- observium - lists.observium.org

Ping-only devices
by Ryan Huff 03 Mar '19

03 Mar '19

I really do understand this, on a deeper level than might be imagined ;). I have no vested interest either way personally, I’m just offering some unsolicited thoughts... I always looked at the “ping only” topic like asking a 10lbs. (4.5kg or 0.7149 stones) sledge hammer to drive a nail. Sure, it can do it but it’ll probably be messy and ugly because a sledge hammer was never meant to drive nails, and when you use tools in ways they weren’t really designed for, things can get messy. Just use a hammer instead. I have done three things to achieve icmp only monitoring and also stick within the base code (as a developer, I hate mucking with base code or re-inventing wheels when I want to do different things). Icmp-only monitoring to me, always just seemed silly (not in purpose) to try and work into an existing and established application that didn’t already do it. It’s just too easy of a problem to solve otherwise, than to go to the time/expense of refactoring an application IMHO. - I use RTT SLAs to monitor next hop devices (which OBS is fabulous at picking up), assuming the device hopped from is SLA capable and OBS monitored. - I use Fping (Smokeping) integrated with OBS. Using the Smokeping web wrapper makes a great RTT only tool, and you also have the OBS integration for when it makes sense to use on OBS devices. - I have a small (very small) bash script that reads a text file of IP address and launches one thread per device to run continuous pings. Not a very scalable script, but like you, I only need it for a very few limited cases. The script uses sendmail to email me if it can’t reach something. Thanks, Ryan

1 0

2nd TRY | Generating alerts with firewall sessions thresholds
by Gordon Cheng (gocheng) 01 Mar '19

01 Mar '19

Hi all, We are looking for a way to generate alerts from Observium (19.1.9661) when exceeding certain number of sessions on a Cisco firewall. Is it something easily achievable? [cid:image001.png@01D4CEE1.B8160000] Thanks. - Gordon

2 3

Cisco ASA IPSec tunnels
by Johnathon Voegeli 01 Mar '19

01 Mar '19

Hey guys, Does anyone know where to set the “tunnel name” in a Cisco ASA or more rather where Observium gets that info? I have a dozen or so IPSec tunnels built, but Obs calls them all by the outside interface IP I suspect because I am too dense to figure out where its getting the tunnel name field from? [cid:image001.png@01D4D02B.AA8D38E0] The local address and the tunnel name are all the same.

1 0

Change Device Name Without having to Re-Add Device.
by Connary, Scott 01 Mar '19

01 Mar '19

Is there a way to change the name of a device without having to remove and re-add? E.G. Workstation01 Workstation02.contoso.com Change workstation01 to workstation01.contoso.com Thank you in advance for any help with this. -Scott

2 1

Empty alert log
by Laszlo Nemeth 27 Feb '19

27 Feb '19

Hello I upgraded from 9667 to 9725 and the alert log page is empty. Before the upgrade there were lot of logs, but now it looks like a not fully rendered page.. The syslog alert shows me logs and the bottom of the page the observium logo and the version number. The alert logs doesn't show this bottom line, just give me an FROM and TO field with a Search button and that is all. Can i check anything for the debug? Thanks Laszlo

2 2

Monitor Furukawa
by hermes.martinez＠pueblobonito.com.mx 27 Feb '19

27 Feb '19

Hi Everybody, Can someone help me, I'm Trying to monitor some devices Furukawa but Observium doesn't show me too much information.. Does anyone have some MIBs that can help me to get more information from the diveces? Regards,

3 2

Create a new dashboard
by Steve 27 Feb '19

27 Feb '19

Hi, I'm having issues with "create new dashboard" function in observium (19.1.9661). When I select it from the menu it redirects me to url https://MYOBSERVIUMURL/dashboard_add/ but the dashboard remains the default one. I don't get how can I create a new one, can someone explain this to me? Thank you Stefano

4 10

Generating alerts with firewall sessions thresholds
by Gordon Cheng (gocheng) 27 Feb '19

27 Feb '19

Hi all, We are looking for a way to generate alerts from Observium (19.1.9661) when exceeding certain number of sessions on a Cisco firewall. Is it something easily achievable? [cid:image001.png@01D4CE0A.4A9F84B0] Thanks. - Gordon

