- observium - lists.observium.org

Re: [Observium] Dashboard Rotation
by Mati 05 Jul '22

05 Jul '22

Hello, I was wondering if it is possible to configure observium with several dashboards and after every 15 seconds have the dashboard change to a different configuration? So, for example, on Dashboard 1 i have all the bandwidth graphs and on Dashboard 2 all the alerts and event logs, the dashboard will automatically change every 15 seconds or so... Thanks in advance

3 5

Distributed Polling
by Milton Ngan 05 Jul '22

05 Jul '22

Are many people using Distributed Polling? We are just playing around with it now. How many devices can you typically poll per thread in under 5 minutes? Some of this is also a function of how much latency you have between your pollers and your devices and how "slow" your devices are. But we are having to throw a lot threads (>200) at this to ensure we get our 1200+ devices polling under 5 minutes. The RRD and DB backends are not the bottleneck, it is purely the latency of the SNMP polling we need to overcome. The longest devices take between 150-200s depending on what else is hitting it at the time (e.g discovery + poller). So we need a fair number threads just to get these out of the way. I was wondering if sorting the most expensive devices first could help avoid getting two slow devices back to back. Also, it would be nice to have the system use a queue to schedule the work rather than a hard partition. This avoids the problem of losing 1/Nth of your devices when you lose a poller. With a queue you would just lose 1/Nth of the threads. If you had enough spare capacity you could ride through the downtime of a single poller. Cheer Milton

2 1

Network Traffic Map is not working any more - error 500
by Henrik Aarfeldt 17 Jun '22

17 Jun '22

Hello, The new Network Traffic Map did work the other day - great. Yesterday it stopped working in our installation (22.6.12145) with an error 500. I was wondering if it's our installation that's the problem, or an issue with Observium code ? I think it's a beta function - just wanted to inform. -- Med venlig hilsen | Best regards | Mit freundlichen Grüßen | Cordialement | आपकी ईमानदारी से Henrik Aarfeldt Drift > Driftsstyring > Overvågning Overvågning + SårbarhedsKortlægning + SvartidsMålinger + NetværksKvalitetsMålinger + Elastic. Mobil: +45 2494 8281 Mail: Henrik.Aarfeldt(a)RegionH.dk Region Hovedstaden Center for It og Medicoteknologi, CIMT Borgervænget 7, 3. sal 2100 København Ø Bliv vores nye kollega i et spændende miljø. https://candidate.hr-manager.net/ApplicationInit.aspx?cid=342&ProjectId=241… ________________________________ Region Hovedstaden anvender de personoplysninger, du giver os i forbindelse med din henvendelse. Du kan læse mere om formålet med anvendelsen samt dine rettigheder på vores hjemmeside: www.regionh.dk/persondatapolitik

3 5

PBX monitoring
by Luis Olavarrieta 13 Jun '22

13 Jun '22

Hi guys, is anyone monitoring VoIP PBX? SIP trunks? Which brands are you monitoring? What info are you able to get? I need to monitor some UNIFY (it used to be Siemens) and they have the MIBS available in their partner portal, how do you add them?? Regards, Luis

1 0

Timeticks in Custom OID
by Philipp Helo Rehs 09 Jun '22

09 Jun '22

Hello, i would like to monitor dot1dStpTimeSinceTopologyChange (numeric oid 1.3.6.1.2.1.17.2.3.0) which is a Timetick. I have tried it as Gauce and also as Counter but always gives Draw Errors and not values. Do you have any idea how to do this? Kind regards Philipp -- Zentrum für Informations- und Medientechnologie Kompetenzzentrum für wissenschaftliches Rechnen und Speichern Heinrich-Heine-Universität Düsseldorf Universitätsstr. 1 Raum 25.41.00.51 40225 Düsseldorf / Germany Tel: +49-211-81-15557

2 1

Custom OIDS and billing
by David Milton 07 Jun '22

07 Jun '22

Hello, We are using the Juniper DCU MIB to track member traffic for billing purposes. We have two upstream transit providers and have created custom OID entries for each member and transit provider for IPv4 and IPv6. The end result is four custom OIDs per member. Ideally we would like to use the traffic accounting module and assign the four custom OID graphs to one bill but can’t figure out how. Is there a way to combine the four OIDs into a single stacked graph so we can see the aggregate of all traffic to both providers? Is there an alternative way to do this short of doing it manually with rrd? Lastly, is there any planned support for the Juniper DCU MIB so we can use this to monitor members transit traffic? Thanks, Dave Milton SRNet Operations

2 3

question
by Aleksander 07 Jun '22

07 Jun '22

is it ok? [image: image.png]

3 2

reports?
by Arnoldo Vidal Bravo 06 Jun '22

06 Jun '22

hi, How i can get a daily report of devices available (mail, pdf or something)? I mean i want get a report of cpu state (load %, available) of eacheone, every day. It is possible? -- Saluda cordialmente

