- observium - lists.observium.org

Alerts not being sorted chronological manner
by Youssef BENGELLOUN - ZAHR 14 Dec '16

14 Dec '16

1 2

How to remove unwanted ports
by Ivan Biasi 14 Dec '16

14 Dec '16

Hi all is it possible to remove, or hide, from the "Ports" panel of a device the interfaces for which the polling was disabled ? Thanks, regards I. -- ing. Biasi Ivan Area Ingegneria di Rete Direzione Servizi e Reti TRENTINO NETWORK S.R.L. Via G.Pedrotti, 18 – 38121 - TRENTO Tel : (+39) 0461.020222 Fax : (+39) 0461.020201 Email: ivan.biasi(a)trentinonetwork.it Skype: ivanbiasi https://www.linkedin.com/in/ivanbiasi ________________________________________________________________________________ Società soggetta a direzione e coordinamento da parte della Provincia Autonoma di Trento. REG. IMP. C.F. e P. IVA 01904880224 ________________________________________________________________________________ CONFIDENZIALE: Questo messaggio e gli eventuali allegati sono confidenziali e riservati. Se vi è stato recapitato per errore e non siete fra i destinatari elencati, siete pregati di darne immediatamente avviso al mittente. Le informazioni contenute non devono essere mostrate ad altri, nè utilizzate, memorizzate o copiate in qualsiasi forma. CONFIDENTIAL: This e-mail and any attachments to it may be confidential and may contain private and confidential information. If you are not the intended recipient of this email please notify the sender immediately. Moreover, you must not disclose or distribute its contents to anyone nor copy, store or use its contents in any way.

1 0

Power Supply Status Alarm Check
by Sebastian Klute 14 Dec '16

14 Dec '16

Hi there, I'm getting a bit confused while trying to create an alarm checker for power supply. So it's located under Status with physical class powersupply. Using the actual name would be worthless if this changes. What I want to check is the status of the status. Meaning running or not. I would go for status_type "powersupply" and status_event "running". If this is not true then give me an alarm. But I'm very unsure about the status_type and the correct one to check be cause an event could be "OK" or "FAIL" as well. The purpose is to track if any of the power supplys of our switches fails, so you can do an exchange before the whole switch goes offline. Hope anyone can help me with that. Best regards Sebastian Klute -- Accelerated IT Services GmbH Kruppstraße 105 - 60388 Frankfurt - Germany sk(a)accelerated.de - http://www.accelerated.de/ Phone: +49 69 - 900 180 41 - Fax: +49 69 - 900 180 90 HRB: 60665 - Amtsgericht Ludwigshafen - VatID: DE253684415 Managing Directors: Nicolaj Kamensek & Ole Krieger

1 0

Alert not working
by Eduardo Schoedler 13 Dec '16

13 Dec '16

Hi, I'm not understanding why this alert isn't working. [image: Imagem inline 2] BGP Session state: [image: Imagem inline 1] Thank you. Regards, -- Eduardo Schoedler