1 0

New webhook integration for alert contacts
by Ryan Huff 26 Feb '19

26 Feb '19

Hey folks, thought I'd share with the community as I recently had a need that I had to build the tool for and thought others might benefit too: https://github.com/ryanthuff/Observium_Webex_Notifier Its a script an OBS webhook contact can post to, and then post those alert details to a Cisco Webex Teams space. The instructions are pretty clear and found in the README.md. I just run the script on-box in the OBS web path (.../html/...) somewhere, then just use that URL for the OBS contact Webhook. I have been using for awhile and it works really well thus far. Thanks, Ryan Huff, CCDP, CCNP Cisco Certified Network and Design Professional

2 2

IP SLA SNMP OID
by Jason La 26 Feb '19

26 Feb '19

Hi, IP SLA monitoring is awesome from Observium. Can you please let me know what OID you’re using to achieve such a great stat/result? Thank you Jason La | Lead Systems Engineer, Portware Infrastructure Portware, A FactSet Company (212) 370 8353

2 1

Session lifetime
by Ricardo Franco Cantero 26 Feb '19

26 Feb '19

Hi, I still keep getting logged out even though Global Settings --> Authentication --> Session Lifetime --> 1 Week, Until browser restarts, it doesn't matter. After 30 minutes I get logged out. Kinda frustrating since we can't use Observium at fullest now. Any advice would be welcome with this. We already rebooted the system several times but no help. Kind regards Ricardo Franco Cantero

2 2

Contact alert webhook json payload
by Ryan Huff 26 Feb '19

26 Feb '19

What I am looking to do, is when an alert notifies my webhook contact, be able to have it also grab the message_graphs blob (if one exists for the notification), so that my custom coded contact also has the graph that caused the alert, along with the alert details; thinking of jitter and RTT SLAs as the use case... So far I have worked out that the alert makes the post call to the notification queue, and the notification queue posts to the contact webhook. In the JSON payload posted to the contact, I don’t see a way to accurately identify which row I would need to select in the notification queue, to grab the message_graphs blob. There is a alert_table_id, but the message_graphs are in the notifications_queue, and since there isn’t a FK relationship between the two tables, not sure if I could accurately identify the right row in notifications_queue. Anyone ever try something like this and/or have advice? Am I overthinking this and rather than grab the blob, is a way to just remake the graph on the fly using the alert details that are posted to the contact webhook? Thanks for any of your thoughts... -Ryan

1 0

Weathermap not drawing png files
by Tomasz Karczewski 25 Feb '19

25 Feb '19

I added weathermap to observium from https://github.com/akender/weathermap-for-observium Configured as described but after map creation i doesn’t creat .png files. /usr/bin/php /opt/observium/html/weathermap/map-poller.php -d shows PHP Fatal error: Uncaught Error: Call to undefined function check_extension_exists() in /opt/observium/includes/definitions.inc.php:141 Stack trace: #0 /opt/observium/html/weathermap/map-poller.php(55): include() #1 {main} thrown in /opt/observium/includes/definitions.inc.php on line 141 My php version is PHP 7.0.33 Did you have similiar problems? Tomasz Karczewski Administrator Sieci <mailto:tkarczewski@man.olsztyn.pl> tkarczewski(a)man.olsztyn.pl <http://www.man.olsztyn.pl> http://www.man.olsztyn.pl <http://www.uwm.edu.pl> http://www.uwm.edu.pl tel. (89) 523 45 55 fax. (89) 523 43 47 Ośrodek Eksploatacji i Zarządzania Miejską Siecią Komputerową OLMAN w Olsztynie Uniwersytet Warmińsko-Mazurski w Olsztynie

6 8

NTP MIB Question
by Ryan Huff 25 Feb '19

25 Feb '19

I see OBS has a Cisco NTP MIB.. when I add Cisco devices (like a router for example), that is also running NTP services (ntp server... etc), I don’t see where OBS is showing the information for the device. When I look at the MIBs under device properties, it doesn’t appear to be there, though the MIB is in the /opt/Observium/mib/cisco folder.... Anyone know if there is anything special you have to do to get these MIBs working? Thanks, Ryan Sent from my iPhone