2 4

PHP 8.1 & CE 22.5
by Mark Kamichoff 05 Jun '22

05 Jun '22

Hi - I had a happy persona/home Observium CE 19.x install on Debian (testing) running w/MySQL 5.5 and PHP 7.0 that I finally decided to upgrade to MariaDB 10.6 / PHP 8.1 and am running into some issues. 1) I did the PHP 8.1 upgrade first without touching anything else. I started getting the following: % /opt/observium/discovery.php -u PHP Fatal error: Uncaught ValueError: mysqli_query(): Argument #2 ($query) cannot be empty in /opt/observium/includes/db/mysqli.inc.php:291 Stack trace: #0 /opt/observium/includes/db/mysqli.inc.php(291): mysqli_query() #1 /opt/observium/includes/db.inc.php(225): dbCallQuery() #2 /opt/observium/includes/sql-config.inc.php(97): dbQuery() #3 /opt/observium/discovery.php(19): include('...') #4 {main} thrown in /opt/observium/includes/db/mysqli.inc.php on line 291 I get something similar in the web interface: [Sun Jun 05 14:59:53.435049 2022] [php:error] [pid 3255678] [client 2620:6:2003:105:2d8:61ff:fe0f:853:54778] PHP Fatal error: Uncaught ValueError: mysqli_query(): Argument #2 ($query) cannot be empty in /opt/observium/includes/db/mysqli.inc.php:291\nStack trace:\n#0 /opt/observium/includes/db/mysqli.inc.php(291): mysqli_query()\n#1 /opt/observium/includes/db.inc.php(225): dbCallQuery()\n#2 /opt/observium/includes/db/mysqli.inc.php(391): dbQuery()\n#3 /opt/observium/includes/common.inc.php(176): dbFetchRow()\n#4 /opt/observium/includes/common.inc.php(300): get_obs_attrib()\n#5 /opt/observium/includes/sql-config.inc.php(75): get_db_version()\n#6 /opt/observium/html/index.php(13): include('...')\n#7 {main}\n thrown in /opt/observium/includes/db/mysqli.inc.php on line 291 2) I decided to upgrade to Observium CE 22.5. No change. I even cleaned up my config.php and removed some obsolete items. 3) I upgraded MySQL 5.5 -> MariaDB 10.6. No change. The CE 22.5 announcement indicated PHP8 should be supported now. However, I'm wondering if that doesn't include PHP 8.1. Does anyone have CE 22.5 running successfully on Debian with PHP 8.1? If so, did you have to tweak anything to get it to work? If there's something obvious in the docs I've missed please just post a link and indicate RTFM ;) Thanks in advance! Some info: (atlantis:14:56:EDT)% env php --version PHP Warning: PHP Startup: ^(text/|application/xhtml\+xml) (offset=0): unrecognised compile-time option bit(s) in Unknown on line 0 PHP 8.1.5 (cli) (built: Apr 21 2022 09:51:30) (NTS) Copyright (c) The PHP Group Zend Engine v4.1.5, Copyright (c) Zend Technologies with Zend OPcache v8.1.5, Copyright (c), by Zend Technologies (atlantis:14:56:EDT)% dpkg -l | grep -i php8 ii libapache2-mod-php8.1 8.1.5-1 amd64 server-side, HTML-embedded scripting language (Apache 2 module) ii php8.1 8.1.5-1 all server-side, HTML-embedded scripting language (metapackage) ii php8.1-apcu 5.1.21+4.0.11-7 amd64 APC User Cache for PHP ii php8.1-bcmath 8.1.5-1 amd64 Bcmath module for PHP ii php8.1-cli 8.1.5-1 amd64 command-line interpreter for the PHP scripting language ii php8.1-common 8.1.5-1 amd64 documentation, examples and common module for PHP ii php8.1-curl 8.1.5-1 amd64 CURL module for PHP ii php8.1-gd 8.1.5-1 amd64 GD module for PHP ii php8.1-mbstring 8.1.5-1 amd64 MBSTRING module for PHP ii php8.1-mysql 8.1.5-1 amd64 MySQL module for PHP ii php8.1-opcache 8.1.5-1 amd64 Zend OpCache module for PHP ii php8.1-readline 8.1.5-1 amd64 readline module for PHP ii php8.1-xml 8.1.5-1 amd64 DOM, SimpleXML, XML, and XSL module for PHP (atlantis:14:56:EDT)% dpkg -l | grep -i mariadb ii libmariadb3:amd64 1:10.6.7-3 amd64 MariaDB database client library ii mariadb-client-10.6 1:10.6.7-3 amd64 MariaDB database client binaries ii mariadb-client-core-10.6 1:10.6.7-3 amd64 MariaDB database core client binaries ii mariadb-common 1:10.6.7-3 all MariaDB common configuration files ii mariadb-server 1:10.6.7-3 all MariaDB database server (metapackage depending on the latest version) ii mariadb-server-10.6 1:10.6.7-3 amd64 MariaDB database server binaries ii mariadb-server-core-10.6 1:10.6.7-3 amd64 MariaDB database core server files (atlantis:14:56:EDT)% - Mark -- Mark Kamichoff prox(a)prolixium.com https://www.prolixium.com/

2 1

Juniper DCU MIB
by David Milton 04 Jun '22

04 Jun '22

Helo, We are using the Juniper DCU MIB to track member traffic for billing purposes. We have two upstream service providers and have created custom OID entries for each provider for IPv4 and IPv6 and each member. That gives us 4 custom OIDs per member. I was hoping to use the traffic accounting module and assign the 4 custom OID graphs to one bill but can’t figure out how. Another option would be to take the four graphs and produce a stacked graph containing the 4 graph values. Or would a group work? Is what I want to do possible with Observium? Is there any planned support for the Juniper DCU MIB so we can use this to monitor members transit traffic? Thanks, Dave.

1 0

Windows Server Unknown Processor Type
by greggy862 03 Jun '22

03 Jun '22

Hello, How can I solve Unknown Processor type for my windows servers? Regards, Greg

3 3

Alert emails from pollers
by Lars Joergensen 02 Jun '22

02 Jun '22

Hi A new discovery from our partitioned pollers today: Alert emails are sent out from the poller, not the main Observium instance. We can work around it, but since we have pollers in some pretty firewalled networks, it's going to be an effort. We always thought of pollers as just data collection agents. Can this behavior be changed in the configuration somewhere, or is it just the way it works? Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

3 3

Issue with Didactum device (after firmwareupdate, generic device)
by Thomas Stather 02 Jun '22

02 Jun '22

Hi We are running Observium Professional r12000 Recently, we upgraded the firmware of one of our Didactum sensors and noticed, that after the firmware upgrade, Obersvium handled it as a generic device instead with all sensors beeing removed. 3d 16h 50m it-temp-002 <https://observium.mpimf-heidelberg.mpg.de/device/device=214/> OS changed: didactum-ems -> generic The sysObjectID is .1.3.6.1.4.1.46501 and according to the following ticket, it should be working from r11479 onwards https://jira.observium.org/browse/OBS-3814 What are we doing wrong here? Best, Thomas -- Thomas Stather IT Services VCP4, VCP6-DCV, VCP6.5-DCV Tel: +49 6221 486 628 Fax: +49 6221 486 561 Bevor Sie diese Mail ausdrucken, prüfen Sie bitte ob dies wirklich nötig ist. Umweltschutz geht uns alle an!

