- observium - lists.observium.org

Observium with Radius
by Peter Derissen 15 Oct '20

15 Oct '20

Hello all, I have setup Observium with radius auth. Today I noticed that everyone is getting full admin rights in Observium. I changed my own radius settings and tested. Observium is running on 10.230.11.81 and radius on 10.230.11.111 This is the radius response: (587) Sent Access-Accept Id 94 from 10.230.11.111:1812 to 10.230.11.81:43443 length 0 (587) Juniper-Local-User-Name = "remote" (587) Filter-Id = "pfy" <-- (587) GENIE-USER-PRIVILEGE = PRIV-ADMINISTRATOR (587) Infinera-User-Category = "administrator" (587) Service-Type = Administrative-User (587) NS-Admin-Privilege = All-VSYS-Root-Admin (587) Class = 0x6e65 Config.php: $config['auth_radius_groups']['admin']['level'] = 10; // Full administrative access $config['auth_radius_groups']['cto']['level'] = 7; // Global read access with secured info (ie rancid configs) $config['auth_radius_groups']['pfy']['level'] = 5; // Global read access [cid:image005.png@01D6A21D.84BFC540] Any idea what I'm doing wrong? Met vriendelijke groet, Peter Derissen Eurofiber Nederland Network Engineer Safariweg 25-31 +31 (0)6 11587110 3605 MA Maarssen [cid:image006.png@01D6A21D.84BFC540]<https://www.eurofiber.nl/> Volg ons op Twitter<https://twitter.com/Eurofiber> | Linkedin<https://www.linkedin.com/company/eurofiber> | Facebook<https://www.facebook.com/eurofiberNL/> | Youtube<https://www.youtube.com/channel/UC6DavgEm7-ktAD8_Co_qnMA> Wilt u op de hoogte blijven van technische ontwikkelingen aan ons netwerk, nieuwe ICT ontwikkelingen en klantervaringen? Meld u dan aan voor onze maandelijkse nieuwsbrief<https://marketing.eurofiber.com/acton/fs/blocks/showLandingPage/a/15570/p/p…>. [cid:image007.jpg@01D6A21D.84BFC540]<https://www.eurofiber.nl/> ******** IMPORTANT NOTICE ******** This e-mail (including any attachments) may contain information that is confidential or otherwise protected from disclosure and it is intended only for the addressees. If you are not the intended recipient, please note that any copying, distribution or other use of information contained in this e-mail (and its attachments) is not allowed. If you have received this e-mail in error, kindly notify us immediately by telephone or e-mail and delete the message (including any attachments) from your system. Please note that e-mail messages may contain computer viruses or other defects, may not be accurately replicated on other systems, or may be subject of unauthorized interception or other interference without the knowledge of sender or recipient. Eurofiber only sends and receives e-mails on the basis that Eurofiber is not responsible for any such computer viruses, corruption or other interference or any consequences thereof. Eurofiber Nederland B.V. is registered in the Chamber of Commerce of Amsterdam with number 34134377, VAT number NL 8088.51.524 B01. Eurofiber N.V. has its registered office at Belgicastraat 5 bus 7, 1930 Zaventem and is registered under national number 0435.204.851.

2 2

How to create Alert Checker for a specific port?
by Brian Bianchi 15 Oct '20

15 Oct '20

Hi folks, I have an application running on port 7990. I would like to create a custom Alert Checker to check if this port is functional. I have read the documentation here: https://docs.observium.org/alert_checker/ https://docs.observium.org/alerting_examples/ The "port is operational but functionally down" option looks like the one for me. But how the heck do I select a specific port of 7990 to be monitored? Thanks! [cid:image001.png@01D6A15A.75CD84A0] Brian Bianchi Senior Release Engineer o: +1 (781) 213-6483 e: bbianchi(a)vestmark.com Learn more about Vestmark! View our introduction video here<https://vimeo.com/374253696>. Check us out on Social Media: [cid:image002.png@01D6A15A.75CD84A0] <https://www.linkedin.com/company/vestmark/> [cid:image003.png@01D6A15A.75CD84A0] <https://www.glassdoor.com/Overview/Working-at-Vestmark-EI_IE263618.11,19.htm> [cid:image004.png@01D6A15A.75CD84A0] <twitter.com/Vestmark> This e-mail and any attachments hereto, are intended for use by the addressee(s) only and may contain information that is confidential information of Vestmark, Inc. If you are not the intended recipient of this e-mail, or if you have otherwise received this e-mail in error, please immediately notify me by telephone or by e-mail, and please permanently delete the original, any print outs and any copies of the foregoing. Any dissemination, distribution or copying of this e-mail is strictly prohibited.

