- observium - lists.observium.org

Oxidized for config management & notifications
by Colin Stubbs 14 Mar '19

14 Mar '19

All, I've added the first stage of a patch for better Oxidized support via the existing JIRA ticket from 2016, https://jira.observium.org/browse/OBS-1986 What I'm building is what I've described in the JIRA comment, which basically means that we shift to using the Oxidized API properly rather than files on an immediately accessible filesystem. Not too hard to write and the rest of it'll be done shortly. But I am very interested in feedback about Oxidized. Particularly as the project is in need of maintainers to really keep it going - https://github.com/ytti/oxidized#help-needed Are you using it? How well's it going? Do you agree with what I'm proposing to add to Observium and see value in it? (See below) OR; have you found something better and have since moved away from Oxidized to another OSS or a COTS product? NOTE: Rants about Ruby/Oxidized or SVN/git being bad exist in the same leaky mentally challenged boat as rants about RANCID/Perl being bad. Don't bother. At the moment the main thing that's missing from the existing reuse of the RANCID code in an Oxidized environment; is the ability to see diffs when it's a git repo rather than Subversion. A secondary issue with the existing RANCID support is that the Observium web interface needs access to SVN/configs via the file system. So you either need run Oxidized on the same box; or export the file system to it using NFS/etc. There's a lot of reasons why you might be wanting to run Oxidized elsewhere and don't want to expose a file system from it back to your Observium implementation. -- From JIRA -- The ideal integration here would actually utilise the Oxidized API so the Oxidized system can exist anywhere; rather than on a file system immediately accessible to the Observium webUI. e.g. config from https://oxidized-not-obserivum-server.org.tld/node/fetch/[NODE] Observium would also expose a list of hosts (may already be in API?); that Oxidized would use as a list of devices to monitor, https://github.com/ytti/oxidized/blob/master/docs/Sources.md#source-http Syslog (SNMP trap to syslog where necessary) alerting matches for config change events would trigger Oxidized based collection of new config; which in turn would trigger Oxidized based alerts in close to real time for changes. -Colin

2 2

observium alerting not working any more in last version?
by Farshid Abediny 12 Mar '19

12 Mar '19

Hello, we are using observium community edition and in last version we were able to add alert checker but in latest version its not possible, should we upgrade to pro version? THnak you.

3 2

Re: [Observium] Ignoring Interfaces in Discovery
by Mike Stupalov 08 Mar '19

08 Mar '19

Hi, really as I see, this is firmware/hardware issue. Better write TAC to Cisco. I added ifType ignoring in validate ports (for this os) in r9755. But I see too many not exist Oids, I'm not sure this will help you.. Benjamin Moore wrote on 07/03/2019 17:58: > This is a cisco RV340 small business router > > On Thu, Mar 7, 2019 at 1:47 AM Mike Stupalov <mike(a)observium.org > <mailto:mike@observium.org>> wrote: > > Hi, > > what OS on device? > > Please show/attach debug discovery for device: > ./discovery.php -d -h <device> > > And snmpwalk for ifTable: > > snmpwalk -v2c -c <community> -m IF-MIB <device> .1.3.6.1.2.1.2.2 > > Yes, Ports ignored because empty ifType. > Usually it makes no sense to observe them, because all other > counters are missing too. > > But if in ifTable exist counters for this device, I will add > exclude for os. > > Benjamin Moore via observium wrote on 06/03/2019 20:25: >> Can someone tell me how to get Observium to NOT ignore >> interfaces? I'm assuming that it is ignoring them due to the >> fact that they don't have ifTypes assigned - >> ##### Module Start: ports ##### >> >> o Caching OIDs ifDescr ifAlias ifName ifType ifOperStatus >> o Caching DB 0 ports >> o Discovering ports XX VLAN1(12)XXXXXXXX >> +---------+-----------+-----------+---------+--------+-------------+---------+ >> | ifIndex | ifDescr | ifName | ifAlias | ifType | Oper >> Status | Ignored | >> +---------+-----------+-----------+---------+--------+-------------+---------+ >> | 9 | WAN2 | WAN2 | ... | | >> | yes | >> | 10 | WAN1 | WAN1 | ... | | | >> yes | >> | 12 | VLAN1 | VLAN1 | ... | l2vlan | >> | no | >> | 25 | LAN4 | LAN4 | ... | | down >> | yes | >> | 26 | LAN3 | LAN3 | ... | | down | >> yes | >> | 27 | LAN2 | LAN2 | ... | | down >> | yes | >> | 28 | LAN1 | LAN1 | ... | | up >> | yes | >> | 29 | WAN_PORT1 | WAN_PORT1 | ... | | up >> | yes | >> | 30 | WAN_PORT2 | WAN_PORT2 | ... | | down >> | yes | >> | 51 | USB1 | USB1 | ... | usb | >> | yes | >> | 52 | USB2 | USB2 | ... | usb | | >> yes | >> +---------+-----------+-----------+---------+--------+-------------+---------+ >> LAN1 and WAN PORT 1 are the two interfaces I need to have monitored. >> _______________________________________________ >> observium mailing list >> observium(a)observium.org <mailto:observium@observium.org> >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > > -- > Mike Stupalov > Observium Limited, http://observium.org > -- Mike Stupalov Observium Limited, http://observium.org