3 6

troubble in map info
by Arnoldo Vidal Bravo 01 Jun '22

01 Jun '22

Hi, we are running observium 22.2.11868 (stable), and set location to many places. i'm testing test_geo.php but i get REQUEST[ https://nominatim.openstreetmap.org/search?q=sausalito&addressdetails=1&for… ] REQUEST STATUS[FALSE] REQUEST RUNTIME[0.5921s] RESPONSE CODE[408 Request Timeout] Geocoding ENABLED, try detect device coordinates: by FORWARD query (API: OPENSTREETMAP, sysLocation: sausalito) - GEO API REQUEST: https://nominatim.openstreetmap.org/search?q=sausalito&addressdetails=1&for… +---------------+-----+-----+---------+-------+--------+------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Geo: API | Lat | Lon | Country | State | County | City | Error | +---------------+-----+-----+---------+-------+--------+------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | openstreetmap | - | - | - | - | - | - | REQUEST[ https://nominatim.openstreetmap.org/search?q=sausalito&addressdetails=1&for…] REQUEST STATUS[FALSE] REQUEST RUNTIME[0.5921s] RESPON | | | | | | | | | SE CODE[408 Request Timeout] | +---------------+-----+-----+---------+-------+--------+------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ i goto same url requested and work fine... what's worng? warnings is not showed in map -- Saluda cordialmente

2 1

Pollers not picking up orders
by Lars Joergensen 01 Jun '22

01 Jun '22

Hey list I think we discussed this before, but I forget the answer and my searching skills fail me. We have several pollers returning data to a main instance. When we create new devices and tell them to be handled by for example "poller2", we can see that the order to do so is created in the database. But it's never picked up by the poller. Is there a cronjob I need to set up to fix this? [cid:image001.png@01D86B97.036B3160] Best regards Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

4 16

Device neighbours map drawing
by Henrik Aarfeldt 27 May '22

27 May '22

Hi there, We have been using Observium for many years (Subscription version) Recently the devices neighbours map has been unusable, because it has been drawn in vertical, which makes in extremely small (like 8mm height) Normally it has been drawn in horizontal, and can be used with many neighbours. Is there a setting somewhere, so it can be tilted and usable again ? -------------------------------------------------------------------- Version Information Observium 22.5.12042 (24th May 2022) OS Linux 5.4.0-110-generic [amd64] (Ubuntu 20.04) Apache 2.4.41 (Ubuntu) PHP 7.4.3 (OPcache: ENABLED) (Memory: 128MB) Python 3.8.10 MySQL 8.0.29-0ubuntu0.20.04.3 (extension: mysqli 7.4.3) SNMP NET-SNMP 5.8 RRDtool 1.7.2 Fping 4.2 (IPv4 and IPv6) -- DB size 679MB RRD size 122GB Devices 379 Ports 37794 IPv4 Addresses 3022 IPv4 Networks 4817 IPv6 Addresses 25 IPv6 Networks 1 Services Applications 0 Processors 1540 Memory pools 1135 Storage Entries 3 Disk I/O Entries 0 HR-MIB Entries 925 Entity-MIB Entries 65306 Syslog Entries 0 Eventlog Entries 1009110 Sensors 1844 Printer Supplies 0 Netscaler VServers 0 Netscaler Services 0 Virtual Machines 0 IP SLAs 170 -- Med venlig hilsen | Best regards | Mit freundlichen Grüßen | Cordialement | आपकी ईमानदारी से Henrik Aarfeldt Drift > Driftsstyring > Overvågning Overvågning + SårbarhedsKortlægning + SvartidsMålinger + NetværksKvalitetsMålinger + Elastic. Mobil: +45 2494 8281 Mail: Henrik.Aarfeldt(a)RegionH.dk Region Hovedstaden Center for It og Medicoteknologi, CIMT Borgervænget 7, 3. sal 2100 København Ø ________________________________ Region Hovedstaden anvender de personoplysninger, du giver os i forbindelse med din henvendelse. Du kan læse mere om formålet med anvendelsen samt dine rettigheder på vores hjemmeside: www.regionh.dk/persondatapolitik

3 3

probes alert boxes
by Arnoldo Vidal Bravo 26 May '22

26 May '22

Hi, I can see an alert box when a probe alert? How? -- Saluda cordialmente

2 1

Network map - non administrators
by Henrik Aarfeldt 26 May '22

26 May '22

Hi guys, The Network Map - is there any way to view it as non administrator ? Is there a role that can be used, that will allow this usage ? Thanks in advance. -- Med venlig hilsen | Best regards | Mit freundlichen Grüßen | Cordialement | आपकी ईमानदारी से Henrik Aarfeldt Drift > Driftsstyring > Overvågning Overvågning + SårbarhedsKortlægning + SvartidsMålinger + NetværksKvalitetsMålinger + Elastic. Mobil: +45 2494 8281 Mail: Henrik.Aarfeldt(a)RegionH.dk Region Hovedstaden Center for It og Medicoteknologi, CIMT Borgervænget 7, 3. sal 2100 København Ø ________________________________ Region Hovedstaden anvender de personoplysninger, du giver os i forbindelse med din henvendelse. Du kan læse mere om formålet med anvendelsen samt dine rettigheder på vores hjemmeside: www.regionh.dk/persondatapolitik

5 10

New Community Edition 22.5 Release.
by Adam Armstrong 25 May '22

25 May '22

We've just released new Community Edition 22.5. The release covers 376 commits since the last release, and a very large number of changes! The new release can be installed using the upgrade instructions in our documentation: https://docs.observium.org/updating/#upgrade-to-latest-major-release Please make sure you meet these minimum requirements beforehand: MySQL 5.6.5 / MariaDB 10.0, PHP 7.1, rrdtool 1.6. We strongly recommend PHP >7.2 and rrdtool >1.7. PHP8 should now be supported for compatibility with the latest distributions. A raw changelog can be found at https://www.observium.org/svn.log Adam.

1 0

(no subject)
by Arnoldo Vidal Bravo 24 May '22

24 May '22

hi, When we view the details of a switch (any brand) we can know which port is UP and which is DOWN. It is possible (somehow) to see summary charts for 1 day, 1 month, 1 year. ? without having to enter so many options... port, traffic, then traffic graphics... eg enter the port and there view the graphs of 1 day, 1 month and 1 year. [image: image.png] -- Saluda cordialmente

3 2

How to add more nagios checks to the list of probes
by Kevin Riahi 24 May '22

24 May '22

Is it possible to add more nagios checks by simply copying the check to /usr/lib/nagios/plugins More specifically like to add nagios chech_sip to the list of available probes. [ https://github.com/bashtoni/nagios-check-sip | https://github.com/bashtoni/nagios-check-sip ] [ https://exchange.nagios.org/directory/Plugins/Network-Protocols/%2A-VoIP/SI… | https://exchange.nagios.org/directory/Plugins/Network-Protocols/%2A-VoIP/SI… ] Kevin Riahi

