- observium - lists.observium.org

Custom Traffic Graph errors
by Roland Hill 07 Feb '16

07 Feb '16

Hi list, My installation details are as follows: Observium CE 0.16.1.7533 ##### Software versions ##### o OS Linux 4.2.0-27-generic [amd64] (Ubuntu 15.10) o Apache 2.4.12 o PHP 5.6.11-1ubuntu3.1 o Python 2.7.10 o MySQL 5.6.28-0ubuntu0.15.10.1 (extension: mysqli 5.6.28) o SNMP NET-SNMP 5.7.3 o RRDtool 1.5.4 ##### MySQL mode ##### o MySQL NO_ENGINE_SUBSTITUTION ##### Charset info ##### o PHP UTF-8 o MySQL utf8 ##### Timezones info ##### o Date Monday, 08-Feb-16 08:51:25 NZDT o PHP +13:00 o MySQL +13:00 Since upgrading to the latest CE version the Custom Traffic graphs have stopped displaying information, refer picture. I have let this run for a few days but they haven't updated. Any pointers would be appreciated. ...oh, and the new look and feel is great! -- Regards, Roland PGP Key 0xDA39319B = BCF0 1214 BAE9 5A3D 46FC 21A6 360D 9398 DA39 319B

1 0

MIB discovery - systemORD table - feature parity
by Dirk-Willem van Gulik 07 Feb '16

07 Feb '16

On some systems SNMPv2-MIB:: sysORTable contains a list of MIBs supported by the agent. Of interest is the: sysORID entry which is defined as: An authoritative identification of a capabilities statement with respect to various MIB modules supported by the local SNMPv2 entity acting in an agent role. and has the OID of those MIBs. Below tiny patch allows these to be 1) automatically included in the (sensor) scan. 2) Provides an option to have some skipped ($config['autodiscovery']['snmp_sysord']['ignore’]). Dw Index: include-dir-mib.inc.php =================================================================== --- include-dir-mib.inc.php (revision HEAD) +++ include-dir-mib.inc.php (working copy) @@ -32,17 +32,39 @@ $include_lib = isset($include_lib) && $include_lib; -foreach (get_device_mibs($device) as $mib) +$mibs = get_device_mibs($device); + +// Check for any (extra) advertized MIBs in the sysORD table; note that we are +// intentionally using 'all' - as we need the textual MIB name in order to +// create a possible file name. +// +$advertizedMIBs = snmpwalk_cache_multi_oid($device, "SNMPv2-MIB::sysORID", array(), "all"); +foreach($advertizedMIBs as $index=> $entry) { + $mib = strtoupper(reset($entry)); + if (!strstr($mib,'-mib')) { + $mib = preg_replace('/MIB$/','-MIB',$mib); + }; + + if (!preg_grep('/'.$mib.'/i',$config['autodiscovery']['snmp_sysord']['ignore']) + && !preg_grep('/'.$mib.'/i', $mibs)) + { + array_push($mibs, $mib); + }; +}; + +foreach ($mibs as $mib) { $inc_dir = $config['install_dir'] . '/' . $include_dir . '/' . strtolower($mib); $inc_file = $inc_dir . '.inc.php'; - if (is_device_mib($device, $mib)) + // We are bypassing the 'is part of the get_device_mibs list' check; as we are passing + // a list sourced from get_device_mibs with possibly additional discovery. + // + if (is_device_mib($device, $mib, TRUE, FALSE)) { if (is_file($inc_file)) { if (OBS_DEBUG) { echo("[[$mib]]"); } - include($inc_file); if ($include_lib && is_file($inc_dir . '.lib.php’)) Index: common.inc.php =================================================================== --- common.inc.php (revision HEAD) +++ common.inc.php (working copy) @@ -2172,11 +2174,14 @@ // DOCME needs phpdoc block // TESTME needs unit testing // MOVEME to includes/functions.inc.php -function is_device_mib($device, $mib, $check_permissions = TRUE) +function is_device_mib($device, $mib, $check_permissions = TRUE, $check_in_mib_list = TRUE) { global $config; - $mib_permitted = in_array($mib, get_device_mibs($device)); // Check if mib available for device + $mib_permitted = TRUE; + if ($check_in_mib_list) + $mib_permitted = in_array($mib, get_device_mibs($device)); // Check if mib available for device + if ($check_permissions && $mib_permitted && (!isset($config['mibs'][$mib]['enable']) || $config['mibs'][$mib]['enable'])) { // Check if MIB permitted by config Index: defaults.inc.php =================================================================== --- defaults.inc.php (revision HEAD) +++ defaults.inc.php (working copy) @@ -174,6 +174,7 @@ $config['snmp']['v3'][0]['cryptopass'] = ""; // Privacy (Encryption) Passphrase $config['snmp']['v3'][0]['cryptoalgo'] = "AES"; // AES | DES + // Autodiscovery Settings $config['autodiscovery']['xdp'] = TRUE; // Autodiscover hosts via discovery protocols (CDP, LLDP, FDP, AMAP and other) @@ -186,6 +187,8 @@ $config['autodiscovery']['ip_nets'] = array("127.0.0.0/8", "192.168.0.0/16", "10.0.0.0/8", "172.16.0.0/12"); // Networks to permit autodiscovery $config['autodiscovery']['ping_skip'] = FALSE; // Skip icmp echo checks during autodiscovery (beware timeouts during discovery!) +$config['autodiscovery']['snmp_sysord']['ignore'] = array('snmpMPDCompliance',' usmMIBCompliance','snmpFrameworkMIBCompliance','vacmBasicGroup','snmpNotifyFullCompliance'); + $config['discover_services'] = FALSE; // Autodiscover services via SNMP on devices of type "server" // Mailer backend Settings

2 2

syslog not working for one server
by Patrick Marquetecken 07 Feb '16

07 Feb '16

Hi, I have syslog working for more then 10 hosts but, for one I can’t get it to work. This server is not in the same location, it sent its log through a vpn tunnel, when it arrives at the router I do a natting: Just forward to the observium server. I see the ump traffic arriving but notting show up in the syslog (database) We can monitor the server without any problems. anyone a suggestion ? Thanks

2 1

Extracting port names from D-Link switches - feature parity
by Dirk-Willem van Gulik 06 Feb '16

