- observium - lists.observium.org

Re: [Observium] Attach the 'Email Contact' to the alert
by Moerman, Maarten 24 Jan '14

24 Jan '14

I’ve already added a Jira/feature request for that some time ago: http://jira.observium.org/browse/OBSERVIUM-635 Would it work what’s described there? Maarten -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com From: "BERTRAND Adrien [BPCE Assurances]" <adrien.bertrand(a)assurances.bpce.fr<mailto:adrien.bertrand@assurances.bpce.fr>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Friday, January 24, 2014 at 9:24 AM To: "observium(a)observium.org<mailto:observium@observium.org>" <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Attach the 'Email Contact' to the alert Hi Observiumers ! Is it possible to specify the email contact for each “alert checker” without setting it on the sysContact of all the devices ? It’s to send emails for different recipients that are related to the alerts and not the devices :-) PS: I’m running the latest version of Observium (susbscription edition) Sincerely, Adrien BERTRAND Administrateur Sécurité du Système d'Information Information security administrator BPCE Assurances 88 av. de France, 75013 Paris Tel : (+33)1.42.79.47.81 [Description : Q_BPCE_Assurances.jpg]

1 0

Custom Fields
by Christopher Murrell 24 Jan '14

24 Jan '14

Hello, We are very very interested in Observium to use as our Monitoring system, but we would like to have some custom fields on the device information. We would be willing to donate a nice amount to you guys as well if we can have this done as a custom feature for us. If you guys could do this please send me an email. Also do you have an ETA when the full alert system will be working? *Christopher* Murrell Hypernia Corporation *Email:* christopher(a)staff.hypernia.com *Desk: *(+44) (0) 1722 568687 <04401722658687> *Cell Phone:* (+44) (0) 7761636028 <0447761636028> [image: http://hypernia.com/images/signature/skype.png]chrisjmuk [image: http://hypernia.com/images/signature/home.jpg]www.hypernia.com [image: http://hypernia.com/images/signature/hypernia-superpod.jpg] *Confidentiality Note:* The information contained in this transmission is legally privileged and confidential, intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. Thank you!

1 0

Graphics
by Maxence Maireaux 24 Jan '14

24 Jan '14

Hello, I can not seem to generate graphics on Observium. The graphics are present but there is no curve above, you have a solution? I try on the local server and a remote server. I put some image illustrated my point. Thank you for your help. Regards, Maxence -- ------------- Cordialement, Maxence Maireaux

1 0

Alerts
by JD 24 Jan '14

24 Jan '14

I am Looking for some Guidance on setting up alerts I am not getting alerts to my email which is a google apps account Current config // Set up a default alerter (email to a single address) $config['alerts']['alerter']['default']['descr'] = "Default Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contact'] = "jd(a)remote.com"; $config['alerts']['alerter']['default']['enable'] = TRUE; $config['alerts']['email']['default'] = "jd(a)remote.com<mailto:jd@remote.com >"; $config['email_from'] = "Observium <alerts(a)local.com<mailto:alerts@local.com >>"; $config['email_backend'] = "smtp"; $config['email_backend'] = "sendmail"; $config['email_smtp_host'] = 'localhost'; $config['email_smtp_port'] = 25; $config['alerts']['email']['enable'] = TRUE; $config['alerts']['port']['ifdown'] = TRUE; // Port Bandwith $config['alerts']['port_util_alert'] = TRUE; $config['alerts']['port_util_perc'] = 85; -- JD

2 1

Alerting Question
by Chip Pleasants 23 Jan '14

23 Jan '14

I'm getting emails and not sure if its my alarm settings or something else is Here's the email contents. Maybe someone good verify my setting for this alarm are correct? ALERT Modify Alert Processor Usage Greater Than 80% Entity Processor 1 Conditions processor_usage gt 80% (9) Metrics processor_usage = 9 Duration 18h 36m 21s Device Device cisco.switch.net Hardware catalyst3560G48PS Operating System Cisco IOS 12.2(55)SE5 IPBASEK9 Location DC Uptime 113 days, 11h 2m 20s

2 3

Error in install
by Maxence Maireaux 23 Jan '14

23 Jan '14

Hello, I can not ainstaller Observium, I receive the following error: php includes/update/update.php PHP Fatal error: Class 'Console_Color2' not found in /home/observium/includes/common.php on line 386 Grieve for my very bad english, I'm french. -- ------------- Cordialement, Maxence Maireaux

2 2

Remove Geofoo from Observium using Strings
by henrik hansen 22 Jan '14

22 Jan '14

Hello guys, at the moment we are not a subscribed customer, so maybe this mail is obsolet. We would love to have a feature to remove GeoLocation thing unter Devices-> Locations. In our environment the snmp location is filled with some kind of customer ID. Like: U100432. It would be great if observium could only group our switches by the customer id in the snmp location field. Thanks for your great work. Henrik

3 3

FOSDEM meetup?
by Tom Laermans 21 Jan '14

21 Jan '14

Hi guys, FOSDEM, Europe's largest (I think?) open source meetup is coming up in a few weeks (1-2 feb). I'll be there on saturday, so in case there's anyone also going there who wants to meet up/catch up/buy me a sandwich ;> /have a chat/... by all means let's do that then. I'm not Adam, so please leave the tar and feathers at home - We'll make sure to get him here next year, with a big "FUCK GPL" t-shirt, and put him on stage vs RMS though. ;-) Tom

2 1

Traffic Bills Oddity
by Matt Martin 21 Jan '14

21 Jan '14

We're using the traffic bills module and are a "paid" customer. However, sometime in October, customers that we bill for usage over a wireless link (using UBNT kit), only show 0.00. Traffic can still be seen on the port on the traffic bills screen, but collection of the data seems stuck. There are multiple customers per UBNT node and they are all seeing the same issue. Traffic bills on switches and routers appear fine however. Any idea where to start on trying to fix, or diagnose this. Matt

