- observium - lists.observium.org

Alert Checker using SSH?
by Dano, Leo 28 Jun '16

28 Jun '16

Hello, Is there any examples on how to create one is a host can't be SSH'd, maybe every minute? Thanks, ----------------------- Leo Dano

3 4

Billing fails on specific interfaces
by Jesper Frank Nemholt 28 Jun '16

28 Jun '16

Hi! I was testing billing and with certain interfaces it reports no data, despite the graphs clearly showing data. My thought is that it may relate to the interface name as it works well with other products and interface names. The "special" think is that the interface name has a colon in it. Have anyone seen this before ? See output : Bill : Test bill Polling nac-vv01-01:e1b on nac-vv01.xyz.com time: 1466805074|0 period:1466805074 No data. Polling nac-vv01-01:a0a on nac-vv01.xyz.com time: 1466805074|0 period:1466805074 No data. Polling nac-vv01-02:a0a on nac-vv01.xyz.com time: 1466805074|0 period:1466805074 No data. Bill processing... time: 1466805074|1466805005 period:69

2 2

Re: [Observium] Delay the alert trigger in case of loss only one ping
by prost pierrick 27 Jun '16

27 Jun '16

Hello, I have make some tries but I’m still spammed with fake alerting. Delay value is in minute ? How can I debug poller to check if I really lost ping ? (I’m on a 10 gbit backbone network.. I’m really surprise). Regards pierrick De : prost pierrick Envoyé : jeudi 23 juin 2016 12:36 À : Observium Network Observation System Objet : RE: [Observium] Delay the alert trigger in case of loss only one ping Delay ..yes i see it ! Thanks have a good day. De : observium [mailto:observium-bounces@observium.org] De la part de Adam Armstrong Envoyé : jeudi 23 juin 2016 12:21 À : Observium Network Observation System Cc : observium(a)observium.org<mailto:observium@observium.org> Objet : Re: [Observium] Delay the alert trigger in case of loss only one ping it isn't just one ping, it tries multiple before it marks a device as down. You can set the delay field, which will cause the alert to wait for x number of down periods before it triggers. Adam. Sent from BlueMail<http://www.bluemail.me/r> On 23 Jun 2016, at 10:39, prost pierrick <pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: Hi everyone , Observium lost 1 ping sometime (I don’t know why ) after each ping lost, alerts are triggered. Actually I have only two Alerts Checks : Device Down device_status equals 0 * * Device UP device_status equals 1 * * It’s possible to add a delay before triggering ? Like waiting 5 ping lost before triggering ? Regards. Pierrick Prost ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

3 5

Linux Firewall/Conntrack stats
by Attila Nagy 27 Jun '16

27 Jun '16

Hi guys, I wanted to see some firewall statistics (more exactly connection tracking statistics) of some of our Linux servers, but I couldn't find anything alike in Observium. Am I too lame, or is this a non-existing feature? If it is non-existing then could you tell me whether the future plans do involve this? Thanks, Tylla

1 0

Debuging slow SNMP-queries
by Markus Klock 27 Jun '16

27 Jun '16

Hey guys, I noticed I have some devices in my network that are responding very slow on just some specific SNMP-queries so I hacked together a small script that will parse the debug-output of Observium poller or discovery and then show you a list of the snmp-commands that took the longest to complete. I wrote a blogpost on how to use it here: http://blog.best-practice.se/2016/06/observium-performance-tuning.html and you can download the script from github: https://github.com/ZerxXxes/observium-logparser [image: Infogad bild 1] It was very helpful in finding what devices needed a software update ;) I hope it can be useful for others too /Markus