1 0

Re: [Observium] Ignoring Interfaces in Discovery
by Benjamin Moore 08 Mar '19

08 Mar '19

Just checking - did you get my response? On Thu, Mar 7, 2019 at 8:58 AM Benjamin Moore <buldamoosh(a)gmail.com> wrote: > This is a cisco RV340 small business router > > On Thu, Mar 7, 2019 at 1:47 AM Mike Stupalov <mike(a)observium.org> wrote: > >> Hi, >> >> what OS on device? >> >> Please show/attach debug discovery for device: >> ./discovery.php -d -h <device> >> >> And snmpwalk for ifTable: >> >> snmpwalk -v2c -c <community> -m IF-MIB <device> .1.3.6.1.2.1.2.2 >> >> Yes, Ports ignored because empty ifType. >> Usually it makes no sense to observe them, because all other counters >> are missing too. >> >> But if in ifTable exist counters for this device, I will add exclude for >> os. >> >> Benjamin Moore via observium wrote on 06/03/2019 20:25: >> >> Can someone tell me how to get Observium to NOT ignore interfaces? I'm >> assuming that it is ignoring them due to the fact that they don't have >> ifTypes assigned - >> ##### Module Start: ports ##### >> >> o Caching OIDs ifDescr ifAlias ifName ifType ifOperStatus >> o Caching DB 0 ports >> o Discovering ports XX VLAN1(12)XXXXXXXX >> >> +---------+-----------+-----------+---------+--------+-------------+---------+ >> | ifIndex | ifDescr | ifName | ifAlias | ifType | Oper Status | >> Ignored | >> >> +---------+-----------+-----------+---------+--------+-------------+---------+ >> | 9 | WAN2 | WAN2 | ... | | | yes >> | >> | 10 | WAN1 | WAN1 | ... | | | yes >> | >> | 12 | VLAN1 | VLAN1 | ... | l2vlan | | no >> | >> | 25 | LAN4 | LAN4 | ... | | down | yes >> | >> | 26 | LAN3 | LAN3 | ... | | down | yes >> | >> | 27 | LAN2 | LAN2 | ... | | down | yes >> | >> | 28 | LAN1 | LAN1 | ... | | up | yes >> | >> | 29 | WAN_PORT1 | WAN_PORT1 | ... | | up | yes >> | >> | 30 | WAN_PORT2 | WAN_PORT2 | ... | | down | yes >> | >> | 51 | USB1 | USB1 | ... | usb | | yes >> | >> | 52 | USB2 | USB2 | ... | usb | | yes >> | >> >> +---------+-----------+-----------+---------+--------+-------------+---------+ >> LAN1 and WAN PORT 1 are the two interfaces I need to have monitored. >> >> _______________________________________________ >> observium mailing listobservium@observium.orghttp://postman.memetic.org/cgi-bin/mailman/listinfo/observium >> >> >> -- >> Mike Stupalov >> Observium Limited, http://observium.org >> >>

1 0

Re: [Observium] OBS-2925 - Ping Only Hosts / OBS_SNMP_SKIP flag / snmp_skip attribute
by Colin Stubbs 07 Mar '19

