- observium - lists.observium.org

Observium: Pre-auth and security questions
by Nate Mellendorf 17 Jan '16

17 Jan '16

Good evening everyone, I've been trying to configure Observium with a forms based SSO solution. My reasoning for this, is that I'd like to minimize the attack surface for Observium when published to the Internet. As Observium supports groups, I thought it would be extremely beneficial for clients to view their throughput at anytime from anywhere. I was curious if anyone in the community is using pre-authentication, or if you're publishing Observium directly to the Internet. I'm not as familiar with Apache and PHP, so hardening the service through pre-auth seemed like a good first step. Unfortunately, I can't quite get pre-auth to work. Observium uses forms based authentication, which is hard to capture on the platform I'm using. Here's a link, if you're curious on how I'm trying to capture it: http://fritsesblog.blogspot.com/2015/04/link-to-netscaler-form-sso-kb.html If I could get Observium to use basic authentication, I think I could get it to work. Do we know if this is possible? A better question, is pre-auth even necessary here? Aside from HTTPS, iptables, firewalling, and locking down SSH/root, what other steps do you take to secure your Observium server? Do you think that allowing Internet access is unwise at this time? Thank you for any input on insight into this. This is a concern of mine that I'm trying to address. Your suggestions and opinions are very much appreciated. Regards, - NM

2 1

wiki typo
by Joey Stanford 16 Jan '16

16 Jan '16

Hi, I found a wiki typo. Housekeeping Cron job - /opt/observium/housekeeping.php -rptb the “b” should probably be a “y”

2 2

Strange issue with BGP sessions on Juniper MX104
by Duncan Mossop 16 Jan '16

16 Jan '16

Hello, We are running Observium professional 0.16.1.7407 and we have an issue with BGP session discovery on a Juniper MX104 (dual RE), running discovery against the device displays the fact there are numerous bgp sessions but not a single session appears under the device in the Observium WebUI. This is the output from Discovery: ##### Module Start: bgp-peers ##### o Local AS AS198313 o Caching BGP4-MIB BGP4-V2-MIB-JUNIPER o Try discovering host 91.233.128.253 through BGP o Try discovering host 91.233.128.254 through BGP +------------------------------------+----------+------------------------------------+--------------+------------------------------------+------------------------------------+ | Local IP | Peer: AS | IP | Family | rDNS | Remote Device | +------------------------------------+----------+------------------------------------+--------------+------------------------------------+------------------------------------+ | 91.233.128.244 | 198313 | 91.233.128.253 | ipv4.unicast | lo0-core4.lancs-ycr.systemhost.co. | core4.lancs-ycr.systemhost.uk | | | | | | uk | | | 91.233.128.244 | 198313 | 91.233.128.254 | ipv4.unicast | lo0-edge1.lancs-ycr.systemhost.co. | edge1.car1.systemhost.co.uk | | | | | | uk | | | 149.6.147.122 | 174 | 149.6.147.121 | ipv4.unicast | gi0-0-0-6.nr11.b015668-1.lon01.atl | ... | | | | | | as.cogentco.com | | | 195.66.226.239 | 6939 | 195.66.224.21 | ipv4.unicast | 40ge1-3.core1.lon2.he.net | ... | | 195.66.226.239 | 32787 | 195.66.224.31 | ipv4.unicast | blackhole.prolexic.com | ... | | 195.66.226.239 | 20940 | 195.66.224.168 | ipv4.unicast | linxnap.netarch.akamai.com | ... | | 195.66.226.239 | 5459 | 195.66.224.254 | ipv4.unicast | ge0-0.pr1.linx.net | ... | | 195.66.226.239 | 45014 | 195.66.225.55 | ipv4.unicast | ge-0-2.gw4.rtr.thn.lon.as45014.net | ... | | 195.66.226.239 | 29611 | 195.66.225.78 | ipv4.unicast | linx.a.elite.net.uk | ... | | 195.66.226.239 | 8714 | 195.66.225.230 | ipv4.unicast | rs1.rbs.linx.net | ... | | 195.66.226.239 | 42344 | 195.66.226.71 | ipv4.unicast | linx1.conceptcoders.com | ... | | 195.66.226.239 | 20940 | 195.66.226.81 | ipv4.unicast | | ... | | 195.66.226.239 | 20940 | 195.66.226.167 | ipv4.unicast | | ... | | 195.66.226.239 | 58226 | 195.66.226.197 | ipv4.unicast | | ... | | 217.68.244.122 | 29611 | 217.68.244.123 | ipv4.unicast | ae0.1129.core.a.thm.elite.net.uk | ... | | 2001:07f8:0004:0000:0000:0003:06a9 | 6939 | 2001:07f8:0004:0000:0000:0000:1b1b | ipv6.unicast | 40ge1-3.core1.lon2.he.net | ... | | :0001 | | :0001 | | | | | 2001:07f8:0004:0000:0000:0003:06a9 | 8714 | 2001:07f8:0004:0000:0000:0000:220a | | | ... | | :0001 | | :0001 | | | | | 2001:07f8:0004:0000:0000:0003:06a9 | 45014 | 2001:07f8:0004:0000:0000:0000:afd6 | ipv6.unicast | ge-0-2.gw4.rtr.thn.lon.as45014.net | ... | | :0001 | | :0001 | | | | | 2001:07f8:0004:0000:0000:0003:06a9 | 58226 | 2001:07f8:0004:0000:0000:0000:e372 | ipv6.unicast | | ... | | :0001 | | :0001 | | | | +------------------------------------+----------+------------------------------------+--------------+------------------------------------+------------------------------------+ o Changes 2 updated, 17 unchanged o Duration 3.5349s This issue seems to have appeared since fully enabling chassis Graceful Restart / Switchover. I have removed and re-added the device from Observium to no effect. Regards, Duncan Mossop • Operations Manager, SystemHOST Ltd ________________________________ dmossop(a)systemhost.co.uk [cid:image30bc94.PNG@047b1488.498f55d8] 01524 737414 systemhost.co.uk<http://www.systemhost.co.uk> [Twitter]<https://twitter.com/systemhost> Follow us on Twitter ________________________________ SystemHOST Ltd Registered office: Holmere Hall, Yealand Conyers, Carnforth, Lancs, LA5 9SN Registered in England No.05028996 VAT No. 927386490 This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. By opening this email or its attachments, you accept liability for any damage that may be caused to your computer hardware, software or data. ________________________________