2 2

Re: [Observium] observium Digest, Vol 71, Issue 24
by Dudu Handelman 27 Jun '16

27 Jun '16

You should monitor your Dell server using snmp on the idrac itself like its a different device. The most important thing is the global status It will display in alert in the statuses front page. The global status is the color of the led when it's amber you have an issue. Now you will be able to see that in observium as well. Good luck. David Sent from my Samsung device -------- Original message -------- From: observium-request(a)observium.org Date: 27/06/2016 14:00 (GMT+02:00) To: observium(a)observium.org Subject: observium Digest, Vol 71, Issue 24 Send observium mailing list submissions to observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org You can reach the person managing the list at observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: Doc about IPMI (for Dell Server) (prost pierrick) 2. Re: Delay the alert trigger in case of loss only one ping (prost pierrick) 3. Re: Doc about IPMI (for Dell Server) (Adam Armstrong) 4. Re: Delay the alert trigger in case of loss only one ping (Adam Armstrong) 5. Re: Doc about IPMI (for Dell Server) (prost pierrick) 6. Re: Delay the alert trigger in case of loss only one ping (Moerman, Maarten) ---------------------------------------------------------------------- Message: 1 Date: Mon, 27 Jun 2016 09:03:18 +0000 From: prost pierrick <pierrick.prost(a)cnrs.fr> To: "observium(a)observium.org" <observium(a)observium.org> Subject: Re: [Observium] Doc about IPMI (for Dell Server) Message-ID: <AA561185F8EC764C88F0BA9DB4F2948E22680FD5(a)CNMB02WVP.core-res.rootcore.local> Content-Type: text/plain; charset="iso-8859-1" Hi, Nobody use IMPI ? regards De : prost pierrick Envoyé : vendredi 24 juin 2016 15:04 À : observium(a)observium.org Objet : Doc about IPMI (for Dell Server) Importance : Haute Hi everyone, There is documentation about IPMI on observium ? what the advantage ? benefit ? I have several DELL server with IDRAC and IPMI and only monitored my server with SNMP. Have a good day. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://postman.memetic.org/pipermail/observium/attachments/20160627/0b636d6…> ------------------------------ Message: 2 Date: Mon, 27 Jun 2016 09:07:38 +0000 From: prost pierrick <pierrick.prost(a)cnrs.fr> To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] Delay the alert trigger in case of loss only one ping Message-ID: <AA561185F8EC764C88F0BA9DB4F2948E22680FE6(a)CNMB02WVP.core-res.rootcore.local> Content-Type: text/plain; charset="utf-8" Hello, I have make some tries but I’m still spammed with fake alerting. Delay value is in minute ? How can I debug poller to check if I really lost ping ? (I’m on a 10 gbit backbone network.. I’m really surprise). Regards pierrick De : prost pierrick Envoyé : jeudi 23 juin 2016 12:36 À : Observium Network Observation System Objet : RE: [Observium] Delay the alert trigger in case of loss only one ping Delay ..yes i see it ! Thanks have a good day. De : observium [mailto:observium-bounces@observium.org] De la part de Adam Armstrong Envoyé : jeudi 23 juin 2016 12:21 À : Observium Network Observation System Cc : observium(a)observium.org<mailto:observium@observium.org> Objet : Re: [Observium] Delay the alert trigger in case of loss only one ping it isn't just one ping, it tries multiple before it marks a device as down. You can set the delay field, which will cause the alert to wait for x number of down periods before it triggers. Adam. Sent from BlueMail<http://www.bluemail.me/r> On 23 Jun 2016, at 10:39, prost pierrick <pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: Hi everyone , Observium lost 1 ping sometime (I don’t know why ) after each ping lost, alerts are triggered. Actually I have only two Alerts Checks : Device Down device_status equals 0 * * Device UP device_status equals 1 * * It’s possible to add a delay before triggering ? Like waiting 5 ping lost before triggering ? Regards. Pierrick Prost ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://postman.memetic.org/pipermail/observium/attachments/20160627/748d78f…> ------------------------------ Message: 3 Date: Mon, 27 Jun 2016 10:15:10 +0100 From: Adam Armstrong <adama(a)memetic.org> To: Observium Network Observation System <observium(a)observium.org> Cc: observium(a)observium.org Subject: Re: [Observium] Doc about IPMI (for Dell Server) Message-ID: <84cdd0b2-803e-4b92-8e21-9630f7e2a1e4(a)typeapp.com> Content-Type: text/plain; charset="utf-8" Did you miss the conversation people had about ipmi last week? OK Adam. Sent from BlueMail On 27 Jun 2016, 10:03, at 10:03, prost pierrick <pierrick.prost(a)cnrs.fr> wrote: >Hi, > >Nobody use IMPI ? > >regards > >De : prost pierrick >Envoyé : vendredi 24 juin 2016 15:04 >À : observium(a)observium.org >Objet : Doc about IPMI (for Dell Server) >Importance : Haute > >Hi everyone, > >There is documentation about IPMI on observium ? what the advantage ? >benefit ? >I have several DELL server with IDRAC and IPMI and only monitored my >server with SNMP. > > > > >Have a good day. > > > > > >------------------------------------------------------------------------ > >_______________________________________________ >observium mailing list >observium(a)observium.org >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://postman.memetic.org/pipermail/observium/attachments/20160627/d1d9a27…> ------------------------------ Message: 4 Date: Mon, 27 Jun 2016 10:16:32 +0100 From: Adam Armstrong <adama(a)memetic.org> To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] Delay the alert trigger in case of loss only one ping Message-ID: <945c9cc7-fa6a-4735-80ba-a74cfa699056(a)typeapp.com> Content-Type: text/plain; charset="utf-8" Delay is in poller intervals. If you're getting notifications that your devices are down, you have some pretty serious network problems, as it takes quite a lot to actually mark something as down. Adam. Sent from BlueMail On 27 Jun 2016, 10:07, at 10:07, prost pierrick <pierrick.prost(a)cnrs.fr> wrote: >Hello, > >I have make some tries but I’m still spammed with fake alerting. > >Delay value is in minute ? How can I debug poller to check if I really >lost ping ? (I’m on a 10 gbit backbone network.. I’m really surprise). > > >Regards > >pierrick > > >De : prost pierrick >Envoyé : jeudi 23 juin 2016 12:36 >À : Observium Network Observation System >Objet : RE: [Observium] Delay the alert trigger in case of loss only >one ping > >Delay ..yes i see it ! > >Thanks have a good day. > > >De : observium [mailto:observium-bounces@observium.org] De la part de >Adam Armstrong >Envoyé : jeudi 23 juin 2016 12:21 >À : Observium Network Observation System >Cc : observium(a)observium.org<mailto:observium@observium.org> >Objet : Re: [Observium] Delay the alert trigger in case of loss only >one ping > > >it isn't just one ping, it tries multiple before it marks a device as >down. > >You can set the delay field, which will cause the alert to wait for x >number of down periods before it triggers. > >Adam. > >Sent from BlueMail<http://www.bluemail.me/r> >On 23 Jun 2016, at 10:39, prost pierrick ><pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: >Hi everyone , >Observium lost 1 ping sometime (I don’t know why ) after each ping >lost, alerts are triggered. > > >Actually I have only two Alerts Checks : > > >Device Down device_status equals 0 * * >Device UP device_status equals 1 * >* > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >It’s possible to add a delay before triggering ? Like waiting 5 ping >lost before triggering ? > > > > >Regards. > > > > >Pierrick Prost > > > > > > > > > > > > > > > > > > > > > > > > >________________________________ > >observium mailing list >observium(a)observium.org<mailto:observium@observium.org> >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > > >------------------------------------------------------------------------ > >_______________________________________________ >observium mailing list >observium(a)observium.org >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://postman.memetic.org/pipermail/observium/attachments/20160627/78abc42…> ------------------------------ Message: 5 Date: Mon, 27 Jun 2016 09:33:12 +0000 From: prost pierrick <pierrick.prost(a)cnrs.fr> To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] Doc about IPMI (for Dell Server) Message-ID: <AA561185F8EC764C88F0BA9DB4F2948E22681012(a)CNMB02WVP.core-res.rootcore.local> Content-Type: text/plain; charset="utf-8" Ho …it’s Monday ..sorry ☺ Regards. Pierrick De : observium [mailto:observium-bounces@observium.org] De la part de Adam Armstrong Envoyé : lundi 27 juin 2016 11:15 À : Observium Network Observation System Cc : observium(a)observium.org Objet : Re: [Observium] Doc about IPMI (for Dell Server) Did you miss the conversation people had about ipmi last week? OK Adam. Sent from BlueMail<http://www.bluemail.me/r> On 27 Jun 2016, at 10:03, prost pierrick <pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: Hi, Nobody use IMPI ? regards De : prost pierrick Envoyé : vendredi 24 juin 2016 15:04 À : observium(a)observium.org<mailto:observium@observium.org> Objet : Doc about IPMI (for Dell Server) Importance : Haute Hi everyone, There is documentation about IPMI on observium ? what the advantage ? benefit ? I have several DELL server with IDRAC and IPMI and only monitored my server with SNMP. Have a good day. ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://postman.memetic.org/pipermail/observium/attachments/20160627/4304824…> ------------------------------ Message: 6 Date: Mon, 27 Jun 2016 09:39:34 +0000 From: "Moerman, Maarten" <mmoerman(a)ebay.com> To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] Delay the alert trigger in case of loss only one ping Message-ID: <3DA5C4D1-F878-4D4A-AADB-27E10BC44F86(a)ebay.com> Content-Type: text/plain; charset="utf-8" Hi, my 2 cents: I have a delay of 1 on my device_down alert, just to prevent false positives. SNMP just sometimes has a hickup. Although usually I don’t have these, but in order to prevent panic/heart attacks, I did introduce that 1 time delay on my device down alerts. Haven you applied alert checkers on port-errors all around your network as well? CRC/port errors, and things like these you might want to fix first before you actually get in to device down alerting. Just a simple "ifInErrors_rate gt 0 & ifOutErrors_rate gt 0 on ifType equals ethernetCsmacd” alert-check will give you all these ports. you’d be surprised how much stuff is wrong in an average network. Also certainly check the port to which your observium machine is connected to, and make sure to monitor your observium machine as well, make sure your machine is well specced out. In addition to this, I’ve configured IP SLA on all our core routers to see/verify that latency on our links is within the SLA parameters of our suppliers. Do this before you check on devices down. Maarten -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com<mailto:mmoerman@ebay.com> From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Adam Armstrong <adama(a)memetic.org<mailto:adama@memetic.org>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Monday, June 27, 2016 at 11:16 AM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Delay the alert trigger in case of loss only one ping Delay is in poller intervals. If you're getting notifications that your devices are down, you have some pretty serious network problems, as it takes quite a lot to actually mark something as down. Adam. Sent from BlueMail<http://www.bluemail.me/r> On 27 Jun 2016, at 10:07, prost pierrick <pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: Hello, I have make some tries but I’m still spammed with fake alerting. Delay value is in minute ? How can I debug poller to check if I really lost ping ? (I’m on a 10 gbit backbone network.. I’m really surprise). Regards pierrick De : prost pierrick Envoyé : jeudi 23 juin 2016 12:36 À : Observium Network Observation System Objet : RE: [Observium] Delay the alert trigger in case of loss only one ping Delay ..yes i see it ! Thanks have a good day. De : observium [mailto:observium-bounces@observium.org] De la part de Adam Armstrong Envoyé : jeudi 23 juin 2016 12:21 À : Observium Network Observation System Cc : observium(a)observium.org<mailto:observium@observium.org> Objet : Re: [Observium] Delay the alert trigger in case of loss only one ping it isn't just one ping, it tries multiple before it marks a device as down. You can set the delay field, which will cause the alert to wait for x number of down periods before it triggers. Adam. Sent from BlueMail<http://www.bluemail.me/r> On 23 Jun 2016, at 10:39, prost pierrick <pierrick.prost(a)cnrs.fr<mailto:pierrick.prost@cnrs.fr>> wrote: Hi everyone , Observium lost 1 ping sometime (I don’t know why ) after each ping lost, alerts are triggered. Actually I have only two Alerts Checks : Device Down device_status equals 0 * * Device UP device_status equals 1 * * It’s possible to add a delay before triggering ? Like waiting 5 ping lost before triggering ? Regards. Pierrick Prost ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://postman.memetic.org/pipermail/observium/attachments/20160627/3b658a9…> ------------------------------ Subject: Digest Footer _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ------------------------------ End of observium Digest, Vol 71, Issue 24 *****************************************