07 Mar '19

I know where you're at... but, 0) No refactoring required - this is part of the point of the patch ( I would not have even attempted this if it wasn't so easy... ) and my long writeup for Mike given he hadn't actually looked at JIRA yet. Uses existing code/architecture - bit flag and device attributes - to mark a device as "don't do any SNMP to this device right now" 1) Observium uses fping... 2) Smokeping is horrible - can provide great value sure, but horrible to use, and again, extra tool. I'm a long way from unfamiliar with it and have both used it many years ago, and considered it for our current environments. Not useful to us. 3) Smokeping is not integrated to Observium if the device is not monitored by SNMP - this is fine when it's just you or a small team of people who understand this and are happy to flick between interfaces and how to work with Smokeping. Not great when you have a larger team and you really just need one interface on a monitor in your operations room that tells everyone everything that's up/down/problematic right now. Particularly not fine when your level 1's can't really login on CLI and edit config files etc. 4) IP SLA's - vendor specific thing. I love them in the right environment. Fantastic tool and capability to have in a network. We have zero Cisco in this situation and don't want to add a device specifically for this. 5) Your description sounds like it's just you in this environment... and if email fails, or you're hit by a bus, no one else knows there's a problem let alone how your alerting solution works and how to maintain it. Also, manual investigation/access to history. By having Observium do the ping we get to leverage the alerting capabilities inherent to it, e.g. email/webhook/PagerDuty/OpsGenie/VictorOps etc etc etc., as well as the webUI for visual alert notification and access to graphs/history. It's actually a simpler and cleaner solution; unless you value seeing the min/max/average/jitter values that IP SLA or Smokeping can help you see. In which case it's not what you need. -Colin Email: cstubbs @ gmail . com On Sun, 3 Mar 2019 at 22:44, Ryan Huff <ryanhuff(a)outlook.com> wrote: > I really do understand this Colin, on a deeper level than you might > imagine ;). I have no vested interest either way personally, I’m just > offering some unsolicited thoughts... > > I always looked at this specific topic like asking a 10lbs. (4.5kg or > 0.7149 stones) sledge hammer to drive a nail. Sure, it can do it but it’ll > probably be messy and ugly because a sledge hammer was never meant to drive > nails, and when you use tools in ways they weren’t really designed for, > things can get messy. Just use a hammer instead. > > I have done three things to achieve icmp only monitoring and also stick > within the base code (as a developer, I hate mucking with base code or > re-inventing wheels when I want to do different things). Icmp-only > monitoring to me, always just seemed silly (not in purpose) to try and work > into an existing and established application that didn’t already do it. > > It’s just too easy of a problem to solve otherwise, than to go to the > time/expense of refactoring an application IMHO. > > - I use RTT SLAs to monitor next hop devices (which OBS is fabulous at > picking up), assuming the device hopped from is SLA capable and OBS > monitored. > > - I use Fping (Smokeping) integrated with OBS. Using the Smokeping web > wrapper makes a great RTT only tool, and you also have the OBS integration > for when it makes sense to use on OBS devices. > > - I have a small (very small) bash script that reads a text file of IP > address and launches one thread per device to run continuous pings. Not a > very scalable script, but like you, I only need it for a very few limited > cases. The script uses sendmail to email me if it can’t reach something. > > Thanks, > > Ryan > > On Mar 3, 2019, at 06:35, Colin Stubbs via observium < > observium(a)observium.org> wrote: > > Hi Mike, > > They're in the JIRA ticket, but sure, here's some inserted to this email. > > I'm aware of Adam/your preference to reject or simply ignore the regular > requests for this kind of feature, and the confusion it causes new users > considering Observium for use in their organisations when they find out > they can't do the most basic of monitoring to something using Observium. > > A great many of your users would gain a lot of value from being able to > add a few ping only hosts. > > Why build, manage and integrate (to other tools) another ping based > monitoring system when all you need is to monitor a handful of devices with > ping only; simply because those devices fail to offer SNMP for some reason? > > Anything that does have a working SNMP service can and should be monitored > with SNMP to gain greater insight into what's happening on it... but not > everything does. > > No one in their right mind should attempt to use Observium as a system > which monitors massive numbers of DNS names or IP's with ping only, there > are better systems out there for that, but there are so many situations in > a which an Observium install can and should be able to monitor some devices > ping only. > > I've associated the ticket with the two previous JIRA requests for this > feature; which Adam rejected. > > They were just feature requests as I recall; no code proposed. Totally > understandable you guys didn't want to work on the feature when it's not > really what you feel Observium is for. > > Rejecting this now when you have just been gifted working code, that > modifies things fairly minimally, and simply leverages the ping information > that's already occurring to each and every device (that ping is not > disabled for), and uses an existing method to mark devices so that further > SNMP based polling does not occur... would make no sense. > > That said; I totally understand if you want me to fix/add/improve things > before considering it further - simply communicate what's necessary and > I'll do that. > > So, for anyone else on the list, who wants the feature; now is your best > chance to add your voice and explain why this kind of feature is of use to > you. Because you're probably not going to get it otherwise. > > We've been using this internally since early 2017... I just got around to > updating Observium to the latest and greatest (reasons, terrible terrible > reasons...), and had to update my patch. > > But, I'd really prefer not to have to maintain a patch, and I definitely > don't want to have to publish it so others can use it and cause Observium > Ltd further dramas because of it. > > How many hosts do we monitor ping only? > > Six. A grand total of six. Everything else has SNMP in some form; and we > want as much info as we can extract from them via it - which is why we love > Observium. Nothing else compares for SNMP based monitoring IMHO. > > Most of those ping only devices are next hop service provider devices just > outside our network, for which they won't give us any kind of SNMP access. > Ping'ing them offers a small (very small!) degree of insight into link > latency/loss from us to them (manual comparison I must admit), and/or > potential device problems for the thing that's currently responding for > that IP. > > Hey look... a perfect use case for this feature... > > The others are devices that we use but which simply don't offer SNMP > because vendor X didn't bother to add net-snmp to their standard build for > CentOS/Ubuntu/whatever weird and wonderful Linux distro they built them on; > when they really should have. Don't care much just need to know they're on > the network in some way and want a long track record of response time to > them. > > Hey look... a perfect use case for this feature... > > Not surprisingly we don't want to have to operate and maintain a separate > system for six IP's. Alerting can be flappy because Observium/fping is only > sending a single ICMP echo - we're OK with that and don't even really want > more pings which would lead to average values anyway - and we've worked > around flaps with delays and automatic suppression of duplicate alerts in > our alert management and escalation tool. > > The six are monitored by IP; the DNS hostname test below was simply to > double check there was no issue with this and a DNS name. Just a hostname > that I've never managed to forget and use a lot to ping test connectivity > out. > > Also, I just realised that the "Skip ping" option is no longer > automatically hidden in device settings when "Skip SNMP" is checked; I'll > add an updated diff in JIRA shortly after I look at the JS for that again. > > <Capture.PNG> > > <observium_ping_only_screens3.PNG> > > <observium_ping_only_screens4.png> > > <observium_ping_only_screens5.PNG> > > > On Sun, 3 Mar 2019 at 18:07, Mike Stupalov <mike(a)observium.org> wrote: > >> Ohh my dear.. >> >> Which really benefit to use Observium for ping_only hosts? >> >> Pls show (screenshots) how this devices displayed on your install. >> >> Colin Stubbs via observium wrote on 03/03/2019 07:43: >> >> >> For the benefit of anyone on the list who doesn't use JIRA... and also so >> that others who support (want/need) this feature can comment. >> >> https://jira.observium.org/browse/OBS-2925 >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fjira.obse…> >> >> Attached patch defines OBS_SNMP_SKIP flag and uses snmp_skip device >> attribute, similar to OBS_PING_SKIP and ping_skip, in order to have hosts >> that are ping only. >> >> Ping only hosts can still have the Observium Unix Agent installed >> (tested), and other poller modules such as IPMI enabled (untested). >> >> Tested: >> >> 1. Add/remove/rename ping only hosts via CLI >> 2. Add/remove ping only hosts via webUI >> 3. View/interact ping only hosts via webUI - SNMP specific >> features/menus etc are hidden while skip SNMP is enabled >> 4. Alerting - device_status equals 0 && device_status_type equals >> ping - will trigger alerts for host down/recovery events >> 5. Shifting a previously SNMP contactable host to ping only by >> ticking skip SNMP box - old SNMP graphs/etc are maintained and remain >> available - remove skip SNMP box and SNMP polling begins again >> >> Things I know kind of don't work right now: >> >> 1. Location override - poller/discovery doesn't seem to perform >> geocoding and whatever else is happening there >> >> Things that could be improved: >> >> 1. Unix Agent poller module etc is enabled by default for all hosts, >> for ping only hosts, perhaps it should be disabled by default? Will improve >> performance by reducing the number of processes that hang while the 10s >> default connect timeout happens. >> >> Totally untested: >> >> 1. Use of autodiscovery SNMP skip - should work in theory, unsure if >> those parts of the patch should actually be used though. Some people out >> there may actually want to add anything that does respond to ping and can >> be found thru adjacency and routing protocol info etc?? >> >> >> >> Patch generated from recent trunk, touches files as below, >> >> [root@desktop observium]# diff -r -u observium-trunk root | grep -v >> ^Only > ping_only_hosts.diff >> [root@desktop observium]# cd root >> [root@desktop root]# svn status >> M add_device.php >> M html/pages/addhost.inc.php >> M html/pages/device/edit/device.inc.php >> M html/pages/device/edit.inc.php >> M html/pages/device/graphs.inc.php >> M html/pages/device/perf.inc.php >> M includes/config-variables.inc.php >> M includes/defaults.inc.php >> M includes/definitions.inc.php >> M includes/discovery/functions.inc.php >> M includes/functions.inc.php >> M includes/polling/functions.inc.php >> M poller.php >> M rename_device.php >> [root@desktop root]# svn info | grep ^Revision >> Revision: 9704 >> [root@desktop root]# >> [root@desktop observium]# mv ping_only_hosts.diff >> ping_only_hosts_r9704.diff >> >> -Colin >> >> Email: cstubbs @ gmail . com >> >> _______________________________________________ >> observium mailing listobservium@observium.orghttp://postman.memetic.org/cgi-bin/mailman/listinfo/observium <https://nam01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpostman.me…> >> >> >> -- >> Mike Stupalov >> Observium Limited, http://observium.org >> <https://nam01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fobservium.…> >> >> _______________________________________________ > observium mailing list > observium(a)observium.org > > https://nam01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpostman.me… > >