06 Feb '16

In observium we cannot, AFAIUI from the UI, overwrite the various switch port names. Observium relies on the port names getting set ‘right’ on the agent side. However - having control over the name is useful e.g. for peering/ transit link regex()ing and what not. Unfortunately not all switches allow for this (for some reason, it seems to be mostly enterprise POE switches). One vendor that does not allow this is D-Link; their ifNames are hardcoded to Slot/0, Port0.0 or the empty string on some (most recent?) product lines. However they do allow the editing of the sysPortDescString in their private enterprise MIB (through config, API, SNMP or the web interface). Below is a small file diff that makes this possible. It is a bit inefficient; as doing it at discovery time is not enough; ifName is watched by the port poller —and I cannot see an easy place to make a ‘note’ of the expensively found OID. But may be of use as a starting point for some. Dw. beeb $ svn diff Index: observium/includes/polling/ports/companysystems.inc.php =================================================================== --- observium/includes/polling/ports/companysystems.inc.php (nonexistent) +++ observium/includes/polling/ports/companysystems.inc.php (working copy) @@ -0,0 +1,89 @@ +<?php + +/** + * companySystem - various D-Link switches have an extra sysPortDescString + * which unlike ifName/ifName can be configured (i.e. are not hardcoded + * to Slot0/0, the Emptry String or Port0.0). + * + * Here we discover them; and if set - add them to the ifName. + * + * Unfortunately - D-Link does use a different MIB for every product (even + * though the structure is pretty much identical). The path is contructed: + * + * enterprises.d-link.dlink-products.$series.$model.$type.companySystem.... + * + * with values such as dlink-DGS12XXSeriesProd.dgs-1210-28p.dgs-1210-28pcx + * for the series, model and type. + * + * Under companySystem we are after the field + * + * sysPortDescriptionTable.sysPortDescriptionEntry.sysPortDescString.<index> + * + * @package observium + * @subpackage discovery + * @copyright (C) 2013 dirkx + * + */ + +echo(" D-Link companySystem-MIB"); + +# We do a bit of a trick - and rely on the fact that the companySystem is first. # And use that to ‘tell’ us enough to get the MIB of that specific product. +# +# This way we discover the series/model/type without having to do a 35 Mbyte +# SNMP walk of the whole device. +# +# Unfortunately that does mean we have to use 'all'; which slows down +# polling (but we have to do it during polling; as any ifName set during +# discovery is uncerimouniously wacked on the next poll, with an alert +# to boot). The alternative would be to hardcode the 60-odd OID's for +# D-Link in this file. +# +# So we do this in two steps - one to check if there is any +# D-Link stuff - and then the actual more expensive pass. +# +$topoid = ".1.3.6.1.4.1.171"; +$str= snmp_get($device, $topoid,NULL,NULL,NULL,NULL, TRUE); // a getnext call + +if ($str) { + // pretty sure this is a D-Link switch of some description now. + // So do the more expensive pass. + // + + $topoid = '.iso.org.dod.internet.private.enterprises.d-link'; + $str= snmp_get($device, $topoid,NULL,'all',NULL,NULL, TRUE); // // a getnext call + + $cnt = 0; + if ($str) { + // Deconstruct the reply - to extract the actual per-product + // MIB name. + // + // DGS-1210-28P-CX::sysSwitchName.0 = STRING: 24x PoE Switch DLink + // + list($field, $skipEq, $skipStr, $name) = split(' ',$str,4); + list($mib, $skipField) = split('::', $field); + + $portOids = snmpwalk_cache_multi_oid($device, "sysPortDescString", array(), $mib); + + //Note that we are assuming that index = ifIndex (which seems to be the standard on D-Link kit). + // + foreach ($portOids as $ifIndex => $entry) + { + $descr = $entry[ sysPortDescString ]; + + if ($descr) { + $port = $port_stats[ $ifIndex ]; + $name = $port['ifName']; + + if (strlen($name)) { + $descr = "$descr ($name)"; + }; + $port_stats[$ifIndex]['ifName'] = $descr; + $cnt++; + }; + }; + }; + }; +if ($cnt) { + echo "[$cnt]"; +}; + Property changes on: companysystems.inc.php ___________________________________________________________________ Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:keywords ## -0,0 +1 ## +Author Date Id Revision \ No newline at end of property

1 0

definitions.dat and sensor_types
by Dirk-Willem van Gulik 06 Feb '16

06 Feb '16

We have a tiny sensor/discovery module (gist below) that picks up the (back)pressure, in Bar, of a cooling system. However when we add below to config.php: $config['sensor_types']['pressure']['symbol']='B'; $config['sensor_types']['pressure']['text']='Pressure'; $config['sensor_types']['pressure']['icon']=‘oicon-omega’; it seems that these values are wiped/overwritten by the values from definitions.dat. What, or perhaps, where, is the proper way to add these ? Thanks, Dw. <?php /* — Fetch backpressure on various P, C and I flows. dirkx(at)apache.org */ $oids = snmpwalk_cache_multi_oid($device, “backPressureTable", array(), “DANFLOSS-MIB"); foreach ($oids as $index => $entry) { $label = $entry[‘backPressureLabel']; $descr = $entry[‘backPressureDescr’]; // The older units have just a count - prefix with the label (firmware issue on the pump itself, // cannot be remedied through the puppet/config-deploy). // if (strlen($descr) < 3) { $descr = "$label $descr”; }; $type = ‘pressure'; foreach(array(‘backPressureTop', 'backPressureEgress','backPressureCompressure') as $field) { $oid = snmp_translate($field.'.'.$index, "DANFLOSS-MIB"); $value = $entry[ $field ]; $divisor = $entry[ $field.'Divisor' ]; if (!$divisor) $divisor = 1; if (is_numeric($value)) { /* Longer term - these prolly should go in one custom graph - rather than three */ discover_sensor($valid['sensor'], $type, $device, $oid, "$field.$index", ‘danfloss', $descr.' '.$field, 1.0/$divisor, $value); }; }; };

2 3

RRDBug ?
by Dirk-Willem van Gulik 05 Feb '16

05 Feb '16

With a fresh install - seeing quite a few cases like below — odd Y axis legend. The values are roughly at 2.2 and 2.0 and only happen for some ranges. Not sure if this is an old or new problem. Fair to assume this is purely something RRD related/bug ? Dw. Performance & Output RRDTool Output: 1233x369 Total time: 0.279 | RRDtool time: 0.277s RRDTool Command rrdtool graph /tmp/KjJTF5RCwhWzDBRY.png -Y --alt-autoscale --start 1454609307 --end 1454695707 --width 1152 --height 300 -c BACK#EEEEEE00 -c SHADEA#EEEEEE00 -c SHADEB#EEEEEE00 -c FONT#000000 -c CANVAS#FFFFFF00 -c GRID#a5a5a5 -c MGRID#FF9999 -c FRAME#5e5e5e -c ARROW#5e5e5e -R normal --font LEGEND:8:'DroidSansMono,DejaVuSansMono' --font AXIS:7:'DroidSansMono,DejaVuSansMono' --font-render-mode normal -E COMMENT:'Amperes ' COMMENT:' Now' COMMENT:' Avg' COMMENT:' Min' COMMENT:' Max' COMMENT:'\l' DEF:ds16=/usr/local/XXXXXXXXX/rrd/rts.rack/sensor-current-apc-atsOutputCurrent.1.1.1.rrd:sensor:AVERAGE DEF:ds16min=/usr/local/XXXXXXXXX/rrd/rts.rack/sensor-current-apc-atsOutputCurrent.1.1.1.rrd:sensor:MIN DEF:ds16max=/usr/local/XXXXXXXXX/rrd/rts.rack/sensor-current-apc-atsOutputCurrent.1.1.1.rrd:sensor:MAX LINE1.25:ds16#1f78b4:'Output ' GPRINT:ds16:LAST:%6.1lf%s GPRINT:ds16:AVERAGE:%6.1lf%s GPRINT:ds16min:MIN:%6.1lf%s GPRINT:ds16max:MAX:%6.1lf%s COMMENT:'\l' HRULE:0#555555 RRDTool Files Used No RRD information returned. This may be because the graph module doesn't yet return this data.

3 5

FreeBSD ports - Observium CE update to
by Dirk-Willem van Gulik 05 Feb '16

05 Feb '16

Folks, The FreeBSD port has been updated to Observium CE 0.16.1.7533; along with a whole bunch of extra/updated dependencies. This also makes the migration/activation to the professional version pretty much a ‘drop in’ now & makes the polling more efficient. SNMP internal mode is expressly disabled (it seems to suffer from the same issue as on fedora - some substitution issue). Thanks, Dw.

2 3

merge 2 observium installs
by Andy Goldschmidt 05 Feb '16

05 Feb '16

Hi Is it possible to merge 2 installs of Observium together? We have taken over another companies Observium and want to simply add it to our existing one. Thanks for your help Regards Andy

2 1

Reg: ARP Table not working
by Madhu Neal 05 Feb '16

05 Feb '16

Hi Team, I upgraded recently (a couple of times this week) and just reported that the ARP/NDP Table part of observium doesn’t load. Nothing errors in the apache error log. When I run poller.php manually, it does pull the information also. Please support, let me know what's needs to take care. Many Thanks, Madhu