3 6

Probes running from pollers
by Ahmed Rahal 15 Oct '20

15 Oct '20

Hi, After successfully trying out probes, I was wondering if the nagios plugins (that's what probes are) are run from the designated poller or from the default poller only. Ahmed. -- Ahmed Rahal Administrateur de Systèmes / Systems Administrator *Fibrenoire* - www.fibrenoire.ca A: 550 , avenue Beaumont, bureau 320, Montréal (Québec) H3N 1V1 arahal(a)fibrenoire.ca Twitter: @fibrenoire

2 1

how will create Custom OID alarm for power supply
by Brij Mohan 13 Oct '20

13 Oct '20

Hi Anyone can help to create a custom oid alarm in OBS. [image: image.png]

2 12

Why sometime graph are missing on the dashboard ?
by Aulia Rahman 13 Oct '20

13 Oct '20

Dear All, I've sometimes found that some server graph RAM / CPU / Traffic is missing on the dashboard. So, I can't view the graph at that time. But when I check on the next time, that graph shows again. What caused it and how to solve it ? My detail specs: Device Monitor: 400++ VM (various OS Linux & Windows) CPU: 8 Core RAM: 12 GB ( Use Ramdisk ) Storage: 500 GB on SSD Observium 20.1.10233 (20th January 2020) OS Linux 3.10.0-514.el7.x86_64 [amd64] (CentOS 7) Apache 2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/7.0.19 PHP 7.0.19 (OPcache: ENABLED) Python 2.7.5 MySQL 5.5.52-MariaDB (extension: mysqli 5.5.52-MariaDB) Demikian yang dapat kami sampaikan, terimakasih. Regards, Aulia Rahman

3 4

Alerting on running processes?
by Johann Mallet 12 Oct '20

12 Oct '20

Hello, Is it possible to create an alert on the number of running processes? (=hr_processes graph) I have tried to search in Device/Counter/Sensor/Status alert type without success. Many thanks! Johann

2 2

Re: [Observium] observium Digest, Vol 123, Issue 8
by Sachin Guda 12 Oct '20

12 Oct '20

Hello Team, Any update on 3. Syslog problem with Arista and Nexus device (Sachin Guda) __________________________________________________ Sachin Guda Managed Services • Itiviti Network Engineer -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Saturday, October 10, 2020 1:00 PM To: observium(a)observium.org Subject: observium Digest, Vol 123, Issue 8 Send observium mailing list submissions to observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org You can reach the person managing the list at observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Alerting on running processes? (Johann Mallet) 2. Re: Alerting on running processes? (Adam Armstrong) 3. Syslog problem with Arista and Nexus device (Sachin Guda) 4. Re: how will create Custom OID alarm for power supply (Brij Mohan) 5. Re: how will create Custom OID alarm for power supply (Adam Armstrong) ---------------------------------------------------------------------- Message: 1 Date: Fri, 9 Oct 2020 13:50:14 +0200 From: Johann Mallet <johann.mallet(a)zayo.com> To: Observium Network Observation System <observium(a)observium.org> Subject: [Observium] Alerting on running processes? Message-ID: <CAK5-Kt2biva=smV11B-kNPM5aF_jnk_5LBcGtH+YL960etpBSA(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hello, Is it possible to create an alert on the number of running processes? (=hr_processes graph) I have tried to search in Device/Counter/Sensor/Status alert type without success. Many thanks! Johann

