- observium - lists.observium.org

Constant 'reboot' messages for all devices with no uptime counter
by Robert Williams 02 Apr '15

02 Apr '15

Hi, All of our devices which have no uptime counter (such as IP PDUs and temperature sensors for example) are constantly showing as having ‘rebooted’ every single time they are polled. The issue seems to have started on 27/03/15 at our 6AM SVN up – so whatever revision was released at that time. Since we have a very large number of these devices, the net result of this is a pretty useless eventlog ☺ Like this: [cid:image001.png@01D06CA4.83A8D2A0] …and so on… For each devices they have (always) shown this for Uptime: [cid:image002.png@01D06CA4.83A8D2A0] Since the devices do not have any uptime counters on them. Can I filter/disable/stop these events for these devices somehow? Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

2 2

dns_get_record or why PHP sucks
by Sir l33tname 01 Apr '15

01 Apr '15

Hey, I guess I have found a bug. In ./includes/common.inc.php on the function gethostbynamel6. The problem is this one: *query the A record:* var_dump(dns_get_record($host, DNS_A)); array(1) { [0]=> array(5) { ["host"]=> string(14) "host.name.tdl" ["class"]=> string(2) "IN" ["ttl"]=> int(0) ["type"]=> string(1) "A" ["ip"]=> string(12) "192.168.17.2" } } *query the AAAA record:* var_dump(dns_get_record($host, DNS_AAAA)); PHP Warning:dns_get_record():DNS Queryfailed infile.php on line 4 bool(false) *query both together* var_dump(dns_get_record($host, DNS_A + DNS_AAAA)); PHP Warning:dns_get_record():DNS Queryfailed infile.php on line 4 bool(false) As you can see if the DNS server doesn't have a AAAA record it fails, this cause for me the error that I couldn't add a new device to the observium. I build a prototype code which could be a solution for this problem but since I'm not a good php programmer I'm sure there is a smarter way for this. $A_record = dns_get_record($host, DNS_A); $AAAA_record = dns_get_record($host, DNS_AAAA); if($A_record != false && $AAAA_record != false) { $record = array_merge($A_record, $AAAA_record); } else if($A_record == false) { $record = $AAAA_record; } else if($AAAA_record == false) { $record = $A_record; } else { #show some error } Since I did all the research it should be fairly easy to fix this, so I hope someone will do it. If you need anything more to fix it please ask. A few things I noticed in the debugging process and totally unrelated to the problem: - the name gethostbyname6 is a bit confusing since it does both I would rename it to gethostbyname - same goes for $try_a I personally would pick a more descriptive name - "Could not resolve $host" in ./includes/functions.inc.php and ./includes/functions.inc_d.php, since It took me some time to figure out what this means I would add something like "Could not resolve $host with your DNS or your Hosts file" But all in all it's a nice code base for a php project, well done! For the case I'm wrong please tell me why. l33tname

2 2

Dell PDU not being identified
by Stephen Bateman 31 Mar '15

31 Mar '15

Has anyone had problems adding the Dell K5YYY PDU's for some reason I am getting no data from them other than serial and names. I have tried SNMP v1 & v2 without any results, so ideas would be appreciated.

1 0

Disk size via unix agent.
by Dudu 31 Mar '15

31 Mar '15

Hi All. I have a very large disk which i canot get correct size with snmpd even 5.7.3 Is there any way to populate the graph and database via the Unix Agent? Im able to view the information correctly via the agent df part. Many thanks David Sent from my Samsung Galaxy smartphone.

