- observium - lists.observium.org

Re: [Observium] Sudden loss of history
by Adam Armstrong 12 Jan '14

12 Jan '14

3 3

Sudden loss of history
by Robert Williams 12 Jan '14

12 Jan '14

Hi Guys, At midnight last night during the normal scheduled re-discovery we appear to have lost all historic data for all ports on a large number of our switches. I’m still checking them all but it appears to have affected all Cisco 2960G units (24 or 48 port). Data collection is working fine, but all history has gone, including all CPU, RAM, temperatures, fans, RPS Power etc. [cid:image001.png@01CF0F7A.BD8E4C80] There are no Eventlog entries for the devices for the last 24 hours, but there are some from a couple of days ago which read like this: [cid:image002.png@01CF0F7B.7D5A55E0] However, as I mentioned these events are from the 9th so a few days ago. Any ideas please? I can restore the RRDs from backup but I’d like to know why it’s done this otherwise I’ll just be restoring them again tomorrow morning ☺ Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

2 2

Device rebooted false alarm notification
by Jerico Rubion 09 Jan '14

09 Jan '14

Hi, I'm receiving a false alarm notification about a device which rebooted where in fact the device did not actually reboot. Do we have observium logs where i can look more about the details? or is there a work around to prevent such occurrences? /Notification that i received:// / Observium :: Network Observation and Monitoring Device Rebooted : lnx-svr004.27th.orient.77globalservices.com 82 days, 1h 44m 40s ago. E-mail sent to: xxx(a)xxx.xxx E-mail sent at: 2014-01-07 04:43:44 / From Server:/ [root@LNX-SVR004 ~]# uptime 07:29:05 up 994 days, 7:40, 1 user, load average: 0.15, 0.11, 0.07 Best Regards, Echo

5 6

Enterasys Poller
by Corey Eichelberger 09 Jan '14

09 Jan '14

Hello, I am working on evaluating Observium as a Cacti replacement for monitoring network devices and servers at my university. So far I have Observium working with all of our Cisco and Juniper gear as well as a few of the Linux boxes that I manage but seem to be having issues with getting everything working nicely with our Enterasys gear. Let me preface the below with stating that this project is absolutely wonderful and if I can get our Enterasys devices to play nicely we will be upgrading to the paid version. I understand that Enterasys is not officially supported so I have begun diving into the code base to see what needs to be done to write the poller modules myself. Does any one on the list have the ports poller fully working with an Enterasys device? Now, one of the things that I noticed with the Enterasys gear is that the ports poller module will continue running the snmpbulkwalk for the dot1qVlanCurrentEgressPorts mib until the user finally kills the poller. This appears to be an issue with the number of repetitions as the poller will continue walking the table for over an hour. I have the following line in my config.php which should limit the repetitions. $config['snmp']['max-rep'] = TRUE; -- Thanks, Corey Eichelberger

1 0

Question re: failing discovery of a device
by Chris Moody 09 Jan '14

09 Jan '14

Hello. Running Observium CE 0.13.10.4586. I've run into a strange situation with a single device that I am unable to discover and get added into observium's inventory. The device is an F5 Load-balancer. I have 51 other F5's all working beautifully, yet this one seems to be giving me grief for some reason when I try to discover it. I am able to ping and snmpwalk the device beautifully from the observium server, yet every attempt to run add_device.php returns with the following: ========= root@observium:~# ./add_device.php lb1-prod-c-qcy examplecommunitystring v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Observium v0.13.10.4586 Add Device USAGE: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] add_device.php <hostname> [any|nanp|anp|ap] [v3] [user] [password] [enckey] [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] EXAMPLE: SNMPv1/2c: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] SNMPv3 : Defaults : add_device.php <hostname> any v3 [user] [port] [udp|udp6|tcp|tcp6] No Auth, No Priv : add_device.php <hostname> nanp v3 [user] [port] [udp|udp6|tcp|tcp6] Auth, No Priv : add_device.php <hostname> anp v3 <user> <password> [md5|sha] [port] [udp|udp6|tcp|tcp6] Auth, Priv : add_device.php <hostname> ap v3 <user> <password> <enckey> [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] ========= yet, as you can see, when I snmpwalk this device, I get responses back just fine. ========= root@observium:~# snmpwalk -v2c -c examplecommunitystring lb1-prod-c-qcy | head SNMPv2-MIB::sysDescr.0 = STRING: Linux lb1-prod-c-qcy 2.6.18-164.11.1.el5.1.0.f5app #1 SMP Mon Mar 5 12:40:48 PST 2012 x86_64 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (3523019831) 407 days, 18:09:58.31 SNMPv2-MIB::sysContact.0 = STRING: NOC SNMPv2-MIB::sysName.0 = STRING: lb1-prod-c-qcy SNMPv2-MIB::sysLocation.0 = STRING: QDC-C SNMPv2-MIB::sysServices.0 = INTEGER: 78 SNMPv2-MIB::sysORLastChange.0 = Timeticks: (2) 0:00:00.02 SNMPv2-MIB::sysORID.1 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance SNMPv2-MIB::sysORID.2 = OID: SNMP-MPD-MIB::snmpMPDCompliance SNMPv2-MIB::sysORID.3 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance ... ========= I've tried the discovery via v1 as well as v2c, no difference. Every time I try a walk, I get results back consistently...so it's not like I'm seeing intermittent responses or anything. I was able to get it to finally discover when I specified the port & transport fields to add_device.php. Any thoughts as to what might be failing or not satisfying the add_device.php utility that it would flag this host as not replying? Why would port/transport being specified make a difference if it's still just standard 161/udp? Any hints or suggestions are appreciated. Cheers, -Chris