2 2

Port Properties Alert Question and Odd Behavior
by Chip Pleasants 21 Jan '14

21 Jan '14

Is there a way to see all Ports that have been disabled for altering? I enabled email alerts in config.php for port percentage, but seeing some odd behavior with the percentage portion with the physical interfaces inside a etherchannel interface. Below are a couple emails I received. The bandwidth mentioned in the email is more than the physical interface. Is there another option I need to turn on or off to account for this behavior? Any suggestions are appreciated. This physical interface didn't go over 444M. The port channel have 8 physical link in it. Port saturation threshold alarm: cisco.switch.com on GigabitEthernet3/1 Rates:1.63Gbps/11.6kbps(163/0) >85% of 1Gbps Another email This physical interface hit a 1G. The port channel has 2 physical links in it. Port saturation threshold alarm: cisco.switch.com on GigabitEthernet2/25 Rates:147Mbps/6.62Gbps(15/662) >85% of 1Gbps added to config.php $config['alerts']['port_util_alert'] = TRUE; $config['alerts']['port_util_perc'] = 85; Thanks, Chip

2 8

Mail alert and \n that should not be here.
by Xavier Beaudouin 20 Jan '14

20 Jan '14

Hi there, Using alert on Observium Community (will try to ask for a fund for my work to help the project), I realize there is some strange thing in the mails sent by observium.. Seems there is a \n\n on the headers that brake the mail format. Looking at the code, I didn't saw where it was, and I wish to share if some people here has same issues. Header extract (old alerting stuff) : ---//--- Subject: Temperature Alarm: amazon CPU Temperature X-Priority: 3 Message-Id: <20140120070238.662C8180184CC(a)observium.censored> Date: Mon, 20 Jan 2014 08:02:38 +0100 (CET) To: undisclosed-recipients: ; X-Zimbra-DL: sadm@censored Reply-To: "sadm@censored" <sadm@censored> Message-ID: <213ce88117d32aaeeb4296589d88c8f4@observium> Date: Mon, 20 Jan 2014 08:02:38 +0100 Observium :: Network Observation and Monitoring Temperature Alarm: amazon CPU Temperature is over threshold: 61C (> 60C) ---//--- Header extract (new alerting system) : ---//--- From: "Observium " <sysadmin@censored> Subject: RECOVER: [esx4] [storage] [] Disk space is more than 80 percent used. Please do something X-Priority: 3 Message-Id: <20140120071634.DA1F0180184CC(a)observium.consored> Date: Mon, 20 Jan 2014 08:16:34 +0100 (CET) To: undisclosed-recipients: ; X-Zimbra-DL: sadm@censored Reply-To: "sadm@censored" <sadm@censored> Content-type: text/html Message-ID: <cf3e1676772a4b83c02777f1dedfb49b@observium> Date: Mon, 20 Jan 2014 08:16:34 +0100 ---//--- Seems there is an extra \n on the "Reply-To" header... I have tryed to find if sendmail based / smtp (even local smtp) was an issue, didn't find why. The issue is the same on other observium (home) without zimbra as mta/mua. Regards, Xavier -- Xavier Beaudouin - Senior Network and System Administrator Infrastructure and network director Horizon Software - http://www.hsoftware.com/ 13 rue La Fayette - 75009 PARIS - France Phone: +33 (0)1 4260 9490 Fax: +33 (0)1 44 56 97 01 Why Top posting is bad : http://ck.wikia.com/wiki/TopPosting

1 1

Google MAPS Integration
by Nicholas Porter 20 Jan '14

20 Jan '14

Unfortunately not being a Developer I'm finding it hard to get my hands on documentation to implement the use of google maps in the overview page. If this is possible for a net admin to achieve without in-depth dev knowledge please point me in the correct direction. Ideally would like to mimic the overview page that has been used on the demo page on the observium site. Thank you in advance ############################################################################################# The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. Furthermore, the information contained in this message, and any attachments thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of the company. #############################################################################################

2 2

Device Alerts that won't go away
by ryan 18 Jan '14

18 Jan '14

Hello all, I have attached an image of the alerts in question, the names and locations have been removed. It only happens on these two servers out of 20+ different servers. What causes this behavior ? I cannot seem to find any differences between servers. I am using the community edition on centos 6.5 , if that helps at all. Thanks, R. Prihoda

5 8

RRD Graph Issues
by William Brown 18 Jan '14

18 Jan '14

Hi, I recently just added the Collectd plugin and I noticed that with my first device that the top graphs for my device are blank, however the ones that are represented in the collectd section are fine. Anyone seen this and know how to fix it? Thanks Will

2 2

Submission of code
by John Millington 17 Jan '14

17 Jan '14

Hi Everyone, I've recently added some minor functionality to assist with the monitoring of our networks. A summary of this would be: * ShoreTel OS Logo * ShoreTel OS definition * Added SonicWall firewall CPU OID and related graphing * Added Sonicwall firewall active sessions discovery and graph definition for this To achieve this, there are a couple of extra .inc.php files and some addition snippets added to existing files. I understand that you prefer code submissions through wget from a website and I can arrange this, but firstly would like to know if you are interested in adding my code (following a review of course) to the product. Would make my pulls from SVN much easier!! Thanks, John.