1 0

No ports added on D-Link DGS-1216T
by Thomas Novin 30 Mar '15

30 Mar '15

Hello Very new to Observium, installed it yesteday. Ran into problems on the first device I added, no ports are found on this switch. I am also using Cacti which I plan to replace and there all ports are discovered and graphing works fine. Here is an output from snmpwalk: http://paste.ubuntu.com/10708460/ Here is an output from poller in debug: http://paste.ubuntu.com/10708471/ And last output from discovery.. root@mistik:/opt/observium# ./discovery.php -h 3 Observium CE 0.14.11.6000 *Discovery* Current Revision : 6000 New Revision : 6350 dlink.xyz.lan 3 dlink Module [ os ] time: 0.0703s Ports : Module [ ports ] time: 24.0653s Port Stacks: Module [ ports-stack ] time: 6.0483s Processors : AGENT-GENERAL-MIB hrDevice: Module [ processors ] time: 12.0521s Memory : AGENT-GENERAL-MIB HOST-RESOURCES-MIB Module [ mempools ] time: 12.0383s IPv4 Addresses : Module [ ipv4-addresses ] time: 36.1278s IPv6 Addresses : Module [ ipv6-addresses ] time: 30.0945s Sensors: ENTITY-SENSOR-MIB Module [ sensors ] time: 42.1179s Storage : Module [ storage ] time: 6.0196s Inventory: Physical Inventory : hrDevice : Module [ inventory ] time: 24.1358s Discovery protocols: LLDP-MIB CISCO-CDP-MIB Module [ discovery-protocols ] time: 12.0836s OSPF Neighbours: Module [ ospf-autodiscovery ] time: 6.0253s ARP/NDP Tables : Module [ arp-table ] time: 18.0719s Module [ junose-atm-vp ] time: 0.0003s BGP Sessions: No BGP on host Module [ bgp-peers ] time: 0.015s VLANs: Q-BRIDGE-MIB Module [ vlans ] time: 6.0383s Module [ mac-accounting ] time: 0.0003s Module [ cisco-pw ] time: 0.0004s Module [ cisco-vrf ] time: 0.0005s Module [ cisco-sla ] time: 0.0004s Module [ vmware-vminfo ] time: 0.0003s Cisco Class-based QoS: QoS not configured. Module [ cisco-cbqos ] time: 6.0876s Module [ libvirt-vminfo ] time: 0.0005s Module [ toner ] time: 0.0005s UCD Disk IO : Module [ ucd-diskio ] time: 6.0147s Wifi: Module [ wifi ] time: 0.0005s Module [ graphs ] time: 0.0004s Discovered in 247.1 seconds MySQL: Cell[22/0s] Row[0/0s] Rows[49/0.01s] Column[0/0s] Update[1/0.01s] Insert[2/0.01s] Delete[0/0s] Anyone knows what to do to graph the ports on this switch? Rgds//Thomas

2 2

match port_id with rrd graphs
by Zhenhui Liang 30 Mar '15

30 Mar '15

Hi, I would like to do some rrdtool fetch against the raw rrd files observium generated to get some reports. But I couldn’t figure out how to match the portid or device_id from observium tables to get the correct path to match to the rrd files. Rrd files location seemed to be at ~observium/rrd/devicenames. But the rrd file name like port-123.rrd, 123 seems not to be the port_id in the ports table. Rather it’s device specific. Thank you very much for your help. —Zhenhui

4 5

Discovery on Nexus 3K removes all interfaces
by Markus Viitamäki 30 Mar '15

30 Mar '15

I am running 0.15.3.6350 and have noticed that some time ago all interfaces on my nexus 3k's gets marked deleted every time discovery runs. However the interfaces are not deleted.. :/ I have done debugging on the a discovery and the only problems I can find are these (I am not sure these are related at all): http://pastie.org/private/lmqwcfqdp2ujo2nx65pwew // Markus (suom1)

2 2

update errors database structure
by Patrick Marquetecken 29 Mar '15

29 Mar '15

Hi, It seems that I have some problems with my database structure Perhaps related to my alerts & evenlog problems. [2015/01/18 15:05:14 +0100] update.php(2459): ====== Schema update 137 -> 138 ============== [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `entPhysicalIndex_measured` varchar(16) COLLATE utf8_unicode_ci DEFAULT NULL AFTER `sensor_custom_limit`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'entPhysicalIndex_measured' [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `measured_class` VARCHAR( 32 ) NULL DEFAULT NULL AFTER `entPhysicalIndex_measured`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'measured_class' [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `measured_entity` VARCHAR( 32 ) NULL DEFAULT NULL AFTER `measured_class`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'measured_entity' [2015/03/23 14:23:56 +0100] discovery.php(31115): ====== Schema update 183 -> 184 ============== [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: ALTER TABLE `eventlog` CHANGE `reference` `entity_id` INT( 64 ) NULL DEFAULT NULL; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1366) Incorrect integer value: 'NULL' for column 'entity_id' at row 1 [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: ALTER TABLE `eventlog` ADD `severity` TINYINT NOT NULL DEFAULT '6' AFTER `entity_id`; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'entity_id' in 'eventlog' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` REGEXP '(above|under) threshold'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 5 WHERE `message` REGEXP ' [.(.]by (user|cron|console)'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 3 WHERE `message` LIKE 'Device status changed to%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE '%probably the device was replaced%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE 'OS changed%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE 'Device rebooted%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `entity_type` IN ('bgp_peer', 'sensor') AND `message` REGEXP ' (Up|Down|Alarm): '; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list'