1 0

Re: [Observium] Delay the alert trigger in case of loss only one ping
by ron＠rjr-services.com 27 Jun '16

27 Jun '16

I'll echo this sentiment. We were seeing a large number of false positives because of lack of SNMP response from some devices even though they were responding to pings without problem. Setting a delay of 1 reduced the number of alerts we were seeing substantially. We do still get a couple devices that will fail both checks, usually right after the discovery run, and we'll get an alarm on that, but it clears itself next poll. Damn Cat6509s and Nexus 1000Vs. ;-) Sent from my Verizon 4G LTE smartphone -------- Original message -------- From: "Moerman, Maarten" <mmoerman(a)ebay.com> Date: 6/27/16 4:39 AM (GMT-06:00) To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] Delay the alert trigger in case of loss only one ping -- This message has been scanned by E.F.A. Project and is believed to be clean.

1 0

Re: [Observium] Doc about IPMI (for Dell Server)
by prost pierrick 27 Jun '16

27 Jun '16

Hi, Nobody use IMPI ? regards De : prost pierrick Envoyé : vendredi 24 juin 2016 15:04 À : observium(a)observium.org Objet : Doc about IPMI (for Dell Server) Importance : Haute Hi everyone, There is documentation about IPMI on observium ? what the advantage ? benefit ? I have several DELL server with IDRAC and IPMI and only monitored my server with SNMP. Have a good day.

2 2

Doc about IPMI (for Dell Server)
by prost pierrick 25 Jun '16

25 Jun '16

Hi everyone, There is documentation about IPMI on observium ? what the advantage ? benefit ? I have several DELL server with IDRAC and IPMI and only monitored my server with SNMP. Have a good day.

3 2

Re: [Observium] One of my Apache servers do not show [SOLVED]
by Bernard Savonet (M) 24 Jun '16

24 Jun '16

Hi Peter, Thx for your answer and its check-list... which helped me to find my mistake and to solve the problem when you run the agent manually on the affected server, does it return an output /usr/lib/observium_agent/local/apache <<<apache>>> 56775 No. If not, do you use vhosts ? Yes B-) but I had not enabled the default site. As soon as I did, things worked perfectly Date: Fri, 24 Jun 2016 08:50:20 +1000 From: Peter.Hine(a)familycourt.gov.au To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] One of my Apache servers do not show [SEC=UNCLASSIFIED] when you run the agent manually on the affected server, does it return an output /usr/lib/observium_agent/local/apache <<<apache>>> 56775 [...] >>> If not, do you use vhosts ? does mod_security.conf need updating to allow access from localhost. do you get a perl error on LWP:Simple ? thanks

1 0

Graphs with Color Coded Percent Utilization
by Gumilar Siegfried 24 Jun '16

24 Jun '16

Hello, I am currently trying to completely replace our cacti installation with Observium. One of the last things that make me hold on to cacti are these kind of graphs: [cid:image001.gif@01D1C580.2CFF4E30] The graphs are described here: http://forums.cacti.net/viewtopic.php?f=6&t=8520 We have put the most important interfaces on our NOC screen and can immediately recognize if some interfaces are under unusual high load. Is there a way I can achieve something similar with Observium? Thanks, Regards Siegfried

4 6

One of my Apache servers do not show
by Bernard Savonet (M) 24 Jun '16

24 Jun '16

Hi, I've recently added some hosts to my monitored services. - All are running Apache 2.4 so I applied the Apache configuration as described at http://www.observium.org/docs/apps/#apache - All except one show the Apache application info as expected. - Except for the missing Apache info, this site is correctly reported (so general snmp / xinet config are fine) - I have carefully reviewed the different points for this host and Apache config, all is nominal. Which are the points I might have done wrong in the checklist? Which other points not in the checklist should I look at? Thx for your help Bernard

2 1

Alert Checker for memory?
by Dano, Leo 24 Jun '16

24 Jun '16

I created an alert to let me know when a host uses over 90% of its memory. The problem is that linux uses over that in "cached" memory. Is there a way to exclude cached memory? Physical and Swap are fine. I am using mempool_perc greater 90 in Check Conditions. Thanks, ----------------------- Leo Dano

3 6

Alert Checkers and Syslog Rules?
by Dano, Leo 24 Jun '16

24 Jun '16

Hello all, I am able to edit/delete my Alert Checkers but cannot edit or delete my Syslog Rules that I made. Any suggestions? Thanks, ----------------------- Leo Dano

2 8

Can't reset password or get an account activated?
by Dano, Leo 23 Jun '16

23 Jun '16

Hello, Finally bought the subscription version. Except, I get a link to the Subscription Management Portal and none of my passwords work. So I tried to reset but never get an email. I then tried to create a new account using a personal email but it never sends me an activation link. Is there a phone number I can call? Or does my request get on a boat and travel across the Atlantic Ocean? Thanks, ----------------------- Leo Dano

2 4

Support for qLogic FW switches...?
by Henrik Cednert (Filmlance) 23 Jun '16

23 Jun '16

Hi Have anyone played with and added support for qlogic devices in their installation? Have two SANBox 5800 i'd like to monitor. Snmpwalk of one of them: http://pastebin.com/DWRuShaf Cheers -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ]

1 0

Delay the alert trigger in case of loss only one ping
by prost pierrick 23 Jun '16

23 Jun '16

Hi everyone , Observium lost 1 ping sometime (I don't know why ) after each ping lost, alerts are triggered. Actually I have only two Alerts Checks : Device Down device_status equals 0 * * Device UP device_status equals 1 * * It's possible to add a delay before triggering ? Like waiting 5 ping lost before triggering ? Regards. Pierrick Prost

2 2

CBQoS Aggregation Graph
by David Ron 22 Jun '16

22 Jun '16

Dear All, I remember there was a thread regarding this matter, but I couldn't get into the observium archive to read the whole thread. To make a long story short, I'm looking for a way to aggregate a class-map that is configured on several interfaces on one graphs, like, one graph for Bronze, one graph for Silver and one graph for Gold that summarize the CBQoS graphs for 8 different interfaces. is it possible? David Cellcom Israel Network Engineer