1 0

Syslog problem with Arista and Nexus device
by Sachin Guda 09 Oct '20

09 Oct '20

Hello Team, I am running latest Observium version, Syslog is configured on switch to send logs to observium server. They send logs to observium (verified with capture on server interface) but observium doesn’t show it in syslog tab it says- No syslog entries found! This device does not have any syslog entries. Check that the syslog daemon and Observium configuration options are set correctly, that this device is configured to send syslog to Observium and that there are no firewalls blocking the messages. See Syslog Integration <https://docs.observium.org/syslog/> guide and configuration options <https://docs.observium.org/config_options/#syslog-settings> for more information. At the same time syslog can be seen from other devices like cisco CAT switch, ASA firewall and Cisco ASR. __________________________________________________ [image: http://itiviti.com/email_signature_logo_2017_120.png] <http://www.itiviti.com/> *Sachin Guda* Managed Services, Itiviti Network Engineer Direct: +46 8 506 477 52 Mobile: +46 73 901 02 53 Sachin.Guda(a)itiviti.com <%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20mailto:Sachin.Guda@itiviti.com> Kungsgatan 36 , P.O. Box 7742 10395 Stockholm , Sweden Fax: +46 8 506 477 01 *Visit: itiviti.com » <http://www.itiviti.com>Read the latest news from Itiviti » <http://www.itiviti.com/news/>* -- ______________________________ <https://www.linkedin.com/company/10438325/> The information contained in or attached to this email is strictly confidential. If you are not the intended recipient, please notify us immediately by telephone and return the message to us. Email communications by definition contain personal information. The Itiviti group of companies is subject to European data protection regulations. Itiviti’s Privacy Notice is available at www.itiviti.com <http://www.itiviti.com/>. Itiviti expects the recipient of this email to be compliant with Itiviti’s Privacy Notice and applicable regulations. Please advise us immediately at dataprotectionteam(a)Itiviti.com if you are not compliant with these.

1 0

Trouble with Active Directory group config on Observium CE v20.9.10731
by Brian Bianchi 08 Oct '20

08 Oct '20

Hello, I am trying to configure Active Directory authentication on my Observium CE v20.9.10731 server using this page as a guide -> https://docs.observium.org/authentication/#active-directory I am passed the point where my username and password are authenticated. It is the group config I am confused about. I have an Active Directory group "eng-admins" that I want to give administrative privileges to, of which my login (bbianchi) is a member. And I have an Active Directory group "eng-team" that I want to give generic non-admin privileges. My domain is hq.viviport.com. It is not clear to me how to configure these lines to achieve this: $config['auth_ldap_recursive'] = TRUE; $config['auth_ldap_recursive_maxdepth'] = 3; $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",DC=hq,DC=viviport,DC=com"; $config['auth_ldap_group'] = array("CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com"); $config['auth_ldap_groupbase'] = "OU=Groups,DC=hq,DC=viviport,DC=com"; $config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['CN=Observium Admins,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 10; $config['auth_ldap_groups']['CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 1; I have enabled debug logging. Here is what I am getting below. Any help would be greatly appreciated. Thank you in advance. --B [cid:image008.png@01D69BBE.684DA9A0] [cid:image001.png@01D69BBE.92743870] Brian Bianchi Senior Release Engineer o: +1 (781) 213-6483 e: bbianchi(a)vestmark.com Learn more about Vestmark! View our introduction video here<https://vimeo.com/374253696>. Check us out on Social Media: [cid:image002.png@01D69BBE.92743870] <https://www.linkedin.com/company/vestmark/> [cid:image003.png@01D69BBE.92743870] <https://www.glassdoor.com/Overview/Working-at-Vestmark-EI_IE263618.11,19.htm> [cid:image004.png@01D69BBE.92743870] <twitter.com/Vestmark> This e-mail and any attachments hereto, are intended for use by the addressee(s) only and may contain information that is confidential information of Vestmark, Inc. If you are not the intended recipient of this e-mail, or if you have otherwise received this e-mail in error, please immediately notify me by telephone or by e-mail, and please permanently delete the original, any print outs and any copies of the foregoing. Any dissemination, distribution or copying of this e-mail is strictly prohibited.