2 5

snmp crash on nexus 7k when polling certain OID
by Steve Costaras 29 Mar '15

29 Mar '15

I'm running observium CE 0.14.11.6000. We just ran into an interesting problem on a Nexus 7K running 6.2(12) code. When observium polls the device, the snmp process crashes and reloads (this happens with every 5 minute poll). Managed to track it down to a specific OID that's causing it: 1.3.6.1.4.1.9.9.91.1.1.1.1.4.22809 It takes less than a second to reload the snmp process on the 7K; we're engaging cisco to see about a fix, but in the interim besides disabling the device, is there a specific way to block/not poll this particular OID? Older nexus code appears to not have this problem as. Steve

2 1

New user - I apologize in advance if I am asking stupid questions
by Rich Elwell 29 Mar '15

29 Mar '15

Greetings, I've recently installed observium and find that it is a great tool. Kudos for developing something so useful and easy to use. I do have a couple of questions. I desire to set the device_id for some of the devices to a specific value. This is not supported in the interface. It looks like I *should* be able to modify the code to allow me to do this, but before I do I wanted to check and see if there is already a way for me to accomplish this without having to modify the code. I also desire to be able to add devices programatically via an API call from an external system. I looked over the existing simple API (not extensively) but it didn't seem like that was possible. So basically I want to be able to do something like: http://myserver/api.php?mydetails&including&device_id and have it add the device while specifying the device_id. Is that possible? If not, I'm probably going to build it. Thanks, Rich -- Rich Elwell, MS, CISSP, GCIA, CCNA, CCNA Security /dev/null security ⋅ network *nix administration

3 5

ISSUES/BUg with regards to collect_table Implementation - Suggested Code Changes
by Mark Gibbons 29 Mar '15

29 Mar '15

Hi (especially adam - can you take a read please) Background I have been working on integrating support for Ubiquiti wireless products so that wireless stats can be shown on the "wireless" graph page for these devices. I created routines to process the mibs in /include/polling/graphs using the original loop method to parse the mib to generate and populate the RRD's and everything is working absolutely fine. I will of course submit this work for inclusion once tested/verified fully. However, i read the README (you see people do read README's!!!!!!!!!!): "Please make sure you use the *new* format of graphing poller. Generate a $graph_defs array to be used in collect_table." And i thought I would have a go at the $table_def method. So I defined the MIB as per $tabledef and come across issues with multi indexed oids. In this instance from a MIB walk we have two oids as follows: ubntRadioRssi.1.1 ubntRadioRssi.1.2 So i put the following in table_def: 'ubntRadioRssi.1' => array('index' => '1', 'descr' => 'RSSI Chain 0', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_0'), 'ubntRadioRssi.1' => array('index' => '2', 'descr' => 'RSSI Chain 1', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_1'), But, of course, (knowing what i know now) this does not work because the array index is the same and you only get the last entry. So i thought try with a blank index specifying the full oid: 'ubntRadioRssi.1.1' => array('index' => '', 'descr' => 'RSSI Chain 0', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_0'), 'ubntRadioRssi.1.2' => array('index' => '', 'descr' => 'RSSI Chain 1', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_1'), But this didn't work so I investgated. The issues surround the handling of the separation of oid and index in both collect table AND snmp_get_multi. Let me Deal with snmp_get_multi first. Snmp_get multi expects an array of full oid's - great. However it spits back an array of oids and index separated. Because you use explode to breakup the oid it will only ever return the first index after the first "." rather than the full index after the first "." I am talking about this code at approx Line 464 in /includes/snmp.inc.php foreach (explode("\n", $data) as $entry) { list($oid,$value) = explode("=", $entry, 2); $oid = trim($oid); $value = trim($value); list($oid, $index) = explode(".", $oid); if (!strstr($value, "at this OID") && isset($oid) && isset($index)) { $array[$index][$oid] = $value; } } This can be corrected if you change it to the following code. In this case the base oid is returned with the FULL index in the index. I can't see that this could/would break other stuff but your experience would know better!! : foreach (explode("\n", $data) as $entry) { list($oid,$value) = explode("=", $entry, 2); $oid = trim($oid); $value = trim($value); $dotpos = strpos($oid, '.'); if ($dotpos != FALSE) { $index = substr($oid, $dotpos+1); $oid = substr($oid, 0, $dotpos); } //list($oid, $index) = explode(".", $oid); if (!strstr($value, "at this OID") && isset($oid) && isset($index)) { $array[$index][$oid] = $value; } } So the next issue is index handling within collect_table and the temporary index of oids created to generate rrdupdate. Current code is at approx 898 in /includes/polling/functions.inc.php: $oids[] = $oid.'.'.$entry['index']; $oids_index[] = array('index' => $entry['index'], 'oid' => $oid); Again if this is changed to the following so that oid and index is re-split like the return from snmp_get_multi we have a working solution where you can specify the full oid as an index for the oid array in table_def with an oid index of '' (blank): if ($entry['index'] != '') { $fulloid = $oid.'.'.$entry['index']; } else { $fulloid = $oid; } $oids[] = $fulloid; $dotpos = strpos($fulloid, '.'); if ($dotpos != FALSE) { $splitindex = substr($fulloid, $dotpos+1); $splitoid = substr($fulloid, 0, $dotpos); } //$oids_index[] = array('index' => $entry['index'], 'oid' => $oid); $oids_index[] = array('index' => $splitindex, 'oid' => $splitoid); So this is a possible solution to the multiple index problem on an oid. By specifying the full oid with blank index. What do you think? Seems like a Win/Win to me but my experience of Observium php code and structure is < 1 week. At least this solution means we can use the table_def method for us but it would mean a lot of maintenance with svn updates. Hope this solution is of possible interest for inclusion. KR's Mark

