- observium - lists.observium.org

Alert Check not Working
by Johnston, Tom 06 Apr '15

06 Apr '15

I have an alert checker set up to alert for CPU gt 80%. I also have an Alert checker for ifOperStatus. It seems many of the devices have never been checked despite regenerating multiple times. When I hover of the “I” for information its an empty square. Issue happens on the same exact device models and on others we get a result of Checks Ok and some array data under the “I” Devices running identical IOS images, one works, another doesn’t. What information can I gather to help see what the issue may be? Version: Observium 0.15.3.6350 (rolling) Server 4vCPU / 8GB RAM 166 Devices (mostly Cisco Switches)(Polling/Alerting on Mostly Uplinks only, not access interfaces) Thannks. [cid:C0786D29-E8DF-4DDA-B40E-EB0014E2D9C1]

2 1

observium managment should be more professional
by John Brown 06 Apr '15

06 Apr '15

http://afmug.com/pipermail/af/2015-March/018914.html As a provider of internet connectivity (ergo a telco and a ISP) we use licensed microwave and unlicensed microwave technologies to feed our revenue generating customers. We also use fiber, and copper based technologies. microwave != wifi We are not alone in using a mix of technologies to deliver bits to customers. T-Mobile, ATT, Sprint, AllTel, Cellular One, Verizon, etc all use microwave (wireless) technologies to deliver bits. I, like others, have offered to write code, have asked for pointers on how to get started writing code, all appears to have fallen upon deaf ears. I've offered to PAY others to write code to support our kit, with features we need. No takers. As a PAID user, I'm quite shocked and disappointed in Adam's childish behaviour. Users of Observium should be concerned that their continued investment could be a loosing path as more people move AWAY from the product and go support other packages. On two lists that I saw the above URL, not less than 3 dozen people said they where removing observium and not renewing their annual subscriptions. I suspect that will become a trend. Cheers

9 16

Allowed memory size of 268435456 bytes exhausted during the pooling for one host
by dorje2007＠seznam.cz 05 Apr '15

05 Apr '15

Hi one host cannot finish the pooling procedure, even though i run it separateley: ./poller.php -h router_host_name -d ..... ..... including: includes/polling/cipsec-tunnels.inc.php after that a lot of messages of this kind: ..... cipSecTunStatus.3157 = active cipSecTunStatus.3158 = active cipSecTunStatus.3159 = active cipSecTunStatus.3160 = active ..... Then the pooling terminates with: SNMP_STATUS[TRUE] PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 256 bytes) in /opt/observium/includes/snmp.inc.php on line 654 Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 256 bytes) in /opt/observium/includes/snmp.inc.php on line 654 I increased the memory limit to 256 MB in the php.ini, however still does not work. It happens only with one host out of about 200 hosts. I have about 7000 ports in Observium. Platform is: CentOS release 6.6 php-5.3.3-40.el6_6.x86_64 httpd-2.2.15-39.el6.centos.x86_64 Observium CE 0.14.11.6000 Do you have any ideas ? many thanks Pet

5 9

Alerting Contacts
by Johnston, Tom 03 Apr '15

03 Apr '15

Hello, Does anyone know if it is possible at current status to have alerting sent to multiple users. Say I want only Cisco IOS devices to get alerts at an email and Windows devices to get alerts at a different email. Is that level of granularity built in at present or on the way at all? Right now my sys admin and I don’t need each others alerts… Thanks in advance.

4 4

Re: [Observium] Alerting Contacts
by ron＠rjr-services.com 03 Apr '15

03 Apr '15

I'm sure Adam or others will correct me if necessary, but I seem to recall the documentation saying you can do that by specifying <email address> as part of the SNMP contact value on the device, and whatever you put in config.php will cover those devices that don't have an email address specified in the device snmp contact value. I could be wrong, it's been several weeks since I last read that part of the documentation. Sent from my Verizon Wireless 4G LTE DROID "Johnston, Tom" <Tom.Johnston(a)edinaschools.org> wrote: -- This message has been scanned by E.F.A. Project and is believed to be clean.

3 2

Renewed subscription, what next?
by Gavin Henry 02 Apr '15

02 Apr '15

Hi, We've just renewed our subscription but not sure what to do next. Our svn up still works. Not sure how it's tied to the subscription. Thanks. -- Kind Regards, Gavin Henry.

2 4

MiB Ceragon on Observium
by Maciel Rodrigues 02 Apr '15

02 Apr '15

Guys, Do you know if there is same possibility of implementation of Ceragon MiB ?

4 4

Constant 'reboot' messages for all devices with no uptime counter
by Robert Williams 02 Apr '15

02 Apr '15

Hi, All of our devices which have no uptime counter (such as IP PDUs and temperature sensors for example) are constantly showing as having ‘rebooted’ every single time they are polled. The issue seems to have started on 27/03/15 at our 6AM SVN up – so whatever revision was released at that time. Since we have a very large number of these devices, the net result of this is a pretty useless eventlog ☺ Like this: [cid:image001.png@01D06CA4.83A8D2A0] …and so on… For each devices they have (always) shown this for Uptime: [cid:image002.png@01D06CA4.83A8D2A0] Since the devices do not have any uptime counters on them. Can I filter/disable/stop these events for these devices somehow? Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

2 2

dns_get_record or why PHP sucks
by Sir l33tname 01 Apr '15

01 Apr '15

Hey, I guess I have found a bug. In ./includes/common.inc.php on the function gethostbynamel6. The problem is this one: *query the A record:* var_dump(dns_get_record($host, DNS_A)); array(1) { [0]=> array(5) { ["host"]=> string(14) "host.name.tdl" ["class"]=> string(2) "IN" ["ttl"]=> int(0) ["type"]=> string(1) "A" ["ip"]=> string(12) "192.168.17.2" } } *query the AAAA record:* var_dump(dns_get_record($host, DNS_AAAA)); PHP Warning:dns_get_record():DNS Queryfailed infile.php on line 4 bool(false) *query both together* var_dump(dns_get_record($host, DNS_A + DNS_AAAA)); PHP Warning:dns_get_record():DNS Queryfailed infile.php on line 4 bool(false) As you can see if the DNS server doesn't have a AAAA record it fails, this cause for me the error that I couldn't add a new device to the observium. I build a prototype code which could be a solution for this problem but since I'm not a good php programmer I'm sure there is a smarter way for this. $A_record = dns_get_record($host, DNS_A); $AAAA_record = dns_get_record($host, DNS_AAAA); if($A_record != false && $AAAA_record != false) { $record = array_merge($A_record, $AAAA_record); } else if($A_record == false) { $record = $AAAA_record; } else if($AAAA_record == false) { $record = $A_record; } else { #show some error } Since I did all the research it should be fairly easy to fix this, so I hope someone will do it. If you need anything more to fix it please ask. A few things I noticed in the debugging process and totally unrelated to the problem: - the name gethostbyname6 is a bit confusing since it does both I would rename it to gethostbyname - same goes for $try_a I personally would pick a more descriptive name - "Could not resolve $host" in ./includes/functions.inc.php and ./includes/functions.inc_d.php, since It took me some time to figure out what this means I would add something like "Could not resolve $host with your DNS or your Hosts file" But all in all it's a nice code base for a php project, well done! For the case I'm wrong please tell me why. l33tname

2 2

Dell PDU not being identified
by Stephen Bateman 31 Mar '15

31 Mar '15

Has anyone had problems adding the Dell K5YYY PDU's for some reason I am getting no data from them other than serial and names. I have tried SNMP v1 & v2 without any results, so ideas would be appreciated.