2 1

SNMP hardware detection bugged
by Peter Watts 24 Feb '19

24 Feb '19

We have a few hundred Cisco 880 series routers (approximately four different variants). Since ~4 days ago, they're all getting reported as the same hardware now - C887VA-K9 Here's an example - actually is a CISCO887VA-K9 - from poller.php 19.2.9721: ##### Module Start: os ##### o OS Poller Group o Vendor Cisco o Hardware C887VA-K9 o Version 15.3(3)M9 o Features UNIVERSALK9 o Serial FGL1811239Z o Asset <empty> >From snmpget: (entPhysicalDescr) iso.3.6.1.2.1.47.1.1.1.1.2.1 = STRING: "887VA chassis, Hw Serial#: FGL1811239Z, Hw Revision: 1.0" (entPhysicalContainedIn) iso.3.6.1.2.1.47.1.1.1.1.4.1 = INTEGER: 0 (entPhysicalName) iso.3.6.1.2.1.47.1.1.1.1.7.1 = STRING: "887VA" (entPhysicalSoftwareRev) iso.3.6.1.2.1.47.1.1.1.1.10.1 = STRING: "15.3(3)M9, RELEASE SOFTWARE (fc2)" (entPhysicalSerialNum) iso.3.6.1.2.1.47.1.1.1.1.11.1 = STRING: " FGL1811239Z" (entPhysicalModelName) iso.3.6.1.2.1.47.1.1.1.1.13.1 = STRING: "CISCO887VA-K9" In the device logs: 2019-02-18 08:46:04 aus0264-r1 Hardware changed: 'CISCO887VA-K9' -> 'C887VA-K9' EB Games | ZiNG Pop Culture | Peter Watts | Infrastructure Supervisor | Australia & New Zealand | Peter.Watts(a)ebgames.com<mailto:Peter.Watts@ebgames.com> | +61 7 3860 7757 | 0438 636 110

2 5

unsubscribe
by Michael Medwid 24 Feb '19

24 Feb '19

unsubscribe On Sun, Feb 24, 2019 at 4:00 AM <observium-request(a)observium.org> wrote: > Send observium mailing list submissions to > observium(a)observium.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > or, via email, send a message with subject or body 'help' to > observium-request(a)observium.org > > You can reach the person managing the list at > observium-owner(a)observium.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of observium digest..." > > > Today's Topics: > > 1. OBS Integration with NFSen (Ryan Huff) > 2. Re: OBS Integration with NFSen (xomka686) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 23 Feb 2019 22:04:41 +0000 > From: Ryan Huff <ryanhuff(a)outlook.com> > To: Observium <observium(a)observium.org> > Subject: [Observium] OBS Integration with NFSen > Message-ID: > < > BN6PR08MB27246F6A4F24A7417CD360A8C5780(a)BN6PR08MB2724.namprd08.prod.outlook.com > > > > Content-Type: text/plain; charset="iso-8859-1" > > I -think-, I have NFSen integration with OBS working correctly, but I'm > not clear on where I can see the flow graphs in OBS. I assume under the > Graphs tab on the device page? > > Thanks, > > Ryan Huff, CCDP, CCNP > Cisco Certified Network and Design Professional >

2 1

PHP Weathermap security issue.
by Hamilton, Kent 22 Feb '19

22 Feb '19

Has anyone solved the security issue with PHP Weathermap such that it honors observium permissions? Currently if you are using weathermap anyone can reach your maps without a password if they know the standard URL for the weathermaps. This is an issue for us as we allow external access to our observium server, but have to block the weathermaps using .htaccess files. ________________________________ This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

2 1

Alerts Not Sending to Contacts
by Alex 22 Feb '19

22 Feb '19

Good Morning Adam, I recently raised a ticket in jira OBS-2905. I have an instance of Observium running 19.1.9661 and have enabled alerting for a memory check at 70% for one of our hosts. This alert message works as expected on the web interface, the issue is that it is not sending the alert to the contacts (both slack and email). When tested with the test_alert.php script the emails send correctly this leads me to believe that the configuration of the email is not the issue. Do you have any other suggestions as to what I can test to make the alerts send to my contacts correctly when they are naturally generated? Kind Regards, Alex

3 3

Aggregate graphs
by Christian Eriksson 22 Feb '19

22 Feb '19

Hi, Is it possible to aggregate grahps from a selected graph, eg. firewall sessions within a device group? I have made one for all our Cisco security contexts and want to see total sessions at once See attachment Best regards Christian

3 6

Renamed interface - how to keep unified history?
by Adam Thompson 21 Feb '19

21 Feb '19

I made a change on one of our routers that caused a new ifIndex & name to be assigned to a customer circuit (interface). Observium is correctly reporting the data on the old virtual i/f (which still technically exists) and – naturally – separately on the new virtual i/f. Is there any way to (retroactively???) tell Observium that these are really the same interface, and to display only one graph for the two ifIndexes? Or, if I correct the situation so the old ifIndex & name is being showing traffic again, is there any way to move, or inject, the collected data on the ‘new’ port into the ‘old’ port’s RRDs? (i.e. avoid a multi-day gap in a multi-year dataset) We are reasonably up-to-date, running 19.2.9712 – not sure what other info will be helpful here. Thanks, -Adam Adam Thompson Consultant, Infrastructure Services [merlin-email-logo] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

