- observium - lists.observium.org

Re: [Observium] observium Digest, Vol 123, Issue 8
by Sachin Guda 12 Oct '20

12 Oct '20

Hello Team, Any update on 3. Syslog problem with Arista and Nexus device (Sachin Guda) __________________________________________________ Sachin Guda Managed Services • Itiviti Network Engineer -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Saturday, October 10, 2020 1:00 PM To: observium(a)observium.org Subject: observium Digest, Vol 123, Issue 8 Send observium mailing list submissions to observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org You can reach the person managing the list at observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Alerting on running processes? (Johann Mallet) 2. Re: Alerting on running processes? (Adam Armstrong) 3. Syslog problem with Arista and Nexus device (Sachin Guda) 4. Re: how will create Custom OID alarm for power supply (Brij Mohan) 5. Re: how will create Custom OID alarm for power supply (Adam Armstrong) ---------------------------------------------------------------------- Message: 1 Date: Fri, 9 Oct 2020 13:50:14 +0200 From: Johann Mallet <johann.mallet(a)zayo.com> To: Observium Network Observation System <observium(a)observium.org> Subject: [Observium] Alerting on running processes? Message-ID: <CAK5-Kt2biva=smV11B-kNPM5aF_jnk_5LBcGtH+YL960etpBSA(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hello, Is it possible to create an alert on the number of running processes? (=hr_processes graph) I have tried to search in Device/Counter/Sensor/Status alert type without success. Many thanks! Johann

1 0

Syslog problem with Arista and Nexus device
by Sachin Guda 09 Oct '20

09 Oct '20

Hello Team, I am running latest Observium version, Syslog is configured on switch to send logs to observium server. They send logs to observium (verified with capture on server interface) but observium doesn’t show it in syslog tab it says- No syslog entries found! This device does not have any syslog entries. Check that the syslog daemon and Observium configuration options are set correctly, that this device is configured to send syslog to Observium and that there are no firewalls blocking the messages. See Syslog Integration <https://docs.observium.org/syslog/> guide and configuration options <https://docs.observium.org/config_options/#syslog-settings> for more information. At the same time syslog can be seen from other devices like cisco CAT switch, ASA firewall and Cisco ASR. __________________________________________________ [image: http://itiviti.com/email_signature_logo_2017_120.png] <http://www.itiviti.com/> *Sachin Guda* Managed Services, Itiviti Network Engineer Direct: +46 8 506 477 52 Mobile: +46 73 901 02 53 Sachin.Guda(a)itiviti.com <%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20mailto:Sachin.Guda@itiviti.com> Kungsgatan 36 , P.O. Box 7742 10395 Stockholm , Sweden Fax: +46 8 506 477 01 *Visit: itiviti.com » <http://www.itiviti.com>Read the latest news from Itiviti » <http://www.itiviti.com/news/>* -- ______________________________ <https://www.linkedin.com/company/10438325/> The information contained in or attached to this email is strictly confidential. If you are not the intended recipient, please notify us immediately by telephone and return the message to us. Email communications by definition contain personal information. The Itiviti group of companies is subject to European data protection regulations. Itiviti’s Privacy Notice is available at www.itiviti.com <http://www.itiviti.com/>. Itiviti expects the recipient of this email to be compliant with Itiviti’s Privacy Notice and applicable regulations. Please advise us immediately at dataprotectionteam(a)Itiviti.com if you are not compliant with these.

1 0

Trouble with Active Directory group config on Observium CE v20.9.10731
by Brian Bianchi 08 Oct '20

08 Oct '20

Hello, I am trying to configure Active Directory authentication on my Observium CE v20.9.10731 server using this page as a guide -> https://docs.observium.org/authentication/#active-directory I am passed the point where my username and password are authenticated. It is the group config I am confused about. I have an Active Directory group "eng-admins" that I want to give administrative privileges to, of which my login (bbianchi) is a member. And I have an Active Directory group "eng-team" that I want to give generic non-admin privileges. My domain is hq.viviport.com. It is not clear to me how to configure these lines to achieve this: $config['auth_ldap_recursive'] = TRUE; $config['auth_ldap_recursive_maxdepth'] = 3; $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",DC=hq,DC=viviport,DC=com"; $config['auth_ldap_group'] = array("CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com"); $config['auth_ldap_groupbase'] = "OU=Groups,DC=hq,DC=viviport,DC=com"; $config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['CN=Observium Admins,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 10; $config['auth_ldap_groups']['CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 1; I have enabled debug logging. Here is what I am getting below. Any help would be greatly appreciated. Thank you in advance. --B [cid:image008.png@01D69BBE.684DA9A0] [cid:image001.png@01D69BBE.92743870] Brian Bianchi Senior Release Engineer o: +1 (781) 213-6483 e: bbianchi(a)vestmark.com Learn more about Vestmark! View our introduction video here<https://vimeo.com/374253696>. Check us out on Social Media: [cid:image002.png@01D69BBE.92743870] <https://www.linkedin.com/company/vestmark/> [cid:image003.png@01D69BBE.92743870] <https://www.glassdoor.com/Overview/Working-at-Vestmark-EI_IE263618.11,19.htm> [cid:image004.png@01D69BBE.92743870] <twitter.com/Vestmark> This e-mail and any attachments hereto, are intended for use by the addressee(s) only and may contain information that is confidential information of Vestmark, Inc. If you are not the intended recipient of this e-mail, or if you have otherwise received this e-mail in error, please immediately notify me by telephone or by e-mail, and please permanently delete the original, any print outs and any copies of the foregoing. Any dissemination, distribution or copying of this e-mail is strictly prohibited.