1 0

Updating Observium
by BERTRAND Adrien [BPCE Assurances] 17 Jan '14

17 Jan '14

Hi, What is the « best practice » for keeping up to date the subscribed edition ? Stopping the cron jobs, updating with the svn, launching the discovery.php and start the cron jobs ? Or lauching the svn directly (without stopping the poller) is ok ? Regards, Adrien BERTRAND Administrateur Sécurité du Système d'Information Information security administrator BPCE Assurances 88 av. de France, 75013 Paris Tel : (+33)1.42.79.47.81 [Description : Q_BPCE_Assurances.jpg]

2 1

Display IP address of the device ( DNS resolved ) in front of the device name ?
by Supun Rathnayake 17 Jan '14

17 Jan '14

Hi all, We have a small suggestion, is it possible to add a new feature to display the IP address of the device ( DNS resolved IP of the device ) may be in front of the device name / or at the top of the device page etc. ( at any prominent place ) This is really helpful in identification and further trouble shooting etc., as most of the network engineers are dealing with the IP addresses rather than the hostname in day to day operations. Thanks in advance. -- With Best Regards, Supun Rathnayake Lanka communication Services (Pvt) Ltd. 65C, Dharmapala Mawatha, Colombo 07. Sri Lanka. Tel: +94-11-2437545 http://www.lankacom.net http://blog.lankacom.net

3 3

Wait time to access subscribed version
by colin.barker＠bluesky.co.uk 16 Jan '14

16 Jan '14

Hi all Hopefully someone here can point me in the right direction. We put through payment for the subscribed version of Observium on Tuesday evening, and very shortly afterwards I emailed Adam with the encrypted htpassword line that he required to add to the SVN. However we have not had any word back on if this has been done or not (and testing, it seems to deny us so I am guessing not). I emailed a chase today, but I was wondering if there was a wait time on getting access, as I don't want to keep bugging when I should be waiting. Thanks in advance Regards Colin Barker Manager of Infrastructure and Security ................................................. Blue Sky Hosting Ltd | http://www.bluesky.co.uk Facebook: http://www.facebook.com/BlueSkyHosting Twitter: http://www.twitter.com/blueskyhosting LinkedIn: http://linkd.in/1j5eiur Sales / Enquiries : +44 (0) 20 7183 5854 | Helpdesk : +44 (0) 844 700 2759 or +44 (0) 844 478 0274 | Fax : +44 (0) 20 7183 5855 | Send support queries to:support@bluesky.co.uk ................................................................................................................... The UK's largest Lotus Domino hosting provider. Managed hosting for Cloud based IBM, Microsoft and Open Source solutions.

4 6

Queries printing on page
by Patmore, Gregory 16 Jan '14

16 Jan '14

Hi all, I’m working on setting up observium/open source edition, and when I load any of the web pages within the GUI I am seeing the SQL queries getting printed to the web page. Has anyone else ran into this issue? If so, any fix? Thanks for any help/advice in advance. - Gregory Patmore Systems Administrator clearchannel digital gregorypatmore(a)clearchannel.com<applewebdata://60628E97-6F4E-4D45-AB1C-5E7C8440B2EA/johnderagon@clearchannel.com> 32 Avenue of the Americas, 4th floor new york, ny 10013

2 1

To modify the general info of an alert checker
by BERTRAND Adrien [BPCE Assurances] 15 Jan '14

15 Jan '14

Hi, It seems that we can't modify some information on an alert checker (via the web interface) like : - The name of the checker - The message (for the description) - The delay All the other boxes have a modify and a delete button but not for this one. I'm up to date (0.14.1.4883) via the subscription edition of Observium. Keep in touch, Adrien BERTRAND Administrateur Sécurité du Système d'Information Information security administrator BPCE Assurances 88 av. de France, 75013 Paris Tel : (+33)1.42.79.47.81 [Description : Q_BPCE_Assurances.jpg]

1 0

Data Fetch Failure
by Shaun Bradley 15 Jan '14

15 Jan '14

Hi all, I've gone through the normal procedure for getting the observium_agent working for mysql and apache, but even though I've added the config values to the http.conf (centos) I get a data fetch failure when running the apache script manually. MySQL one works fine. I'm at a loss to what it is as I can retrieve the URL in the apache script manually also. Thanks, Shaun

1 0

Poller hung by misbehaving device/net-snmp
by Adam Bishop 14 Jan '14

14 Jan '14

Hello, One of the devices I'm polling began misbehaving (its SNMP stack couldn't cope with uptime > 4294967296 seconds). This caused the Observium poller to hang indefinitely. The underlying cause seems to be an issue with net-snmp, however this did cause other devices to not be polled and eventually exhausted the file descriptor limit (at which point, several thousand php processes were running). I'm not sure of the best way to protect observium from net-snmp failing; as a very dirty hack I've replaced the following line in the config: - $config['snmpget'] = "/usr/bin/snmpget"; + $config['snmpget'] = "/usr/bin/timeout 1m /usr/bin/snmpget"; I also tried setting snmpget's -t option, but this did not have an effect. This is on the community version, but I believe the subscription version would be affected too (I've not seen anything in the change logs that would indicate otherwise). For completeness, a not-very-interesting poller trace follows. Hope this is useful, Adam Bishop gpg: 0x6609D460 Janet, the UK's research and education network. Without timeout: ------------------------------------------------ DEBUG! Observium v0.13.10.4586 Poller Starting polling run: SQL[SELECT `device_id` FROM `devices` WHERE `disabled` = 0 AND `hostname` LIKE 'atlas_1r' ORDER BY `device_id` ASC] SQL[SELECT * FROM `devices` WHERE `device_id` = '11'] SQL[SELECT * FROM devices_attribs WHERE `device_id` = '11'] SQL[SELECT * FROM `alert_tests` WHERE 1] SQL[SELECT *,`alert_table`.`alert_table_id` AS `alert_table_id` FROM `alert_table` LEFT JOIN `alert_table-state` ON `alert_table`.`alert_table_id` = `alert_table-state`.`alert_table_id` WHERE `device_id` = '11'] Array ( ) Array ( ) atlas_1r 11 apc DEBUG: SNMP Auth options = -v3 -l 'authNoPriv' -n "" -a 'MD5' -A '<snip>' -u 'observium' /usr/bin/snmpget -v3 -l 'authNoPriv' -n "" -a 'MD5' -A '<snip>' -u 'observium' -Oqv -m SNMPv2-MIB -M /opt/observium/mibs 'udp':'atlas_1r':'161' sysObjectID.0 With timeout: DEBUG! Observium v0.13.10.4586 Poller Starting polling run: SQL[SELECT `device_id` FROM `devices` WHERE `disabled` = 0 AND `hostname` LIKE 'atlas_1r' ORDER BY `device_id` ASC] SQL[SELECT * FROM `devices` WHERE `device_id` = '11'] SQL[SELECT * FROM devices_attribs WHERE `device_id` = '11'] SQL[SELECT * FROM `alert_tests` WHERE 1] SQL[SELECT *,`alert_table`.`alert_table_id` AS `alert_table_id` FROM `alert_table` LEFT JOIN `alert_table-state` ON `alert_table`.`alert_table_id` = `alert_table-state`.`alert_table_id` WHERE `device_id` = '11'] Array ( ) Array ( ) atlas_1r 11 apc DEBUG: SNMP Auth options = -v3 -l 'authNoPriv' -n "" -a 'MD5' -A '<snip>' -u 'observium' /usr/bin/snmpget -v3 -l 'authNoPriv' -n "" -a 'MD5' -A '<snip>' -u 'observium' -Oqv -m SNMPv2-MIB -M /opt/observium/mibs 'udp':'atlas_1r':'161' sysObjectID.0 SNMP Unreachable SQL[UPDATE `devices` set `status` ='0' WHERE device_id='11'] SQL[INSERT INTO `alerts` (`importance`,`device_id`,`message`) VALUES ('0','11','Device is down')] SQL[INSERT INTO `eventlog` (`device_id`,`reference`,`type`,`timestamp`,`message`) VALUES ('11','NULL','system',NOW(),'Device status changed to Down (snmp)')] RRD[cmd[update /opt/observium/rrd/atlas_1r/status.rrd N:0] stdout[] stderr[]] RRD[cmd[update /opt/observium/rrd/atlas_1r/ping.rrd N:6.02] stdout[] stderr[]] RRD[cmd[update /opt/observium/rrd/atlas_1r/ping_snmp.rrd N:U] stdout[] stderr[]] SQL[INSERT INTO `perf_times` (`type`,`doing`,`start`,`duration`,`devices`) VALUES ('poll','atlas_1r','1389715032.3017','60.58','1')] /opt/observium/poller.php atlas_1r January 14, 2014, 15:58 - 1 devices polled in 60.58 secs MySQL: Cell[0/0s] Row[1/0s] Rows[3/0s] Column[0/0s] Update[1/0.03s] Insert[3/0.03s] Delete[0/0s] Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238