3 6

Re: [Observium] OpsGenie Observium Integration
by Halit Okumuş 09 Dec '16

09 Dec '16

Hi Adam, The current integration was made, months ago, according to your old webhook content. And there are existing, in-use configurations in OpsGenie at the moment. We can't just throw them away and change that, can we? That's why we suggested the webhook content before. I don't care how crappy your payload was, we're just trying to make use of the two products together. Alright, cooling down, we can do a rewrite. We'll make a V2 integration which will make use of the fields you mentioned and deprecate our old one. Can you send an example of that request to http://4kmm916oxm9m.runscope.net ? Cheers, Halit On Mon, Dec 5, 2016 at 3:37 PM, Çağla Arıkan <cagla(a)opsgenie.com> wrote: > > > Begin forwarded message: > > *From: *"Adam Armstrong" <adama(a)memetic.org> > *Subject: **Re: [Observium] OpsGenie Observium Integration* > *Date: *5 December 2016 at 15:33:44 GMT+3 > *To: *"" <observium(a)observium.org> > *Reply-To: *Observium Network Observation System <observium(a)observium.org> > > Oh god. I hate when you start looking through contributed code and realise > it was written by someone who hadn't even bothered to make sure it does > what it's supposed to do. > > At the moment the integration sends this payload : > > $payload = array( > "apiKey" => $endpoint['api_key'], > "message" => $message_tags['TITLE'], > "description" => $message_tags['METRICS'] . PHP_EOL . PHP_EOL . > 'Conditions: '. PHP_EOL . $message_tags['CONDITIONS'], > "alias" => $message_tags['ALERT_ID'], > "entity" => $message_tags['DEVICE_HOSTNAME'], > "source" => php_uname('n'), > "details" => array( > "Alert URL" => $message_tags['ALERT_URL'], > "Duration" => $message_tags['DURATION'], > "Hardware" => $message_tags['DEVICE_HARDWARE'], > "OS" => $message_tags['DEVICE_OS'], > "Location" => $message_tags['DEVICE_LOCATION'], > ), > ); > > We're able to supply these fields from our alerting code : > > 'ALERT_STATE' > 'ALERT_URL' > 'ALERT_ID' > 'ALERT_MESSAGE' > 'CONDITIONS' > 'METRICS' > 'DURATION' > 'ENTITY_LINK' > 'ENTITY_NAME' > 'ENTITY_TYPE' > 'ENTITY_DESCRIPTION' > 'ENTITY_GRAPHS_ARRAY' // Json encoded images array > 'DEVICE_HOSTNAME' > 'DEVICE_LINK' > 'DEVICE_HARDWARE' > 'DEVICE_OS' > 'DEVICE_LOCATION' > 'DEVICE_UPTIME' > > The existing integration doesn't seem to provide the actual entity being > alerted information in a useful manner, so could probably do with being > rewritten itself so we can better match the capabilities of the two > platforms. > > adam. > > On 05/12/2016 12:24:21, Adam Armstrong <adama(a)memetic.org> wrote: > Please don't use the generic webhook crap. There's a reason it's marked as > "(Old)" now. > > I get 400 bad request when using either of those URLs. Our OpsGenie > integration (which was contributed a couple of weeks ago) currently sends : > > {"recipients":"","api_key":"2f79c4d5-7c26-4429-8e5b-6e2b936800cc"} > {"apiKey":"2f79c4d5-7c26-4429-8e5b-6e2b936800cc","message":"RECOVER: [ > omega.memetic.org] [processor] [Average] Processor usage is above > 80%","description":"processor_usage = 40\n\nConditions: > \n","alias":"46864","entity":"omega.memetic.org","source":"o > mega.memetic.org","details":{"Alert URL":"http:\/\/dev.observium.org:80 > \/device\/device=12\/tab=alert\/alert_entry=46864\/","Duration":"1m 26s > (2016-12-05 13:20:00)","Hardware":"Generic x86 [64bit]","OS":"Linux > 3.13.0-96-generic Ubuntu 14.04","Location":"Hetzner, Nuremberg, Germany"}} > > Trying to parse an arbitrary text field is a really bad idea when we can > provide that data in separate fields. > > adam. > > On 05/12/2016 12:18:29, Çağla Arıkan <cagla(a)opsgenie.com> wrote: > When you change the URL, the integration will work properly. To make the > integration work properly, we should get the same payload that you send for > generic webhook integration this can be found below: > > { > "originator": "observium sender", > "body": "ALERT: [localhost] [device] device is down\ndevice_status = 0" > } > > We will fix the documents as you described. > > Thanks, > Çağla Arıkan > > On 5 Dec 2016, at 15:12, Adam Armstrong <adama(a)memetic.org> wrote: > > The description for the "add integration" part of OpsGenie also references > to deprecated generic webhook from Observium. Please don't use that. > > Please rewrite your integration to use the specific OpsGenie integration > we provide. > > adam. > > On 05/12/2016 12:03:49, Çağla Arıkan <cagla(a)opsgenie.com> wrote: > Hi there, > > I am a software engineer at OpsGenie. We have developed an integration > specific to Observium. Thus, we would be very pleased if you can fix your > integration so that it uses /v1/json/observium endpoint rather than > /v1/json/alert endpoint. Observium Integration works similar to generic > Webhook integration but we customised it for Observium. You can check our > Observium Integration document for more information which can be found at > https://www.opsgenie.com/docs/integrations/observium-integration. > > Best Regards, > Çağla Arıkan > > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > > > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > > >

3 3

Router stopped polling via Observium
by Youssef BENGELLOUN - ZAHR 06 Dec '16

06 Dec '16

3 7

Weathermap module for observium
by Youssef BENGELLOUN - ZAHR 06 Dec '16

06 Dec '16

6 9

Question about port desr on Fortigate
by MORDAC, Benoit 06 Dec '16

06 Dec '16

Hi, I'm using the Observium professional edition, and I monitor a lot of things, including some Fortigate firewalls. I have upgraded one of them from FortiOS 5.2.x to 5.4.2 release, After this upgrade, observium don't show interfaces names or description. When calling the discovery.php script we should see the port name. ##### Module Start: ports ##### o Caching OIDs ifDescr ifAlias ifName ifType ifOperStatus o Caching DB 46 ports o Discovering ports .............................................. +---------+---------+----------+----------+----------+-------------+---------+ | ifIndex | ifDescr | ifName | ifAlias | ifType | Oper Status | Ignored | +---------+---------+----------+----------+----------+-------------+---------+ | 1 | ... | port1 | ... | ethernet | up | no | | | | | | Csmacd | | | | 2 | ... | port2 | ... | ethernet | down | no | | | | | | Csmacd | | | | 3 | ... | port3 | ... | ethernet | up | no | | | | | | Csmacd | | | ... But it's not visible in the web UI. Maybe it's possible to force Observium to use ifName instead of ifDescr attribute ? I have made a "svn update" on my observium install, the problem is still present. Thanks for your help. Best Regards,