1 0

Disk size via unix agent.
by Dudu 31 Mar '15

31 Mar '15

Hi All. I have a very large disk which i canot get correct size with snmpd even 5.7.3 Is there any way to populate the graph and database via the Unix Agent? Im able to view the information correctly via the agent df part. Many thanks David Sent from my Samsung Galaxy smartphone.

1 0

No ports added on D-Link DGS-1216T
by Thomas Novin 30 Mar '15

30 Mar '15

Hello Very new to Observium, installed it yesteday. Ran into problems on the first device I added, no ports are found on this switch. I am also using Cacti which I plan to replace and there all ports are discovered and graphing works fine. Here is an output from snmpwalk: http://paste.ubuntu.com/10708460/ Here is an output from poller in debug: http://paste.ubuntu.com/10708471/ And last output from discovery.. root@mistik:/opt/observium# ./discovery.php -h 3 Observium CE 0.14.11.6000 *Discovery* Current Revision : 6000 New Revision : 6350 dlink.xyz.lan 3 dlink Module [ os ] time: 0.0703s Ports : Module [ ports ] time: 24.0653s Port Stacks: Module [ ports-stack ] time: 6.0483s Processors : AGENT-GENERAL-MIB hrDevice: Module [ processors ] time: 12.0521s Memory : AGENT-GENERAL-MIB HOST-RESOURCES-MIB Module [ mempools ] time: 12.0383s IPv4 Addresses : Module [ ipv4-addresses ] time: 36.1278s IPv6 Addresses : Module [ ipv6-addresses ] time: 30.0945s Sensors: ENTITY-SENSOR-MIB Module [ sensors ] time: 42.1179s Storage : Module [ storage ] time: 6.0196s Inventory: Physical Inventory : hrDevice : Module [ inventory ] time: 24.1358s Discovery protocols: LLDP-MIB CISCO-CDP-MIB Module [ discovery-protocols ] time: 12.0836s OSPF Neighbours: Module [ ospf-autodiscovery ] time: 6.0253s ARP/NDP Tables : Module [ arp-table ] time: 18.0719s Module [ junose-atm-vp ] time: 0.0003s BGP Sessions: No BGP on host Module [ bgp-peers ] time: 0.015s VLANs: Q-BRIDGE-MIB Module [ vlans ] time: 6.0383s Module [ mac-accounting ] time: 0.0003s Module [ cisco-pw ] time: 0.0004s Module [ cisco-vrf ] time: 0.0005s Module [ cisco-sla ] time: 0.0004s Module [ vmware-vminfo ] time: 0.0003s Cisco Class-based QoS: QoS not configured. Module [ cisco-cbqos ] time: 6.0876s Module [ libvirt-vminfo ] time: 0.0005s Module [ toner ] time: 0.0005s UCD Disk IO : Module [ ucd-diskio ] time: 6.0147s Wifi: Module [ wifi ] time: 0.0005s Module [ graphs ] time: 0.0004s Discovered in 247.1 seconds MySQL: Cell[22/0s] Row[0/0s] Rows[49/0.01s] Column[0/0s] Update[1/0.01s] Insert[2/0.01s] Delete[0/0s] Anyone knows what to do to graph the ports on this switch? Rgds//Thomas

2 2

match port_id with rrd graphs
by Zhenhui Liang 30 Mar '15

30 Mar '15

Hi, I would like to do some rrdtool fetch against the raw rrd files observium generated to get some reports. But I couldn’t figure out how to match the portid or device_id from observium tables to get the correct path to match to the rrd files. Rrd files location seemed to be at ~observium/rrd/devicenames. But the rrd file name like port-123.rrd, 123 seems not to be the port_id in the ports table. Rather it’s device specific. Thank you very much for your help. —Zhenhui

4 5

Discovery on Nexus 3K removes all interfaces
by Markus Viitamäki 30 Mar '15

30 Mar '15

I am running 0.15.3.6350 and have noticed that some time ago all interfaces on my nexus 3k's gets marked deleted every time discovery runs. However the interfaces are not deleted.. :/ I have done debugging on the a discovery and the only problems I can find are these (I am not sure these are related at all): http://pastie.org/private/lmqwcfqdp2ujo2nx65pwew // Markus (suom1)

2 2

update errors database structure
by Patrick Marquetecken 29 Mar '15

29 Mar '15

Hi, It seems that I have some problems with my database structure Perhaps related to my alerts & evenlog problems. [2015/01/18 15:05:14 +0100] update.php(2459): ====== Schema update 137 -> 138 ============== [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `entPhysicalIndex_measured` varchar(16) COLLATE utf8_unicode_ci DEFAULT NULL AFTER `sensor_custom_limit`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'entPhysicalIndex_measured' [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `measured_class` VARCHAR( 32 ) NULL DEFAULT NULL AFTER `entPhysicalIndex_measured`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'measured_class' [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `measured_entity` VARCHAR( 32 ) NULL DEFAULT NULL AFTER `measured_class`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'measured_entity' [2015/03/23 14:23:56 +0100] discovery.php(31115): ====== Schema update 183 -> 184 ============== [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: ALTER TABLE `eventlog` CHANGE `reference` `entity_id` INT( 64 ) NULL DEFAULT NULL; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1366) Incorrect integer value: 'NULL' for column 'entity_id' at row 1 [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: ALTER TABLE `eventlog` ADD `severity` TINYINT NOT NULL DEFAULT '6' AFTER `entity_id`; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'entity_id' in 'eventlog' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` REGEXP '(above|under) threshold'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 5 WHERE `message` REGEXP ' [.(.]by (user|cron|console)'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 3 WHERE `message` LIKE 'Device status changed to%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE '%probably the device was replaced%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE 'OS changed%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE 'Device rebooted%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `entity_type` IN ('bgp_peer', 'sensor') AND `message` REGEXP ' (Up|Down|Alarm): '; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list'

2 5

snmp crash on nexus 7k when polling certain OID
by Steve Costaras 29 Mar '15

29 Mar '15

I'm running observium CE 0.14.11.6000. We just ran into an interesting problem on a Nexus 7K running 6.2(12) code. When observium polls the device, the snmp process crashes and reloads (this happens with every 5 minute poll). Managed to track it down to a specific OID that's causing it: 1.3.6.1.4.1.9.9.91.1.1.1.1.4.22809 It takes less than a second to reload the snmp process on the 7K; we're engaging cisco to see about a fix, but in the interim besides disabling the device, is there a specific way to block/not poll this particular OID? Older nexus code appears to not have this problem as. Steve

2 1

New user - I apologize in advance if I am asking stupid questions
by Rich Elwell 29 Mar '15

