- observium - lists.observium.org

Observium - net-snmp process unresponsive
by Laurent Dumont 28 Dec '14

28 Dec '14

Hi gents, I have a CentOS 6.6 install with net-snmp running. I'm using SNMPv3 Auth and Encryption with Observium polling devices every five minutes. On one of my Centos server, the net-snmp process will die after 24-36 hours of running. It seems to be hitting my system maximum file open limit which is set to 1024. > > [root@mail net-snmp-5.7]# ulimit -n > > 1024 > > [root@mail ~]# lsof -p 26907 | wc -l > > 1071 > > [root@mail net-snmp-5.7]# lsof -p 26907 > > snmpd 26907 root 166r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 167r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 168r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 169r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 170r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 171r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 172r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 173r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 174r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 175r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 176r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 177r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 178r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > > snmpd 26907 root 179r REG 0,3 0 4026532160 > > /proc/26907/net/sctp/snmp > #tail /var/log/snmpd.log > > cannot open /proc/net/dev ... > > /proc/partitions: Too many open files > > /proc/stat: Too many open files > > /proc/partitions: Too many open files > > /proc/stat: Too many open files > > could not create socket > > /proc/partitions: Too many open files > > /proc/stat: Too many open files > > cannot open /proc/net/dev ... > > /proc/partitions: Too many open files > > /proc/stat: Too many open files > > /proc/partitions: Too many open files > > /proc/stat: Too many open files That number will keep increasing till it trips the 1024 limit. It seems that CentOS is frozen to net-snmp 5.5 and I'm don't really want to use anything that I can't easily manage with "yum". The weird thing is that I have another server with the same config/CentOS version/Net-Snmp version and I have no issues with the snmp process on that server. Anything else I could try to troubleshoot the issue? Thanks!

1 0

Pwr consumption on JunOS
by Gavin Henry 28 Dec '14

28 Dec '14

Hi all, What is everyone doing to pick up power usage for Juniper routers and switches other than via their PDU stats? Thanks. -- Kind Regards, Gavin Henry.

4 12

Merry Christmas
by Simon Schmitz 28 Dec '14

28 Dec '14

✨。 🌟。 ✨ 。 🎄 。。 ✨ 🎄🎄。。 ✨ ✨ 🎄🐻🎄 ✨。。 🎄🐻🎀🎄 。✨ 。 🎄🎀🎄🐻🎄。。 ✨ 🎄🎄🎀🎄。。。🎄🎄🐻🎄🎄。 ✨ 🎄🎄🎀🎄🐻🎄 🎄🐻🎄🎄🎀🎄🎄 ✨ 🎄🎀🎄🎄🐻🎄✨ 🎄🎄🐻🎄🎄🎀🎄 🎄🐻🎄🎀🐻🎄🎄🎄 MERRY ✨CHRISTMAS ✨ 🎁🎁2014🎁🎁

2 1

Syslog-ng no log after upgrade
by chott＠praha1.net 27 Dec '14

27 Dec '14

Hello, today i check some Syslog and after upgrade i dont have any Remote Syslog messages. Is there some change in CE build 6000 ? Tomas

3 4

Need to create sensors and better support for Ubiquiti radio devices
by John Brown 26 Dec '14

26 Dec '14

I'm looking for help to improve the support of Ubiquiti microwave radio support in Observium. Mainly focused on the AirFiber 24 and AirFiber 5 products, along with the Rocket series. Would need the ability to alarm on RF Signal level changes (out side of acceptable range, etc). Same with receive Ether CRC on the radio's ether interface. Anyone interested in helping. There would some $$ avail.

1 0

Enable / Disable RANCID on a per device basis
by Nate Mellendorf 26 Dec '14

26 Dec '14

Hello everyone, I've implemented the RANCID integration feature, which has been working quite well over the past week. I'm very excited to have config diffs on the same page as the health of each device. It's little features like this that are allowing us to leverage Observium over other monitoring platforms. That said, I was curious about a related Observium feature request. Would it be possible to configure a RANCID on/off switch on the device settings page? Please allow me to clarify this further. When I run generate-rancid.php, It's going to generate a router.db for all of the devices listed within observium. While this is amazing and extremely useful, not all devices within Observium need to be added to this list. My idea is to add a switch that determines whether the device will be added to the router.db. That way, when our CRON job runs each night to update router.db, it only does so for the devices we know RANCID can log into. Again, this is just an idea I wanted to share. If you feel there is something I could do to get around this, please let me know. As of right now, I generate the new router.db myself and manually remove each device I know shouldn't be listed. Thanks in advance, Nate Mellendorf | Network Analyst | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320.251.4700 x183 | 877.797.4700 x183 www.NetgainHosting.com<http://www.netgainhosting.com/> [cid:image002.png@01D02109.328DCB00] ________________________________ The information contained in this email message is for the designated recipient only and may be privileged, confidential, and protected from disclosure. If you have received this message in error, please notify the sender immediately and delete the original. Any dissemination, distribution, copying or other use of this message or any information contained within is strictly prohibited.

1 0

Many false positives
by John Brown 24 Dec '14

24 Dec '14

Hi I'm trying to troubleshoot the many false positives we are receiving from OB. The system will report a host as down, yet our legacy Nagios and out-of-band Pingdom do not show the host as down. It doesn't appear that OB records in the log what specifically is making OB think the host is down. I've increased the SNMP time out value to 3 seconds (which seems very long) and that has helped with some hosts, mostly Mikrotiks. But I doubt that our Juniper MX480's (which are lightly loaded) should need such long time frame to respond. How can I get OB to report what is the actual trigger for its "Host Down" alerts ?? Are there tweaks for performance monitoring / testing ?? Thank you in advance..

4 8

Trango Radios, wish list, support in Observium, $$
by John Brown 24 Dec '14

24 Dec '14

Hi, We are using lots of Trango microwave radios and would like to see better support for them in Observium. I'm willing to put a few $$ towards that integration and support....

1 0

set device for customer
by Simon Smith 24 Dec '14

24 Dec '14

Hi All, I have a feeling is more of a daft / random question, but ill ask it anyways Is it possible to set a list of devices for a customer in the customer view under the Ports menu? I can’t change the description of every single interface like described in here http://www.observium.org/wiki/Interface_Description_Parsing I would rather have a customer view of all there devices I understand i could create a user for the customer and assign those devices to that user, but thats not a view for myself as Admin the other issue i have is the Devices are assigned all over the place and not in one location either ? Regards Simon

1 0

recovering upload/download figures from dumped DB file
by Tshering DHENDUP 24 Dec '14

24 Dec '14

Dear Admin, Unfortunately, I forgot to take the backup of the rrd directory but I did take the backup of the dumped mysql. Is there a way/queries to get the upload/download figures from the database? Or is there a way like MRTG to get the graphs displayed by importing the dumped DB file to the new Observium system? Regards -- Tshering DHENDUP(MR) Systems DrukNet (Internet, Data & Enterprise Services) Bhutan Telecom www.bt.bt

2 2

Windows MIBS
by Darian Jimenez 24 Dec '14

24 Dec '14

are all windows MIBs loaded in observium? Can i add more if they are not there? I would like to see services on windows machine, is this possible at all?