2 2

syslog search
by Carlos Martinez 14 Jan '14

14 Jan '14

Is there a way to search all syslogs for all devices at the same time? I had a network interruption at a particular time and I would love to go a page and put in the time frame and see all syslog messages from everything monitored in a given location to see what happened. ________________________________ This message may contain confidential or privileged information. If you are not the intended recipient, please advise us immediately and delete this message. See http://www.datapipe.com/legal/email_disclaimer/ for further information on confidentiality and the risks of non-secure electronic communication. If you cannot access these links, please notify us by reply message and we will send the contents to you. Unless otherwise specified in a written agreement, this e-mail neither constitutes an agreement to conduct transactions by electronic means nor creates any legally binding contract or enforceable agreement.

1 0

TIA, I like to ask for help.
by tikastribe BidzPogPhodyMikeGyson 14 Jan '14

14 Jan '14

Hi Gurus, I'm not good in linux but my boss ask me to install observium in our RHEL box. I followed this link http://www.observium.org/wiki/RHEL_Installation#Introduction then I stop here. (I have a fresh install RHEL then i just follow everything) My comments are in open and closed parenthesis. Copy the default configuration file and edit it for your system: (I copy the config.php in my observium folder where the extracted folder was. Is this right?) cp config.php.default config.php Add an entry for fping to config.php as the location is different on RHEL: (I edit the copied file) $config['fping'] = "/usr/sbin/fping"; Edit config.php. Change the options to reflect your installation. Setup the MySQL database and insert the default schema: (I really stop here because when i type this in shell i had this error -bash: php: command not found) php includes/update/update.php It is OK to have some errors in the SQL revisions up to 006. Create the rrd directory to store RRDs in: (i dont know where to put this?) mkdir rrd chown apache:apache rrd Thank you and Regards,Michelle

2 1

Null data billing module API
by Daniel Rolfe 14 Jan '14

14 Jan '14

Hi all, I'm trying to port billing data out of observium via the simple API but I'm only getting null data as below: {"login":{"success":{"code":"101","msg":"User authentification succeeded"}},"data":[{"timestamp":null,"traf_total": null,"traf_in":null,"traf_out":null},{"timestamp":null," traf_total":null,"traf_in":null,"traf_out":null},{" timestamp":null,"traf_total":null,"traf_in":null,"traf_out" :null},{"timestamp":null,"traf_total":null,"traf_in":null,"traf_out":null} Any ideas on what could be causing this ? Regards, Daniel

2 4

Multiple communities/hosts for same IP address (localhost)
by Bogdan Ghita 13 Jan '14

13 Jan '14

Hello I'm trying to setup a monitoring system for two networks that have several devices each (mostly switches) behind a NAT router; unfortunately I am limited on the ports, so had to use SSH tunnelling from the Observium machine to each of the networks in order to access all the devices. I followed the instructions from http://vfamilyserver.org/blog/2013/03/snmp-hell-part-1-proxy-to-multiple-de… setup the SNMP proxying and it all works quite well, I can snmpwalk each of the devices behind one of the two NAT routers only by changing the community name (haven't yet setup the second one). However, I'm not sure how/if it's possible for Observium to see the different devices - I've added the NAT router with add_device.php (I used command line rather than web interface due to SNMP running over TCP) and was recorded as 127.0.0.1 (which does make sense, as it's the tunnelled from the local host); then, when I tried to run the command with one of the other community strings, it returned an "Already got device 127.0.0.1". Further, although I haven't yet set it up, I will probably have the same problem when adding the tunnelled NAT router on the second network. Is there a configuration/workaround that would allow to differentiate between these multiple instances of what appears to be the same [local]host? Best regards Bogdan