3 7

device support requests
by Tony Guadagno 23 May '22

23 May '22

Hi, I have had a couple of Jira requests out there for a while with no movement...can you please take a look at these please? [OBS-4064] New Buffalo Terastation classified as linux server, not storage like older models - Observium<https://jira.observium.org/browse/OBS-4064> and [OBS-3974] please enhance support for HPE Nimble storage - Observium<https://jira.observium.org/browse/OBS-3974> thanks again Tony

1 0

help adding device
by Arnoldo Vidal Bravo 23 May '22

23 May '22

Hi, I'm trying add a device with an custom mibs... How i can add successfully? Device: CacheBox310, Applyansys. In the config SNMP on thee device, there are 3 files TXT with mibs... where i save them? [image: image.png] -- Saluda cordialmente

1 0

Unable to email
by Joe Brouillette 19 May '22

19 May '22

I had to redo my Observium installation and at this time I'm unable to receive any alerts. I tried testing postfix and that works: sudo echo "This is the body of the email" | mail -s "This is the subject line" userX(a)domain.com When I try it with Observium I get nothing: userX@Observium2:/opt/observium$ ./test_alert.php -a userx(a)domain.com Observium 22.5.12000 Test Alert Notification userX@Observium2: I've Googled this and I found serveral hits to change the PHP file, but I understood that we shouldn't be "tweaking" that file. Any ideas on what I've missed? Thanks, Joe Brouillette IT Specialist Link Transit 509.664.7643 jobee(a)linktransit.com<mailto:jobee@linktransit.com> "Any sufficiently advanced science looks like magic." - Arthur C. Clarke "All magic comes with a price." - Rumplestiltskin [Logo1]

3 7

Controlbyweb device and SNMP X405
by Fred Sharpsteen 19 May '22

19 May '22

I am adding my Control By Web device to track the temperature of the Data Center. I tried to install it to observium and I am getting no usable graphs. Attached is the MIB, What is the process to getting these added to the platform. https://www.controlbyweb.com/x405/manuals.html Thank you

3 2

LDAP / LDAPS Authentication with Observium
by Valerie Lim 13 May '22

13 May '22

Hi Graeme As I am very new to LDAPS, can you provide every step you’ve did in setting up LDAPS in both your LDAP server & observium host when you verify everything tomorrow? It would be very helpful learning experience for my team and I. 😊 [cid:image003.png@01D865EE.C07BA4A0] Best Regards Valerie Lim

3 4

LDAP / LDAPS Authentication with Observium
by Valerie Lim 12 May '22

12 May '22

Hi I am having issue authenticating the members in my group as the error message says that it is unable to get a match of a user in a particular group. Here are some steps I've taken so far: * Changing to $config['auth_ldap_server'] = "server01.domain01.com"; caused an error that LDAP server was unable to bind thus that is why I am using IP address * All my users are already a member of the group that I've specified & the group is also in an OU I've specified in my config.php So, why is Observium unable to get a match of the users even though the specifications are already there? Please advise. Attached is my config.php configuration: // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please se> $config['auth_ldap_binddn'] = "cn=Administrator,cn=Users,dc=domain01,dc=com"; $config['auth_ldap_bindpw'] = "xxxxxxxx"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_attr']['dn'] = "distinguishedName"; $config['auth_ldap_objectclass'] = "person"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "ldap://192.168.1.234"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = TRUE; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",OU=MVC,DC=domain01,DC=com"; $config['auth_ldap_group'] = array("CN=gtgroup,OU=MVC,DC=domain01,DC=com"); $config['auth_ldap_groupbase'] = "CN=gtgroup,OU=MVC,DC=domain01,DC=com"; $config['auth_ldap_groupmembertype'] = "nodn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['CN=gtgroup,OU=MVC,DC=domain01,DC=com']['level'] = 10; $config['web_debug_unprivileged'] = TRUE; Error message I got when logging in: [cid:image002.jpg@01D865E9.D1ADC000] My group & OU settings: [cid:image005.jpg@01D865E9.D1ADC000] Best Regards Valerie Lim

3 4

Project still active?
by Denton, Gregory 12 May '22

12 May '22

Hi Team, First off, thank you for the detailed support of some of the lesser common devices. Next, can you confirm the project is still active in any way? I'm currently in the market for a solution with enterprise level support (internal policy), so before I go to the well for funding, I need to know that Observium is still viable and active for that level of support? </greg>

2 1

Display warning on map
by Arnoldo Vidal Bravo 12 May '22

12 May '22

hello, today we have had several incidents in our network. It strikes me that some devices do not show the red triangle on the map. Where could I find and fix this problem? ps: the alert boxes have been customized to show hostname and IP, it works fine for us. [image: image.png] -- Saluda cordialmente

2 1

LDAP / LDAPS Authentication with Observium
by Valerie Lim 12 May '22

12 May '22

Hi Graeme Thanks! Also just want to check with you: 1. Other than getting LDAP to work, did you manage to get LDAPS to work as well? If so, could you provide the every step on how your team did it? 2. What OS & version is both your host Observium & LDAP server running on? 3. For LDAP, other than setting up Observium in the host & LDAP service in the server itself, were there any additional packages / steps you did to make it work? [cid:image001.png@01D865EB.87CC6930] Best Regards Valerie Lim

1 0

LDAP / LDAPS Authentication with Observium
by Valerie Lim 12 May '22

12 May '22

Hi I've configured my config.php based on recommended advice. However, when I try logging in, it only refreshes the page and shows me the following logs: [cid:image001.jpg@01D86528.E1F50CA0] I'm running my Observium on Ubuntu Desktop 20.04 and my LDAP server on Windows Server 2019. Here is my config.php configuration: // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please se> $config['auth_ldap_binddn'] = "cn=Administrator,cn=Users,dc=domain01,dc=com"; $config['auth_ldap_bindpw'] = "XXXXXXXX"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_attr']['dn'] = "distinguishedName"; $config['auth_ldap_objectclass'] = "person"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "ldap://192.168.1.234"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = TRUE; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",OU=ACCLIVIS,DC=domain01,DC=com"; $config['auth_ldap_group'] = array("CN=grouping,OU=ACCLIVIS,DC=domain01,DC=com"); $config['auth_ldap_groupbase'] = "CN=grouping,OU=ACCLIVIS,DC=domain01,DC=com"; $config['auth_ldap_groupmembertype'] = "nodn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['CN=grouping,OU=ACCLIVIS,DC=domain01,DC=com']['level'] = 10; $config['web_debug_unprivileged'] = TRUE; I am able to run a successful LDAP query from my host to my LDAP server. Thus, please advice on what else I can be missing. I'm reverting back from LDAPS to LDAP as I would like to fix the basic LDAP connection first before moving to a secured LDAP. Best Regards Valerie Lim