1 1

FortiGate support
by Thomas Raabo - Zitcom A/S 27 Mar '15

27 Mar '15

At some point we had FortiGate support for session graphing and so on. Now its gone. Does somebody know why? Thomas

2 2

How best to engage the Professional Services team?
by Arthur Bommele (DataByte) 27 Mar '15

27 Mar '15

Dear concerned, How best to engage the Professional Services team? Specifically, regarding Feature Development. Kind regards, Arthur B.

1 0

Help analysis
by Eliezer De Sousa Oliveira 27 Mar '15

27 Mar '15

hello everyone! how to tell the host that causes more traffic on my network? the Community observium, have an option to do this analysis? ass eliezer

2 3

Cronjobs in polling the devices
by Jerico M. Rubion 26 Mar '15

26 Mar '15

Hi there, I would like to inquire about the desired minimum cron jobs that are accepted in observium. I only have a Quad Core Intel(R) Xeon(R) CPU E5405 @ 2.00GHz CPU resources available currently managing 69 HOSTS/Devices. My current setting in /etc/cron.d/observium is */10 * * * * root /opt/observium/poller-wrapper.py 4 >> /dev/null 2>&1 */10 * * * * root /opt/observium/poller.php -h all >> /dev/null 2>&1 Can I comment out the 2nd line -> */10 * * * * root /opt/observium/poller.php -h all >> /dev/null 2>&1 ?? Best Regards, Jerico M. Rubion | 77GSI IT Services Group SEVEN SEVEN GLOBAL SERVICES INC. | 27th Floor, Orient Square Bldg., F. Ortigas Jr. Ortigas Center, Pasig City, Philippines 1605 Office: +632.915.7747 ext. 1911 | Mobile: +63.9175382740 | Duo: +632.9667501 The Information contained and all attachments to this email are for the named recipient(s) only. It contains legally privileged and confidential information intended solely for the use of the addressee. The addressee undertakes to use such information consistent with its privileged and confidential character, and by the receipt thereof appreciates that any use contrary thereto will subject him to sanctions provided for by law. If the reader of this message is not the intended recipient, please be notified that any reading, dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this transmittal in error, please notify the sender immediately.