1 0

CAS authentication
by Josep Manel Andrés 21 Jun '16

21 Jun '16

Hi all, I've seen that CAS authentication is already integrated, but I've found no documentation. I've tried to set: vi /opt/observium/config.php // Authentication Model $config['auth_mechanism'] = 'cas'; $config['auth_cas_host'] = 'cas02.domain.es'; $config['auth_cas_port'] = '443'; $config['auth_cas_context'] = 'cas'; $config['auth_cas_ca_cert'] = '/etc/tls/cacert/DigiCertCA'; //$config['auth_mechanism'] = "http-auth"; //$config['http_auth_guest'] = "admin"; but it didn't work, I get "Error: Internal script failure" which comes from phpcas. I've installed the latest version of phpcas from the original source. Thanks. -- Josep Manel Andrés (josep.andres(a)bsc.es) Operations - Barcelona Supercomputing Center C/ Jordi Girona, 31 http://www.bsc.es 08034 Barcelona, Spain Tel: +34-93-405 42 14 e-mail: systems(a)bsc.es Fax: +34-93-413 77 21 ----------------------------------------------- WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

2 2

Netonix Support
by Robbie Wright 21 Jun '16

21 Jun '16

Adam, it looks like you weighed in a little bit with the Netonix guys a year and a half ago about getting support for their switches in. They've got their own enterprise number now and many others are having great success using it. Any thoughts and getting full support in (the paid for version of) Observium? I can get use SNMP access to a test device if you'd like. http://forum.netonix.com/viewtopic.php?p=2072#p2072 Robbie Wright Siuslaw Broadband <https://siuslawbroadband.com> 541-902-5101

1 0

inconsistent traffic windows -> freebsd
by evo 20 Jun '16

20 Jun '16

Hi, today I noticed something strange I can't explain at the moment. I am running a backup job (8TB) over a 1Gbit Interface, from Windows Server 2012 R2 -> HP switch -> Freebsd 10.2 The freebsd snmp interface reports the real Bits/s with an Avg In of 511.98M while the Windows Interface in charge reports an average of 32M out. If I take a look at the Task Manager within windows I'd also guess and Avg of 500Mbit/s. Also the Unicast Packets TX of Windows are very similiar to the Traffic RX at freebsd. I have attached two screenshots and would be very glad if someone could take a look. I have also added the relevant part of my weathermap, where I take the switch interfaces snmp to draw the links, and they look very alike to the windows interface, but not to the freebsd. Please help, I am starting to doubt my qualification. with kind regards, Valentin

1 0

Looping PTR request
by TAN Lists 20 Jun '16

20 Jun '16

Hey all, New to Observium and loving it so far. I've done some reading, but I can not find an answer to my issue. I would really appreciate some pointers here. After about 6 hours, i start seeing a looping PTR request: 23:14:37.602724 IP 192.168.155.13.39891 > 8.8.8.8.domain: 54851+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.604162 IP 192.168.155.13.53879 > 8.8.8.8.domain: 58763+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.605541 IP 192.168.155.13.52487 > 8.8.8.8.domain: 30717+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.606941 IP 192.168.155.13.34473 > 8.8.8.8.domain: 5645+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.608351 IP 192.168.155.13.45956 > 8.8.8.8.domain: 5585+ PTR? 30.151.168.192.in-addr.arpa. (45) 23:14:37.609741 IP 192.168.155.13.39834 > 8.8.8.8.domain: 4414+ PTR? 30.151.168.192.in-addr.arpa. (45) 23:14:37.611099 IP 192.168.155.13.35512 > 8.8.8.8.domain: 3031+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.612479 IP 192.168.155.13.49633 > 8.8.8.8.domain: 12185+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.613858 IP 192.168.155.13.59192 > 8.8.8.8.domain: 1926+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.615309 IP 192.168.155.13.51916 > 8.8.8.8.domain: 36203+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.616667 IP 192.168.155.13.49695 > 8.8.8.8.domain: 28584+ PTR? 30.151.168.192.in-addr.arpa. (45) 23:14:37.618245 IP 192.168.155.13.50620 > 8.8.8.8.domain: 13819+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.619849 IP 192.168.155.13.42869 > 8.8.8.8.domain: 48052+ PTR? 15.155.168.192.in-addr.arpa. (45) Manual lookup: root@freshwater ~]host 192.168.155.15 Host 15.155.168.192.in-addr.arpa. not found: 3(NXDOMAIN) [root@freshwater ~]# host 192.168.155.15 8.8.8.8 Using domain server: Name: 8.8.8.8 Address: 8.8.8.8#53 Aliases: Host 15.155.168.192.in-addr.arpa. not found: 3(NXDOMAIN) [root@freshwater ~]# I'm not running PTR on these IPs and have turned off discovery (i think) (i dont need it) >From my config: $config['autodiscovery']['ip_nets'] = array("127.0.0.0/8"); $config['autodiscovery']['xdp'] = FALSE; $config['autodiscovery']['ospf'] = FALSE; $config['autodiscovery']['bgp'] = FALSE; $config['autodiscovery']['libvirt'] = FALSE; $config['autodiscovery']['snmpscan'] = FALSE; $config['enable_printers'] = 0; $config['enable_sla'] = 0; $config['enable_ports_junoseatmvp'] = 0; $config['enable_ports_adsl'] = 1; $config['ignore_mount_optical'] = 1; $config['poller_modules']['unix-agent'] = 1; It's running on: [root@freshwater observium]# httpd -v Server version: Apache/2.4.6 (CentOS) Server built: May 12 2016 10:27:23 [root@freshwater observium]# php -v PHP 5.4.16 (cli) (built: May 12 2016 13:45:17) Copyright (c) 1997-2013 The PHP Group Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies [root@freshwater observium]# And a restart to apache does not kill this process. I can't seem to find what is doing it, but the ONLY thing on this server is Observium and nothing else. It's possible it isnt, but it seems to be :( The only way to stop this is to restart the whole server for some reason ps auxf from when the loop is happening and after an apache restart root 6299 0.0 0.0 0 0 ? S 23:43 0:00 \_ [kworker/3:1] root 1 0.0 0.1 190528 5564 ? Ss Jun14 1:00 /usr/lib/systemd/systemd --switched-root --system --deserialize 21 root 436 0.0 0.1 36820 4856 ? Ss Jun14 8:01 /usr/lib/systemd/systemd-journald root 458 0.0 0.0 118480 1260 ? Ss Jun14 0:00 /usr/sbin/lvmetad -f root 475 0.0 0.0 44868 3464 ? Ss Jun14 0:00 /usr/lib/systemd/systemd-udevd root 541 0.0 0.0 116724 1632 ? S<sl Jun14 0:02 /sbin/auditd -n root 564 0.0 0.0 19312 1260 ? Ss Jun14 0:27 /usr/sbin/irqbalance --foreground root 566 0.0 0.1 249796 7616 ? Ss Jun14 7:00 /usr/bin/vmtoolsd root 572 0.0 0.1 391788 5588 ? Ssl Jun14 0:39 /usr/sbin/rsyslogd -n root 573 0.0 0.0 26400 1744 ? Ss Jun14 0:18 /usr/lib/systemd/systemd-logind dbus 574 0.0 0.0 26724 1828 ? Ss Jun14 0:36 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation chrony 576 0.0 0.0 115844 1900 ? S Jun14 0:02 /usr/sbin/chronyd root 582 0.0 0.0 203368 1240 ? Ssl Jun14 0:00 /usr/sbin/gssproxy -D root 592 0.0 0.2 434960 8368 ? Ssl Jun14 0:12 /usr/sbin/NetworkManager --no-daemon polkitd 607 0.0 0.3 527584 12132 ? Ssl Jun14 0:07 /usr/lib/polkit-1/polkitd --no-debug root 824 0.5 0.7 251120 27696 ? Rs Jun14 48:26 /usr/sbin/snmptrapd -Lsd -f root 825 0.0 0.0 82560 3616 ? Ss Jun14 0:00 /usr/sbin/sshd -D root 23255 0.0 0.1 143416 5544 ? Ss 21:39 0:00 \_ sshd: root@pts/0 root 23257 0.0 0.0 115384 2060 pts/0 Ss+ 21:39 0:00 | \_ -bash root 25194 0.0 0.1 143808 5928 ? Ss 23:08 0:00 \_ sshd: root@pts/1 root 25196 0.0 0.0 115384 2112 pts/1 Ss 23:08 0:00 \_ -bash root 8186 0.0 0.0 151168 1960 pts/1 R+ 23:46 0:00 \_ ps auxf root 829 0.0 0.0 29304 1004 ? Ss Jun14 0:00 /usr/sbin/xinetd -stayalive -pidfile /var/run/xinetd.pid root 831 0.0 0.2 222956 10612 ? Ss Jun14 4:36 /usr/sbin/snmpd -LS0-6d -f root 836 0.0 0.3 552452 15072 ? Ssl Jun14 0:00 /usr/sbin/libvirtd root 841 0.0 0.0 126332 1572 ? Ss Jun14 0:02 /usr/sbin/crond -n root 851 0.0 0.0 110036 852 tty1 Ss+ Jun14 0:00 /sbin/agetty --noclear tty1 linux mysql 1171 0.0 0.0 113256 1580 ? Ss Jun14 0:00 /bin/sh /usr/bin/mysqld_safe --basedir=/usr mysql 1600 0.4 5.9 1695560 232072 ? Sl Jun14 35:42 \_ /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --log-error=/var/log/mariadb/mariadb.log --pid-file=/var/run/mariadb/ root 2159 0.0 0.0 91140 2164 ? Ss Jun14 0:02 /usr/libexec/postfix/master -w postfix 2161 0.0 0.1 91420 4132 ? S Jun14 0:00 \_ qmgr -l -t unix -u postfix 10160 0.0 0.1 91244 3924 ? S 22:30 0:00 \_ pickup -l -t unix -u root 29025 0.0 0.3 396460 15080 ? Ss 23:16 0:00 /usr/sbin/httpd -DFOREGROUND apache 29027 0.0 0.3 397296 12784 ? S 23:16 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29029 0.0 0.3 397556 12816 ? S 23:16 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29031 0.0 0.2 396596 8644 ? S 23:16 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29035 0.0 0.3 397296 12812 ? S 23:18 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29039 0.0 0.3 397556 12816 ? S 23:18 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29041 0.0 0.3 397300 12872 ? S 23:18 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 351 0.0 0.2 396596 8644 ? S 23:28 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 2450 0.0 0.2 396596 8644 ? S 23:33 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 4385 0.0 0.2 396596 8644 ? S 23:39 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 6301 0.0 0.1 396596 7652 ? S 23:44 0:00 \_ /usr/sbin/httpd -DFOREGROUND [root@freshwater observium]# Any help appreciated Thanks!