3 4

Port Speed
by Anders Johansson 04 Feb '16

04 Feb '16

I can't still get my head around the percentage issues I'm seeing with juniper: Alert Monitor Port Utilization above 80% Entity ge-1/1/0 Conditions ifInOctets_perc ge 80 (15053) Metrics ifInOctets_perc = 15053 ifOutOctets_perc = 0 Duration 9m 17s (2016-01-29 06:52:34) Hardware EX2200-48T-4G Operating System Juniper JunOS 12.3R6.6 Ethernet Switch If I look at the event log for that port, and a lot of others from Juniper it seems like they are stuck in some wiered loop: 2016-01-29 07:25:55 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true' 2016-01-29 07:04:31 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifDuplex] '' -> 'fullDuplex' 2016-01-29 07:01:30 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-29 06:52:33 Interface changed: [ifTrunk] '' -> 'dot1Q'; [ifVlan] '' -> '104'; [ifLastChange] '2016-01-29 06:41:27' -> '2015-12-04 14:53:21' 2016-01-29 06:52:32 Interface DELETED mark removed 2016-01-29 06:41:27 Interface was marked as DELETED 2016-01-29 06:41:10 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifTrunk] 'dot1Q' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 06:40:39 Interface changed: [ifAlias] 'Office' -> NULL; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifTrunk] '' -> 'dot1Q'; [ifVlan] '' -> '104' 2016-01-29 06:30:23 Interface changed: [ifAlias] '' -> 'Office'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '104' -> NULL 2016-01-29 06:30:22 Interface changed: [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 06:20:20 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifVlan] '' -> '104' 2016-01-29 06:20:20 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-29 06:09:45 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 06:09:14 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 05:59:05 Interface changed: [ifName] 'ge-1/0/0' -> NULL 2016-01-29 05:59:04 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-29 05:51:02 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifTrunk] 'dot1Q' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 05:50:33 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-29 05:42:07 Interface changed: [ifTrunk] '' -> 'dot1Q'; [ifVlan] '' -> '104'; [ifLastChange] '2016-01-29 05:31:20' -> '2015-12-04 14:53:22' 2016-01-29 05:42:05 Interface DELETED mark removed 2016-01-29 05:31:21 Interface was marked as DELETED 2016-01-29 05:30:56 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 05:30:31 Interface changed: [ifVlan] '' -> '104' 2016-01-29 05:20:35 Interface changed: [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifTrunk] 'dot1Q' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 05:20:08 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifTrunk] '' -> 'dot1Q'; [ifVlan] '' -> '104' 2016-01-29 05:10:28 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifLastChange] '2016-01-29 05:09:56' -> '2015-12-04 14:53:21' 2016-01-29 05:10:26 Interface DELETED mark removed 2016-01-29 05:09:57 Interface was marked as DELETED 2016-01-29 05:01:03 Interface changed: [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifTrunk] 'dot1Q' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 05:00:56 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifTrunk] '' -> 'dot1Q'; [ifVlan] '' -> '104' 2016-01-29 04:49:42 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 04:49:39 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 04:40:18 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 04:39:29 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-29 04:30:38 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifVlan] '' -> '104' 2016-01-29 04:30:33 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-29 04:20:00 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL 2016-01-29 04:19:37 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false' 2016-01-29 04:09:44 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 04:09:32 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifVlan] '' -> '104' 2016-01-29 04:00:22 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 03:59:43 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 03:49:13 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL 2016-01-29 03:49:10 Interface changed: [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '104' -> NULL 2016-01-29 03:40:20 Interface changed: [ifVlan] '' -> '104' 2016-01-29 03:30:17 Interface changed: [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifTrunk] 'dot1Q' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 03:29:54 Interface changed: [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifTrunk] '' -> 'dot1Q' 2016-01-29 03:19:05 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifVlan] '' -> '104' 2016-01-29 03:10:14 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL; [ifTrunk] 'dot1Q' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 03:10:14 Interface changed: [ifHighSpeed] '0' -> NULL; [ifTrunk] 'dot1Q' -> NULL 2016-01-29 02:59:56 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifHighSpeed] '' -> '0'; [ifTrunk] '' -> 'dot1Q'; [ifVlan] '' -> '104' 2016-01-29 02:59:52 Interface changed: [ifOperStatus] '' -> 'down'; [ifLastChange] '2016-01-29 02:49:17' -> '2015-12-04 14:53:22' 2016-01-29 02:49:19 Interface changed: [ifOperStatus] 'down' -> NULL; [ifName] 'ge-1/0/0' -> NULL; [ifVlan] '104' -> NULL; [ifLastChange] '2015-12-04 14:53:22' -> '2016-01-29 02:49:17' 2016-01-29 02:49:15 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifVlan] '' -> '104' 2016-01-29 02:39:44 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 02:39:38 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 02:29:45 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 02:29:34 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 02:19:50 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL 2016-01-29 02:09:18 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true' 2016-01-29 01:59:32 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 01:59:28 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 01:49:35 Interface changed: [ifName] 'ge-1/0/0' -> NULL 2016-01-29 01:49:08 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-29 01:39:07 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 01:39:03 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 01:29:27 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL 2016-01-29 01:29:25 Interface changed: [ifVlan] '104' -> NULL 2016-01-29 01:19:18 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 01:09:15 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL 2016-01-29 01:09:12 Interface changed: [ifHighSpeed] '' -> '0'; [ifVlan] '104' -> NULL 2016-01-29 00:59:16 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifVlan] '' -> '104' 2016-01-29 00:59:15 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL 2016-01-29 00:49:07 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifHighSpeed] '' -> '0' 2016-01-29 00:39:08 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 00:39:05 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifVlan] '' -> '104' 2016-01-29 00:28:58 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 00:19:04 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-29 00:09:02 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifVlan] '104' -> NULL 2016-01-29 00:08:58 Interface changed: [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL 2016-01-28 23:58:49 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-28 23:48:56 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-28 23:48:54 Interface changed: [ifAlias] 'Office' -> NULL 2016-01-28 23:38:46 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-28 23:28:43 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-28 23:18:41 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-28 23:18:37 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-28 23:08:36 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-28 23:08:34 Interface changed: [ifVlan] '104' -> NULL 2016-01-28 22:59:02 Interface changed: [ifVlan] '' -> '104'; [ifLastChange] '2016-01-28 22:56:58' -> '2015-12-04 14:53:22' 2016-01-28 22:59:00 Interface DELETED mark removed 2016-01-28 22:56:58 Interface was marked as DELETED 2016-01-28 22:48:40 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-28 22:48:35 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-28 22:38:50 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-28 22:28:39 Interface changed: [ifName] '' -> 'ge-1/0/0'; [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104' 2016-01-28 22:28:34 Interface changed: [ifName] 'ge-1/0/0' -> NULL 2016-01-28 22:20:30 Interface changed: [ifName] '' -> 'ge-1/0/0' 2016-01-28 22:10:25 Interface changed: [ifName] 'ge-1/0/0' -> NULL; [ifAlias] 'Office' -> NULL; [ifHighSpeed] '0' -> NULL; [ifPromiscuousMode] 'false' -> NULL; [ifConnectorPresent] 'true' -> NULL; [ifVlan] '104' -> NULL 2016-01-28 22:09:58 Interface changed: [ifAlias] '' -> 'Office'; [ifHighSpeed] '' -> '0'; [ifPromiscuousMode] '' -> 'false'; [ifConnectorPresent] '' -> 'true'; [ifVlan] '' -> '104'

2 2

migrate all hosts from old observium to a new one
by Jose Colin 04 Feb '16

04 Feb '16

Hello Guys i want to ask you if you know the correct way to migrate all hosts of an old observium server to a new one if there a export/import option? thanks in advice ! Jose

2 1

Error Drawing Graph
by Alasdair MacLeod 04 Feb '16

04 Feb '16

Hi Guys, When I try to show the graph on a router interface for Traffic it comes up with a pink background with no grap. It says “Error Drawing Graph”. Does anyone know what can be causing this? Thanks.

1 0

Small feature suggestion - ports/brew/dpkg/etc collections
by Dirk-Willem van Gulik 04 Feb '16

04 Feb '16

Couple of small feature suggestions - Would be nice if we could rely on a http://www.observium.org/observium-0.16.1.7533.tar.gz in parallel to the standard http://www.observium.org/observium-community-latest.tar.gz for the varius dpkg/debian/freebd/brew port collections. - Would be nice if the block in defaults.inc.php with: // Location of executables $config['rrdtool'] = "/usr/local/bin/rrdtool”; ……. $config['file'] = "/usr/bin/file”; could be overwridden by a <ROOTDIR>/config.os.php - and perhaps itself live separate from the defaults. As this allows a puppet/ansible/chef recipe (or the various ports collections) to manage this file as an OS specific thing; and keep the per system configs strictly in config.php. Making the latter the only thing to preserve across migrations (and not having to cross check it for OS specific ‘new’ things). With more and more people using things like vagrant/docker/etc - that sort of abstraction becomes useful. Dw.