2 1

growl? Re: sms
by Rob VanHooren 23 Dec '14

23 Dec '14

a while back (mailinglist archive search), there was someone who used the observium API to get alerts into a growl listener, which would dump it e.g. into prowl on ios or android device. maybe growl can get it into sms too. Typogaphical errors courtesy of iPad > On Dec 23, 2014, at 4:53 PM, observium-request(a)observium.org wrote: > > SMS gateway

1 0

Unable to update polling/alerts toggles
by Travis Kreikemeier 23 Dec '14

23 Dec '14

Large 3750 switch stack, unable to update polling/alerts toggles in Observium. Seems to only update the first 333 ports. Been an issue for a while. Observium 0.14.12.6098 (stable) If you toggle just one of those high ports by itself, you get this message "Device record unchanged. No update necessary." If you toggle it with some lower ports, the lower ports will update by not the very high ports. Thanks TRAVIS KREIKEMEIER

2 2

Re: [Observium] Alert by sms
by Welisson Tomé 23 Dec '14

23 Dec '14

Hi Xavier, >Hi, > >Doing a SMS gateway with perl or gnokii is really easy. Even Gnokii can have a look in a SQL database to get the data to send to sms. I don't know the project gnokii, i will to research more about it, but i don't have idea how to do it be integrated with Observium and the alert be sending at exactly moment that there is a problem with some device. >The main problem is "IP SMS" gateway there is on the network. I understand observium team, and really using plain SMTP with >small messages can be better to be done than adding an extra code. So, i understand about this main problem, but, not is necessary there is an "IP SMS" on the network, because with a modem 3G/4G, we can send sms using the tool gsmssender [¹], together with nagios[²], [¹]http://manpages.ubuntu.com/manpages/natty/man8/gsmsendsms.8.html [²]https://securfox.wordpress.com/2009/03/30/how-to-configure-nagios-to-send… Regards -- Welisson Tomé br.linkedin.com/in/welissontome/

1 0

Rancid revisions within Observium
by Chip Pleasants 23 Dec '14

23 Dec '14

Hi all, I'm in need of some help troubleshooting why I can't see Rancid revisions with Observium any longer. It was working for almost four months and suddenly stopped. I haven't been able to tell if any of packages changed without my knowledge. I've gone through the document below and everything seems to work. The apache logs don't show anything of concern. I've running RHEL 6.5. I attached a php debug file. Anyone have suggestions? Thanks, Chip http://pear.php.net/manual/en/installation.checking.php [root@server logs]# pecl list Installed packages, channel pecl.php.net: ========================================= Package Version State pecl_http 2.0.7 stable propro 1.0.0 stable radius 1.2.7 stable raphf 1.0.4 stable svn 1.0.2 stable [root@server logs]# [root@server logs]# pear config-show Configuration (channel pear.php.net): ===================================== Auto-discover new Channels auto_discover <not set> Default Channel default_channel pear.php.net HTTP Proxy Server Address http_proxy http://proxycorp.server.net:8080/ PEAR server [DEPRECATED] master_server pear.php.net Default Channel Mirror preferred_mirror pear.php.net Remote Configuration File remote_config <not set> PEAR executables directory bin_dir /usr/bin PEAR documentation directory doc_dir /usr/share/pear/doc PHP extension directory ext_dir /usr/lib64/php/modules PEAR directory php_dir /usr/share/pear PEAR Installer cache directory cache_dir /var/cache/php-pear PEAR configuration file cfg_dir /etc/pear directory PEAR data directory data_dir /usr/share/pear/data PEAR Installer download download_dir /tmp/pear/download directory PHP CLI/CGI binary php_bin /usr/bin/php php.ini location php_ini <not set> --program-prefix passed to php_prefix <not set> PHP's ./configure --program-suffix passed to php_suffix <not set> PHP's ./configure PEAR Installer temp directory temp_dir /var/tmp PEAR test directory test_dir /usr/share/pear/test PEAR www files directory www_dir /var/www/html Cache TimeToLive cache_ttl 3600 Preferred Package State preferred_state stable Unix file mask umask 22 Debug Log Level verbose 1 PEAR password (for password <not set> maintainers) Signature Handling Program sig_bin /usr/bin/gpg Signature Key Directory sig_keydir /etc/pearkeys Signature Key Id sig_keyid <not set> Package Signature Type sig_type gpg PEAR username (for username <not set> maintainers) User Configuration File Filename /root/.pearrc System Configuration File Filename /etc/pear.conf

4 11

Observium logs
by Darian Jimenez 23 Dec '14

23 Dec '14

Im trying to troubleshoot some devices but when I look at the logs the last log i get is from the 18th of decembers. Any idea why I don't get any recent logs?

1 0

EU VAT changes
by Adam Armstrong 23 Dec '14

23 Dec '14

Hi All, This is mostly only relevant to people within the EU. In January new EU-wide rules come into effect regarding the collection of VAT on cross-border digital transactions. Anyone who sells a digital product in the EU will now be required to collect 2 "non contradictory" forms of identification from every customer in order to verify their country of residence. They will then be required to charge that customer VAT at their country of residence's local rate and then pay that VAT to their country of residence's tax collection agency. This effectively means that you need to know and track the VAT rates in all 28 EU states, as well as ascertain the location of any customer before they can be given a price. You're not required to retain all of this information for 10 years, and ANY tax collection agency in the EU is now entitled to access to your company's financial records. This applies to everyone, and has no threshold. Within your own countries, you only collect VAT once you hit a certain threshold, which in the UK is £80k. Under the new rules everyone is required to collect VAT in every other EU country, even if they're not required to collect it in their home country. This also means that even if you're not required to collect VAT in your own country, you still have to register for VAT in your home country and produce VAT returns. You also have to produce VAT returns for EVERY COUNTRY WITHIN WHICH YOU HAVE A CUSTOMER. In the UK we have a government system which allows us to send a single unified VAT return for all EU countries to our tax collection agency, and they will forward the relevant data on, but I'm not sure if that exists in all countries. If you're in the EU and understand how truly insane this is, please sign this petition : https://www.change.org/p/pierre-moscovici-a-unilateral-suspension-of-the-in… If you're in the UK, there is also this : https://www.change.org/p/vince-cable-mp-uphold-the-vat-exemption-threshold-… The fallout from this is that I may have to suspend sales of Observium subscriptions in the EU starting on January 1st, since I simply don't have the ability to handle the administrative overhead involved. Thanks, adam.

4 3

Renewing subscription
by Carlos Martinez 22 Dec '14

22 Dec '14

I went to update this morning and it prompted me for my SVN credentials and would not take them, I assume my subscription expired, how do I renew and maintain the same user/pass?

2 1

Latency Alert
by Hamilton, Kent 22 Dec '14

22 Dec '14

Anyone have an alert check for latency to a device? Is it possible? I don't really see anything that fits. ________________________________ This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

3 3

aggregate alert emails?
by Zhenhui Liang 22 Dec '14

22 Dec '14

Hi, Is it possible to aggregate alert emails? When a switch does fail, it might generate thousands of alerts. For our case maybe even thousands of txt messages to a pager. Is it possible to configure observium to detect such kind of massive alerts and aggregate them to only send a few alerts out? Thanks. —Zhenhui

6 9

Bad location - lat\long?
by Mike Hammett 22 Dec '14

22 Dec '14

I put the lat/long that GMaps reports for a given location into the SNMP location. When I search for that lat\long in GMaps, it goes to the correct location. When I look at the Observium map, it's about 2 miles off, straight south. I have included screen shots of the different positions and coordinates. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com

2 1

Map questions
by John Brown 21 Dec '14

21 Dec '14

Hi I have a couple of questions about the google map on Observium: 1. Is there away to have the map center on a point and zoom into that point to a certain level of zoom, as the default. The reason I ask is we have most of our infra-structure in a single city, and a few "interconnection / peering pop's" in other states. For normal use we would prefer that the default location and zoom level be on our core service city. 2. Is there away to have a KML/KMZ file added into the map being displayed by Observium. For example, it would be handing to show our fiber ring along with the tear drop icons that Observium displays. As extra credit it would be nice to render a polygon either Green, Yellow or Red depending on status.... Thanks