9 9

Distributed poller
by Luca Sasdelli 07 Mar '19

07 Mar '19

Hi all, does it exist any updated doc about the distributed polling? What about the drop-down "Poller" menu under general device settings? Thanks! Luca

1 0

Ignoring Interfaces in Discovery
by Benjamin Moore 07 Mar '19

07 Mar '19

Can someone tell me how to get Observium to NOT ignore interfaces? I'm assuming that it is ignoring them due to the fact that they don't have ifTypes assigned - ##### Module Start: ports ##### o Caching OIDs ifDescr ifAlias ifName ifType ifOperStatus o Caching DB 0 ports o Discovering ports XX VLAN1(12)XXXXXXXX +---------+-----------+-----------+---------+--------+-------------+---------+ | ifIndex | ifDescr | ifName | ifAlias | ifType | Oper Status | Ignored | +---------+-----------+-----------+---------+--------+-------------+---------+ | 9 | WAN2 | WAN2 | ... | | | yes | | 10 | WAN1 | WAN1 | ... | | | yes | | 12 | VLAN1 | VLAN1 | ... | l2vlan | | no | | 25 | LAN4 | LAN4 | ... | | down | yes | | 26 | LAN3 | LAN3 | ... | | down | yes | | 27 | LAN2 | LAN2 | ... | | down | yes | | 28 | LAN1 | LAN1 | ... | | up | yes | | 29 | WAN_PORT1 | WAN_PORT1 | ... | | up | yes | | 30 | WAN_PORT2 | WAN_PORT2 | ... | | down | yes | | 51 | USB1 | USB1 | ... | usb | | yes | | 52 | USB2 | USB2 | ... | usb | | yes | +---------+-----------+-----------+---------+--------+-------------+---------+ LAN1 and WAN PORT 1 are the two interfaces I need to have monitored.

2 1

Ping-only devices
by Ryan Huff 03 Mar '19

03 Mar '19

I really do understand this, on a deeper level than might be imagined ;). I have no vested interest either way personally, I’m just offering some unsolicited thoughts... I always looked at the “ping only” topic like asking a 10lbs. (4.5kg or 0.7149 stones) sledge hammer to drive a nail. Sure, it can do it but it’ll probably be messy and ugly because a sledge hammer was never meant to drive nails, and when you use tools in ways they weren’t really designed for, things can get messy. Just use a hammer instead. I have done three things to achieve icmp only monitoring and also stick within the base code (as a developer, I hate mucking with base code or re-inventing wheels when I want to do different things). Icmp-only monitoring to me, always just seemed silly (not in purpose) to try and work into an existing and established application that didn’t already do it. It’s just too easy of a problem to solve otherwise, than to go to the time/expense of refactoring an application IMHO. - I use RTT SLAs to monitor next hop devices (which OBS is fabulous at picking up), assuming the device hopped from is SLA capable and OBS monitored. - I use Fping (Smokeping) integrated with OBS. Using the Smokeping web wrapper makes a great RTT only tool, and you also have the OBS integration for when it makes sense to use on OBS devices. - I have a small (very small) bash script that reads a text file of IP address and launches one thread per device to run continuous pings. Not a very scalable script, but like you, I only need it for a very few limited cases. The script uses sendmail to email me if it can’t reach something. Thanks, Ryan

1 0

2nd TRY | Generating alerts with firewall sessions thresholds
by Gordon Cheng (gocheng) 01 Mar '19

01 Mar '19

Hi all, We are looking for a way to generate alerts from Observium (19.1.9661) when exceeding certain number of sessions on a Cisco firewall. Is it something easily achievable? [cid:image001.png@01D4CEE1.B8160000] Thanks. - Gordon

2 3

Cisco ASA IPSec tunnels
by Johnathon Voegeli 01 Mar '19

01 Mar '19

Hey guys, Does anyone know where to set the “tunnel name” in a Cisco ASA or more rather where Observium gets that info? I have a dozen or so IPSec tunnels built, but Obs calls them all by the outside interface IP I suspect because I am too dense to figure out where its getting the tunnel name field from? [cid:image001.png@01D4D02B.AA8D38E0] The local address and the tunnel name are all the same.