2 1

Inquiry increased work load
by Jerico M. Rubion 25 Mar '15

25 Mar '15

Hi, Is there an automatic upgrade/patch that happened last March 24 2015 (1pm) EST Timezone? I'm getting an incremental increase of CPU load starting from the date and time I specified, I didn't change any settings in observium application even in the cronjobs. Output of: ps aux | sort -nrk 3 | head root 12585 8.5 0.0 4612 696 ? R 02:12 0:00 /usr/bin/snmpbulkwalk - xxx -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /opt/observium/mibs udp:xxxxxxx:161 cipSecGlobalStats root 12546 7.0 0.0 4748 1540 ? R 02:12 0:00 /usr/bin/snmpwalk -v1 -c -OQUs -m SNMPv2-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxxx:161 snmp root 12581 6.5 0.0 4880 1744 ? R 02:12 0:00 /usr/bin/snmpget -v1 -c -Otv -M /opt/observium/mibs udp:xxxxxx:161 sysUpTime.0 root 12579 6.0 0.0 4932 1828 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -r 0 -v2c -c -OqsX -m BRIDGE-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxx:161 dot1dTpFdbEntry root 12573 6.0 0.0 0 0 ? R 02:12 0:00 [snmpbulkwalk] root 12571 6.0 0.0 5008 1888 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUn -M /opt/observium/mibs udp:xxxxx:161 .1.3.6.1.4.1.9.9.13.1 root 12569 6.0 0.0 4748 1668 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -r 0 -v2c -c -OqsX -m BRIDGE-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxxx:161 dot1dTpFdbEntry root 12582 5.5 0.0 4924 1968 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m IF-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxx:161 ifEntry root 12539 5.3 0.0 5016 1884 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m CISCO-VLAN-MEMBERSHIP-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/cis co udp:xxxxxx:161 vmVlan root 12557 5.0 0.0 5016 1872 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m CISCO-VLAN-MEMBERSHIP-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/cis co udp:xxxxxx:161 vmVlan Note: xxxxx is used to replaced sensitive information Kindly see attached screenshot for the incremental increase of CPU load that happend last Match 24 1pm (EST Timezone) Best Regards, Jerico M. Rubion | 77GSI IT Services Group SEVEN SEVEN GLOBAL SERVICES INC. | 27th Floor, Orient Square Bldg., F. Ortigas Jr. Ortigas Center, Pasig City, Philippines 1605 Office: +632.915.7747 ext. 1911 | Mobile: +63.9175382740 | Duo: +632.9667501 The Information contained and all attachments to this email are for the named recipient(s) only. It contains legally privileged and confidential information intended solely for the use of the addressee. The addressee undertakes to use such information consistent with its privileged and confidential character, and by the receipt thereof appreciates that any use contrary thereto will subject him to sanctions provided for by law. If the reader of this message is not the intended recipient, please be notified that any reading, dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this transmittal in error, please notify the sender immediately.

1 0

Re: [Observium] howto control ports
by Tom Laermans 25 Mar '15

25 Mar '15

You typo'd your realname in your mail client setup ;) 'Ports' is quite a confusing word to use in this context indeed... Tom On Mar 24, 2015 8:38 PM, Adam Armstronf <adama(a)memetic.org> wrote: > > Well, that was totally not obvious! > > We don't actually do any "port" monitoring at all, the old services code is long since deprecated and probably broken. > > Adam. > > Sent with AquaMail for Android > http://www.aqua-mail.com > > On 24 March 2015 12:17:28 Frank Lahr <logman0u812(a)gmail.com> wrote: >> >> He wants to monitor an applications port(s), up/down and the data going going threw it. >> I was thinking about using Observium to monitor dicom/hl7 ports too, but have not looked into it yet. >> >> Frank >> >> On Tue, Mar 24, 2015 at 2:48 AM, Adam Armstrong <adama(a)memetic.org> wrote: >>> >>> I think you might be using the wrong words :) >>> >>> adam. >>>> >>>> On 24/03/2015 06:25:33, J.P.M.H. Geerets <j.p.geerets(a)amc.uva.nl> wrote: >>>> >>>> Hi folks, >>>> >>>> Bit new here. >>>> >>>> Have an observium (community edition) install in test environment. >>>> Is het possible to creat my own ports to test on? >>>> Want to test for example ports on a cloverleaf (communication) server to check orm messages etc. >>>> Also wanna check dicomports, mostly on 104. >>>> >>>> Any idea how to do this with observium? >>>> >>>> >>>> Met vriendelijke groet, >>>> >>>> Jean-Paul >>>> --- >>>> Jean-Paul Geerets - ICT Radiologie >>>> >>>> ________________________________ >>>> >>>> AMC Disclaimer : http://www.amc.nl/disclaimer >>>> >>>> ________________________________ >>>> _______________________________________________ >>>> observium mailing list >>>> observium(a)observium.org >>>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >>> >>> _______________________________________________ >>> observium mailing list >>> observium(a)observium.org >>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >> >> >> >> -- >> Frank >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>

