- observium - lists.observium.org

Re: [Observium] Syslog msg empty temporary fix
by Mike Stupalov 30 Aug '14

30 Aug '14

1. write questions to list pls, I'm not a service support 2. why do you have a line break in $template, all text betwen $template and \n" this is one line (use copy-paste) 3. about '& stop' vs '& ~', tilde - legacy but still working variant, and therefore suitable for the old and new rsyslog versions and in irc you sayd that syslog messages displayed if in cisco device set logging without timezone, this is not true? On Sat, Aug 30, 2014 at 2:15 PM, Wouter Prins <wp(a)null0.nl> wrote: > It still doesn't work correctly here. > Any idea's? :) > > I've pasted this into /etc/rsyslog.conf: > > -- > $template > observium,"%fromhost%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year%-%$month%-%$day% > %timereported:8:25%||%msg%||% > programname%\n" > $ModLoad omprog > $ActionOMProgBinary /opt/observium/syslog.php > > :inputname, isequal, "imudp" :omprog:;observium > > & stop > #--------------------------------------------------------- > -- > > Any idea why i still dont see any cisco syslog messages? When i restart > rsyslogd its not complaining about syntax etc. > I do see unix syslog from servers. > > > On 24 August 2014 12:37, Mike Stupalov <mike(a)observium.org> wrote: > >> Hi, >> >> yes, everything works >> >> >> On Sun, Aug 24, 2014 at 11:44 AM, Wouter Prins <wp(a)null0.nl> wrote: >> >>> Hi Mike, >>> >>> Is this config working for you in 14.04.1? >>> >>> >>> On 20 August 2014 07:14, Mike Stupalov <mike(a)observium.org> wrote: >>> >>>> >>>> .. or just use Rsyslog because it is in base Ubuntu system: >>>> http://observium.org/wiki/Rsyslog_Syslog_Server >>>> >>>> >>>> On Wed, Aug 20, 2014 at 1:18 AM, Robert Williams < >>>> Robert(a)custodiandc.com> wrote: >>>> >>>>> Hi, >>>>> >>>>> Further to Pav's comments earlier, I’ve found that setting the >>>>> “no-parse” flag in syslog-ng stops it from messing with the string and >>>>> restores some reasonable sanity to the messages which get passed to >>>>> Observium. Clearly something has changed within syslog-ng from Ubuntu >>>>> 12->14 and this new issue is nothing to do with the >>>>> Observium-importing-the-message element. >>>>> >>>>> For anyone suffering the same fate, the actual setting syntax to be >>>>> used within the Observium definition for syslog-ng is: >>>>> >>>>> source s_net { >>>>> udp(flags(no-parse)); >>>>> }; >>>>> >>>>> This restores 100% normal message structure for /most/ of the devices >>>>> I’ve just tested with, including all the IOS 15.x ones which had all >>>>> started showing simply "%" as the message content. >>>>> >>>>> The ones which are still a little bit broken are the IOS-XR based >>>>> units as they seem to pass a load of process name, event log number, >>>>> process number, favourite colour and other random crap in the “message” >>>>> element. However, they were all a bit broken before all this anyway to be >>>>> fair. >>>>> >>>>> I can see that within the /includes/syslog.php there is a rather >>>>> extensive section of preg_match/replace for a number of $os types. So I >>>>> guess the best way forwards to sanitise the extra IOS-XR crap is to build >>>>> it in there and submit a patch. Although I have a feeling that IOS and >>>>> IOS-XR count as the same $OS type? So we won't necessarily be able to >>>>> filter the manipulation using that to match them. >>>>> >>>>> Anyway, if we make any progress with it we’ll let you know! >>>>> >>>>> Cheers guys, >>>>> >>>>> >>>>> >>>>> Robert Williams >>>>> Custodian Data Centre >>>>> Email: Robert(a)CustodianDC.com >>>>> http://www.CustodianDC.com >>>>> >>>>> _______________________________________________ >>>>> observium mailing list >>>>> observium(a)observium.org >>>>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>>> >>>> >>>> >>>> >>>> -- >>>> Mike Stupalov >>>> http://observium.org/ >>>> _______________________________________________ >>>> observium mailing list >>>> observium(a)observium.org >>>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>> >>>> >>> >>> >>> -- >>> Wouter Prins >>> wp(a)null0.nl >>> >>> >> >> >> -- >> Mike Stupalov >> http://observium.org/ >> > > > > -- > Wouter Prins > wp(a)null0.nl > > -- Mike Stupalov http://observium.org/

