- observium - lists.observium.org

monitoring traffic in a redundant internet access
by Luis Olavarrieta 10 Jun '21

10 Jun '21

Hey team, question, is there a way to monitor in a mikrotik with two internet access if both are active? The main link will give us remote snmp access to the equipment but we need to know if there is a way we can verify that the 2nd link that is connected to a DSL modem is up and running. Please advice,

5 5

URL /graph.php
by Jérôme Marteaux 08 Jun '21

08 Jun '21

Hi, I would like to use /graph.php to get graph (port graphs). I will use authenticated query with header /Authorization: Basic <digest>/ But this request doesn't work as authenticated query is not allowed for /graph.php url. I believe /graph.php is not an API query scheme, but it should? be possible to include /graph.php as one. Does another query, header, parameters exists to fetch a graph without a session (API request) ? What do you think of this patch in order to allow authenticated query to /graph.php: Original file is the one of revision 11382: --- html/includes/authenticate.inc.php.orig 2021-06-08 15:35:43.633475678 +0200 +++ html/includes/authenticate.inc.php.new 2021-05-28 23:53:35.354798084 +0200 @@ -403,7 +403,7 @@ } } - if ($auth_success && !OBS_API && !OBS_AJAX) + if ($auth_success && !OBS_API && !OBS_AJAX && !OBS_GRAPH) { // If just logged in go to request uri, unless we're debugging or in API, // in which case we want to see authentication module output first. -- Jérôme Marteaux

1 0

Option to Ignore Device Down due to DNS failure
by Pisano, Anthony D. 03 Jun '21

03 Jun '21

Hello, We have had a couple incidents where for one reason or another Observium has been unable to resolve DNS. This generates hundreds of emails saying the entire network is down, and again when it comes back up. Is there a way to tell Observium not to alert when a device is failed due to DNS lookup? Anthony Pisano | Network Design Engineer | IMSS anthony.pisano(a)caltech.edu<mailto:anthony.pisano@caltech.edu> | (626) 395-4255<tel:(626)%20395-4255> | Caltech | caltech.edu<http://caltech.edu/>

4 3

Update
by paulkitteringham＠axisstudiosgroup.com 02 Jun '21

02 Jun '21

Morning Gentlemen, Just wondering if you have any update on the performance/memeory issue we saw with the new update on friday ? Many thanks Paul -- *Paul Kitteringham* Senior System Administrator +44(0)7900221989 axisstudiosgroup.com Glasgow. London. Bristol.

1 0

OIDs list used by a device
by ToDevNull 01 Jun '21

01 Jun '21

Dear all, I'm dealing with my telco provider about snmp agent configuration on all Cisco devices. They want to push some restrictions with a "customer view" which will restrict the access to some OIDs. I wonder if there is a way to list all OIDs used by a device in order to ask them to allow such entire list ? Thanks in advance for your help. Rds, Tarik.

3 4

fwConnNumber from Stonesoft/Forcepoint Firewall
by Steffen Klemer 27 May '21

27 May '21

Hey devs, would it be possible to get a graph for fwConnNumber from STONESOFT-FIREWALL-MIB.mib (i.e. 1.3.6.1.4.1.1369.5.2.1.4) similiar to the Connection Number for Cisco ASA? Also the fwIfStatsTable might be nice and the Accepted, Rejected, Dropped packets :). I added it as custom oid for now; but perhaps some more people would be interested? Do you accept patches? Steffen -- Steffen Klemer Arbeitsgruppe "Netze" Tel.: +49 551 201 2170, E-Mail: steffen.klemer(a)gwdg.de ------------------------------------------------------------------------- Gesellschaft für wissenschaftliche Datenverarbeitung mbH Göttingen (GWDG) Am Faßberg 11, 37077 Göttingen, URL: https://www.gwdg.de Support: Tel.: +49 551 201-1523, URL: https://www.gwdg.de/support Sekretariat: Tel.: +49 551 201-1510, Fax: -2150, E-Mail: gwdg(a)gwdg.de Geschäftsführer: Prof. Dr. Ramin Yahyapour Aufsichtsratsvorsitzender: Prof. Dr. Norbert Lossau Sitz der Gesellschaft: Göttingen Registergericht: Göttingen, Handelsregister-Nr. B 598 Zertifiziert nach ISO 9001 -------------------------------------------------------------------------

2 1

Leave sensor data in Fahrenheit
by Timothy Stoddard 26 May '21

26 May '21

All, Is there any possible way to leave sensor data in Fahrenheit? I have temperature sensors that are getting converted into Celsius when we would like them in Fahrenheit. Thanks, -- Tim

1 0

Equipement Type automaticaly updated
by Paul Scheben 26 May '21

26 May '21

Hi, Since last rolling update (21.5.11346), all equipment manually set are automatically change after a poll. Regards, Paul