3 2

Intel True Scale Fabric Switch 12800 support
by Jesper Frank Nemholt 05 Dec '16

05 Dec '16

Hi! I wonder if anyone are working on adding support for these devices ? They are QLogic (now Intel) InfiniBand switches and are used on most larger Isilon clusters. The OID is enterprises.10222 I've previously monitored Mellanox IB switches like the SX6036 and these have a good integration, but the Intel ones only report on the management interfaces and nothing else....and I prefer not to spend a day adding support myself if someone else already have done most of the work. snmpwalk -v 2c -c public foo.bar system SNMPv2-MIB::sysDescr.0 = STRING: Intel True Scale Fabric Switch 12800-040 (Master) SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.10222.7.1.2 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (30516852) 3 days, 12:46:08.52 SNMPv2-MIB::sysContact.0 = STRING: SNMPv2-MIB::sysName.0 = STRING: QLogic 12800-040-254 SNMPv2-MIB::sysLocation.0 = STRING: Main Chassis Unit, Slot 254 SNMPv2-MIB::sysServices.0 = INTEGER: 79 SNMPv2-MIB::sysORLastChange.0 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::mib-2 SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::mib-2.17 SNMPv2-MIB::sysORID.3 = OID: SNMPv2-MIB::snmpMIB SNMPv2-MIB::sysORID.4 = OID: IF-MIB::ifMIB SNMPv2-MIB::sysORID.5 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIB SNMPv2-MIB::sysORID.6 = OID: SNMP-MPD-MIB::snmpMPDMIB SNMPv2-MIB::sysORID.7 = OID: SNMP-TARGET-MIB::snmpTargetMIB SNMPv2-MIB::sysORID.8 = OID: SNMP-NOTIFICATION-MIB::snmpNotificationMIB SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::transmission.7 SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::mib-2.17.6 SNMPv2-MIB::sysORID.11 = OID: SNMPv2-SMI::mib-2.17.7 SNMPv2-MIB::sysORDescr.1 = STRING: RFC 1213 - (AT, IP, ICMP, TCP, UDP groups) SNMPv2-MIB::sysORDescr.2 = STRING: RFC 1493 - BRIDGE-MIB SNMPv2-MIB::sysORDescr.3 = STRING: RFC 1907 - SNMPv2-MIB (SYSTEM, SNMP) SNMPv2-MIB::sysORDescr.4 = STRING: RFC 2233 - IF-MIB (IF) SNMPv2-MIB::sysORDescr.5 = STRING: RFC 2571 - SNMP-FRAMEWORK-MIB SNMPv2-MIB::sysORDescr.6 = STRING: RFC 2572 - SNMP-MPD-MIB SNMPv2-MIB::sysORDescr.7 = STRING: RFC 2573 - SNMP-TARGET-MIB SNMPv2-MIB::sysORDescr.8 = STRING: RFC 2573 - SNMP-NOTIFICATION-MIB SNMPv2-MIB::sysORDescr.9 = STRING: RFC 2665 - EtherLike-MIB SNMPv2-MIB::sysORDescr.10 = STRING: RFC 2674p - P-BRIDGE-MIB SNMPv2-MIB::sysORDescr.11 = STRING: RFC 2674q - Q-BRIDGE-MIB SNMPv2-MIB::sysORUpTime.1 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.2 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.3 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.4 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.5 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.6 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.7 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.8 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.9 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.10 = Timeticks: (1883) 0:00:18.83 SNMPv2-MIB::sysORUpTime.11 = Timeticks: (1883) 0:00:18.83 /Jesper

1 0

OpsGenie Observium Integration
by Çağla Arıkan 05 Dec '16

05 Dec '16

Hi there, I am a software engineer at OpsGenie. We have developed an integration specific to Observium. Thus, we would be very pleased if you can fix your integration so that it uses /v1/json/observium endpoint rather than /v1/json/alert endpoint. Observium Integration works similar to generic Webhook integration but we customised it for Observium. You can check our Observium Integration document for more information which can be found at https://www.opsgenie.com/docs/integrations/observium-integration <https://www.opsgenie.com/docs/integrations/observium-integration>. Best Regards, Çağla Arıkan

2 5

Interface errors Observium Subscription version
by Afzaal Shabbir 03 Dec '16

03 Dec '16

Dear All, Will it be possible for anyone to help me understand about attached error message on Access Points Wifi interfaces, what they mean and how to fix these errors or where to look for answers regarding these errors. Both interface graphs attached. These are graphs unifi access points wifi0 and wifi1 interfaces. There are no error messages on it's physical interface. Thanks, A

1 0

Minute storage changes causing storm of "Storage Size Change" messages
by Cody Cook 02 Dec '16

02 Dec '16

I am on 0.16.12.8277 and noticed that I am getting new alerts on the eventlog. Just this week alone, there are 82.8k items about storage changing. My volumes are generally zfs with many subvolumes, and as a result, all entries are coming up in the eventlog. This also wipes away any other important changes that might be overlooked. [image: Inline image 1]

1 0

OpenConfig Telemetry?
by Johann Mallet 02 Dec '16

02 Dec '16

Hello, Do you know if exist an plan for integrate Openconfig Telemetry in Observium in the future? A few reference links: http://www.openconfig.net/projects/streaming-telemetry/ https://github.com/openconfig/reference/tree/master/telemetry Juniper (and Cisco?) will integrate this technology in the next release. Thanks! Johann

1 0

No polling
by Martin Snygg 02 Dec '16

02 Dec '16

Hi I just discovered that my install stopped polling since a couple of days, I think it´s because a svn switch I did. When running the poller-wrapper.py I get the following: Traceback (most recent call last): File "./poller-wrapper.py", line 306, in <module> if instances_count > 1 and instance_number >= 0 and (instance_number < instances_count): NameError: name 'instances_count' is not defined Where do I define "instance_count" and how? /Martin Snygg