2 1

RSS
by Johnson, Edward A. 30 Aug '14

30 Aug '14

I’m trying to get RSS working. php-mcrypt is installed and under “My Settings” it says my RSS/Atom key was created. I can’t find any documentation anywhere that explains anything further.

2 1

Re: [Observium] Avtech Room Alert 4E support?
by Scott Benninger 29 Aug '14

29 Aug '14

I was able to svn add the new file I copied and modified as well as make the diff file with the changes I made to the other files. How would I go about submitting my changes/adds to you to verify and commit? Or does the svn add accomplish this? I am not well versed in the use of svn. Thanks, Scott On Thu, Aug 28, 2014 at 1:53 PM, Adam Armstrong <adama(a)memetic.org> wrote: > Only if you submit them to us and we commit them to the repository. > > "svn add" any new files to SVN and then do "svn diff" to get SVN to > generate a file containing your changes. > > adam. > > > On 2014-08-28 17:52, Scott Benninger wrote: > >> Thanks! I managed to get it working. Not perfect but returns the 2 >> temp sensors I need. There is no internal humidity sensor on the 4E so >> may remove the humidity code as well. >> >> For reference I modified the definitions/os.inc.php roomalert os to >> use the 4E mib. I then coped the 24E sensor .php and modified it to >> use the 4E mibs and had to change the OID from 5 to 6 (the different >> product code) otherwise the mibs are almost the same up until the >> extra sensors that are available in the 24E. >> >> I guess my final question is will all the changes I made stick through >> SVN updates? >> >> Thanks, >> >> Scott >> >> AVTech uses a different MIB for each product, unfortunately. So it needs >> some coding to be done... >> >> Tom >> >> On 08/28/2014 03:41 PM, Adam Armstrong wrote: >> Hi Scott, >> >> You need to write code to discover the objects in the new MIB. >> >> You can look at the old ones as an example, you'll find them in >> includes/discovery/sensors/ >> >> adam. >> >> On 2014-08-28 14:33, Scott Benninger wrote: >> I have been trying to get our Room Alert 4E working to record >> temperature and alert if needed. On the latest svn build(5770). I see >> on the website that the 24E is the only one supported currently since >> they have different MIBS. (FYI they no longer sell the 24E in NA). >> >> I have been able to get it to discover as and AVtech device but I had >> to modify the roomalert discovery and poller php files to add a space >> to RoomAlert as the sysDescr on the 4E is "Room Alert 4E v3.1.1". >> >> I see the 4E mibs are there as well but the temp is not getting >> polled properly. >> >> Is it possible for me to make modifications to get the temp polling >> properly? If so where should I be looking to get the 4E MIBS working >> properly? I am not sure where the mappings are done etc. Is this >> difficult to do? >> >> Otherwise how would I go about getting the working properly? >> >> Thanks, >> >> _ Scott_ >> >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >> > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >

2 1

Avtech Room Alert 4E support?
by Scott Benninger 28 Aug '14

28 Aug '14

Thanks! I managed to get it working. Not perfect but returns the 2 temp sensors I need. There is no internal humidity sensor on the 4E so may remove the humidity code as well. For reference I modified the definitions/os.inc.php roomalert os to use the 4E mib. I then coped the 24E sensor .php and modified it to use the 4E mibs and had to change the OID from 5 to 6 (the different product code) otherwise the mibs are almost the same up until the extra sensors that are available in the 24E. I guess my final question is will all the changes I made stick through SVN updates? Thanks, Scott > AVTech uses a different MIB for each product, unfortunately. So it needs > some coding to be done... > > Tom > > On 08/28/2014 03:41 PM, Adam Armstrong wrote: >>* Hi Scott, *>>>>* You need to write code to discover the objects in the new MIB. *>>>>* You can look at the old ones as an example, you'll find them in *>> *includes/discovery/sensors/ *>>>>* adam. *>>>>* On 2014-08-28 14:33, Scott Benninger wrote: *>>>* I have been trying to get our Room Alert 4E working to record *>>>* temperature and alert if needed. On the latest svn build(5770). I see *>>>* on the website that the 24E is the only one supported currently since *>>>* they have different MIBS. (FYI they no longer sell the 24E in NA). *>>>>>>* I have been able to get it to discover as and AVtech device but I had *>>>* to modify the roomalert discovery and poller php files to add a space *>>>* to RoomAlert as the sysDescr on the 4E is "Room Alert 4E v3.1.1". *>>>>>>* I see the 4E mibs are there as well but the temp is not getting *>>>* polled properly. *>>>>>>* Is it possible for me to make modifications to get the temp polling *>>>* properly? If so where should I be looking to get the 4E MIBS working *>>>* properly? I am not sure where the mappings are done etc. Is this *>>>* difficult to do? *>>>>>>* Otherwise how would I go about getting the working properly? *>>>>>>* Thanks, *>>>>>>* Scott*

2 1

Avtech Room Alert 4E support?
by Scott Benninger 28 Aug '14

28 Aug '14

I have been trying to get our Room Alert 4E working to record temperature and alert if needed. On the latest svn build(5770). I see on the website that the 24E is the only one supported currently since they have different MIBS. (FYI they no longer sell the 24E in NA). I have been able to get it to discover as and AVtech device but I had to modify the roomalert discovery and poller php files to add a space to RoomAlert as the sysDescr on the 4E is "Room Alert 4E v3.1.1". I see the 4E mibs are there as well but the temp is not getting polled properly. Is it possible for me to make modifications to get the temp polling properly? If so where should I be looking to get the 4E MIBS working properly? I am not sure where the mappings are done etc. Is this difficult to do? Otherwise how would I go about getting the working properly? Thanks, Scott

3 2

remove old event log data
by Simon Smith 28 Aug '14

28 Aug '14

Hi All, hoping again someone can assist me with my problems or questions… i fixed the WMI problem i was having a few weeks ago, however it has left loads and loads of Device rebooted event logs in my database is the an easy way of deleting this data as really i only wanted the log to show once? not really 2,000 times…. I’ve attached a screenshot of showing the data from the mysql i was simply gunna do 'delete from event log where reference = 2447807' but im not 100% sure incase i screw anything up in the database as its a running live system i use regards Simon

2 1

Re: [Observium] Syslog msg empty temporary fix
by Robert Williams 27 Aug '14

27 Aug '14

Hi, Further to Pav's comments earlier, I’ve found that setting the “no-parse” flag in syslog-ng stops it from messing with the string and restores some reasonable sanity to the messages which get passed to Observium. Clearly something has changed within syslog-ng from Ubuntu 12->14 and this new issue is nothing to do with the Observium-importing-the-message element. For anyone suffering the same fate, the actual setting syntax to be used within the Observium definition for syslog-ng is: source s_net { udp(flags(no-parse)); }; This restores 100% normal message structure for /most/ of the devices I’ve just tested with, including all the IOS 15.x ones which had all started showing simply "%" as the message content. The ones which are still a little bit broken are the IOS-XR based units as they seem to pass a load of process name, event log number, process number, favourite colour and other random crap in the “message” element. However, they were all a bit broken before all this anyway to be fair. I can see that within the /includes/syslog.php there is a rather extensive section of preg_match/replace for a number of $os types. So I guess the best way forwards to sanitise the extra IOS-XR crap is to build it in there and submit a patch. Although I have a feeling that IOS and IOS-XR count as the same $OS type? So we won't necessarily be able to filter the manipulation using that to match them. Anyway, if we make any progress with it we’ll let you know! Cheers guys, Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

4 5

Graph Netstats
by Darian Jimenez 27 Aug '14

27 Aug '14

Hello, Anyone know where I could get an understanding of how to interpret the graphs for network devices? Is there any documentation to help explain what to look for in devices for packet loss or problems with service? I don't see a way to tell packet drops like you would see on a device normally.

