- observium - lists.observium.org

Re: [Observium] Changing Observium alert message contents
by Risto Jürisson 17 Jul '20

17 Jul '20

Hi Your solution does work for changing the name from IP address to hostname. (In the picture below I removed the device from web interface and readded it so the history got deleted.) What I can see is that the Device name is now in 3 places where previously the IP address was: Email Title, Entity and Device. As we also have very many network devices that we want to monitor then we think that adding all those IP addresses with hostnames manually to the DNS (or hosts file) is not very practical, especially if we need to to it also with future devices. Maybe there still is a possibility that we can change the email contents with some other fields: adding Description, Location or something like that? Someone maybe knows where this template config file is located? [cid:image001.png@01D65C59.2119C4F0] Best regards Risto Date: Thu, 16 Jul 2020 15:28:00 +0200 From: Markus Klock <markus(a)best-practice.se<mailto:markus@best-practice.se>> To: Observium <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Changing Observium alert message contents Message-ID: <CAF6uZmLm4R+RAb6UhazZPztF4jgXjOx=6dft_y5M193k_NzFBw(a)mail.gmail.com<mailto:CAF6uZmLm4R+RAb6UhazZPztF4jgXjOx=6dft_y5M193k_NzFBw@mail.gmail.com>> Content-Type: text/plain; charset="utf-8" Hi, the best way is to monitor the device via its hostname instead of IP. Login to the Observium server CLI and use the script "rename_device.php <old_name> <new_name>" where the old name is the device IP and the new name is the hostname. This will rename the device in Observium to its real hostname and the poller will just resolve its dns name to find the IP to poll. All the historic data for the device will remain. /Markus Den tors 16 juli 2020 kl 14:01 skrev Risto Jürisson via observium < observium(a)observium.org<mailto:observium@observium.org>>: > Hi > > > > This is my first message to this list. I also wrote to the IRC on > different days, but the web-based IRC client is not really good as > information goes missing after disconnecting and relogging. > > > > We have Observium running on Ubuntu 16.04 and are monitoring different > Windows servers and also some network devices. Below there is a pic of > an alert for a Mikrotik wifi device that has gone down. We added the > device to Observium via IP and therefore we also see the Device name > with the IP address. Sadly we do not remember all the devices via > their IP, but rather their hostname or description. > > I have set human-friendly names on the observium web interface to > device „System name“ value and also under „General Device Settings“ to > „Description“ value. – *Is there a possibility to add those fields to > the email report and where should I do this?* > > From IRC channel I got an answer that the email template can be > changed for the Observium Pro version but I do not know where to find > this config file. This can not be done in the web interface as I understand. > > > > > > (I also have questions on how to monitor services on Windows Server > but I think that is via SNMP and specific OID/MIB´s. So I will look > into that myself first.) > > > > > > Best regards > > > > Risto > > IT-manager > > risto(a)blueit.ee<mailto:risto@blueit.ee> > > > _______________________________________________ > observium mailing list > observium(a)observium.org<mailto:observium@observium.org> > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >

3 2

Changing Observium alert message contents
by Risto Jürisson 16 Jul '20

16 Jul '20

Hi This is my first message to this list. I also wrote to the IRC on different days, but the web-based IRC client is not really good as information goes missing after disconnecting and relogging. We have Observium running on Ubuntu 16.04 and are monitoring different Windows servers and also some network devices. Below there is a pic of an alert for a Mikrotik wifi device that has gone down. We added the device to Observium via IP and therefore we also see the Device name with the IP address. Sadly we do not remember all the devices via their IP, but rather their hostname or description. I have set human-friendly names on the observium web interface to device "System name" value and also under "General Device Settings" to "Description" value. - Is there a possibility to add those fields to the email report and where should I do this? >From IRC channel I got an answer that the email template can be changed for the Observium Pro version but I do not know where to find this config file. This can not be done in the web interface as I understand. [cid:image001.png@01D65B81.16F78F80] (I also have questions on how to monitor services on Windows Server but I think that is via SNMP and specific OID/MIB´s. So I will look into that myself first.) Best regards Risto IT-manager risto(a)blueit.ee<mailto:risto@blueit.ee>

2 1

Cannot create RRD for type exim - not found in definitions
by Wouter de Man 15 Jul '20

15 Jul '20

Running latest rolling release 20.6.10499. Trying to add Exim stats via the Unix agent. Seems RRD definitions are missing for the 'exim' application, they only exist for the 'exim-mailqueue' application'. See below the related debug output of poller.php --- SQL[SELECT * FROM `applications` WHERE `device_id` = '83'] ROWS[2] SQL RUNTIME[0.00004196s] o Applications exim SQL[SELECT * FROM `applications` WHERE `device_id` = '83' AND `app_type` = 'exim' AND `app_instance` IS NULL] ROWS[1] SQL RUNTIME[0.00018406s] .Cannot create RRD for type exim - not found in definitions!

