- observium - lists.observium.org

Bug Question - UPS Interface Issue
by Adam Ward 28 Mar '19

28 Mar '19

Adam/Team, I have a few new UPS systems that are Eaton 5PX units with their management card. I have others that function fine, but the last two I have installed, the port parsing isn’t working, and every poller run generates a new interface name somehow. See attached image. If I stop polling for the port, the issue goes away. It’s not critical, but I am wondering how to even go about troubleshooting this issue. How do I go about debugging this with support? Open a Jira ticket? Adam Ward Systems Engineer Shamrock Trading Corporation Office Phone/Fax: (913) 310-2247 Email: award(a)rtsfinancial.com<mailto:award@rtsfinancial.com> Website: www.shamrocktradingcorp.com<http://www.shamrocktradingcorp.com/> This e-mail communication (including any attachments) is intended only for use by the individual or entity named above and is considered confidential. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you should immediately stop reading this message and delete it from your system. Any unauthorized reading, distribution, copying or other use of this communication (or its attachments) is strictly prohibited.

1 0

"Draw Error" with Custom OIDs
by Gordon Cheng (gocheng) 28 Mar '19

28 Mar '19

Hi Observium team: We are having Draw Error issue generating graphs from two Custom OIDs (connection counts and translation counts) for Cisco firewalls. These are the two OIDs which are working with snmpwalk: sjc-observium-1:/opt/observium# snmpwalk -v 2c -c '<snipped>' SJC-FW07-INTERNET .1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6 SNMPv2-SMI::enterprises.9.9.147.1.2.2.2.1.5.40.6 = Gauge32: 2521 sjc-observium-1:/opt/observium# snmpwalk -v 2c -c '<snipped>' SJC-FW07-INTERNET .1.3.6.1.4.1.9.10.77.1.2.1.0 SNMPv2-SMI::enterprises.9.10.77.1.2.1.0 = Gauge32: 1349 sjc-observium-1:/opt/observium# Our Observium is currently running 19.1.9656 (rolling) as a troubleshooting step (my colleague has another system and it works for them with 9656). We have the same issue when running 9712 earlier. [cid:image001.png@01D4E4B1.F132CE50] [cid:image002.png@01D4E4B1.F132CE50] [cid:image003.png@01D4E4B1.F132CE50] [cid:image004.png@01D4E4B1.F132CE50] Doesn't seem like there are any error logs: sjc-observium-1:/opt/observium/logs# grep -i xlate_count * sjc-observium-1:/opt/observium/logs# grep -i conn_count * sjc-observium-1:/opt/observium/logs# grep -i "1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6" * sjc-observium-1:/opt/observium/logs# grep -i "1.3.6.1.4.1.9.10.77.1.2.1.0" * sjc-observium-1:/opt/observium/logs# We would like to see if there is any suggestion to further troubleshoot the issue. Any input is greatly appreciated. Thanks. - Gordon

2 2

Re: [Observium] Low dbm sensor alerts for shutdown interfaces
by Adam Ward 28 Mar '19

