- observium - lists.observium.org

Re: [Observium] observium Digest, Vol 48, Issue 48
by Kiru Pananthan 07 Jul '14

07 Jul '14

Dear Tom Can i follow the below step for wmi poll enable i am new to observium http://jira.observium.org/secure/attachment/11319/WMIPoller-011013-1429-4.p… -- Kind Regards, Kirupananthan Yogalingam, Assistant Manager - ICT ---------------------------------------------------------------------------------------------------------- Australian International School Malaysia (AISM) No.22 Jalan Anggerik, The Mines Resort City, 43300 Seri Kembangan, Selangor, Malaysia. *T:* +60 3 8949 5000 *F*: +60 3 8949 5100 *E*: kirup(a)aism.edu.my *W*:http://www.aism.edu.my/ *Direct Line*: +60-3-8949 5030 ---------------------------------------------------------------------------------------------------------- <https://www.facebook.com/aismalaysia> <http://www.youtube.com/user/AISMvideos> <http://www.aism.edu.my/virtualtour> On Jul 7, 2014, at 10:45 PM, "observium-request(a)observium.org" < observium-request(a)observium.org> wrote: Send observium mailing list submissions to observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org You can reach the person managing the list at observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: PowerConnect 5548 (Moore, Cameron) 2. Cisco ASA VPN tunnel monitoring (Dan Yasny) 3. Unknown processor (Kiru Pananthan) 4. Re: Unknown processor (Tom Laermans) ---------------------------------------------------------------------- Message: 1 Date: Mon, 7 Jul 2014 14:33:17 +0000 From: "Moore, Cameron" <cmoore(a)hsutx.edu> To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] PowerConnect 5548 Message-ID: <CE08F34B0A8D7F48B1EFBC22E994A71C015745E34F(a)HSUEX14MBX1.hsutx.edu> Content-Type: text/plain; charset="iso-8859-1" Try this patch: http://jira.observium.org/browse/OBSERVIUM-886 -- Cameron Moore -----Original Message----- From: observium [mailto:observium-bounces@observium.org <observium-bounces(a)observium.org>] On Behalf Of Josh Hopper Sent: Friday, July 04, 2014 1:02 PM To: Observium Network Observation System Subject: [Observium] PowerConnect 5548 I love the update you guys did in May/June. My PowerConnect 6224 switches have major improvements in what they graph. However, my PowerConnect 5548 switch has a draw error on everything but bandwidth. Is there a way to resolve this? -- Sincerely, Joshua Hopper, A+ CE Network Administrator ??????????? 420 3rd Ave NW Hickory NC 28601 Office: 828-449-1839x2160 | Cell: 828-855-7565 Protect Plus Air Holdings, LLC and Affiliates, Protect Plus, LLC and Affiliates, Imagine One Resources, LLC and Affiliates, Protect Plus Surfaces, LLC and Affiliates Confidentiality Notice: This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation. _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ------------------------------ Message: 2 Date: Mon, 7 Jul 2014 10:38:06 -0400 From: Dan Yasny <dyasny(a)gmail.com> To: observium(a)observium.org Subject: [Observium] Cisco ASA VPN tunnel monitoring Message-ID: <CALLXwb7nmKUR_EZi9BZJvLA4J8gCFp8i8gPNJ9D5MonhgEBSoA(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hi all, I m wondering if there are any plans to extend the ASA monitoring module, or if there are any hints to doing that myself and submitting the patches back Also, I couldn't find any documentation on writing support for additional devices, is there anything I've missed? Thanks, Dan

2 1

Cisco ASA VPN tunnel monitoring
by Dan Yasny 07 Jul '14

07 Jul '14

Hi all, I m wondering if there are any plans to extend the ASA monitoring module, or if there are any hints to doing that myself and submitting the patches back Also, I couldn't find any documentation on writing support for additional devices, is there anything I've missed? Thanks, Dan