29 Mar '15

Greetings, I've recently installed observium and find that it is a great tool. Kudos for developing something so useful and easy to use. I do have a couple of questions. I desire to set the device_id for some of the devices to a specific value. This is not supported in the interface. It looks like I *should* be able to modify the code to allow me to do this, but before I do I wanted to check and see if there is already a way for me to accomplish this without having to modify the code. I also desire to be able to add devices programatically via an API call from an external system. I looked over the existing simple API (not extensively) but it didn't seem like that was possible. So basically I want to be able to do something like: http://myserver/api.php?mydetails&including&device_id and have it add the device while specifying the device_id. Is that possible? If not, I'm probably going to build it. Thanks, Rich -- Rich Elwell, MS, CISSP, GCIA, CCNA, CCNA Security /dev/null security ⋅ network *nix administration

3 5

ISSUES/BUg with regards to collect_table Implementation - Suggested Code Changes
by Mark Gibbons 29 Mar '15

29 Mar '15

Hi (especially adam - can you take a read please) Background I have been working on integrating support for Ubiquiti wireless products so that wireless stats can be shown on the "wireless" graph page for these devices. I created routines to process the mibs in /include/polling/graphs using the original loop method to parse the mib to generate and populate the RRD's and everything is working absolutely fine. I will of course submit this work for inclusion once tested/verified fully. However, i read the README (you see people do read README's!!!!!!!!!!): "Please make sure you use the *new* format of graphing poller. Generate a $graph_defs array to be used in collect_table." And i thought I would have a go at the $table_def method. So I defined the MIB as per $tabledef and come across issues with multi indexed oids. In this instance from a MIB walk we have two oids as follows: ubntRadioRssi.1.1 ubntRadioRssi.1.2 So i put the following in table_def: 'ubntRadioRssi.1' => array('index' => '1', 'descr' => 'RSSI Chain 0', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_0'), 'ubntRadioRssi.1' => array('index' => '2', 'descr' => 'RSSI Chain 1', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_1'), But, of course, (knowing what i know now) this does not work because the array index is the same and you only get the last entry. So i thought try with a blank index specifying the full oid: 'ubntRadioRssi.1.1' => array('index' => '', 'descr' => 'RSSI Chain 0', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_0'), 'ubntRadioRssi.1.2' => array('index' => '', 'descr' => 'RSSI Chain 1', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_1'), But this didn't work so I investgated. The issues surround the handling of the separation of oid and index in both collect table AND snmp_get_multi. Let me Deal with snmp_get_multi first. Snmp_get multi expects an array of full oid's - great. However it spits back an array of oids and index separated. Because you use explode to breakup the oid it will only ever return the first index after the first "." rather than the full index after the first "." I am talking about this code at approx Line 464 in /includes/snmp.inc.php foreach (explode("\n", $data) as $entry) { list($oid,$value) = explode("=", $entry, 2); $oid = trim($oid); $value = trim($value); list($oid, $index) = explode(".", $oid); if (!strstr($value, "at this OID") && isset($oid) && isset($index)) { $array[$index][$oid] = $value; } } This can be corrected if you change it to the following code. In this case the base oid is returned with the FULL index in the index. I can't see that this could/would break other stuff but your experience would know better!! : foreach (explode("\n", $data) as $entry) { list($oid,$value) = explode("=", $entry, 2); $oid = trim($oid); $value = trim($value); $dotpos = strpos($oid, '.'); if ($dotpos != FALSE) { $index = substr($oid, $dotpos+1); $oid = substr($oid, 0, $dotpos); } //list($oid, $index) = explode(".", $oid); if (!strstr($value, "at this OID") && isset($oid) && isset($index)) { $array[$index][$oid] = $value; } } So the next issue is index handling within collect_table and the temporary index of oids created to generate rrdupdate. Current code is at approx 898 in /includes/polling/functions.inc.php: $oids[] = $oid.'.'.$entry['index']; $oids_index[] = array('index' => $entry['index'], 'oid' => $oid); Again if this is changed to the following so that oid and index is re-split like the return from snmp_get_multi we have a working solution where you can specify the full oid as an index for the oid array in table_def with an oid index of '' (blank): if ($entry['index'] != '') { $fulloid = $oid.'.'.$entry['index']; } else { $fulloid = $oid; } $oids[] = $fulloid; $dotpos = strpos($fulloid, '.'); if ($dotpos != FALSE) { $splitindex = substr($fulloid, $dotpos+1); $splitoid = substr($fulloid, 0, $dotpos); } //$oids_index[] = array('index' => $entry['index'], 'oid' => $oid); $oids_index[] = array('index' => $splitindex, 'oid' => $splitoid); So this is a possible solution to the multiple index problem on an oid. By specifying the full oid with blank index. What do you think? Seems like a Win/Win to me but my experience of Observium php code and structure is < 1 week. At least this solution means we can use the table_def method for us but it would mean a lot of maintenance with svn updates. Hope this solution is of possible interest for inclusion. KR's Mark

1 1

FortiGate support
by Thomas Raabo - Zitcom A/S 27 Mar '15

27 Mar '15

At some point we had FortiGate support for session graphing and so on. Now its gone. Does somebody know why? Thomas

2 2

How best to engage the Professional Services team?
by Arthur Bommele (DataByte) 27 Mar '15

27 Mar '15

Dear concerned, How best to engage the Professional Services team? Specifically, regarding Feature Development. Kind regards, Arthur B.

1 0

Help analysis
by Eliezer De Sousa Oliveira 27 Mar '15

27 Mar '15

hello everyone! how to tell the host that causes more traffic on my network? the Community observium, have an option to do this analysis? ass eliezer

2 3

Cronjobs in polling the devices
by Jerico M. Rubion 26 Mar '15

26 Mar '15

Hi there, I would like to inquire about the desired minimum cron jobs that are accepted in observium. I only have a Quad Core Intel(R) Xeon(R) CPU E5405 @ 2.00GHz CPU resources available currently managing 69 HOSTS/Devices. My current setting in /etc/cron.d/observium is */10 * * * * root /opt/observium/poller-wrapper.py 4 >> /dev/null 2>&1 */10 * * * * root /opt/observium/poller.php -h all >> /dev/null 2>&1 Can I comment out the 2nd line -> */10 * * * * root /opt/observium/poller.php -h all >> /dev/null 2>&1 ?? Best Regards, Jerico M. Rubion | 77GSI IT Services Group SEVEN SEVEN GLOBAL SERVICES INC. | 27th Floor, Orient Square Bldg., F. Ortigas Jr. Ortigas Center, Pasig City, Philippines 1605 Office: +632.915.7747 ext. 1911 | Mobile: +63.9175382740 | Duo: +632.9667501 The Information contained and all attachments to this email are for the named recipient(s) only. It contains legally privileged and confidential information intended solely for the use of the addressee. The addressee undertakes to use such information consistent with its privileged and confidential character, and by the receipt thereof appreciates that any use contrary thereto will subject him to sanctions provided for by law. If the reader of this message is not the intended recipient, please be notified that any reading, dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this transmittal in error, please notify the sender immediately.

