- observium - lists.observium.org

SNMP Error
by Andrew Colin 01 Feb '16

01 Feb '16

Hi Guys Since the latest update on the pro edition on 2 debian servers we get the following when Observium tryies to walk to them They are running Debian 7.9 3.10.0-8-pve imuxsock begins to drop messages from pid 12028 due to rate-limiting now Observium is unable to query them any ideas why?

2 3

switch missing interface data
by Simon Smith 01 Feb '16

01 Feb '16

Hi All not sure if this is a bug or maybe something wrong with our switch? we added a TP-Link 8 port gigabit switch to monitor as we wanted to see what data we could get for some reason, observium has listed all interfaces as Ethernet Interface ? also it appears the vlans are also being found as lans, as well ? no port 1 port 2 etc just Ethernet Interface and Vlan ? what ive also found is on the interfaces page the plans are showing these blue arrows with the ethernet interface name ? never seen it before? any ideas? attached is screenshots, poller log and discovery log if people what help :) Simon

2 2

Disable email notification every 5 minutes
by Laszlo Nemeth 01 Feb '16

01 Feb '16

Hello I installed the latest CE (0.16.1.7533) and set up some alerts with email notification. It is working great, but now i get lot of mails in every 5 minutes from the same alerts. Can i set up that get email only when the alarm caused or resolved? So just 2 mails (or get mails in X minutes (e.g. In every 1 hors) not in every 5 minutes? Thanks! Laszlo

3 6

SNMP Trap based Notifications
by Gagandeep Mann 01 Feb '16

01 Feb '16

Is there any way to configure OSPF Link Down Alert/Notification. Can we generate Notifications based on SNMP traps or any alternate based on Syslog. Best regards Gagandeep Mann ________________________________ This E-Mail may contain Confidential and/or legally privileged Information and is meant for the intended recipient(s) only. If you have received this e-mail in error and are not the intended recipient/s, Kindly notify the sender and then delete this e-mail immediately from your system. You are also hereby notified that any use, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail, its contents or its attachment/s other than by its intended recipient/s is strictly prohibited and may be unlawful. Internet Communications cannot be guaranteed to be secure or error-free as information could be delayed, intercepted, corrupted, lost, or contain viruses. Sistema Shyam Teleservices Limited does not accept any liability for any errors, omissions, viruses or computer problems experienced by any recipient as a result of this e-mail.

1 0

Billing problem
by Eduardo Schoedler 29 Jan '16

29 Jan '16

Hi, Quick graphs isn't showing the graph: [image: Imagem inline 1] [image: Imagem inline 2] This billing have 2 interfaces, which I disabled it in a few minutes ago: [image: Imagem inline 3][image: Imagem inline 4] But I have data for the last 24 hours, so why the Billing View graph is errored? Thank you. Regards, -- Eduardo Schoedler

1 0

Friendly names for devices/hosts and interfaces/ports
by Juan Asensio Sánchez 29 Jan '16

29 Jan '16

Hi, is there any option to add friendly names to hosts and interfaces? For example, our hostnames are normalized (lx0001), so I would like to show them in Observium as pro-jboss-1, px-mysql-3, dev-apache-6, etc. and see them in all places, next to the hostname, Is this possible? The same for host interfaces, por example, eth0 or eno16780032 to be shown as "service", "management", "backend", "backup", "storage", etc. We have a paid subscription, is there any kind of development included?

3 3

Re: [Observium] Hostname change
by Christian Gerbrandt 29 Jan '16

29 Jan '16

Thanks, that did the trick ;) On Jan 28, 2016, at 03:13 PM, Simon Smith <simonsmith5521(a)gmail.com> wrote: i believe u looking for this root@observium:~# /opt/observium/rename_device.php Observium 0.16.1.7538 Rename Device USAGE: rename_device.php <old hostname> <new hostname> OPTIONS: -p Skip icmp echo checks, device renamed only by SNMP checks DEBUGGING OPTIONS: -d Enable debugging output. -dd More verbose debugging output. Simon On 28 Jan 2016, at 3:04 pm, Christian Gerbrandt <derchris(a)me.com> wrote: Hi, when I setup Observium for the first time, I used a local only DNS setup. In the meantime, we created a corporate wide DNS setup for our Lab. Old devices are still available, but obviously show up with their old hostname. Is there an easy way to change the hostname of a device? Regards, Christian _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

6 15

Images in alerts
by Anders Johansson 29 Jan '16

29 Jan '16

Hi, I've seen that alerts include an image, base encoded in the actual html file, but the image is never displayed. Now I'm using that Redmond build software to read mails, perhaps that's why it's not working? Anyone else with outlook who can see the graph included in the alerts? //Anders

3 2

db.log errors
by Anders Johansson 29 Jan '16

29 Jan '16

Hi, I've on a fresh install of observium, from the latest SVN (not the stable) I'm seeing errors in the SQL log, mostly duplicate entry of various kinds: [2016/01/29 06:07:11 +0100] poller.php(17259): Failed dbQuery (#1062 - Duplicate entry '17-2-984be1747168-4934' for key 'dev_vlan_mac_port'), Query: INSERT INTO `vlans_fdb` (`device_id`,`vlan_id`,`port_id`,`mac_address`,`fdb_status`) VALUES ('17','2','4934','XXXXXXXXXX','learned') But also: [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column '' in 'field list'), Query: SELECT `` FROM `slas` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column '' in 'field list'), Query: SELECT `` FROM `pseudowires` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column 'device_id' in 'where clause'), Query: SELECT `alert_test_id` FROM `alert_tests` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column 'device_id' in 'where clause'), Query: SELECT `maint_id` FROM `alerts_maint` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column 'device_id' in 'where clause'), Query: SELECT `group_id` FROM `groups` WHERE `device_id` = '24'; I guess the 2:th errors are just possible to ignore if logic has changed, but the first ones are a bit worrying, perhaps there is a mismatch in the MySQL? (I'm on RHEL 6.7) //Anders