4 5

Re: [Observium] Sudden loss of history
by Adam Armstrong 12 Jan '14

12 Jan '14

3 3

Sudden loss of history
by Robert Williams 12 Jan '14

12 Jan '14

Hi Guys, At midnight last night during the normal scheduled re-discovery we appear to have lost all historic data for all ports on a large number of our switches. I’m still checking them all but it appears to have affected all Cisco 2960G units (24 or 48 port). Data collection is working fine, but all history has gone, including all CPU, RAM, temperatures, fans, RPS Power etc. [cid:image001.png@01CF0F7A.BD8E4C80] There are no Eventlog entries for the devices for the last 24 hours, but there are some from a couple of days ago which read like this: [cid:image002.png@01CF0F7B.7D5A55E0] However, as I mentioned these events are from the 9th so a few days ago. Any ideas please? I can restore the RRDs from backup but I’d like to know why it’s done this otherwise I’ll just be restoring them again tomorrow morning ☺ Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

2 2

Device rebooted false alarm notification
by Jerico Rubion 09 Jan '14

09 Jan '14

Hi, I'm receiving a false alarm notification about a device which rebooted where in fact the device did not actually reboot. Do we have observium logs where i can look more about the details? or is there a work around to prevent such occurrences? /Notification that i received:// / Observium :: Network Observation and Monitoring Device Rebooted : lnx-svr004.27th.orient.77globalservices.com 82 days, 1h 44m 40s ago. E-mail sent to: xxx(a)xxx.xxx E-mail sent at: 2014-01-07 04:43:44 / From Server:/ [root@LNX-SVR004 ~]# uptime 07:29:05 up 994 days, 7:40, 1 user, load average: 0.15, 0.11, 0.07 Best Regards, Echo

5 6

Enterasys Poller
by Corey Eichelberger 09 Jan '14

09 Jan '14

Hello, I am working on evaluating Observium as a Cacti replacement for monitoring network devices and servers at my university. So far I have Observium working with all of our Cisco and Juniper gear as well as a few of the Linux boxes that I manage but seem to be having issues with getting everything working nicely with our Enterasys gear. Let me preface the below with stating that this project is absolutely wonderful and if I can get our Enterasys devices to play nicely we will be upgrading to the paid version. I understand that Enterasys is not officially supported so I have begun diving into the code base to see what needs to be done to write the poller modules myself. Does any one on the list have the ports poller fully working with an Enterasys device? Now, one of the things that I noticed with the Enterasys gear is that the ports poller module will continue running the snmpbulkwalk for the dot1qVlanCurrentEgressPorts mib until the user finally kills the poller. This appears to be an issue with the number of repetitions as the poller will continue walking the table for over an hour. I have the following line in my config.php which should limit the repetitions. $config['snmp']['max-rep'] = TRUE; -- Thanks, Corey Eichelberger

1 0

Question re: failing discovery of a device
by Chris Moody 09 Jan '14

09 Jan '14

Hello. Running Observium CE 0.13.10.4586. I've run into a strange situation with a single device that I am unable to discover and get added into observium's inventory. The device is an F5 Load-balancer. I have 51 other F5's all working beautifully, yet this one seems to be giving me grief for some reason when I try to discover it. I am able to ping and snmpwalk the device beautifully from the observium server, yet every attempt to run add_device.php returns with the following: ========= root@observium:~# ./add_device.php lb1-prod-c-qcy examplecommunitystring v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Trying v2c community examplecommunitystring ... No reply on community examplecommunitystring using v2c Could not reach lb1-prod-c-qcy with given SNMP community using v2c Observium v0.13.10.4586 Add Device USAGE: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] add_device.php <hostname> [any|nanp|anp|ap] [v3] [user] [password] [enckey] [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] EXAMPLE: SNMPv1/2c: add_device.php <hostname> [community] [v1|v2c] [port] [udp|udp6|tcp|tcp6] SNMPv3 : Defaults : add_device.php <hostname> any v3 [user] [port] [udp|udp6|tcp|tcp6] No Auth, No Priv : add_device.php <hostname> nanp v3 [user] [port] [udp|udp6|tcp|tcp6] Auth, No Priv : add_device.php <hostname> anp v3 <user> <password> [md5|sha] [port] [udp|udp6|tcp|tcp6] Auth, Priv : add_device.php <hostname> ap v3 <user> <password> <enckey> [md5|sha] [aes|des] [port] [udp|udp6|tcp|tcp6] ========= yet, as you can see, when I snmpwalk this device, I get responses back just fine. ========= root@observium:~# snmpwalk -v2c -c examplecommunitystring lb1-prod-c-qcy | head SNMPv2-MIB::sysDescr.0 = STRING: Linux lb1-prod-c-qcy 2.6.18-164.11.1.el5.1.0.f5app #1 SMP Mon Mar 5 12:40:48 PST 2012 x86_64 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (3523019831) 407 days, 18:09:58.31 SNMPv2-MIB::sysContact.0 = STRING: NOC SNMPv2-MIB::sysName.0 = STRING: lb1-prod-c-qcy SNMPv2-MIB::sysLocation.0 = STRING: QDC-C SNMPv2-MIB::sysServices.0 = INTEGER: 78 SNMPv2-MIB::sysORLastChange.0 = Timeticks: (2) 0:00:00.02 SNMPv2-MIB::sysORID.1 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance SNMPv2-MIB::sysORID.2 = OID: SNMP-MPD-MIB::snmpMPDCompliance SNMPv2-MIB::sysORID.3 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance ... ========= I've tried the discovery via v1 as well as v2c, no difference. Every time I try a walk, I get results back consistently...so it's not like I'm seeing intermittent responses or anything. I was able to get it to finally discover when I specified the port & transport fields to add_device.php. Any thoughts as to what might be failing or not satisfying the add_device.php utility that it would flag this host as not replying? Why would port/transport being specified make a difference if it's still just standard 161/udp? Any hints or suggestions are appreciated. Cheers, -Chris

1 0

Re: [Observium] Alerting system: multiple associations
by Stefano Cordio 08 Jan '14