3 13

Memory alerting false positives
by Musall, Maik 01 Dec '16

01 Dec '16

Hi, I have an alert on a linux server configured for "mempool_perc gt 90", which is firing all the time because of irrelevant caching use. Memory on Linux is always used. I'm more interested in the orange part of this graph: The device is called ucd_memory. Is there a metric I can use to get the value that's at 61% in this graph, to catch spikes like the one at 14:00 time? Thanks Maik

2 1

Re: [Observium] poller duration
by Youssef BENGELLOUN - ZAHR 01 Dec '16

01 Dec '16

5 5

poller duration
by Vater, Wolfgang 01 Dec '16

01 Dec '16

Is there a way to see which module is taking all the time when polling a device? I have Nexus 5000 switches with lots of ports, so I assume it the ports that take most of the time, but I would like to see what else takes a lot of time and if I can live without that information and disable the polling for it (like fdbcount). My N5Ks take 400 sec on average. Wolfgang Vater | Lead Client Architect | Enterprise Services Unisys Deutschland GmbH | +49 162 255 9338 | wolfgang.vater(a)unisys.com | Philipp-Reis-Str. 2 | 65795 Hattersheim [unisys_logo]<http://www.unisys.com/> Unisys Deutschland GmbH | Geschäftsführer: Sandro Lindner & Dr. Uwe Heckert | Sitz der Gesellschaft: Hattersheim | Amtsgericht: Frankfurt/Main HRB 7929 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. DIESE E-MAIL IST AUSSCHLIESSLICH FÜR DEN ADRESSATEN BESTIMMT UND KANN VERTRAULICHE INFORMATIONEN ENTHALTEN. Sollten Sie nicht der Adressat dieser Informationen sein, bitten wir Sie, sich mit dem Absender in Verbindung zu setzen und die Informationen von Ihren Endgeräten zu entfernen. [Grey_LI]<http://www.linkedin.com/company/unisys> [Grey_TW] <http://twitter.com/unisyscorp> [Grey_GP] <https://plus.google.com/+UnisysCorp/posts> [Grey_YT] <http://www.youtube.com/theunisyschannel> [Grey_FB] <http://www.facebook.com/unisyscorp> [Grey_Vimeo] <https://vimeo.com/unisys> [Grey_UB] <http://blogs.unisys.com/>

2 1

Active Directory LDAP Group Recursive Lookups
by Chip Pleasants 30 Nov '16

30 Nov '16

Hi all, We are having trouble with LDAP group recursive lookups in Active Directory. We are wondering how to configure Observium if in Active Directory we put another Active Directory group and if the group inside does not live under the current groupbase. Below is a example. I've set auth_ldap_recursive_maxdepth to 3. I tried adding the group and adjusting the groupbase together as well as individually without luck. Do we need to add that group to Observium? Is this sort of thing supported? Is there anything I can provide that may help? Current $config['auth_ldap_group'] = array("CN=Observium Admin,OU=Apps,OU=Security,DC=corp,DC=company,DC=net"); $config['auth_ldap_groupbase'] = "OU=Apps,OU=Security,DC=corp,DC=company,DC=net"; Future $config['auth_ldap_group'] = array("CN=Observium Admin,OU=Apps,OU=Security,DC=corp,DC=company,DC=net",CN=DEPT,OU=POOP,OU=Security,DC=corp,DC=company,DC=net"); $config['auth_ldap_groupbase'] = "OU=Security,DC=corp,DC=company,DC=net"; Thanks, -Chip

1 0

DB errors showing up while creating alerts
by Kaya Saman 30 Nov '16

30 Nov '16

Hi, I'm not sure if my DB has become corrupted over time however, I am trying to configure a few alert checks and hitting these errors: [2016/11/29 18:34:14 +0000] discovery.php(68468): Failed dbQuery (#1054 - Unknown column 'ifType' in 'where clause'), Query: SELECT * FROM `devices` WHERE device_id = '6' AND `ifType` = 'ethernetCsmacd' [2016/11/29 18:34:24 +0000] discovery.php(68468): Failed dbQuery (#1054 - Unknown column 'mempool_descr' in 'where clause'), Query: SELECT * FROM `devices` WHERE device_id = '32' AND IFNULL(`mempool_descr`, "") LIKE '%processor' [2016/11/29 18:34:24 +0000] discovery.php(68468): Failed dbQuery (#1054 - Unknown column 'ifType' in 'where clause'), Query: SELECT * FROM `devices` WHERE device_id = '32' AND `ifType` = 'ethernetCsmacd' [2016/11/29 18:34:35 +0000] discovery.php(68468): Failed dbQuery (#1054 - Unknown column 'mempool_descr' in 'where clause'), Query: SELECT * FROM `devices` WHERE device_id = '9' AND IFNULL(`mempool_descr`, "") LIKE '%processor' [2016/11/29 18:34:35 +0000] discovery.php(68468): Failed dbQuery (#1054 - Unknown column 'ifType' in 'where clause'), Query: SELECT * FROM `devices` WHERE device_id = '9' AND `ifType` = 'ethernetCsmacd' [2016/11/29 18:34:47 +0000] discovery.php(68468): Failed dbQuery (#1054 - Unknown column 'mempool_descr' in 'where clause'), Query: SELECT * FROM `devices` WHERE device_id = '1' AND IFNULL(`mempool_descr`, "") LIKE '%processor' [2016/11/29 18:34:47 +0000] discovery.php(68468): Failed dbQuery (#1054 - Unknown column 'ifType' in 'where clause'), Query: SELECT * FROM `devices` WHERE device_id = '1' AND `ifType` = 'ethernetCsmacd' in the logs/db.log file. Do I need to create the columns that it is asking for or is there something else that needs to be done? Thanks. Kaya

