- observium - lists.observium.org

Support for Nortel/Avaya
by AJ Schroeder 09 Sep '15

09 Sep '15

Hello list, Let me get this out of the way; I am not a developer. Anyway, I have the pleasure of supporting a network that has older Nortel and Avaya devices on it. I've added them to observium and as expected they are showing up as generic devices. I browsed through the developer section on how to add new device support and I have followed those steps and have added some very basic support for Nortel switches (OS version and Serial Number) First question - would this extra support be of any interest to the Observium devs? I'd like to add more meaningful information such as CPU/Memory utilization, flash usage, etc. However, that step appears to be a bit more challenging. Second question - is this documented somewhere or do I need to "reverse engineer" this support from the existing scripts? Any help or suggestions are appreciated. Thanks, AJ Schroeder

4 6

unix agent issues
by Robbie Wright 09 Sep '15

09 Sep '15

Trying to get the unix agent setup on a machine with bind to test it out. The scripts for Observium and bind are working on the local machine, but Observium isn't showing the modules. The module is enabled for the device but when trying to telnet from Observium, we're just getting "Connection closed by foreign host." Xinetd is running and listening on the port but isn't responding correctly. There are some typos on the agent installation page on the site (/usr/lib vs /usr/bin) and in the xinetd conf file, but we seem to have those straightened out. Anyone have any tricks up your sleeves for getting the agent to be happy with life? ufw/iptables is off for testing on Ubuntu 14.04 and we're running the subscription edition. Robbie Wright Siuslaw Broadband <https://siuslawbroadband.com> 541-902-5101

3 8

PoE Power warning thresholds?
by Richard Müller 09 Sep '15

09 Sep '15

Hy *, does anybody know how the PoE Thresholds for Warning and Error State are calculated? [cid:image001.jpg@01D0EB21.9C0FE580] I have got (Juniper EX) switches which can Provide up to 740W but the warning limit is set to 37W for some reason. Thanks Richard -- <http://www.teamix.de>[teamix]<http://www.teamix.de> Richard Müller Geschäftsführer teamix GmbH Südwestpark 43 90449 Nürnberg Tel.: +49 911 30999 0 Fax: +49 911 30999 99 mail: rm(a)teamix.de web: http://www.teamix.de blog: http://blog.teamix.de Amtsgericht Nürnberg, HRB 18320 | Geschäftsführer: Oliver Kügow, Richard Müller ***Save the Date: Besuchen Sie uns auf der it-sa Messe in Nürnberg vom 06.10.15 – 08.10.15 auf Stand 12-205***

4 6

Disk stats graphs for Equallogic
by Gerwin Krist 09 Sep '15

09 Sep '15

Howdy, Just added our equallogic boxes to observium and although it detects most of the stuff i'm really missing graphs for disk performance (read/writes and iops). If this is correct? Would it be possible to add such a feature? On https://www.zabbix.org/wiki/Monitoring_Dell_Equallogic_Systems is a template for Zabbix. Maybe it's of use. - Gerwin

1 0

Observium Apache Subversion Module Metadata accessible via HTTP......!
by Chaman Rathee 09 Sep '15

09 Sep '15

Dear Team, We found following vulnerability in our observium tool :- Vulnerability Detection Result :- We found that Everybody can access/read '.svn/entries'. using https://<observium-url/.svn/entries<https://%3cobservium-url/.svn/entries> Details: Apache Subversion Module Metadata Accessible OID:1.3.6.1.4.1.25623.1.0.105099 But we checked at Observium Apache Server and found that we have not Load any module for Subversion. So, Please suggest how to solve this vulnerability and if I delete or move .svn folder Will it impact to my running observium? .... With Best Regards, Chaman Rathee Mob. No. :- 9560055816 [Fabrikam] Privileged or confidential information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), please delete this message and kindly notify the sender by an emailed reply. Opinions, conclusions and other information in this message that do not relate to the official business of Progression and its associate entities shall be understood as neither given nor endorsed by them.