1 0

Re: [Observium] FW: Observium mailing list
by Nate Mellendorf 21 Dec '14

21 Dec '14

I believe this can be marked as resolved. All of our devices were listed as offline this morning, which was caused by the following: http://www.observium.org/wiki/FAQs#All_my_hosts_seem_down_to_Observium_.2F_… I followed the guide, and removed .index from the noted directory. As soon as I did that, everything started polling again. At around the same time, I also found this: http://www.observium.org/wiki/Poller-wrapper.py Our poller was set to use 3 threads, so I bumped it up to 12. After review, I found that my alert checker was now listing devices as checking in and passing the offline test. I faked an outage on a test device, which triggered the e-mail alert. Thanks again for the assistance on this. I'll have to dig into the snmp bug a little bit, but all is now working as it should. Regards, Nate Mellendorf | Network Analyst | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320.251.4700 x183 | 877.797.4700 x183 www.NetgainHosting.com<http://www.netgainhosting.com/> [cid:image002.png@01D01D29.BE602120] ________________________________ The information contained in this email message is for the designated recipient only and may be privileged, confidential, and protected from disclosure. If you have received this message in error, please notify the sender immediately and delete the original. Any dissemination, distribution, copying or other use of this message or any information contained within is strictly prohibited. From: Nate Mellendorf Sent: Saturday, December 20, 2014 7:46 PM To: observium(a)observium.org Subject: RE: observium Digest, Vol 53, Issue 102 Tom, Thank you very much for looking at my configuration. I failed to note earlier, that I receive the same results when I change the delay of this alert back down to 0. For the sake of my own sanity though, I went back and changed it just now. I triggered a false device outage, which failed to trigger the alert. Something odd I am seeing, is that Observium is now listing 8 devices as having passed the alert check, with 464 devices still listed as never checked. As you can see from my screen shots earlier, that the alert checked never listed any devices as having been successfully checked. They were all greyed out. As you've confirmed that the alert checker is configured correctly, I'm somewhat stumped. I'll keep digging, as this is a feature I'd really like to get working. Side Note: Our CPU and RAM are not hitting 100% utilization on our host, so now I'm suspicious of we're just pushing the Observium platform a little too hard. There are occasions when loading Observium takes longer than expected. When I create a new alert and regenerate them, the page seems to timeout. (I've included the graphs of our disk I/O, as It's been suggested before as something to keep an eye on.) Any other thoughts or insight on this would be greatly appreciated. Thanks again for your time on both the project and on this thread. [cid:image004.jpg@01D01D29.BE4F3130] Regards, Nate Mellendorf | NETWORK ANALYST | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320.251.4700 x183 | 877.797.4700 x183 www.NetgainHosting.com The information contained in this email message is for the designated recipient only and may be privileged, confidential, and protected from disclosure. If you have received this message in error, please notify the sender immediately and delete the original. Any dissemination, distribution, copying or other use of this message or any information contained within is strictly prohibited. -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Saturday, December 20, 2014 7:06 PM To: observium(a)observium.org Subject: observium Digest, Vol 53, Issue 102 Send observium mailing list submissions to observium(a)observium.org<mailto:observium@observium.org> To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org<mailto:observium-request@observium.org> You can reach the person managing the list at observium-owner(a)observium.org<mailto:observium-owner@observium.org> When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: FW: Observium mailing list (Tom Laermans) ---------------------------------------------------------------------- Message: 1 Date: Sun, 21 Dec 2014 02:06:09 +0100 From: Tom Laermans <tom.laermans(a)powersource.cx<mailto:tom.laermans@powersource.cx>> To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] FW: Observium mailing list Message-ID: <54961D01.3070002(a)powersource.cx<mailto:54961D01.3070002@powersource.cx>> Content-Type: text/plain; charset="windows-1252"; Format="flowed" Hi Nate, You set the "delay" to 1 which means Observium will wait 1 extra poll to see if the alert condition restores itself (which it seems to do judging by your alert log - hence no alert). Tom On 18/12/2014 04:09, Nate Mellendorf wrote: > > Good evening all, > > After much trial and error, I?ve been unsuccessful in implementing a > simple up/down device alert within Observium. > > As I searched around the web for a solution, It seemed as though this > hasn?t been much of an issue for most users. > > Here?s some additional documentation I followed to try and fix it myself: > > http://www.maartenmoerman.nl/?p=612(Nice work on this one) > > https://www.mail-archive.com/observium@observium.org/msg05915.html > > http://www.observium.org/wiki/FAQ > > http://www.observium.org/wiki/Creating_an_Alert_Checker > > I?m starting think that my configuration file (config.php) could have > something to do with it. I?ve included it, along with multiple > snip-its to try and assist you in seeing my work. > > If anyone has any suggestions on this, they would be greatly > appreciated. I?ve been working on this on and off for the past few > days now, and I?ve had no success in generating an offline alert.The > alert log shows the test as failed, but delayed. It never actually > send out an e-mail. My apologies in advance, if this turns out to be > user error. > > Thanks in advance for any time put into this. If there is anything > else I can provide to further assist in troubleshooting, please let me > know. > > I?d be more than happy to provide it. > > *Omitted config.php:* > > *?* > > // Enable alerter > > $config['poller-wrapper']['alerter']= TRUE; > > // Disable page refresh > > $config['page_refresh']= "300";## Refresh the page every xx seconds > > // Set up a default alerter (email to a single address) > > $config['email']['default']= "nate.mellendorf(a)netgainhosting.com > <mailto:nate.mellendorf@netgainhosting.com>"; > > $config['alerts']['email']['from']= "observium(a)netgainhosting.com > <mailto:observium@netgainhosting.com>"; > > $config['email']['default_only']= TRUE; > > $config['email']['enable']= TRUE;// Disables OLD alerting system > > $config['alerts']['interval']= 310; > > *?* > > /Sensitive information has been omitted./ > > *The alert I?ve configured:*(image)** > > *Here is what I see when I?ve review the alert:*(image)** > > *Here?s the alert log that?s generated:*(image) > > (As you can see, the alert is triggered but delayed.) > > *Finally, here is what?s found when I review the logs of an offline > device:*(image)** > > Thanks again everyone, > > *Nate Mellendorf **|****Network Analyst **|****Netgain** > *720 West Saint Germain Street | St. Cloud | MN | 56301 > Phone: 320.251.4700 x183 *|* 877.797.4700 x183 > *www.NetgainHosting.com* <http://www.netgainhosting.com/>** > > > ---------------------------------------------------------------------- > -- > > The information contained in this email message is for the designated > recipient only and may be privileged, confidential, and protected from > disclosure. If you have received this message in error, please notify > the sender immediately and delete the original. Any dissemination, > distribution, copying or other use of this message or any information > contained within is strictly prohibited. > > > > _______________________________________________ > observium mailing list > observium(a)observium.org<mailto:observium@observium.org> > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

Re: [Observium] observium Digest, Vol 53, Issue 102
by Nate Mellendorf 20 Dec '14

20 Dec '14

Tom, Thank you very much for looking at my configuration. I failed to note earlier, that I receive the same results when I change the delay of this alert back down to 0. For the sake of my own sanity though, I went back and changed it just now. I triggered a false device outage, which failed to trigger the alert. Something odd I am seeing, is that Observium is now listing 8 devices as having passed the alert check, with 464 devices still listed as never checked. As you can see from my screen shots earlier, that the alert checked never listed any devices as having been successfully checked. They were all greyed out. As you've confirmed that the alert checker is configured correctly, I'm somewhat stumped. I'll keep digging, as this is a feature I'd really like to get working. Side Note: Our CPU and RAM are not hitting 100% utilization on our host, so now I'm suspicious of we're just pushing the Observium platform a little too hard. There are occasions when loading Observium takes longer than expected. When I create a new alert and regenerate them, the page seems to timeout. (I've included the graphs of our disk I/O, as It's been suggested before as something to keep an eye on.) Any other thoughts or insight on this would be greatly appreciated. Thanks again for your time on both the project and on this thread. [cid:image002.jpg@01D01C8D.86635E50] Regards, Nate Mellendorf | NETWORK ANALYST | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320.251.4700 x183 | 877.797.4700 x183 www.NetgainHosting.com The information contained in this email message is for the designated recipient only and may be privileged, confidential, and protected from disclosure. If you have received this message in error, please notify the sender immediately and delete the original. Any dissemination, distribution, copying or other use of this message or any information contained within is strictly prohibited. -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Saturday, December 20, 2014 7:06 PM To: observium(a)observium.org Subject: observium Digest, Vol 53, Issue 102 Send observium mailing list submissions to observium(a)observium.org<mailto:observium@observium.org> To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org<mailto:observium-request@observium.org> You can reach the person managing the list at observium-owner(a)observium.org<mailto:observium-owner@observium.org> When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: FW: Observium mailing list (Tom Laermans) ---------------------------------------------------------------------- Message: 1 Date: Sun, 21 Dec 2014 02:06:09 +0100 From: Tom Laermans <tom.laermans(a)powersource.cx<mailto:tom.laermans@powersource.cx>> To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] FW: Observium mailing list Message-ID: <54961D01.3070002(a)powersource.cx<mailto:54961D01.3070002@powersource.cx>> Content-Type: text/plain; charset="windows-1252"; Format="flowed" Hi Nate, You set the "delay" to 1 which means Observium will wait 1 extra poll to see if the alert condition restores itself (which it seems to do judging by your alert log - hence no alert). Tom On 18/12/2014 04:09, Nate Mellendorf wrote: > > Good evening all, > > After much trial and error, I?ve been unsuccessful in implementing a > simple up/down device alert within Observium. > > As I searched around the web for a solution, It seemed as though this > hasn?t been much of an issue for most users. > > Here?s some additional documentation I followed to try and fix it myself: > > http://www.maartenmoerman.nl/?p=612(Nice work on this one) > > https://www.mail-archive.com/observium@observium.org/msg05915.html > > http://www.observium.org/wiki/FAQ > > http://www.observium.org/wiki/Creating_an_Alert_Checker > > I?m starting think that my configuration file (config.php) could have > something to do with it. I?ve included it, along with multiple > snip-its to try and assist you in seeing my work. > > If anyone has any suggestions on this, they would be greatly > appreciated. I?ve been working on this on and off for the past few > days now, and I?ve had no success in generating an offline alert.The > alert log shows the test as failed, but delayed. It never actually > send out an e-mail. My apologies in advance, if this turns out to be > user error. > > Thanks in advance for any time put into this. If there is anything > else I can provide to further assist in troubleshooting, please let me > know. > > I?d be more than happy to provide it. > > *Omitted config.php:* > > *?* > > // Enable alerter > > $config['poller-wrapper']['alerter']= TRUE; > > // Disable page refresh > > $config['page_refresh']= "300";## Refresh the page every xx seconds > > // Set up a default alerter (email to a single address) > > $config['email']['default']= "nate.mellendorf(a)netgainhosting.com > <mailto:nate.mellendorf@netgainhosting.com>"; > > $config['alerts']['email']['from']= "observium(a)netgainhosting.com > <mailto:observium@netgainhosting.com>"; > > $config['email']['default_only']= TRUE; > > $config['email']['enable']= TRUE;// Disables OLD alerting system > > $config['alerts']['interval']= 310; > > *?* > > /Sensitive information has been omitted./ > > *The alert I?ve configured:*(image)** > > *Here is what I see when I?ve review the alert:*(image)** > > *Here?s the alert log that?s generated:*(image) > > (As you can see, the alert is triggered but delayed.) > > *Finally, here is what?s found when I review the logs of an offline > device:*(image)** > > Thanks again everyone, > > *Nate Mellendorf **|****Network Analyst **|****Netgain** > *720 West Saint Germain Street | St. Cloud | MN | 56301 > Phone: 320.251.4700 x183 *|* 877.797.4700 x183 > *www.NetgainHosting.com* <http://www.netgainhosting.com/>** > > > ---------------------------------------------------------------------- > -- > > The information contained in this email message is for the designated > recipient only and may be privileged, confidential, and protected from > disclosure. If you have received this message in error, please notify > the sender immediately and delete the original. Any dissemination, > distribution, copying or other use of this message or any information > contained within is strictly prohibited. > > > > _______________________________________________ > observium mailing list > observium(a)observium.org<mailto:observium@observium.org> > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

