- observium - lists.observium.org

Something like autobackup ?
by Edvinas Kairys 29 Jul '20

29 Jul '20

hello, As the standalone Observium server grows with more and more devices, rules, checkers, etc. The possibility of losing that all due to hardware failure would make me mad. Is there any best practices of making the backups of Observium data to make the emergency restore more faster than from zero ? Thanks

2 1

Re: [Observium] Changing Observium alert message contents
by Risto Jürisson 28 Jul '20

28 Jul '20

I would like to have more information in my email alert messages. - Adding the names to DNS or hosts file does not currently give enough information. I was hoping that someone here already knows where this template file is located 😊 (and I would back that file up before modifying it 😉). Best regards Risto Date: Fri, 17 Jul 2020 22:03:41 +0200 From: Tom Laermans <tom.laermans(a)powersource.cx<mailto:tom.laermans@powersource.cx>> To: observium(a)observium.org<mailto:observium@observium.org> Subject: Re: [Observium] ***SPAM*** Re: Changing Observium alert message contents I would personally just add host names into DNS but we've had this discussion for 10 years now :D If you can't find the template you'd better not change it as you may have issues resolving conflicts upon upgrades... Tom On 7/17/2020 7:34 PM, adama--- via observium wrote: > > Why do you think manually setting the (almost entirely unused) > description field is less work than adding hostnames to /etc/hosts? > > Adam. > > *From:*observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> *On Behalf Of > *Risto Jürisson via observium > *Sent:* 17 July 2020 14:44 > *To:* observium(a)observium.org<mailto:observium@observium.org> > *Cc:* Risto Jürisson <risto(a)blueit.ee<mailto:risto@blueit.ee>> > *Subject:* Re: [Observium] Changing Observium alert message contents > > Hi > > Your solution does work for changing the name from IP address to > hostname. (In the picture below I removed the device from web > interface and readded it so the history got deleted.) > > What I can see is that the Device name is now in 3 places where > previously the IP address was: Email Title, Entity and Device. > > As we also have very many network devices that we want to monitor then > we think that adding all those IP addresses with hostnames manually to > the DNS (or hosts file) is not very practical, especially if we need > to to it also with future devices. > > Maybe there still is a possibility that we can change the email > contents with some other fields: adding Description, Location or > something like that? > > Someone maybe knows where this template config file is located? > > Best regards > > Risto > > Date: Thu, 16 Jul 2020 15:28:00 +0200 > > From: Markus Klock <markus(a)best-practice.se > <mailto:markus@best-practice.se>> > > To: Observium <observium(a)observium.org > <mailto:observium@observium.org>> > > Subject: Re: [Observium] Changing Observium alert message contents > > Message-ID: > > > <CAF6uZmLm4R+RAb6UhazZPztF4jgXjOx=6dft_y5M193k_NzFBw(a)mail.gmail.com > <mailto:CAF6uZmLm4R+RAb6UhazZPztF4jgXjOx=6dft_y5M193k_NzFBw@mail.gmail > .com>> > > Content-Type: text/plain; charset="utf-8" > > Hi, > > the best way is to monitor the device via its hostname instead of IP. > > Login to the Observium server CLI and use the script > "rename_device.php <old_name> <new_name>" where the old name is the > device IP and the new name is the hostname. > > This will rename the device in Observium to its real hostname and the > poller will just resolve its dns name to find the IP to poll. > > All the historic data for the device will remain. > > /Markus > > Den tors 16 juli 2020 kl 14:01 skrev Risto Jürisson via observium < > > observium(a)observium.org<mailto:observium@observium.org> <mailto:observium@observium.org>>: > > > Hi > > > > > > > > > > > > This is my first message to this list. I also wrote to the IRC on > > > different days, but the web-based IRC client is not really good as > > > information goes missing after disconnecting and relogging. > > > > > > > > > > > > We have Observium running on Ubuntu 16.04 and are monitoring > > different > > > Windows servers and also some network devices. Below there is a pic > > of > > > an alert for a Mikrotik wifi device that has gone down. We added the > > > device to Observium via IP and therefore we also see the Device name > > > with the IP address. Sadly we do not remember all the devices via > > > their IP, but rather their hostname or description. > > > > > > I have set human-friendly names on the observium web interface to > > > device „System name“ value and also under „General Device Settings“ > > to > > > „Description“ value. – *Is there a possibility to add those fields > > to > > > the email report and where should I do this?* > > > > > > From IRC channel I got an answer that the email template can be > > > changed for the Observium Pro version but I do not know where to > > find > > > this config file. This can not be done in the web interface as I understand. > > > > > > > > > > > > > > > > > > (I also have questions on how to monitor services on Windows Server > > > but I think that is via SNMP and specific OID/MIB´s. So I will look > > > into that myself first.) > > > > > > > > > > > > > > > > > > Best regards > > > > > > > > > > > > Risto