3 4

observium secondary IP
by Toky ANDRIANASOLO 10 May '22

10 May '22

Hello, Can we configure a secondary IP address for the observium server and use this to add devices? the primary IP will be routed on the primary link based on tunneling technology and the secondary IP will be routed on the backup MPLS link. Thank you and Regards, Toky, -- <https://app.livestorm.co/comdata-group/services-financiers-comment-optimise…>

4 3

need for a new support system, email lists are too limiting
by Tony Guadagno 06 May '22

06 May '22

Hi, as the recent 2 questions have shown (ldaps auth and ping only device monitoring) users have the same questions over and over. Currently, this system Observium uses for email lists (imho) is not cutting it. There is no place (that I now of) that we can search for old solutions, the emails don't seem to be archived anywhere. Have you considered switching off this to a discussion board software? I think it would be better for all. Just my 2 cents. tony

4 8

LDAPS Authentication with Observium
by Valerie Lim 05 May '22

05 May '22

Hi I need advice on how to authenticate my LDAP server (Windows Server 2019) with my Observium client (v22.4.11952) which runs on Ubuntu v20.04 Desktop. 1. I've configured LDAPs certificate in my LDAP server as an .pfx file. How do I allow Observium to read the certificate so as to get authenticated by my LDAP server? 1. I've configured LDAP settings in my Observium's config.php file accordingly as advised & installed php module. However, Observium is still unable to authenticate via LDAP. LDAP query between Observium client (Ubuntu) and LDAP server (Windows) is working. So please advice on what additional steps is required on setting up LDAP on regards to both client & server side. 1. Attached is my config.php configuration. // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please s> $config['auth_ldap_binddn'] = "cn=Administrator,ou=acclivis,dc=domain01,dc=com"; $config['auth_ldap_bindpw'] = "xxxxxxxxxx"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_attr']['dn'] = "distinguishedName"; $config['auth_ldap_objectclass'] = "user"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "server01.domain01.com"; $config['auth_ldap_port'] = 636; $config['auth_ldap_starttls'] = TRUE; $config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = ",ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_group'] = array("cn=grouping,ou=acclivis,DC=domain01,DC=com"); $config['auth_ldap_groupbase'] = "cn=grouping,ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_groupmembertype'] = "nondn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['cn=grouping,ou=acclivis,DC=domain01,DC=com']['level'] = 10; Best Regards Valerie Lim

3 10

Phantom suppressed alerts
by Dale Chambers 05 May '22

05 May '22

Afternoon, I am hoping you might be able to help me. I seem to have issues with the alerts where I have quite a few marked as supressed, but when you look at the suppressed alerts, I only see 5, but I cannot see how I can clear these phantom alerts. Are you able to help me? I am currently on version 22.3.11925 and this has been going on for probably a year now. A screenshot is provided so that you can see what I have occurring. [cid:image001.jpg@01D86097.CBC408E0] Many Thanks Dale CONFIDENTIALITY AND PRIVACY POLICY This communication is private and the information contained in this email and any attachments may be privileged, commercially sensitive, confidential, proprietary to NSSLGlobal Limited or otherwise legally exempt from disclosure. If you are not the intended recipient or have been sent this in error, you are prohibited from using, copying, relying upon, or disseminating the information, and the sender disclaims any liability for such unauthorised use. Further, if you are not the intended recipient, please notify the sender immediately and delete all copies of this message. In accordance with our email policy, emails sent or received may be monitored. Thank you. We have recently updated our Privacy Policy, which can be accessed at https://www.nsslglobal.com/uploads/documents/NSSLGlobal_Privacy_Policy.pdf We will hold and manage personal data that you provide us with in accordance with this Privacy Policy.

1 0

LDAPS Authentication Observium
by Valerie Lim 05 May '22

05 May '22

Hi Is there a log file in Observium for me to troubleshoot when I log in via LDAP? I want to verify the LDAP details I've keyed in my config.php is correct as I am still unable to log in via LDAP as per Tony's advice on LDAPS. Please advise if I am missing out any additional steps / packages required to as I am still relatively new to configuring LDAP / LDAPS for Observium. Attached are some information I configured so far: 1. Config.php [cid:image001.jpg@01D86091.7DDD9E30] 1. /etc/ldap/ldap.conf [cid:image002.jpg@01D86091.7DDD9E30] 1. Certificate Information (Configured via Windows LDAP Server) [cid:image003.jpg@01D86091.7DDD9E30][cid:image004.jpg@01D86091.7DDD9E30] 1. Already configured LDAPS on Windows LDAP Server (If require more screenshots to show what settings I've configured, I can provide) 2. Made changes to /opt/observium/config.php accordingly as shown in 1st screenshot 3. Made changes to /etc/ldap/ldap.conf accordingly as shown in 2nd screenshot 4. Did ldapquery sucessfully before configuring LDAPS to ensure Ubuntu host can query to Windows LDAP server. Best Regards Valerie Lim

1 0

Microsoft server 2022 listed as 2019
by Tony Guadagno 04 May '22

04 May '22

I just noticed that server 2022 is being reported on observium as 2019....could this be updated pls Thanks

2 5

Ubiquity Serial Numbers / Wireless (WLAN) mac
by Lyndon Labuschagne 27 Apr '22

27 Apr '22

Hi A few years ago we were able to pull the Ubiquiti Radio MAC / Serial numbers from the Observium DB. I no longer see any serial numbers listed for Ubiquiti devices if I query the device table in the DB directly, and it’s not shown on the device screen in the Observium interface. When running a manual poller.php run the serial number field is <empty>, Is there something that changed on the Observium or Ubiquiti side or is the a module that I may need to enable? Any ideas or input would be welcome. Regards Lyndon