2 1

Smokeping
by Andrew Colin 20 Jun '16

20 Jun '16

Hi Guys Since the last update smokeping no longer updates on the gui Is there an issue?

2 4

uptime issue ?
by Medve István 20 Jun '16

20 Jun '16

Hi, we are using 0.16.5.7901 (Stable) and have got some wrong alert of rebooting devices after 1 year, 132 days, 2h, 23m Actually they didn't reboot but uptime graphs restarted. Can be a kind of counter overflow ? Affected devices are some brocade san switches and juniper isg1000 Regards, imedve

3 3

Group ports based on subnet...?
by Henrik Cednert (Filmlance) 20 Jun '16

20 Jun '16

Hello Trying/wanting to create a group for ports based on what subnet they're on. Is this possible...? Think I've tried most approached but haven't managed so far. When looking at details on ports for a device this is pretty much already done at the right most column next to mac adress. So doesn't seem that far fetched? =) Cheers and thanks -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ]

1 0

VRF(BGP) / Arista
by John Klasa 17 Jun '16

17 Jun '16

Hi, any timeframe when this can be included in Observium if at all? Since Observium doesn't support Arista VRF and we are running all our BGP peers in VRFs BGP polling doesn't work obviously. Regards -John

3 3

SVN broken
by Serghei Golipad 16 Jun '16

16 Jun '16

Guys, Is SVN broken again? svn: E000110: Unable to connect to a repository at URL 'http://svn.observium.org/svn/observium/trunk' svn: E000110: Error running context: Connection timed out Cheers PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. CDW Limited is a Company registered in England and Wales. This email is sent for and on behalf of CDW Finance Holdings Limited. CDW Finance Holdings Limited is the UK holding company for CDW Limited trading as CDW. The registered office for CDW Finance Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than CDW or the sender of its existence. For more information about CDW please visit www.uk.cdw.com

2 1

Netapp Interface Speed.
by Zafar Pravaiz 16 Jun '16

16 Jun '16

HI, I monitoring a my NetApp storage. Recently I have noticed that observium show 10G connected Interface as 1.41 Gbps speed and non connected as 10 Mbps. I have checked on switch side its correctly show 10G connected. Any hint what could be the reason for this? Thanks Zafar Pravaiz IT Senior Network Engineer Information Technology Department Tel +971 6 515 2164 Fax +971 6 515 2112 American University of Sharjah PO Box 26666, Sharjah United Arab Emirates http://www.aus.edu <http://www.aus.edu/> zpravaiz(a)aus.edu <mailto:youremail@aus.edu>

2 1

WatchGuard Device Discovery
by Duncan Mossop 16 Jun '16

16 Jun '16

Good Morning, I’ve recently added a WatchGuard M200 into Observium which discovers all the correct interfaces/counters but shows the device ultimately as generic / unknown. Is this a WatchGuard issue in regards to what is exposed by SNMP or is it something that might appear in an Observium update? We’re on 16.5.7872. Thanks, Duncan Mossop • Operations Manager, SystemHOST Ltd ________________________________ dmossop(a)systemhost.co.uk [cid:imaged755ff.PNG@690e2bcf.4b98904c] 01524 737414 systemhost.co.uk<http://www.systemhost.co.uk> [Twitter]<https://twitter.com/systemhost> Follow us on Twitter ________________________________ SystemHOST Ltd Registered office: Holmere Hall, Yealand Conyers, Carnforth, Lancs, LA5 9SN Registered in England No.05028996 VAT No. 927386490 This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. By opening this email or its attachments, you accept liability for any damage that may be caused to your computer hardware, software or data. ________________________________