3 3

Reg: Port Errors
by Madhu Neal 04 Feb '16

04 Feb '16

Team, I just saw I had a warning on port errors and looked at it. Can you please help me to understand? Many Thanks, Madhu

3 4

FreeBSD 10.2 installation
by Dirk-Willem van Gulik 04 Feb '16

04 Feb '16

Just in case any one needs it (and so that I can find it back when I do) - below is the updated install for a barebones totally isolated BSD install. Dw. #!/bin/sh set -x set -e BATCH=yes export BATCH pkg install \ sudo \ observium \ mysql56-server \ apache24 mod_php56 pkg install \ php56_zlib php56-posix php56-iconv cat << EOM > /usr/local/etc/apache24/Includes/php.conf <FilesMatch "\.php$"> SetHandler application/x-httpd-php </FilesMatch> <FilesMatch "\.phps$"> SetHandler application/x-httpd-php-source </FilesMatch> EOM cat << EOM > /usr/local/etc/apache24/Includes/observium.conf <VirtualHost *:80> ServerAdmin webmaster@localhost DocumentRoot /usr/local/www/observium/html DirectoryIndex index.php <Directory /> Options FollowSymLinks AllowOverride None </Directory> <Directory /usr/local/www/observium/html/> Options Indexes FollowSymLinks MultiViews AllowOverride All Require all granted </Directory> ServerSignature On </VirtualHost> EOM PASSWD=$(RANDFILE=/dev/null openssl rand -base64 32 | tr -Cd A-Za-z) export PASSWD cat << EOM > /usr/local/www/observium/config.php <?php # define("OBS_DEBUG", 100); \$config['db_host'] = 'localhost'; \$config['db_user'] = 'observium'; \$config['db_pass'] = ‘$PASSWD'; \$config['db_name'] = 'observium'; \$config['install_dir'] = "/usr/local/www/observium"; \$config['snmp']['internal'] = FALSE; \$config['snmp']['community'] = array("public"); \$config['rrdtool'] = "/usr/local/bin/rrdtool"; \$config['fping'] = "/usr/local/sbin/fping"; \$config['fping6'] = "/usr/local/sbin/fping6"; \$config['snmpwalk'] = "/usr/local/bin/snmpwalk"; \$config['snmpget'] = "/usr/local/bin/snmpget"; \$config['snmpbulkget'] = "/usr/local/bin/snmpbulkget"; \$config['snmpbulkwalk'] = "/usr/local/bin/snmpbulkwalk"; \$config['snmptranslate'] = "/usr/local/bin/snmptranslate"; \$config['mtr'] = "/usr/local/sbin/mtr"; \$config['nmap'] = "/usr/local/bin/nmap"; \$config['nagios_plugins'] = "/usr/lib/nagios/plugins"; \$config['ipmitool'] = "/usr/local/bin/ipmitool"; \$config['virsh'] = "/usr/local/bin/virsh"; \$config['dot'] = "/usr/local/bin/dot"; \$config['unflatten'] = "/usr/local/bin/unflatten"; \$config['neato'] = "/usr/local/bin/neato"; \$config['sfdp'] = "/usr/local/bin/sfdp"; \$config['svn'] = "/usr/local/bin/svn"; \$config['wmic'] = "/usr/local//bin/wmic"; EOM /usr/local/etc/rc.d/mysql-server onestart /usr/local/etc/rc.d/apache24 onestart cd /usr/local/www/observium rm -rf logs rrd mkdir logs rrd chown www:www rrd logs cat <<EOM | mysql CREATE DATABASE observium DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci; GRANT ALL PRIVILEGES ON observium.* TO 'observium'@'localhost' IDENTIFIED BY ‘$PASSWD'; SET GLOBAL sql_mode = ''; EOM ADMIN_PASSWD=$(RANDFILE=/dev/null openssl rand -base64 32 | tr -Cd A-Za-z) export ADMIN_PASSWD sudo -u www ./discovery.php -u sudo -u www ./adduser.php admin $ADMIN_PASSWD 10 sudo -u www ./discovery.php -h all -d sudo -u www ./poller.php -h all -d cat << EOM >> /etc/crontab 33 */6 * * * www cd /usr/local/www/observium && /usr/local/bin/php discovery.php -h all */5 * * * * www cd /usr/local/www/observium && /usr/local/bin/php discovery.php -h new */5 * * * * www cd /usr/local/www/observium && /usr/local/bin/php poller.php -h all EOM echo Admin password: $ADMIN_PASSWD echo echo Be sure to include below in rc.conf if so desired. echo echo " apache24_enable=YES" echo " mysql_enable=YES" echo echo Depending on your setup - mod_rewrite (in /usr/local/apache24/httpd.conf) may also need to be activated. echo exit 0

2 3

Single box scalability/sizing?
by Steve Costaras 04 Feb '16

04 Feb '16

We currently have ~500 devices/50,000 ports being monitored on a dual cpu E5-2643 v0 system. It's currently running around 80% cpu (all cores w/ hyper-threading) and on a raid-10 16 drive array (sas 2.5" 10K rpm) which averages 1k iops. Most systems are polled in < 5minutes (with about 5-10 taking longer as they're fully loaded boxes). Looking to plan for future growth, I'm trying to see if anyone is running larger installations and their performance on a single box in trying to gauge if it's worthwhile to spend the $$ to upgrade to a newer V3 cpu system, or if we've effectively reached a single-point saturation limit and have to deploy distributed. I.e. do we have anyone here running say 1500 devices or 150,000 - 200,000 ports on a single system? If so, care to share your specs? Thanks. Steve

3 3

Re: [Observium] SNMP Trap based Notifications
by Moerman, Maarten 04 Feb '16

04 Feb '16

I'm having Adam built syslog alerting for me. Unfortunately, not done yet… -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com From: observium on behalf of Gagandeep Mann Reply-To: Observium Network Observation System Date: Monday, February 1, 2016 at 1:11 PM To: "observium(a)observium.org<mailto:observium@observium.org>" Subject: [Observium] SNMP Trap based Notifications Is there any way to configure OSPF Link Down Alert/Notification. Can we generate Notifications based on SNMP traps or any alternate based on Syslog. Best regards Gagandeep Mann ________________________________ This E-Mail may contain Confidential and/or legally privileged Information and is meant for the intended recipient(s) only. If you have received this e-mail in error and are not the intended recipient/s, Kindly notify the sender and then delete this e-mail immediately from your system. You are also hereby notified that any use, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail, its contents or its attachment/s other than by its intended recipient/s is strictly prohibited and may be unlawful. Internet Communications cannot be guaranteed to be secure or error-free as information could be delayed, intercepted, corrupted, lost, or contain viruses. Sistema Shyam Teleservices Limited does not accept any liability for any errors, omissions, viruses or computer problems experienced by any recipient as a result of this e-mail.

1 0

Re: [Observium] Images in alerts
by Gumilar Siegfried 04 Feb '16

04 Feb '16

Same Problem here with Outlook (2010). Was anyone able to fix this? I tried a lot of settings in Outlook but wasn’t able to display the images… Yeah, Outlook also blocks base64 images /Markus Den 29 jan. 2016 7:42 fm skrev "Ben Hohnke" <settra+observium(a)gmail.com<mailto:settra%2Bobservium@gmail.com>>: Fwiw I've never had them work in outlook either. They work on mobile though Ben On Fri, 29 Jan 2016 16:29 Anders Johansson <Anders.Johansson(a)direktorn.com<mailto:Anders.Johansson@direktorn.com>> wrote: Hi, I've seen that alerts include an image, base encoded in the actual html file, but the image is never displayed. Now I'm using that Redmond build software to read mails, perhaps that's why it's not working? Anyone else with outlook who can see the graph included in the alerts? //Anders _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

6 5

Re: [Observium] duplicate entries in vminfo table . [SEC=UNCLASSIFIED]
by Christian Gerbrandt 04 Feb '16