08 Jan '14

Bump :-) From: Stefano Cordio [mailto:stefano.cordio@gmail.com] Sent: martedì 24 dicembre 2013 11:42 To: 'Observium Network Observation System' Subject: [Observium] Alerting system: multiple associations Hey guys, I have the following alert checker: As you can see, the checker is applied only to server devices but Id like to extend that to storage devices. Is there a simple way to modify the device match rule in something like type equals (server or storage)? I tried searching any suggestion on the wiki and on the mail archive, but I didnt find anything. Thanks for any hints, Stefano

2 1

Need help getting the new alert system to send mail
by Thomas Raabo - Zitcom A/S 08 Jan '14

08 Jan '14

What i did ☺ //Alert $config['alerts']['alerter']['default']['descr'] = "Observium Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contact'] = "tr(a)zitcom.dk"; $config['alerts']['alerter']['default']['enable'] = TRUE; No emails are send on alerts So I tried to change the email backend $config['email_backend'] = 'sendmail'; That did not help. So I did a test to check the php mail module. <?php $to = "tr(a)zitcom.dk"; $subject = "Test mail"; $message = "Hello! This is a simple email message."; $from = "test(a)mgmt3.network.zitcom.dk"; $headers = "From:" . $from; mail($to,$subject,$message,$headers); echo "Mail Sent."; ?> And that worked fine. What is the problem? I have an alert in Observium ☺ [cid:image001.png@01CF07BB.018EAC80] Med venlig hilsen | Best regards Thomas Raabo Netværksansvarlig CCIE #33466 Zitcom A/S Telefon: 70 40 00 00 E-mail: kontakt(a)zitcom.dk<mailto:kontakt@zitcom.dk> Direkte: 69 10 60 18 Direkte: tr(a)zitcom.dk<mailto:tr@zitcom.dk> [cid:image005.jpg@01CEDC86.E897E480]<http://www.zitcom.dk/>

3 2

Cisco Small Business series
by support nuckleo 08 Jan '14

08 Jan '14

Hello everybody I would like to share a small workaround in order to monitoring the cisco Small business series sg 200/300 in the right way I have add some mibs in the /opt/observium/includes/defaults.inc.php $config['mibs']['CISCOSB-MIB'] = 1;$config['mibs']['CISCOSB-CPU-COUNTERS-MIB'] = 1; $config['mibs']['CISCOSB-JUMBOFRAMES-MIB'] = 1; $config['mibs']['CISCOSB-vlan-MIB'] = 1; $config['mibs']['CISCOSB-vlanVoice-MIB'] = 1; $config['mibs']['CISCOSB-SMON-MIB'] = 1; Detect your sysdescr sysDescr in this way: snmpwalk -c public -v2c device sysDescr and after I made some changes mapping the sysDescr on the right os so in /opt/observium/includes/discovery/os/cisco.inc.php add else if (strstr($sysDescr, "50-Port Gigabit Smart Switch")) { $os = "ciscosb"; } else if (strstr($sysDescr, "SG200-50P 50-Port Gigabit PoE Smart Switch")) { $os = "ciscosb"; } Then if you have just discoverd, delete your cisco small business devices and rediscovery the devices again. Thats all! Francesco Pansini _____________________________________________________________________ NUCKLEO Information Technology Solutions Support & Delivery Team http://www.nuckleo.com (website) Twitter:@Nuckleo _____________________________________________________________________

4 3

syslog message cisco filtering
by Rory Schramm 08 Jan '14

08 Jan '14

Hi, I have syslog setup in observium with a cisco 1841. However, I'm trying to get it to process nat messages but they arn't showing up correctly. I'm using syslog-ng for syslog. ie 192.168.2.1||local2||info||info||96||2013-12-31 00:53:15||5d00h: %IPNAT-6-DELETED: tcp 10.10.10.118:62249 192.168.12.1:62249 192.168.33.30:80192.168.33.30:80 ||99 gets truncated too 2013-12-31 00:53:15(info)*62249 192.168.12.1:62249 <http://192.168.12.1:62249> 192.168* : This only happens for the nat messages. ie 192.168.2.1||local2||notice||notice||95||2013-12-31 01:13:05||5d01h: %SYS-5-CONFIG_I: Configured from console by console||100 shows up as 2013-12-31 01:13:05(notice)*SYS-5-CONFIG_I* : Configured from console by console The raw nat syslog messages look like the following (aka not filtered by syslog-ng for observium): Dec 31 01:16:59 192.168.2.1 101: 5d01h: %IPNAT-6-CREATED: tcp 10.10.10.118:62713 192.168.12.1:62713 192.168.33.30:80 192.168.33.30:80 config settings: syslog-ng.conf options { chain_hostnames(0); time_reopen(10); time_reap(360); #sync(0); log_fifo_size(2048); create_dirs(yes); #owner(root); group(adm); perm(0640); #dir_owner(root); #dir_group(root); dir_perm(0755); use_dns(no); #dns_cache(yes); #log_msg_size(2048); stats_freq(0); bad_hostname("^gconfd$"); }; source s_net { udp (); }; destination df_router { file("/var/log/router" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); }; destination d_observium { program("/opt/observium/syslog.php" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); }; log { source(s_net); filter(router_f); destination(df_router); }; filter router_f {host(192.168.2.1); }; observium.conf: $config['enable_syslog'] = 1; Kind Regards, Rory

3 3

December 2013 Changelog
by Adam Armstrong 08 Jan '14

08 Jan '14

Hi All, Compiled changelog for December 2013 is at http://www.observium.org/wiki/Changelog#December_2013 Thanks, adam.