1 0

Change Device Name Without having to Re-Add Device.
by Connary, Scott 01 Mar '19

01 Mar '19

Is there a way to change the name of a device without having to remove and re-add? E.G. Workstation01 Workstation02.contoso.com Change workstation01 to workstation01.contoso.com Thank you in advance for any help with this. -Scott

2 1

Empty alert log
by Laszlo Nemeth 27 Feb '19

27 Feb '19

Hello I upgraded from 9667 to 9725 and the alert log page is empty. Before the upgrade there were lot of logs, but now it looks like a not fully rendered page.. The syslog alert shows me logs and the bottom of the page the observium logo and the version number. The alert logs doesn't show this bottom line, just give me an FROM and TO field with a Search button and that is all. Can i check anything for the debug? Thanks Laszlo

2 2

Monitor Furukawa
by hermes.martinez＠pueblobonito.com.mx 27 Feb '19

27 Feb '19

Hi Everybody, Can someone help me, I'm Trying to monitor some devices Furukawa but Observium doesn't show me too much information.. Does anyone have some MIBs that can help me to get more information from the diveces? Regards,

3 2

Create a new dashboard
by Steve 27 Feb '19

27 Feb '19

Hi, I'm having issues with "create new dashboard" function in observium (19.1.9661). When I select it from the menu it redirects me to url https://MYOBSERVIUMURL/dashboard_add/ but the dashboard remains the default one. I don't get how can I create a new one, can someone explain this to me? Thank you Stefano

4 10

Generating alerts with firewall sessions thresholds
by Gordon Cheng (gocheng) 27 Feb '19

27 Feb '19

Hi all, We are looking for a way to generate alerts from Observium (19.1.9661) when exceeding certain number of sessions on a Cisco firewall. Is it something easily achievable? [cid:image001.png@01D4CE0A.4A9F84B0] Thanks. - Gordon

1 0

New webhook integration for alert contacts
by Ryan Huff 26 Feb '19

26 Feb '19

Hey folks, thought I'd share with the community as I recently had a need that I had to build the tool for and thought others might benefit too: https://github.com/ryanthuff/Observium_Webex_Notifier Its a script an OBS webhook contact can post to, and then post those alert details to a Cisco Webex Teams space. The instructions are pretty clear and found in the README.md. I just run the script on-box in the OBS web path (.../html/...) somewhere, then just use that URL for the OBS contact Webhook. I have been using for awhile and it works really well thus far. Thanks, Ryan Huff, CCDP, CCNP Cisco Certified Network and Design Professional

2 2

IP SLA SNMP OID
by Jason La 26 Feb '19

26 Feb '19

Hi, IP SLA monitoring is awesome from Observium. Can you please let me know what OID you’re using to achieve such a great stat/result? Thank you Jason La | Lead Systems Engineer, Portware Infrastructure Portware, A FactSet Company (212) 370 8353

2 1

Session lifetime
by Ricardo Franco Cantero 26 Feb '19

26 Feb '19

Hi, I still keep getting logged out even though Global Settings --> Authentication --> Session Lifetime --> 1 Week, Until browser restarts, it doesn't matter. After 30 minutes I get logged out. Kinda frustrating since we can't use Observium at fullest now. Any advice would be welcome with this. We already rebooted the system several times but no help. Kind regards Ricardo Franco Cantero

2 2

Contact alert webhook json payload
by Ryan Huff 26 Feb '19

26 Feb '19

What I am looking to do, is when an alert notifies my webhook contact, be able to have it also grab the message_graphs blob (if one exists for the notification), so that my custom coded contact also has the graph that caused the alert, along with the alert details; thinking of jitter and RTT SLAs as the use case... So far I have worked out that the alert makes the post call to the notification queue, and the notification queue posts to the contact webhook. In the JSON payload posted to the contact, I don’t see a way to accurately identify which row I would need to select in the notification queue, to grab the message_graphs blob. There is a alert_table_id, but the message_graphs are in the notifications_queue, and since there isn’t a FK relationship between the two tables, not sure if I could accurately identify the right row in notifications_queue. Anyone ever try something like this and/or have advice? Am I overthinking this and rather than grab the blob, is a way to just remake the graph on the fly using the alert details that are posted to the contact webhook? Thanks for any of your thoughts... -Ryan

1 0

Weathermap not drawing png files
by Tomasz Karczewski 25 Feb '19

25 Feb '19

I added weathermap to observium from https://github.com/akender/weathermap-for-observium Configured as described but after map creation i doesn’t creat .png files. /usr/bin/php /opt/observium/html/weathermap/map-poller.php -d shows PHP Fatal error: Uncaught Error: Call to undefined function check_extension_exists() in /opt/observium/includes/definitions.inc.php:141 Stack trace: #0 /opt/observium/html/weathermap/map-poller.php(55): include() #1 {main} thrown in /opt/observium/includes/definitions.inc.php on line 141 My php version is PHP 7.0.33 Did you have similiar problems? Tomasz Karczewski Administrator Sieci <mailto:tkarczewski@man.olsztyn.pl> tkarczewski(a)man.olsztyn.pl <http://www.man.olsztyn.pl> http://www.man.olsztyn.pl <http://www.uwm.edu.pl> http://www.uwm.edu.pl tel. (89) 523 45 55 fax. (89) 523 43 47 Ośrodek Eksploatacji i Zarządzania Miejską Siecią Komputerową OLMAN w Olsztynie Uniwersytet Warmińsko-Mazurski w Olsztynie

6 8

NTP MIB Question
by Ryan Huff 25 Feb '19

25 Feb '19

I see OBS has a Cisco NTP MIB.. when I add Cisco devices (like a router for example), that is also running NTP services (ntp server... etc), I don’t see where OBS is showing the information for the device. When I look at the MIBs under device properties, it doesn’t appear to be there, though the MIB is in the /opt/Observium/mib/cisco folder.... Anyone know if there is anything special you have to do to get these MIBs working? Thanks, Ryan Sent from my iPhone