2 1

Inquiry increased work load
by Jerico M. Rubion 25 Mar '15

25 Mar '15

Hi, Is there an automatic upgrade/patch that happened last March 24 2015 (1pm) EST Timezone? I'm getting an incremental increase of CPU load starting from the date and time I specified, I didn't change any settings in observium application even in the cronjobs. Output of: ps aux | sort -nrk 3 | head root 12585 8.5 0.0 4612 696 ? R 02:12 0:00 /usr/bin/snmpbulkwalk - xxx -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /opt/observium/mibs udp:xxxxxxx:161 cipSecGlobalStats root 12546 7.0 0.0 4748 1540 ? R 02:12 0:00 /usr/bin/snmpwalk -v1 -c -OQUs -m SNMPv2-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxxx:161 snmp root 12581 6.5 0.0 4880 1744 ? R 02:12 0:00 /usr/bin/snmpget -v1 -c -Otv -M /opt/observium/mibs udp:xxxxxx:161 sysUpTime.0 root 12579 6.0 0.0 4932 1828 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -r 0 -v2c -c -OqsX -m BRIDGE-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxx:161 dot1dTpFdbEntry root 12573 6.0 0.0 0 0 ? R 02:12 0:00 [snmpbulkwalk] root 12571 6.0 0.0 5008 1888 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUn -M /opt/observium/mibs udp:xxxxx:161 .1.3.6.1.4.1.9.9.13.1 root 12569 6.0 0.0 4748 1668 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -r 0 -v2c -c -OqsX -m BRIDGE-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxxx:161 dot1dTpFdbEntry root 12582 5.5 0.0 4924 1968 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m IF-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxx:161 ifEntry root 12539 5.3 0.0 5016 1884 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m CISCO-VLAN-MEMBERSHIP-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/cis co udp:xxxxxx:161 vmVlan root 12557 5.0 0.0 5016 1872 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m CISCO-VLAN-MEMBERSHIP-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/cis co udp:xxxxxx:161 vmVlan Note: xxxxx is used to replaced sensitive information Kindly see attached screenshot for the incremental increase of CPU load that happend last Match 24 1pm (EST Timezone) Best Regards, Jerico M. Rubion | 77GSI IT Services Group SEVEN SEVEN GLOBAL SERVICES INC. | 27th Floor, Orient Square Bldg., F. Ortigas Jr. Ortigas Center, Pasig City, Philippines 1605 Office: +632.915.7747 ext. 1911 | Mobile: +63.9175382740 | Duo: +632.9667501 The Information contained and all attachments to this email are for the named recipient(s) only. It contains legally privileged and confidential information intended solely for the use of the addressee. The addressee undertakes to use such information consistent with its privileged and confidential character, and by the receipt thereof appreciates that any use contrary thereto will subject him to sanctions provided for by law. If the reader of this message is not the intended recipient, please be notified that any reading, dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this transmittal in error, please notify the sender immediately.

1 0

Re: [Observium] howto control ports
by Tom Laermans 25 Mar '15

25 Mar '15

You typo'd your realname in your mail client setup ;) 'Ports' is quite a confusing word to use in this context indeed... Tom On Mar 24, 2015 8:38 PM, Adam Armstronf <adama(a)memetic.org> wrote: > > Well, that was totally not obvious! > > We don't actually do any "port" monitoring at all, the old services code is long since deprecated and probably broken. > > Adam. > > Sent with AquaMail for Android > http://www.aqua-mail.com > > On 24 March 2015 12:17:28 Frank Lahr <logman0u812(a)gmail.com> wrote: >> >> He wants to monitor an applications port(s), up/down and the data going going threw it. >> I was thinking about using Observium to monitor dicom/hl7 ports too, but have not looked into it yet. >> >> Frank >> >> On Tue, Mar 24, 2015 at 2:48 AM, Adam Armstrong <adama(a)memetic.org> wrote: >>> >>> I think you might be using the wrong words :) >>> >>> adam. >>>> >>>> On 24/03/2015 06:25:33, J.P.M.H. Geerets <j.p.geerets(a)amc.uva.nl> wrote: >>>> >>>> Hi folks, >>>> >>>> Bit new here. >>>> >>>> Have an observium (community edition) install in test environment. >>>> Is het possible to creat my own ports to test on? >>>> Want to test for example ports on a cloverleaf (communication) server to check orm messages etc. >>>> Also wanna check dicomports, mostly on 104. >>>> >>>> Any idea how to do this with observium? >>>> >>>> >>>> Met vriendelijke groet, >>>> >>>> Jean-Paul >>>> --- >>>> Jean-Paul Geerets - ICT Radiologie >>>> >>>> ________________________________ >>>> >>>> AMC Disclaimer : http://www.amc.nl/disclaimer >>>> >>>> ________________________________ >>>> _______________________________________________ >>>> observium mailing list >>>> observium(a)observium.org >>>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >>> >>> _______________________________________________ >>> observium mailing list >>> observium(a)observium.org >>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >> >> >> >> -- >> Frank >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>

3 2

Re: [Observium] (no subject)
by Adam Armstrong 25 Mar '15

25 Mar '15

Either SNMP timeout, SNMP stack bug or vendor bug. Adam. On 25 Mar 2015 02:06, Zach Underwood <zunder1990(a)gmail.com> wrote: > > I get the same thing about the interfaces nulling on some of my HP 1910 switches. > > On Mar 24, 2015 10:02 PM, "Christopher Pole" <chris(a)apexn.com.au> wrote: >> >> Poor choice of terms on my part regarding discovery, let me try again. >> >> Every now and then Observium will go through and mark every interface attribute on this device as NULL and then shortly thereafter re-learn the attributes, for example: >> >> Time: 2015-03-25 00:56:26 >> Port: lag2 >> Message: Interface changed: [ifName] LAG2 -> NULL; [ifAlias] Trunk: sw01 -> NULL; [ifAdminStatus] up -> NULL; [ifOperStatus] up -> NULL; [ifMtu] 9216 -> NULL; [ifSpeed] 2000000000 -> NULL; [ifHighSpeed] 2000 -> NULL; [ifType] ieee8023adLag -> NULL; [ifPhysAddress] 001bed9fa841 -> NULL; [ifPromiscuousMode] true -> NULL; [ifConnectorPresent] false -> NULL >> >> At this point the alert triggers for this interface, as anything over 0bps is triggers the >85% util alarm. >> >> Shortly thereafter observium relearns the interface attributes: >> >> Time: 2015-03-25 01:00:16 >> Port: lag2 >> Message: Interface changed: [ifName] -> LAG2; [ifAlias] -> Trunk: sw01; [ifAdminStatus] -> up; [ifOperStatus] -> up; [ifMtu] -> 9216; [ifSpeed] -> 2000000000; [ifHighSpeed] -> 2000; [ifType] -> ieee8023adLag; [ifPhysAddress] -> 001bed9fa841; [ifPromiscuousMode] -> true; [ifConnectorPresent] -> false >> >> At this point the alert sends a recovery message. >> >> The nullification and re-learning of interface attributes happens periodically but with no fixed schedule. Is this possibly something that can be caused by a bulk-walk failure part way through? Or an SNMP timeout? >> >> Thanks, >> >> Chris >> >> >> On Wed, Mar 25, 2015 at 10:41 AM, Adam Armstrong <adama(a)memetic.org> wrote: >>> >>> Nothing gets rediscovered at any frequency other than the frequency with which you run discovery.php. >>> >>> Almost everything collected by the poller is collected by snmpbulkwalk. >>> >>> It's possible that bulkwalk is failing part way through for this device causing the ifHighSpeed to be set to zero (or set to the value of ifSpeed, which will be just as useless on ports >1Gb) >>> >>> adam. >>>> >>>> On 24/03/2015 22:16:43, Christopher Pole <chris(a)apexn.com.au> wrote: >>>> >>>> Hi folks, >>>> >>>> we have an alert that triggers when certain ports hit >85% utilisation being triggered by a single device on a regular basis as it seems to get rewalked quite often, which briefly sets the speed of the monitored ports to 0 which then triggers the alert as any utilisation over 0 is >85% :). >>>> >>>> The device is a Brocade CES, but it is the only one in our fleet that suffers from this rediscover > trigger alert issue. Though the others also seem to rediscover more often than is necessary. >>>> >>>> Any thoughts on how I might figure out what is going on so I can fix it? >>>> >>>> Thanks, >>>> Chris >>>> _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >>> >>> _______________________________________________ >>> observium mailing list >>> observium(a)observium.org >>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >> >> >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>

