- observium - lists.observium.org

Equipement Type automaticaly updated
by Paul Scheben 26 May '21

26 May '21

Hi, Since last rolling update (21.5.11346), all equipment manually set are automatically change after a poll. Regards, Paul

1 0

Fortigate firewalls in Active/Passive with VDOMs
by Scooby Doo 25 May '21

25 May '21

6 10

FortiGate IPsec Status/Stats
by Storer, Darren 25 May '21

25 May '21

Hello, I don't normally use FortiGate FWs for IPsec but now I need to monitor the status/stats (up/down/throughput) of a tunnel - has anyone managed this with Observium? Thanks in advance for any hints Darren

1 0

Performance tuning
by Lars Joergensen 19 May '21

19 May '21

Hi We have one Observium server looking at * 476 devices (mainly switches, some firewalls, some WAN routers) * 3666 ports * 8692 sensors The server has 6 cores (~70% idle, ~3% iowait) and 8 GB memory. We have configured 15 poller threads with max 6 allowed wrapper processes. The server is struggling to keep the polling cycle below 300 seconds (averaging 376 secs). Is this workload realistic for one server, and if so where do you suggest we tune? Or do we need to use a distributed setup? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

5 6

Nightly Backup
by Terry Stone 10 May '21

10 May '21

For what its worth I have written a small php script to provide a 7 day rolling backup of my observium server to an external server and to send a confirmation email when backup is complete: #!/usr/bin/env php <?php // Script to backup Observium data created by Terry Stone on 3rd. May 2021 include "config.php"; // Collect database credentials $sql_username = $config['db_user']; $sql_userpass = $config['db_pass']; // FTP server credentials $ftp_server = '[ftp server name]'; $ftp_username = '[ftp server username]'; $ftp_userpass = '[ftp server password]'; // Email credentials $mail_to = $config['email']['default']; $mail_header = 'From: '.$config['email']['from'] . "\r\n" . 'X-Mailer: PHP/' . phpversion(); $mail_subject = "Observium Server Backup"; $mail_message = "Observium server backups sent to ".$ftp_server." on ".date("l jS F Y").":\n\n"; // Files to backup $file[0]= "observium-rrd.tar.gz"; $file[1]= "observium-dump.sql"; $file[2]= "config.php"; // Prefix filename to be sent to FTP server with day of the week $counter=0; while ($counter < count($file)) { $backupfile[$counter]=date("N").$file[$counter]; $counter++; } // Assemble observium backup fils exec('tar zcvf backup/'.$file[0].' rrd'); exec('/usr/bin/mysqldump -u observium --user='.$sql_username.' --password='.$sql_userpass.' --databases observium --add-drop-table --extended-insert > backup/'.$file[1]); exec('cp config.php backup/'.$file[2]); // Connect and login to FTP server $ftp_conn = ftp_connect($ftp_server) or die("Could not connect to $ftp_server"); $login = ftp_login($ftp_conn, $ftp_username, $ftp_userpass); // Change to passive mode ftp_pasv($ftp_conn,true); // Upload files to FTP server $counter=0; while ($counter < count($file)) { if (ftp_put($ftp_conn, $backupfile[$counter], "backup/".$file[$counter],FTP_BINARY)) { exec('cp backup/'.$file[$counter].' backup/'.$backupfile[$counter]); $status = date("H:i:s")." Successfully backed up ".$file[$counter]." to ".$backupfile[$counter]."\n"; } else { $status = date("H:i:s")." Error backing up ".$file[$counter]." to ".$backupfile[$counter]."\n"; } $mail_message = $mail_message.$status; $counter++; } // Close FTP connection ftp_close($ftp_conn); // Add final line to message body $mail_message=$mail_message."\nPlease do not reply to this message, mail account is send only.\n"; // Send Completion message mail($mail_to,$mail_subject,$mail_message,$mail_header); ?> It is set to run nightly with this Cron Job: # Run nightly backup and send files to offshore FTP server 0 02 * * * root cd /opt/observium && php observiumbackup.php The backups are also held on the Observium Server in /opt/observium/backups. You need to make sure the backup files have the correct permissions. Hope this will help someone. An observium server that has run for years holds a very large amount of valuable historical data and servers can fail so its good to have that data in a safe place! Terry Stone.

3 2

API, get syslog alarms list by device id
by Vasiliy Moroz 10 May '21

10 May '21

Dear Observium community, I usе Observium and the more I use it more I love it :) I use the Observium syslog interface for pushing to Observium syslog alerts. For now, I am developing customer personal web service where they could see their telecom services on the map with nodes states like ok, critical. There are on the map presented only part of the telco network their services go through. By API I get nodes' location and state so can show it on the map with nodes connections from my customer database. Except for alarms Observium gets by syslog integration. Is there any way to get syslog alerts by API and device id? I could analyze syslog alerts and set proper node status by syslog alerts if they are accessible. As I know it is impossible.

2 2

LLDP collection from Arista switches
by Lars Joergensen 07 May '21

07 May '21

Hi guys We're looking at the Port -> Map view of our Aristas to determine what's connected to them. But this map seems to lack information compared to what we can see directly on the switch. Any information I can provide that would help in troubleshooting this? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

3 4

Observium device discovery
by Christopher N Callison 05 May '21

05 May '21

I have a Cisco 9130axi AP that is running in embedded controller mode. I am not able to monitor traffic or user statistics on the WLANs like I did with my WLC2504. I do not see any wireless related MIBS attached to the device. Is there a way to force discovery for certain features or MIBS? Or do I have to add my own custom OID? Chris

3 3

Google Secure LDAP - Working with a hack
by Pieter De Wit 05 May '21

05 May '21

Hi Guys, I have Google Secure LDAP working with Observium, but it requires a hack and hopefully the devs can implement this into the code base (after fixing my even more of my hacky hacks :) ) In config.php: $config['auth_ldap_server']="ldap://127.0.0.1:1636”; // We using the stunnel method $config['auth_ldap_port'] = 1636; // Not needed - at least, not that I could find $config['auth_ldap_starttls']=false; // Implemented with stunnel $config['auth_ldap_suffix'] = ",ou=Secure_LDAP,ou=Users,dc=example,dc=com”; // Fix this for your domain unset ($config['auth_ldap_groups']); $config['auth_ldap_groups']['cn=observium']['level'] = 10; // Google does something funky with “groups" In html/includes/authentication/ldap.inc.php: After line 932: else { $filter="(&(".$dn.")".ldap_filter_create ($attribute, $value).")"; $ret=ldap_search ($ds,”dc=example,dc=com",$filter); // TODO : We need to figure out if ($ret !==FALSE) { $compare=TRUE; } } In a nutshell, ldap_compare doesn’t work for Google Secure LDAP - pretty much like https://jira.observium.org/browse/OBS-3611 <https://jira.observium.org/browse/OBS-3611> but then, if the ldap_read fails, we fallback to just doing a search for the “group” and where memberUid is the username provided. It might be worthwhile to look into setting a LDAP type variable and reacting to that. Hopefully this makes sense :) Cheers, Pieter

1 1

Google Secure LDAP
by Pieter De Wit 04 May '21

04 May '21

Hi Everyone, Has anyone got Observium to authenticate against Google Secure LDAP *and* return a usable user level ? My authentication passes, but I always end up with a user level of 0. I am using the stunnel method to try and simplify things. Thanks, Pieter

2 2