3 4

Observium in HTTPS
by Olivier CALVANO 08 Oct '20

08 Oct '20

Hi We use Observium Version 20.9.10749. currently it is http, observium accepts to be in https? Regards Olivier

4 4

Observium Install Script
by Marios.P＠crowe.com.cy 08 Oct '20

08 Oct '20

Hi all, I want to install Observium on a new Ubuntu 18.04 server but the install script is not available. Do we have any indication when is it going to be available again? Thank you, Marios

2 1

Debug Logging
by Stuart Dyer 08 Oct '20

08 Oct '20

Hi Everyone, Simple question but how to I enable debug logging on the Observium web interface ? trying to setup ldap when I log in Observium after configuring ldap the interface does nothing so I would like to see the logging of what the error is Regards, Stuart Dyer IT Administrator Phone: +61 2 8020 2063 | E-mail: stuart.dyer(a)innovit.com<mailto:stuart.dyer@innovit.com> [innovit-logo (002) trans 2018] Bringing quality to Master Data 161 Castlereagh Street, Level 28 Sydney NSW 2000 Australia<https://goo.gl/maps/DGW9Ce65rhP2> Tel: +612 8020 2000 Fax: +612 8020 2099 Web: www.innovit.com<http://www.innovit.com/> Australasia | North America | Europe Follow us on LinkedIn<https://www.linkedin.com/company/innovit-australia-pty-ltd?trk=public_profi…> This electronic mail is solely for the use of the addressee and may contain information, which is confidential or privileged. If you receive this electronic mail in error, please delete it from your system immediately and notify the sender by electronic mail or using any of the following contact details.

2 2

Aggregated graphs howto?
by José Manuel Giner 07 Oct '20

07 Oct '20

Hello we've just installed Observium Premium. it's possible to create aggregated graphs? We want to put in the same graph different network ports. and can make the graph public? or can we automate to download the graph image? Thanks! -- José Manuel Giner https://ginernet.com

2 1

distributed observium
by Arnoldo Vidal Bravo 06 Oct '20

06 Oct '20

¿how i can setup a poller as default? [image: image.png] -- Saluda cordialmente

1 0

SQL Injection?
by Hamilton, Kent 05 Oct '20

05 Oct '20

I noted these on this weeks CERT vulnerability report have they been addressed? I don't see anything about them on the mailing list, site or bug tracker, I could have overlooked them I guess. observium -- observium An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via username[0] to the default URI, because of includes/authenticate.inc.php. 2020-09-25 7.5<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMzcsInVy…> CVE-2020-25147<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMzgsInVy…> MISC<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMzksInVy…> observium -- observium An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. Sending the improper variable type Array allows a bypass of core SQL Injection sanitization. Users are able to inject malicious statements in multiple functions. This vulnerability leads to full authentication bypass: any unauthorized user with access to the application is able to exploit this vulnerability. This can occur via the Cookie header to the default URI, within includes/authenticate.inc.php. 2020-09-25 7.5<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxNDAsInVy…> CVE-2020-25132<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxNDEsInVy…> MISC<https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxNDIsInVy…> ________________________________ This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

2 3

observium distributed
by Arnoldo Vidal Bravo 02 Oct '20

02 Oct '20

We are configuring and testing observium distributed.... it works fine !, but when i add a new device on web interface i must check skip ICMP echo checks. if not i get a message Could not ping X.X.X.X in observium main config.php is installed fping 3-10 $config['fping'] = "usr/local/sbin/fping"; in poller too is installed fping 3-10 $config['fping'] = "usr/local/sbin/fping"; -- Saluda cordialmente

3 4

Aggregated graphs howto?
by José Manuel Giner 01 Oct '20

01 Oct '20

Hello we've just installed Observium Premium. it's possible to create aggregated graphs? We want to put in the same graph different network ports. and can make the graph public? or can we automate to download the graph image? Thanks! -- José Manuel Giner https://ginernet.com

1 0

SNMP timeout adjustment
by Lars Joergensen 01 Oct '20

01 Oct '20

Hi I get "WARNING! Ports snmpwalk did not complete. Try to increase SNMP timeout on the device properties page." on one of my devices. Then I went to the device page and entered "300" as SNMP timeout, hit save and got told "Device SNMP configuration update is not required". What's next? Best regards Lars Joergensen IT Manager - Network Team - Global IT Chr. Hansen A/S - Boege Alle 10-12 - 2970 Hoersholm - Denmark Phone: +45 52 18 05 22 dklarj(a)chr-hansen.com<mailto:dklarj@chr-hansen.com> - www.chr-hansen.com<http://www.chr-hansen.com/> [cid:image001.gif@01D690BF.ECC49DB0] ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