1 0

(no subject)
by Christopher Pole 25 Mar '15

25 Mar '15

Hi folks, we have an alert that triggers when certain ports hit >85% utilisation being triggered by a single device on a regular basis as it seems to get rewalked quite often, which briefly sets the speed of the monitored ports to 0 which then triggers the alert as any utilisation over 0 is >85% :). The device is a Brocade CES, but it is the only one in our fleet that suffers from this rediscover > trigger alert issue. Though the others also seem to rediscover more often than is necessary. Any thoughts on how I might figure out what is going on so I can fix it? Thanks, Chris

3 3

Alerts not working
by Patrick Marquetecken 25 Mar '15

25 Mar '15

I'm trying to get my alerts working but until now without success. I have put a server down, and i know some systems have a disk that is full about 80% I have followed the http://www.observium.org/wiki/Creating_an_Alert_Checker and created some alert according to the examples, and run the regenerate. Test mails are successfully send from the command line. but no luck, can anyone please advice on this matter?

3 7

howto control ports
by J.P.M.H. Geerets 24 Mar '15

24 Mar '15

Hi folks, Bit new here. Have an observium (community edition) install in test environment. Is het possible to creat my own ports to test on? Want to test for example ports on a cloverleaf (communication) server to check orm messages etc. Also wanna check dicomports, mostly on 104. Any idea how to do this with observium? Met vriendelijke groet, Jean-Paul --- Jean-Paul Geerets - ICT Radiologie ________________________________ AMC Disclaimer : http://www.amc.nl/disclaimer ________________________________

4 6

LDAP changes in the Professional version?
by George Phillips 23 Mar '15

23 Mar '15

Hi folks! I tried searching the list but didn’t see anything promising... I had LDAP auth setup and working great on the Community version, but as soon as I upgraded to Professional (version 0.15.3.6343), it ceased allowing logins. A debug of the login shows: LDAP[Connecting to xxx.xxx.xxx.xxx] LDAP[Connected] LDAP[Referrals][Disabled] LDAP[Version][Set to 3] LDAP[Bind DN called] LDAP[Bind][cn=manager,ou=Internal,dc=example,dc=com] LDAP[Filter][(uid=testuser)][ou=Users,ou=Accounts,dc=example,dc=com] LDAP[Authenticate][User: testuser][Bind user: cn=Test User,ou=Users,ou=Accounts,dc=example,dc=com] LDAP[Authenticate][Comparing: cn=admins,ou=Groups,ou=Accounts,dc=example,dc=com][member=cn=Test User,ou=Users,ou=Accounts,dc=example,dc=com] LDAP[Authenticate][Compare LDAP error: No such object] So this part looked a bit strange to me: LDAP[Authenticate][Comparing: cn=admins,ou=Groups,ou=Accounts,dc=example,dc=com][member=cn=Test User,ou=Users,ou=Accounts,dc=example,dc=com] (notice the strange "member=cn=…" part) My config is: // Begin LDAP Config $config['auth_mechanism'] = "ldap"; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_binddn'] = "cn=manager,ou=Internal,dc=example,dc=com"; $config['auth_ldap_bindpw'] = “PASSWORD_HERE"; $config['auth_ldap_attr']['uid'] = "uid"; $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; $config['auth_ldap_attr']['cn'] = "cn"; $config['auth_ldap_objectclass'] = "inetOrgPerson"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = “LDAP_SERVER_IP"; $config['auth_ldap_port'] = 389; $config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = ",ou=Users,ou=Accounts,dc=example,dc=com"; $config['auth_ldap_group'] = array("cn=admins,ou=Groups,ou=Accounts,dc=example,dc=com"); $config['auth_ldap_groupbase'] = "ou=Groups,ou=Accounts,dc=example,dc=com"; $config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['admins']['level'] = 10; // End LDAP Config Again, this same config works like a champ on the community edition. Did something change with LDAP auth in the professional edition? Am I missing something? Thanks! —George George Phillips www.pfsense.org

2 2

Request for more info from Allied Telesis AW+ switches
by Daniel Olynsma 23 Mar '15

23 Mar '15

Hi All, I use Observium daily to monitor various test networks and have noticed limited support for AlliedwarePlus products. I have done some digging round in the MIBs as well as the Observium php files and found that Observium is only extracting the Software version from AT-SETUP-MIB in the file: /opt/observium/includes/polling/os$ cat alliedwareplus.inc.php I would like to request that this be increased to contain more device information. I have found that the HW, serial No etc.. info is available in the AT-RESOURCE-MIB. I have not attached the MIB file as it is already part of Observium. Please find below some experiments that I have done extracting the info. I have conducted experiments on standalone as well as a 'stacked' product consisting of 8 physical switches (rscBoardName). Each device lists a base board '.3' and stacking module '.4' and a power supply '.5'. I would expect that you would only be interested in the '.3' values. for the switch Type. In my experiments I also found following could be extracted: H/W Rev - rscBoardRevision S/N - rscBoardSerialNumber I do not have PHP experience so do not know how to add this functionality myself. However since I am requesting this I do make myself available to assist in this or other Allied Telesis related tasks Regards, Daniel Experiment results: ------- Get the $Hardware value AT-RESOURCE-MIB rscBoardName Standalone (With stacking hw) danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.36 1.3.6.1.4.1.207.8.4.4.3.21.1.1.4 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "x510-52GTX" danielo@tb105 ~ $ Stacked product (8-stack) danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.49 1.3.6.1.4.1.207.8.4.4.3.21.1.1.4 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.3 = STRING: "AT-x930-52GTX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.5 = STRING: "PWR250" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.3 = STRING: "AT-x930-52GPX" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.4 = STRING: "AT-StackQS" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.5 = STRING: "PWR250" danielo@tb105 ~ $ Standalone (Without stacking hw) danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.34 1.3.6.1.4.1.207.8.4.4.3.21.1.1.4 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "x610-24Ts/X" danielo@tb105 ~ $ danielo@tb105 ~ $ snmpwalk -O n -v 2c -c public 10.37.105.34 1.3.6.1.4.1.207.8.4.4.3.21 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.3.1.3 = STRING: "Base" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: "x610-24Ts/X" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.5.1.3 = Gauge32: 340 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.6.1.3 = STRING: " " .1.3.6.1.4.1.207.8.4.4.3.21.1.1.7.1.3 = STRING: "B-0" .1.3.6.1.4.1.207.8.4.4.3.21.1.1.8.1.3 = STRING: "C1ZQB4107" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.1.1 = STRING: " Total: 511640 kB Free: 379816 kB" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.2.1 = STRING: "63.0MB Used: 25.2MB Available: 37.8MB" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.3.1 = STRING: "0 days 15:25:56" .1.3.6.1.4.1.207.8.4.4.3.21.2.1.4.1 = STRING: "2.0.4" danielo@tb105 ~ $ localadmin@observium:~$ snmpwalk -O n -m ~/.snmp/mibs/AT-RESOURCE-MIB -v 2c -c public 10.37.105.49 rscBoardName .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.2.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.3.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.4.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.5.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.6.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.3 = STRING: AT-x930-52GTX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.7.5 = STRING: PWR250 .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.3 = STRING: AT-x930-52GPX .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.4 = STRING: AT-StackQS .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.8.5 = STRING: PWR250 localadmin@observium:~$ snmpwalk -O n -m ~/.snmp/mibs/AT-RESOURCE-MIB -v 2c -c public 10.37.105.34 rscBoardName .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: x610-24Ts/X localadmin@observium:~$ localadmin@observium:~$ localadmin@observium:~$ snmpwalk -O n -m ~/.snmp/mibs/AT-RESOURCE-MIB -v 2c -c public 10.37.105.36 rscBoardName .1.3.6.1.4.1.207.8.4.4.3.21.1.1.4.1.3 = STRING: x510-52GTX localadmin@observium:~$