1 0

Re: [Observium] observium Digest, Vol 48, Issue 46
by Kiru Pananthan 07 Jul '14

07 Jul '14

Thanks Tom Laermans noted On Mon, Jul 7, 2014 at 7:00 PM, <observium-request(a)observium.org> wrote: > Send observium mailing list submissions to > observium(a)observium.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > or, via email, send a message with subject or body 'help' to > observium-request(a)observium.org > > You can reach the person managing the list at > observium-owner(a)observium.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of observium digest..." > > > Today's Topics: > > 1. Graph Link (Kiru Pananthan) > 2. Re: Graph Link (Tom Laermans) > 3. average temperature (Simon Smith) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 7 Jul 2014 12:25:03 +0800 > From: Kiru Pananthan <kirup(a)aism.edu.my> > To: observium(a)observium.org > Subject: [Observium] Graph Link > Message-ID: > <CAEax4xXrhHoJnKH7ZaLjkuKgRQSKvOUSiy3E= > 9gZofxaHTejYg(a)mail.gmail.com> > Content-Type: text/plain; charset="us-ascii" > > Dear all > > how do we able to view on observium the up link switch connect to another > switch, like to know port connected to which switch > > -- > > Kind Regards, > > Kirupananthan Yogalingam, > Assistant Manager - ICT > > ---------------------------------------------------------------------------------------------------------- > Australian International School Malaysia (AISM) > No.22 Jalan Anggerik, > The Mines Resort City, > 43300 Seri Kembangan, > Selangor, Malaysia. > > > > > *T:* +60 3 8949 5000 *F*: +60 3 8949 5100 > *E*: kirup(a)aism.edu.my *W*: http://www.aism.edu.my/ > *Direct Line*: +60-3-8949 5030 > > ---------------------------------------------------------------------------------------------------------- > > <https://www.facebook.com/aismalaysia> > <http://www.youtube.com/user/AISMvideos> > <http://www.aism.edu.my/virtualtour> > > -- > *Confidentiality Disclaimer:* This e-mail and any attachments are > confidential and intended solely for the intended addressee and may also be > privileged or exempt from disclosure under applicable law. If you are not > the intended addressee, or have received this e-mail in error, please > notify the sender immediately, delete it from your system and do not copy, > disclose, distribute or otherwise act in reliance upon any part of this > e-mail or its attachments. Australian International School Malaysia and all > affiliates under Taylor's Education Group does not accept responsibility > for any loss arising from unauthorised access to, or interference with, any > internet communications by any third party in reliance to this email, or > from the transmission of any viruses. Please note that any views or > opinions presented in this email are solely those of the author and do not > necessarily represent those of Australian International School Malaysia > and > all affiliates under Taylor's Education Group. Replies to this e-mail may > be monitored by Australian International School Malaysia and all > affiliates under Taylor's Education Group for operational or business > reasons. >

1 0

Graph Link
by Kiru Pananthan 07 Jul '14

07 Jul '14

Dear all how do we able to view on observium the up link switch connect to another switch, like to know port connected to which switch -- Kind Regards, Kirupananthan Yogalingam, Assistant Manager - ICT ---------------------------------------------------------------------------------------------------------- Australian International School Malaysia (AISM) No.22 Jalan Anggerik, The Mines Resort City, 43300 Seri Kembangan, Selangor, Malaysia. *T:* +60 3 8949 5000 *F*: +60 3 8949 5100 *E*: kirup(a)aism.edu.my *W*: http://www.aism.edu.my/ *Direct Line*: +60-3-8949 5030 ---------------------------------------------------------------------------------------------------------- <https://www.facebook.com/aismalaysia> <http://www.youtube.com/user/AISMvideos> <http://www.aism.edu.my/virtualtour> -- *Confidentiality Disclaimer:* This e-mail and any attachments are confidential and intended solely for the intended addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the intended addressee, or have received this e-mail in error, please notify the sender immediately, delete it from your system and do not copy, disclose, distribute or otherwise act in reliance upon any part of this e-mail or its attachments. Australian International School Malaysia and all affiliates under Taylor's Education Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any internet communications by any third party in reliance to this email, or from the transmission of any viruses. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Australian International School Malaysia and all affiliates under Taylor's Education Group. Replies to this e-mail may be monitored by Australian International School Malaysia and all affiliates under Taylor's Education Group for operational or business reasons.