2 16

[ALERT-CHECKER] Alert to pick up on physical failure of disk.
by Henrik Cednert (Filmlance) 16 Jan '16

16 Jan '16

Hi there Have gotten some hints at IRC but can't really wrap my head around on how to set it up. Yeah, I know I'm probably stupid. But I can't find a complete list of all commands available and it doesn't complain if I feed it something invalid. So it's really a guessing game. =/ So the checker needs to do something like: if status of physical_class('storage' or 'hrDeviceDiskStorage') != 1 send alert Possible? Please give detailed instructions if possible. Would be sweet if all different possible combinations of alert checkers was added to the demo instance so once can look there for guidance. =) Cheers and thanks -- Henrik Cednert cto | td | compositor Filmlance International Direct + 46 (0)704 71 89 54

3 15

Monitor DHCP pools
by Anders Alavik 16 Jan '16

16 Jan '16

Is there any may to monitor DHCP pools in observium? Best Med Vänliga Hälsningar Anders Alavik anders(a)bogalnet.se <mailto:anders@bogalnet.se> / 0322 - 64 24 71 BogalNet AB Alvhemsgatan 3 447 30 Vårgårda http://www.bogalnet.se <http://www.bogalnet.se/>

2 1

r7497
by Eduardo Schoedler 15 Jan '16

15 Jan '16

Big chances in r7497, huh? :) -- Eduardo Schoedler

2 1

memory showing 0B/0B (0%)
by Simon Smith 15 Jan '16

15 Jan '16

Hi All, not sure if its a bug ive found or something ive done? all our memory sections are showing 0B/0B (0%) however the graphs is actually being populated with data every 5mins ? attached a screenshot showing a mikrotik switch we monitor also attached is a windows machine we monitor, i it showing the same for its physical memory any ideas? simon

2 1

System Running Very Slow
by Eddie Worthington 15 Jan '16

15 Jan '16

Hi, Since upgrading to the latest release with the new interface, the system is running extremely slowly. Installed on Ubuntu 14.04 with 12 vCPU's & 4GB RAM. It worked like a dream before but can now take up to 30 seconds to load a page. Upgraded with SVN. What have I done wrong? Many Thanks, Eddie

2 3

Device Bits Graphing error message
by Joey Stanford 15 Jan '16

15 Jan '16

Howdy, I’m running the community edition on Ubuntu. All the graphs work except the traffic graphs (bits). I get the standard “Draw error”. I don’t get any errors polling (other than a MIB not being supported for engineID). The devices are all Mikrotik routers. I put an &debug=1 on the traffic graph URL and discovered an error all the way at the bottom: “command returned 1 (ERROR: Unused Arguments “” in command : AREA:inbits0#B6D14B:ether1-wan Rx: )" The full text is here: http://pastebin.ubuntu.com/14490188/ It’s unclear to me if this is actually causing this one graph (on all my systems) to fail but so far there is a trend from spot checking. Any thoughts on how to debug this further? Thanks, Joey