3 4

Observium in HTTPS
by Olivier CALVANO 08 Oct '20

08 Oct '20

Hi We use Observium Version 20.9.10749. currently it is http, observium accepts to be in https? Regards Olivier

4 4

Observium Install Script
by Marios.P＠crowe.com.cy 08 Oct '20

08 Oct '20

Hi all, I want to install Observium on a new Ubuntu 18.04 server but the install script is not available. Do we have any indication when is it going to be available again? Thank you, Marios

2 1

Debug Logging
by Stuart Dyer 08 Oct '20

08 Oct '20

Hi Everyone, Simple question but how to I enable debug logging on the Observium web interface ? trying to setup ldap when I log in Observium after configuring ldap the interface does nothing so I would like to see the logging of what the error is Regards, Stuart Dyer IT Administrator Phone: +61 2 8020 2063 | E-mail: stuart.dyer(a)innovit.com<mailto:stuart.dyer@innovit.com> [innovit-logo (002) trans 2018] Bringing quality to Master Data 161 Castlereagh Street, Level 28 Sydney NSW 2000 Australia<https://goo.gl/maps/DGW9Ce65rhP2> Tel: +612 8020 2000 Fax: +612 8020 2099 Web: www.innovit.com<http://www.innovit.com/> Australasia | North America | Europe Follow us on LinkedIn<https://www.linkedin.com/company/innovit-australia-pty-ltd?trk=public_profi…> This electronic mail is solely for the use of the addressee and may contain information, which is confidential or privileged. If you receive this electronic mail in error, please delete it from your system immediately and notify the sender by electronic mail or using any of the following contact details.

2 2

Aggregated graphs howto?
by José Manuel Giner 07 Oct '20

07 Oct '20

Hello we've just installed Observium Premium. it's possible to create aggregated graphs? We want to put in the same graph different network ports. and can make the graph public? or can we automate to download the graph image? Thanks! -- José Manuel Giner https://ginernet.com

2 1

distributed observium
by Arnoldo Vidal Bravo 06 Oct '20

06 Oct '20

¿how i can setup a poller as default? [image: image.png] -- Saluda cordialmente

1 0

SQL Injection?
by Hamilton, Kent 05 Oct '20

05 Oct '20

I noted these on this weeks CERT vulnerability report have they been addressed? I don't see anything about them on the mailing list, site or bug tracker, I could have overlooked them I guess. observium -- observium An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via username[0] to the default URI, because of includes/authenticate.inc.php. 2020-09-25 7.5<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMzcsInVy…> CVE-2020-25147<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMzgsInVy…> MISC<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMzksInVy…> observium -- observium An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. Sending the improper variable type Array allows a bypass of core SQL Injection sanitization. Users are able to inject malicious statements in multiple functions. This vulnerability leads to full authentication bypass: any unauthorized user with access to the application is able to exploit this vulnerability. This can occur via the Cookie header to the default URI, within includes/authenticate.inc.php. 2020-09-25 7.5<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxNDAsInVy…> CVE-2020-25132<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxNDEsInVy…> MISC<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxNDIsInVy…> ________________________________ This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

2 3

observium distributed
by Arnoldo Vidal Bravo 02 Oct '20

02 Oct '20

We are configuring and testing observium distributed.... it works fine !, but when i add a new device on web interface i must check skip ICMP echo checks. if not i get a message Could not ping X.X.X.X in observium main config.php is installed fping 3-10 $config['fping'] = "usr/local/sbin/fping"; in poller too is installed fping 3-10 $config['fping'] = "usr/local/sbin/fping"; -- Saluda cordialmente

3 4