3 3

Re: [Observium] Weird database issue?
by Nick Pais 27 Aug '14

27 Aug '14

Hogan, I'm talking about the current throughput, screenshots attached. Please excuse my "fantastic" GIMPing skills :D Thanks! > Message: 2 > Date: Fri, 8 Aug 2014 17:40:03 +0000 > From: Hogan Whittall <whittalh(a)yahoo-inc.com> > To: Observium Network Observation System <observium(a)observium.org> > Subject: Re: [Observium] Weird database issue? > Message-ID: <6CDB9AE7-7909-401B-80E3-D404CDA371AC(a)yahoo-inc.com> > Content-Type: text/plain; charset="windows-1252" > > If you?re referring to the link speed (100Mb, 1Gb, etc) then that has historically been a problem with permissions when snmpd tries to access ethtool info. You basically have 3 options: > > - Run snmpd as ?root? (Not recommended) > - Enable ETHTOOL_GSET in the kernel > - Add the link speed of each NIC to snmpd.conf (interface ethX 6 <speed in bits/s>) > > I went with the third option and wrote a script to do this for me. This info is kept in the ?ports? table. > > Or are you talking about current throughput and not port speed? > > -Hogan

4 11

fixing graphing of FortiGate memory (used to work, now broken)
by Nathan Phelan 26 Aug '14

26 Aug '14

Hi Guys, Short version: Fortinet memory stops showing in Observium after updating due to Fortinet MIBS not being where Observium expects them. Hack Solution: mv /opt/observium/mibs/FORTINET-* /opt/observium/mibs/fortinet/ ./discovery.php -h all Long version: We have been running a very old version for a long time ( 0.14.1.4945 ) and it's been ticking along nicely but I've finally found some time to do a test update to the latest svn and ran into an issue with Fortigate memory. I ran a discovery with debug; attached as "memory debug.txt". If I run one of those commands manually I get the following: root@clone:/opt/observium# /usr/bin/snmpget -v2c -c 'test -snmp' -OvQ -m FORTINET-FORTIGATE-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/fortinet 'udp':'testdev.test.local':'161' fgSysMemUsage.0 MIB search path: /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/fortinet Cannot find module (FORTINET-FORTIGATE-MIB): At line 0 in (none) fgSysMemUsage.0: Unknown Object Identifier (Sub-id not found: (top) -> fgSysMemUsage) The FORTINET-FORTIGATE-MIB files don't appear to have changed but Observium appears to be looking for them under "/opt/observium/mibs/fortinet/" when they are actually just under "/opt/observium/mibs/" After doing this: root@clone:/opt/observium# cd mibs root@clone:/opt/observium/mibs# mkdir fortinet root@clone:/opt/observium/mibs# mv FORTINET-* ./fortinet/ and then running discovery again memory stats came back. Has anyone else had this issue? If so maybe the MIBS need to be relocated in SVN? Cheers, Nathan

2 1

Quote for feature
by Benoit Lambert 25 Aug '14

25 Aug '14

Where can I get a quote for a new feature? The Professional Services (http://www.observium.org/services/) page doesn't contain any information on who to contact. Thanks, Benoit

6 8

Pagination on edit settings?
by Michael Loftis 25 Aug '14

25 Aug '14

Is there *any* way to get pagination added to the edit setting pages? F/ex the "Sensors" page is unusable on a majority of my devices try waiting for load/render when you've got something like a fully loaded Juniper EX9214 so you can disable a sensor alert on one port ... ~300 ports - it's just pure pain assuming it finishes at all. And then you have to set PHP's limits so high to get the submit/save to work. Another issue is I kind of need an ability to occasionally do a "reset all" on the limits page. Individually checking off hundreds of sensors is a completely unnecessary waste of time. I realise I could go muck in the database for both of these in my particular but thats just not always an option and this just seems like something it should be doing when it hits a couple hundred records or some configurable limit. -- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler

2 1

Re: [Observium] Moving logs and rrds to another partition?
by Benoit Lambert 25 Aug '14

25 Aug '14

If anyone is interested, this is how I did it without shutting down the server. And it worked. #Add 2 30GB disk (sdb1=DB | sdc1=rrd) #Rescan to find HDD - without shutdown echo "- - -" > /sys/class/scsi_host/host2/scan #check if it got added fdisk -l ls -la /dev/sd* #Stop daemons service crond stop service snmpd stop service syslog-ng stop service httpd stop service auditd stop #Stop sql last service mysqld stop #Configure DB HDD fdisk /dev/sdb n p 1 <cr> <cr> w #Configure rrd HDD fdisk /dev/sdc n p 1 <cr> <cr> w #Format them in ext4 mkfs.ext4 /dev/sdb1 mkfs.ext4 /dev/sdc1 #Rename DB folder cd /var/lib/ mv mysql mysql_tmp #Recreate mysql folder mkdir mysql #Mount the DB hard drive mount -t ext4 /dev/sdb1 /var/lib/mysql #Copy files over and preserve owners/perms cp -rp mysql_tmp/* mysql/ #change owner/perms of mysql folder chown mysql:mysql mysql #Rename rrd folder cd /opt/observium mv rrd rrd_tmp #Recreate rrd folder mkdir rrd #Mount the rrd hard drive mount -t ext4 /dev/sdc1 /opt/observium/rrd #Copy files over and preserve owners/perms cp -rp rrd_tmp/* rrd/ #change owner/perms of mysql folder chown apache:apache rrd #mount at startup - edit /etc/fstab /dev/sdb1 /var/lib/mysql ext4 defaults 0 0 /dev/sdc1 /opt/observium/rrd ext4 defaults 0 0 #Start daemons service mysqld start service httpd start service syslog-ng start service snmpd start service crond start service auditd start

2 1

Re: [Observium] help with observium
by Benoit Lambert 25 Aug '14

25 Aug '14

Add this to your config.php #PING Settings - Retries/Timeouts $config['ping']['retries'] = 10; // How many times to retry ping (1 - 10) $config['ping']['timeout'] = 1000; // Timeout in milliseconds (50 - 2000)

3 2

help with observium
by Magnus Svensson 25 Aug '14

25 Aug '14

Hi! I got a problem with my new install. i get messege: 2014-08-25 11:00:01 "host" System Device status changed to Up 2014-08-25 10:55:07 "host" System Device status changed to Down (ping) its always down 5min, and if i ping the host its up. its just observium that think its down. ive google it and tried ping settings in config and i dont get it to work. someone know whats wrong? //magnus

3 3

Status Proxmox-VE-Monitoring
by Cyrill Matenaers 23 Aug '14

23 Aug '14

Hi all, I just read something about Proxmox-Monitoring here http://jira.observium.org/browse/OBSERVIUM-471. What is the actual status of this development? Is there any documetation on how to use it? Thanks for your help! Kind regards, Cyrill

4 6

Re: [Observium] alerting
by Jake Hansen 22 Aug '14

22 Aug '14

Can anyone help with an issue we are having regarding alerting. Every since updating a few weeks ago, we no longer get email alerts when outages occur. I have verified that the email on the server it self is working, we simply get no events generated when things go down. Did something change in this regard? How can I restore email alerts? -- Jake Hansen Sr. Network Administrator ZTelco / Zray Technologies, Inc. 858-431-4411 Direct 858-565-2155 Office

2 1

Apache access config for Ubuntu 14.04
by Al Nash 22 Aug '14

22 Aug '14

Hello Observium Just curious, your documentation here http://www.observium.org/wiki/Debian_Ubuntu_Installation#Problems mentions modifying the Apache access configuration for 13.10 and 14.04. Are there any helpful articles that can assist with making the necessary modifications? Thank You -- <http://dattobackup.com/email-signature> *Al Nash*DEVT Engineer Datto, Inc. 877-455-6015www.dattobackup.com