2 2

Re: [Observium] Radius authentication not work
by ChanTy 15 Jan '16

15 Jan '16

Any comment ? From: observium <observium-bounces(a)observium.org> on behalf of apple <ty.chan(a)corp.mekongnet.com.kh> Reply-To: Observium Network Observation System <observium(a)observium.org> Date: Tuesday, January 5, 2016 at 1:57 PM To: Observium Network Observation System <observium(a)observium.org> Subject: [Observium] Radius authentication not work I am following this http://www.observium.org/docs/authentication to do Radius authentication for user to login to Observium. Radius already allow Observium to connect to Php-radius already install Configuration on Observium is done as the guideline But Login still failed using user from Radius Any comment? _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

5 7

Alert Emails sent to exchange
by Matt Zillmann 14 Jan '16

14 Jan '16

I am working on setting up alerting. I have the subscription version of Observium ( version 0.16.1.7407 [stable] running on CentOS 7). I am stuck on the email alerting piece. What settings do I need to configure in sendmail for my email alerts to get sent to my email on our internal exchange server. Anyone have any idea how this needs to be set up? Any help would be greatly appreciated. Thank you.

1 0

RAM
by Matt Zillmann 14 Jan '16

14 Jan '16

Hello, When my server needs rebooted and comes back online, all of the RAM values read 0%. Has anyone else seen this before?

4 6

Customer Portal
by ChanTy 14 Jan '16

14 Jan '16

Hi Adam, My subscription is still valid but when I log in to customer portal. I don’t see anything. Username: mekongnet . Please help check as I need to download Invoice. Regards, chanty

2 9

new CE ree version when ?
by Gediminas Karčmarinas 14 Jan '16

14 Jan '16

Hello, When planned release new CE version ?

1 0

pages slow, maybe nginx instead of apache
by Simon Smith 14 Jan '16

14 Jan '16

Hi All, I wanted a view on what people think about using nginx instead of apache for obsevium? ive just managed to change apache to nginx (had to change htaccess to get it to work, but got there in the end) and it seems a little bit quicker but not by much I’m having an issue where when the server is polling and i want a graph or load up the page, it seems slow and takes forever! ( about 10 seconds ) if I load the panel when its not polling, the pages are quick, but i poll every 5mins, and it takes the full 5 mins to poll all our devices, so really no room to wiggle... if the anyway i can speed this up? would nginx help at all? my server is virtual based, 12gb ram, 4 virtual xeon 2.2ghz cores, 80gb virtual hard drive regards Simon

3 3

Alert Checker issue
by Matt Zillmann 13 Jan '16

13 Jan '16

I am having issues with the alert checker. I cannot get entities to populate. When I click the rebuild button this shows up. I have Observium version 0.16.1.7407 (Stable) running on CentOS 7 [cid:image001.png@01D14E08.DB5F5D20]

1 0

Alert Checkers
by Matt Zillmann 13 Jan '16

13 Jan '16

Hello, I just purchased the subscription version and am looking into setting up Alert checkers. How do I get an alert checker to run? I was referring to documentation and looked the DEMO and it looks like the checker will determine a pass/fail. I have set one for storage [cid:image001.png@01D14DF5.9B1B9F20] Is there something else I need to put?

3 3

itsafeaturenotabug (was re: routing tab)
by Rob VanHooren 13 Jan '16

13 Jan '16

it’s not “broken” in the sense that CSCO officially considers multicontext snmp the “by-design” method (and I have the TAC cases to prove it). remember, snmp *works* which means it’s for grouchy old [grey|neck]beards. netconf & shiny-api-disaster-of-the-week are supposed to rule the new agile! world! of! devops! ( *gag* ) not just ASRs … for instance, it’s the same thing (multicontext snmp hell) with VRFs on n7k’s. so, it’s a “feature” not a “bug” smh R. > On Jan 13, 2016, at 07:00, observium-request(a)observium.org wrote: > > Because the MIB is broken and doesn?t have any concept of VRF awareness. > > The workaround that I used on my ASR9Ks was to create a different context for the VRF in question. > > This config example basically treats the vrf Inetv4 as the default vrf when polling with community blahpoo. It only applies to that community. I have non-contextual communities to catch my default stuff, i.e. my MP-BGP underpinnings. > > It?s not ideal because you need to create two of the same device in Observium; one for each community (vrf and non-vrf), but it sucks less than the alternative, which is to not have this functionality at all. > > ! > snmp-server vrf Inetv4 > context BGPVRF > ! > snmp-server context BGPVRF > snmp-server community-map blahpoo context BGPVRF > snmp-server community blahpoo RO MANAGEMENT > ! > > http://postman.memetic.org/pipermail/observium/2015-June/010467.html <http://postman.memetic.org/pipermail/observium/2015-June/010467.html>