2 1

SNMP hardware detection bugged
by Peter Watts 24 Feb '19

24 Feb '19

We have a few hundred Cisco 880 series routers (approximately four different variants). Since ~4 days ago, they're all getting reported as the same hardware now - C887VA-K9 Here's an example - actually is a CISCO887VA-K9 - from poller.php 19.2.9721: ##### Module Start: os ##### o OS Poller Group o Vendor Cisco o Hardware C887VA-K9 o Version 15.3(3)M9 o Features UNIVERSALK9 o Serial FGL1811239Z o Asset <empty> >From snmpget: (entPhysicalDescr) iso.3.6.1.2.1.47.1.1.1.1.2.1 = STRING: "887VA chassis, Hw Serial#: FGL1811239Z, Hw Revision: 1.0" (entPhysicalContainedIn) iso.3.6.1.2.1.47.1.1.1.1.4.1 = INTEGER: 0 (entPhysicalName) iso.3.6.1.2.1.47.1.1.1.1.7.1 = STRING: "887VA" (entPhysicalSoftwareRev) iso.3.6.1.2.1.47.1.1.1.1.10.1 = STRING: "15.3(3)M9, RELEASE SOFTWARE (fc2)" (entPhysicalSerialNum) iso.3.6.1.2.1.47.1.1.1.1.11.1 = STRING: " FGL1811239Z" (entPhysicalModelName) iso.3.6.1.2.1.47.1.1.1.1.13.1 = STRING: "CISCO887VA-K9" In the device logs: 2019-02-18 08:46:04 aus0264-r1 Hardware changed: 'CISCO887VA-K9' -> 'C887VA-K9' EB Games | ZiNG Pop Culture | Peter Watts | Infrastructure Supervisor | Australia & New Zealand | Peter.Watts(a)ebgames.com<mailto:Peter.Watts@ebgames.com> | +61 7 3860 7757 | 0438 636 110

2 5

unsubscribe
by Michael Medwid 24 Feb '19

24 Feb '19

unsubscribe On Sun, Feb 24, 2019 at 4:00 AM <observium-request(a)observium.org> wrote: > Send observium mailing list submissions to > observium(a)observium.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > or, via email, send a message with subject or body 'help' to > observium-request(a)observium.org > > You can reach the person managing the list at > observium-owner(a)observium.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of observium digest..." > > > Today's Topics: > > 1. OBS Integration with NFSen (Ryan Huff) > 2. Re: OBS Integration with NFSen (xomka686) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 23 Feb 2019 22:04:41 +0000 > From: Ryan Huff <ryanhuff(a)outlook.com> > To: Observium <observium(a)observium.org> > Subject: [Observium] OBS Integration with NFSen > Message-ID: > < > BN6PR08MB27246F6A4F24A7417CD360A8C5780(a)BN6PR08MB2724.namprd08.prod.outlook.com > > > > Content-Type: text/plain; charset="iso-8859-1" > > I -think-, I have NFSen integration with OBS working correctly, but I'm > not clear on where I can see the flow graphs in OBS. I assume under the > Graphs tab on the device page? > > Thanks, > > Ryan Huff, CCDP, CCNP > Cisco Certified Network and Design Professional >

2 1

PHP Weathermap security issue.
by Hamilton, Kent 22 Feb '19

22 Feb '19

Has anyone solved the security issue with PHP Weathermap such that it honors observium permissions? Currently if you are using weathermap anyone can reach your maps without a password if they know the standard URL for the weathermaps. This is an issue for us as we allow external access to our observium server, but have to block the weathermaps using .htaccess files. ________________________________ This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

2 1

Alerts Not Sending to Contacts
by Alex 22 Feb '19

22 Feb '19

Good Morning Adam, I recently raised a ticket in jira OBS-2905. I have an instance of Observium running 19.1.9661 and have enabled alerting for a memory check at 70% for one of our hosts. This alert message works as expected on the web interface, the issue is that it is not sending the alert to the contacts (both slack and email). When tested with the test_alert.php script the emails send correctly this leads me to believe that the configuration of the email is not the issue. Do you have any other suggestions as to what I can test to make the alerts send to my contacts correctly when they are naturally generated? Kind Regards, Alex

3 3

Aggregate graphs
by Christian Eriksson 22 Feb '19

22 Feb '19

Hi, Is it possible to aggregate grahps from a selected graph, eg. firewall sessions within a device group? I have made one for all our Cisco security contexts and want to see total sessions at once See attachment Best regards Christian

3 6

Renamed interface - how to keep unified history?
by Adam Thompson 21 Feb '19

21 Feb '19

I made a change on one of our routers that caused a new ifIndex & name to be assigned to a customer circuit (interface). Observium is correctly reporting the data on the old virtual i/f (which still technically exists) and – naturally – separately on the new virtual i/f. Is there any way to (retroactively???) tell Observium that these are really the same interface, and to display only one graph for the two ifIndexes? Or, if I correct the situation so the old ifIndex & name is being showing traffic again, is there any way to move, or inject, the collected data on the ‘new’ port into the ‘old’ port’s RRDs? (i.e. avoid a multi-day gap in a multi-year dataset) We are reasonably up-to-date, running 19.2.9712 – not sure what other info will be helpful here. Thanks, -Adam Adam Thompson Consultant, Infrastructure Services [merlin-email-logo] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

3 5

Alert Checker Question
by Ryan Huff 20 Feb '19

20 Feb '19

I have an alert checker called, "device down" and it tests for "device_status = 0". Occasionally, this alert will fire, but the underlying OS still has network connectivity to these device (ICMP). What this tells me, is that the underlying SNMP daemon on the server may be malfunctioning, because if OBS can't make and SNMP poll to a device, it makes sense to me that it would think the device_status = 0 for that device. So given that this doesn't seem to be an OBS issue, is it something others have encountered and found away around? I'm Ubuntu 18.04 here... just wondering if I need to throttle the poller or if there are other known way the community has addressed this? Thanks, Ryan

2 2

L2/L3VPN issues with Juniper MIBs
by Luis Balbinot 19 Feb '19

19 Feb '19

Hi. This has been bothering me for some time but I've only got the time to look at it now. When we list Ports for any given Juniper device we get a nice green label right below the speed/MTU/lag column with the name of the VRF when it's an L3VPN. Why not the same for L2VPNs? That would be nice, specially if the RT is encoded in the name (makes tracking issues easier). Second, on the righthand side of the Ports table there's an unnamed column right next to the MAC Address with some information regarding the interfaces, LAG membership, etc. There's a xconnect icon that is supposed to show the remote interface and device for L2VPNs, but that's completely messed up (see image attached). Are you aware of that? Can that be fixed? The device is correct, but the interface isn't. The same goes for L3VPN. The interfaces shown on that right column are not endpoints of the same VPN and even the devices are wrong. I'd love to help on that. Just checking ahead to see if there's anything stopping you from fixing it at MIB level or something. Thanks! Luis