04 Feb '16

I have the same with our monitoring. All the vmware servers show all vms twice. On Feb 02, 2016, at 11:48 PM, Peter.Hine(a)familycourt.gov.au wrote: vCE 0.16.1.7533 going to the VMs tab of a vmWare server shows duplicate entries. hunting this down in the code shows the following in html/pages/device/vm.inc.php foreach (dbFetchRows("SELECT * FROM vminfo WHERE device_id = ? ORDER BY vm_name", array($device['device_id'])) as $vm) { print_vm_row($vm, $device); } so running it on the command line echo 'SELECT * FROM vminfo WHERE device_id = '586' ORDER BY vm_name' | mysql --user=observium --password=not_my_pass observium reveals the entries to be duplicated in the table. they all seem to have the last field as a difference. there must be something missing in the code for adding the entries to not find the first entries and update them. " 2586 586 vmware cbr-desktop E: tools not running 3072 2 powered off 4239aa20-542a-f088-dedf-afb508da6a9c NULL 2757 586 vmware cbr-desktop E: tools not running 3072 2 powered off 4239aa20-542a-f088-dedf-afb508da6a9c vmware-snmp " either NULL or vmware-snmp. Can someone in the Team give me a sql to remove the bad rows ? thanks Peter Hine Senior Technical Support Engineer (Servers) FCoA ITS peter.hine(a)familycourt.gov.au ********************************************************************** The information contained in this e-mail (including any attachments) is for the exclusive use of the addressee. If you are not the intended recipient please notify the sender immediately and delete this e-mail. It is noted that legal privilege is not waived because you have read this e-mail. ********************************************************************** _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

4 3

Combining multiple custom OIDs into one graph.
by T-MONT Administrator 04 Feb '16

04 Feb '16

Hi guys, I have a question regarding custom OIDs feature: current approach is to have an OID and combine its values pulled from multiple hosts into one graph. Is (or will be) opposite approach possible - to combine multiple OIDs values pulled from the same host into one graph? Thanks! Regards, Pawel

1 0

Set fixed scale of Y-axis on mini-graphs?
by Henrik Cednert (Filmlance) 04 Feb '16

04 Feb '16

Hello I'd like to set fixed values of the Y axis on the minigraphs. Is that possible? I don't find much value of the adaptive scaling since it means I have to read the AXIS and not only throw a quick eye at it to see anomalies. Cheers and thans -- Henrik Cednert cto | td | compositor Filmlance International Direct + 46 (0)704 71 89 54

1 0

Excluding servers from alert checks
by Matt Zillmann 03 Feb '16

03 Feb '16

Hello everyone, I am working towards excluding certain servers from a mempool check. I cannot seem to get the device matching to work. Has anyone gotten an exclusion to work? Thanks, Matt.

2 2

f5 BIG-IP Alarm
by Anders Johansson 03 Feb '16

03 Feb '16

Gents, I’m trying to trigger an event based upon availability in the ”load balancer” section, trying to find a variable in the device data that I can trigger on. Basically I want to trigger if a Virtual Server is down, or if the HA status change. All that is visible in the GUI but not sure if I can create a trigger for it in the Alarm section, possible? //Anders

4 4

Feature or bug -- 0.16.1.7533 version - naming of connected port of known device reverts to Mac address.
by Dirk-Willem van Gulik 03 Feb '16

03 Feb '16

In below devices/port display - we get for Slot0/21 the connected “port” on “device”. - i.e. eth0 on Ypenburg. However for Slot0/24 we get ’10’ on <macaddress>. Even though that actual port is called ‘Slot0/10’ on ‘Fooburg’ and known to Observium. Not sure if this is intentional - or the side effect from some LLCP discovery process gone awry. Dw.

1 0

Previous months Traffic Accounting?
by John May 03 Feb '16

03 Feb '16

Is it possible to have Observium store/generate more than one previous month of Traffic Accounting reports? - John -- ------------------------------------------------------------------- John May : President http://www.pointinspace.com/ Point In Space Internet Solutions 800.664.8610 919.338.8198 Professional FileMaker Pro, MySQL, PHP & Lasso Hosting on shared, virtual and hardware dedicated servers

2 5

duplicate entries in vminfo table . [SEC=UNCLASSIFIED]
by Peter.Hine＠familycourt.gov.au 03 Feb '16

03 Feb '16

vCE 0.16.1.7533 going to the VMs tab of a vmWare server shows duplicate entries. hunting this down in the code shows the following in html/pages/device/vm.inc.php foreach (dbFetchRows("SELECT * FROM vminfo WHERE device_id = ? ORDER BY vm_name", array($device['device_id'])) as $vm) { print_vm_row($vm, $device); } so running it on the command line echo 'SELECT * FROM vminfo WHERE device_id = '586' ORDER BY vm_name' | mysql --user=observium --password=not_my_pass observium reveals the entries to be duplicated in the table. they all seem to have the last field as a difference. there must be something missing in the code for adding the entries to not find the first entries and update them. " 2586 586 vmware cbr-desktop E: tools not running 3072 2 powered off 4239aa20-542a-f088-dedf-afb508da6a9c NULL 2757 586 vmware cbr-desktop E: tools not running 3072 2 powered off 4239aa20-542a-f088-dedf-afb508da6a9c vmware-snmp " either NULL or vmware-snmp. Can someone in the Team give me a sql to remove the bad rows ? thanks Peter Hine Senior Technical Support Engineer (Servers) FCoA ITS peter.hine(a)familycourt.gov.au ********************************************************************** The information contained in this e-mail (including any attachments) is for the exclusive use of the addressee. If you are not the intended recipient please notify the sender immediately and delete this e-mail. It is noted that legal privilege is not waived because you have read this e-mail. **********************************************************************

2 3

after SVN updatw
by Nick Morgan 02 Feb '16

02 Feb '16

Hi, Im getting the following trying to run ./discovery –none after updating via SVN pureblue@observe:~$ cd observium pureblue@observe:~/observium$ ./discovery.php -none PHP Fatal error: require(): Failed opening required '/home/pureblue/observium/config.php' (include_path='.:/usr/share/php:/usr/share/pear') in /home/pureblue/observium/includes/sql-config.inc.php on line 26 pureblue@observe:~/observium$ Anyone point me in the right direction? Kind Regards

4 3

Re: [Observium] cdp neighbor and mac address questions
by Thedude 02 Feb '16

02 Feb '16

No, I get the exact same thing. Curious as to what the fix is. Sent from my Verizon Wireless 4G LTE DROID On Feb 2, 2016 7:19 AM, Randy Mahurin <randymahurin(a)boisestate.edu> wrote: > > Hello, > > I've just completed a new install of Observium, version 0.16.1.7535 (27th January 2016), and have a couple of questions in hopes that someone can point me to the correct debugging process. > > 1) The mac address information on the port is of the port itself, rather than the connected device. We are strictly Cisco in our switching, most are 2960 variety with some 3750 and 3850 mixed in. I see in the demo software, the mac address on the port pages shows that of the client. Also, several months ago, we ran a small version of Observium (since decommissioned) and the client mac populated. > > 2) Auto discovery based on CDP seems really sporadic, several neighbors will be added, but some will not. SNMP settings are the same across the board and CDP discovered neighbors can be added manually without issue. > > Is there any chance someone has come across these before? > > Thank you > > > -- > Randy Mahurin > Office of Information Technology > Boise State University > 1910 University Drive, Boise, ID, 83725-1249 > Phone: (208) 426-4003

2 1

cdp neighbor and mac address questions
by Randy Mahurin 02 Feb '16

02 Feb '16

Hello, I've just completed a new install of Observium, version 0.16.1.7535 (27th January 2016), and have a couple of questions in hopes that someone can point me to the correct debugging process. 1) The mac address information on the port is of the port itself, rather than the connected device. We are strictly Cisco in our switching, most are 2960 variety with some 3750 and 3850 mixed in. I see in the demo software, the mac address on the port pages shows that of the client. Also, several months ago, we ran a small version of Observium (since decommissioned) and the client mac populated. 2) Auto discovery based on CDP seems really sporadic, several neighbors will be added, but some will not. SNMP settings are the same across the board and CDP discovered neighbors can be added manually without issue. Is there any chance someone has come across these before? Thank you -- Randy Mahurin Office of Information Technology Boise State University 1910 University Drive, Boise, ID, 83725-1249 Phone: (208) 426-4003