3 2

95th percent billing
by ChanTy 13 Jan '16

13 Jan '16

Hi, I just want to clarify the burstable rate calculation which should work as below according to wikipedia (https://en.wikipedia.org/wiki/Burstable_billing#95th_percentile) : “ Bandwidth is measured (or sampled) from the switch or router and recorded in a log file. In most cases, this is done every 5 minutes. At the end of the month, the samples are sorted from highest to lowest, and the top 5% (which equal to approximately 36 hours of a 30-day billing cycle) of data is thrown away. The next highest measurement becomes the billable use for the entire month. “ Is observium applying the same calculation on BILLING feature ? Is it possible to download RAW file in which has sample of every 5 minutes ? Regards, chanty

2 1

Routing Tab
by Serghei Golipad 12 Jan '16

12 Jan '16

Guys, Any reason why BGP in a VRF peers are not getting displayed? Cheers PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. Kelway (UK) Ltd is a Company registered in England and Wales. This email is sent for and on behalf of Kelway Holdings Limited. Kelway Holdings Limited is the UK holding company for Kelway (UK) Limited trading as Kelway. The registered office for Kelway Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than Kelway or the sender of its existence. For more information about Kelway please visit www.kelway.co.uk

2 1

ALert on Vlan change
by David Schrok 12 Jan '16

12 Jan '16

Hello all. Is there a way, or can it be programmed, to get an alert when a port gets set on a particular Vlan or is moved out of it? Example: We have networks (vlans) where admins are put into. Is there a wat to get an alert when a port is set to an admin vlan or is set from an admin vlan to another vlan? With kind regards, David

1 0

Alert options of a device....................!
by Chaman Rathee 12 Jan '16

12 Jan '16

Hi Team, How to use and enable alert options for an added device ? I have already configured postfix service on observium monitor machine. ......... With Best Regards, Chaman Rathee Mob. No:- +91-9560055816 [Fabrikam] Privileged or confidential information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), please delete this message and kindly notify the sender by an emailed reply. Opinions, conclusions and other information in this message that do not relate to the official business of Progression and its associate entities shall be understood as neither given nor endorsed by them.

1 0

Not receiving email notifications. Has there been a change in Alert system I need to know about?
by Richard Kuhns 11 Jan '16

11 Jan '16

Hello, I recently updated my Observium installation; I'm now running 0.16.1.7473. I haven't changed any configurations. I followed procedure, as far as I know: polling was finished, I did the 'svn up' followed by './discovery.php -u' and everything looked fine. However, I should have just received an email both when a port I'm monitoring went down, and about half an hour later when it recovered. Looking through the alert log, I see the entries that say 'Alert notification sent' followed later by 'Recovery notification sent'. I didn't receive either notification, there's nothing in the mail queue, and maillog doesn't show any attempts. This was working perfectly before my update. I'm afraid I don't remember which version that was, but it was from about a week before I saw comments in the mailing list about the change in layout on the front page. Thanks, -- Richard Kuhns <rjk(a)wintek.com> Wintek Corporation 427 N 6th Street Lafayette, IN 47901-2211 Main: 765-742-8428 Direct: 765-269-8541

3 6

Info
by Gabriele Faucitano 11 Jan '16

11 Jan '16

Hi, We are currently evaluating Observium for a monitoring solution. I have some technical questions to understand if Observium is adequate to our needs. Is this the right contact? BR, -Gabriele

2 2

Reg: Maipu Switch Configuration with Observium
by Madhu Neal 11 Jan '16

11 Jan '16

Hi Guys, badly needed support to configure Maipu switch with Observium, tried many was I don't know how to add it.. Enabled SNMP in maipu device, find the maipu configuration below. snmp-server enable snmp-server view default 1.0.8802 include snmp-server view default 1.1.2 include snmp-server view default 1.3.111 include snmp-server view default 1.3.6.1 include snmp-server name skynetonline snmp-server contact alerts(a)skynetonline.solutions snmp-server location Adithya Tower snmp-server community public view default ro snmp-server enable traps alarm snmp-server enable traps snmp linkdown snmp-server enable traps snmp linkup I'm using Observium Subscription version, please suggest how to take it forward. I look forward to hear from you. //BR Madhu

2 1