2 3

Re: [Observium] Changing Observium alert message contents
by Risto Jürisson 17 Jul '20

17 Jul '20

Hi Your solution does work for changing the name from IP address to hostname. (In the picture below I removed the device from web interface and readded it so the history got deleted.) What I can see is that the Device name is now in 3 places where previously the IP address was: Email Title, Entity and Device. As we also have very many network devices that we want to monitor then we think that adding all those IP addresses with hostnames manually to the DNS (or hosts file) is not very practical, especially if we need to to it also with future devices. Maybe there still is a possibility that we can change the email contents with some other fields: adding Description, Location or something like that? Someone maybe knows where this template config file is located? [cid:image001.png@01D65C59.2119C4F0] Best regards Risto Date: Thu, 16 Jul 2020 15:28:00 +0200 From: Markus Klock <markus(a)best-practice.se<mailto:markus@best-practice.se>> To: Observium <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Changing Observium alert message contents Message-ID: <CAF6uZmLm4R+RAb6UhazZPztF4jgXjOx=6dft_y5M193k_NzFBw(a)mail.gmail.com<mailto:CAF6uZmLm4R+RAb6UhazZPztF4jgXjOx=6dft_y5M193k_NzFBw@mail.gmail.com>> Content-Type: text/plain; charset="utf-8" Hi, the best way is to monitor the device via its hostname instead of IP. Login to the Observium server CLI and use the script "rename_device.php <old_name> <new_name>" where the old name is the device IP and the new name is the hostname. This will rename the device in Observium to its real hostname and the poller will just resolve its dns name to find the IP to poll. All the historic data for the device will remain. /Markus Den tors 16 juli 2020 kl 14:01 skrev Risto Jürisson via observium < observium(a)observium.org<mailto:observium@observium.org>>: > Hi > > > > This is my first message to this list. I also wrote to the IRC on > different days, but the web-based IRC client is not really good as > information goes missing after disconnecting and relogging. > > > > We have Observium running on Ubuntu 16.04 and are monitoring different > Windows servers and also some network devices. Below there is a pic of > an alert for a Mikrotik wifi device that has gone down. We added the > device to Observium via IP and therefore we also see the Device name > with the IP address. Sadly we do not remember all the devices via > their IP, but rather their hostname or description. > > I have set human-friendly names on the observium web interface to > device „System name“ value and also under „General Device Settings“ to > „Description“ value. – *Is there a possibility to add those fields to > the email report and where should I do this?* > > From IRC channel I got an answer that the email template can be > changed for the Observium Pro version but I do not know where to find > this config file. This can not be done in the web interface as I understand. > > > > > > (I also have questions on how to monitor services on Windows Server > but I think that is via SNMP and specific OID/MIB´s. So I will look > into that myself first.) > > > > > > Best regards > > > > Risto > > IT-manager > > risto(a)blueit.ee<mailto:risto@blueit.ee> > > > _______________________________________________ > observium mailing list > observium(a)observium.org<mailto:observium@observium.org> > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >

3 2

Changing Observium alert message contents
by Risto Jürisson 16 Jul '20

16 Jul '20

Hi This is my first message to this list. I also wrote to the IRC on different days, but the web-based IRC client is not really good as information goes missing after disconnecting and relogging. We have Observium running on Ubuntu 16.04 and are monitoring different Windows servers and also some network devices. Below there is a pic of an alert for a Mikrotik wifi device that has gone down. We added the device to Observium via IP and therefore we also see the Device name with the IP address. Sadly we do not remember all the devices via their IP, but rather their hostname or description. I have set human-friendly names on the observium web interface to device "System name" value and also under "General Device Settings" to "Description" value. - Is there a possibility to add those fields to the email report and where should I do this? >From IRC channel I got an answer that the email template can be changed for the Observium Pro version but I do not know where to find this config file. This can not be done in the web interface as I understand. [cid:image001.png@01D65B81.16F78F80] (I also have questions on how to monitor services on Windows Server but I think that is via SNMP and specific OID/MIB´s. So I will look into that myself first.) Best regards Risto IT-manager risto(a)blueit.ee<mailto:risto@blueit.ee>

2 1

Cannot create RRD for type exim - not found in definitions
by Wouter de Man 15 Jul '20

15 Jul '20

Running latest rolling release 20.6.10499. Trying to add Exim stats via the Unix agent. Seems RRD definitions are missing for the 'exim' application, they only exist for the 'exim-mailqueue' application'. See below the related debug output of poller.php --- SQL[SELECT * FROM `applications` WHERE `device_id` = '83'] ROWS[2] SQL RUNTIME[0.00004196s] o Applications exim SQL[SELECT * FROM `applications` WHERE `device_id` = '83' AND `app_type` = 'exim' AND `app_instance` IS NULL] ROWS[1] SQL RUNTIME[0.00018406s] .Cannot create RRD for type exim - not found in definitions!

1 1

Varnish Agent not working
by Simone Montagnani 15 Jul '20

15 Jul '20

Hi, I have already used varnish agent on a server with version 4, now I'm trying to let it work on varnish version 6.4. observium_agent is responding, but the result of varnish agent is empty : <<<app-varnish>>> ;;;;;;;;;;;;; instead of: <<<app-varnish>>> 212916238;0;0;1393;0;;0;0;393297;1216912816;160350799;0;657384598; like I have on the old one. If I lunch perl varnish I don't get any particular error, maybe the agent must be updated to work with new versions? I see varnish perl script is using varnishstat -x , and the results are somehow different from the old varnish version: VARNISH 6.4: <?xml version="1.0"?> <varnishstat timestamp="2020-07-01T15:38:00"> <stat> <name>MGT.uptime</name> <value>60710</value> <flag>c</flag> <format>d</format> <description>Management process uptime</description> </stat> <stat> <name>MGT.child_start</name> <value>1</value> <flag>c</flag> <format>i</format> <description>Child process started</description> </stat> <stat> <name>MGT.child_exit</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Child process normal exit</description> </stat> <stat> <name>MGT.child_stop</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Child process unexpected exit</description> </stat> <stat> <name>MGT.child_died</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Child process died (signal)</description> </stat> VARNISH 4 <?xml version="1.0"?> <varnishstat timestamp="2020-07-01T15:37:43"> <stat> <type>MAIN</type> <name>uptime</name> <value>13848724</value> <flag>c</flag> <format>d</format> <description>Child process uptime</description> </stat> <stat> <type>MAIN</type> <name>sess_conn</name> <value>250458042</value> <flag>c</flag> <format>i</format> <description>Sessions accepted</description> </stat> <stat> <type>MAIN</type> <name>sess_drop</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Sessions dropped</description> </stat> <stat> <type>MAIN</type> <name>sess_fail</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Session accept failures</description> </stat> <stat> <type>MAIN</type> <name>client_req_400</name> <value>1236</value> <flag>c</flag> <format>i</format> <description>Client requests received, subject to 400 errors</description> </stat> I tried to change the code, because as you can see the parameters are similar but the name now have a prefix like MGT, but mostly "MAIN." for the parameters we are trying to get . I'm no perl esxpert I tried simply to add MAIN. but it still isn't working... Any ideas? Best regards, Simone