FW: Observium mailing list
by Nate Mellendorf 20 Dec '14

20 Dec '14

Good evening all, After much trial and error, I've been unsuccessful in implementing a simple up/down device alert within Observium. As I searched around the web for a solution, It seemed as though this hasn't been much of an issue for most users. Here's some additional documentation I followed to try and fix it myself: http://www.maartenmoerman.nl/?p=612 (Nice work on this one) https://www.mail-archive.com/observium@observium.org/msg05915.html http://www.observium.org/wiki/FAQ http://www.observium.org/wiki/Creating_an_Alert_Checker I'm starting think that my configuration file (config.php) could have something to do with it. I've included it, along with multiple snip-its to try and assist you in seeing my work. If anyone has any suggestions on this, they would be greatly appreciated. I've been working on this on and off for the past few days now, and I've had no success in generating an offline alert. The alert log shows the test as failed, but delayed. It never actually send out an e-mail. My apologies in advance, if this turns out to be user error. Thanks in advance for any time put into this. If there is anything else I can provide to further assist in troubleshooting, please let me know. I'd be more than happy to provide it. Omitted config.php: ... // Enable alerter $config['poller-wrapper']['alerter'] = TRUE; // Disable page refresh $config['page_refresh'] = "300"; ## Refresh the page every xx seconds // Set up a default alerter (email to a single address) $config['email']['default'] = "nate.mellendorf(a)netgainhosting.com<mailto:nate.mellendorf@netgainhosting.com>"; $config['alerts']['email']['from'] = "observium(a)netgainhosting.com<mailto:observium@netgainhosting.com>"; $config['email']['default_only'] = TRUE; $config['email']['enable'] = TRUE; // Disables OLD alerting system $config['alerts']['interval'] = 310; ... Sensitive information has been omitted. The alert I've configured: (image) [cid:image005.jpg@01D01A3D.CD665F70] Here is what I see when I've review the alert: (image) [cid:image006.jpg@01D01A3D.CD665F70] Here's the alert log that's generated: (image) (As you can see, the alert is triggered but delayed.) [cid:image008.jpg@01D01A3D.CD665F70] Finally, here is what's found when I review the logs of an offline device: (image) [cid:image009.jpg@01D01A3D.CD665F70] Thanks again everyone, Nate Mellendorf | Network Analyst | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320.251.4700 x183 | 877.797.4700 x183 www.NetgainHosting.com<http://www.netgainhosting.com/> [cid:image007.png@01D017BA.8560E4A0] ________________________________ The information contained in this email message is for the designated recipient only and may be privileged, confidential, and protected from disclosure. If you have received this message in error, please notify the sender immediately and delete the original. Any dissemination, distribution, copying or other use of this message or any information contained within is strictly prohibited.

5 6

Alerting for applications (with unix-agent)
by Vladislav Solovei 20 Dec '14

20 Dec '14

Hi, all :-) Tell me, please... It is possible to add alert checkers for applications? PowerDNS queries, on example, etc..?

2 1

Script to discovery and poll new devices
by Darian Jimenez 19 Dec '14

19 Dec '14

Hello, I have a quick simple script to go through a text file and add_device, discovery it and poll it. However the only portion that works fine is the add_device. the discovery nor poller.php is actually doing what it should. however If I run the command separately outside of the script it discovers the device as well as polls it. the host name is right because I'm using echo within the script to show the name for each loop. If i use ./disocvery.php -h new that works fine and I guess it's a work around, however ./poller.php -h new does not work. below is the script I'm running. while read host do echo $host /opt/observium/add_device.php $host /opt/observium/discovery.php -h $host /opt/observium/poller.php -h $host done < Servers/dailyserverlist.txt

4 8

Sliding window in graph views
by Brendan Hide 19 Dec '14

19 Dec '14

Good day, all When viewing graphs, I often find that we want to keep a specific graph open for a long period - days or weeks even, and preferably to view the most recent information. A minor issue is that when clicking on the pre-provided thumbnails for the "6 Hours", "24 Hours", et al. graphs, it opens a specific time window. If the page is refreshed after a while, it shows old data rather than current data. A sliding window works already - just that probably very few people know about the "feature". Two minor changes are required to have the thumbnail links refer to the sliding window: Exclude the to= parameter - it appears this defaults to now() Set the from= parameter to an offset The following is an example of a 6-hour sliding window: https://<observium_host>/graphs/device=<devid>/type=device_processor/from=-14400 -- __________ Brendan Hide http://swiftspirit.co.za/ http://www.webafrica.co.za/?AFF1E97