1 0

Fortigate firewalls in Active/Passive with VDOMs
by Scooby Doo 25 May '21

25 May '21

6 10

FortiGate IPsec Status/Stats
by Storer, Darren 25 May '21

25 May '21

Hello, I don't normally use FortiGate FWs for IPsec but now I need to monitor the status/stats (up/down/throughput) of a tunnel - has anyone managed this with Observium? Thanks in advance for any hints Darren

1 0

Performance tuning
by Lars Joergensen 19 May '21

19 May '21

Hi We have one Observium server looking at * 476 devices (mainly switches, some firewalls, some WAN routers) * 3666 ports * 8692 sensors The server has 6 cores (~70% idle, ~3% iowait) and 8 GB memory. We have configured 15 poller threads with max 6 allowed wrapper processes. The server is struggling to keep the polling cycle below 300 seconds (averaging 376 secs). Is this workload realistic for one server, and if so where do you suggest we tune? Or do we need to use a distributed setup? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

5 6

Nightly Backup
by Terry Stone 10 May '21

10 May '21

For what its worth I have written a small php script to provide a 7 day rolling backup of my observium server to an external server and to send a confirmation email when backup is complete: #!/usr/bin/env php <?php // Script to backup Observium data created by Terry Stone on 3rd. May 2021 include "config.php"; // Collect database credentials $sql_username = $config['db_user']; $sql_userpass = $config['db_pass']; // FTP server credentials $ftp_server = '[ftp server name]'; $ftp_username = '[ftp server username]'; $ftp_userpass = '[ftp server password]'; // Email credentials $mail_to = $config['email']['default']; $mail_header = 'From: '.$config['email']['from'] . "\r\n" . 'X-Mailer: PHP/' . phpversion(); $mail_subject = "Observium Server Backup"; $mail_message = "Observium server backups sent to ".$ftp_server." on ".date("l jS F Y").":\n\n"; // Files to backup $file[0]= "observium-rrd.tar.gz"; $file[1]= "observium-dump.sql"; $file[2]= "config.php"; // Prefix filename to be sent to FTP server with day of the week $counter=0; while ($counter < count($file)) { $backupfile[$counter]=date("N").$file[$counter]; $counter++; } // Assemble observium backup fils exec('tar zcvf backup/'.$file[0].' rrd'); exec('/usr/bin/mysqldump -u observium --user='.$sql_username.' --password='.$sql_userpass.' --databases observium --add-drop-table --extended-insert > backup/'.$file[1]); exec('cp config.php backup/'.$file[2]); // Connect and login to FTP server $ftp_conn = ftp_connect($ftp_server) or die("Could not connect to $ftp_server"); $login = ftp_login($ftp_conn, $ftp_username, $ftp_userpass); // Change to passive mode ftp_pasv($ftp_conn,true); // Upload files to FTP server $counter=0; while ($counter < count($file)) { if (ftp_put($ftp_conn, $backupfile[$counter], "backup/".$file[$counter],FTP_BINARY)) { exec('cp backup/'.$file[$counter].' backup/'.$backupfile[$counter]); $status = date("H:i:s")." Successfully backed up ".$file[$counter]." to ".$backupfile[$counter]."\n"; } else { $status = date("H:i:s")." Error backing up ".$file[$counter]." to ".$backupfile[$counter]."\n"; } $mail_message = $mail_message.$status; $counter++; } // Close FTP connection ftp_close($ftp_conn); // Add final line to message body $mail_message=$mail_message."\nPlease do not reply to this message, mail account is send only.\n"; // Send Completion message mail($mail_to,$mail_subject,$mail_message,$mail_header); ?> It is set to run nightly with this Cron Job: # Run nightly backup and send files to offshore FTP server 0 02 * * * root cd /opt/observium && php observiumbackup.php The backups are also held on the Observium Server in /opt/observium/backups. You need to make sure the backup files have the correct permissions. Hope this will help someone. An observium server that has run for years holds a very large amount of valuable historical data and servers can fail so its good to have that data in a safe place! Terry Stone.

3 2

API, get syslog alarms list by device id
by Vasiliy Moroz 10 May '21

10 May '21

Dear Observium community, I usе Observium and the more I use it more I love it :) I use the Observium syslog interface for pushing to Observium syslog alerts. For now, I am developing customer personal web service where they could see their telecom services on the map with nodes states like ok, critical. There are on the map presented only part of the telco network their services go through. By API I get nodes' location and state so can show it on the map with nodes connections from my customer database. Except for alarms Observium gets by syslog integration. Is there any way to get syslog alerts by API and device id? I could analyze syslog alerts and set proper node status by syslog alerts if they are accessible. As I know it is impossible.