6 6

adding a few 100 devices - group associations
by Ross [Eve IT] 09 Sep '15

09 Sep '15

Hi all, I'm looking at adding a few 100 devices to Observium shortly. I don't see any issue adding them, as I can use a filename structured as requested. This is for a few clients of ours, I'd like to trial observium as a customer facing solution. Add a user to view their devices only. Is there a way to script giving a user access to so many devices ? Perhaps to group them. Has anyone done this and found issues with a large number of devices ? Regards, Ross.

2 1

poller.php burns all available CPU in the last community edition
by Mark Martinec 09 Sep '15

09 Sep '15

After upgrading a somewhat outdated version Observium CE 0.13.10.4585 to CE 0.15.6.6430 (under PHP 5.5.28), the poller.php started burning excessive CPU: eight running pollers on an 8-CPU machine started burning 100% of available CPU time instead of a few percents as before. They somehow still managed to get their job done, but just barely so in five minutes, and often missing the time slot. While watching the behaviour for a day and learning PHP profiling along the way, I now have an explanation and a solution. Apology if this has been reported before, couldn't find any such report. The problem is in a function external_exec() in includes/common(.inc).php, which has been rewritten some time between these two versions, now switching to a common loop waiting with a stream_select() on two pipes (stdout and stderr) from a spawned snmp*walk process. The documentation on stream_select helps understanding the issue: http://php.net/manual/en/function.stream-select.php read The streams listed in the read array will be watched to see if characters become available for reading (more precisely, to see if a read will not block - in particular, a stream resource is also ready on end-of-file, in which case an fread() will return a zero length string). So what happens is that when a spawned snmp* command closes its stderr but not yet its stdout, the external_exec() goes in a spin: feof($pipes[1]) is false but stream is not yet ready for reading, however the feof($pipes[2]) is true and hence the stream_select() returns right away and reports $pipes[2] as ready. Then the fread($pipes[2]) is called, returns an empty string (because stderr is at eof), and the whole loop busily goes around, until the time the snmp command happens to terminate. Here is a fix: --- includes/common.inc.php.ori 2015-09-04 20:29:39.561244285 +0200 +++ includes/common.inc.php 2015-09-04 20:30:07.617242602 +0200 @@ -618,9 +618,13 @@ { $start = microtime(TRUE); - //while ($status['running'] !== FALSE) - while (feof($pipes[1]) === FALSE || feof($pipes[2]) === FALSE) + while (TRUE) { + $read = array(); + if (!feof($pipes[1])) { $read[] = $pipes[1]; } + if (!feof($pipes[2])) { $read[] = $pipes[2]; } + if (empty($read)) { break; } + stream_select( - $read = array($pipes[1], $pipes[2]), + $read, $write = NULL, $except = NULL, Regards Mark

8 13

Cisco ASR Zone Based Firewall graphing
by Willie Van Waveren 08 Sep '15

08 Sep '15

Hi Observium team, I recently installed Observium and got it running on a bunch of devices. I am now trying to get it to graph zone based firewall stats on Cisco ASR and also ISR. When I go into settings on the devices and click to enable the firewall graph it seems to enable, but then when I go and look again it is back to disabled. Am I missing anything? I would like to have the following in the firewall graph, how can I edit, or add a new one for all Cisco ZBF. 1.3.6.1.4.1.9.9.491.1.1.1.4.0 "The number of connections which were attempted to be setup but which were declined due to non-availability of required resources. This value is accumulated from the last reboot of the firewall." 1.3.6.1.4.1.9.9.491.1.1.1.5.0 "The number of connections which are in the process of being setup but which have not yet reached the established state in the connection table." 1.3.6.1.4.1.9.9.491.1.1.1.6.0 "The number of connections which are currently active." 1.3.6.1.4.1.9.9.491.1.1.1.11.0 "The averaged number of connections which the firewall establishing per second, averaged over the last 300 seconds." Regards, Willie

2 1

SMS via COM port
by chott＠praha1.net 08 Sep '15

08 Sep '15

Hello team, Is there some way how i can send critical Alert via COM port and connected GSM Gateway? Tomas

6 6

nfsen
by Farshid Abediny 08 Sep '15

08 Sep '15

Hi, in your wiki you have a guide for confighure nfsen with observium, it is no more exist ? or you have new guide? thanks,