2 1

Network changes
by Kiru Pananthan 05 Jul '14

05 Jul '14

Dear all Recently our team member disconnect our network switch with out labeling the Network cable port no, is there any possibilities to check in observium where the connection from UP switch to disconnected switch -- Kind Regards, Kirupananthan Yogalingam, Assistant Manager - ICT ---------------------------------------------------------------------------------------------------------- Australian International School Malaysia (AISM) No.22 Jalan Anggerik, The Mines Resort City, 43300 Seri Kembangan, Selangor, Malaysia. *T:* +60 3 8949 5000 *F*: +60 3 8949 5100 *E*: kirup(a)aism.edu.my *W*: http://www.aism.edu.my/ *Direct Line*: +60-3-8949 5030 ---------------------------------------------------------------------------------------------------------- <https://www.facebook.com/aismalaysia> <http://www.youtube.com/user/AISMvideos> <http://www.aism.edu.my/virtualtour> -- *Confidentiality Disclaimer:* This e-mail and any attachments are confidential and intended solely for the intended addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the intended addressee, or have received this e-mail in error, please notify the sender immediately, delete it from your system and do not copy, disclose, distribute or otherwise act in reliance upon any part of this e-mail or its attachments. Australian International School Malaysia and all affiliates under Taylor's Education Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any internet communications by any third party in reliance to this email, or from the transmission of any viruses. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Australian International School Malaysia and all affiliates under Taylor's Education Group. Replies to this e-mail may be monitored by Australian International School Malaysia and all affiliates under Taylor's Education Group for operational or business reasons.

1 0

health/overview page is there a way to change what is presented?
by Steve Costaras 05 Jul '14

05 Jul '14

I am using observium community edition to monitor a couple systems. Noticed a couple items that seem to make some of the graphs not too useful. The health / Overview section for file systems is the first. It shows file systems with no problem, however it's graphing the file systems based on their percentage used NOT their used byte size. I don't know how others are using this, but here we grow file systems frequently which this produces graphs like the attached. Is there a way to either change what metric is graphed (bytes/ not percentage) or have a another overview graph of file systems with capacity used. This gets much more important with ZFS when you add new vdev's or expand them as like the graph will expand all filesystems on that pool which doesn't seem to be too useful and there can be hundreds. Another question on the same page is the operations/second graphs. This is displaying data twice or more when you are using device mapper you see both the sd* devices as well as the dm-* devices. This is very bad when you're talking about 100's of physical drives (seeing 200 or more depending on how you have it set up with partitions devices). Is there a way to filter out dm-* devices so only sd* ones are calculated/graphed? Steve

1 0

Interface Traffic trend
by KENNETH D MILLER II 05 Jul '14

05 Jul '14

Is there a config option or change I need to make to get the interface traffic trend option to work? I'm running the latest CE version. RRDtool 1.38 and 1.47 versions. I've only have this running a month, but thought there would be enough data to see a trend. Also, where would I load MIBs and configure OIDs for Brocade VDX gear? Thanks in advance, Ken

2 1

Re-enable host where discovery has been disabled?
by David Lagace 04 Jul '14

04 Jul '14

Hello all, I seem to be in a bit of a pickle. On one of my hosts I enabled the 'Disables polling and discovery' to not have it report while working on it but now I can't seem to find the host to reenable the polling and discovery. I can see reference to it in the 'Delete Devices' page with the caption [disabled] next to it but not anywhere else. Just wondering where or how I can re-enable this host. Thanks for your help, --Dave

2 1

Differing values
by Cardinal-Richards, Emma 04 Jul '14

04 Jul '14

Hi, On (seemingly all) our device port pages I get different values in the legends on the page of graphs vs their respective hover over pop-up graphs? In theory I thought they're showing the same timeframe/data? Regards, Emma

4 7

LDAP Authentication
by Paolo Giustiniani 04 Jul '14

04 Jul '14

Hello, I use ldap to authenticate my users. Unfortunately for the users admin if using ldap, after login there are no graphics and no administrative leave. What can I check? -- ---------------------------------------------------------------------------------------- Rispetta l'ambiente: se non ti è necessario, non stampare questa mail. ---------------------------------------------------------------------------------------- Note in ottemperanza al Decreto Legislativo 196/2003 sulla Tutela dei Dati Personali: Il presente messaggio e gli eventuali allegati sono rivolti unicamente all'attenzione del destinatario ed il relativo contenuto potrebbe avere carattere riservato e ne e' vietata la diffusione in qualunque modo eseguita. Nel caso in cui aveste ricevuto questa mail per errore, Vi invitiamo ad avvertire il mittente al più presto a mezzo posta elettronica ed a distruggere il messaggio erroneamente ricevuto.