3 2

Re: [Observium] (no subject)
by Adam Armstrong 25 Mar '15

25 Mar '15

Either SNMP timeout, SNMP stack bug or vendor bug. Adam. On 25 Mar 2015 02:06, Zach Underwood <zunder1990(a)gmail.com> wrote: > > I get the same thing about the interfaces nulling on some of my HP 1910 switches. > > On Mar 24, 2015 10:02 PM, "Christopher Pole" <chris(a)apexn.com.au> wrote: >> >> Poor choice of terms on my part regarding discovery, let me try again. >> >> Every now and then Observium will go through and mark every interface attribute on this device as NULL and then shortly thereafter re-learn the attributes, for example: >> >> Time: 2015-03-25 00:56:26 >> Port: lag2 >> Message: Interface changed: [ifName] LAG2 -> NULL; [ifAlias] Trunk: sw01 -> NULL; [ifAdminStatus] up -> NULL; [ifOperStatus] up -> NULL; [ifMtu] 9216 -> NULL; [ifSpeed] 2000000000 -> NULL; [ifHighSpeed] 2000 -> NULL; [ifType] ieee8023adLag -> NULL; [ifPhysAddress] 001bed9fa841 -> NULL; [ifPromiscuousMode] true -> NULL; [ifConnectorPresent] false -> NULL >> >> At this point the alert triggers for this interface, as anything over 0bps is triggers the >85% util alarm. >> >> Shortly thereafter observium relearns the interface attributes: >> >> Time: 2015-03-25 01:00:16 >> Port: lag2 >> Message: Interface changed: [ifName] -> LAG2; [ifAlias] -> Trunk: sw01; [ifAdminStatus] -> up; [ifOperStatus] -> up; [ifMtu] -> 9216; [ifSpeed] -> 2000000000; [ifHighSpeed] -> 2000; [ifType] -> ieee8023adLag; [ifPhysAddress] -> 001bed9fa841; [ifPromiscuousMode] -> true; [ifConnectorPresent] -> false >> >> At this point the alert sends a recovery message. >> >> The nullification and re-learning of interface attributes happens periodically but with no fixed schedule. Is this possibly something that can be caused by a bulk-walk failure part way through? Or an SNMP timeout? >> >> Thanks, >> >> Chris >> >> >> On Wed, Mar 25, 2015 at 10:41 AM, Adam Armstrong <adama(a)memetic.org> wrote: >>> >>> Nothing gets rediscovered at any frequency other than the frequency with which you run discovery.php. >>> >>> Almost everything collected by the poller is collected by snmpbulkwalk. >>> >>> It's possible that bulkwalk is failing part way through for this device causing the ifHighSpeed to be set to zero (or set to the value of ifSpeed, which will be just as useless on ports >1Gb) >>> >>> adam. >>>> >>>> On 24/03/2015 22:16:43, Christopher Pole <chris(a)apexn.com.au> wrote: >>>> >>>> Hi folks, >>>> >>>> we have an alert that triggers when certain ports hit >85% utilisation being triggered by a single device on a regular basis as it seems to get rewalked quite often, which briefly sets the speed of the monitored ports to 0 which then triggers the alert as any utilisation over 0 is >85% :). >>>> >>>> The device is a Brocade CES, but it is the only one in our fleet that suffers from this rediscover > trigger alert issue. Though the others also seem to rediscover more often than is necessary. >>>> >>>> Any thoughts on how I might figure out what is going on so I can fix it? >>>> >>>> Thanks, >>>> Chris >>>> _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >>> >>> _______________________________________________ >>> observium mailing list >>> observium(a)observium.org >>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >> >> >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>