1 0

Some questions regarding Observium
by Jens.Altrock＠STADT-NW.DE 02 Feb '16

02 Feb '16

Hey guys, Have some questions I haven't found answers yet :-/ 1. Read about someone requesting checking and alerting of (os) services, is this already implemented or will it be? 2. Any chance to get to know about new community versions? Couldn't find something on website :-/ 3. Some of our switches have kind of leaks in their graphiocs (see pic on mail, from an ATI 8000GS/24POE). Not sure where this comes from, any ideas? Maybe any debug ideas? Haven't found any special events in Eventlog (except some SNMP down/up errors) Thanks fort he help, and sorry if questions are a bit dumb. Regards, Jens Wichtiger Hinweis f?r Mitteilungen an die Stadtverwaltung Neustadt: F?r die rechtsverbindliche elektronische Kommunikation mit der Stadtverwaltung Neustadt an der Weinstra?e steht Ihnen ausschlie?lich folgende E-Mail-Adresse zur Verf?gung: stv-neustadt-weinstrasse(a)poststelle.rlp.de Bitte beachten Sie unsere Hinweise unter http://www.neustadt.eu/impressum#email

1 0

Observium impact on Juniper CPUs
by Raphael Maunier 02 Feb '16

02 Feb '16

Folks, Just sharing experience using Observium and Juniper EX / MX equipments. I exchanged with Adam and Juniper tac about some issues on some EX4550 having CPU at 100% with no result in solving the issue with a log of tweak in Observium / Junos . I changed the server 3 days ago, faster stronger better :) And voila , CPU dropped on all devices, with the same config.php ! The previous one was not a small server ( aka VM ) but the vm was not as strong as this one. I only had the issue with Juniper equipment not with cisco / Arista . So if you are facing the same issue ( and I exchanged with a few of you ) , you know what to do :) Raphael PS : I still have some EX4550 deleting interfaces from time to time, but I will open another thread !

1 0

RRD failures
by Joey Stanford 02 Feb '16

02 Feb '16

Howdy, Recently RRD graphs (created by Smokeping) have stopped working. The RRD files are still there and being generated. They display correctly in Smokeping. config.php is unchanged and correct. &debug=1 or a particular setting gives me RRD CMD[%ygraph —daemon unix:/var/run/rrdcached.sock /tmp/cYlMIYCEzB411tYX.png -Y --lower-limit 0 --alt-autoscale-max --rigid --start 1454281028 --end 1454367428 --width 1152 --height 300 -c BACK#EEEEEE00 -c SHADEA#EEEEEE00 -c SHADEB#EEEEEE00 -c FONT#000000 -c CANVAS#FFFFFF00 -c GRID#a5a5a5 -c MGRID#FF9999 -c FRAME#5e5e5e -c ARROW#5e5e5e -R normal --font LEGEND:8:'DroidSansMono,DejaVuSansMono' --font AXIS:7:'DroidSansMono,DejaVuSansMono' --font-render-mode normal -E COMMENT:' RTT Loss SDev RTT\:SDev\l' DEF:median0=/var/lib/smokeping/Observium/10_30_90_100.rrd:median:AVERAGE CDEF:dm0=median0,UN,0,median0,IF DEF:loss0=/var/lib/smokeping/Observium/10_30_90_100.rrd:loss:AVERAGE CDEF:ploss0=loss0,20,/,100,* DEF:pin0p1=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping1:AVERAGE CDEF:p0p1=pin0p1,UN,0,pin0p1,IF DEF:pin0p2=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping2:AVERAGE CDEF:p0p2=pin0p2,UN,0,pin0p2,IF DEF:pin0p3=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping3:AVERAGE CDEF:p0p3=pin0p3,UN,0,pin0p3,IF DEF:pin0p4=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping4:AVERAGE CDEF:p0p4=pin0p4,UN,0,pin0p4,IF DEF:pin0p5=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping5:AVERAGE CDEF:p0p5=pin0p5,UN,0,pin0p5,IF DEF:pin0p6=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping6:AVERAGE CDEF:p0p6=pin0p6,UN,0,pin0p6,IF DEF:pin0p7=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping7:AVERAGE CDEF:p0p7=pin0p7,UN,0,pin0p7,IF DEF:pin0p8=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping8:AVERAGE CDEF:p0p8=pin0p8,UN,0,pin0p8,IF DEF:pin0p9=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping9:AVERAGE CDEF:p0p9=pin0p9,UN,0,pin0p9,IF DEF:pin0p10=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping10:AVERAGE CDEF:p0p10=pin0p10,UN,0,pin0p10,IF DEF:pin0p11=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping11:AVERAGE CDEF:p0p11=pin0p11,UN,0,pin0p11,IF DEF:pin0p12=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping12:AVERAGE CDEF:p0p12=pin0p12,UN,0,pin0p12,IF DEF:pin0p13=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping13:AVERAGE CDEF:p0p13=pin0p13,UN,0,pin0p13,IF DEF:pin0p14=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping14:AVERAGE CDEF:p0p14=pin0p14,UN,0,pin0p14,IF DEF:pin0p15=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping15:AVERAGE CDEF:p0p15=pin0p15,UN,0,pin0p15,IF DEF:pin0p16=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping16:AVERAGE CDEF:p0p16=pin0p16,UN,0,pin0p16,IF DEF:pin0p17=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping17:AVERAGE CDEF:p0p17=pin0p17,UN,0,pin0p17,IF DEF:pin0p18=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping18:AVERAGE CDEF:p0p18=pin0p18,UN,0,pin0p18,IF DEF:pin0p19=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping19:AVERAGE CDEF:p0p19=pin0p19,UN,0,pin0p19,IF DEF:pin0p20=/var/lib/smokeping/Observium/10_30_90_100.rrd:ping20:AVERAGE CDEF:p0p20=pin0p20,UN,0,pin0p20,IF CDEF:pings0=20,p0p1,UN,p0p2,UN,+,p0p3,UN,+,p0p4,UN,+,p0p5,UN,+,p0p6,UN,+,p0p7,UN,+,p0p8,UN,+,p0p9,UN,+,p0p10,UN,+,p0p11,UN,+,p0p12,UN,+,p0p13,UN,+,p0p14,UN,+,p0p15,UN,+,p0p16,UN,+,p0p17,UN,+,p0p18,UN,+,p0p19,UN,+,p0p20,UN,+,- CDEF:m0=p0p1,p0p2,+,p0p3,+,p0p4,+,p0p5,+,p0p6,+,p0p7,+,p0p8,+,p0p9,+,p0p10,+,p0p11,+,p0p12,+,p0p13,+,p0p14,+,p0p15,+,p0p16,+,p0p17,+,p0p18,+,p0p19,+,p0p20,+,pings0,/ CDEF:sdev0=p0p1,m0,-,DUP,*,p0p2,m0,-,DUP,*,+,p0p3,m0,-,DUP,*,+,p0p4,m0,-,DUP,*,+,p0p5,m0,-,DUP,*,+,p0p6,m0,-,DUP,*,+,p0p7,m0,-,DUP,*,+,p0p8,m0,-,DUP,*,+,p0p9,m0,-,DUP,*,+,p0p10,m0,-,DUP,*,+,p0p11,m0,-,DUP,*,+,p0p12,m0,-,DUP,*,+,p0p13,m0,-,DUP,*,+,p0p14,m0,-,DUP,*,+,p0p15,m0,-,DUP,*,+,p0p16,m0,-,DUP,*,+,p0p17,m0,-,DUP,*,+,p0p18,m0,-,DUP,*,+,p0p19,m0,-,DUP,*,+,p0p20,m0,-,DUP,*,+,pings0,/,SQRT CDEF:dmlow0=dm0,sdev0,2,/,- CDEF:s2d0=sdev0 CDEF:ploss_all=0,ploss0,+,1,/ CDEF:dm_all=0,dm0,+,1,/ CDEF:sd_all=0,s2d0,+,1,/ CDEF:dmlow_all=dm_all,sd_all,2,/,- AREA:dmlow_all AREA:sd_all#AAAAAA::STACK LINE1:dm_all#CC0000:'Average ' VDEF:avmed=dm_all,AVERAGE VDEF:avsd=sd_all,AVERAGE CDEF:msr=dm_all,POP,avmed,avsd,/ VDEF:avmsr=msr,AVERAGE GPRINT:avmed:'%5.1lf%ss' GPRINT:ploss_all:AVERAGE:'%5.1lf%%' GPRINT:avsd:'%5.1lf%Ss' GPRINT:avmsr:'%5.1lf%s\l'%n] × RRD RUNTIME[0.0471s] RRD STDOUT[ERROR: rrdc_flush (/var/lib/smokeping/Observium/10_30_90_100.rrd) failed with status -1.] RRD_STATUS[FALSE] The path listed above is correct. e.g. $ ls -al /var/lib/smokeping/Observium/10_30_90_100.rrd -rw-r—r— 1 smokeping smokeping 2986808 Feb 1 16:01 /var/lib/smokeping/Observium/10_30_90_100.rrd I did some googling and found that rrdc is for RRD Cache which I was running. I had installed it per http://blog.best-practice.se/2014/10/using-rrdcached-with-observium.html I’ve apt-get purge rrdcache, commented out the config.php entry, rebooted, and now I have no graphs (but I do have .rrd files). I’m wondering if anyone could give me some pointers as to where to go next. Thanks, Joey