2 2

Salvo of false alerts
by Youssef BENGELLOUN - ZAHR 30 Nov '16

30 Nov '16

4 10

Real-time graphing for a group of ports
by Youssef BENGELLOUN - ZAHR 30 Nov '16

30 Nov '16

1 0

Sensor added then deleted every 5mins
by Simon Mousey Smith 30 Nov '16

30 Nov '16

Hi All Has anybody had this issue at all? I use the hddtemp script to get the temperature of two hdds, now it seems the sensors keeps being added then deleted every 5mins? One min its one hdd the next its another, it never makes up its mind? Any ideas? Regards Simon

1 0

Problem with make graphs on ports
by Janusz Janik 29 Nov '16

29 Nov '16

Good morning, I have problem with making graphs on ports. Observium recognize one of device as: ZXR10 ROS Version V4.6.02A ZXPON C300 Software, Version V2.6.02A.21 Copyright (c) 2000-2006 by ZTE Corporation Compiled Feb 4 2013, 03:49:41 It looks like most of ports do not gathering data: MAC addres is not showing up and traffic is displayed like 0bps. But real traffic exists on these ports. This instance of observium contains more devices. Problems exist on two devices with 72 ports. The other two devices have 48 and 24 ports, and generally traffic has draw properly on these devices. We suspect the key is too big number of ports on single device and observium doesn't "know" what is going on. We use observium community edition Observium CE 0.16.10.8128 (6th October 2016) I attach log from poller: ./poller.php -i 4 -n 1 -dd > /home/janix/poller.log in file. This device is the most important. We can send more log files if it will be necessary. Best regards, Janusz Janik -- Pozdrawiam, Janusz Janik http://idhosting.pl/

2 1

ESX 6.0u2 Guest VM list not populating
by Richard Wigzell 29 Nov '16

29 Nov '16

Hello, have an issue with an ESX 6.0u2 host not populating its list of VM Guests. Have run discovery.php with debug, relevant output below. Seems the host is not returning any values for vmwVmTable. Has anyone come across this issue? Suggestions welcome. ##### Module Start: virtual-machines ##### Virtual machines: VMWARE-VMINFO-MIB CMD[/usr/bin/snmpbulkwalk -v2c -c *** -Pu -OQUs -m VMWARE-VMINFO-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/vmware 'udp':'SOMEHOST':'161' vmwVmTable] CMD EXITCODE[0] CMD RUNTIME[0.0065s] STDOUT[vmwVmTable = No Such Object available on this agent at this OID] SNMP STATUS[FALSE] SNMP ERROR[#1000 - Failed response] SQL[SELECT * FROM `vminfo` WHERE `device_id` = '306' AND `vm_source` = 'vmware-snmp'] SQL RUNTIME[0.00012398s] o Duration 0.0089s Regards [cid:image001.jpg@01CE9215.D39244B0]<https://www.it.ox.ac.uk/> Richard Wigzell Networks, Security and Server Specialist IT Services | University of Oxford 13 Banbury Road, Oxford OX2 6NN T: 01865 616282 www.it.ox.ac.uk<https://www.it.ox.ac.uk/>

2 1

Failed dbQuery
by Chip Pleasants 29 Nov '16

29 Nov '16

Hi all, We just upgrade Observium Pro version from 5565 to 8181 a few days. Everything seems to be working from we can tell, although since the upgrade we noticed this message in the db.log. It occurs for multiple devices. We are running Ubuntu 12.04.5. I'm wondering if it is because we are running PHP is 5.3? Has anyone seen this message after upgrading? It would nice to have some idea about the error message before we upgrade to 16.04.1. Thanks for the assistance in advance and let me know if you need any other information. [2016/11/22 20:20:35 -0600] graph.php(21109): Failed dbQuery (#1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use ne ar '==)' at line 1), Query: SELECT * FROM `processors` WHERE `processor_type` != 'hr-average' AND `device_id` = '280' AND `processor_id` IN (WyI2MzAiXQ==) [2016/11/22 20:21:26 -0600] graph.php(21109): Failed dbQuery (#1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use ne ar ')' at line 1), Query: SELECT * FROM `processors` WHERE `processor_type` != 'hr-average' AND `device_id` = '116' AND `processor_id` IN (WyIxMDMwIl0=) Ubuntu 12.04.5 MySQL Ver 14.14 Distrib 5.5.53 PHP 5.3.10-1ubuntu3.25 Server version: Apache/2.2.22 NET-SNMP version: 5.4.3 RRDtool 1.4.7 Thanks, Chip