3 4

RRD max value
by Marian Rychtecky 01 Oct '20

01 Oct '20

Hi all, I would like to ask you for help in order to resolve an issue with RRD. I do have port-channel with max speed of 400Gbit/s (correctly detected by Observium), however when traffic will reach 100G it will not be shown. I believe there is max limit on that RRD, as some other port-channels works good. Of course I don't want to loose history if possible. Other monitoring systems using same MIBs are working as expected. Not working one: Working one (different host): Thank you Marian -- Marian Rychtecký mr(a)nix.cz Phone +420 724 397 441 NIX.CZ z.s.p.o. Americká 23, Praha 2 130 52 Czech Republic http://www.nix.cz

2 1

Sensor blues
by Lars Joergensen 01 Oct '20

01 Oct '20

Hi I'm having trouble with sensors on SFPs in Aruba switches. Looking at the switch, I get this: Transceiver in 3/49 Interface Index : 155 Type : SFP+LR Model : J9151A Connector Type : LC Wavelength : 1310nm Transfer Distance : 10.0km (9um), Diagnostic Support : DOM Serial Number : AX07SL0130407 Status Temperature : 26.289C Voltage : 3.3408V Tx Bias : 41.728mA Tx Power : 0.6339mW, -1.980dBm Rx Power : 0.4225mW, -3.742dBm But looking in Observium, I get this: [cid:image002.png@01D697E4.402E6B90] There's no data for RX power (which is the most interesting) and the data for TX power is wrong. I think this is an OEM SFP (the serial number looks weird), but if the switch can see the data, shouldn't Observium be able to pull it too? Temperature, voltage and current graphs are correct. ... and just now, when I clicked around, the correct values are now showing for TX and RX power in the graphs. What's going on? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

1 0

Re: [Observium] MariaDB upgrade
by Scott Driemeier-Showers 30 Sep '20

30 Sep '20

We upgraded from MariaDB 5.5.65 to 10.3.23-1 on CentOS 7.8 at the end of July following the steps given here: https://www.liquidweb.com/kb/how-to-upgrade-mariadb-5-5-to-mariadb-10-0-on-…

1 0

MariaDB upgrade
by Edvinas Kairys 30 Sep '20

30 Sep '20

Hello, Could someone provide a guide on Centos to upgrade MariaDB from 5.5 to 10.x ? Thanks

2 1

Observium deleting switch entries instead of alerting
by Pisano, Anthony D. 29 Sep '20

29 Sep '20

Hello, I ran into a weird situation today that I’m unsure of how to proceed with. Due to a power failure we lost power to 3 of 4 switches in a Cisco 9300 Stack. At 10:57am yesterday in the event log of this switch I can see the OperStatus of the Stack Ports go down. I have an alert configured against the status of “Switch Stack Failure” does not equal OK. However this alert did not go off at the time of the outage, it has for other switch stacks though. Then at 5am this morning the logs of the device indicate it went through and essentially removed switches 2-4 of this stack. We are currently running 20.7.10549. I know we need to update, but our linux team has not gotten around to it. Is there anyway to look into this? Anthony Pisano | Network Design Engineer | IMSS anthony.pisano(a)caltech.edu<mailto:anthony.pisano@caltech.edu> | (626) 395-4255<tel:(626)%20395-4255> | Caltech | caltech.edu<http://caltech.edu/>

1 0

HTML Base tag appears wrong when using IPv6
by Pieter De Wit 29 Sep '20

29 Sep '20

Hi, Yes, this is “wrong” but I have an internal server which happens to have IPv6 and no DNS. If I access my Observium installation using the address, the generated HTML is as follow: <!DOCTYPE html> <html lang="en"> <head> <base href="http://[[2406:xxxx:xxxx:3300::202]]/"/> <meta http-equiv="content-type" content="text/html; charset=utf-8”/> The base setting has double brackets which breaks loading. (Yes, I can override this in the config :) ) Cheers, Pieter

2 1

Invoice for our recent purchase for Observium subscription
by Renuka Arya 25 Sep '20

25 Sep '20

Hi Team, Can you please provide us the invoice for our purchase on aug 1, 2020 ? We didn't seem to have received it. please see the attachment below. Thanks! Regards Renuka Arya

1 0