1 0

Session lifetime
by Ricardo Franco Cantero 18 Feb '19

18 Feb '19

Hi, We just upgraded our Observium and (perhaps it's already mentioned but the archive doesn't work) since the upgrade we keep being logged out every 30 minutes or so. We have it running on a large screen but every 30 minutes (it looks like 30 minutes, haven't timed it) it need to enter my credentials again to log in. I know I can check the box Remember my Credentials but that's not what I'm asking. I want it to keep the session alive longer like it did. Kind regards, Ricardo Franco Cantero

6 10

IPv6 privacy addresses vs IP Session binding
by Darrell Budic 18 Feb '19

18 Feb '19

Pretty obvious when I figured out what was happening, IPv6 privacy addresses aren’t really compatible with IP Session binding. As I discovered and was driven nuts by for a day or two after my ISP added v6 :) If you’re using v6 and seeing rapid session expiry, try disabling IP Session binding. Consider this a RFE for IP Session binding on IPv4 addresses only. Maybe a second request for a loose form of IPv6 session binding to within the same network range (either /64 or user configurable?) to allow some restrictions on it? Not sure how feasible that would be, but it sounds like it could give us some reasonable v6 protections. Thanks for reading, -Darrell

1 0

Custom Widgets
by Mirditor Kuçaj 18 Feb '19

18 Feb '19

Hello I am searching for a way to customize the widgets. With the old dashboard it was easy with the frontpage filters. With the new one I cant EDIT the SYSLOG Widget for displaying only desired severity and any Filter (Only in widget, not in global config) And the device status boxes doesnt display more than 10 boxes even if I has a lot of dashboard space. Displays a unclickable XX more Is there any documentation where can I edit them. I am running Observium 19.1.9661 Regards Mirditor Kuçaj Backbone Network Director <mailto:miri@abissnet.al> miri(a)abissnet.al Abissnet Sh.a. +355 69 60 91 364 +355 (0)44 300 003 Ext 139 Rr. Ismail Qemali, Pallati Abissnet, Tiranë <http://www.abissnet.al/> www.abissnet.al <https://www.facebook.com/Abissnet> <https://plus.google.com/u/0/+AbissnetalISP> <https://www.linkedin.com/profile/view?id=AAIAABqLWRAB88ljU6t8b67oVm8PAlvPrh mPybE&trk=nav_responsive_tab_profile%20>

1 0

Question on alerts migration
by xomka686 16 Feb '19

16 Feb '19

Hi Adam, Recently you've mentioned "/migrate_alerts/" link to be used to migrate old alert format to the new one. Is it's usage documented anywhere? Or it's just 1-click operation? I was looking for such functionality and have a few customers with old alerting seaking for easy migration to new style. --- Best regards, Sergei

2 1

Questions regarding parsing
by Ryan Huff 15 Feb '19

15 Feb '19

Are there currently any built-in ways (that I clearly would have missed in the documentation) to create/add custom parsing/metrics? For example; I am a telephony engineer and my routers do the normal route-y things, but they also do specialized things with specialized configurations that are not present on all or most routers (e.g Dial Peers). Is there a way to define/capture configuration sections to parse (clearly, outside the bounds of SNMP, I get it..) and then either populate as a tile on the device page or some type of menu item added to the navigation bar; thinking perhaps the regex engine that is used to create the Syslog alerts or something.. I hate one-offing and "plugin'ing" code, cause then that's something I have to support; so I'm committed to using OB the way its offered, just trying to see if there was a creative way to get this done.. Thanks, Ryan Huff, CCDP, CCNP Cisco Certified Network and Design Professional

1 0

Edit Alert Association Ruleset
by Steve 15 Feb '19

15 Feb '19

Hi, is it possible to edit "Alert Association Ruleset" on an alert checker ? How? Many Thanks Steve

2 4

reverse geocoding not working
by Joey Stanford 15 Feb '19

15 Feb '19

Hi, We have our SNMP location strings set in all but a few cases to “NAME [xx.xxxxxx,-yy.yyyyyyy]” and as you can see from the screenshot that works for over a hundred hosts. For some reason though, not all of them are being interpreted properly. Any idea how to troubleshoot (or fix) this? We’re not overriding anything in config.php.

2 2

Add Lxd edfa/emtx devices patch
by Reto Zingg 14 Feb '19

14 Feb '19

Hi, In a network we monitor there are Langxunda (Lxd) Externally Modulated Optic Transmitters and Erbium Dotted Fibre Amplifiers. E.g: http://www.langxunda.com/en/goods/1167.html The current OS detection for the NSCRTV-ROOT mib does not work on them. So I added rules for them in os.inc.php. The limits which are set for the sensors in nscrtv-root.inc.php do not work for us. So I added some checks to not set a limit. Additionally I added some more sensors. We do not own the copyright of the Lxd logo, I don't know what your policy is, wrt the use of logos. I got it from the web page and cropped it to look nicer. It would be nice if the attached patch and logo could be added. If there are changes needed, please let me know (style, naming convention, etc). Thanks and best regards Reto

2 3

is there any solution to linux not having persistent port ifIndexes ?
by Edvinas K 14 Feb '19

14 Feb '19

Hello, Since we'all know that Linux is not having persistent port if Indexes, is there any quick-fix workaround to make the ifindexes stay after server reboot ? Observium wise or Linux wise ? Thanks

3 6

Assign specific dashboard to user
by Fiberwide Sysadmins 13 Feb '19

13 Feb '19

Hi All, i'm trying to setup a configuration to give access to traffics data to our customers, but I've encounter some problems on the dashboard. Now You can define more dashboards but I can find a way to define a dashboard for our NOC and a dashboard for the customers... The default is applied to all users, but i set this with backbone graphs, so in the case of customer with only USER privilege log in all the graph are showed as "Permission error", that's because are related to device or ports not assigned to that specific customer. So my idea was to create a dashboard only with "Status summary" and "Event Log", those to widget show only the info related to the customer. Other minor question, can You tell Me a way to change the name of the dashboard? Distinti saluti --- Davide Lima Daum - System & Network Engineer Fibering S.p.a. - www.fiberwide.com T: +39.02.00632100 F: +39.02.00632199 e: sysadmin(a)fiberwide.com

2 1

Changelog
by Benjamin Moore 12 Feb '19

12 Feb '19

Is there somewhere I can see the changelog for the rolling version of Observium?