2 1

BUG: (and Fix) in poll-billing.php - snmp v1 issue
by Mark Gibbons 23 Mar '15

23 Mar '15

Hi We upgraded to the PRO version last week so that we could look at the billing feature. We did all the needed setup stuff including install of jdgraph etc and added the required cron jobs. We created a few tests bills on a couple of ports We left it for a few hours and got absolutely nothing. We ran poll-billing manually and kept on seeing that it returned "No Data" We searched online and believe that this bug might be referenced here: http://jira.observium.org/browse/OBSERVIUM-711 We enabled OBS_DEBUG in poll-billing.php and immediately could see the problem. The snmpget command was being invoked requesting v2 High Capacity counters against snmp v1 targets. The reason is that the conditional clause when building the snmpget command is wrong. Currently line 86 reads: if ($port['snmp_version'] == "1" || $port['port_64bit'] == "0") { However the snmpv1 string that should be looked for is "v1" not "1". Changing the clause to: if ($port['snmp_version'] == "v1" || $port['port_64bit'] == "0") { Solves all the problems and poll-billing then correctly returns data from snmp v1 devices. Can the please be fixed in an upcoming SVN release so we do not have to reapply the fix if poll-billing.php gets changed for other reasons. KR's Mark

1 0

lighttpd
by tridinebandim 23 Mar '15

23 Mar '15

hi guys, just registered to address a missing info in lighttpd installiation tutorial. "python-mysqldb" package is not in the list of prerequisite packages and what i see is it's required to run the cron "*/5 * * * * root /opt/observium/poller-wrapper.py 2 >> /dev/null 2>&1" if you can edit the tutorial, people who uses lighttpd will be able to see graphs with data. thanks for all your hard work.

1 0

Re: [Observium] MySQL/Apache apps
by Ben Gatewood 23 Mar '15

23 Mar '15

Have you set the “Agent Port” section in your config? Ben On 16/03/2015 09:27, "Asensio Sánchez, Juan" <jasensios(a)indra.es> wrote: >Hi > >We have just installed Observium from SVN, added some hosts, and almost >everything seems to work fine. We have some MySQL servers, and followed >the instructions to get the graphs. Running observium_agent in the MySQL >server, I get the <<<mysql>>> section. Doing telnet to the MySQL server >from the Observium server, to the agent port, I get the same section, >but I don't get any data in the device page. Any advice? The same >happens with the Apache servers. > >Regards. > >Este correo electrónico y, en su caso, cualquier fichero anexo al mismo, >contiene información de carácter confidencial exclusivamente dirigida a >su destinatario o destinatarios. Si no es vd. el destinatario indicado, >queda notificado que la lectura, utilización, divulgación y/o copia sin >autorización está prohibida en virtud de la legislación vigente. En el >caso de haber recibido este correo electrónico por error, se ruega >notificar inmediatamente esta circunstancia mediante reenvío a la >dirección electrónica del remitente. >Evite imprimir este mensaje si no es estrictamente necesario. > >This email and any file attached to it (when applicable) contain(s) >confidential information that is exclusively addressed to its >recipient(s). If you are not the indicated recipient, you are informed >that reading, using, disseminating and/or copying it without >authorisation is forbidden in accordance with the legislation in effect. >If you have received this email by mistake, please immediately notify the >sender of the situation by resending it to their email address. >Avoid printing this message if it is not absolutely necessary. >_______________________________________________ >observium mailing list >observium(a)observium.org >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

3 2

Re: [Observium] alert after 2 checks
by Tom Laermans 23 Mar '15

23 Mar '15

Yes. Set delay to 2 :) On Mar 23, 2015 6:07 PM, Simon Smith <simonsmith5521(a)gmail.com> wrote: > > Hi All, > > Im just wondering if this is possible, it may not be, or I just may not know how to do it? > > Currently i have a check thats says if bandwidth on a port more than 75%, then alert me… > > BUT i want the alert to only send me an email if after say 15mins its still over 75% ? > > i currently check our kit every 5 mins, so it work out after 3 checks > > Is this possible? > > regards > > Simon - Hestor Ltd > > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

2 1

alert after 2 checks
by Simon Smith 23 Mar '15

23 Mar '15

Hi All, Im just wondering if this is possible, it may not be, or I just may not know how to do it? Currently i have a check thats says if bandwidth on a port more than 75%, then alert me… BUT i want the alert to only send me an email if after say 15mins its still over 75% ? i currently check our kit every 5 mins, so it work out after 3 checks Is this possible? regards Simon - Hestor Ltd

2 1

Duplicate device neighbour entries
by Chard, Alex (RET-SYD) 23 Mar '15

23 Mar '15

HI All, Just wondering is anyone has seen this happening before. We have switches that run LLDP and CDP. On most switches, Observium correctly determines that the neighbour entries for each protocol are identical and ignores the second one from LLDP. However on one switch, it's decided that it represents a separate connection (see attachment) I suspect it has to do with the differing port ID, but Observium seems to be able to reconcile that on other switches. Any ideas? Thanks, Alex This e-mail is for the use of the intended recipient(s) only. If you have received this e-mail in error, please notify the sender immediately and then delete it. If you are not the intended recipient, you must not use, disclose or distribute this e-mail without the author's permission. We have taken precautions to minimise the risk of transmitting software viruses, but we advise you to carry out your own virus checks on any attachment to this e-mail. We cannot accept liability for any loss or damage caused by software viruses.