1 1

Varnish Agent not working
by Simone Montagnani 15 Jul '20

15 Jul '20

Hi, I have already used varnish agent on a server with version 4, now I'm trying to let it work on varnish version 6.4. observium_agent is responding, but the result of varnish agent is empty : <<<app-varnish>>> ;;;;;;;;;;;;; instead of: <<<app-varnish>>> 212916238;0;0;1393;0;;0;0;393297;1216912816;160350799;0;657384598; like I have on the old one. If I lunch perl varnish I don't get any particular error, maybe the agent must be updated to work with new versions? I see varnish perl script is using varnishstat -x , and the results are somehow different from the old varnish version: VARNISH 6.4: <?xml version="1.0"?> <varnishstat timestamp="2020-07-01T15:38:00"> <stat> <name>MGT.uptime</name> <value>60710</value> <flag>c</flag> <format>d</format> <description>Management process uptime</description> </stat> <stat> <name>MGT.child_start</name> <value>1</value> <flag>c</flag> <format>i</format> <description>Child process started</description> </stat> <stat> <name>MGT.child_exit</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Child process normal exit</description> </stat> <stat> <name>MGT.child_stop</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Child process unexpected exit</description> </stat> <stat> <name>MGT.child_died</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Child process died (signal)</description> </stat> VARNISH 4 <?xml version="1.0"?> <varnishstat timestamp="2020-07-01T15:37:43"> <stat> <type>MAIN</type> <name>uptime</name> <value>13848724</value> <flag>c</flag> <format>d</format> <description>Child process uptime</description> </stat> <stat> <type>MAIN</type> <name>sess_conn</name> <value>250458042</value> <flag>c</flag> <format>i</format> <description>Sessions accepted</description> </stat> <stat> <type>MAIN</type> <name>sess_drop</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Sessions dropped</description> </stat> <stat> <type>MAIN</type> <name>sess_fail</name> <value>0</value> <flag>c</flag> <format>i</format> <description>Session accept failures</description> </stat> <stat> <type>MAIN</type> <name>client_req_400</name> <value>1236</value> <flag>c</flag> <format>i</format> <description>Client requests received, subject to 400 errors</description> </stat> I tried to change the code, because as you can see the parameters are similar but the name now have a prefix like MGT, but mostly "MAIN." for the parameters we are trying to get . I'm no perl esxpert I tried simply to add MAIN. but it still isn't working... Any ideas? Best regards, Simone

2 1

Latest Update 20.7.10551(Rolling)
by Serghei Golipad 15 Jul '20

15 Jul '20

Hi Guys, Latest updated killed all icons(missing ones are replaced with red circle with white block in them) and their placements, anyone else has this problem? Cheers PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. CDW Limited is a Company registered in England and Wales. This email is sent for and on behalf of CDW Finance Holdings Limited. CDW Finance Holdings Limited is the UK holding company for CDW Limited trading as CDW. The registered office for CDW Finance Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than CDW or the sender of its existence. For more information about CDW please visit www.uk.cdw.com

2 1

request
by Luis Olavarrieta 15 Jul '20

15 Jul '20

I got this error message, please assist ##### Module Start: neighbours ##### o MIKROTIK-MIB o Trying to discover host 3916mex_clearcom_296 (172.27.3.141) through MNDP (xdp) Trying v2c community *** [0] ... No reply on community public using v2c. Trying v1 community *** [0] ... No reply on community public using v1. Invalid arguments passed into function get_port_by_index_cache(). Please report to developers. o Trying to discover host sip-t21p_e2 (0.0.0.0) through MNDP (xdp) Invalid arguments passed into function get_port_by_index_cache(). Please report to developers. Invalid arguments passed into function get_port_by_index_cache(). Please report to developers.