28 Mar '19

Andrew- I noticed this too, it was like if the SFP was inserted, it’d still throw an error because the transceiver tx/rx limits were technically still out of spec. There needs to be logic to check for the interface status first, then disable the thresholds/alerts if down. I had just considered removing optics for ports that were shut, but kinda annoying for sure. Adam Ward Systems Engineer Shamrock Trading Corporation Office Phone/Fax: (913) 310-2247 Email: award(a)rtsfinancial.com<mailto:award@rtsfinancial.com> Website: www.shamrocktradingcorp.com<http://www.shamrocktradingcorp.com/> From: observium <observium-bounces(a)observium.org> on behalf of Andrew Lemin via observium <observium(a)observium.org> Reply-To: Observium <observium(a)observium.org> Date: Friday, March 22, 2019 at 10:46 AM To: Andrew Lemin via observium <observium(a)observium.org> Cc: Andrew Lemin <AndrewL(a)4d-dc.com> Subject: [Observium] Low dbm sensor alerts for shutdown interfaces Hi, Has anyone else seen the issue where after enabling an alert checker for transceiver optics with sensor_value greater @sensor_limit and sensor_value less @sensor_limit_low, alerts are still received for shutdown interfaces? For example, on a cisco switch when running ‘show interfaces transceiver detail’, we can see; Optical High Alarm High Warn Low Warn Low Alarm Receive Power Threshold Threshold Threshold Threshold Port (dBm) (dBm) (dBm) (dBm) (dBm) Te1/1/25 -40.0 1.9 -1.0 -9.9 -13.9 Te2/1/1 -40.0 1.9 -1.0 -9.9 -13.9 Etc.. Te1/1/25 admin down down Te2/1/1 admin down down Etc The sensors page shows the correct thresholds etc, but shows the interface in Red (and hence is generating alerts through the checker), rather than grey (as the port is shutdown and has no fibre connected – hence -40dbm.). [cid:image001.png@01D4E0C6.4F698990] The same port on the Ports page does show the interface as being grey/shutdown [cid:image002.png@01D4E0C6.4F698990] Have no idea how to resolve this and stop getting transceiver alerts for shutdown interfaces? This sounds like a potential bug? Thanks, Andy. This e-mail communication (including any attachments) is intended only for use by the individual or entity named above and is considered confidential. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you should immediately stop reading this message and delete it from your system. Any unauthorized reading, distribution, copying or other use of this communication (or its attachments) is strictly prohibited.

8 12

ThinClient Wyse detected as "Generic Device"
by Ing. Hugo Rodriguez 28 Mar '19

28 Mar '19

Hi Observium team, Please, I need your help with a issue Description Thinclients Wyse Model Tx0 units are being discovered as a generic device. Output from snmpwalk for the device is attached. Environment Observium CE 18.9.9420 (5th September 2018) OS Linux 4.9.0-8-amd64 [amd64] (Debian 9.6) Apache Apache PHP 7.0.33-0+deb9u3 (OPcache: ENABLED) Python 2.7.13 MySQL 10.1.37-MariaDB-0+deb9u1 (extension: mysqli 5.0.12-dev) SNMP NET-SNMP 5.7.3 RRDtool 1.6.0 Fping 3.15 (IPv4 and IPv6) Thanks Hugo

1 0

Observium Enterprise Multi Poller/Syslog Servers
by Ron Culler 26 Mar '19

26 Mar '19

I know you can set multiple pollers to query the devices but is it possible to also enable syslog on each poller as well? I would like to have multiple syslog servers for load and redundancy. Thanks Ron

3 3

Change device IP?
by Kaiser, Erich 26 Mar '19

26 Mar '19

What is the best way to go about changing the IP I am using to monitor the device without loosing all the graph data?

