- observium - lists.observium.org

monitoring 3CX
by Luis Olavarrieta 28 Jun '21

28 Jun '21

Is anyone monitoring a 3CX server in linux? I am able to monitor the OS, but not the app as running Asterisk in other boxes. If you are able to do it, please advice on how to! Thanks!

1 0

Empty alerts via telegram bot
by Aleksandr Vedernikov 28 Jun '21

28 Jun '21

Hey! After updating to release 21.6.11399 (14th June 2021), notifications via the telegram bot stopped working. Empty messages arrive. When testing sending via the command ./test_alert.php -c 1 notification come. -- Best regards, Vedernikov Alexander Chief Engineer, ORI UTsTiEO Ural State Law University ============================ <http://www.usla.ru/> www.usla.ru

1 0

Missing information in alert emails
by Haris Hajlovac | HTL 25 Jun '21

25 Jun '21

Hello, Since we've upgraded Observium to the latest version (21.6.11399 (stable)) the alert emails we receive are missing information for most of the devices. Prior to the upgrade email alerts looked like this: After the upgrade alert e-mails look like this: We can revert the virtual machine to the state prior to upgarde but we'd prefer to have it running the latest version of Observium. Does anybody ha san idea on what could be the problem here? Thanks. Kind regardss, Haris

1 0

rule creation training
by Luis Olavarrieta 18 Jun '21

18 Jun '21

Hi team, is there someone how could give me training creating rules? This (after a negotiation) will be a paid service. Regards, Luis

2 1

Observium dropping off intermittently
by Mills, Stuart 18 Jun '21

18 Jun '21

Hi, Every now and again I have an issue with Observium as it will read devices offline and show down (DNS) however when I restart Observium devices come back. I have run DCDIAG, and DNS is working ok, can anyone shed any light on this issue? -- Kind Regards *Stuart J Mills* *Systems Administrator* *Dresden International School* Annenstr. 9, 01067 Dresden Germany *Phone:* +49(0)351 44007 32 smills(a)dresden-is.de www.dresden-is.de *DIS Dresden International School gGmbH* Sitz der Gesellschaft | Company Register: Annenstr. 9, 01067 Dresden Registergericht | Court of registration: Amtsgericht Dresden, HRB 35540 Geschäftsführung | Executive Board: Steven Calland-Scoble, Andrea Harnisch -- *DIS Dresden International School gGmbH* Sitz der Gesellschaft | Company Register: Annenstr. 9, 01067 Dresden Registergericht | Court of registration: Amtsgericht Dresden, HRB 35540 Geschäftsführung | Executive Board: Steven Calland-Scoble, Andrea Harnisch* *

2 1

Nested or pass through server configuration
by paulkitteringham＠axisstudiosgroup.com 16 Jun '21

16 Jun '21

Hi, We have two Observium servers at different locations, can we enable one as a master or pass through, so we can see the second location via the main/primary location server ? Many thanks -- *Paul Kitteringham* Senior System Administrator +44(0)7900221989 axisstudiosgroup.com Glasgow. London. Bristol.

2 1

Extract Network Date for Network MAP
by Mills, Stuart 14 Jun '21

14 Jun '21

Hi, Does Observium offer a way to extract Network data to create a MAP? -- Kind Regards *Stuart J Mills* *Systems Administrator* *Dresden International School* Annenstr. 9, 01067 Dresden Germany *Phone:* +49(0)351 44007 18 <+49%20351%204400718> smills(a)dresden-is.de www.dresden-is.de *DIS Dresden International School gGmbH* Sitz der Gesellschaft | Company Register: Annenstr. 9, 01067 Dresden Registergericht | Court of registration: Amtsgericht Dresden, HRB 35540 Geschäftsführung | Executive Board: Steven Calland-Scoble, Andrea Harnisch -- *DIS Dresden International School gGmbH* Sitz der Gesellschaft | Company Register: Annenstr. 9, 01067 Dresden Registergericht | Court of registration: Amtsgericht Dresden, HRB 35540 Geschäftsführung | Executive Board: Steven Calland-Scoble, Andrea Harnisch* *

