents to you. Unless otherwise specified in a written agreement, this e-mail neither constitutes an agreement to conduct transactions by electronic means nor creates any legally binding contract or enforceable agreement.

2 1