3 3

Re: [Observium] observium Digest, Vol 53, Issue 91
by Nate Mellendorf 18 Dec '14

18 Dec '14

Adam and Joe, Thank you for your feedback on this. It would be nice to have a few default alerts built directly into the platform. That said, I understand that the time needed to implement something like that could be hard to reserve. As for the configuration I submitted, does the behavior of the alert seem to be correct? I was curious of up / down alerting was implemented (as the walkthrough suggests), but has yet to be verified as fully functional. I have an alert that checks for half-duplex interfaces, and it works like a charm. Observium will send off e-mails every 5 minutes about it, but I get nothing about a device status being up or down. We have What's Up Gold taking care of these alerts for now, but that's really all that it's doing. I know there are alternatives to this, but It would be so great to keep everything within Observium. :) Regards, Nate Mellendorf | NETWORK ANALYST | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320.251.4700 x183 | 877.797.4700 x183 www.NetgainHosting.com The information contained in this email message is for the designated recipient only and may be privileged, confidential, and protected from disclosure. If you have received this message in error, please notify the sender immediately and delete the original. Any dissemination, distribution, copying or other use of this message or any information contained within is strictly prohibited. -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of observium-request(a)observium.org Sent: Thursday, December 18, 2014 1:01 AM To: observium(a)observium.org Subject: observium Digest, Vol 53, Issue 91 Send observium mailing list submissions to observium(a)observium.org To subscribe or unsubscribe via the World Wide Web, visit http://postman.memetic.org/cgi-bin/mailman/listinfo/observium or, via email, send a message with subject or body 'help' to observium-request(a)observium.org You can reach the person managing the list at observium-owner(a)observium.org When replying, please edit your Subject line so it is more specific than "Re: Contents of observium digest..." Today's Topics: 1. Re: Observium mailing list (Joseph L. Brunner) ---------------------------------------------------------------------- Message: 1 Date: Thu, 18 Dec 2014 07:00:19 +0000 From: "Joseph L. Brunner" <joe(a)affirmedsystems.com> To: Adam Armstrong <adama(a)memetic.org>, Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] Observium mailing list Message-ID: <2E86D2A5DF7FFA40A41B8C7FCA38F8742049FA(a)affmdex2k10.affmdcorp.com> Content-Type: text/plain; charset="utf-8" Not putting the product down ? it?s the best $100 thing in the world. But, I?m saying with logicmonitor ? all things just start coming at you and that?s pretty good. Now, I?m sure they have a major team writing those alerts and you have the $100 a year thing ? I?m saying opening it up on kickstarter ? we would donate ? the Observium interface is better. Just cant seem to get alerts to fire 100% of the time in a relatively quick fashion ? From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: Thursday, December 18, 2014 01:23 AM To: Observium Network Observation System Subject: Re: [Observium] Observium mailing list I don't even know how we would do that :) What we have now is the most automated I could think of making it. We would have preferred to have some means of default hard-coded alerts, but I've not come up with a good way to do that yet. :) adam. ------ Original Message ------ From: "Joseph L. Brunner" <joe(a)affirmedsystems.com<mailto:joe@affirmedsystems.com>> To: "Observium Network Observation System" <observium(a)observium.org<mailto:observium@observium.org>> Sent: 12/17/2014 11:27:40 PM Subject: Re: [Observium] Observium mailing list Yeah, the alerts suck. We use Observium to wow the business folks ? but use other things to poll and generate an email? They should bite the bullet, do another kickstarter and raise like $200K so the alerts will be AUTO GENERATED and UNIVERSAL for all things it can find ? like logicmonitor. Just to get off logicmonitor I would donate -Joe From: observium [mailto:observium-bounces@observium.org<mailto:observium-bounces@observium.org>] On Behalf Of Nate Mellendorf Sent: Wednesday, December 17, 2014 10:10 PM To: observium(a)observium.org<mailto:observium@observium.org> Subject: [Observium] FW: Observium mailing list Good evening all, After much trial and error, I?ve been unsuccessful in implementing a simple up/down device alert within Observium. As I searched around the web for a solution, It seemed as though this hasn?t been much of an issue for most users. Here?s some additional documentation I followed to try and fix it myself: http://www.maartenmoerman.nl/?p=612 (Nice work on this one) https://www.mail-archive.com/observium@observium.org/msg05915.html http://www.observium.org/wiki/FAQ http://www.observium.org/wiki/Creating_an_Alert_Checker I?m starting think that my configuration file (config.php) could have something to do with it. I?ve included it, along with multiple snip-its to try and assist you in seeing my work. If anyone has any suggestions on this, they would be greatly appreciated. I?ve been working on this on and off for the past few days now, and I?ve had no success in generating an offline alert. The alert log shows the test as failed, but delayed. It never actually send out an e-mail. My apologies in advance, if this turns out to be user error. Thanks in advance for any time put into this. If there is anything else I can provide to further assist in troubleshooting, please let me know. I?d be more than happy to provide it. Omitted config.php: ? // Enable alerter $config['poller-wrapper']['alerter'] = TRUE; // Disable page refresh $config['page_refresh'] = "300"; ## Refresh the page every xx seconds // Set up a default alerter (email to a single address) $config['email']['default'] = "nate.mellendorf(a)netgainhosting.com<mailto:nate.mellendorf@netgainhosting.com>"; $config['alerts']['email']['from'] = "observium(a)netgainhosting.com<mailto:observium@netgainhosting.com>"; $config['email']['default_only'] = TRUE; $config['email']['enable'] = TRUE; // Disables OLD alerting system $config['alerts']['interval'] = 310; ? Sensitive information has been omitted. The alert I?ve configured: (image) [cid:image001.jpg@01D01A66.5E9E3F80] Here is what I see when I?ve review the alert: (image) [cid:image002.jpg@01D01A66.5E9E3F80] Here?s the alert log that?s generated: (image) (As you can see, the alert is triggered but delayed.) [cid:image003.jpg@01D01A66.5E9E3F80] Finally, here is what?s found when I review the logs of an offline device: (image) [cid:image004.jpg@01D01A66.5E9E3F80] Thanks again everyone, Nate Mellendorf | Network Analyst | Netgain 720 West Saint Germain Street | St. Cloud | MN | 56301 Phone: 320.251.4700 x183 | 877.797.4700 x183 www.NetgainHosting.com<http://www.netgainhosting.com/> [cid:image005.png@01D01A66.5E9E3F80] ________________________________ The information contained in this email message is for the designated recipient only and may be privileged, confidential, and protected from disclosure. If you have received this message in error, please notify the sender immediately and delete the original. Any dissemination, distribution, copying or other use of this message or any information contained within is strictly prohibited.

2 1

alert association bug
by Zhenhui Liang 17 Dec '14

17 Dec '14

It seems on the alert settings, on the association part, if you configure more than 1 associations, only the very last one can be modified or deleted. Other associations above the last line, if you click either modify or delete, there’s no effect.

1 0

Alerts and Descriptions
by Josh Hopper 17 Dec '14

17 Dec '14

How do I set an alert so that if a switch port without a description is not alerted on? I have descriptions on all ports that I want to monitor. I can't shut the others because some should always be up. Logic: If AdminInterface and PortStatus is Down AND PortDescription = "" then Alert Me This is what I have now. I can filter things that have some form of a description but I'm not sure how to use a description that is blank. See image below. [cid:image001.png@01D019FC.1994F5B0] -- Sincerely, Joshua Hopper, A+ CE Network Administrator [cid:image002.jpg@01D019FC.1994F5B0] 420 3rd Ave NW Hickory NC 28601 Office: 828-449-1839x2160 | Cell: 828-855-7565 From: observium [mailto:observium-bounces@observium.org] On Behalf Of Marc Sent: Wednesday, December 17, 2014 10:52 AM To: Observium Network Observation System Subject: Re: [Observium] Alert logs to big Hi, Thanks guys the housekeeping thingy did the trick :) On 09/12/14 17:14, Tom Laermans wrote: Check this post on the mailing list as it hasn't really made it into the docs yet: http://postman.memetic.org/pipermail/observium/2014-July/007264.html On 09/12/2014 16:44, Mathieu POUSSIN wrote: Hello, This is possible and native. Check the housekeeper script and configuration options. Best regards, Mathieu De : observium [mailto:observium-bounces@observium.org] De la part de Marc Envoyé : mardi 9 décembre 2014 06:51 À : observium(a)observium.org<mailto:observium@observium.org> >> Observium Network Observation System Objet : [Observium] Alert logs to big Hi all, I don't know if its asks already but is it possible to automaticly delete old alert logs from de db just like the logrotation on a linux system. -- Met vriendelijke groet, Marc de Rooy Technische medewerker Datacenter Engineer Flexwebhosting/FXW DISCLAIMER De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, vragen wij u het volgende: gebruik de inhoud niet; informeer de afzender door het bericht te retourneren; en vernietig de inhoud. The information contained in this message may be confidential and is intended to be exclusively for the addressee. If you have received this message in error, please do not use the contents, inform us immediately and delete its content. _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium -- Met vriendelijke groet, Marc de Rooy Technische medewerker Datacenter Engineer Flexwebhosting/FXW DISCLAIMER De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, vragen wij u het volgende: gebruik de inhoud niet; informeer de afzender door het bericht te retourneren; en vernietig de inhoud. The information contained in this message may be confidential and is intended to be exclusively for the addressee. If you have received this message in error, please do not use the contents, inform us immediately and delete its content.