6 19

Re: [Observium] Re-enable host where discovery has been disabled?
by Chris Ely 03 Jul '14

03 Jul '14

Go to the device page and click the little cog or gear icon in the top right corner. You can re-enable polling and discovery there. -cely On Thu, Jul 3, 2014 at 1:38 PM, David Lagace <dave(a)deelite.org> wrote: > Hello all, > > I seem to be in a bit of a pickle. On one of my hosts I enabled the > 'Disables polling and discovery' to not have it report while working on it > but now I can't seem to find the host to reenable the polling and > discovery. > > I can see reference to it in the 'Delete Devices' page with the caption > [disabled] next to it but not anywhere else. Just wondering where or how > I can re-enable this host. > > Thanks for your help, > > --Dave > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >

6 7

Inquiry
by Lala, Rajiv 02 Jul '14

02 Jul '14

Good Morning, I am interested in purchasing support that will used with the open source version of Observium for my company. How should I proceed in doing so? Thanks, Rajiv Lala Buyer Technology Procurement Corporate Finance Division Phone: 312-338-2759 Mobile: 312-208-8480 rajiv.lala(a)cmegroup.com<mailto:rajiv.lala@cmegroup.com> CME Group 20 South Wacker Drive Chicago, Illinois 60606 www.cmegroup.com<http://www.cmegroup.com/>

3 2

Custom "alias" for port
by Ibrahim Tachijian 02 Jul '14

02 Jul '14

Is there no way to set a custom alias for a given port? I want to set the name to "Peering: XXXX" so that it matches the peering type. The reason is because my ex2500 juniper is not properly sending the "name" of the port via snmp thats configured in the switch. Additionally the EX2500 switch (juniper) is shown as Generic. -- Ibrahim Tachijian Net Sat AB

1 0

Processor, Memory pool and Sensors deleted on Cisco device
by Matthias Cramer 02 Jul '14

02 Jul '14

Hi After doing a "svn update" this evening all proceccors, memory pools and sensors disapeared on a cisco 892 router which I rediscovered manualy after the update, Log: 33m 12s Sensor Sensor deleted: temperature cisco-envmon 6 33m 12s Sensor Sensor deleted: temperature cisco-envmon 5 33m 12s Sensor Sensor deleted: temperature cisco-envmon 4 33m 12s Sensor Sensor deleted: temperature cisco-envmon 3 33m 12s Sensor Sensor deleted: temperature cisco-envmon 2 33m 12s Sensor Sensor deleted: temperature cisco-envmon 1 33m 12s Mempool Memory pool removed: mib cisco-enhanced-mempool-mib, index 1.2, descr C892FSP-K9 (I/O) 33m 12s Mempool Memory pool removed: mib cisco-enhanced-mempool-mib, index 1.1, descr C892FSP-K9 (Processor) 33m 12s Processor Processor removed: type cpm index 1 descr Processor 1 Any idea what caused this? Regards Matthias -- Matthias Cramer / mc322-ripe Senior Network & Security Engineer iway AG Phone +41 43 500 1111 Badenerstrasse 569 Fax +41 44 271 3535 CH-8048 Zurich http://www.iway.ch/ GnuPG 1024D/2D208250 = DBC6 65B6 7083 1029 781E 3959 B62F DF1C 2D20 8250

3 7

Re: [Observium] Alert Checker for Netscaler
by Adam Armstrong 01 Jul '14

01 Jul '14

There are no undocumented metrics. You have to request them. :) You can't check a service inside a vserver, as the entities don't work that way. You can, however, check the status of a service independently. Adam. Martin Smith wrote:

1 0

Alert Checker for Netscaler
by Martin Smith 01 Jul '14

01 Jul '14

Hello everyone, How can I find available values to be used with the alerting system for metrics that are not documented in the wiki? http://www.observium.org/wiki/Alerting_Metrics_and_Attributes For example, a service inside a vserver's status changes to "down". Or when the bandwidth per vserver exceeds a specified value? Basically, I'm lost on how to find new metrics and attributes... :[ Thanks in advance for your time, Martin Smith | Network Analyst | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320-257-6607 | 877.797.4700 x170

1 0

Re: [Observium] Uncaught bounce notification
by Adam Armstrong 01 Jul '14

01 Jul '14

Protip guys: If you go on holiday and set a "vacation" autoresponder on an account subscribed to our mailing lists, you will be banned for life. FOR FUCKING LIFE. adam. On 2014-07-01 10:51, mailman-bounces(a)observium.org wrote: > The attached message was received as a bounce, but either the bounce > format was not recognized, or no member addresses could be extracted > from it. This mailing list has been configured to send all > unrecognized bounce messages to the list administrator(s). > > For more information see: > http://postman.memetic.org/cgi-bin/mailman/admin/observium/bounce > > > Return-Path: <vacation(a)skylink.cz> > Received: from localhost (localhost [127.0.0.1]) > by postman.memetic.org (Postfix) with ESMTP id AC3933B9B8 > for <observium-bounces(a)lists.memetic.org>; Tue, 1 Jul 2014 16:51:32 > +0100 (BST) > X-Virus-Scanned: by Amavis+SpamAssassin+ClamAV and more at > postman.memetic.org > Received: from postman.memetic.org ([127.0.0.1]) > by localhost (postman.memetic.org [127.0.0.1]) (amavisd-new, port > 10024) > with ESMTP id ooamX0QotsFU for <observium-bounces(a)lists.memetic.org>; > Tue, 1 Jul 2014 16:51:30 +0100 (BST) > Received: from mailserver.skylink.cz (email.skylink.cz [81.91.221.7]) > by postman.memetic.org (Postfix) with ESMTP id 1FF193B9C4 > for <observium-bounces(a)observium.org>; Tue, 1 Jul 2014 16:51:22 +0100 > (BST) > Received: by mailserver.skylink.cz (Postfix, from userid 8) > id 96CEB4237; Tue, 1 Jul 2014 17:50:38 +0200 (CEST) > From: dvolny(a)ezilly.cz > To: observium-bounces(a)observium.org > Content-Type: text/plain; charset=UTF-8 > Subject: =?UTF-8?B?T24gdmFjYXRpb24gbWVzc2FnZQ==?= > X-Loop: jamcp virtual vacation > Message-Id: <20140701155038.96CEB4237(a)mailserver.skylink.cz> > Date: Tue, 1 Jul 2014 17:50:38 +0200 (CEST) > > Dear sender, > > I am out of the office with limited access to my email. > For urgent operational IT issues please contact the EZilly Helpdesk at > helpdesk(a)ezilly.cz > > Kind regards, > David Volný

4 3

syslog -> cleaning the database...
by Xavier Beaudouin 30 Jun '14

30 Jun '14

Hi There, Looking after a reason why I got soooooo long time to see some firewall I saw that despite the // Syslog stuff $config['enable_syslog'] = 1; $config['syslog_age'] = "1 month"; On configuration, the old syslog informations are not deleted. I created a small php script to clean that (using crontab), do you like to have this contrib ? (It is somewhat easy, but if you don't have time to make that, then, I will be pleased to create a jira with this file). /Xavier

1 0

Odd issue with Syslog collection
by Anthony Mattke 27 Jun '14

27 Jun '14

On a recent install of observium, I’ve noticed some oddities with Syslog collection… Some devices are being collected just fine, but others are not. In the example screenshot included below, my firewall ***10, and one switch ***04 are both being collected just fine. But the switches 75***** and *****50 are not. http://i.imgur.com/nxupFzJ.png One thing I noticed was that someone had turned on “service sequence-numbers” on the ****04 switch. (The ASA has no such feature that I know of.. ) When I disabled this service, the collection stopped working on that device! Example here…http://i.imgur.com/HViWcTk.png Thoughts? Thanks!! -Tony

3 4

ios-xr etc syslog
by Rob VanHooren 26 Jun '14

26 Jun '14

to make it go away, could try getting rid of the "service log sequence numbers" (or whatever exact syntax it is) in the device's ios config if you don't need the sequence numbering for audit, that's easier than trying to hack in a new syslog-ng.conf template. luck, R.