3 2

RANCID integration question
by Adam Thompson 10 Jun '21

10 Jun '21

I'd like to integrate our RANCID install with our Observium install, but the "generate-rancid.php" script includes over 100 devices that we have SNMP access to but not SSH, and excludes some other virtual devices that I do want to include. The script appears to simply key off whether the device is classed as "hardware" or not, which isn't adequate for us. Are there any enhancements to that script on the wings? If not, can I just manually edit the generated list and never re-run the script automatically (despite the warning in it)? Thanks, -Adam

2 1

monitoring traffic in a redundant internet access
by Luis Olavarrieta 10 Jun '21

10 Jun '21

Hey team, question, is there a way to monitor in a mikrotik with two internet access if both are active? The main link will give us remote snmp access to the equipment but we need to know if there is a way we can verify that the 2nd link that is connected to a DSL modem is up and running. Please advice,

5 5

URL /graph.php
by Jérôme Marteaux 08 Jun '21

08 Jun '21

Hi, I would like to use /graph.php to get graph (port graphs). I will use authenticated query with header /Authorization: Basic <digest>/ But this request doesn't work as authenticated query is not allowed for /graph.php url. I believe /graph.php is not an API query scheme, but it should? be possible to include /graph.php as one. Does another query, header, parameters exists to fetch a graph without a session (API request) ? What do you think of this patch in order to allow authenticated query to /graph.php: Original file is the one of revision 11382: --- html/includes/authenticate.inc.php.orig 2021-06-08 15:35:43.633475678 +0200 +++ html/includes/authenticate.inc.php.new 2021-05-28 23:53:35.354798084 +0200 @@ -403,7 +403,7 @@ } } - if ($auth_success && !OBS_API && !OBS_AJAX) + if ($auth_success && !OBS_API && !OBS_AJAX && !OBS_GRAPH) { // If just logged in go to request uri, unless we're debugging or in API, // in which case we want to see authentication module output first. -- Jérôme Marteaux

1 0

Option to Ignore Device Down due to DNS failure
by Pisano, Anthony D. 03 Jun '21

03 Jun '21

Hello, We have had a couple incidents where for one reason or another Observium has been unable to resolve DNS. This generates hundreds of emails saying the entire network is down, and again when it comes back up. Is there a way to tell Observium not to alert when a device is failed due to DNS lookup? Anthony Pisano | Network Design Engineer | IMSS anthony.pisano(a)caltech.edu<mailto:anthony.pisano@caltech.edu> | (626) 395-4255<tel:(626)%20395-4255> | Caltech | caltech.edu<http://caltech.edu/>

4 3

Update
by paulkitteringham＠axisstudiosgroup.com 02 Jun '21

02 Jun '21

Morning Gentlemen, Just wondering if you have any update on the performance/memeory issue we saw with the new update on friday ? Many thanks Paul -- *Paul Kitteringham* Senior System Administrator +44(0)7900221989 axisstudiosgroup.com Glasgow. London. Bristol.

1 0

OIDs list used by a device
by ToDevNull 01 Jun '21

01 Jun '21

Dear all, I'm dealing with my telco provider about snmp agent configuration on all Cisco devices. They want to push some restrictions with a "customer view" which will restrict the access to some OIDs. I wonder if there is a way to list all OIDs used by a device in order to ask them to allow such entire list ? Thanks in advance for your help. Rds, Tarik.

3 4

fwConnNumber from Stonesoft/Forcepoint Firewall
by Steffen Klemer 27 May '21

27 May '21

Hey devs, would it be possible to get a graph for fwConnNumber from STONESOFT-FIREWALL-MIB.mib (i.e. 1.3.6.1.4.1.1369.5.2.1.4) similiar to the Connection Number for Cisco ASA? Also the fwIfStatsTable might be nice and the Accepted, Rejected, Dropped packets :). I added it as custom oid for now; but perhaps some more people would be interested? Do you accept patches? Steffen -- Steffen Klemer Arbeitsgruppe "Netze" Tel.: +49 551 201 2170, E-Mail: steffen.klemer(a)gwdg.de ------------------------------------------------------------------------- Gesellschaft für wissenschaftliche Datenverarbeitung mbH Göttingen (GWDG) Am Faßberg 11, 37077 Göttingen, URL: https://www.gwdg.de Support: Tel.: +49 551 201-1523, URL: https://www.gwdg.de/support Sekretariat: Tel.: +49 551 201-1510, Fax: -2150, E-Mail: gwdg(a)gwdg.de Geschäftsführer: Prof. Dr. Ramin Yahyapour Aufsichtsratsvorsitzender: Prof. Dr. Norbert Lossau Sitz der Gesellschaft: Göttingen Registergericht: Göttingen, Handelsregister-Nr. B 598 Zertifiziert nach ISO 9001 -------------------------------------------------------------------------