1 0

Rancid
by Lyndon Labuschagne 07 Sep '15

07 Sep '15

Hi All I see rancid has a “Latest" tab is there an option to view the previous versions? Also after a slight tweak I have UBNT backups too, just not the Air-fibre as yet there is actually a slight difference in the rancid script for those, and I think all the Ubiquity radios are just associated to AirOS or at least a on the CE release I have for testing purposes Lyndon Labuschagne [cid:image001.jpg@01D0D50C.B78C6660] Ground Floor 76 Kyalami Blvd. Kyalami Office Park T: 010 001 6100 C: 084 888 1017 F: 086 768 3587 E: lyndonl(a)mobiletorque.co.za<mailto:lyndonl@mobiletorque.co.za> W: www.mobiletorque.co.za<http://www.mobiletorque.co.za>

3 3

Availability Graphing
by Lyndon Labuschagne 07 Sep '15

07 Sep '15

Hi all I have looked around but don't see any information around availability graphing. What we are looking for is a graph per device that can show if there have been any communication drops? I suppose alerts based on packetloss will tell us if there have been issues, but it would be nice to retrospectively go back a day or week etc. Sent from my iPhone

4 6

Syslog Integration since revision 6951 not working anymore
by Basile Bluntschli 04 Sep '15

04 Sep '15

Hi Team since version 6951 syslog integration with syslog-ng is not working anymore. Besides I see approx 20% higher CPU usage since then... Reported by Observium ;) Thanks Basile

2 6

Wireless - Ruckus Zone Director
by Basile Bluntschli 04 Sep '15

04 Sep '15

Hi Team we just recently added Ruckus Zone Director at some customer site. The Zone Director gets recognized as a Wireless Controller. However no tab with wireless is present. Should there be already some Ruckus support or is this still in development? Thanks Basile

5 9

A few Questions Regarding Observium
by Lyndon Labuschagne 04 Sep '15

04 Sep '15

Hi All So a few questions around the paid subscription and supported devices etc. In the paid version we have more frequent updates, I assume that some of the issues I see now with supported devices may well be already fixed, I would be interested to hear from any paid subscription users what your experiences are, either on or off list is fine with me. We are really impressed with the support level on the Cisco equipment. Obviously the more useful the MIB files are and the devices support for SNMP the more information is obtainable by Observium. We do however make use of other vendor equipment that is not on the supported list and although the basics of these devices work, more information would / could be available based on the device and the MIB files. We make use of EdgeCore / Accton switches, Alcoma Microwave equipment, and Ubiquiti, First off Ubiquiti support seems spotty, I see the FROGFOOT MIBs seem to be the default and although the UBNT MIBs are in the mibs directory I have not at yet seen a device that seems to use the UBNT MIBs. I would love to see RSSI noise, Capacity etc, obviously dependant on the radio / MIB ability, a few years ago we used Cacti and there was a plugin that did support the radio levels etc for the Stations so it must be possible via SNMP. Unless I am missing something I don't see these graphs. I know that UBNT’s SNMP support have generally been crap to say the least, combine that with some “interesting” hardwarre snmp v1…. Tough Switch and the quasi 5 or 8 port setup that is actually only 2 ports etc etc. Alcoma is a fairly extensively used radio in both the licensed and ISM bands and they do have a fairly comprehensive looking MIB, we would be very interested in having much more detailed graphing and monitoring. EdgeCore These switches also offer a fairly extensive MIB file and support. We would be happy to look at paying for development work to be done to support these hardware platforms if we decide to use Observium. How to we go about requesting development work to be done? Just a side note. We use the new airfibre radios and have noticed that Observium shows the in-band managed IP (management vlan) to show as down, even though this is the IP that Observium gets the SNMP details / polling from, I will check the bugs and see if this has been logged as yet. Thanks Lyndon

