- observium - lists.observium.org

"Shell Shock" BASH exploit announced - Patch your boxes
by tonto＠decoygaming.com.au 28 Sep '14

28 Sep '14

Hey all, This isn't technically about Observium but felt it was worth bringing to your attention. https://www.us-cert.gov/ncas/current-activity/2014/09/24/Bourne-Again-Shell… A bash exploit has been announced that allows remote code execution. Updates are available for Debian/Ubuntu/RHEL via APT/YUM. Might be an idea to patch your Observium boxes. Regards, Matt "Tonto" Harper - DecoyGaming

5 5

Sensor Subtypes
by Milton Ngan 27 Sep '14

27 Sep '14

So what is the direction that the sensors are heading? Are subtypes going to go away? Or are they the way forward? I saw that alerting for subtypes was just removed, and that the recommendation is to use the general sensor class for alerting. Alerting for subtypes can be made to work with a simple change, however it would also break the generic sensor type. I am just trying to understand if I should just ignore the sensor subtypes altogether because a generic sensor alerting infrastructure is where things are headed. M.

3 4

graph color
by Zhenhui Liang 26 Sep '14

26 Sep '14

Guys, This might be a general RRD question. So in almost all graphing, we have those shaded color area and solid color line. Although I have a general idea on what they mean, I still want some official explanations regarding their meanings. Thanks. I attached a cpu usage graph here as an example. We have grey shaded area, and solid red line. I guess the red line is some kind of moving average? While grey shows spikes? Or how else could I inteprete this? Thanks a lot. Zhenhui[cid:2CB03DFE-FFA0-4DA8-9438-EB2732F92119]

3 3

rename graph
by Support 26 Sep '14

26 Sep '14

Hi, is possible to rename single graph? like 'Internet Traffic' instead of generic eth0 regards, Giuseppe _____________________________________________________________________ NUCKLEO Information Technology Solutions Support & Delivery Team http://www.nuckleo.com _____________________________________________________________________

2 1

Trail the alerting functionality
by Vini 26 Sep '14

26 Sep '14

Hi All, I am evaluating Observium for a job and I was wondering if any of you know of a way to enable the alerting functionality as a trail? I could not find anything on the website about it but if I cannot trial it first and compare to the other options I have I won't be able to make a case to pay for the subscription. Any info would be much appreciated. Thanks Vin

4 4

Graph blank problem
by chott＠praha1.net 26 Sep '14

26 Sep '14

Hello guys Last two week i have problem with Graph blank places for few times Observium is connected by localy switch gigabit line same problem in localy SNMP for server Where is problem? Disk? RAM ? SQL? Tomas [email-header-praha1] Tomas Chott technický ředitel chott(a)praha1.net<mailto:chott@praha1.net> Phone: +420 245 004 005 Mobile: +420 604 930 119 Certifikace: Cisco CXFS, CCDA, SMBEN, SMBAM, CCNA Ubiquiti UCWA, UEWA, UCRSS, UCT Authorised Trainer Cisco, Ubiquiti, TP-Link, Synology Metropolitní síť Praha 1 z.s.p.o. Jindrisska 18 110 00 Praha 1 Czech Republic www.praha1.net<http://www.praha1.net/> [Popis: Facebook]<http://www.facebook.com/praha1net> [Popis: LinkedIn] <http://www.linkedin.com/pub/tomas-chott/49/97a/1aa>

2 8

Re: [Observium] Generating Email Alerts till state change
by Moerman, Maarten 26 Sep '14