1 0

Syslog parsing: Issue from IOS XR devices
by Senses0 26 Jun '14

26 Jun '14

Hi, I have few devices running Cisco IOS XR. I am sending syslog messages from all devices to Observium. Everything is fine except for the log messages sent by routers running IOS XR. Instead of log Program name, messages sent by XR devices contain an incrementing sequence number, which is being parsed as log Program (Incrementing sequence number being parsed as syslog program = bad. real bad). The actual program name appears much later within the message. I have gone through the sylog configuration guide for XR routers. Couldnt find anything that would alter the message format of what is being sent. I also configured "logging facility syslog" in XR devices, but that didnt resolve the issue. To better explain my situation, I have attached a screenshot. Hopefully it would help. Oh and I am subscriber :) Thanks, Senn

1 0

Windows individual performance counter
by Stefan 26 Jun '14

26 Jun '14

1 0

Re: [Observium] location
by Rob VanHooren 26 Jun '14

26 Jun '14

… DNS LOC records were invented for this? http://en.wikipedia.org/wiki/LOC_record just a thought. R. On Jun 26, 2014, at 7:00, observium-request(a)observium.org wrote: > The location parsing stuff does need looked at a bit more.

1 0

GPS data on Syslocation
by Ciro Iriarte 25 Jun '14

25 Jun '14

Hi! , out of curiosity, is there any prevision to locate devices with actual GPS data, stored in the Syslocation field for example?. Regards, Ciro -- Ciro Iriarte http://iriarte.it --

2 1

Re: [Observium] Syslog from NX-OS device
by Steffen Klemer 25 Jun '14

25 Jun '14

Am Tue, 24.06.2014 um 14:49 schrieb Ole Hansen <oha(a)netic.dk>: > Hi, > > I'm trying to get syslog (using syslog-ng) from some NX-OS devices > into Observium, but so far no luck. > > I'm using the following syslog-ng configuration > > template t_observium { > template > ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY > $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n"); template-escape(yes); }; For me it works with destination d_observium { program("/opt/observium/syslog.php" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); }; > 10.10.10.10||local7||info||info||be||2014-06-24 16:43:08||Jun 24 > 14:43:07: %SEC-6-IPACCESSLOGP: list flow denied udp > 192.168.10.10(137) -> 192.168.11.10(137), 5 packets ||147696 > 10.10.10.11||local7||notice||notice||bd||2014-06-24 16:43:16||2014 > Jun 24 16:43:16.724 CEST: %SYSMGR-5-CFGWRITE_STARTED: Configuration > copy started (PID 2143).|| I see an ip-addresses instead of a hostname in your first field here. iirc observium can only work with hostnames and especially needs the hostname in the first field to be identical to the one in the database (i.e. with or without FQDN), therefor I set use_dns(yes) and use_fqdn(no) instead of keep_hostname(yes) like it is written in the manual. It total it looks like this for me: options { chain_hostnames(off); flush_lines(0); use_dns(yes); use_fqdn(no); owner("root"); group("adm"); perm(0640); stats_freq(0); bad_hostname("^gconfd$"); }; But you can also set a hostname in nx-os and redefine the logging very fine granular. /Steffen -- Steffen Klemer E-Mail: Steffen.Klemer(a)gwdg.de Tel: +49 551 39 172361 __________________________________________________________________ GWDG Am Fassberg 11, 37077 Göttingen URL: http://www.gwdg.de E-Mail: gwdg(a)gwdg.de Tel.: +49 (0)551 201-1510 Fax: +49 (0)551 201-2150 Geschäftsführer: Prof. Dr. Ramin Yahyapour Aufsichtsratsvorsitzender: Dipl.-Kfm. Markus Hoppe Sitz der Gesellschaft: Göttingen Registergericht: Göttingen Handelsregister-Nr. B 598

2 1