2 2

Alerts
by Serghei Golipad 04 Sep '15

04 Sep '15

Hi Guys, We seem to be getting alerts for ignored ports. This seems to happen when port was ignored after an alert check has been created, to fix this we have to delete and re-create alert check each time port needs to be ignored. Any chance this can happen automatically? Cheers Serghei Golipad - CCIE(r) #45033 Network Consultant @ Kelway UK 1 Cyrus Way, Cygnet Park Hampton, Peterborough, PE7 8HP DDI: 0203 069 5165 Mobile: 07469 081 910 Web: www.kelway.com<http://www.kelway.com/> Email: s.golipad(a)kelway.com<mailto:s.golipad@kelway.com> PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. Kelway (UK) Ltd is a Company registered in England and Wales. This email is sent for and on behalf of Kelway Holdings Limited. Kelway Holdings Limited is the UK holding company for Kelway (UK) Limited trading as Kelway. The registered office for Kelway Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than Kelway or the sender of its existence. For more information about Kelway please visit www.kelway.co.uk

2 3

Alerting
by Jason LeBlanc 02 Sep '15

02 Sep '15

Here is my config, yet it is still sending to the SNMP sysContact email address: // Set up a default alerter (email to a single address) $config['alerts']['alerter']['default']['descr'] = "Default Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contacts'] = "jleblanc(a)ctgatlanta.com"; $config['alerts']['alerter']['default']['enable'] = TRUE; $config['alerts']['alerter']['default']['email']['default_only'] = TRUE; $config['alerts']['email']['graphs'] = FALSE; What am I missing? Jason LeBlanc IT Consultant Direct: 678-387-5529 | Cell: 954-461-6492 [CTG-logo-TAG-COLOR] 2030 Powers Ferry Road SE | Suite 130 | Atlanta, GA 30339 Main: 404.352.3000 | Fax: 404.352.2962 | www.ctgatlanta.com

2 4

Re: [Observium] Alerting Emails
by Moerman, Maarten 02 Sep '15

02 Sep '15

Here's my config: // Alert Configuration $config['email']['default'] = "blablabla@blablabla"; ## Default alert recipient $config['email']['default_only'] = FALSE; $config['email']['headers'] = "From: Observium <observium@blablabla> " . "\r\n"; $config['email']['enable'] = TRUE; $config['uptime_warning'] = "84600"; $config['email']['from'] = "blablabla@blablabla"; // Mail from. Default: "OBSERVIUM Network Monitor" <observium@`hostname`> Might wanna try that :) -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Jason LeBlanc <jleblanc(a)ctgatlanta.com<mailto:jleblanc@ctgatlanta.com>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Wednesday, September 2, 2015 at 6:11 PM To: "Observium Network Observation System (observium(a)observium.org<mailto:observium@observium.org>)" <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Alerting Emails Here is my config, yet it is still sending to the SNMP sysContact email address: // Set up a default alerter (email to a single address) $config['alerts']['alerter']['default']['descr'] = "Default Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contacts'] = "jleblanc(a)ctgatlanta.com<mailto:jleblanc@ctgatlanta.com>"; $config['alerts']['alerter']['default']['enable'] = TRUE; $config['alerts']['alerter']['default']['email']['default_only'] = TRUE; $config['alerts']['email']['graphs'] = FALSE; What am I missing? Jason LeBlanc IT Consultant Direct: 678-387-5529 | Cell: 954-461-6492 [CTG-logo-TAG-COLOR] 2030 Powers Ferry Road SE | Suite 130 | Atlanta, GA 30339 Main: 404.352.3000 | Fax: 404.352.2962 | www.ctgatlanta.com

1 0

Alerting Emails
by Jason LeBlanc 02 Sep '15

02 Sep '15

Here is my config, yet it is still sending to the SNMP sysContact email address: // Set up a default alerter (email to a single address) $config['alerts']['alerter']['default']['descr'] = "Default Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contacts'] = "jleblanc(a)ctgatlanta.com<mailto:jleblanc@ctgatlanta.com>"; $config['alerts']['alerter']['default']['enable'] = TRUE; $config['alerts']['alerter']['default']['email']['default_only'] = TRUE; $config['alerts']['email']['graphs'] = FALSE; What am I missing? Jason LeBlanc IT Consultant Direct: 678-387-5529 | Cell: 954-461-6492 [CTG-logo-TAG-COLOR] 2030 Powers Ferry Road SE | Suite 130 | Atlanta, GA 30339 Main: 404.352.3000 | Fax: 404.352.2962 | www.ctgatlanta.com