26 Sep '14

You’ll get an alert every 24hours. -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com From: <Joy>, Jees <Jees.Joy(a)KVHasia.com<mailto:Jees.Joy@KVHasia.com>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Thursday, September 25, 2014 at 12:34 PM To: "observium(a)observium.org<mailto:observium@observium.org>" <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Generating Email Alerts till state change Hey All, Thank you for this interesting product. We started to use Observium for basic and monitoring of our Linux and Windows infrastructure. I have a quick question regarding Alerts , I have configured Alert Checker as follows: Check Condition: device_status is 0 device_status_type is ping Device Match: hostname match * Entity Match * I get only one Alert per failure, then once recovered I get one recovery alert. I would like to keep getting alerts till the state is recovered or we manually suppress is it using ignore. Thank you very much. Best Regards, Jees Joy *************************************************************************** "PLEASE NOTE: This email, and any attachments hereto, are intended only for use by the specified addressee(s) and may contain legally privileged and/or confidential and/or proprietary information of KVH Co., Ltd. and/or its affiliates (including personal information). If you are not the intended recipient of this email, please immediately notify the sender by email, and please permanently delete the original, any print out and any copies of the foregoing. " ***************************************************************************

3 3

Documentation
by Søren Irbo 25 Sep '14

25 Sep '14

Hi! Stumbled upon this feature, are there other nice features, which are not documented? http://jira.observium.org/browse/OBSERVIUM-299 Can't find it here: http://www.observium.org/wiki/Configuration_Options#Custom_traffic_graphs /Søren

9 14

Generating Email Alerts till state change
by Joy, Jees 25 Sep '14

25 Sep '14

Hey All, Thank you for this interesting product. We started to use Observium for basic and monitoring of our Linux and Windows infrastructure. I have a quick question regarding Alerts , I have configured Alert Checker as follows: Check Condition: device_status is 0 device_status_type is ping Device Match: hostname match * Entity Match * I get only one Alert per failure, then once recovered I get one recovery alert. I would like to keep getting alerts till the state is recovered or we manually suppress is it using ignore. Thank you very much. Best Regards, Jees Joy **************************************************************** "PLEASE NOTE: This email, and any attachments hereto, are intended only for use by the specified addressee(s) and may contain legally privileged and/or confidential and/or proprietary information of KVH Co., Ltd. and/or its affiliates (including personal information). If you are not the intended recipient of this email, please immediately notify the sender by email, and please permanently delete the original, any print out and any copies of the foregoing. " ****************************************************************