2 1

Leave sensor data in Fahrenheit
by Timothy Stoddard 26 May '21

26 May '21

All, Is there any possible way to leave sensor data in Fahrenheit? I have temperature sensors that are getting converted into Celsius when we would like them in Fahrenheit. Thanks, -- Tim

1 0

Equipement Type automaticaly updated
by Paul Scheben 26 May '21

26 May '21

Hi, Since last rolling update (21.5.11346), all equipment manually set are automatically change after a poll. Regards, Paul

1 0

Fortigate firewalls in Active/Passive with VDOMs
by Scooby Doo 25 May '21

25 May '21

6 10

FortiGate IPsec Status/Stats
by Storer, Darren 25 May '21

25 May '21

Hello, I don't normally use FortiGate FWs for IPsec but now I need to monitor the status/stats (up/down/throughput) of a tunnel - has anyone managed this with Observium? Thanks in advance for any hints Darren

1 0

Performance tuning
by Lars Joergensen 19 May '21

19 May '21

Hi We have one Observium server looking at * 476 devices (mainly switches, some firewalls, some WAN routers) * 3666 ports * 8692 sensors The server has 6 cores (~70% idle, ~3% iowait) and 8 GB memory. We have configured 15 poller threads with max 6 allowed wrapper processes. The server is struggling to keep the polling cycle below 300 seconds (averaging 376 secs). Is this workload realistic for one server, and if so where do you suggest we tune? Or do we need to use a distributed setup? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

5 6

Nightly Backup
by Terry Stone 10 May '21

10 May '21

For what its worth I have written a small php script to provide a 7 day rolling backup of my observium server to an external server and to send a confirmation email when backup is complete: #!/usr/bin/env php <?php // Script to backup Observium data created by Terry Stone on 3rd. May 2021 include "config.php"; // Collect database credentials $sql_username = $config['db_user']; $sql_userpass = $config['db_pass']; // FTP server credentials $ftp_server = '[ftp server name]'; $ftp_username = '[ftp server username]'; $ftp_userpass = '[ftp server password]'; // Email credentials $mail_to = $config['email']['default']; $mail_header = 'From: '.$config['email']['from'] . "\r\n" . 'X-Mailer: PHP/' . phpversion(); $mail_subject = "Observium Server Backup"; $mail_message = "Observium server backups sent to ".$ftp_server." on ".date("l jS F Y").":\n\n"; // Files to backup $file[0]= "observium-rrd.tar.gz"; $file[1]= "observium-dump.sql"; $file[2]= "config.php"; // Prefix filename to be sent to FTP server with day of the week $counter=0; while ($counter < count($file)) { $backupfile[$counter]=date("N").$file[$counter]; $counter++; } // Assemble observium backup fils exec('tar zcvf backup/'.$file[0].' rrd'); exec('/usr/bin/mysqldump -u observium --user='.$sql_username.' --password='.$sql_userpass.' --databases observium --add-drop-table --extended-insert > backup/'.$file[1]); exec('cp config.php backup/'.$file[2]); // Connect and login to FTP server $ftp_conn = ftp_connect($ftp_server) or die("Could not connect to $ftp_server"); $login = ftp_login($ftp_conn, $ftp_username, $ftp_userpass); // Change to passive mode ftp_pasv($ftp_conn,true); // Upload files to FTP server $counter=0; while ($counter < count($file)) { if (ftp_put($ftp_conn, $backupfile[$counter], "backup/".$file[$counter],FTP_BINARY)) { exec('cp backup/'.$file[$counter].' backup/'.$backupfile[$counter]); $status = date("H:i:s")." Successfully backed up ".$file[$counter]." to ".$backupfile[$counter]."\n"; } else { $status = date("H:i:s")." Error backing up ".$file[$counter]." to ".$backupfile[$counter]."\n"; } $mail_message = $mail_message.$status; $counter++; } // Close FTP connection ftp_close($ftp_conn); // Add final line to message body $mail_message=$mail_message."\nPlease do not reply to this message, mail account is send only.\n"; // Send Completion message mail($mail_to,$mail_subject,$mail_message,$mail_header); ?> It is set to run nightly with this Cron Job: # Run nightly backup and send files to offshore FTP server 0 02 * * * root cd /opt/observium && php observiumbackup.php The backups are also held on the Observium Server in /opt/observium/backups. You need to make sure the backup files have the correct permissions. Hope this will help someone. An observium server that has run for years holds a very large amount of valuable historical data and servers can fail so its good to have that data in a safe place! Terry Stone.