2 6

Question
by Francisco José Sánchez Iruela 29 Nov '16

29 Nov '16

Hi all, We want to get an archive (.CSV) from Traffic Accounting and after, we proccess it with our ERP. Is it possible? Is there any way to do it? Thanks in advance, -- Francisco José Sánchez IruelaDepartamento de redes <http://www.cartagon.com/> *Tel.* 902 998 398 – (+34) 91 020 11 32 - *Extensión 2105* *Fax.* 902 998 374 – (+34) 91 362 46 46 *E-mail.* fjsanchez(a)cartagon.com Calle Urano 50, 28760, Tres Cantos. Madrid *Web.* www.cartagon.com <https://www.linkedin.com/company/cartagon> <https://twitter.com/cartagon>

3 2

Drive size changing every 5mins
by Simon Mousey Smith 28 Nov '16

28 Nov '16

Hi All Has anybody come across this issue at all? Every 5mins, the Observium is detecting that our volumes on our FreeNAS server have changed? Whats weird is it was working fine a few weeks until I had to reboot the NAS for updates Every since then its been like this? Where should I be looking to find out why this is happening? Regards Simon

4 11

High CPU-load on pollerlog-page
by Cederlund Tobias 28 Nov '16

28 Nov '16

Hi We're experiencing high CPU-load for the browser-process when having the /pollerlog-page open. In IE there is a +45% raise and in Chrome (54) a +30% raise. We're running 8086. Is anyone else experiencing the same issue? Bug? Regards, Tobias

2 6

Vendors Support
by davide.magni＠sorint.it 28 Nov '16

28 Nov '16

Hi all, does someone knows if there is a way to get Observium working with this vendors: * F5 Networks * ProofPoint * Symantec Antispam? Thank you. Sorry if this question if out of the scope of this mailing list. /*Davide Magni*/

2 2

Network Interface marked as "ignored" during discovery?
by Kaya Saman 26 Nov '16

26 Nov '16

Hi, I'm trying to get one of my network interfaces to appear in Observium but for some strange reason it is being marked as "ignored"? In my config.php I haven't included any statements to ignore any devices and the poll time for this particular machine is only a few seconds considering that it's connection to the network is via wifi. The output of #sudo -u www ./discovery.php -h <host> -f shows: ##### Module Start: ports ##### o Caching OIDs ifDescr ifAlias ifName ifType ifOperStatus o Caching DB 2 ports o Discovering ports ..X +---------+--------------------------------+-------------+---------+------------------+-------------+---------+ | ifIndex | ifDescr | ifName | ifAlias | ifType | Oper Status | Ignored | +---------+--------------------------------+-------------+---------+------------------+-------------+---------+ | 1 | lo | lo | ... | softwareLoopback | up | no | | 2 | Realtek Semiconductor Co., ... | ens33 | ... | ethernetCsmacd | down | no | | 3 | wlp0s29f7u7 | wlp0s29f7u7 | ... | ethernetCsmacd | up | yes | +---------+--------------------------------+-------------+---------+------------------+-------------+---------+ o Duration 0.2046s Observium is seeing the interface but just ignoring it? In the UI I don't see anywhere to view 'ignored' ports; I only see "alerts", "down" and "deleted". The port does however, show up under the Inventory section. Does anyone have any idea on how to make this interface not be 'ignored'? After 2 days of searching for an answer I can only conclude that perhaps I need to make this change on the actual MySQL DB itself though I do not know the location of the 'ignore' section of ports/interfaces <- that and this is probably a really bad way of doing things too....! Many Thanks. Kaya

2 7

Re: [Observium] Observium Pro - Weathermap
by Serghei Golipad 25 Nov '16

25 Nov '16

In fact all interfaces have stopped being polled. From: observium <observium-bounces(a)observium.org> on behalf of Serghei Golipad <s.golipad(a)uk.cdw.com> Reply-To: Observium Network Observation System <observium(a)observium.org> Date: Friday, 25 November 2016 at 16:58 To: "observium(a)observium.org" <observium(a)observium.org> Subject: [Observium] Observium Pro - Weathermap Anyone else upgraded to latest SVN and lost their Weathermap traffic stats? Looks like poller-wrapper updated screwed it up. Cheers PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. CDW Limited is a Company registered in England and Wales. This email is sent for and on behalf of CDW Finance Holdings Limited. CDW Finance Holdings Limited is the UK holding company for CDW Limited trading as CDW. The registered office for CDW Finance Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than CDW or the sender of its existence. For more information about CDW please visit www.uk.cdw.com

3 5

Observium Pro - Weathermap
by Serghei Golipad 25 Nov '16

25 Nov '16

Anyone else upgraded to latest SVN and lost their Weathermap traffic stats? Looks like poller-wrapper updated screwed it up. Cheers PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. CDW Limited is a Company registered in England and Wales. This email is sent for and on behalf of CDW Finance Holdings Limited. CDW Finance Holdings Limited is the UK holding company for CDW Limited trading as CDW. The registered office for CDW Finance Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than CDW or the sender of its existence. For more information about CDW please visit www.uk.cdw.com

1 0

Debug autodiscovery ?
by Svensson Fredrik A 25 Nov '16

25 Nov '16

Hello! I know that many of my new devices doesnt have the same DNS and hostname, so, autodiscovery is not working. Is there a way to debug this so I know what switches isn’t autodiscovered? Regards Fredrik

2 4

Recent Events.
by Gabriel Zamorski 25 Nov '16

25 Nov '16

Hello, I wonder if it’s possible to suppress or ignore some of events in "Recent Events”? I have a problem with Juniper switches and event like this below, which appears every few minutes. "FAN: Fan 2 @ 0/0/1 Status Ok: juniper-XXX FAN: Fan 2 @ 0/0/1 entered OK state: running (previous: runningAtFullSpeed)" Regards, Gabriel