3 3

Alert logs to big
by Marc 17 Dec '14

17 Dec '14

Hi all, I don't know if its asks already but is it possible to automaticly delete old alert logs from de db just like the logrotation on a linux system. -- *Met vriendelijke groet,* Marc de Rooy Technische medewerker Datacenter Engineer Flexwebhosting/FXW DISCLAIMER De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, vragen wij u het volgende: gebruik de inhoud niet; informeer de afzender door het bericht te retourneren; en vernietig de inhoud. The information contained in this message may be confidential and is intended to be exclusively for the addressee. If you have received this message in error, please do not use the contents, inform us immediately and delete its content.

4 4

junos logical sub interface state
by Zhenhui Liang 17 Dec '14

17 Dec '14

Hi, I shutdown all unused ports to make the alerter life easier. But after I done so, all good except ae ports sub interfaces still shows on observium as failed even though the main ae physical ports already administratively down. For instace, ae11: show interfaces ae11 Physical interface: ae11, Administratively down, Physical link is Down But observium still complain ae11.0 failed check: show interfaces ae11.0 Logical interface ae11.0 (Index 153) (SNMP ifIndex 982) How do we ignore logical interfaces when setting up alerter? My current condition is: ifAdminStatus equals up ifOperStatus equals down Thank you. —Zhenhui

2 2

Observium SNMP polling crashes various Adtran devices
by John Brown 17 Dec '14

17 Dec '14

Hi, We recently installed Observium in an effort to replace our aging Cacti and Nagios systems. We are running the latest code checked out of SVN (We paid the money to Adam for the Professional Version) Today we added 180+ Adtran based devices to the system. All 180+ devices began rebooting. They would become stable for a few hours and then start rebooting again. Important to note that most of these items have been in our network for 3+ years, are running recent code, and have been rock solid stable for their entire service life. Cacti and Nagios poll them every minute and have been doing so for the past 3 years. Insert Observium and the devices start failing. My initial feeling is that there is something in the way Observium does its SNMP. Curious if anyone else has experienced this or something like this. Its caused us to halt putting more devices on Observium. Devices are TA 5000 / TA 352 GPON ONT's, TA 9xx iad's When I add a single device via add_device <name> and then do a discover.php -h new as soon as the code hits ENTITY-SENSOR-MIB the adtran device reboots noc@observium:/home/observium# ./discovery.php -h new Observium 0.14.12.6107 Discovery ont-03.sip.pon-1-6-1.fttx.XXX.YYYYY.net 38 adtran-aos (adtran-aos) Module [ os ] time: 0.0005s Ports : .... Module [ ports ] time: 0.1889s Port Stacks: Module [ ports-stack ] time: 0.0774s Processors : ADTRAN-AOSCPU + hrDevice: Module [ processors ] time: 0.2734s Memory : ADTRAN-AOSCPU + Module [ mempools ] time: 0.2019s IPv4 Addresses : .. Module [ ipv4-addresses ] time: 0.1366s IPv6 Addresses : Module [ ipv6-addresses ] time: 0.5068s Sensors: ENTITY-SENSOR-MIB

4 3

Re: [Observium] junos logical sub interface state
by Zhenhui Liang 16 Dec '14

16 Dec '14

Ok, I added ifDescr !match *.* In the condition, seems working. Although I don¹t feel that clean about it. I would like to only care about physical interface, not logical. But I tried all snmp mibs in the mib list, none of them I found tell you it¹s a logical interface. So I rely on the pattern *dot* in junos to indicate a logical port. On 12/16/14, 1:18 PM, "Zhenhui Liang" <ZhenhuiLiang(a)eharmony.com> wrote: >Hi, > >I shutdown all unused ports to make the alerter life easier. But after I >done so, all good except ae ports sub interfaces still shows on observium >as failed even though the main ae physical ports already administratively >down. > >For instace, ae11: >show interfaces ae11 >Physical interface: ae11, Administratively down, Physical link is Down > >But observium still complain ae11.0 failed check: >show interfaces ae11.0 > Logical interface ae11.0 (Index 153) (SNMP ifIndex 982) > > >How do we ignore logical interfaces when setting up alerter? >My current condition is: > >ifAdminStatus equals up >ifOperStatus equals down > > >Thank you. > > ‹Zhenhui >_______________________________________________ >observium mailing list >observium(a)observium.org >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

2 5

Example alert checkers, and background information
by Moerman, Maarten 16 Dec '14

16 Dec '14

Hey Guys, I had some spare time, and decided to write up some more documentation on alert-checkers for observium, and provide a whole bunch of example alerts which could be adapted for your use: Document: http://www.maartenmoerman.nl/?p=612 I have provided examples for: - Device down - Processor usage is above 80% - Memory usage is above 70% - State sensor is in ALERT state! - Fanspeed is above or under treshold - Traffic exceeds 85% - BGP Session down - Storage exceeds 85% of disk capacity - Port has encountered errors or discards - Port is enabled, but operationally down Let me know if this is helpful and what you'd like to see added/improved. Thanks, Maarten -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com

4 4

Re: [Observium] Sort ports based on total data usage
by Adam Armstrong 16 Dec '14