2 1

SNMP + Syslog Question
by Randy Schultz 15 Jul '20

15 Jul '20

I am interested in merging SNMP + Syslog data from the firewalls (SonicWALL) I manage. With this data, I would like to accomplish two things... 1. Monitor for security events and send alerts if / when appropriate 2. Generate and send regulatory (PCI) compliance reports...this includes performance stats such as Up Time / Down Time as well as security stats (e.g. Intrusions blocked / detected)...these stats would ideally be displayed in some form of chart At present, SNMP data is being collected by Observium and Syslog data is being collected by Graylog. The question is where would it be best to merge the data so as to accomplish the goals outlined above. Graylog has the ability to search its data and generate report widgets (i.e. tables / charts) which in turn can be placed on a Dashboard. If I take this approach I would need to send Observium's SNMP data to Graylog but I've not been able to figure out how to do so. Observium has the ability to ingest Syslog data and alert on it but it's unclear on how I could use it to generate tables / charts for reporting purposes. I would appreciate any thoughts / recommendations on either of the options listed here. -- Randy Schultz

2 1

poll ports without VLAN information
by Henrik Aarfeldt 15 Jul '20

15 Jul '20

Hi there, As I remember, when polling a port it will also get VLAN information. Is there a way to don't get VLAN information ? VLAN is disabled in DiscoveryModules and PortsPoll Module. Reason: We have some units with very few interfaces, but a large amount of VLANs. This makes polls take too long time (+999seconds) TIA. -- Med venlig hilsen | Best regards | Mit freundlichen Grüßen | Cordialement | आपकी ईमानदारी से Henrik Aarfeldt Drift > Drift > Overvågning Overvågning + SårbarhedsKortlægning + SvartidsMålinger + NetværksKvalitetsMålinger. Mobil: +45 2494 8281 Mail: Henrik.Aarfeldt(a)RegionH.dk Region Hovedstaden Center for IT, Medico & Telefoni (CIMT) Borgervænget 7, 3. sal 2100 København Ø Ferie uge 33+34+35 2020. ________________________________ Region Hovedstaden anvender de personoplysninger, du giver os i forbindelse med din henvendelse. Du kan læse mere om formålet med anvendelsen samt dine rettigheder på vores hjemmeside: www.regionh.dk/persondatapolitik

2 1

Email Notifications - Only send 1 email out in 24 hours
by Luis Londoño 15 Jul '20

15 Jul '20

I see for the alert notifications there is an option to delay the email alert by a custom time frame but is their somewhere or this something that is being planned to be implemented to where it will only send out 1 email alert within a certain time period lets say 24 hours?

2 1

test
by adama＠observium.com 15 Jul '20

15 Jul '20

Test 😊

1 0

Dashboard: add don't work anymore
by walter＠onda.ch 07 Jul '20

07 Jul '20

Hello List recently some mails are going to my spam folder so I apologize if this question was already made. since last major update I cannot assign some graph to the dashboard anymore 20.7.10549 (3rd July 2020) I see the arrow right to the dashboard but if i move on it nothing happens, cannot choose a graph. I tried diffrent browser, delete also the cache. Regards Walter

1 0

Testing email delivery
by Ahmed Rahal 06 Jul '20

06 Jul '20

HI, It's been 2 messages that I sent that do not trigger the autoreply from Jira Service Desk. I am assuming it's automated. Is this coming through ? Ahmed. -- Ahmed Rahal Administrateur de Systèmes / Systems Administrator *Fibrenoire* - www.fibrenoire.ca A: 550 , avenue Beaumont, bureau 320, Montréal (Québec) H3N 1V1 arahal(a)fibrenoire.ca Twitter: @fibrenoire

1 0

how to show number of clients on mikrotik wifi
by Andi Felani 29 Jun '20

29 Jun '20

all, how to show number of clients on mikrotik wifi? this is possible? regards,

1 0

Probes: documentation
by Torstein Eide 24 Jun '20

24 Jun '20

Hi Where can I find documentation on probes? I have looked through https://docs.observium.org and is only able to find info for alerts "/entities/#probes" -- Torstein Eide Torsteine(a)gmail.com

1 0

Sensor "friendly" name in alerts?
by Ryan, Spencer J. 18 Jun '20

18 Jun '20

We've got a generic alert set up for "status_event equals alert" however in the alert email there isn't anything that has the decoded/friendly text for the sensor in question. For example a UPS switches to battery power, the Entity is "Output Status" and the graph in the email shows the status going from "2" to "3" but that isn't useful. If I look at the device in the webUI it does show that "Output status" is "onBattery". It would be incredibly useful if that information was available in the alert. ________________________________ Spencer J. Ryan | Manager, Technology and Infrastructure Miller Canfield T +1.313.496.7979 ________________________________

1 0

Add/edit users menu returns main dashboard
by Chris Ajello 17 Jun '20

17 Jun '20

Hello everyone – I’ve got an issue where the web GUI returns the main dashboard whenever trying to open the add or edit user pages. Adding from the command line works. Just not the GUI. I don’t see any obvious errors in Apache logs or Observium logs. How do I get starting solving this problem? -Chris Ajello