3 2

API, get syslog alarms list by device id
by Vasiliy Moroz 10 May '21

10 May '21

Dear Observium community, I usе Observium and the more I use it more I love it :) I use the Observium syslog interface for pushing to Observium syslog alerts. For now, I am developing customer personal web service where they could see their telecom services on the map with nodes states like ok, critical. There are on the map presented only part of the telco network their services go through. By API I get nodes' location and state so can show it on the map with nodes connections from my customer database. Except for alarms Observium gets by syslog integration. Is there any way to get syslog alerts by API and device id? I could analyze syslog alerts and set proper node status by syslog alerts if they are accessible. As I know it is impossible.

2 2

LLDP collection from Arista switches
by Lars Joergensen 07 May '21

07 May '21

Hi guys We're looking at the Port -> Map view of our Aristas to determine what's connected to them. But this map seems to lack information compared to what we can see directly on the switch. Any information I can provide that would help in troubleshooting this? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

3 4

Observium device discovery
by Christopher N Callison 05 May '21

05 May '21

I have a Cisco 9130axi AP that is running in embedded controller mode. I am not able to monitor traffic or user statistics on the WLANs like I did with my WLC2504. I do not see any wireless related MIBS attached to the device. Is there a way to force discovery for certain features or MIBS? Or do I have to add my own custom OID? Chris

3 3

Google Secure LDAP - Working with a hack
by Pieter De Wit 05 May '21

05 May '21

Hi Guys, I have Google Secure LDAP working with Observium, but it requires a hack and hopefully the devs can implement this into the code base (after fixing my even more of my hacky hacks :) ) In config.php: $config['auth_ldap_server']="ldap://127.0.0.1:1636”; // We using the stunnel method $config['auth_ldap_port'] = 1636; // Not needed - at least, not that I could find $config['auth_ldap_starttls']=false; // Implemented with stunnel $config['auth_ldap_suffix'] = ",ou=Secure_LDAP,ou=Users,dc=example,dc=com”; // Fix this for your domain unset ($config['auth_ldap_groups']); $config['auth_ldap_groups']['cn=observium']['level'] = 10; // Google does something funky with “groups" In html/includes/authentication/ldap.inc.php: After line 932: else { $filter="(&(".$dn.")".ldap_filter_create ($attribute, $value).")"; $ret=ldap_search ($ds,”dc=example,dc=com",$filter); // TODO : We need to figure out if ($ret !==FALSE) { $compare=TRUE; } } In a nutshell, ldap_compare doesn’t work for Google Secure LDAP - pretty much like https://jira.observium.org/browse/OBS-3611 <https://jira.observium.org/browse/OBS-3611> but then, if the ldap_read fails, we fallback to just doing a search for the “group” and where memberUid is the username provided. It might be worthwhile to look into setting a LDAP type variable and reacting to that. Hopefully this makes sense :) Cheers, Pieter

1 1

Google Secure LDAP
by Pieter De Wit 04 May '21

04 May '21

Hi Everyone, Has anyone got Observium to authenticate against Google Secure LDAP *and* return a usable user level ? My authentication passes, but I always end up with a user level of 0. I am using the stunnel method to try and simplify things. Thanks, Pieter

2 2