2 1

Latest Update 20.7.10551(Rolling)
by Serghei Golipad 15 Jul '20

15 Jul '20

Hi Guys, Latest updated killed all icons(missing ones are replaced with red circle with white block in them) and their placements, anyone else has this problem? Cheers PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. CDW Limited is a Company registered in England and Wales. This email is sent for and on behalf of CDW Finance Holdings Limited. CDW Finance Holdings Limited is the UK holding company for CDW Limited trading as CDW. The registered office for CDW Finance Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than CDW or the sender of its existence. For more information about CDW please visit www.uk.cdw.com

2 1

request
by Luis Olavarrieta 15 Jul '20

15 Jul '20

I got this error message, please assist ##### Module Start: neighbours ##### o MIKROTIK-MIB o Trying to discover host 3916mex_clearcom_296 (172.27.3.141) through MNDP (xdp) Trying v2c community *** [0] ... No reply on community public using v2c. Trying v1 community *** [0] ... No reply on community public using v1. Invalid arguments passed into function get_port_by_index_cache(). Please report to developers. o Trying to discover host sip-t21p_e2 (0.0.0.0) through MNDP (xdp) Invalid arguments passed into function get_port_by_index_cache(). Please report to developers. Invalid arguments passed into function get_port_by_index_cache(). Please report to developers.

2 1

SNMP + Syslog Question
by Randy Schultz 15 Jul '20

15 Jul '20

I am interested in merging SNMP + Syslog data from the firewalls (SonicWALL) I manage. With this data, I would like to accomplish two things... 1. Monitor for security events and send alerts if / when appropriate 2. Generate and send regulatory (PCI) compliance reports...this includes performance stats such as Up Time / Down Time as well as security stats (e.g. Intrusions blocked / detected)...these stats would ideally be displayed in some form of chart At present, SNMP data is being collected by Observium and Syslog data is being collected by Graylog. The question is where would it be best to merge the data so as to accomplish the goals outlined above. Graylog has the ability to search its data and generate report widgets (i.e. tables / charts) which in turn can be placed on a Dashboard. If I take this approach I would need to send Observium's SNMP data to Graylog but I've not been able to figure out how to do so. Observium has the ability to ingest Syslog data and alert on it but it's unclear on how I could use it to generate tables / charts for reporting purposes. I would appreciate any thoughts / recommendations on either of the options listed here. -- Randy Schultz

2 1

poll ports without VLAN information
by Henrik Aarfeldt 15 Jul '20

15 Jul '20

Hi there, As I remember, when polling a port it will also get VLAN information. Is there a way to don't get VLAN information ? VLAN is disabled in DiscoveryModules and PortsPoll Module. Reason: We have some units with very few interfaces, but a large amount of VLANs. This makes polls take too long time (+999seconds) TIA. -- Med venlig hilsen | Best regards | Mit freundlichen Grüßen | Cordialement | आपकी ईमानदारी से Henrik Aarfeldt Drift > Drift > Overvågning Overvågning + SårbarhedsKortlægning + SvartidsMålinger + NetværksKvalitetsMålinger. Mobil: +45 2494 8281 Mail: Henrik.Aarfeldt(a)RegionH.dk Region Hovedstaden Center for IT, Medico & Telefoni (CIMT) Borgervænget 7, 3. sal 2100 København Ø Ferie uge 33+34+35 2020. ________________________________ Region Hovedstaden anvender de personoplysninger, du giver os i forbindelse med din henvendelse. Du kan læse mere om formålet med anvendelsen samt dine rettigheder på vores hjemmeside: www.regionh.dk/persondatapolitik

2 1