1 0

Query optimization
by Eduardo Schoedler 02 Sep '15

02 Sep '15

# User@Host: observium[observium] @ localhost [] # Query_time: 0.003876 Lock_time: 0.000048 Rows_sent: 0 Rows_examined: **2836** SET timestamp=1441208020; SELECT `device_id` FROM `ports` WHERE `deleted` = '0' AND `ifPhysAddress` = '001ec9943fdd' LIMIT 1; ALTER TABLE `observium`.`ports` ADD INDEX `ports_ifPhysAddress` USING BTREE(`ifPhysAddress`, `deleted`); OPTIMIZE TABLE `observium`.`ports`; Same query, now using index. ;) Thanks! -- Eduardo Schoedler

1 0

windows servers not showing under servers
by Casper Allerslev Jensen 02 Sep '15

02 Sep '15

Hi all, When i go to Device -> servers I only see my linux servers My windows servers doesn't show.. Only when i remove server option in device type and click search do i see them. Why is that? the windows server has the type=server so i don't get why i don't see it when searching for servers?

1 0

Override IfAlias
by Jarno Tensen 01 Sep '15

01 Sep '15

Hi all, Does anyone know how to override the ‘ifAlias’ setting? Just like the ‘sysLocation’? We have a lot of network devices which are not able to give a port description, what is very annoying cause we have to go physical to a switch to find out which device is behind the port. I know a lot of settings can be configured in config.php, does anyone know a configline to manual setup a portdescription (ifAlias)? Many thanks in advance! Regards, Jarno Met vriendelijke groet, Kind regards, Jarno Tensen Systeem- en Netwerkbeheerder [cid:imagecff646.JPG@12e175e4.45946183] Savannahweg 8 3542 AW Utrecht T 030 - 261 91 96 F 030 - 261 69 77 E Jarno.Tensen(a)A2SP.nl W http://www.a2sp.nl<http://www.a2sp.nl/> [cid:image7c3561.JPG@8d03535a.49a528e9] DISCLAIMER Op deze e-mail is de disclaimer van A2SP van toepassing: http://www.a2sp.nl/disclaimer

4 8

Debian 8
by Andrew Colin 01 Sep '15

01 Sep '15

Hi Guys Will we have any issues if we do an apt-get dist-upgrade to debian 8?

4 7

Multiple CPU
by Cameron Murray 01 Sep '15

01 Sep '15

Guys, I have checked the guides however Not seeing how to configure CPU alerting based on multiple CORE CPU's. We have quite a number of windows virtual machines with 2 - 16+ cores and currently use "processor_usage greater 65" however this is alerting when a single core reaches >65% What is the best way to manage this? Regards, Cameron Murray

3 13

Introduction, polling time questions, other bits
by Aaron Finney 01 Sep '15

01 Sep '15

Hello, We've just started a POC project to determine if Observium is a good fit for our environment, and so far have been very pleased with the feature-richness and general usability of the entire system. In fact, we've discovered several things in our environment that were immediately addressable. Cheers! One thing that's been a head-scratcher for us so far is the length of the polling time for our Juniper switches...anywhere from ~2 mins for a 48 port EX ToR switch, to 8 minutes for a two-member QFX aggregate switch. It's the port polling that's so costly according to the output of the poller script, around 450 seconds on the QFXs. I've tried some basic troubleshooting...disabling MAC accounting, disabling all ports for polling/alerting, etc...but it hasn't helped. Is there something simple I'm missing in the config that's causing it to bog down on the port module? Aside from the time, it's not hurting the QFXs, but our poor EX4500s sometimes spike to 90% CPU during polling. For context, the Observium POC system is located in the same datacenter as the devices we're polling against, and the QFXs are 96 port 5ks, with uplinks to our EX ToR switches. Any ideas/suggestions you have would be much appreciated! Also, I did add support for Baytech PDUs; if there's interest, I'd be happy to provide the code. Aaron

2 3