1 0

Re: [Observium] Group based on description?
by Moerman, Maarten 15 Jun '16

15 Jun '16

You can use: Hostname, os, type, sysName, sysDescr, sysContact, Location, hardware & serial as an attribute for this. See the documentation for the attribute syntax on alerting, which works for groups as well. Maarten -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com<mailto:mmoerman@ebay.com> From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Fredrik Winäs <Fredrik.Winas(a)cgit.se<mailto:Fredrik.Winas@cgit.se>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Tuesday, June 14, 2016 at 3:46 PM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Group based on description? I would like to make a device group based on the description of the device, the one that i set it observium. [cid:image001.png@01D1C653.E533AF90] Can this be done? Med Vänlig Hälsning Fredrik Winäs tel +46 31 762 02 43 fredrik.winas(a)cgit.se<mailto:fredrik.winas@cgit.se> www.cgit.se<http://www.cgit.se/> CGit AB Taljegårdsgatan 11C SE-431 53 Mölndal

5 8

SMTP fail, ignores settings in config.php
by Fredrik Winäs 15 Jun '16

15 Jun '16

Hi I'm trying to figure out what has happend to the mail in our observium. It was working for a while but not now.. My Observium is a TurnKey appliance download. Now i can see that it's trying to open port 25 on a server that it's not supposed to go to.. Don't know if someone have been messing with the server.. Here is my config.php settings. // Enable alerter (not available in CE) #$config['poller-wrapper']['alerter'] = TRUE; // Set up a default alerter (email to a single address) $config['alerts']['alerter']['default']['descr'] = "Default Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contact'] = "driftlarm(a)xxxxxx.se"; $config['alerts']['alerter']['default']['enable'] = TRUE; //Email settings $config['email']['default'] = "driftlarm(a)cgit.se"; $config['email']['default_only'] = TRUE; $config['email']['from'] = "CGit Observium <observium(a)xxxxx.se>"; $config['email']['backend'] = 'mail'; $config['email']['smtp_host'] = 'smtprelay1.hosting.local'; $config['email']['smtp_port'] = 25; $config['email']['smtp_timeout'] = 10; $config['email']['smtp_secure'] = FALSE; $config['email']['enable'] = TRUE; $config['email']['smtp_auth'] = FALSE; $config['email']['smtp_username'] = NULL; $config['email']['smtp_password'] = NULL; ping smtprelay1.hosting.local PING smtprelay1.hosting.local (172.31.232.15) 56(84) bytes of data. 64 bytes from smtprelay1.hosting.local (172.31.232.15): icmp_seq=1 ttl=64 time=0.460 ms /opt/observium# ./test_alert.php -a 34 MIB search path: /opt/observium/mibs Cannot find module (LM-SENSORS-MIB): At line 0 in (none) Observium 0.16.5.7901 Test Alert Notification ##### Software versions ##### o OS Linux 3.16.0-4-amd64 [amd64] (Debian 8.1) o Apache 2.4.10 o PHP 5.6.20-0+deb8u1 (OPcache: DISABLED) o Python 2.7.9 o MySQL 5.5.49-0+deb8u1 (extension: mysqli 5.5.49) o SNMP NET-SNMP 5.7.2.1 o RRDtool 1.4.8 ##### MySQL mode ##### o MySQL ##### Charset info ##### o PHP UTF-8 o MySQL utf8 ##### Timezones info ##### o Date Monday, 13-Jun-16 21:23:47 CEST o PHP +02:00 o MySQL +02:00 o Notifying [email] Driftlarm: {"email":"driftlarm(a)cgit.se"} root@observium1 /opt/observium# Output from tcptrack Client Server State Idle A Speed 172.31.232.40:38086 172.16.102.16:25 SYN_SENT 1s 0 B/s 172.31.232.40:38088 172.16.102.16:25 SYN_SENT 28s 0 B/s 172.31.232.40:38090 172.16.102.16:25 SYN_SENT 28s 0 B/s And as you can see it's not supposed to connect to 172.16.102.16. that server does not even have a SMTP server on it. Med Vänlig Hälsning Fredrik Winäs tel +46 31 762 02 43 fredrik.winas(a)cgit.se<mailto:fredrik.winas@cgit.se> www.cgit.se<http://www.cgit.se/> CGit AB Taljegårdsgatan 11C SE-431 53 Mölndal

4 6

Temperature "A" bug
by Laszlo Nemeth 15 Jun '16

15 Jun '16

Hi, We have a Nexus 5K with FEX. The Observium (v 7900) can show the temp datas of it. But if set the „Graph Previous” and „Show Legend”, the value of the previous temp datas shows as „A” instead of „C”(elsius). Attached a picture. Regards, Laszlo

2 1

offset port numbers
by James Plant 15 Jun '16

15 Jun '16

Hi, Adding switches on my observium is fine but the port numbers are 1 out as the ports start at swp00 instead of swp01, is there a fix for this? Thanks James James Plant Events IT Assistant +44 (0)161 827 7630 Manchester Central Petersfield, Manchester M2 3GX Tel: +44 (0)161 834 2700 www.manchestercentral.co.uk <http://www.manchestercentral.co.uk> [http://www.manchestercentral.co.uk/email/ManchesterCentral.jpg] <http://www.manchestercentral.co.uk> [http://www.manchestercentral.co.uk/sites/default/files/email_sig_640x142.jpg] <http://www.mitawards.co.uk/vote/> [http://www.manchestercentral.co.uk/sites/default/files/twitter-bird-blue-on…]<http://www.twitter.com/mcr_central> [http://www.manchestercentral.co.uk/sites/default/files/icon-linkedin.png] <http://www.linkedin.com/company/manchester-central> Manchester Central is committed to sustainability. Click here<http://www.manchestercentral.co.uk/sustainability> to see our policy. Any proposal referred to within this e-mail is valid for 14 days only from the date of issue, or until superseded by a subsequent written offer which ever is the earlier. Manchester Central Convention Complex Limited (MCCCL) reserves the right to review and revise the terms and service offerings contained herewith in accordance with our business practices, save for the written acceptance of an MCCCL Licence Agreement and the ensuing terms and conditions. Tenancy proposals are non-binding until a deposit has been received by MCCCL and a Licence Agreement exchanged. MCCCL retains exclusive rights on the dates and the proposed space for the proposed tenancy until such time. The communication/direct marketing of the proposed tenancy before Licence Agreements have been exchanged and dated, is entirely at your risk and MCCCL accepts no responsibility whatsoever for any claims that exhibitors or any third party may make against you, should you fail to exchange Licence Agreements with us.

2 1

Group based on description?
by Fredrik Winäs 14 Jun '16

14 Jun '16

I would like to make a device group based on the description of the device, the one that i set it observium. [cid:image001.png@01D1C653.E533AF90] Can this be done? Med Vänlig Hälsning Fredrik Winäs tel +46 31 762 02 43 fredrik.winas(a)cgit.se<mailto:fredrik.winas@cgit.se> www.cgit.se<http://www.cgit.se/> CGit AB Taljegårdsgatan 11C SE-431 53 Mölndal

1 0

file edit alert for agent
by Farshid Abediny 14 Jun '16

14 Jun '16

Hello, is there anyway that agent alert us on observium when some important file like /etc/passwd edit alert us like as zabbix? thanks,

1 0

Professional Subscription
by Sean Drury 14 Jun '16

14 Jun '16

Hi there, I signed up last night and it looked to go through ok, haven't received any confirmation yet nor shows up in my guest area? Sorry if this is the wrong place to ask. Kind Regards, Sean Drury - IT Manager www.bartons.net.au P: 07 3396 7777 | M: 0412 584 394 | E: SeanD(a)bartons.net.au [cid:image001.jpg@01D1C30A.2013E8C0] Be green and read from the screen --------------------------------------------------------------------------------- Notice : This email and attachments (if any) is for the exclusive use of the addressee and may contain information that is privileged and confidential. Any unauthorised use of the contents of the email and/or attachments is expressly prohibited. If you are not the addressee of this email, please notify me immediately by email and t hen immediately destroy any electronic or paper copy of this email and/or attachments. Bartons does not take responsibility for the views expressed in the email or for the consequences of any computer viruses that may be transmitted with this email. This email is subject to copyright. No part of it should be reproduced, adapted or transmitted without the written consent of the copyright owner. This email has been scanned by the ES1000.