1 1

VMs Tab missing
by Matt Zillmann 01 Feb '16

01 Feb '16

Hello everyone, I am having a bizarre issue with one of my hosts. I have a cluster of hosts for a VMware ESXI 6 environment and have discovered and polled them successfully. However, there is one host that is not displaying the VMs tab. Has anyone had a similar issue before? I have the latest version of the subscription edition of Observium running on CentOS7. Thanks, Matt.

1 0

Alerts for QNAP storage
by Matt Zillmann 01 Feb '16

01 Feb '16

Hello all, I am working on setting up alerting for a QNAP storage device. I have the latest version of the subscription version of Observium. What I would like is to be able to have Observium send me an email when a hard drive fails. The drives show up under the status portion of the device page. Any idea of how to set this up (if possible)? Thanks, Matt.

1 0

Re: [Observium] Bogus Sensor Alerts?
by Christian Gerbrandt 01 Feb '16

01 Feb '16

Did some tweaking. When I click on the link, this is the URL which opens: /health/metric=sensors/event=alert%2Cwarning/ Showing nothing. Same for ignored: /health/metric=sensors/event=ignore/ But when I change the URL a bit like this: /health/metric=sensors/state=Down I can see the 12 alerts (which are from a Device I ignore anyway). Changed the polling as well now so they are no longer reported. But it looks like there is a problem with the URL being created on the main overview page. On Feb 01, 2016, at 02:41 PM, Christian Gerbrandt <derchris(a)me.com> wrote: Hi, Today I checked some stuff in Observium. I can see the overview on the main page for Devices, Ports and Sensors. With the Sensors it is showing me 12 alert in the Down column. Clicking on the link doesn't show anything. Checking all Sensors, I can see some in red, but only 4 in total. Anyone knows what this is, or how I can get this fixed. Thanks, Christian

1 0

observium and Sophos Puremessage MIBS
by Watson Kamanga 01 Feb '16

01 Feb '16

HI Any one monitoring Sophos Puremessage using observium . I will to like to display all the other telemetry from the box , at the moment all i have is ping response . Regards Watson

1 0

Bogus Sensor Alerts?
by Christian Gerbrandt 01 Feb '16

01 Feb '16

Hi, Today I checked some stuff in Observium. I can see the overview on the main page for Devices, Ports and Sensors. With the Sensors it is showing me 12 alert in the Down column. Clicking on the link doesn't show anything. Checking all Sensors, I can see some in red, but only 4 in total. Anyone knows what this is, or how I can get this fixed. Thanks, Christian

1 0

SNMP Error
by Andrew Colin 01 Feb '16

01 Feb '16

Hi Guys Since the latest update on the pro edition on 2 debian servers we get the following when Observium tryies to walk to them They are running Debian 7.9 3.10.0-8-pve imuxsock begins to drop messages from pid 12028 due to rate-limiting now Observium is unable to query them any ideas why?

2 3

switch missing interface data
by Simon Smith 01 Feb '16

01 Feb '16

Hi All not sure if this is a bug or maybe something wrong with our switch? we added a TP-Link 8 port gigabit switch to monitor as we wanted to see what data we could get for some reason, observium has listed all interfaces as Ethernet Interface ? also it appears the vlans are also being found as lans, as well ? no port 1 port 2 etc just Ethernet Interface and Vlan ? what ive also found is on the interfaces page the plans are showing these blue arrows with the ethernet interface name ? never seen it before? any ideas? attached is screenshots, poller log and discovery log if people what help :) Simon

2 2

Disable email notification every 5 minutes
by Laszlo Nemeth 01 Feb '16

01 Feb '16

Hello I installed the latest CE (0.16.1.7533) and set up some alerts with email notification. It is working great, but now i get lot of mails in every 5 minutes from the same alerts. Can i set up that get email only when the alarm caused or resolved? So just 2 mails (or get mails in X minutes (e.g. In every 1 hors) not in every 5 minutes? Thanks! Laszlo

3 6

SNMP Trap based Notifications
by Gagandeep Mann 01 Feb '16

01 Feb '16

Is there any way to configure OSPF Link Down Alert/Notification. Can we generate Notifications based on SNMP traps or any alternate based on Syslog. Best regards Gagandeep Mann ________________________________ This E-Mail may contain Confidential and/or legally privileged Information and is meant for the intended recipient(s) only. If you have received this e-mail in error and are not the intended recipient/s, Kindly notify the sender and then delete this e-mail immediately from your system. You are also hereby notified that any use, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail, its contents or its attachment/s other than by its intended recipient/s is strictly prohibited and may be unlawful. Internet Communications cannot be guaranteed to be secure or error-free as information could be delayed, intercepted, corrupted, lost, or contain viruses. Sistema Shyam Teleservices Limited does not accept any liability for any errors, omissions, viruses or computer problems experienced by any recipient as a result of this e-mail.

1 0

Billing problem
by Eduardo Schoedler 29 Jan '16

29 Jan '16

Hi, Quick graphs isn't showing the graph: [image: Imagem inline 1] [image: Imagem inline 2] This billing have 2 interfaces, which I disabled it in a few minutes ago: [image: Imagem inline 3][image: Imagem inline 4] But I have data for the last 24 hours, so why the Billing View graph is errored? Thank you. Regards, -- Eduardo Schoedler

1 0

Friendly names for devices/hosts and interfaces/ports
by Juan Asensio Sánchez 29 Jan '16

29 Jan '16

Hi, is there any option to add friendly names to hosts and interfaces? For example, our hostnames are normalized (lx0001), so I would like to show them in Observium as pro-jboss-1, px-mysql-3, dev-apache-6, etc. and see them in all places, next to the hostname, Is this possible? The same for host interfaces, por example, eth0 or eno16780032 to be shown as "service", "management", "backend", "backup", "storage", etc. We have a paid subscription, is there any kind of development included?

3 3

Re: [Observium] Hostname change
by Christian Gerbrandt 29 Jan '16

29 Jan '16

Thanks, that did the trick ;) On Jan 28, 2016, at 03:13 PM, Simon Smith <simonsmith5521(a)gmail.com> wrote: i believe u looking for this root@observium:~# /opt/observium/rename_device.php Observium 0.16.1.7538 Rename Device USAGE: rename_device.php <old hostname> <new hostname> OPTIONS: -p Skip icmp echo checks, device renamed only by SNMP checks DEBUGGING OPTIONS: -d Enable debugging output. -dd More verbose debugging output. Simon On 28 Jan 2016, at 3:04 pm, Christian Gerbrandt <derchris(a)me.com> wrote: Hi, when I setup Observium for the first time, I used a local only DNS setup. In the meantime, we created a corporate wide DNS setup for our Lab. Old devices are still available, but obviously show up with their old hostname. Is there an easy way to change the hostname of a device? Regards, Christian _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

6 15

Images in alerts
by Anders Johansson 29 Jan '16

29 Jan '16

Hi, I've seen that alerts include an image, base encoded in the actual html file, but the image is never displayed. Now I'm using that Redmond build software to read mails, perhaps that's why it's not working? Anyone else with outlook who can see the graph included in the alerts? //Anders