16 Dec '14

Hmm. That's a lot of I/O time. Seems it's unfeasible to do at the same frequency as the poller. Perhaps it's something we can do daily, but I'm not sure if it's really useful enough to do. adam. ------ Original Message ------ From: "Pedersen, Sean" <spedersen(a)io.com> To: "Adam Armstrong" <adama(a)memetic.org> Sent: 12/15/2014 7:39:34 AM Subject: Re: [Observium] Sort ports based on total data usage >real1m45.617s >user0m1.800s >sys0m3.724s > >20320 > >About 200 devices, and it’s a VM. > >From: Adam Armstrong <adama(a)memetic.org> >Reply-To: Adam Armstrong <adama(a)memetic.org>, Observium Network >Observation System <observium(a)observium.org> >Date: Saturday, December 13, 2014 at 11:41 PM >To: Observium Network Observation System <observium(a)observium.org> >Subject: Re: [Observium] Sort ports based on total data usage > >So. > >I ran a test to see how quickly we could extract the "traffic in the >last 24 hours" statistic from rrdtool for all ports on my development >install : > >root@omega:/mnt/ramdisk/observium_dev# time for file in `ls >*/port-*.rrd | grep -v adsl | grep -v dot3 | xargs`; do rrdtool graphv >/dev/null DEF:outoctets=$file:OUTOCTETS:AVERAGE >DEF:inoctets=$file:INOCTETS:AVERAGE CDEF:octets=inoctets,outoctets,+ >VDEF:totin=inoctets,TOTAL VDEF:totout=outoctets,TOTAL >PRINT:totin:"%4.2lf" PRINT:totout:"%4.2lf"; done > >real 0m10.953s >user 0m3.526s >sys 0m7.670s > > >root@omega:/mnt/ramdisk/observium_dev# ls */port-*.rrd | grep -v adsl | >grep -v dot3 | wc -l >3327 > > >I'm running from a ramdisk though, so it would be nice if some other >people with large non-ramdisk installs could see how long this takes :) > >adam. > > >------ Original Message ------ >From: "Michael Loftis" <mloftis(a)wgops.com> >To: "Adam Armstrong" <adama(a)memetic.org>; "Observium Network >Observation System" <observium(a)observium.org> >Sent: 12/13/2014 11:20:19 PM >Subject: Re: [Observium] Sort ports based on total data usage > >>I'll second what Adam is saying - whats in the DB is not anywhere >>remotely useful like you think. Maybe sort of on a single device but >>even then dubious at best. Your option is really to have to total >>every RRD file over the timeframe wished in order to get a result, >>which isn't going to be very fast. My biggest Observium installation >>is (IMO) very small and is still ~30G of RRD data. You'd end up >>scanning a good portion of that 30G to come up with a sort >>order/totalling. One of the big switches is ~4G by itself, loading >>it's ports page is.....ugly pulling in all the mini graphs, but at >>least the basic view is up fast. Loading all the mini graphs after >>that...I'm not sure how long that takes, I've never waited around for >>it to finish, at least a couple minutes I'd imagine. It'd be around >>that timeframe to produce a sorted list and spit out the main view. >>Granted that switch is probably pretty close to a worst case in terms >>of port count. >> >> >>On Sat, Dec 13, 2014 at 7:04 PM, Adam Armstrong <adama(a)memetic.org> >>wrote: >>>That number is in the database to calculate rates. It's functionally >>>useless unless you know when the counter was last reset. >>> >>>It isn't exposed in the UI precisely because it's such a functionally >>>useless number. >>> >>>What /might/ be vaguely useful would be calculating an average >>>traffic rate for the port by tracking the "last reset" time for the >>>counter. But even then, this is only really useful if the port has >>>*always* been active for the uptime of the switch. It would take >>>literally weeks for a port flatlining 1GB to overtake a port which >>>had been pushing 100mbit for a few months. >>> >>>There are other possibilities, such as storing a series of values at >>>various timepoints so we can "sort of" give a value like "xbps over >>>the past 24 hours", but these get terribly inefficient and slow, >>>especially considering that we're using MEMORY tables to hold this >>>data, and pretty irritating things happen when those tables fill up. >>> >>>I don't think exposing a value which is only comparable with other >>>ports on the same device active for the same amount of time which >>>haven't had their counters reset is particularly useful (and seems >>>particularly confusing). >>> >>>adam. >>> >>> >>>------ Original Message ------ >>>From: "Justin Miller" <observium(a)dynstatic.net> >>>To: "Observium Network Observation System" <observium(a)observium.org> >>>Sent: 12/12/2014 1:21:55 PM >>>Subject: Re: [Observium] Sort ports based on total data usage >>> >>>>In the db observium.ports-state, there is ifInOctlets, >>>>ifInOctlets_delta, and ifInOctets_rate. It’s also there for >>>>ifOutOctlets, ifOutOctlets_delta, and ifOutOctets_rate. So the >>>>values I want are already in the database. >>>> >>>>Furthermore, when the html/pages/devie/port.inc.php invokes >>>>includes/print-interface.inc.php to print each interface, $port >>>>contains those values. >>>> >>>>Hacking it into the view >>>> >>>> '>>>style="',$port['bps_in_style'], '"> >>>style="',$port['bps_in_style'], '">' , >>>>formatStorage($port['ifInOctets']) , ' ', >>>> '>>>style="',$port['bps_out_style'],'"> >>>style="',$port['bps_out_style'],'">' , >>>>formatStorage($port['ifOutOctets']) , ' ', >>>> >>>>Produces somewhat correct results which are good enough for what I >>>>need. I just need to sort it now. Maybe make a new page. >>>> >>>> >>>> >>>> >>>>>On Dec 12, 2014, at 12:19 PM, Tom Laermans >>>>><tom.laermans(a)powersource.cx> wrote: >>>>> >>>>>Nope. >>>>> >>>>>On 12/12/2014 06:11 PM, Justin Miller wrote: >>>>>>Because it’s a round robin database and it has to sum the octlets >>>>>>for that given time, right? >>>>>> >>>>>>Doesn’t the poller read how many packets have been send or >>>>>>received on every port anyways? ifOutOclets / ifInOclets ? Isn’t >>>>>>that a running total? Then to get the rate you take the difference >>>>>>between the current poll and the last poll and divide it by the >>>>>>time between polls? >>>>>> >>>>>>There has to be an OID for this which would be easy to store at >>>>>>poll time, right? >>>>>> >>>>>>Justin >>>>>> >>>>>> >>>>>>>On Dec 12, 2014, at 10:50 AM, Tom Laermans >>>>>>><tom.laermans(a)powersource.cx> wrote: >>>>>>> >>>>>>>It will take about 15 minutes to generate that page, then. >>>>>>> >>>>>>>On 12/12/2014 04:14 PM, Justin Miller wrote: >>>>>>>>This information is already in the RRD file is it not? Can’t you >>>>>>>>export the numerical value for the TOTAL from the graph for each >>>>>>>>port and then sort based on that? >>>>>>>> >>>>>>>>It does not have to be 100% accurate, I’m not billing for it. I >>>>>>>>just need to see what the top 10 busiest ports are on a switch. >>>>>>>> >>>>>>>> >>>>>>>><Mail Attachment.png> >>>>>>>> >>>>>>>> >>>>>>>>>On Dec 12, 2014, at 2:24 AM, Adam Armstrong <adama(a)memetic.org> >>>>>>>>>wrote: >>>>>>>>> >>>>>>>>>Total in what time frame? Day, week, month, year, decade? >>>>>>>>>Whence would this information come? >>>>>>>>> >>>>>>>>>No, doing this isn't really realistically possible to do in a >>>>>>>>>non-slow way (or useful) >>>>>>>>> >>>>>>>>>adam. >>>>>>>>> >>>>>>>>>------ Original Message ------ >>>>>>>>>From: "Justin Miller" <observium(a)dynstatic.net> >>>>>>>>>To: "Observium Network Observation System" >>>>>>>>><observium(a)observium.org> >>>>>>>>>Sent: 12/11/2014 12:17:56 PM >>>>>>>>>Subject: Re: [Observium] Sort ports based on total data usage >>>>>>>>> >>>>>>>>>>That appears to be instantaneous amount when the poller >>>>>>>>>>collected it. I need how many bytes total. Not how many bits >>>>>>>>>>per second. >>>>>>>>>> >>>>>>>>>>I need to see that this port downloaded 3.4 TB of data, not >>>>>>>>>>that it’s doing 7 megabits per second. >>>>>>>>>> >>>>>>>>>>Justin >>>>>>>>>> >>>>>>>>>>>On Dec 11, 2014, at 1:12 PM, Spencer Gaw <spencerg(a)frii.net> >>>>>>>>>>>wrote: >>>>>>>>>>> >>>>>>>>>>>Click on the Traffic column on the ports page. >>>>>>>>>>> >>>>>>>>>>>Regards, >>>>>>>>>>> >>>>>>>>>>>SG >>>>>>>>>>> >>>>>>>>>>>On 12/11/2014 11:08 AM, Justin Miller wrote: >>>>>>>>>>>>We need to view the top X ports on switches which have used >>>>>>>>>>>>the most traffic (in & out) for a given time. I haven't been >>>>>>>>>>>>able to find this view. Is there a way to see this or will >>>>>>>>>>>>we have to create a special page to view this? >>>>>>>>>>>> >>>>>>>>>>>>Justin >>>>>>>>>>>>_______________________________________________ >>>>>>>>>>>>observium mailing list >>>>>>>>>>>>observium(a)observium.org >>>>>>>>>>>>http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>>>>>>>>> >>>>>>>>>>>_______________________________________________ >>>>>>>>>>>observium mailing list >>>>>>>>>>>observium(a)observium.org >>>>>>>>>>>http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>>>>>>>> >>>>>>>>>_______________________________________________ >>>>>>>>>observium mailing list >>>>>>>>>observium(a)observium.org >>>>>>>>>http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>_______________________________________________ observium >>>>>>>>mailing list >>>>>>>>observium@observium.orghttp://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>>>>> >>>>>>>_______________________________________________ >>>>>>>observium mailing list >>>>>>>observium(a)observium.org >>>>>>>http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>>>> >>>>>> >>>>>> >>>>>>_______________________________________________ observium mailing >>>>>>list >>>>>>observium@observium.orghttp://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>>> >>>>>_______________________________________________ >>>>>observium mailing list >>>>>observium(a)observium.org >>>>>http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>>> >>> >>>_______________________________________________ >>>observium mailing list >>>observium(a)observium.org >>>http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >> >> >>-- >> >>"Genius might be described as a supreme capacity for getting its >>possessors >>into trouble of all kinds." >>-- Samuel Butler > > >Founded in 2007, IO provides the data center as a service to businesses >and governments around the world. > >The communication contained in this e-mail is confidential and is >intended only for the named recipient(s) and may contain information >that is privileged, proprietary, attorney work product or exempt from >disclosure under applicable law. If you have received this message in >error, or are not the named recipient(s), please note that any form of >distribution, copying or use of this communication or the information >in it is strictly prohibited and may be unlawful. Please immediately >notify the sender of the error, and delete this communication including >any attached files from your system. Thank you for your cooperation.