1 0

(no subject)
by Christopher Pole 25 Mar '15

25 Mar '15

Hi folks, we have an alert that triggers when certain ports hit >85% utilisation being triggered by a single device on a regular basis as it seems to get rewalked quite often, which briefly sets the speed of the monitored ports to 0 which then triggers the alert as any utilisation over 0 is >85% :). The device is a Brocade CES, but it is the only one in our fleet that suffers from this rediscover > trigger alert issue. Though the others also seem to rediscover more often than is necessary. Any thoughts on how I might figure out what is going on so I can fix it? Thanks, Chris

3 3

Alerts not working
by Patrick Marquetecken 25 Mar '15

25 Mar '15

I'm trying to get my alerts working but until now without success. I have put a server down, and i know some systems have a disk that is full about 80% I have followed the http://www.observium.org/wiki/Creating_an_Alert_Checker and created some alert according to the examples, and run the regenerate. Test mails are successfully send from the command line. but no luck, can anyone please advice on this matter?

3 7

howto control ports
by J.P.M.H. Geerets 24 Mar '15

24 Mar '15

Hi folks, Bit new here. Have an observium (community edition) install in test environment. Is het possible to creat my own ports to test on? Want to test for example ports on a cloverleaf (communication) server to check orm messages etc. Also wanna check dicomports, mostly on 104. Any idea how to do this with observium? Met vriendelijke groet, Jean-Paul --- Jean-Paul Geerets - ICT Radiologie ________________________________ AMC Disclaimer : http://www.amc.nl/disclaimer ________________________________

4 6

LDAP changes in the Professional version?
by George Phillips 23 Mar '15

23 Mar '15

Hi folks! I tried searching the list but didn’t see anything promising... I had LDAP auth setup and working great on the Community version, but as soon as I upgraded to Professional (version 0.15.3.6343), it ceased allowing logins. A debug of the login shows: LDAP[Connecting to xxx.xxx.xxx.xxx] LDAP[Connected] LDAP[Referrals][Disabled] LDAP[Version][Set to 3] LDAP[Bind DN called] LDAP[Bind][cn=manager,ou=Internal,dc=example,dc=com] LDAP[Filter][(uid=testuser)][ou=Users,ou=Accounts,dc=example,dc=com] LDAP[Authenticate][User: testuser][Bind user: cn=Test User,ou=Users,ou=Accounts,dc=example,dc=com] LDAP[Authenticate][Comparing: cn=admins,ou=Groups,ou=Accounts,dc=example,dc=com][member=cn=Test User,ou=Users,ou=Accounts,dc=example,dc=com] LDAP[Authenticate][Compare LDAP error: No such object] So this part looked a bit strange to me: LDAP[Authenticate][Comparing: cn=admins,ou=Groups,ou=Accounts,dc=example,dc=com][member=cn=Test User,ou=Users,ou=Accounts,dc=example,dc=com] (notice the strange "member=cn=…" part) My config is: // Begin LDAP Config $config['auth_mechanism'] = "ldap"; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_binddn'] = "cn=manager,ou=Internal,dc=example,dc=com"; $config['auth_ldap_bindpw'] = “PASSWORD_HERE"; $config['auth_ldap_attr']['uid'] = "uid"; $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; $config['auth_ldap_attr']['cn'] = "cn"; $config['auth_ldap_objectclass'] = "inetOrgPerson"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = “LDAP_SERVER_IP"; $config['auth_ldap_port'] = 389; $config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = ",ou=Users,ou=Accounts,dc=example,dc=com"; $config['auth_ldap_group'] = array("cn=admins,ou=Groups,ou=Accounts,dc=example,dc=com"); $config['auth_ldap_groupbase'] = "ou=Groups,ou=Accounts,dc=example,dc=com"; $config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['admins']['level'] = 10; // End LDAP Config Again, this same config works like a champ on the community edition. Did something change with LDAP auth in the professional edition? Am I missing something? Thanks! —George George Phillips www.pfsense.org

2 2

Request for more info from Allied Telesis AW+ switches
by Daniel Olynsma 23 Mar '15