4 5

Re: [Observium] Problem with the Mail Alerting
by SCHEIN David 24 Sep '14

24 Sep '14

Hello, Thanks for your answer, where I can find a tutorial to configure the checker, because the wiki is not clear for me. And in the earlier version the mail alert was automatical, why this feature was abandoned. Best regards David De : observium [mailto:observium-bounces@observium.org] De la part de Tom Laermans Envoyé : vendredi 12 septembre 2014 15:03 À : Observium Network Observation System Objet : Re: [Observium] ***SPAM*** Re: Problem with the Mail Alerting David, You need to create alert checkers to receive e-mail alerts. Tom On 09/12/2014 02:08 PM, SCHEIN David wrote: Hello, First thanks for your rapid answer, the alerts look like activated, like you can see below (I don't know if picture can be display on this maillinglist [cid:image001.png@01CFD1BE.AA3C1750] [cid:image002.png@01CFD1BE.AA3C1750] When in run the alerter.php on a device with an interface down : :/data/observium# php ./alerter.php -h sto-rtr-edge-agarik.seres.lan -d Observium v0.14.9.5798 Alerter DEBUG! Starting alerter run: PHP Warning: readfile(/data/observium/includes/debug/ref.css): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2474 PHP Warning: readfile(/data/observium/includes/debug/ref.js): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2482 <div><style> Warning: readfile(/data/observium/includes/debug/ref.css): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2474 </style> <script> Warning: readfile(/data/observium/includes/debug/ref.js): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2482 </script><div class="ref"><span data-input><i>> </i><span data-expTxt>$vars</span><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `alert_tests` WHERE 1</span></span><div><span data-row><span data-cell><span data-title>string(35)</span></span></span></div></div></div>Cached 0 alert rules. <div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `alert_assoc`</span></span><div><span data-row><span data-cell><span data-title>string(27)</span></span></span></div></div></div><div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT `device_id` FROM `devices` WHERE `disabled` = 0 AND `hostname` LIKE 'sto-rtr-edge-agarik.seres.lan' ORDER BY `device_id` ASC</span></span><div><span data-row><span data-cell><span data-title>string(131)</span></span></span></div></div></div><div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `devices` WHERE `device_id` = '35'</span></span><div><span data-row><span data-cell><span data-title>string(48)</span></span></span></div></div></div>Processing alerts for sto-rtr-edge-agarik.seres.lan <div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT *,`alert_table`.`alert_table_id` AS `alert_table_id` FROM `alert_table` LEFT JOIN `alert_table-state` ON `alert_table`.`alert_table_id` = `alert_table-state`.`alert_table_id` WHERE `device_id` = '35'</span></span><div><span data-row><span data-cell><span data-title>string(212)</span></span></span></div></div></div><div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `alert_table` LEFT JOIN `alert_table-state` ON `alert_table`.`alert_table_id` = `alert_table-state`.`alert_table_id` WHERE `device_id` = '35'</span></span><div><span data-row><span data-cell><span data-title>string(155)</span></span></span></div></div></div> Best regards David De : observium [mailto:observium-bounces@observium.org] De la part de Tom Laermans Envoyé : vendredi 12 septembre 2014 12:21 À : Observium Network Observation System Objet : Re: [Observium] Problem with the Mail Alerting On 09/12/2014 11:25 AM, SCHEIN David wrote: I tried different config, but nothing is working and with this config when I do a test, I receive the e-mail in my gmail box, but nothing about port down or bgp session down... If test mail works, your config works. If you don't get alert mails, either there is a problem with the actual alerter or with your checkers. Please show your checkers, and check whether the "alerted" column in the test list has a value or says Never. Tom _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

8 18

Different Alert thresholds for different temperature sensors of the same cisco device
by Supun Rathnayake 24 Sep '14

24 Sep '14

Hi , We are using the Observium subscribed edition 0.14.9.5814 and trying to set different alerts for *different temperature sensor types* *of the same cisco device*, but could not find a proper method to do that. Please find the annexed screen-shots of the alert config. that we tried, and it matches all the temperature sensors (there are about 6 types). We are looking for the way to differentiate these sensors to set different threshold levels. Kindly let us know if there is a way to do this. -- With Best Regards, Supun Rathnayake Lanka communication Services (Pvt) Ltd. 65C, Dharmapala Mawatha, Colombo 07. Sri Lanka. Tel: +94-11-2437545 http://www.lankacom.net

2 2

Excluding docker mounts
by overige＠vanderpoel.com.au 23 Sep '14

23 Sep '14

Hi, I'm running docker containers on one of my workstations and the syslog on that machine is now getting heaps of 'permission denied errors' like this: *Sep 22 16:25:05 raven snmpd[3295]: /var/lib/docker/aufs/mnt/5e126344b6b34ec70d5982e5cdf121bdf9698342a9223f6ef2d1e7d01cf3fff7: Permission denied* If I execute a non-root *df -h'* I'm also getting *permission* *denied*. I've tried to exclude the mentioned path using *$config['ignore_mount_string'][]* but that didn't do anything. I assume the other way would be to exclude it somehow using snmpd config, but got no idea how to. Cheers, Pieter