3 2

TEXT/BLOB fields in MySQL
by Eduardo Schoedler 16 Dec '14

16 Dec '14

Hi, Any chance to change text/blob fields to another type in MySQL? # ./tuning-primer.sh TEMP TABLES Current max_heap_table_size = 512 M Current tmp_table_size = 512 M Of 17956 temp tables, 29% were created on disk Perhaps you should increase your tmp_table_size and/or max_heap_table_size to reduce the number of disk-based temporary tables *Note! BLOB and TEXT columns are not allow in memory tables.If you are using these columns raising these values might not impact yourratio of on disk temp tables.* Thanks. -- Eduardo Schoedler

3 4

Re: [Observium] Billing per VM host
by Ron Marosko, Jr. 16 Dec '14

16 Dec '14

I think it does. ;-) Meaning, yes, it graphs the 1000v just like it were any other switch. Thus, make sure you have all your "description" entries defined in the interfaces before you discover the device. And the vEth port does not change when the VM gets vmotioned from one host to another, so stats are consistent. Sent from my Verizon Wireless 4G LTE DROID Markus Klock <markus(a)best-practice.se> wrote: >_______________________________________________ >observium mailing list >observium(a)observium.org >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

Re: [Observium] Billing per VM host
by Ron Marosko, Jr. 16 Dec '14

16 Dec '14

I'm running the Cisco freemium version of the Nexus 1000v virtual switch on my ESXi 4.1 boxen, mainly because I needed LACP uplink capability, which was not available in the vSwitch. Then I discovered that you can get SNMP stats on a per-vEthernet port (meaning per host!) from the 1000v. Sweet! The poller takes a bit longer to run on the 1000v, just like it does on all other Nexus products, but well worth having the information. And yes, you can set up traffic accounting based on the polled information. ...Ron Sent from my Verizon Wireless 4G LTE DROID Xavier Beaudouin <xavier.beaudouin(a)hsoftware.com> wrote: >Hi, > >> Are there any plans to include billing per VM host in Observium?. I currently >> have Vmware ESXi hosts and I would like to be able to bill traffic per VM >> machine. > >> All VM hosts are under VDS switch but observium doesn’t recognise separate >> ports. > >I really think the best way to do that is add a snmpd daemon on these hosts... > >Or use somewhat virtual switch from cisco... (didn't tested this solution btw) > >Xavier > > >-- >Xavier Beaudouin - Senior Network and System Administrator >Infrastructure and network director >Horizon Software - http://www.hsoftware.com/ >13 rue La Fayette - 75009 PARIS - France >Phone: +33 (0)1 4260 9490 Fax: +33 (0)1 44 56 97 01 > > >_______________________________________________ >observium mailing list >observium(a)observium.org >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > > >

2 1

Billing per VM host
by Zalewski, Dominik 16 Dec '14

16 Dec '14

Hi, Are there any plans to include billing per VM host in Observium?. I currently have Vmware ESXi hosts and I would like to be able to bill traffic per VM machine. All VM hosts are under VDS switch but observium doesn’t recognise separate ports. Thanks Dominik

2 1

Progressive search and wrong answers
by Kilian Krause 16 Dec '14

16 Dec '14

Hi, since the progressive search seems to start right away and for some reason our setup is too slow/too large to get instant SQL replies the answers seem to be dropping in as the SQL server finishes and them the client will render them as soon as it receives them. This unfortunately gives answers for shorter strings later even if the search field already does seem to be filled with a longer query string. Is there anyone who has implemented some JS/AJAX fix for this and ensure the answers processed by the client are only those matching the current search string (i.e. add a "static" version/revision/serial field into the SQL select and check for that in the results)? Cheers, Kilian -- Kilian Krause Rechenzentrum Universität Stuttgart (RUS) Abt. NKS - Netze und Kommunikationssysteme Tel.: +49 (711) 685-64512 Fax.: +49 (711) 685-54512 (PC) Fax.: +49 (711) 68 23 57 Allmandring 30a 70550 Stuttgart DEUTSCHLAND

5 6

Vlan Interface Usage Alert
by Chip Pleasants 16 Dec '14

16 Dec '14

Hi All, We created a Alert Checker for interface usage greater than 80%. We are seeing interface usage alerts for Vlan SVI interfaces. These don't mean as much to us as physical interfaces do. Looks like the default bandwidth on a Vlan SVI interface is 1G on our platform. Is there any way we can configure Observium not alert on vlan interfaces? Our Device Match is "os equals ios" and our Entity Match is "*" for the interface usage alerts. I see ifType is an attribute option. Could I do something like "not ifType vlan"? Any suggestions are appreciated. Thanks, -Chip

4 5

IPMI Only devices
by Robert Hatch 16 Dec '14

16 Dec '14

Dear adam, Any chance/current way of adding devices to Observium that do not have SNMP only IPMI interfaces? This would be hugely useful! BW rob

6 9

Override Network Location
by Robert Hatch 16 Dec '14

16 Dec '14

Dear all, I have noticed that when I override the network location with a site name Observium does not appear to apply the same location details that are defined in the config.php. This means that for a site such as HEX we have two locations in the drop down menu one as unknown->HEX for the overridden device and another with the proper location that is being pulled out of the config.php. Is this desired behaviour or a bug? BW rob

4 4

Re: [Observium] RES: Help top talkers
by tonto＠decoygaming.com.au 15 Dec '14

15 Dec '14

+1 for ntopng. Alternatively if you're after an enterprise solution I'd recommend scrutinizer. Expensive but very good. Sent from my HTC ----- Reply message ----- From: "Tristan Rhodes" <tristanrhodes(a)weber.edu> To: "Observium Network Observation System" <observium(a)observium.org> Subject: [Observium] RES: Help top talkers Date: Tue, Dec 16, 2014 3:35 AM I agree with the recommendation for NFSEN; it is a great tool. Another great open source tool is NTOPNG, which has many additional useful features: https://www.youtube.com/watch?v=vdGLazUvSJI Cheers! Tristan Rhodes Network Engineer Weber State University 801.626.8549 On Mon, Dec 15, 2014 at 9:58 AM, Eliezer Sousa <eliezer(a)ricas.com.br> wrote:Thank !!! -----Mensagem original----- De: observium [mailto:observium-bounces@observium.org] Em nome de Matthias Cramer Enviada em: segunda-feira, 15 de dezembro de 2014 13:42 Para: Observium Network Observation System Assunto: Re: [Observium] Help top talkers Thats probably better done with some flow analyzer tool (netflow, sflow) eg.. nfsen: http://nfsen.sourceforge.net/ On 15/12/14 16:34, Eliezer Sousa wrote: > good afternoon! need to find out who the top Talkers on my network with observium, someone already did that? > > Thank you for your help. > > > > Eliezer de Sousa > > > > ass eliezer > > > > > > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium > -- Matthias Cramer / mc322-ripe Senior Network & Security Engineer iway AG Phone +41 43 500 1111 Badenerstrasse 569 Fax +41 44 271 3535 CH-8048 Zürich http://www.iway.ch/ GnuPG 1024D/2D208250 = DBC6 65B6 7083 1029 781E 3959 B62F DF1C 2D20 8250 _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

Re: [Observium] Help top talkers
by tonto＠decoygaming.com.au 15 Dec '14

15 Dec '14

What you're looking for is a netflow analyser. There are plenty of free tools you can use and I believe one is crudely integrated with observium. You're better off with a separate product though. Netflow is notoriously IO intensive and having it built into observium would be like dividing by zero. Sent from my HTC ----- Reply message ----- From: "Eliezer Sousa" <eliezer(a)ricas.com.br> To: <observium(a)observium.org> Subject: [Observium] Help top talkers Date: Tue, Dec 16, 2014 1:34 AM good afternoon! need to find out who the top Talkers on my network with observium, someone already did that?Thank you for your help. Eliezer de Sousa

1 0

Help top talkers
by Eliezer Sousa 15 Dec '14

15 Dec '14

good afternoon! need to find out who the top Talkers on my network with observium, someone already did that? Thank you for your help. Eliezer de Sousa ass eliezer

3 3

Sort ports based on total data usage
by Justin Miller 15 Dec '14

15 Dec '14

We need to view the top X ports on switches which have used the most traffic (in & out) for a given time. I haven't been able to find this view. Is there a way to see this or will we have to create a special page to view this? Justin

7 18

Port down and observium doesnt show same vlan traffic
by Joni Lee 14 Dec '14

14 Dec '14

Hello, I am assign my cisco switch into observium. The cisco itself connect to internet thru port 48 on vlan 2. And observium server connect to cisco port 47 on vlan 3. There are several server connect to cisco vlan 2. Here is my issue, once I unplug my internet connection(port 48). Other server traffic on vlan 2 doesn't show up on observium. Anyone know whats the problem here ? Is it cisco settings or other ? Thank you -- Sincerely, Joni Lee

2 1