2 2

LLDP collection from Arista switches
by Lars Joergensen 07 May '21

07 May '21

Hi guys We're looking at the Port -> Map view of our Aristas to determine what's connected to them. But this map seems to lack information compared to what we can see directly on the switch. Any information I can provide that would help in troubleshooting this? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

3 4

Observium device discovery
by Christopher N Callison 05 May '21

05 May '21

I have a Cisco 9130axi AP that is running in embedded controller mode. I am not able to monitor traffic or user statistics on the WLANs like I did with my WLC2504. I do not see any wireless related MIBS attached to the device. Is there a way to force discovery for certain features or MIBS? Or do I have to add my own custom OID? Chris

3 3

Google Secure LDAP - Working with a hack
by Pieter De Wit 05 May '21

05 May '21

Hi Guys, I have Google Secure LDAP working with Observium, but it requires a hack and hopefully the devs can implement this into the code base (after fixing my even more of my hacky hacks :) ) In config.php: $config['auth_ldap_server']="ldap://127.0.0.1:1636”; // We using the stunnel method $config['auth_ldap_port'] = 1636; // Not needed - at least, not that I could find $config['auth_ldap_starttls']=false; // Implemented with stunnel $config['auth_ldap_suffix'] = ",ou=Secure_LDAP,ou=Users,dc=example,dc=com”; // Fix this for your domain unset ($config['auth_ldap_groups']); $config['auth_ldap_groups']['cn=observium']['level'] = 10; // Google does something funky with “groups" In html/includes/authentication/ldap.inc.php: After line 932: else { $filter="(&(".$dn.")".ldap_filter_create ($attribute, $value).")"; $ret=ldap_search ($ds,”dc=example,dc=com",$filter); // TODO : We need to figure out if ($ret !==FALSE) { $compare=TRUE; } } In a nutshell, ldap_compare doesn’t work for Google Secure LDAP - pretty much like https://jira.observium.org/browse/OBS-3611 <https://jira.observium.org/browse/OBS-3611> but then, if the ldap_read fails, we fallback to just doing a search for the “group” and where memberUid is the username provided. It might be worthwhile to look into setting a LDAP type variable and reacting to that. Hopefully this makes sense :) Cheers, Pieter

1 1

Google Secure LDAP
by Pieter De Wit 04 May '21

04 May '21

Hi Everyone, Has anyone got Observium to authenticate against Google Secure LDAP *and* return a usable user level ? My authentication passes, but I always end up with a user level of 0. I am using the stunnel method to try and simplify things. Thanks, Pieter

2 2

How do you enable debugging ?
by Pieter De Wit 04 May '21

04 May '21

I’m failing hard at finding this one….specifically, I need to debug LDAP membership for authentication :) Thanks :)

2 1

Observium Backups
by Terry Stone 04 May '21

04 May '21

When backing up rrd with tar zcvf observium-rrd.tar.gz rrd I get the following message: tar: Removing leading `/' from member names Is this OK or should I use the --absolute-names option? Also I am getting some messages saying file changed as we read it. This is understandable but do i need to do anything while running the backup to stop this from happening? Thanks in advance.

4 5

CBQOS Class Names only show "/"
by Evan Alexandre 03 May '21

03 May '21

Hello, I am a new user testing out Observium as a means of monitoring Cisco Class-Based Quality of Service (CBQoS). I have successfully added devices running Cisco IOS-XR 6.6.3 to the system for monitoring. However, the CBQoS tab of my device's ports is currently not showing any name for the different classes of policy maps applied to the ports. Instead, where the name should be, there is only "/ (output)". See attachment for screenshot of this issue. I believe this issue matches the following Jira ticket: https://jira.observium.org/browse/OBS-3130?page=com.atlassian.jira.plugin.s… Is there a known resolution or workaround this issue? System Details: Observium Version: Observium CE 20.9 OS: CentOS Linux release 7.9.2009 (Core) Thanks, Evan

2 1

More probes please (part 2 :) )
by Pieter De Wit 03 May '21

03 May '21

Hey Guys, Can we please add check_procs to the probe list ? Thanks :)

2 4

Paging on bigger pages
by Pieter De Wit 02 May '21

02 May '21

Hi All, I noted that you can enable paging on the devices pages, but is there a way to enable it on other pages that I have missed ? We have massive load balancer pages that are now causing browsers to crash (had to give the server 32gig of ram to render said pages :) ) Or even a search page would do - anything to make the page smaller :D Thanks !

1 0

Adding "more" probes ?
by Pieter De Wit 30 Apr '21

30 Apr '21

Hi, How can I use a probe that is not listed in “Probes” - like check_dns ? Thanks, Pieter

2 2

Wish list
by Terry Stone 29 Apr '21

29 Apr '21

Rather than re-invent the wheel writing a script does anyone have a script that can be run as a con job to backup rrd files, observium database and config.php to an external server. Thanks.

3 2

Removal Request
by David Ross 29 Apr '21

29 Apr '21

Hello! Please remove my email address from your email list; I am no longer on the team that uses Observium. Thank you! Respectfully, *David W. Ross, Sr.* Network Infrastructure Engineering Sr. Network Engineer 415.926.3483 - C david.ross(a)salesforce.com <https://smart.salesforce.com/sig/david.ross//us_mb/default/link.html>

2 1