3 2

syslog-ng implementation and Cisco ASR9K
by Markus Klock 22 Sep '14

22 Sep '14

Hey guys! I´m setting up syslog-ng implementation and it works great for all my Cisco IOS-devices, however most of the devices in my network is Cisco ASR9K-routers running IOS-XR and it seems syslog from them wont go in to Observium. I did a quick look in the syslog-messages from the ASR9Ks and it seems IOS-XR actually don't use its hostname as hostname but instead use its active routeprocessors name (wtf cisco?!) making the syslog messages look something like this: RP/0/RSP0/CPU0:Nov 28 23:56:53.826 : config[65710]: %SYS-5-CONFIG_I : Configured from console by console Now there is a command that let you add a "hostname prefix" to the syslog messages, which means that I can type my own custom string as hostname for syslog, sadly it still just adds it before the RPS-id making the messages like this: router1 RP/0/RSP0/CPU0:router:Nov 28 23:56:53.826 : config[65710]: %SYS-5-CONFIG_I : Configured from console by console This of course makes it impossible for Observium to match the syslogged hostname to a hostname in the database. I took a look in the observium syslog-code and if I understand it correctly, if it fails to match the hostname it does a fallback and tries if maybe the IP-address is used as hostname and try to match it against a host in the database? In that case maybe I could change the syslog-ng template that forwards the data to Observium to instead use source IP instead of hostname? destination d_observium { program("/opt/observium/syslog.php" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); I tried change $HOST to $HOST_FROM and $SOURCEIP but no luck so far. Am I even on the right track here? Could something like this work to make my idiotic ASR9Ks show up in the Observium syslog? Thanks in advance for any advice /Markus

4 7

Alerting on temperature against device with multiple temperature sensors
by Jason Lixfeld 22 Sep '14

22 Sep '14

2 1

6800 weirdness
by Robert Williams 21 Sep '14

21 Sep '14

Hi, We've taken our first batch of 6807-XL chassis and have a couple of minor issues with the component identification and detection in Observium (r5815). I'm not sure if it's best to add a bug report or raise it on here, so I'll start here and move to JIRA if requested. In summary the hardware is reported as: "Hardware: ciscoProducts.1765" - if the same standard as the other 6xxx series is to be followed, this should be translated to "cat6807" I believe? Slightly more importantly, there are permanent 'false' alarm states for the 3.3v outputs on the PSUs which are present: There are 4 bays, numbers 1 and 2 have PSUs, 3 and 4 are empty. It correctly shows the sensor only for objects for 1 and 2, but shows them as 'false' not 'true' for being happy. The graphed integer is 2 (not 1). Console output say's it's OK, so probably (yet) another lying/inverse Cisco SNMP OID... power-converter 1: power-converter 1 : 3.3V Output: OK power-converter 2: power-converter 2 : 3.3V Output: OK Lastly, the Crossbars statistics are, well, a bit weird. Image below as it's easier to explain: I also have just noticed that all the other 6500 series chassis are showing a weird sensor (VTT this time) under the crossbar stats as well. So maybe this is a recent more general issue and is not directly related to the 6807 chassis? (This is a 6509 below) If this should all go to JIRA instead then can someone just let me know if I should split it into individual reports or not? Happy to do it, just want to follow the rules correctly :) Cheers as always! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

3 4

Netflow Integration
by Dimitar, GlobeIX 21 Sep '14

21 Sep '14

Hi guys, Let me thank you for paying attention to my previous email about "User/Client Account Login Interface" in the first place. I have another one. Does Observium offer any functionality and/or integration with Nfsen, Flowviewer or any other Netflow client/collector? Best Regards Dimitar GlobeIX E-Mail: da(a)globeix.net Tel: 1-212-671-0112; Mobile: +1-646-400-1119 Instant Messengers: ICQ: 28348789; MSN: dimitar(a)avramov.com; Skype: (Aeromit) Dimitar Avramov

3 2

Physical Memory vs Virtual Memory
by Darian Jimenez 18 Sep '14

18 Sep '14

Why is it that virtual memory is twice the physical memory for a server? Seems like the physical shows the right amount.