3 10

BlueCat monitoring
by Jesper Frank Nemholt 13 Jun '16

13 Jun '16

Hi! I created a few custom OID entries for BlueCat (DNS). This works well as the DNS OIDs are straight forward. For the DHCP part of this product, using custom OIDs won't cut it as one have to traverse each subnet for data, so I wanted to know if anyone is working on enhanced BlueCat already ? /Jesper

1 0

session time out
by Farshid Abediny 13 Jun '16

13 Jun '16

Hello, we have a problem with observium when we login to observium wait some minutes 1-2 minutes observium logout us automatically and we shoudl reenter it seems session expired within 1-2 minutes or when we go to all device and set basic and choose a device then it logout us and we should reneter that, any idea how solve this? thanks,

1 0

remove previous configs in rancid with observium
by Farshid Abediny 12 Jun '16

12 Jun '16

Hello, i go to /var/rancid/observium/configs and remove all configs but in observium web panel still show previous configs how can i fix it? thanks,

2 1

Re: [Observium] Cool Output of APC in-row cooler, random enormous spikes.
by Henrik Cednert (Filmlance) 11 Jun '16

11 Jun '16

I'll be damned. That was probably just pure luck but it alerted faster than expected. Please see screenshot link displaying the alert mail, because they to look a tad odd: https://www.dropbox.com/s/5ynr67ior7at3e3/mailalert.png. It lasted for 5 minutes, or actually just a brief moment within the polling period, but look at the duration in the recovery email. Really odd. By the way, are there templates where we can configure the layout of the email alerts (subject, what it displays in body and more)? Here is a screenshot of the graph created from the data in previous command. https://www.dropbox.com/s/nw47m75tj601gmh/csv_graph.png So yes. There's spikes in the data and I guess they don't show up in data center expert because they run some filter at it or just ignore random peaks or something. The value of the peaks in the now collected data is ALWAYS 20480 which in some way feels significant since it's constant and feels like some sort of unit max value. Not sure if there's other higher peaks as well because what I see in Observium is higher or if the scale of the axis there is off, not sure but here's another screenshot. https://www.dropbox.com/s/0whwzf7wf34j8uu/observium_graph.png But, feels like an APC issue then so guess I'll have the pleasure of once again dealing with that support. =/ Cheers and thanks for the help Adam. -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ] From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Henrik Cednert <henrik.cednert(a)filmlance.se<mailto:henrik.cednert@filmlance.se>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Friday 10 June 2016 at 15:27 To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Cool Output of APC in-row cooler, random enormous spikes. Thanks Adam Polling it every second now and storing to a log file for investigation with this. #!/bin/bash while true; do sleep 1 timestamp=$(date +"%T") sensor_value=$(/usr/bin/snmpbulkwalk -v2c -c 'public' -Pu -OQUs -m PowerNet-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/apc 'udp':'acrc02':'161' coolingUnitStatusAnalogValue.1.10) printf "$timestamp,$sensor_value\n" >>/home/neo/Documents/acrc02_coolingUnitStatusAnalogValue.1.10.txt done I'll be back and ask for advice when I get the next alert. =) Cheers and thanks -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ] From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Adam Armstrong <adama(a)memetic.org<mailto:adama@memetic.org>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Friday 10 June 2016 at 14:45 To: "observium(a)observium.org<mailto:observium@observium.org>" <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Cool Output of APC in-row cooler, random enormous spikes. Hi Henrik, Sensors are all "gauges", so there's no real concept of spikes the way there is for ports (which are counters). If we're getting a spike, it's either that the device is sending the wrong data, or that the device is sending a number which hasn't been adjusted for the scale the device uses. It'll be the first if the 1.6-1.9 doesn't have any relation to the "real" number, and the latter if it's just off by a few orders of magnitude. It's pretty unlikely that we could do any bad maths, maths is easy, and such bugs would present much more regularly. These sorts of things are pretty common on many vendor's SNMP implementations. You might be able to see it in action by frequently polling the sensor in question's OID and logging the value. adam. Sent from Mailbird<http://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm_campai…> On 10/06/2016 13:40:59, Henrik Cednert (Filmlance) <henrik.cednert(a)filmlance.se<mailto:henrik.cednert@filmlance.se>> wrote: Hello Monitoring two APC in-row coolers. One of them gets some weird 1.6-1.9M watts spikes every now and then. Once a day or such, without regularity. I have started to monitor the same device in Schneider Data Center Expert just to see if it's a device or monitoring issue. There's no spikes there so I do think it's something with Observium and this particular unit. The other unit is fine and no spikes there. Only difference is that the load on this one is smaller and at times down to 0. I do see that there's an option to log spikes in the config file. But not sure I can monitor a sensor with it since it says port and wants and ID. Can I debug these spikes in some way? Cheers and thanks -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ] _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

3 3

Cool Output of APC in-row cooler, random enormous spikes.
by Henrik Cednert (Filmlance) 10 Jun '16

10 Jun '16

Hello Monitoring two APC in-row coolers. One of them gets some weird 1.6-1.9M watts spikes every now and then. Once a day or such, without regularity. I have started to monitor the same device in Schneider Data Center Expert just to see if it's a device or monitoring issue. There's no spikes there so I do think it's something with Observium and this particular unit. The other unit is fine and no spikes there. Only difference is that the load on this one is smaller and at times down to 0. I do see that there's an option to log spikes in the config file. But not sure I can monitor a sensor with it since it says port and wants and ID. Can I debug these spikes in some way? Cheers and thanks -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ]

2 2

Dell/Force10 S60. Missing a few sensors/objects
by Henrik Cednert (Filmlance) 10 Jun '16