2 2

Custom location Syntax
by Albert Benet 24 Nov '16

24 Nov '16

Hi everybody, What is the correct syntax to put in "Custom location" ? I want to order the location menu with the next format: Devices -> Locations > City -> building -> room is it possible to do this? Thank you very much, Albert

2 3

custom unix-agent application
by Yogi Sofiharja 24 Nov '16

24 Nov '16

Dear Community, I am creating application to monitor disk response time at VM level using ioping. But every time i run the poller with debugger, i’ve got no error but my application always been deleted by the system because its lastpolled is 0. i’ve try to follow the documentation, but its seems like i can’t get solution. Do you guys have any solution for this or you have the same problem? here's the unix agent output : <<<app-ioping>>> reqps:2110 tfspeed:34565401 minreqtime:329 avgreqtime:474 maxreqtime:591 here's the pollling debug result : --------------------------------------------------------------------------- ioping SQL[SELECT * FROM `applications` WHERE `device_id` = '5' AND `app_type` = 'ioping' AND `app_instance` IS NULL] SQL RUNTIME[0.00018406s] + SQL[INSERT INTO `applications` (`device_id`,`app_type`,`app_instance`) VALUES ('5','ioping',NULL)] SQL RUNTIME[0.00168610s] CMD[/usr/bin/rrdtool create /opt/observium/rrd/localhost/app-ioping-2358.rrd \ DS:reqps:GAUGE:600:0:1000000 \ DS:tfspeed:GAUGE:600:0:1000000 \ DS:minreqtime:GAUGE:600:0:1000000 \ DS:avgreqtime:GAUGE:600:0:1000000 \ DS:maxreqtime:GAUGE:600:0:1000000 --step 300 RRA:AVERAGE:0.5:1:2016 RRA:AVERAGE:0.5:6:2976 RRA:AVERAGE:0.5:24:1440 RRA:AVERAGE:0.5:288:1440 RRA:MIN:0.5:6:1440 RRA:MIN:0.5:96:360 RRA:MIN:0.5:288:1440 RRA:MAX:0.5:6:1440 RRA:MAX:0.5:96:360 RRA:MAX:0.5:288:1440 ] CMD EXITCODE[0] CMD RUNTIME[0.0167s] STDOUT[ ] rrd data = :2308:37809231:323:433:525 RRD CMD[update /opt/observium/rrd/localhost/app-ioping-2358.rrd N:2308:37809231:323:433:525] RRD RUNTIME[0.0013s] RRD STDOUT[OK u:0.00 s:0.00 r:3.30] RRD_STATUS[TRUE] --------------------------------------------------------------------------------- after creating rrd files, my application always been deleted by the system. SQL[SELECT * FROM `applications` WHERE `device_id` = '5' AND `app_lastpolled` < '1479199532'] SQL RUNTIME[0.00019503s] /opt/observium/rrd/localhost/app-ioping-2358.rrd SQL[DELETE FROM `applications` WHERE `app_id` = '2358'] SQL RUNTIME[0.00605202s] - o *Module time * 0.0527s --------------------------------------------------------------------------- For your consideration, here's attached related script.

2 2

graph is not include some section
by Farshid Abediny 24 Nov '16

24 Nov '16

Hello, as you see in attachment i see my graph for all ports is not include some section and it has some are that are white and data is not available for those time period. can any one help me why this happen? also i use latest version of observium. i guess maybe it was for cronjob that take about 1-3 minutes for run poller. is it correct or any other idea? thanks,

3 8

What determines a devices' uniqueness?
by Sebastian Harrington 22 Nov '16

22 Nov '16

Hi All, We're currently evaluating observium as a our main network monitoring tool. We're using Observium CE 0.16.10.8128 and wondering how observium determines a device as unique? We currently have the same switch added twice (via auto discovery) into observium and wondered why observium didn't detect it as the same device. Thanks for a wonderful tool! Kind regards, Seb Harrington Network Team Lead, IT Services, University of Sussex,

3 2

Re: [Observium] What determines a devices' uniqueness?
by Moerman, Maarten 22 Nov '16

22 Nov '16

The hostname Maarten From: observium <observium-bounces(a)observium.org> on behalf of Sebastian Harrington <S.M.Harrington(a)sussex.ac.uk> Reply-To: Sebastian Harrington <S.M.Harrington(a)sussex.ac.uk>, Observium Network Observation System <observium(a)observium.org> Date: Monday, November 21, 2016 at 5:28 PM To: "observium(a)observium.org" <observium(a)observium.org> Subject: [Observium] What determines a devices' uniqueness? Hi All, We're currently evaluating observium as a our main network monitoring tool. We're using Observium CE 0.16.10.8128 and wondering how observium determines a device as unique? We currently have the same switch added twice (via auto discovery) into observium and wondered why observium didn't detect it as the same device. Thanks for a wonderful tool! Kind regards, Seb Harrington Network Team Lead, IT Services, University of Sussex,

2 1

Apache hanging (probably not Observium issue but Apache issue)
by Jesper Frank Nemholt 20 Nov '16