3 5

FW: Observium LDAP Integration
by Valerie Lim 27 Apr '22

27 Apr '22

From: Valerie Lim Sent: Wednesday, 27 April 2022 10:07 am To: Adam Thompson <athompson(a)merlin.mb.ca> Cc: Ryan Tee <ryan.tee(a)acclivis.com>; Nirmolak Singh Bajaj <nirmolak.singhbajaj(a)acclivis.com> Subject: RE: Observium LDAP Integration Hi Adam Thanks for your response. I am able to successfully execute an LDAP query via command-line. Also, I will try to configure my LDAP server according to your advice & see the changes. Meanwhile, could you elaborate a bit more on what needs to be done on the client side for Observium? Currently, I am running Ubuntu Desktop 20.04 & have only enabled the base PHP module required for Observium to read LDAP settings. & other than enabling LDAP service on the server itself, is there any additional settings that needs to be done to allow client to reach LDAP server? I have attached below the command I've used for the LDAP query & some user details I've got via the query. Best Regards Valerie Lim Command used: ldapsearch -x -b "dc=domain01,dc=com" -H ldap://192.168.1.234 -D "cn=Administrator,ou=acclivis,dc=domain01,dc=com" -W "objectclass=user" Results: # extended LDIF # # LDAPv3 # base <dc=domain01,dc=com> with scope subtree # filter: objectclass=user # requesting: ALL # # Administrator, acclivis, domain01.com dn: CN=Administrator,OU= acclivis,DC=domain01,DC=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: Administrator description: Built-in account for administering the computer/domain distinguishedName: CN=Administrator,OU= acclivis,DC=domain01,DC=com instanceType: 4 whenCreated: 20220413051658.0Z whenChanged: 20220427015103.0Z uSNCreated: 8196 memberOf: CN=Group Policy Creator Owners,CN=Users,DC=domain01,DC=com memberOf: CN=Domain Admins,CN=Users,DC=domain01,DC=com memberOf: CN=Enterprise Admins,CN=Users,DC=domain01,DC=com memberOf: CN=Schema Admins,CN=Users,DC=domain01,DC=com memberOf: CN=Administrators,CN=Builtin,DC=domain01,DC=com uSNChanged: 36881 name: Administrator objectGUID:: zY3U88tQd0CIs1ncaHNQ9A== userAccountControl: 66048 badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 0 lastLogoff: 0 lastLogon: 132949181574995316 pwdLastSet: 132942924570197446 primaryGroupID: 513 objectSid:: AQUAAAAAAAUVAAAAL/6g3LnZPK6eKnuJ9AEAAA== adminCount: 1 accountExpires: 9223372036854775807 logonCount: 22 sAMAccountName: Administrator sAMAccountType: 805306368 objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain01,DC=com isCriticalSystemObject: TRUE dSCorePropagationData: 20220420091258.0Z dSCorePropagationData: 20220413053253.0Z dSCorePropagationData: 20220413053253.0Z dSCorePropagationData: 20220413051743.0Z dSCorePropagationData: 16010714042016.0Z lastLogonTimestamp: 132954978631684796 # gt09, acclivis, domain01.com dn: CN=gt09,OU= acclivis,DC=domain01,DC=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: gt09 givenName: gt09 distinguishedName: CN=gt09,OU= acclivis,DC=domain01,DC=com instanceType: 4 whenCreated: 20220420085359.0Z whenChanged: 20220420090537.0Z displayName: gt09 uSNCreated: 32997 memberOf: CN=grouping,OU= acclivis,DC=domain01,DC=com uSNChanged: 33031 name: gt09 objectGUID:: Q06xdIEFa0iWmks3+zuUTQ== userAccountControl: 66048 badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 0 lastLogoff: 0 lastLogon: 0 pwdLastSet: 132949184398814009 primaryGroupID: 513 objectSid:: AQUAAAAAAAUVAAAAL/6g3LnZPK6eKnuJOggAAA== accountExpires: 9223372036854775807 logonCount: 0 sAMAccountName: gt09 sAMAccountType: 805306368 userPrincipalName: gt09(a)domain01.com<mailto:gt09@domain01.com> objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain01,DC=com dSCorePropagationData: 16010101000000.0Z mail: valerie.lim(a)acclivis.com<mailto:valerie.lim@acclivis.com> From: Adam Thompson <athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca>> Sent: Tuesday, 26 April 2022 9:29 pm To: Observium <observium(a)observium.org<mailto:observium@observium.org>> Cc: Valerie Lim <valerie.lim(a)acclivis.com<mailto:valerie.lim@acclivis.com>> Subject: RE: Observium LDAP Integration That's very similar to what we're doing here successfully. The differences I see are: $config['auth_ldap_attr']['uid'] = "UserPrincipalName"; $config['auth_ldap_attr']['dn'] = "distinguishedname"; $config['auth_ldap_objectclass'] = "person"; $config['auth_ldap_server'] = "ldaps://xx.xx.xx"; $config['auth_ldap_groups']['CN=xx,OU=xx,DC=xx,DC=xx']['level'] = 10; $config['auth_ldap_port'] = 636; This lets us log in with our full UPN, which happens to also be our email address. You may want to keep sAMAccountName if you want to log in with bare userids instead of UPNs. Not sure if the "dn" line is required or not, I don't remember what that does. Objectclass might also trip you up - "person" is the standard LDAP ObjectClass for an AD userid. Are you able to successfully execute an LDAP query from the command-line using "ldapsearch" (typically found in the "openldap-clients" package or similar)? I would start there, to prove your Observium server can actually reach your DC and run a query successfully, before trying to enable LDAP in Observium. You can't do a non-TLS LDAP bind on 389 by default, which is why we use 636 and ldaps. IIRC, something has to be done on the client (Observium) side to allow OpenLDAP to accept the internal AD-generated TLS certificate the AD server offers, but I can't find it right now. -Adam Adam Thompson Consultant, Infrastructure Services [MERLIN] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/> From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> On Behalf Of Valerie Lim via observium Sent: Monday, April 25, 2022 9:16 PM To: observium(a)observium.org<mailto:observium@observium.org> Cc: Valerie Lim <valerie.lim(a)acclivis.com<mailto:valerie.lim@acclivis.com>> Subject: [Observium] Observium LDAP Integration Hi I am currently using professional v22.4.11952 for Observium. I am unable to authenticate my Observium via my LDAP server (Windows Server 2019). When 'ldap' is applied, authentication doesn't work. php module required for Observium has already been installed. Below is my config.php configuration: // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please s> $config['auth_ldap_binddn'] = "cn=Administrator,cn=Users,dc=domain01,dc=com"; $config['auth_ldap_bindpw'] = "xxxxxxx"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_objectclass'] = "user"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "server01.domain01.com"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = ",ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_group'] = array("cn=grouping,ou=acclivis,DC=domain01,DC=com"); $config['auth_ldap_groupbase'] = "cn=grouping,ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_groupmembertype'] = "nondn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['test']['level'] = 10; Is there something I missing out on my LDAP configuration? Please advise. Thanks Best Regards Valerie Lim