8 12

Re: [Observium] FW: FTOS 9.4 not working properly with Observium whereas 8.3.12.0 for Force10 switches
by Adam Armstrong 18 Sep '14

18 Sep '14

4 5

Higher values of ping statistics in Observium
by Arya, Renuka [BSD] - MED 18 Sep '14

18 Sep '14

Hi Team, I was looking into the ping statistics in All Devices ----- > Graphs --- > Ping. I understand this is the ping statistics between my Observium server and the network device. I am seeing really high values for the ping statistics. Almost ~ 600 ms for some Arista 7050-64R and for others spikes as high as ~7 secs. In actual, the RTT between the Observium server and these devices should by around 0.4-0.5 ms. Please see the attachment. Thanks ! Regards Renuka ________________________________ This email is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this email message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this email in error, please notify the sender and destroy/delete all copies of the transmittal. Thank you.

2 2

Re: [Observium] The ports on the switches doesn't seems to display correct network throughput
by Adam Armstrong 18 Sep '14

18 Sep '14

2 1

Re: [Observium] Odd real time graph behavior
by Adam Armstrong 18 Sep '14

18 Sep '14

1 0

Re: [Observium] No port names in traffic accounting
by Adam Armstrong 18 Sep '14

18 Sep '14

1 0

weird mssql polling issue
by Simon Smith 17 Sep '14

17 Sep '14

Hi All does anyone have an idea why one of our machines is take 182s to do a poll? for some reason its doing a poll for mssql, yet when i look in the config modules its disabled? I’ve attached screenshots showing my issue is the a way i can debug whats going on and why its doing this? i did a manual ./discovery.php -h 43 and that doesn’t seem to show anything about mssql anything else maybe I’m missing? regards Simon

1 0

Alerts and e-mails
by Heironimus, Brian 17 Sep '14

17 Sep '14

Hello I have installed the software about 4 months ago. I have not been able to get the alerts to work at all. I do not have any of the alert pages in the drop down menu. In fact the only alert page that exists is http://192.168.1.31/add_alert_check. http://192.168.1.31/alerts, http://192.168.1.31/alert_checks and http://192.168.1.31/alert_Log just take me back to the homepage. I also do not see any of the alert HTML files under /opt/observium/html/pages except for Add_alert_check. I also have not been able to set it up to e-mail. I just update to 0.14.4.5229 this morning. I was on the May or June release. Thanks for the help, Brian Heironimus

4 4

Re: [Observium] confirm cecaf010d71bb02e45468eb5660a71210fd4f6ad
by Dimitar, GlobeIX 17 Sep '14

17 Sep '14

Hi guys, I just subscribed, I'm reviewing the Demo and wanted to ask: - Does Observium has user/client account login interface, as I was not able to find one? - Does the sub-section "Peering" in "Ports" visualize data collected on a Layer 2 peering switch for example? Best Regards Dimitar On Sep 17, 2014, at 1:46 PM, observium-request(a)observium.org wrote: > Mailing list subscription confirmation notice for mailing list > observium > > We have received a request from 192.168.122.1 for subscription of your > email address, "da(a)globeix.net", to the observium(a)observium.org > mailing list. To confirm that you want to be added to this mailing > list, simply reply to this message, keeping the Subject: header > intact. Or visit this web page: > > http://postman.memetic.org/cgi-bin/mailman/confirm/observium/cecaf010d71bb0… > > > Or include the following line -- and only the following line -- in a > message to observium-request(a)observium.org: > > confirm cecaf010d71bb02e45468eb5660a71210fd4f6ad > > Note that simply sending a `reply' to this message should work from > most mail readers, since that usually leaves the Subject: line in the > right form (additional "Re:" text in the Subject: is okay). > > If you do not wish to be subscribed to this list, please simply > disregard this message. If you think you are being maliciously > subscribed to the list, or have any other questions, send them to > observium-owner(a)observium.org. Dimitar GlobeIX E-Mail: da(a)globeix.net Tel: 1-212-671-0112; Mobile: +1-646-400-1119 Instant Messengers: ICQ: 28348789; MSN: dimitar(a)avramov.com; Skype: (Aeromit) Dimitar Avramov

1 0