3 5

Alert Checker Question
by Ryan Huff 20 Feb '19

20 Feb '19

I have an alert checker called, "device down" and it tests for "device_status = 0". Occasionally, this alert will fire, but the underlying OS still has network connectivity to these device (ICMP). What this tells me, is that the underlying SNMP daemon on the server may be malfunctioning, because if OBS can't make and SNMP poll to a device, it makes sense to me that it would think the device_status = 0 for that device. So given that this doesn't seem to be an OBS issue, is it something others have encountered and found away around? I'm Ubuntu 18.04 here... just wondering if I need to throttle the poller or if there are other known way the community has addressed this? Thanks, Ryan

2 2

L2/L3VPN issues with Juniper MIBs
by Luis Balbinot 19 Feb '19

19 Feb '19

Hi. This has been bothering me for some time but I've only got the time to look at it now. When we list Ports for any given Juniper device we get a nice green label right below the speed/MTU/lag column with the name of the VRF when it's an L3VPN. Why not the same for L2VPNs? That would be nice, specially if the RT is encoded in the name (makes tracking issues easier). Second, on the righthand side of the Ports table there's an unnamed column right next to the MAC Address with some information regarding the interfaces, LAG membership, etc. There's a xconnect icon that is supposed to show the remote interface and device for L2VPNs, but that's completely messed up (see image attached). Are you aware of that? Can that be fixed? The device is correct, but the interface isn't. The same goes for L3VPN. The interfaces shown on that right column are not endpoints of the same VPN and even the devices are wrong. I'd love to help on that. Just checking ahead to see if there's anything stopping you from fixing it at MIB level or something. Thanks! Luis

1 0

Session lifetime
by Ricardo Franco Cantero 18 Feb '19

18 Feb '19

Hi, We just upgraded our Observium and (perhaps it's already mentioned but the archive doesn't work) since the upgrade we keep being logged out every 30 minutes or so. We have it running on a large screen but every 30 minutes (it looks like 30 minutes, haven't timed it) it need to enter my credentials again to log in. I know I can check the box Remember my Credentials but that's not what I'm asking. I want it to keep the session alive longer like it did. Kind regards, Ricardo Franco Cantero

6 10

IPv6 privacy addresses vs IP Session binding
by Darrell Budic 18 Feb '19

18 Feb '19

Pretty obvious when I figured out what was happening, IPv6 privacy addresses aren’t really compatible with IP Session binding. As I discovered and was driven nuts by for a day or two after my ISP added v6 :) If you’re using v6 and seeing rapid session expiry, try disabling IP Session binding. Consider this a RFE for IP Session binding on IPv4 addresses only. Maybe a second request for a loose form of IPv6 session binding to within the same network range (either /64 or user configurable?) to allow some restrictions on it? Not sure how feasible that would be, but it sounds like it could give us some reasonable v6 protections. Thanks for reading, -Darrell

1 0

Custom Widgets
by Mirditor Kuçaj 18 Feb '19

18 Feb '19

Hello I am searching for a way to customize the widgets. With the old dashboard it was easy with the frontpage filters. With the new one I cant EDIT the SYSLOG Widget for displaying only desired severity and any Filter (Only in widget, not in global config) And the device status boxes doesnt display more than 10 boxes even if I has a lot of dashboard space. Displays a unclickable XX more Is there any documentation where can I edit them. I am running Observium 19.1.9661 Regards Mirditor Kuçaj Backbone Network Director <mailto:miri@abissnet.al> miri(a)abissnet.al Abissnet Sh.a. +355 69 60 91 364 +355 (0)44 300 003 Ext 139 Rr. Ismail Qemali, Pallati Abissnet, Tiranë <http://www.abissnet.al/> www.abissnet.al <https://www.facebook.com/Abissnet> <https://plus.google.com/u/0/+AbissnetalISP> <https://www.linkedin.com/profile/view?id=AAIAABqLWRAB88ljU6t8b67oVm8PAlvPrh mPybE&trk=nav_responsive_tab_profile%20>

1 0