1 0

Odd real time graph behavior
by Derek 22 Aug '14

22 Aug '14

I'm getting some strange looking graphs on some ports on my routers, where the graph is basically just a bunch of spikes. Set at 1 second intervals, it will register traffic for one tick, then nothing for anywhere from 4-10 ticks, then register traffic again, and so on. This is happening on Cisco 2811's, 2911's, and a 7206VXR, and it happens on the FastEthernet, GigEthernet, and SVI ports on them. If I set the interval to 5 seconds or higher, it looks normal again. Now, these same routers with this problem have no issue doing a 1 second interval on their Serial ports or sub-interfaces. We have several 2960 switches that seem to work just fine. I've attached an example graph to show you what I see. I happen to know that this port had at least a consistent 1MB connection throughout the time period of the graph. Thanks, Derek

3 4

Simple question about application monitoring
by Christopher K. Brown 21 Aug '14

21 Aug '14

Looking at Observium for the first time and wanted confirmation on this: From looking around at an install and the scripts in the scripts/agent-local directory, I believe these data-gathering scripts are executed locally on each host that is being monitored. Is that correct? Thanks!

2 1

Re: [Observium] Moving logs and rrds to another partition?
by Benoit Lambert 21 Aug '14

21 Aug '14

Perfect, thanks! I won't forget to chown/chmod :P Benoit

1 0

Re: [Observium] Moving logs and rrds to another partition?
by Benoit Lambert 21 Aug '14

21 Aug '14

Can I move entire DB to another disk? Like this? : 1. Stop the daemons 2. Rename the DB folder "mv /var/lib/mysql /var/lib/mysql-tmp" 3. Recreate the folder "mkdir /var/lib/mysql" 4. Mount the new disk to the new folder "mount -t ext4 /dev/sdb1 /var/lib/mysql" (put in fstab after) 5. Copy the files from the old folder to the new folder (cp mysql-tmp/* mysql/) 6. Restart the daemons. And voila??? Thanks, Benoit

3 2

Re: [Observium] Moving logs and rrds to another partition?
by Benoit Lambert 21 Aug '14

21 Aug '14

Would this work? http://dev.mysql.com/doc/refman/5.5/en/symbolic-links.html Thanks, Benoit

2 1

Cannot Ping
by Greg Lipschitz 21 Aug '14

21 Aug '14

Hi All, Seeing an issue where the interface is reporting it cannot ping the host but you can ping it fine from the console of the server. Anyone else seen this issue? Adding host xxxxxxxxx community mycomunity port 161 Could not ping xxxxxxxxxxx. Greg Lipschitz Director Summit IT Management<http://www.thesummitgroup.com.au> | Summit Internet<http://www.summitinternet.com.au> | Summit Creative<http://www.summitcreative.com.au> - ‘reach your peak’ Divisions of The Summit Group (Australia) Pty Ltd Phone (Australia): 1300 049 749 Phone (US & Canada): (321) 216 3844 E-mail: Greg(a)thesummitgroup.com.au<mailto:Greg@thesummitgroup.com.au> Internet: http://www.thesummitgroup.com.au/<http://www.thesummitgroup.com.au> Address: Level 1, 39 Railway Road, Blackburn VIC 3130 Postal: P.O. Box 3225, Doncaster East VIC 3109 Follow us on Facebook<http://www.facebook.com/thesummitgroup/> | LinkedIn<http://www.linkedin.com/company/1942329> | Twitter<http://twitter.com/summitgroupau/> -- ExchangeDefender Message Security: Click below to verify authenticity https://admin.exchangedefender.com/verify.php?id=s7LBpcHQ003797&from=greg@t…

2 3

Traffic graphs have red line on it
by Marco Marques 21 Aug '14

21 Aug '14

Hi Guys, When looking at the traffic graphs for the ports on a devices, it has these red lines on the graph. What do they represent? See attached. Marco Marques

4 4