1 1

Re: [Observium] Critical alert not matching alerts checker
by Tom Laermans 23 Mar '15

23 Mar '15

Quick reply from my cellphone, you need an alert checker for entity type status instead of sensor since a few weeks... Tom On Mar 22, 2015 7:55 PM, Robert Williams <Robert(a)CustodianDC.com> wrote: > > Hi All, > > > > I have a device a Cisco 2960G with a failed internal PSU that has switched to it’s backup RPS supply. Observium is correctly identifying this as ‘critical’ under the Status Indicators for the device in question (image below): > > > > > > > > There is a “Hardware Fault” event I have created which /should/ have matched this, I believe: > > > > > > (I’ve added the match for value = critical as a test, it wasn’t there originally) > > > > This alert checker correctly matches a who load of devices and status checkers on many devices (1691 in total, all green): > > > > > > However, for this particular type of sensor, it does not see any sensors which match the “Hardware Fault” checker. As you can see, I have already removed all the “Device Match” and “Entity Match” criteria from the checker itself to rule that out. So essentially this checker is matching every type of sensor that there is (except, obviously, the one which I want it to). > > > > When I click the link on the graph for “Sw1, PS1 Critical, RPS Normal” sensor I get this URL http://observium-server/device/device=343/tab=health/metric=status/ which may be of use in helping diagnose this. > > > > After doing some more checking, I’ve found that it is not matching any other kind of sensor with a similar class, for example it does not match the WS-CAC-4000W-IN power supplies in any of the Cat6k chassis either. > > > > In fact, I think it’s actually failing to match sensors which have ‘normal’ and ‘critical’ type statuses, instead of ‘true’ and ‘false’ > > > > So the following sensors highlighted in yellow are also being missed from matching in this generic alerting config: > > > > > > So I believe it’s a wider issue and not just related to this one device. > > > > Can someone confirm what I’m doing wrong and/or maybe check to see if your alerting configurations can match sensors which have an OK state of ‘normal’ instead of ‘true’? > > > > Cheers! > > Robert Williams > Custodian Data Centre > Email: Robert(a)CustodianDC.com > http://www.CustodianDC.com

2 4

Map and Neighbours
by Dudu 23 Mar '15

23 Mar '15

Hi All, For some reason I don’t have the Neighbours and Map tabs under the ports page. It's probably something that I have change but I'm unable to find it. Also the mysql link table is empty. Any idea? Thanks David

1 1

Critical alert not matching alerts checker
by Robert Williams 22 Mar '15

22 Mar '15

Hi All, I have a device a Cisco 2960G with a failed internal PSU that has switched to it’s backup RPS supply. Observium is correctly identifying this as ‘critical’ under the Status Indicators for the device in question (image below): [cid:image001.png@01D064D0.36501EE0] There is a “Hardware Fault” event I have created which /should/ have matched this, I believe: [cid:image002.png@01D064D0.36501EE0] (I’ve added the match for value = critical as a test, it wasn’t there originally) This alert checker correctly matches a who load of devices and status checkers on many devices (1691 in total, all green): [cid:image003.png@01D064D0.36501EE0] However, for this particular type of sensor, it does not see any sensors which match the “Hardware Fault” checker. As you can see, I have already removed all the “Device Match” and “Entity Match” criteria from the checker itself to rule that out. So essentially this checker is matching every type of sensor that there is (except, obviously, the one which I want it to). When I click the link on the graph for “Sw1, PS1 Critical, RPS Normal” sensor I get this URL http://observium-server/device/device=343/tab=health/metric=status/ which may be of use in helping diagnose this. After doing some more checking, I’ve found that it is not matching any other kind of sensor with a similar class, for example it does not match the WS-CAC-4000W-IN power supplies in any of the Cat6k chassis either. In fact, I think it’s actually failing to match sensors which have ‘normal’ and ‘critical’ type statuses, instead of ‘true’ and ‘false’ So the following sensors highlighted in yellow are also being missed from matching in this generic alerting config: [cid:image004.png@01D064D1.B26D89D0] So I believe it’s a wider issue and not just related to this one device. Can someone confirm what I’m doing wrong and/or maybe check to see if your alerting configurations can match sensors which have an OK state of ‘normal’ instead of ‘true’? Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

1 0

Down ports but can't see them
by Chard, Alex (RET-SYD) 20 Mar '15

20 Mar '15

Hi All, Got an interesting issue... Observium's dashboard shows 2 down ports [cid:image001.png@01D06344.0CB21DF0] But clicking on "2 down" takes me to a screen that shows no down ports: [cid:image002.png@01D06344.0CB21DF0] If I have any more than 2 down ports, they are displayed correctly. Any idea how I can identify the offending ports? Thanks, Alex This e-mail is for the use of the intended recipient(s) only. If you have received this e-mail in error, please notify the sender immediately and then delete it. If you are not the intended recipient, you must not use, disclose or distribute this e-mail without the author's permission. We have taken precautions to minimise the risk of transmitting software viruses, but we advise you to carry out your own virus checks on any attachment to this e-mail. We cannot accept liability for any loss or damage caused by software viruses.

1 0

tons of rrd zombie processes + solution
by Gerwin Krist 19 Mar '15

19 Mar '15

Hi, FYI on PHP 5.5 we saw a lot of defunt rrdtool proceeses (1 for every image created in the browser). If you see this there are a couple of fixes/work-around: 1. Fix it in observium, open ./includes/rrdtool.inc.php and change *function rrdtool_pipe_close(&$rrd_process, &$rrd_pipes)* to *function rrdtool_pipe_close($rrd_process, &$rrd_pipes)* 2. downgrade to PHP 5.4 Seems to be caused by https://bugs.php.net/bug.php?id=69014 Regards, Gerwin Krist

2 1

Purchase support
by Dudu 19 Mar '15

19 Mar '15

Hi All. How can i buy support? I would like to finance and improve the product. Thanks David Sent from my Samsung Galaxy smartphone.

1 0

Alert emails not working
by Aurélien PERRODY 18 Mar '15

18 Mar '15

Hi, I recently bought the full version of Observium to get alerts system. So I migrated from the CE version to full version, no problem. I edited the config.php file as well: -------------------- // Enable alerter (not available in CE) $config['poller-wrapper']['alerter'] = TRUE; // Set up a default alerter (email to a single address) $config['alerts']['alerter']['default']['descr'] = "Default Email Alert"; $config['alerts']['alerter']['default']['type'] = "email"; $config['alerts']['alerter']['default']['contact'] = "xxx(a)xxx.com"; $config['alerts']['alerter']['default']['enable'] = TRUE; // Configuration email (APE 2015-03-12) $config['email']['backend']= 'smtp'; $config['email']['enable'] = TRUE; $config['email']['from'] = 'xxx(a)xxx.com'; $config['email']['default'] = 'xxx(a)xxx.com'; $config['email']['default_only'] = TRUE; $config['email']['smtp_host'] = '192.168.1.29'; $config['email']['smtp_port'] = 25; $config['email']['smtp_timeout']= 10; $config['email']['smtp_secure']= NULL; $config['email']['smtp_auth']= NULL; $config['email']['smtp_username'] = NULL; $config['email']['smtp_password'] = NULL; -------------------- When I check my configuration, it works, I received the email test, no problem. ------------------- root@MEDSRV15:/home/logs# /opt/observium/test_mail.php -h MEDHPV01 No log handling enabled - turning on stderr logging /etc/snmp/snmp.conf: line 6: Warning: Unknown token: rocommunity. Observium 0.15.3.6342 Test E-mail Configuration See mail backend options here: http://www.observium.org/wiki/Configuration_Options#Email_backend_settings My Hostname: MEDSRV15.xxxx.xxxxx E-mails ENABLED globally ($config['email']['enable']) E-mails use SMTP backend ($config['email']['backend']) smtp host: [192.168.1.29] smtp port: [25] smtp timeout: [10] smtp auth: [FALSE] E-mails send only to default email ($config['email']['default_only']) E-mails use these default recipient(s) ($config['email']['default']): xxxx(a)xxxxx.com E-mails send from ($config['email']['from']): xxxxx(a)xxxxxx.com E-mails send to recipients based on default recipient from config and/or device sysContact. Try send test notification for medhpv01 to these email(s): xxxxx(a)xxxxx.com EMAILING Notification for medhpv01 SENT. ------------------- Then I created a classic alert checker, when devices are down. -Conditions: device_status eq 0 -Device match * entity match * Alerts on the webpage works correctly, but I did not receive an alert email. So Y U NO WORK OBSERVIUM?? :) I read the wiki but don't see my pb... Many thanks for helping. My version information below: Observium 0.15.3.6342 OS Linux 3.2.0-4-amd64 [amd64] (Debian 7 (wheezy)) Apache 2.2.22 (Debian) PHP 5.4.35-0+deb7u2 MySQL 5.5.40-0+wheezy1 SNMP NET-SNMP 5.4.3 RRDtool 1.4.7 Regards, Aurélien