3 4

Services checking?
by Adam Ward 26 Mar '19

26 Mar '19

Hello, I see the service discovery options and enabled the “services” module. I am not seeing any services on the device like it shows on your site’s screenshots. I’m an enterprise customer. Please let me know if there’s something I am missing, or if there’s more documentation around this functionality. I really need to do basic HTTP checks. I see there was some support at one time using nagious-esque plugins, but I can’t seem to find any references to the code of the actual services checks? I saw it only works for device type “server” but, even on the local OBS, the services module doesn’t really do anything. I desperately need this functionality: http://www.observium.org/images/ss-dev-linux-2x.png I see the queries in the debug logging for the web UI device page, but since the services table doesn’t have any discovered services, I can’t see anything. SELECT COUNT(service_id) FROM `services` WHERE `device_id` = '1' SELECT COUNT(service_id) FROM `services` WHERE `device_id` = '1' AND `service_status` = '1' AND `service_ignore` ='0' SELECT COUNT(service_id) FROM `services` WHERE `device_id` = '1' AND `service_status` = '0' AND `service_ignore` = '0' SELECT COUNT(service_id) FROM `services` WHERE `device_id` = '1' AND `service_ignore` = '1' Here’s the snippet of the debug output for the discovery phase: ##### Module Start: services ##### Services: CMD[/usr/bin/snmpbulkwalk -v2c -c 'MHikJ8dloru_flZ' -Pu -Osqn -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp 'udp':'localhost':'161' .1.3.6.1.2.1.7.5.1.2] CMD EXITCODE[0] CMD RUNTIME[0.0045s] STDOUT[ .1.3.6.1.2.1.7.5.1.2.0.0.0.0.34345 34345 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.36227 36227 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.42326 42326 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.44522 44522 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.45104 45104 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.45205 45205 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.46519 46519 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.48629 48629 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.48831 48831 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.50874 50874 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.52511 52511 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.53048 53048 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.54029 54029 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.54891 54891 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.57027 57027 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.58503 58503 .1.3.6.1.2.1.7.5.1.2.0.0.0.0.60052 60052 .1.3.6.1.2.1.7.5.1.2.10.2.2.70.68 68 .1.3.6.1.2.1.7.5.1.2.127.0.0.1.161 161 .1.3.6.1.2.1.7.5.1.2.127.0.0.53.53 53 ] SNMP STATUS[TRUE] o Duration 0.0059s Adam Ward Systems Engineer Shamrock Trading Corporation Office Phone/Fax: (913) 310-2247 Email: award(a)rtsfinancial.com<mailto:award@rtsfinancial.com> Website: www.shamrocktradingcorp.com<http://www.shamrocktradingcorp.com/> This e-mail communication (including any attachments) is intended only for use by the individual or entity named above and is considered confidential. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you should immediately stop reading this message and delete it from your system. Any unauthorized reading, distribution, copying or other use of this communication (or its attachments) is strictly prohibited.

4 4

Alerts based on Juniper FW counters
by Jason Lixfeld 25 Mar '19

25 Mar '19

Hello, Using Observium Professional, svn up’d today. For Juniper MX, the Firewall tab graphs firewall filters, policers, etc., however I can’t seem to find a way to create alerts based on any of those values. Am I missing it somewhere or is that not supported? Specifically I’m looking to be alerted when there is a policer violation. Thanks in advance.

1 0

Vendor & Hardware Changes in event log
by mal＠platinumnetworks.com.au 25 Mar '19

25 Mar '19

I am constantly seeing updates in the event log telling me that the Vendor and Hardware details have been ‘changed’. It looks like this is happening for all devices even though none of those details have actually changed. I’d like to monitor the event log for things that actually happen 😊. Do I need to change anything to exclude these warnings about non-existent changes? FYI I’m running 19.3.9774 Cheers Mal

2 3

How to configure "Entity Association Ruleset" section of Alert checker for Device = * and Entity = *
by Andrew Lemin 22 Mar '19

22 Mar '19

Hi, Some time ago when creating Alert Checkers, the “Device Match” and “Entity Match” fields were freeform logic statements, which allowed you to enter complex logic or just the * wildcard to match all; [cid:image001.png@01D4E0AD.B7B51910] We want to create a new generic Sensor based Alert Checker as per the examples in; https://github.com/mgmoerman/docs/blob/master/observium-alert-checkers.md Alert Entity type Check Conditions Check Conditions boolean Device match Entity match State sensor is in ALERT state! Status status_event = alert status_event = warning ANY * * However, the new Alert Checker section no longer allows freeform “Device Match” and “Entity Match” fields, and instead provides a new “Entity Association Ruleset” section providing a logic builder for the Entity Match (which is very helpful), however we cannot figure out how to encode wildcards/* to match all for the Devices and Entities using the new editor? [cid:image002.png@01D4E0AD.B7B51910] Thanks, Andy.

1 0