23 Mar '15

Hi All, I use Observium daily to monitor various test networks and have noticed limited support for AlliedwarePlus products. I have done some digging round in the MIBs as well as the Observium php files and found that Observium is only extracting the Software version from AT-SETUP-MIB in the file: /opt/observium/includes/polling/os$ cat alliedwareplus.inc.php I would like to request that this be increased to contain more device information. I have found that the HW, serial No etc.. info is available in the AT-RESOURCE-MIB. I have not attached the MIB file as it is already part of Observium. Please find below some experiments that I have done extracting the info. I have conducted experiments on standalone as well as a 'stacked' product consisting of 8 physical switches (rscBoardName). Each device lists a base board '.3' and stacking module '.4' and a power supply '.5'. I would expect that you would only be interested in the '.3' values. for the switch Type. In my experiments I also found following could be extracted: H/W Rev - rscBoardRevision S/N - rscBoardSerialNumber I do not have PHP experience so do not know how to add this functionality myself. However since I am requesting this I do make myself available to assist in this or other Allied Telesis related tasks Regards, Daniel Experiment results: ------- Get the $Hardware value AT-RESOURCE-MIB rscBoardName Standalone (With stacking hw) danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.36 1.3.6.1.4.1.207.8.4.4.3.21.1.1.4 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "x510-52GTX" danielo@tb105 ~ $ Stacked product (8-stack) danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.49 1.3.6.1.4.1.207.8.4.4.3.21.1.1.4 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.5 = STRING: "PWR250" danielo@tb105 ~ $ Standalone (Without stacking hw) danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.34 1.3.6.1.4.1.207.8.4.4.3.21.1.1.4 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "x610-24Ts/X" danielo@tb105 ~ $ danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.34 1.3.6.1.4.1.207.8.4.4.3.21 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.3.1.3 = STRING: "Base" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "x610-24Ts/X" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.5.1.3 = Gauge32: 340 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.6.1.3 = STRING: " " .1.3.6.1.4.1.207.8.4.4.3.21.1.1.7.1.3 = STRING: "B-0" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.8.1.3 = STRING: "C1ZQB4107" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.1.1 = STRING: " Total: 511640 kB Free: 379816 kB" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.2.1 = STRING: "63.0MB Used: 25.2MB Available: 37.8MB" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.3.1 = STRING: "0 days 15:25:56" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.4.1 = STRING: "2.0.4" danielo@tb105 ~ $ localadmin@observium:~$ snmpwalk -O n -m ~/.snmp/mibs/AT-RESOURCE-MIB -v 2c -c public 10.37.105.49 rscBoardName .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.5 = STRING: PWR250 localadmin@observium:~$ snmpwalk -O n -m ~/.snmp/mibs/AT-RESOURCE-MIB -v 2c -c public 10.37.105.34 rscBoardName .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: x610-24Ts/X localadmin@observium:~$ localadmin@observium:~$ localadmin@observium:~$ snmpwalk -O n -m ~/.snmp/mibs/AT-RESOURCE-MIB -v 2c -c public 10.37.105.36 rscBoardName .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: x510-52GTX localadmin@observium:~$

2 1

BUG: (and Fix) in poll-billing.php - snmp v1 issue
by Mark Gibbons 23 Mar '15

23 Mar '15

Hi We upgraded to the PRO version last week so that we could look at the billing feature. We did all the needed setup stuff including install of jdgraph etc and added the required cron jobs. We created a few tests bills on a couple of ports We left it for a few hours and got absolutely nothing. We ran poll-billing manually and kept on seeing that it returned "No Data" We searched online and believe that this bug might be referenced here: http://jira.observium.org/browse/OBSERVIUM-711 We enabled OBS_DEBUG in poll-billing.php and immediately could see the problem. The snmpget command was being invoked requesting v2 High Capacity counters against snmp v1 targets. The reason is that the conditional clause when building the snmpget command is wrong. Currently line 86 reads: if ($port['snmp_version'] == "1" || $port['port_64bit'] == "0") { However the snmpv1 string that should be looked for is "v1" not "1". Changing the clause to: if ($port['snmp_version'] == "v1" || $port['port_64bit'] == "0") { Solves all the problems and poll-billing then correctly returns data from snmp v1 devices. Can the please be fixed in an upcoming SVN release so we do not have to reapply the fix if poll-billing.php gets changed for other reasons. KR's Mark

1 0

lighttpd
by tridinebandim 23 Mar '15

23 Mar '15

hi guys, just registered to address a missing info in lighttpd installiation tutorial. "python-mysqldb" package is not in the list of prerequisite packages and what i see is it's required to run the cron "*/5 * * * * root /opt/observium/poller-wrapper.py 2 >> /dev/null 2>&1" if you can edit the tutorial, people who uses lighttpd will be able to see graphs with data. thanks for all your hard work.

1 0