1 0

CDP Neighbor detection for devices with names longer than 40 characters
by Pisano, Anthony D. 12 Jun '20

12 Jun '20

Hello, Due to campus naming conventions I have run into several switches with names longer than 40 characters. Normal operation and monitoring is not effected, however Observium does not recognize the neighbor. I believe this is due to it wanting an exact name match, and since the name in observium may be 42 characters, it does not match to the truncated 40 character CDP name. Is there a way we can either manually define a neighbor connection, or have the algorithms ignore any characters above the 40 limit? Perhaps by checking for IP address matching as well? Thank You Anthony Pisano | Network Design Engineer | IMSS anthony.pisano(a)caltech.edu<mailto:anthony.pisano@caltech.edu> | (626) 395-4255<tel:(626)%20395-4255> | Caltech | caltech.edu<http://caltech.edu/>

2 1

Windows Server - No Ram
by Stuart Dyer 11 Jun '20

11 Jun '20

Hi Everyone, Have a windows server that no longer has a memory graph, all I can see in the events is this, how can the memory get removed ? [cid:image001.png@01D63F30.4210B6A0] Regards, Stuart Dyer IT Administrator Phone: +61 2 8020 2063 | E-mail: stuart.dyer(a)innovit.com<mailto:stuart.dyer@innovit.com> [innovit-logo (002) trans 2018] Bringing quality to Master Data 161 Castlereagh Street, Level 28 Sydney NSW 2000 Australia<https://goo.gl/maps/DGW9Ce65rhP2> Tel: +612 8020 2000 Fax: +612 8020 2099 Web: www.innovit.com<http://www.innovit.com/> Australasia | North America | Europe Follow us on LinkedIn<https://www.linkedin.com/company/innovit-australia-pty-ltd?trk=public_profi…> This electronic mail is solely for the use of the addressee and may contain information, which is confidential or privileged. If you receive this electronic mail in error, please delete it from your system immediately and notify the sender by electronic mail or using any of the following contact details.

2 2

Issues with Vivotek Cameras
by Dana Bostic 10 Jun '20

10 Jun '20

When I add a Vivotek camera to Observium, works great for one, but when I try to add another one, the System name is the same (in this case h.264 mega-pixel network camera) and it will not add. The name of the device is different, what Observium "pulls in thru SNMP" is the same. Already got device with SNMP-read sysName (h.264 mega-pixel network camera) and 'snmpEngineID' = 80005BA9017F000001 (jq-office-lobby-cam01.bcp.cat.com). I see in JIRA that we are supposed to be able to add more devices with the same system name, but this is not working for the version I have of Observium 20.4.10371 (stable). It is my "belief" that Vivotek is reporting back it's system name to SNMP incorrectly. I do not really "care" if the System Name is wrong, but I cannot add another camera at all. This is what is in the camera configuration and I don't see any other location for a host name. [cid:image002.png@01D63DA5.852215B0] If I do an snmpwalk on the device: SNMPv2-MIB::sysName.0 = STRING: H.264 Mega-Pixel Network Camera Observium is pulling what the camera is giving .... So is there a way to change this in the database or a way to say add it anyway? Regards, [Telescope Separator] Dana Bostic Technology Specialist Caterpillar Inc. 954 NC 42 East, Clayton, NC 27527 email: bostic_dana_r(a)cat.com<mailto:bostic_dana_r@cat.com> | phone: 919-550-1260 Caterpillar: Confidential Green

4 5

Graphs and date preset
by Christian Eriksson 10 Jun '20

10 Jun '20

Hi, When selecting all devices and sorting by device-group (URL =/device/group), there is an option to select a specific graph and use a date preset. That is all great, but the value does not show When selecting the group using /group/group_id I can see the values, but can't use a date preset Does someone know how to get this working? The use case is that I want to easily see all values at once Vänliga hälsningar / Best regards, [Advania_Trappa_CMYK] Christian Eriksson Service Area Manager [cid:image003.png@01D62E93.89825AA0]<mailto:christian.eriksson@advania.com>[Advania-Bikupa Facebook]<https://www.facebook.com/advania.se/>[Advania-Bikupa LinkedIn]<https://www.linkedin.com/company/advania-ab/> +4641090488<tel:+4641090488> | +46761400400<tel:+46761400400> www.advania.se<http://www.advania.se/> | Liljeholmen<https://www.google.se/maps/place/Advania+Sverige+AB/@59.3062176,18.0278762,…> Ledande på att skapa kundnöjdhet [En bild som visar skärmbild Beskrivning genererad med hög exakthet]