1 0

Observium: Pre-auth and security questions
by Nate Mellendorf 29 Jan '16

29 Jan '16

Tom, Thank you for your input. This has been a bit of a learning experience for me. After researching and playing around with Apache, I was able to enable basic authentication using htpasswd. When I attempt to access Observium, I'm prompted for credentials as expected. Once I login with the creds I've configured, I land at the Observium form based authentication page. I'm trying to pass the username and password provided to htpasswd, and send them to Observium on the backend. As you noted earlier, It seems like I should be able to do this with the remote user variable. However, I can't seem to get it to work. I've listed my current virtual host config below. I enabled a2enmod headers and restarted Apache with no luck. I'm curious if you know if there's something I'm missing. I'll keep digging and working away at this, but I thought I'd provide an update to the mailing list. Other users may find it helpful if we sort it out. Many thanks, <VirtualHost *:80> DocumentRoot /opt/observium/html/ CustomLog /opt/observium/logs/access_log combined ErrorLog /opt/observium/logs/error_log <Directory "/opt/observium/html/"> AuthType Basic AuthName "Restricted Content" AuthUserFile /etc/apache2/.htpasswd Require valid-user Options Indexes FollowSymLinks MultiViews AllowOverride All Order allow,deny allow from all RewriteEngine on RewriteCond %{ENV:REMOTE_USER} (.+) RequestHeader set X-Forwarded-User %{ENV:REMOTE_USER}e </Directory> </VirtualHost> - NM -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Saturday, January 16, 2016 6:11 PM To: observium(a)observium.org Subject: observium Digest, Vol 66, Issue 96 Send observium mailing list submissions to <mailto:observium@observium.org> observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit <http://postman.memetic.org/cgi-bin/mailman/listinfo/observium> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to <mailto:observium-request@observium.org> observium-request(a)observium.org You can reach the person managing the list at <mailto:observium-owner@observium.org> observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: Observium: Pre-auth and security questions (Tom Laermans) ---------------------------------------------------------------------- Message: 1 Date: Sun, 17 Jan 2016 01:10:43 +0100 From: Tom Laermans < <mailto:tom.laermans@powersource.cx> tom.laermans(a)powersource.cx> To: Observium Network Observation System < <mailto:observium@observium.org> observium(a)observium.org> Subject: Re: [Observium] Observium: Pre-auth and security questions Message-ID: < <mailto:569ADC03.1000002@powersource.cx> 569ADC03.1000002(a)powersource.cx> Content-Type: text/plain; charset="windows-1252"; Format="flowed" Hi Nate, We support trusting Apache with the auth (ie mod_auth_kerb, mod_auth_ldap, htpasswd, etc) by using its supplied REMOTE_USER variable - this works with at least the LDAP and MySQL backends; if your SSO setup could fill in these fields, you should be good. This bypasses our login forms of course. I use SSO with Kerberos (AD) tickets, handled by mod_auth_kerb. We also have an http-auth backend, but I don't think that will do what you want it to. There's also a CAS backend, fairly new, I have no idea how to use it but I don't think it could work with your netscaler setup. Tom On 16/01/2016 23:52, Nate Mellendorf wrote: > > Good evening everyone, > > I?ve been trying to configure Observium with a forms based SSO solution. > > My reasoning for this, is that I?d like to minimize the attack surface > for Observium when published to the Internet. > > As Observium supports groups, I thought it would be extremely > beneficial for clients to view their throughput at anytime from anywhere. > > I was curious if anyone in the community is using pre-authentication, > or if you?re publishing Observium directly to the Internet. > > I?m not as familiar with Apache and PHP, so hardening the service > through pre-auth seemed like a good first step. > > Unfortunately, I can?t quite get pre-auth to work. Observium uses > forms based authentication, which is hard to capture on the platform > I?m using. > > Here?s a link, if you?re curious on how I?m trying to capture it: > > <http://fritsesblog.blogspot.com/2015/04/link-to-netscaler-form-sso-kb> http://fritsesblog.blogspot.com/2015/04/link-to-netscaler-form-sso-kb. > html > > If I could get Observium to use basic authentication, I think I could > get it to work. Do we know if this is possible? A better question, is > pre-auth even necessary here? > > Aside from HTTPS, iptables, firewalling, and locking down SSH/root, > what other steps do you take to secure your Observium server? Do you > think that allowing Internet access is unwise at this time? > > Thank you for any input on insight into this. This is a concern of > mine that I?m trying to address. > > Your suggestions and opinions are very much appreciated. > > Regards, > > - NM > > > > _______________________________________________ > observium mailing list > <mailto:observium@observium.org> observium(a)observium.org > <http://postman.memetic.org/cgi-bin/mailman/listinfo/observium> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

3 2