1 0

Alert Checker issue
by Daniel Rolfe 08 Jan '14

08 Jan '14

HI, I know this is all work in progress but I'm trying something very simple which should at least trigger It's likely something simple that I've missed Please see attached Thanks in advance,Daniel

5 9

ssl
by Zach Underwood 07 Jan '14

07 Jan '14

I am trying to move my observium to ssl only. I have ssl working right now when I use https://observium.mydomain.net . I want to redirect people if they connect to from http to https. OS=centos 6.5 version=4861 -- Zach Underwood (RHCE,RHCSA,RHCT,UACA) My website <http://zachunderwood.me> My photos <http://zunder1990.openphoto.me>

4 4

I may have some Stuff to contribute
by Sascha Schaal 07 Jan '14

07 Jan '14

Hello, my Name is Sascha Schaal. I´m a Developer for a medium sized ISP in Germany and former Nato IS-Admin. I would like make some contributions to Observium, which i think is one of the best approaches to a NMS in the Unix world together with Nagios. So i have 3 Things for you to offer, which i think could be a usefull addition to Observium. 1. Implementation of WSMan I could write a Subsystem for Observium to detect Devices and OS´s via the WSMan-Protocol. I think you must have came in contact with a Subset of this Protocol (CIM/SOAP) within the VMware API. This will require HTTP-POST´s to the Devices WSMan-Listener. These will contain SOAPed chunks of XML which tell the Listener to perform Task´s. You can then iterate through Classes on the WSMan-Provider which contain Perf-Data or Inventory Data and Stati of Devices/or Entitys. I have developed an easy to use complete OOP Subsystem written in Perl which i would like to convert to PHP for Observium. There are very few dependancy´s like LibXML2 and Data:UUID which i will try to resolve to turn it into PHP, i have some Idea's already. The best thing is the common Namespaces and Classes in WSMan will make Autodiscovery quite easy with lot of verbose Information to hand over to the User. It goes totaly along with ur approach to a NMS. Already WSMan capable Devices and OS´s are for example Unix via OpenWSMan, Microsoft Windows and Baseboard Management Controllers like Dell´s iDrac or HP`s iLO. WSMan has several advantages over SNMP which made the Nagios Dev's plan it for implementing. my GIT´s on that matter: https://github.com/rage1985/WSMAN--easy https://github.com/rage1985/check_wsman-Suite Which leads me dirctly to: 2. Discovery, Inventory and Monitoring of Windows OS Metrics The WSMan ( MS calls it WinRM) is more willing to talk than the SNMP Service on Windows. With the WSMan empowered Observium Nagio´s NS++ Client which has to be installed locally and needs a sh**load of config will look like a joke in comparison. For the Windows Admin WinRM Setup should be piece of cake. And i know where to find the Interesting Data, and i am willing to share. 3. Statistical Prediction and Forecasting using RRD´s Hold-Winters Algorithm. I´ve done this several times in my current occupation. Predicting Trends of both Linear and Non-Linear Sets of Data, togehter with Abberant Behavior Detection. I am willing to develope a subsystem for Observium to Predict Trend, Behavior for all the Data gathered in a scalable manner. But therefor i suggest to provide Graphs with fixed timeranges, in a new tab or seperate presantation. I suppose the most users don´t have a clue of the math behind statical analysation of Data. Time is always an important factor in forecasting , u just can´t tell from a month of gathered data what e.g. the traffic next year will look like. So we have to help him out in interpreting his Data. This is done best with sane and easy to read Graphs. I think this kind of Feature will be more than usefull. I will also help you out understanding the math, the meaning of several values we will stumble upon during developement. And last but not least the Documentation. Here´s is some intro to the techniques and math involved (not from me but good intro): https://www.usenix.org/legacy/events/lisa00/full_papers/brutlag/brutlag_htm… Kind regards, Sascha Schaal

1 0

Cisco Wireless Lan Controllers
by Carlos Martinez 07 Jan '14

07 Jan '14

Anyone do anything with Cisco WLC 2100 and 2500 series to get some details about how the attached light weight access points are functioning/performing? ________________________________ This message may contain confidential or privileged information. If you are not the intended recipient, please advise us immediately and delete this message. See http://www.datapipe.com/legal/email_disclaimer/ for further information on confidentiality and the risks of non-secure electronic communication. If you cannot access these links, please notify us by reply message and we will send the contents to you. Unless otherwise specified in a written agreement, this e-mail neither constitutes an agreement to conduct transactions by electronic means nor creates any legally binding contract or enforceable agreement.

2 1

monitoring wireless parameters - what is the module category
by Supun Rathnayake 07 Jan '14

07 Jan '14

Hi all, We are trying to add support for some new wireless parameters used in some wireless equipments such as "Rx Signal Strength" , "Noice/SNR" , etc etc. We checked the current module categories but did not find a good place to include them and write the discovery stuff. will the category sensors will fit to this or do we have to define a new category ? Can somebody please advice. -- With Best Regards, Supun Rathnayake Lanka communication Services (Pvt) Ltd. 65C, Dharmapala Mawatha, Colombo 07. Sri Lanka. Tel: +94-11-2437545 http://www.lankacom.net http://blog.lankacom.net

1 0

Update script
by Adriaan Smuts 07 Jan '14

07 Jan '14

Hi All, Don't know if there is some like this out there, but I created a script that runs the update process for you. I use this as a daily cron to make sure that my Observium stays up to date. Please see below and/or attached. Script: #!/bin/bash # Observium Auto Update Script # Author: Adriaan Smuts <adriaan.smuts(a)webafrica.com> echo -e "\e[31mUpdating Observium to latest version:\e[0m" echo # Observium install directory cd /opt/observium/ echo -e "\e[36mGetting the latest files from svn.observium.org:\e[0m" svn update echo echo -e "\e[36mUpdating the databse (if needed):\e[0m" # Update the database ./discovery.php -h none echo echo -e "\e[32mObservium has now been updated to the latest version.\e[0m" PS: This will only work for the subscription version that uses SVN. Regards Adriaan Smuts Systems Administrator [file:///C:\Users\adriaan.CORP\AppData\Roaming\Microsoft\Signatures\WebAfrica_Files\signature_logo.jpg] ________________________________ Direct Line +27 21 464 9565 Reception 086 000 9500 Website www.webafrica.co.za<http://www.webafrica.co.za/>

