- observium - lists.observium.org

syslog search
by Carlos Martinez 14 Jan '14

14 Jan '14

Is there a way to search all syslogs for all devices at the same time? I had a network interruption at a particular time and I would love to go a page and put in the time frame and see all syslog messages from everything monitored in a given location to see what happened. ________________________________ This message may contain confidential or privileged information. If you are not the intended recipient, please advise us immediately and delete this message. See http://www.datapipe.com/legal/email_disclaimer/ for further information on confidentiality and the risks of non-secure electronic communication. If you cannot access these links, please notify us by reply message and we will send the contents to you. Unless otherwise specified in a written agreement, this e-mail neither constitutes an agreement to conduct transactions by electronic means nor creates any legally binding contract or enforceable agreement.

1 0

TIA, I like to ask for help.
by tikastribe BidzPogPhodyMikeGyson 14 Jan '14

14 Jan '14

Hi Gurus, I'm not good in linux but my boss ask me to install observium in our RHEL box. I followed this link http://www.observium.org/wiki/RHEL_Installation#Introduction then I stop here. (I have a fresh install RHEL then i just follow everything) My comments are in open and closed parenthesis. Copy the default configuration file and edit it for your system: (I copy the config.php in my observium folder where the extracted folder was. Is this right?) cp config.php.default config.php Add an entry for fping to config.php as the location is different on RHEL: (I edit the copied file) $config['fping'] = "/usr/sbin/fping"; Edit config.php. Change the options to reflect your installation. Setup the MySQL database and insert the default schema: (I really stop here because when i type this in shell i had this error -bash: php: command not found) php includes/update/update.php It is OK to have some errors in the SQL revisions up to 006. Create the rrd directory to store RRDs in: (i dont know where to put this?) mkdir rrd chown apache:apache rrd Thank you and Regards,Michelle

2 1

Null data billing module API
by Daniel Rolfe 14 Jan '14

14 Jan '14

Hi all, I'm trying to port billing data out of observium via the simple API but I'm only getting null data as below: {"login":{"success":{"code":"101","msg":"User authentification succeeded"}},"data":[{"timestamp":null,"traf_total": null,"traf_in":null,"traf_out":null},{"timestamp":null," traf_total":null,"traf_in":null,"traf_out":null},{" timestamp":null,"traf_total":null,"traf_in":null,"traf_out" :null},{"timestamp":null,"traf_total":null,"traf_in":null,"traf_out":null} Any ideas on what could be causing this ? Regards, Daniel

2 4

Multiple communities/hosts for same IP address (localhost)
by Bogdan Ghita 13 Jan '14

13 Jan '14

Hello I'm trying to setup a monitoring system for two networks that have several devices each (mostly switches) behind a NAT router; unfortunately I am limited on the ports, so had to use SSH tunnelling from the Observium machine to each of the networks in order to access all the devices. I followed the instructions from http://vfamilyserver.org/blog/2013/03/snmp-hell-part-1-proxy-to-multiple-de… setup the SNMP proxying and it all works quite well, I can snmpwalk each of the devices behind one of the two NAT routers only by changing the community name (haven't yet setup the second one). However, I'm not sure how/if it's possible for Observium to see the different devices - I've added the NAT router with add_device.php (I used command line rather than web interface due to SNMP running over TCP) and was recorded as 127.0.0.1 (which does make sense, as it's the tunnelled from the local host); then, when I tried to run the command with one of the other community strings, it returned an "Already got device 127.0.0.1". Further, although I haven't yet set it up, I will probably have the same problem when adding the tunnelled NAT router on the second network. Is there a configuration/workaround that would allow to differentiate between these multiple instances of what appears to be the same [local]host? Best regards Bogdan

4 5

Re: [Observium] Sudden loss of history
by Adam Armstrong 12 Jan '14

12 Jan '14

3 3

Sudden loss of history
by Robert Williams 12 Jan '14

12 Jan '14

Hi Guys, At midnight last night during the normal scheduled re-discovery we appear to have lost all historic data for all ports on a large number of our switches. I’m still checking them all but it appears to have affected all Cisco 2960G units (24 or 48 port). Data collection is working fine, but all history has gone, including all CPU, RAM, temperatures, fans, RPS Power etc. [cid:image001.png@01CF0F7A.BD8E4C80] There are no Eventlog entries for the devices for the last 24 hours, but there are some from a couple of days ago which read like this: [cid:image002.png@01CF0F7B.7D5A55E0] However, as I mentioned these events are from the 9th so a few days ago. Any ideas please? I can restore the RRDs from backup but I’d like to know why it’s done this otherwise I’ll just be restoring them again tomorrow morning ☺ Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