1 0

Observium LDAP Integration
by Valerie Lim 26 Apr '22

26 Apr '22

Hi I am currently using professional v22.4.11952 for Observium. I am unable to authenticate my Observium via my LDAP server (Windows Server 2019). When 'ldap' is applied, authentication doesn't work. php module required for Observium has already been installed. Below is my config.php configuration: // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please s> $config['auth_ldap_binddn'] = "cn=Administrator,cn=Users,dc=domain01,dc=com"; $config['auth_ldap_bindpw'] = "xxxxxxx"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_objectclass'] = "user"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "server01.domain01.com"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = ",ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_group'] = array("cn=grouping,ou=acclivis,DC=domain01,DC=com"); $config['auth_ldap_groupbase'] = "cn=grouping,ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_groupmembertype'] = "nondn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['test']['level'] = 10; Is there something I missing out on my LDAP configuration? Please advise. Thanks Best Regards Valerie Lim

2 1

Cloud networks monitoring option in Observium
by Jan Horacek 26 Apr '22

26 Apr '22

Good morning guys, I want to ask you if there is any development thread which will introduce cloud services monitoring into observium. I don`t mean the classic monitoring way of vhost via SNMP, but over API calls directly from the cloud tools. We are currently transferring our network capabilities from the standard setup to CloudWan and looking for the monitoring options and our vision is to concentrate monitoring features in observium dashboards. I appreciate any hints or tips. Thanks

1 0

Aborted connection xxxxxx to db
by Ross [Eve IT] 21 Apr '22

21 Apr '22

Hello peoples, Hope you are all well! I know this is not specifically an observium issue, but was hoping someone could shed some light on the problem if they have also experienced it. This is on a new build, fresh install; Debian 11 using the automated observium script; Every time the cron job triggers, every 5 minutes, I get this warning. bservium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:35:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:35:01 15776 [Warning] Aborted connection 15776 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:40:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:40:01 15880 [Warning] Aborted connection 15880 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:45:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:45:01 15985 [Warning] Aborted connection 15985 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:50:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:50:01 16090 [Warning] Aborted connection 16090 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:55:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:55:01 16194 [Warning] Aborted connection 16194 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 10:00:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 10:00:01 16300 [Warning] Aborted connection 16300 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 10:05:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 10:05:01 16404 [Warning] Aborted connection 16404 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 10:10:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 10:10:01 16509 [Warning] Aborted connection 16509 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) It doesn't seem to be affecting the application, Observium is graphing and monitoring just fine. Has anyone solved this issue? Kind regards, Ross.

2 1

relative times/dates
by David Milton 20 Apr '22

20 Apr '22

Hello, When trying to document events it’s more useful (at least to me) to see that something happened at 01:55 than it is to see it happened 9:23 hours ago. That doesn’t mean it’s not useful to know how long ago an event happened but it seems recently, knowing when the event happened is more important that knowing how long ago that was. Is there any way to disable temporarily or permanently the “relative” times in the event log and syslog? Thanks, Dave.

2 1

how does "ignore until" under device/alert settings work?...looking for a "in maintenance" mode for a device
by Tony Guadagno 20 Apr '22

20 Apr '22

Sorry if this is an obvious question but I have been playing with this and it does not behave the way I am expecting... under device properties/alerts there is an "ignore until" option as well as a "disable notifications" toggle.... [cid:image003.jpg@01D8530A.33555B80] If I set the "ignore until" to sometime in the future and I (for example) restart the device...I still get alerted. If I toggle the "disable notifications" , I do not get the notifications anymore...however, it stays disabled past the "ignore until" time How is this feature supposed to work? I am looking for a way to put a device in "maintenance mode" so that if I am upgrading etc...no alerts are generated and no notifications are sent.

5 11

add-on?
by McGranahan, Jamen (VU) 18 Apr '22

18 Apr '22

Is there an add-on or a separate module that will provide the DNS entries for each server? We have various servers running multiple websites and it would help us if we had one interface that contained this data along with everything else that Observium provides. Jamen McGranahan Associate Director of Library Technology & Digital Services Jean and Alexander Heard Libraries, Vanderbilt University 615-343-1614 | jamen.mcgranahan(a)vanderbilt.edu<mailto:jamen.mcgranahan@vanderbilt.edu> he/his/him [cid:image001.png@01D8531B.9A603B90]

1 0

Observium running in Ubuntu Server / How to ensure data at REST encrypted with AES256 / data encryption at rest
by Ryan Tee 18 Apr '22

18 Apr '22

Hi , Subject - Data encryption at REST ( AES256 ) How to verify and ensure data at REST encrypted with AES256 Observium running in Ubuntu Server. When at rest, data can be subject to malicious threats such as data theft or data corruption by obtaining physical access to the storage hardware. Do share us information if any comments for this. Thank you Regards Ryan **************************************** There are three states for digital data: data in use, data in transit and data at rest. * Data in use refers to active data stored in non-persistent volumes, typically RAM or CPU caches. * Data in transit is the state where data is transferred over a network, either private or public. * Data at rest means inactive data that is stored physically on persistent storage, i.e. disks, databases, data warehouses, mobile devices, archives, etc.

2 2

Observium @ Ubuntu - - TLS v1.2 and TLS v1.3 is for communications between webservers and database servers ( different systems and machines )
by Ryan Tee 14 Apr '22

14 Apr '22

Hi We are concerned security between Observium that running in Ubuntu systems ( 18.04 and 20.04 ) How to check and confirm TLS v1.2 or above had been configured as default , for communications between webservers and database servers ( different systems and machines ) Do share us information if any comments. Thank you. Regards Ryan