1 0

Having issues with the email alerting..
by Ryan Huff 12 Feb '19

12 Feb '19

Having issues getting the alert to mail. I am not using SMTP, I have sendmail installed locally to the OS. If I use the PHP mail(); function in a test script and execute it in the broswer, it sends mail just fine. Here is the email params in my 'config.php' file: $config['email']['enable'] = TRUE; $config['email']['backend'] = 'mail'; $config['email']['sendmail_path'] = '/usr/sbin/sendmail'; $config['alerts']['interval'] = 40000; $config['email']['default'] = "me(a)company.com"; $config['email']['from'] = "Observium <observium(a)company.com>"; $config['email']['default_only'] = TRUE; Any thoughts mates? Thanks, Ryan Huff, CCDP, CCNP Cisco Certified Network and Design Professional

2 2

mcrypt deprecated
by Lane Russell 12 Feb '19

12 Feb '19

It appears that the install instructions for Ubuntu 18.04 still require that mcrypt be enabled. However, mcrypt was deprecated in PHP 7.1 and fully removed in PHP 7.2, which is used in Ubuntu 18.04. In addition to updating the install documentation, what is the timeline for replacing mcrypt in Observium? What are the correct steps for installing Observium on Ubuntu 18.04? Regards, Lane Russell Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 7

Dealing with Alert Storms
by Joey Stanford 11 Feb '19

11 Feb '19

Hi All, I’m looking for advice on how to deal with alert storms. For example, we lost a UPS last night at a critical hub which cause Observium not to be able to reach most of our networks (and of course, all the alternative OSPF routes were powered via that UPS). Consequently we had several hundred alerts sent out via email and telegram. Is there any interesting way to deal with this that anyone can recommend? Thanks, Joey

4 8

Printing reports
by Ryan Huff 09 Feb '19

09 Feb '19

Using latest CE.. Just making sure I haven’t missed something in the docs and config guides.. I do not see a way to print any type of reports/PDFs.. but I do see a ../html/pdf.php which looks like it would do that. Did I miss a page in the docs? -Ryan

3 7

Map Location
by Ryan Huff 09 Feb '19

09 Feb '19

It seems that no matter what addressing schema I've tried to set with config['location_map']['nice_name'] ['real_address'], it continues to populate the front page map with the proper location names, but all located in Ponta Delgada on the island of São Miguel. The USA addressing formats I've tried are: street address, city, state, country and street address, city, state (Ex: 180 Peachtree Street, Atlanta, Georgia, USA) Is there an additional override I am missing, or a way to verify the location value I'm typing is understandable to the correct geopositioning on the map? Thanks, Ryan Huff, CCDP, CCNP Cisco Certified Network and Design Professional

2 2

Alert Priority
by Mike Hyslop 08 Feb '19

08 Feb '19

Hi All Is there a way to add priorities to alerts at the moment all I have to choose from is critical Cheers Mike.

1 0

Graph scale question
by Ryan Huff 08 Feb '19

08 Feb '19

Using the latest CE.. All the graphs’ time scale seems to be off by a few hours. For example, a device’s port graph shows traffic for today at 2100 hours, and it’s only 1723 currently. I have verified the PHP instance Observium is using reports the correct TZ (America/New_York) and also the monitored device is in the correct TZ. Is there a UTC offset I need to adjust somewhere? Thanks, -Ryan

3 3

APC PDU's, some change have made outlet status to show twice.
by Henrik Cednert (Filmlance) 07 Feb '19

07 Feb '19

Hello Some fairly recent update and made my PDU’s a bit messy in obervium. I know have two statuses per outlet. See pictures of two different APC models. Cheers [cid:BE5E0B1D-C29C-4C36-B635-931B3D24A996@metronome.local] [cid:11A976F8-A9AD-4931-A332-6F143F3B7EA3@metronome.local] -- Henrik Cednert / + 46 704 71 89 54 / CTO / Filmlance Disclaimer, the hideous bs disclaimer at the bottom is forced, sorry. ¯\_(ツ)_/¯ Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.

2 3

Minigraphs, names and labels. Some issues.
by Henrik Cednert (Filmlance) 07 Feb '19

07 Feb '19

Hello I mentioned this in a thread about something else but think it drowned and got lost. lifting it out to a separate thread since I find these issues very frustrating. Not sure if I’m alone or not. 1. Can’t I rename graphs like we could in config.php? 2. Is there any way to move the label so that it doesn’t hide parts of the graph? 3. They mini graphs are a lot slower to refresh now, can this be tweaked? 4. I get the feeling that “show legend” on the larger graphs is semi-broken and is more or less always off here. Or is there some global setting that can have been changed when upgrading? Cheers and thanks [cid:782CC26C-348D-4DBE-95F4-097AC52CBFBA@metronome.local] -- Henrik Cednert / + 46 704 71 89 54 / CTO / Filmlance Disclaimer, the hideous bs disclaimer at the bottom is forced, sorry. ¯\_(ツ)_/¯ Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.

2 1

Cisco RV340/345
by Benjamin Moore 06 Feb '19

06 Feb '19

It appears that the interfaces and everything else isn't working in Observium. Does anyone have any experience with this device? I'm happy to post an snmpwalk if it might help it get better support.

1 0