- observium - lists.observium.org

syslog regex
by MKS 17 Oct '16

17 Oct '16

Hello list I'm having some problems with syslog alerts. RP/0/RSP0/CPU0:Oct 17 11:44:17.872 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ****** (Bundle-Ether1.7) (L2) Down, Holdtime expired RP/0/RSP0/CPU0:Oct 17 11:46:05.893 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ******* (Bundle-Ether1.7) (L2) Up, New adjacency I'm using the regex "/Adjacency.*Up/" and "/Adjacency.*Down/" The "/Adjacency.*Up/" alert is working fine, but the combo Adjacency and Down doesn't alert. If I match only on Adjacency or only on Down I do get an alert, both these two together don't work as expected. Any workarounds or a different regex I should use? Regards MKS

2 2

Re: [Observium] Include interface description/alias in Alerts
by Moerman, Maarten 17 Oct '16

17 Oct '16

It should be in the email that you get. You must be running a really old version then? Maarten From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Gumilar Siegfried <siegfried.gumilar(a)stadtwerke-feldkirch.at<mailto:siegfried.gumilar@stadtwerke-feldkirch.at>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Monday, October 17, 2016 at 3:07 PM To: "Observium Network Observation System (observium(a)observium.org<mailto:observium@observium.org>)" <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Include interface description/alias in Alerts Hello! I have configured an alert checker for our Ports according to the documentation: Port is enabled, but operationally down Port ifAdminStatus equals up ifOperStatus notequals up ALL * ifType equals ethernetCsmacd Everything works fine, except the alerts only include the port number (e.g. Entity: Port13). I would like to include the interface description/alias too (e.g. Customer_xyz). Is there a way I can achieve this? Regards Siegfried

1 0

Include interface description/alias in Alerts
by Gumilar Siegfried 17 Oct '16

17 Oct '16

Hello! I have configured an alert checker for our Ports according to the documentation: Port is enabled, but operationally down Port ifAdminStatus equals up ifOperStatus notequals up ALL * ifType equals ethernetCsmacd Everything works fine, except the alerts only include the port number (e.g. Entity: Port13). I would like to include the interface description/alias too (e.g. Customer_xyz). Is there a way I can achieve this? Regards Siegfried

1 0

Observium Port Group alerts?
by Tomas 17 Oct '16

17 Oct '16

Hello, Simple question: Does Observium can add alert checker on group? For example, we have port group for x devices, so if we adding port alert we have to fill up Device Assocation and entity Association again. Thanks, Thom

4 6

Frontpage Map
by Zoellers, Billy 17 Oct '16

17 Oct '16

Looks like it's now defaulting to OpenStreetMap. I think it looks better, but it looks like none of my map config settings are working now. Are there new settings to use? For example: $config['frontpage']['map']['region'] = "US-KY"; $config['frontpage']['map']['resolution'] = "provinces"; $config['frontpage']['map']['zoom'] = "9"; $config['frontpage']['map']['center']['lat'] = "38.029"; $config['frontpage']['map']['center']['lng'] = "-84.496"; $config['frontpage']['map']['realworld'] = true; $config['frontpage']['map']['dotsize'] = 1; $config['frontpage']['map']['height'] = 450; [cid:DeanDortonbox.png] Billy Zoellers Infrastructure Engineer 106 W. Vine St., Ste 600 Lexington, KY 40507 ph (859) 425-7640 fax (859) 425-3640 CONFIDENTIALITY NOTICE: The preceding email message, and any files or attachments transmitted with it, may contain confidential and privileged information, and may constitute protected work product, confidential client information, trade secrets, and/or other non-public information. Furthermore, this message and any attachments may be protected by accountant/client privilege, attorney/client privilege, and/or other applicable privileges. Any unauthorized review, use, dissemination, distribution, disclosure, or reproduction of this message is strictly prohibited and may be unlawful. This message is intended to be conveyed and transmitted only to the designated recipient(s). If you are not an intended recipient of this message, please notify the sender immediately by email or by telephone at 859-255-2341. Also, please delete this email message including all attachments and destroy all copies. -- This mail was scanned by BitDefender For more information please visit http://www.bitdefender.com/frams/