1 0

Re: [Observium] ping only device monitoring
by adama＠observium.org 13 Apr '22

13 Apr '22

No one else is reading because at some point I accidentally replied directly instead of to the list 😊 But I did now! Adam. From: Tony Guadagno <tonyg(a)guadagno.org> Sent: 13 April 2022 17:54 To: adama(a)observium.org Subject: RE: [Observium] ping only device monitoring Adam, I separate list that is independent would be good also…I hope others reading this will voice their support!!!!!!!!!!!!!!!!! Thanks From: adama(a)observium.org <mailto:adama@observium.org> <adama(a)observium.org <mailto:adama@observium.org> > Sent: Wednesday, April 13, 2022 12:52 PM To: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: RE: [Observium] ping only device monitoring This is why we recommend the probe is attached to the Observium server’s own device entry in Observium. The ping-only host thing isn’t feasible in the existing devices paradigm, it would break the UI and a lot of other expectations about devices. Observium is 95% “showing data we got from SNMP”. The thing we’d likely create is a separate list of devices that didn’t support SNMP and didn’t actually interact with anything that currently exists in Observium, except probes, so we’d need a bunch of exceptions to the probe code to handle things with a device record and things without in the probes code. No one seems to ask much about it once we show them how to do the probes workaround, so we don’t look at it much. Adam. From: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Sent: 13 April 2022 17:22 To: adama(a)observium.org <mailto:adama@observium.org> Subject: RE: [Observium] ping only device monitoring Adam, I was able to get this all working, thanks for your help. Please excuse me if I am preaching to the choir but I do have some feedback. I want to start out by saying that I would love it if all devices supported SNMP, that would be ideal, but reality is that there are devices that will never have SNMP agents on them. In this particular case, it’s a banks ATM’s. For security reasons, SNMP will never be a feature for these devices. There are other examples as well, for instance, I also want to my ISP’s router so I can tell when I go down, are they down as well. So, ping only devices are abundant and persistent, they will not be going away. Setting up a probe will get me by, but there are several problems. The first is it seems you need to associate the probe with an existing host...so it looks like the probe is for that host (even though it is not). What happens if I delete the host...will the probes go away? Also, I have not yet seen a notification, but does the notification show the hosts name associated with the probe? If so, that will be confusing to techs who might not be aware they have to read further. What is really needed is the ability to add a device that is ping only and stand alone, not dependent on any other host. Obviously, all the info for that device would be unavailable except ping times but this would be much clearer. I think, given how important ping only devices can be, it should be a priority to get this right. Finally, let me say that I have worked in the past with MRTG and HP Openview and more recently with NagiosXI, PRTG and Shinken. Observium is BY FAR, the best of them. A ping only host is one of the few things that they all can do, but you cannot. Thanks for listening, if you want, I would be happy to put in a feature request. From: adama(a)observium.org <mailto:adama@observium.org> <adama(a)observium.org <mailto:adama@observium.org> > Sent: Wednesday, April 13, 2022 11:19 AM To: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: RE: [Observium] ping only device monitoring Same way you alert on everything else, it’s just another entity type, similar to status with ok/alert status https://docs.observium.org/entities/#probes Adam. From: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Sent: 13 April 2022 16:17 To: adama(a)observium.org <mailto:adama@observium.org> Subject: RE: [Observium] ping only device monitoring Oh, so you just pick a host in the pulldown, but that gets ignored when you use -H? ok. is there a way to alert on a probe? From: adama(a)observium.org <mailto:adama@observium.org> <adama(a)observium.org <mailto:adama@observium.org> > Sent: Wednesday, April 13, 2022 11:12 AM To: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: RE: [Observium] ping only device monitoring You just override the default arguments on the probe, the documentation should explain that. Host is *almost* always -H Adam. From: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Sent: 13 April 2022 15:48 To: Observium <observium(a)observium.org <mailto:observium@observium.org> > Cc: adama(a)observium.org <mailto:adama@observium.org> Subject: RE: [Observium] ping only device monitoring Adam, I have been looking at probes, but the thing I don’t understand is how to add a probe when the device is not listed in Observium. I tried to overwrite the pulldown, but it does not allow that. Is there a way to add a device to the list? From: observium <observium-bounces(a)observium.org <mailto:observium-bounces@observium.org> > On Behalf Of adama--- via observium Sent: Wednesday, April 13, 2022 10:44 AM To: 'Observium' <observium(a)observium.org <mailto:observium@observium.org> > Cc: adama(a)observium.org <mailto:adama@observium.org> Subject: Re: [Observium] ping only device monitoring This is mentioned in the probes documentation. Just create ICMP probes on the Observium-server entry (or the closest partitioned poller) We might do something specific at some point, but it’ll basically just be the same thing but with the probes separated into a different list. Adam. From: observium <observium-bounces(a)observium.org <mailto:observium-bounces@observium.org> > On Behalf Of Tony Guadagno via observium Sent: 13 April 2022 15:41 To: Observium <observium(a)observium.org <mailto:observium@observium.org> > Cc: Tony Guadagno <tonyg(a)guadagno.org <mailto:tonyg@guadagno.org> > Subject: [Observium] ping only device monitoring Hi, I know this has been asked and answered before, but I cannot find anywhere to search old threads, so I need to ask again…. How do I configure Observium to monitor a device with ping but no SNMP ability? Thanks Tony

4 3

wmi issues, need a syntax change
by Tony Guadagno 13 Apr '22

13 Apr '22

Hi, I am guessing that wmi polling is not used very much but I do use it and find it handy. If you do use it, you are probably aware that your event logs are filling up with this error: The server-side authentication level policy does not allow the user domain\wmiuser SID (S-1-5-21-99999-3660327915-2769000259-31856) from address 1.1.1.1 to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application. I am getting 4 eventlog errors every polling interval (5 minutes) on every windows server. This is due to Microsoft enhancing security on wmi. (KB5004442-Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414) (microsoft.com)<https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-wind…>) There is a solution to this, you need to call wmi with pkt integrity enabled (wmic RPC_C_AUTHN_LEVEL_PKT_INTEGRITY support · Issue #41 · greenbone/openvas-smb (github.com)<https://github.com/greenbone/openvas-smb/issues/41>). So, for example wmic --user=domain.local\\user --password= //server.domain.local "select * from Win32_ComputerSystem" - throws the error in the target servers event log...also, this will start failing next year. However wmic --user=domain.local\\user --password= //ncacn_ip_tcp:server.domain.local[sign] "select * from Win32_ComputerSystem" will not throw the error wrapping the target server in ncacn_ip_tcp: and [sign] fixes the issue. So, would it be possible for you to enhance Observium to make the wmi calls this way? Thanks Tony

5 8

ping only device monitoring
by Tony Guadagno 13 Apr '22

13 Apr '22

Hi, I know this has been asked and answered before, but I cannot find anywhere to search old threads, so I need to ask again.... How do I configure Observium to monitor a device with ping but no SNMP ability? Thanks Tony

2 2