10 Jun '16

Hi there Let me start with apologise if I use the wrong terminology here, heard a few times on IRC that I need to read-up on MIB and OID's. =) My brain refuse to fulle understand it though, not sure why. Have added a Force10 s60 switch to observium. Mostly it's fine but I do miss sensors for PSU and the Fans. Here's a discovery.php -dd of the device: http://pastebin.com/D7FNqgVi Here's an (attempt) of snmpwalking it. Still not sure I do this the right way... http://pastebin.com/DnkZtkvX At around line 1788 and forward you can see the PSU and fan objects (line numbers in this paste is wrong). 1. F10-S-SERIES-CHASSIS-MIB::chStackUnitNumFanTrays.1 = INTEGER: 2 2. F10-S-SERIES-CHASSIS-MIB::chStackUnitNumFanTrays.2 = INTEGER: 0 3. F10-S-SERIES-CHASSIS-MIB::chStackUnitNumPowerSupplies.1 = INTEGER: 1 4. F10-S-SERIES-CHASSIS-MIB::chStackUnitNumPowerSupplies.2 = INTEGER: 0 5. F10-S-SERIES-CHASSIS-MIB::chStackUnitNumPluggableModules.1 = INTEGER: 2 6. F10-S-SERIES-CHASSIS-MIB::chStackUnitNumPluggableModules.2 = INTEGER: 0 7. F10-S-SERIES-CHASSIS-MIB::chStackUnitRowStatus.1 = INTEGER: active(1) 8. F10-S-SERIES-CHASSIS-MIB::chStackUnitRowStatus.2 = INTEGER: active(1) 9. F10-S-SERIES-CHASSIS-MIB::chSysPowerSupplyIndex.1.1 = INTEGER: 1 10. F10-S-SERIES-CHASSIS-MIB::chSysPowerSupplyIndex.1.2 = INTEGER: 2 11. F10-S-SERIES-CHASSIS-MIB::chSysPowerSupplyOperStatus.1.1 = INTEGER: up(1) 12. F10-S-SERIES-CHASSIS-MIB::chSysPowerSupplyOperStatus.1.2 = INTEGER: down(2) 13. F10-S-SERIES-CHASSIS-MIB::chSysPowerSupplyType.1.1 = INTEGER: ac(1) 14. F10-S-SERIES-CHASSIS-MIB::chSysPowerSupplyType.1.2 = INTEGER: 0 15. F10-S-SERIES-CHASSIS-MIB::chSysFanTrayIndex.1.1 = INTEGER: 1 16. F10-S-SERIES-CHASSIS-MIB::chSysFanTrayIndex.1.2 = INTEGER: 2 17. F10-S-SERIES-CHASSIS-MIB::chSysFanTrayOperStatus.1.1 = INTEGER: up(1) 18. F10-S-SERIES-CHASSIS-MIB::chSysFanTrayOperStatus.1.2 = INTEGER: up(1) I looked at the documentation for something about expanding on existing device support. Couldn't find that and I assume it's not that easy? Have anyone added support for this in their observium installation or can point me in the direction on how to go about it (in a friendly way...). Cheers and thanks -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ]

2 2

Alert check suppressed
by Eduardo Schoedler 10 Jun '16

10 Jun '16

Hi, In what reasons can occur "Checks failed but alert suppressed by [ENT]"? What mean "[ent]"? Thank you. -- Eduardo Schoedler

2 3

DB Memory Ports state
by AbdelBaki Yacine Tounsi 10 Jun '16

10 Jun '16

*DB memory Ports State on ubuntu 16.04 !!!Mr Tounsi Abdelbaki Yacine* *Régional Manager .Etablissement Régional Réseau MultiService AnnabaProvider Edge IP/MPLS Annaba. Algérie* *Groupe Algerie Telecom SPA.* http://www.at.dz/?p=rms *Mobile : +213 660 32 88 53* *Téla +@ : +213 **983 00 00 18* *IPCentrex : ** +213 983 01 00 50* https://www.epay.dz/track/NTAwMDA5MQ/ http://www.journaldunet.com/management/efficacite-personnelle/citations-pou… العلم بلا عمل كشجرة بلا ثمرة <http://rockngineer.blogspot.com/> *"J'utilise Linux* au lieu de Windows ....*Parce que je suis* nul en *informatique* ! " *NGN UIT :* http://www.itu.int/ITU-D/treg/Events/Seminars/GSR/GSR07/consultation-fr.html *Blog:* http://bounatelecom.wordpress.com/ *Ma liste de partage : http://www.google.com/reader/shared/bonois23 <http://www.google.com/reader/shared/bonois23>* *Linkedin *: http://dz.linkedin.com/in/bonois23

2 2

Proper procedure in Observium for hardware replacement?
by Derek 10 Jun '16

10 Jun '16

So, I had a question regarding hardware replacement. I recently replaced several Cisco 2811 routers with Cisco ISR 4331's, and kept the same host name. After the swap, I noticed I wasn't getting any graphs for data flow on the serial interfaces. I attempted running discovery on them again, and waited for a few polling cycles, but still go no data. In the end, I ended up deleting the devices completely out of Observium, including the RRD files, and re-adding. After this was done, everything showed up correctly. So, as I will be doing more of these soon, is there a specific process I should follow for these? Maybe rename the old device to a different hostname, then add the new device? The historical data wasn't critical, so I'm not too bothered losing it, but I would like to avoid it if possible. Thanks, Derek

2 1

spam out there
by Jason Vanlandingham 09 Jun '16

09 Jun '16

Heads up: I got some targeted spam. The listed from address is Russian, and the text is: Hi, Look what they have for you, I guess it's worth reading, more info here <http://slurukeste.cctvessentials.info/lnrayiga> (scuzzy link removed) Hope this helps, Observium Network Observation System

2 1

some questions about alerting
by Farshid Abediny 09 Jun '16

09 Jun '16

Hello, i want know how can i create following condition for my switch in observium ? 1. when unitcast pps or bps exceed more than X pps 1.2. when multicast pps or bps exceed more than X pps 1.3. when broadcast pps or bps exceed more than X pps 2. when switch port status will be down and up alert me, thanks,

1 0

No longer retrieving software version
by Daniel Olynsma 08 Jun '16

08 Jun '16

Hi, we are running 0.16.6.7912(rolling). After a recent svn update, the SW version is not being reported correctly After running the poller.php on a single device with '-dd' options the below is seen. I have tried software versions on the product that did used to report the version. However they now are not. Has something changed recently that we have failed to update? ? ----------------- including: includes/polling/os.inc.php ##### Module Start: os ##### o OS Poller OS CMD[/usr/bin/snmpget -v2c -c 'public' -Pu -OsvQU -m AT-SETUP-MIB -M /opt/observium/mibs 'udp':'amf-r2':'161' currSoftVersion.0] CMD EXITCODE[1] CMD RUNTIME[0.006s] STDOUT[ ] STDERR[ MIB search path: /opt/observium/mibs Cannot find module (AT-SETUP-MIB): At line 1 in (none) currSoftVersion.0: Unknown Object Identifier (Sub-id not found: (top) -> currSoftVersion) ] SNMP STATUS[FALSE] SNMP ERROR - device: 97, cmd: snmpget, options: -OsvQU, mib: 'AT-SETUP-MIB', oid: 'currSoftVersion.0', cmd exitcode: 1, snmp error code: #996, reason: 'MIB or oid not found', runtime: 0.0060188770294189 o Hardware AW+ o Version <empty> o Features <empty> o Serial <empty> o Asset <empty> o Module time 0.0084s including: includes/polling/ipmi.inc.php ##### Module Start: ipmi ##### ----------------- Regards, Daniel

2 1

Out of office
by ffuentes＠aasteel.com 08 Jun '16

08 Jun '16

I will be out starting 06/07/16 and coming back 06/14/16, but I will check on my email periodically. Please contact the IS Department for any issues.

1 0

website formatting is borken
by Christopher Barry 08 Jun '16

08 Jun '16

Greets, I signed up to the mailing list just to point out that the page header on all documentation pages is half-obscured by the menu bar and looks like crap. In the picture, it's the 'Screenshots' header, but it's on all pages. Thought you might want to know that. http://www.pasteall.org/pic/show.php?id=103988 Yes, it's scrolled all the way up... Also, having a simple contact email address at the bottom of the homepage for this type of thing would certainly be nice. I had to jump through a bunch of hoops (sign up, wait for moderation, put image on paste site, blah, blah, etc.) just to tell you this out of the goodness of my heart. Likely nobody else will do this - and I'm not even using this product! You're welcome. Running: Debian sid Firefox ESR 45.1.1

2 1