1 0

Re: [Observium] Device rebooted false alarm notification
by BERTRAND Adrien [BPCE Assurances] 07 Jan '14

07 Jan '14

Hi, We have the same "problem" when we restart the SNMP daemon ... it might be your case ? In fact, when the device actually reboot we have 3 mails : 1 down, 1 reboot and 1 up. But when the SNMP daemon restart / start we have only 1 mail : reboot. Regards, Adrien BERTRAND Administrateur Sécurité du Système d'Information Information security administrator BPCE Assurances 88 av. de France, 75013 Paris Tel : (+33)1.42.79.47.81 -----Message d'origine----- Date: Tue, 07 Jan 2014 07:30:38 +0800 From: Jerico Rubion <jrubion(a)77soft.com> To: Observium Network Observation System <observium(a)observium.org> Subject: [Observium] Device rebooted false alarm notification Message-ID: <52CB3C9E.1090107(a)77soft.com> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" Hi, I'm receiving a false alarm notification about a device which rebooted where in fact the device did not actually reboot. Do we have observium logs where i can look more about the details? or is there a work around to prevent such occurrences? /Notification that i received:// / Observium :: Network Observation and Monitoring Device Rebooted : lnx-svr004.27th.orient.77globalservices.com 82 days, 1h 44m 40s ago. E-mail sent to: xxx(a)xxx.xxx E-mail sent at: 2014-01-07 04:43:44 / From Server:/ [root@LNX-SVR004 ~]# uptime 07:29:05 up 994 days, 7:40, 1 user, load average: 0.15, 0.11, 0.07 Best Regards, Echo

1 0

CDP neighbor map question
by Kenny Sallee 07 Jan '14

07 Jan '14

Hi all - question - I love the mapping feature for Cisco / CDP devices. Below is what the Map / Diagram looks like for one of the Cisco switches I have discovered...I only care about routers/switches/APs showing up there. Question is: is it possible to exclude certain CDP neighbors from showing up on the Map by default? [image: Inline image 2] -- Netravine Founder | Kenny Sallee | Kenny(a)netravine.com | 503.330.2430

2 8

Clear switch stats
by Daniel Rolfe 05 Jan '14

05 Jan '14

HI all, I have two questions, 1) How can I clear switch port and billing stats once a new customer takes over a server ? 2) How can I assign ports as customers in the paid observium ? Customer ports are hp vc flex-10 ports so I don't think I can assign a per port description. Thanks Daniel

3 2

Re: [Observium] Dotsize on map
by Adam Armstrong 03 Jan '14

03 Jan '14

1 0

Re: [Observium] Dotsize on map
by Gustav UHLANDER 03 Jan '14

03 Jan '14

Hello. I would like to reduce the dotsize on the map to 1 but the config dosent seem to be going through. We have 155 devices in Observium at the moment and things can get a bit hard to look at. Especially when you get the big dots when you have a lot of devices grouped together. I googled the issue and I found an old mail discussion where it was said that it wasn't implemented yet. Is this still the case or am I missing something else? //Best regards Gustav

6 11

Re: [Observium] Need help getting the new alert system to send mail
by Antony John 03 Jan '14

03 Jan '14

2 1

Nix Agent Installation Question
by ryan 02 Jan '14

02 Jan '14

Hello All, I have a quick question about the Unix agent. I have an exim box and want to monitor the queue. This is a quick summary of what I did: I copied observium_agent_xinetd to exim server /etc/xinetd.d/observium_agent Copied obserium_agent to exim server /usr/bin/observium_agent On exim server mkdir /usr/lib/observium_agent/ mkdir /usr/lib/observium_agent/local/ Enabled unix-agent module service xinetd restart chmod +x /etc/xinetd.d/observium_agent and /usr/bin/observium_agent I was able to telnet successfully from the observium server. Output from poller.php shows the unix agent is running: # /opt/observium/poller.php -h eximbox Observium v0.13.10.4585 Poller Starting polling run: util2 10 linux (unix) Observium UNIX Agent: execution time: 209ms No include: No include:Observium No include:df No include:mounts No include:ps No include:mem No include:cpu No include:uptime No include:netif No include:lnx_if:sep(58) No include:tcp_conn_stats No include:md No include:diskstat No include:kernel No include:netctr No include:vbox_guest No include:ntp No include:cups_queues No include:postfix_mailq No include:local ... So I placed the exim-mailqueue.sh in /usr/bin/observium_agent/local/ and chmod +x and ran poller.php twice more, but I am not seeing a tab for apps after running the poller. Is this where the data will show ? Is there a step that I missed somewhere ? Any help is greatly appreciated. Happy New Years, Ryan Prihoda

1 0

hi
by madhusudhan 02 Jan '14

02 Jan '14

-- -- /Regards, Madhusudhan.Vijayakumar Team IS/IT/ cid:image015.png@01CDD9F4.04393CC0 <http://www.nuware.com/> /+917411581112 | madhusudhan.vijayakumar(a)nuware.com <http://www.nuware.com/> www.nuware.com <https://www.facebook.com/NuWareCo>/ cid:image016.png@01CDD9F4.04393CC0 <https://www.facebook.com/NuWareCo>cid:image017.png@01CDD9F4.04393CC0 <http://www.linkedin.com/company/nuware>cid:image018.png@01CDD9F4.04393CC0 <https://twitter.com/NuWareCo>cid:image019.png@01CDD9F4.04393CC0 <http://www.nuware.com/><http://www.nuware.com/> Transmission of this email is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any action in reliance upon this information by the person or entity other than the intended recipient is prohibited and would be at their risk and responsibility. While NuWare takes adequate protection against viruses, the Sender of this mail or NuWare cannot accept any responsibility or liability for interception, corruption, delay or virus introduced by this e-mail or any attachment. If you are not the intended recipient or if you have received this in error, please delete this email with attachments, if any, and inform the sender. Thank you for your understanding & co-operation.

2 1