3 2

db.log errors
by Anders Johansson 29 Jan '16

29 Jan '16

Hi, I've on a fresh install of observium, from the latest SVN (not the stable) I'm seeing errors in the SQL log, mostly duplicate entry of various kinds: [2016/01/29 06:07:11 +0100] poller.php(17259): Failed dbQuery (#1062 - Duplicate entry '17-2-984be1747168-4934' for key 'dev_vlan_mac_port'), Query: INSERT INTO `vlans_fdb` (`device_id`,`vlan_id`,`port_id`,`mac_address`,`fdb_status`) VALUES ('17','2','4934','XXXXXXXXXX','learned') But also: [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column '' in 'field list'), Query: SELECT `` FROM `slas` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column '' in 'field list'), Query: SELECT `` FROM `pseudowires` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column 'device_id' in 'where clause'), Query: SELECT `alert_test_id` FROM `alert_tests` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column 'device_id' in 'where clause'), Query: SELECT `maint_id` FROM `alerts_maint` WHERE `device_id` = '24'; [2016/01/28 16:01:05 +0100] (5756): Failed dbQuery (#1054 - Unknown column 'device_id' in 'where clause'), Query: SELECT `group_id` FROM `groups` WHERE `device_id` = '24'; I guess the 2:th errors are just possible to ignore if logic has changed, but the first ones are a bit worrying, perhaps there is a mismatch in the MySQL? (I'm on RHEL 6.7) //Anders

1 0

Observium: Pre-auth and security questions
by Nate Mellendorf 29 Jan '16

29 Jan '16

Tom, Thank you for your input. This has been a bit of a learning experience for me. After researching and playing around with Apache, I was able to enable basic authentication using htpasswd. When I attempt to access Observium, I'm prompted for credentials as expected. Once I login with the creds I've configured, I land at the Observium form based authentication page. I'm trying to pass the username and password provided to htpasswd, and send them to Observium on the backend. As you noted earlier, It seems like I should be able to do this with the remote user variable. However, I can't seem to get it to work. I've listed my current virtual host config below. I enabled a2enmod headers and restarted Apache with no luck. I'm curious if you know if there's something I'm missing. I'll keep digging and working away at this, but I thought I'd provide an update to the mailing list. Other users may find it helpful if we sort it out. Many thanks, <VirtualHost *:80> DocumentRoot /opt/observium/html/ CustomLog /opt/observium/logs/access_log combined ErrorLog /opt/observium/logs/error_log <Directory "/opt/observium/html/"> AuthType Basic AuthName "Restricted Content" AuthUserFile /etc/apache2/.htpasswd Require valid-user Options Indexes FollowSymLinks MultiViews AllowOverride All Order allow,deny allow from all RewriteEngine on RewriteCond %{ENV:REMOTE_USER} (.+) RequestHeader set X-Forwarded-User %{ENV:REMOTE_USER}e </Directory> </VirtualHost> - NM -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Saturday, January 16, 2016 6:11 PM To: observium(a)observium.org Subject: observium Digest, Vol 66, Issue 96 Send observium mailing list submissions to <mailto:observium@observium.org> observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit <http://postman.memetic.org/cgi-bin/mailman/listinfo/observium> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to <mailto:observium-request@observium.org> observium-request(a)observium.org You can reach the person managing the list at <mailto:observium-owner@observium.org> observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: Observium: Pre-auth and security questions (Tom Laermans) ---------------------------------------------------------------------- Message: 1 Date: Sun, 17 Jan 2016 01:10:43 +0100 From: Tom Laermans < <mailto:tom.laermans@powersource.cx> tom.laermans(a)powersource.cx> To: Observium Network Observation System < <mailto:observium@observium.org> observium(a)observium.org> Subject: Re: [Observium] Observium: Pre-auth and security questions Message-ID: < <mailto:569ADC03.1000002@powersource.cx> 569ADC03.1000002(a)powersource.cx> Content-Type: text/plain; charset="windows-1252"; Format="flowed" Hi Nate, We support trusting Apache with the auth (ie mod_auth_kerb, mod_auth_ldap, htpasswd, etc) by using its supplied REMOTE_USER variable - this works with at least the LDAP and MySQL backends; if your SSO setup could fill in these fields, you should be good. This bypasses our login forms of course. I use SSO with Kerberos (AD) tickets, handled by mod_auth_kerb. We also have an http-auth backend, but I don't think that will do what you want it to. There's also a CAS backend, fairly new, I have no idea how to use it but I don't think it could work with your netscaler setup. Tom On 16/01/2016 23:52, Nate Mellendorf wrote: > > Good evening everyone, > > I?ve been trying to configure Observium with a forms based SSO solution. > > My reasoning for this, is that I?d like to minimize the attack surface > for Observium when published to the Internet. > > As Observium supports groups, I thought it would be extremely > beneficial for clients to view their throughput at anytime from anywhere. > > I was curious if anyone in the community is using pre-authentication, > or if you?re publishing Observium directly to the Internet. > > I?m not as familiar with Apache and PHP, so hardening the service > through pre-auth seemed like a good first step. > > Unfortunately, I can?t quite get pre-auth to work. Observium uses > forms based authentication, which is hard to capture on the platform > I?m using. > > Here?s a link, if you?re curious on how I?m trying to capture it: > > <http://fritsesblog.blogspot.com/2015/04/link-to-netscaler-form-sso-kb> http://fritsesblog.blogspot.com/2015/04/link-to-netscaler-form-sso-kb. > html > > If I could get Observium to use basic authentication, I think I could > get it to work. Do we know if this is possible? A better question, is > pre-auth even necessary here? > > Aside from HTTPS, iptables, firewalling, and locking down SSH/root, > what other steps do you take to secure your Observium server? Do you > think that allowing Internet access is unwise at this time? > > Thank you for any input on insight into this. This is a concern of > mine that I?m trying to address. > > Your suggestions and opinions are very much appreciated. > > Regards, > > - NM > > > > _______________________________________________ > observium mailing list > <mailto:observium@observium.org> observium(a)observium.org > <http://postman.memetic.org/cgi-bin/mailman/listinfo/observium> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

3 2

does anyone else use http-auth ? . [SEC=UNCLASSIFIED]
by Peter.Hine＠familycourt.gov.au 29 Jan '16

29 Jan '16

thanks Peter Hine Senior Technical Support Engineer (Servers) FCoA ITS peter.hine(a)familycourt.gov.au ********************************************************************** The information contained in this e-mail (including any attachments) is for the exclusive use of the addressee. If you are not the intended recipient please notify the sender immediately and delete this e-mail. It is noted that legal privilege is not waived because you have read this e-mail. **********************************************************************

1 0

unset locations and missing location on drop down [SEC=UNCLASSIFIED]
by Peter.Hine＠familycourt.gov.au 29 Jan '16

29 Jan '16

ver: CE 0.16.1.7533 The two attached pictures show that i have 11 devices with unset location, which is strange as i've not added any equipment. when clicking on the location UNSET, i get the second picture, which is "No devices found". the other thing to note is when selecting the location drop down, it only shows up to Townsville. I have one more, Wollongong. So it appears to be showing $count locations not $count+1 (+1 for the UNSET entry) Wollongong is not listed out of alpha order. Selecting Wollongong from the Locations menu correctly shows equipment in the results, but still doesn't list Wollongong in the Locations drop down. (Embedded image moved to file: pic60288.gif) (Embedded image moved to file: pic64895.gif) thanks Peter Hine Senior Technical Support Engineer (Servers) FCoA ITS peter.hine(a)familycourt.gov.au ********************************************************************** The information contained in this e-mail (including any attachments) is for the exclusive use of the addressee. If you are not the intended recipient please notify the sender immediately and delete this e-mail. It is noted that legal privilege is not waived because you have read this e-mail. **********************************************************************

2 5

Sensors changing precision/scale
by Michael 29 Jan '16

29 Jan '16

Has anybody encountered devices that change their scale/precision whenever they feel like it? We have some that now behave this way after a recent software upgrade. We think it's a vendor bug (in this instance, Bluecoat), but might be prudent to catch the changing precision value during the poll. Currently it looks like the precision is detected once and stored in the db. Then subsequent polling is only adjusted based on the original precision value. I've attached a graph and some walks showing the behaviour...

2 1