20 Nov '16

Hi! I've started to see that on specific actions from within the Observium GUI Apache will lock up. It seems random what action it is, but all Apache workers stop responding and it takes forever to restart Apache afterwards (5-10 min to do a service httpd restart). Anyone had the same issue ? I see no errors in the Apache logs and no errors in Observium logs, nor in other logs on the LInux server (CentOS 7.2). Observium polling still run as usual, so it's just the web interface stopping. /Jesper

3 8

Monitor 147k interfaces with Observium?
by Johann Mallet 18 Nov '16

18 Nov '16

Hello, We must monitor 147,000 interfaces (logical) with Observium. Anyone has already building an architecture with so many network ports? Observium can monitor 150k network ports without failed? What is hardware recommendations? :-) Thanks ! Johann

10 24

Notes in Observium
by chott＠praha1.net 18 Nov '16

18 Nov '16

Hello team! We are looking for abbility of add notes to devices in Observium. Like NOC team add some description or notes for device Tom [email-header-praha1] Tomas Chott technický ředitel chott(a)praha1.net<mailto:chott@praha1.net> Phone: +420 245 004 005 Mobile: +420 733 123 135 Certifikace: Cisco CXFS, CCDA, SMBEN, SMBAM, CCNA Ubiquiti UCWA, UEWA, UCRSS, UCT Authorised Trainer Cisco, Ubiquiti, TP-Link, Synology Metropolitní síť Praha 1 z.s.p.o. Jindrisska 18 110 00 Praha 1 Czech Republic www.praha1.net<http://www.praha1.net/> [Popis: Facebook]<http://www.facebook.com/praha1net>[Popis: LinkedIn]<http://www.linkedin.com/pub/tomas-chott/49/97a/1aa>

2 1

Both HOSTNAME and IP ADDRESS in Observium
by Zaheer ... 17 Nov '16

17 Nov '16

Hello all, I am new to Observium, i am wondering if it is possible to have both the 'hostname' and 'IP address' of our monitored devices in 'devices' -> 'All Devices' tap? Actually i can either add a device by : 1) Its IP address thus i won't have the 'hostname' 2) Or add the 'hostname" and 'IP address' in (/etc/hosts) and add the equipment on Observium, with this option i won't have the IP address

2 1

Confirmation of version with latest vulnerabilities patched
by Eugene Kadish 17 Nov '16

17 Nov '16

Can I get confirmation which commercial version has the Computest discovered vulnerabilities patched? Reference: http://seclists.org/fulldisclosure/2016/Nov/59 Thanks, Eugene

2 1

Are syslog alerts checkers case sensitive ?
by Youssef BENGELLOUN - ZAHR 17 Nov '16

17 Nov '16

1 1

Failed Creating Application
by Yogi Sofiharja 17 Nov '16

17 Nov '16

Dear Community, I am creating application to monitor my server. But every time i run the poller with debugger, i’ve got no error but my application always been deleted by the system because its lastpolled is 0. i’ve try to follow the documentation, but its seems like i can’t get solution. Do you guys have any solution for this or you have the same problem? Yogi Sofi Harja, Research and Development at Biznet GIO Nusantara

1 0

Juniper srx Firewall CP and Flow sessions
by Pablo Marques 16 Nov '16

16 Nov '16

Hi there I installed last week Observium and I am very impressed on how cool this software is. I am having an issue: While monitoring Juniper SRX5[4|8]00s, I can collect all sorts of information from these devices, except for the CP Sessions and the Flow Sessions, they show empty in all firewalls graphs. I would appreciate if someone can help me troubleshoot this. Thank you Pablo

1 1

Regex in alert checkers
by Michael 16 Nov '16

16 Nov '16

When you have a problem that can be solved with regex, you now have two problems... I'm having trouble making a fairly basic regex string match in the alerting system. I want to not match any devices that have hostnames starting with a digit. Easy, right. I think my problem is not finding the right bracing to build the syntax within the ui. Things I have tried that don't seem to work: hostname notregexp \b\d.* hostname notregexp /\b\d.*/ hostname notregexp /(\b\d.*)/ hostname notregexp '/\b\d.*/' hostname notregexp "\b\d.*" hostname notregexp "/\b\d.*/" hostname notregexp '\b\d.*' Has anybody figured out what the secret handshake is? Michael

5 8

Observium Custom Agent Module
by Roman Romanyak 15 Nov '16

15 Nov '16

Hello Observium users, I was following this manual http://www.keithrogers.co.uk/?p=12 to create a custom graph in observium and hit some issues. The APP tab does not appear in observium gui and looks like the graph is not being created. Here is some data: When I run "poller -h monitored_server" I see the following info in the output: [ntp] => string(0) "" [postfix_mailq] => string(19) "Mail queue is empty" [local] => string(0) "" [app] => array( [apache_procs] => string(6) "609938" ) ) ... ... No include: kernel No include: netctr No include: ntp No include: postfix_mailq No include: local No include: app Including: applications/apache_procs.inc.php apache_procs So, it looks like observium is getting data, but I'm not sure where to look to check why I don't see the relevant graph. Thanks, Roman. -- Roman Romanyak Network engineer

2 1

No total values for Peering + Transit ports aggregate graph
by Youssef BENGELLOUN - ZAHR 15 Nov '16

15 Nov '16

2 11