2 2

Device rebooted false alarm notification
by Jerico Rubion 09 Jan '14

09 Jan '14

Hi, I'm receiving a false alarm notification about a device which rebooted where in fact the device did not actually reboot. Do we have observium logs where i can look more about the details? or is there a work around to prevent such occurrences? /Notification that i received:// / Observium :: Network Observation and Monitoring Device Rebooted : lnx-svr004.27th.orient.77globalservices.com 82 days, 1h 44m 40s ago. E-mail sent to: xxx(a)xxx.xxx E-mail sent at: 2014-01-07 04:43:44 / From Server:/ [root@LNX-SVR004 ~]# uptime 07:29:05 up 994 days, 7:40, 1 user, load average: 0.15, 0.11, 0.07 Best Regards, Echo

5 6

Enterasys Poller
by Corey Eichelberger 09 Jan '14

09 Jan '14

Hello, I am working on evaluating Observium as a Cacti replacement for monitoring network devices and servers at my university. So far I have Observium working with all of our Cisco and Juniper gear as well as a few of the Linux boxes that I manage but seem to be having issues with getting everything working nicely with our Enterasys gear. Let me preface the below with stating that this project is absolutely wonderful and if I can get our Enterasys devices to play nicely we will be upgrading to the paid version. I understand that Enterasys is not officially supported so I have begun diving into the code base to see what needs to be done to write the poller modules myself. Does any one on the list have the ports poller fully working with an Enterasys device? Now, one of the things that I noticed with the Enterasys gear is that the ports poller module will continue running the snmpbulkwalk for the dot1qVlanCurrentEgressPorts mib until the user finally kills the poller. This appears to be an issue with the number of repetitions as the poller will continue walking the table for over an hour. I have the following line in my config.php which should limit the repetitions. $config['snmp']['max-rep'] = TRUE; -- Thanks, Corey Eichelberger

1 0

Question re: failing discovery of a device
by Chris Moody 09 Jan '14

09 Jan '14

Hello. Running Observium CE 0.13.10.4586. I've run into a strange situation with a single device that I am unable to discover and get added into observium's inventory. The device is an F5 Load-balancer. I have 51 other F5's all working beautifully, yet this one seems to be giving me grief for some reason when I try to discover it. I am able to ping and snmpwalk the device beautifully from the observium server, yet every attempt to run add_device.php returns with the following: ========= root@observium:~# ./add_device.php lb1-prod-c-qcy examplecommunitystring v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Observium v0.13.10.4586 Add Device USAGE: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] add_device.php <hostname> [any|nanp|anp|ap] [v3] [user] [password] [enckey] [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] EXAMPLE: SNMPv1/2c: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] SNMPv3 : Defaults : add_device.php <hostname> any v3 [user] [port] [udp|udp6|tcp|tcp6] No Auth, No Priv : add_device.php <hostname> nanp v3 [user] [port] [udp|udp6|tcp|tcp6] Auth, No Priv : add_device.php <hostname> anp v3 <user> <password> [md5|sha] [port] [udp|udp6|tcp|tcp6] Auth, Priv : add_device.php <hostname> ap v3 <user> <password> <enckey> [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] ========= yet, as you can see, when I snmpwalk this device, I get responses back just fine. ========= root@observium:~# snmpwalk -v2c -c examplecommunitystring lb1-prod-c-qcy | head SNMPv2-MIB::sysDescr.0 = STRING: Linux lb1-prod-c-qcy 2.6.18-164.11.1.el5.1.0.f5app #1 SMP Mon Mar 5 12:40:48 PST 2012 x86_64 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (3523019831) 407 days, 18:09:58.31 SNMPv2-MIB::sysContact.0 = STRING: NOC SNMPv2-MIB::sysName.0 = STRING: lb1-prod-c-qcy SNMPv2-MIB::sysLocation.0 = STRING: QDC-C SNMPv2-MIB::sysServices.0 = INTEGER: 78 SNMPv2-MIB::sysORLastChange.0 = Timeticks: (2) 0:00:00.02 SNMPv2-MIB::sysORID.1 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance SNMPv2-MIB::sysORID.2 = OID: SNMP-MPD-MIB::snmpMPDCompliance SNMPv2-MIB::sysORID.3 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance ... ========= I've tried the discovery via v1 as well as v2c, no difference. Every time I try a walk, I get results back consistently...so it's not like I'm seeing intermittent responses or anything. I was able to get it to finally discover when I specified the port & transport fields to add_device.php. Any thoughts as to what might be failing or not satisfying the add_device.php utility that it would flag this host as not replying? Why would port/transport being specified make a difference if it's still just standard 161/udp? Any hints or suggestions are appreciated. Cheers, -Chris

1 0

Re: [Observium] Alerting system: multiple associations
by Stefano Cordio 08 Jan '14

08 Jan '14

Bump :-) From: Stefano Cordio [mailto:stefano.cordio@gmail.com] Sent: martedì 24 dicembre 2013 11:42 To: 'Observium Network Observation System' Subject: [Observium] Alerting system: multiple associations Hey guys, I have the following alert checker: As you can see, the checker is applied only to server devices but Id like to extend that to storage devices. Is there a simple way to modify the device match rule in something like type equals (server or storage)? I tried searching any suggestion on the wiki and on the mail archive, but I didnt find anything. Thanks for any hints, Stefano

2 1