1 0

Re: [Observium] Alerting system: multiple associations
by Stefano Cordio 08 Jan '14

08 Jan '14

Bump :-) From: Stefano Cordio [mailto:stefano.cordio@gmail.com] Sent: martedì 24 dicembre 2013 11:42 To: 'Observium Network Observation System' Subject: [Observium] Alerting system: multiple associations Hey guys, I have the following alert checker: As you can see, the checker is applied only to server devices but Id like to extend that to storage devices. Is there a simple way to modify the device match rule in something like type equals (server or storage)? I tried searching any suggestion on the wiki and on the mail archive, but I didnt find anything. Thanks for any hints, Stefano

2 1

Need help getting the new alert system to send mail
by Thomas Raabo - Zitcom A/S 08 Jan '14

08 Jan '14

What i did ☺ //Alert $config['alerts']['alerter']['default']['descr'] = "Observium Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contact'] = "tr(a)zitcom.dk"; $config['alerts']['alerter']['default']['enable'] = TRUE; No emails are send on alerts So I tried to change the email backend $config['email_backend'] = 'sendmail'; That did not help. So I did a test to check the php mail module. <?php $to = "tr(a)zitcom.dk"; $subject = "Test mail"; $message = "Hello! This is a simple email message."; $from = "test(a)mgmt3.network.zitcom.dk"; $headers = "From:" . $from; mail($to,$subject,$message,$headers); echo "Mail Sent."; ?> And that worked fine. What is the problem? I have an alert in Observium ☺ [cid:image001.png@01CF07BB.018EAC80] Med venlig hilsen | Best regards Thomas Raabo Netværksansvarlig CCIE #33466 Zitcom A/S Telefon: 70 40 00 00 E-mail: kontakt(a)zitcom.dk<mailto:kontakt@zitcom.dk> Direkte: 69 10 60 18 Direkte: tr(a)zitcom.dk<mailto:tr@zitcom.dk> [cid:image005.jpg@01CEDC86.E897E480]<http://www.zitcom.dk/>

3 2

Cisco Small Business series
by support nuckleo 08 Jan '14

08 Jan '14

Hello everybody I would like to share a small workaround in order to monitoring the cisco Small business series sg 200/300 in the right way I have add some mibs in the /opt/observium/includes/defaults.inc.php $config['mibs']['CISCOSB-MIB'] = 1;$config['mibs']['CISCOSB-CPU-COUNTERS-MIB'] = 1; $config['mibs']['CISCOSB-JUMBOFRAMES-MIB'] = 1; $config['mibs']['CISCOSB-vlan-MIB'] = 1; $config['mibs']['CISCOSB-vlanVoice-MIB'] = 1; $config['mibs']['CISCOSB-SMON-MIB'] = 1; Detect your sysdescr sysDescr in this way: snmpwalk -c public -v2c device sysDescr and after I made some changes mapping the sysDescr on the right os so in /opt/observium/includes/discovery/os/cisco.inc.php add else if (strstr($sysDescr, "50-Port Gigabit Smart Switch")) { $os = "ciscosb"; } else if (strstr($sysDescr, "SG200-50P 50-Port Gigabit PoE Smart Switch")) { $os = "ciscosb"; } Then if you have just discoverd, delete your cisco small business devices and rediscovery the devices again. Thats all! Francesco Pansini _____________________________________________________________________ NUCKLEO Information Technology Solutions Support & Delivery Team http://www.nuckleo.com (website) Twitter:@Nuckleo _____________________________________________________________________

4 3

syslog message cisco filtering
by Rory Schramm 08 Jan '14

08 Jan '14

Hi, I have syslog setup in observium with a cisco 1841. However, I'm trying to get it to process nat messages but they arn't showing up correctly. I'm using syslog-ng for syslog. ie 192.168.2.1||local2||info||info||96||2013-12-31 00:53:15||5d00h: %IPNAT-6-DELETED: tcp 10.10.10.118:62249 192.168.12.1:62249 192.168.33.30:80192.168.33.30:80 ||99 gets truncated too 2013-12-31 00:53:15(info)*62249 192.168.12.1:62249 <http://192.168.12.1:62249> 192.168* : This only happens for the nat messages. ie 192.168.2.1||local2||notice||notice||95||2013-12-31 01:13:05||5d01h: %SYS-5-CONFIG_I: Configured from console by console||100 shows up as 2013-12-31 01:13:05(notice)*SYS-5-CONFIG_I* : Configured from console by console The raw nat syslog messages look like the following (aka not filtered by syslog-ng for observium): Dec 31 01:16:59 192.168.2.1 101: 5d01h: %IPNAT-6-CREATED: tcp 10.10.10.118:62713 192.168.12.1:62713 192.168.33.30:80 192.168.33.30:80 config settings: syslog-ng.conf options { chain_hostnames(0); time_reopen(10); time_reap(360); #sync(0); log_fifo_size(2048); create_dirs(yes); #owner(root); group(adm); perm(0640); #dir_owner(root); #dir_group(root); dir_perm(0755); use_dns(no); #dns_cache(yes); #log_msg_size(2048); stats_freq(0); bad_hostname("^gconfd$"); }; source s_net { udp (); }; destination df_router { file("/var/log/router" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); }; destination d_observium { program("/opt/observium/syslog.php" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); }; log { source(s_net); filter(router_f); destination(df_router); }; filter router_f {host(192.168.2.1); }; observium.conf: $config['enable_syslog'] = 1; Kind Regards, Rory

3 3

December 2013 Changelog
by Adam Armstrong 08 Jan '14

08 Jan '14

Hi All, Compiled changelog for December 2013 is at http://www.observium.org/wiki/Changelog#December_2013 Thanks, adam.

1 0