3 3

syslog integration issue
by Grégory Lemblé 15 Oct '16

15 Oct '16

Morning, I try to implement the syslog.php features inside our Observium instance. on debug mode, we got syslog info inside the logs/debug.log file. But on the web side, impossible to get any message from the syslog. I'm not sure which area i need to investigate to get it done. Some help will be appreciate. Many Thanks ----------- Observium Version Pro 0.16.10.8118 (Stable) ----------- rsyslogd 7.4.4, compiled with: FEATURE_REGEXP: Yes FEATURE_LARGEFILE: No GSSAPI Kerberos 5 support: Yes FEATURE_DEBUG (debug build, slow code): No 32bit Atomic operations supported: Yes 64bit Atomic operations supported: Yes Runtime Instrumentation (slow code): No uuid support: Yes ----------- /etc/rsyslog.d/60-observium.conf: #--------------------------------------------------------- #send remote logs to observium $template observium,"%fromhost%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year%-%$month%-%$day% %timereported:8:25%||%msg%||%programname%\n" $ModLoad omprog $ActionOMProgBinary /var/www/observium/syslog.php :inputname, isequal, "imudp" :omprog:;observium #& ~ & stop #--------------------------------------------------------- ----------- debug.log file: [2016/10/10 08:00:15 +0800] syslog.php(19124): hostname||1||4||4||auth:||2016-10-10 08:00:14|| User XXXXXXXXXXXX logout||auth [2016/10/10 08:00:15 +0800] syslog.php(19124): hostname||1||6||6||Security:||2016-10-10 08:00:15|| SSH login by public key from src IP XXXXXXX from src MAC XXXXX to USER EXEC mode using DSA as Server Host Key. ||Security ----------- config.php: $config['syslog']['debug'] = True; $config['enable_syslog'] = 1; // Enable Syslog $config['syslog']['fifo'] = FALSE; Front Web: No syslog entries found!Check that the syslog daemon and Observium configuration options are set correctly, that your devices are configured to send syslog to Observium and that there are no firewalls blocking the messages. See documentation <http://www.observium.org/wiki/Category:Documentation> and configuration options <http://www.observium.org/wiki/Configuration_Options#Syslog_Settings> for more information

2 2

Maintenance and down devices
by Jesse Defer 14 Oct '16

14 Oct '16

I've made a small change to change how down devices are displayed when in maintenance mode that seems generally useful enough to include in the distro. It scratches my itch of being able to quickly see what downed devices have scheduled maintenace. It would probably be useful to extend to more areas like the color of device links and other entities. In html/includes/print/status.inc.php (about line 66): if (isset($GLOBALS['cache']['maint']['device'][$device['device_id']])) $string .= ' <td><span class="label label-info">Device Down (Maintenance)</span></td>' . PHP_EOL; else $string .= ' <td><span class="label label-important">Device Down</span></td>' . PHP_EOL; Jesse

2 1

Unable to add Host
by Matt Vinson 13 Oct '16

13 Oct '16

I noticed the Wowza MIB was in a recent update from SVN so I tried adding one of my hosts to our Observium server and it states: No reply on community t-public-ss using v2c. Could not reach 'HOSTNAME' with given SNMP parameters using v2c. I have done an snmpwalk from the Observium server to the host in question and it works properly. Anybody have any idea why I can't add this host? Thanks! -- Regards, Matt Vinson --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

4 12

Add Mib and counter
by Jean CARUSO 13 Oct '16

13 Oct '16

hello, I'm new to the list. What is the procedure to add the MIBs manufacturer Huawei but the storage part Observium? I have them if needed Another question: Can you add to the manufacturer NetApp counters the snapmirror functionality. thank you in advance Regards [Description : E:\ADMINISTRATIF\Exemple Formulaire\ADMENTIS\ADMENTIS LOGO (1)\LOGO DOCUMENTS INTERNE\LOGO RVB ADM V1.jpg] Jean CARUSO Consultant Tél. : +334 42 24 37 97 Fax : +334 42 90 58 40 Gsm : +336 71 38 17 50 @ : jcaruso(a)admentis.fr<mailto:jcaruso@admentis.fr> P Imprimez seulement si nécessaire - Print only if necessary Ce message peut contenir des informations confidentielles, couvertes par le secret professionnel ou réservées exclusivement à leur destinataire. Toute lecture, utilisation, diffusion ou divulgation sans autorisation expresse est rigoureusement interdite. Si vous n'en êtes pas le destinataire, merci de prendre contact avec l'expéditeur et de détruire ce message. This email may contain material that is confidential, privileged and/or attorney work product for the sole use of the intended recipient. Any review, reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

GraphViz Maps
by Andy Lemin 11 Oct '16

11 Oct '16

Hi Observium users, Re; GraphViz.js based maps built using; https://github.com/kedare/observium_map_generator https://gist.github.com/kedare/9806171 Hi, Their are a couple of graphing tools out there that use the "links" table, which does not seem to exist. Is there a replacement table that details the connections between devices? For example this no longer works :( SELECT UPPER(d.hostname) AS local_hostname, p.port_id AS local_port_id, p.ifName AS local_port, p.ifSpeed/1000000 as local_port_speed, l.remote_port_id AS remote_port_id, rp.ifName AS remote_port, UPPER(l.remote_hostname) AS remote_hostname, d.hardware AS hardware, rd.hardware AS remote_hardware, s.ifInErrors_rate AS local_in_errors_rate, s.ifOutErrors_rate AS local_out_errors_rate, s.ifInOctets_rate*8 AS local_in_octets_rate, s.ifOutOctets_rate*8 AS local_out_octets_rate, s.ifInOctets_perc AS local_in_octets_perc, s.ifOutOctets_perc AS local_out_octets_perc FROM `devices` AS d, `devices` as rd, `ports` AS p, `ports` as rp, `links` AS l, `ports-state` AS s WHERE p.port_id = l.local_port_id AND p.device_id = d.device_id AND rp.port_id = l.remote_port_id AND rp.device_id = rd.device_id AND p.port_id = s.port_id AND UPPER(d.hostname) = UPPER(%s); Thanks, Andy.

2 1