2 4

Help creating an Alert Checker
by Pisano, Anthony D. 09 Jun '20

09 Jun '20

Hello, I am unable to figure out how to create an alert to notify me when our VPN boxes go into failover mode. Observium recognizes the event, but I would like a notification. The following output is from the poller. The normal condition value for “Failover Primary unit” should be ‘active’. o Status Count 2 +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+ | Descr | Type | Index | Origin | Value | Status | Last Changed | +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+ | Failover Primary unit | cisco-firewall-hardware-primary-state | 6 | snmp | standby | warning | 2020-06-07 07:30:03 | | Failover Secondary unit (this device) | cisco-firewall-hardware-secondary-state | 7 | snmp | active | warning | 2020-06-07 07:30:04 | +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+——————————+ I’ve tried several strings to make this work, but the Alerter either marks it as OK or does not show the above Statuses at all. * status_event equal warn * status_event ne ok * “Failover Primary unit” ne active * also without quotes and with underscores between * “Failover Primary unit” equal warn * also without quotes and with underscores between * cisco-firewall-hardware-primary-state equal warn * cisco-firewall-hardware-primary-state equal standby Could anyone assist me in creating this Alert Checker? Thank you Anthony Pisano | Network Design Engineer | IMSS anthony.pisano(a)caltech.edu<mailto:anthony.pisano@caltech.edu> | (626) 395-4255<tel:(626)%20395-4255> | Caltech | caltech.edu<http://caltech.edu/>

2 2

Observium behind azure app proxy
by Ahmed Rahal 09 Jun '20

09 Jun '20

Hi, I am using observium walled behind an azure application proxy. This mainly exposes an AD authenticated endpoint publicly and proxies all allowed users to the real host. This has been working fine with observium community edition. Now I am switching to the enterprise version of observium and get errors on the dashboard saying 'unauthenticated' for each widget. Note that some of the widgets randomly appear working, then become 'unauthenticated' on a refresh. Also, when on the 'broken' dashboard, refreshing the page sends back to the login page. I can switch back and forth between the 2 versions (community & enterprise, with same config.php) and the issue appears instantly with the enterprise version. How can I diagnose the issue ? Is there any hint on what is going wrong ? TIa, Ahmed. -- Ahmed Rahal Administrateur de Systèmes / Systems Administrator *Fibrenoire* - www.fibrenoire.ca A: 550 , avenue Beaumont, bureau 320, Montréal (Québec) H3N 1V1 arahal(a)fibrenoire.ca Twitter: @fibrenoire

2 7

Ubiquiti Solar Controller MIBs
by Chris Macneill 09 Jun '20

09 Jun '20

Hi, Please add the MIBs & OIDs for Ubiquiti's SunMax Solar Controller, they can be obtained at:- [ https://dl.ui.com/solar/mib/20191129/UBNT-MIB | https://dl.ui.com/solar/mib/20191129/UBNT-MIB ] [ https://dl.ui.com/solar/mib/20191129/UBNT-SUNMAX-MIB | https://dl.ui.com/solar/mib/20191129/UBNT-SUNMAX-MIB ] (needs updated base UBNT-MIB) Regards Chris Macneill Network Engineer / Software Developer / Accounts & General Dog's Body Zelan Ltd. Web: www.zelan.co.nz

2 1

Cannot add new device
by Tomasz Karczewski 04 Jun '20

04 Jun '20

Last time i wanted to add new device but i cannot. Before there was any problems. I tried usign GUI and ./add_device and nothing happens Add device is stucking in: Observium 20.6.10470 Add Device(s) Try to add 10.14.14.97: Trying v2c community *** [0] ... Ping and snmpwalk is working. Tomasz Karczewski Administrator Sieci tkarczewski(a)man.olsztyn.pl http://www.man.olsztyn.pl http://www.uwm.edu.pl tel. (89) 523 45 55 fax. (89) 523 43 47 Ośrodek Eksploatacji i Zarządzania Miejską Siecią Komputerową OLMAN w Olsztynie Uniwersytet Warmińsko-Mazurski w Olsztynie

2 1

Observium Feature Request - Summarizations for Alert Emails
by Pisano, Anthony D. 02 Jun '20

02 Jun '20

Hello, I would like to make a feature request for alerts. Over the weekend a significant portion of campus lost power, generating an overwhelming flood of device down email notifications. Would it be possible add an option to hold off sending notifications until the current Alerting process has run, and then send a digest or summary of all devices sending alerts? Thanks Anthony Pisano | Network Design Engineer | IMSS anthony.pisano(a)caltech.edu<mailto:anthony.pisano@caltech.edu> | (626) 395-4255<tel:(626)%20395-4255> | Caltech | caltech.edu<http://caltech.edu>

3 2