1 0

SVN error retreving REPORT
by Dash Brousseau 17 Mar '15

17 Mar '15

Can no longer download the full svn of observium ever since I upgrade to Ubuntu 14.10. I even did a fresh install and the same problem After around 70-80% I get svn: E000104:Error retrieving REPORT: connection reset by peer I then try to do svn cleanup I able to get a few more files Then it won’t go any further and I get the same error Anyone come across this? Dash This message contains information which may be confidential and privileged. Unless you are the intended addressee (or authorized to receive for the intended addressee), you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by e-mail then delete the message immediately. Francais: http://www.fundserv.com/fr/company/disclaimer<http://www.fundserv.com/francais/legal/disclaimer_email_ib.shtml>

1 0

Alerting system patch
by Gert-Jan de Boer 16 Mar '15

16 Mar '15

Hi, A while ago I posted this patch to Jira, after some brief discussion I didn't hear back about it. I would like to add some more notification backends (for example Slack integration), is there any reason why this would not be accepted? The patch is under http://jira.observium.org/browse/OBSERVIUM-1194 Kind regards, GJ

1 0

Description not saved
by Asensio Sánchez, Juan 16 Mar '15

16 Mar '15

Hi We have installed Observium from SVN. When trying to edit a device a change (set) a description, that is not saved, I get a message "Device record unchanged. No update necessary." This happens with all devices. Any advice? Regards. Este correo electrónico y, en su caso, cualquier fichero anexo al mismo, contiene información de carácter confidencial exclusivamente dirigida a su destinatario o destinatarios. Si no es vd. el destinatario indicado, queda notificado que la lectura, utilización, divulgación y/o copia sin autorización está prohibida en virtud de la legislación vigente. En el caso de haber recibido este correo electrónico por error, se ruega notificar inmediatamente esta circunstancia mediante reenvío a la dirección electrónica del remitente. Evite imprimir este mensaje si no es estrictamente necesario. This email and any file attached to it (when applicable) contain(s) confidential information that is exclusively addressed to its recipient(s). If you are not the indicated recipient, you are informed that reading, using, disseminating and/or copying it without authorisation is forbidden in accordance with the legislation in effect. If you have received this email by mistake, please immediately notify the sender of the situation by resending it to their email address. Avoid printing this message if it is not absolutely necessary.

1 0

MySQL/Apache apps
by Asensio Sánchez, Juan 16 Mar '15

16 Mar '15

Hi We have just installed Observium from SVN, added some hosts, and almost everything seems to work fine. We have some MySQL servers, and followed the instructions to get the graphs. Running observium_agent in the MySQL server, I get the <<<mysql>>> section. Doing telnet to the MySQL server from the Observium server, to the agent port, I get the same section, but I don't get any data in the device page. Any advice? The same happens with the Apache servers. Regards. Este correo electrónico y, en su caso, cualquier fichero anexo al mismo, contiene información de carácter confidencial exclusivamente dirigida a su destinatario o destinatarios. Si no es vd. el destinatario indicado, queda notificado que la lectura, utilización, divulgación y/o copia sin autorización está prohibida en virtud de la legislación vigente. En el caso de haber recibido este correo electrónico por error, se ruega notificar inmediatamente esta circunstancia mediante reenvío a la dirección electrónica del remitente. Evite imprimir este mensaje si no es estrictamente necesario. This email and any file attached to it (when applicable) contain(s) confidential information that is exclusively addressed to its recipient(s). If you are not the indicated recipient, you are informed that reading, using, disseminating and/or copying it without authorisation is forbidden in accordance with the legislation in effect. If you have received this email by mistake, please immediately notify the sender of the situation by resending it to their email address. Avoid printing this message if it is not absolutely necessary.

1 0

High CPU on Cisco Switches
by Joseph L. Brunner 15 Mar '15

15 Mar '15

Team, We had some cisco switches dropping packets with 99% cpu being polled by Observium. We had to create a view which hides some arp and routing table objects to bring the CPU back down to normal levels snmp-server view cutdown at excluded snmp-server view cutdown snmpUsmMIB excluded snmp-server view cutdown snmpVacmMIB excluded snmp-server view cutdown snmpCommunityMIB excluded snmp-server view cutdown ip.21 excluded snmp-server view cutdown ip.22 excluded snmp-server community ourcomm1 view cutdown RO

4 5

adding private ip address
by Tshering DHENDUP 14 Mar '15

14 Mar '15

Dear Team, We are trying to add private IP address to the observium. Our picture: the observium server is having a private IP address tho' NATed to a public ip address. I am trying to add the private IP( of a switch/router), and it gives me the following error Try to add 192.168.128.1: Could not resolve 192.168.128.1. Devices skipped: 1. Does this mean that, the devices can't be added using their IP? Or should the IP be DNS mapped( resolvable )? Regards -- Tshering DHENDUP(MR) Internet & IT Operations Division Bhutan Telecom Ltd www.bt.bt Contact# +975-2-343434 [Ext: 2022]

5 9

Re: [Observium] observium Digest, Vol 56, Issue 45
by Kiru Pananthan 13 Mar '15

13 Mar '15

Hi Bruce I tried to run debug mode, still the same error appears -- *Confidentiality Disclaimer:* This e-mail and any attachments are confidential and intended solely for the intended addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the intended addressee, or have received this e-mail in error, please notify the sender immediately, delete it from your system and do not copy, disclose, distribute or otherwise act in reliance upon any part of this e-mail or its attachments. Australian International School Malaysia and all affiliates under Taylor's Education Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any internet communications by any third party in reliance to this email, or from the transmission of any viruses. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Australian International School Malaysia and all affiliates under Taylor's Education Group. Replies to this e-mail may be monitored by Australian International School Malaysia and all affiliates under Taylor's Education Group for operational or business reasons.

2 1