- observium - lists.observium.org

Assistance with Email alerts
by Robin Cook 08 Oct '14

08 Oct '14

Hello, I am running the paid/SVN version of observium and I have tried a couple of times to setup email alerts and each time I end up breaking my config and having to restore it. Does anyone have any sample configurations I can look at/copy from for simple alerts to a single email address via a network SMTP relay? e.g. mail from observium(a)domain.com<mailto:observium@domain.com> to alerts(a)domain.com<mailto:alerts@domain.com>? Do I require a local postfix install for mail to be dropped into? Many thanks, Robin --------------------------------------------------------------------------------------- This email has been scanned for email related threats and delivered safely by Mimecast. For more information please visit http://www.mimecast.com ---------------------------------------------------------------------------------------

2 1

Bluecoat MIBs
by Adam Armstrong 07 Oct '14

07 Oct '14

Hi Guys, Does anyone have access to full Bluecoat MIBs? Specifically I'm looking for BLUECOAT-SG-ICAP-MIB, but the rest would be nice too! Thanks, adam.

2 1

Syslog filters
by Markus Klock 07 Oct '14

07 Oct '14

Hello! I'm trying to apply some syslog-filters and have for example added this to my config.php: $config['syslog']['filter'][] = 'ROUTING-MLDP-5-BRANCH'; $config['syslog']['filter'][] = "Successfully authenticated user \'rancid\'"; However I still get messages containing these strings Do I need some kind of wildcard or what could be wrong? BR, Markus

5 19

Overview timestamp delta broken
by Ben Steele 07 Oct '14

07 Oct '14

Since I installed Observium a few weeks ago I have noticed that the overview timestamp for syslog and event log delta is wrong for most (not all) devices, this is prevalent on the main overview and the specific device overview page. By wrong I mean "-1y -1d -xh." etc.. Hovering over the incorrect entry pops up the correct timestamp so I think it's just the logic in calculating the delta between current time and that event that's broken, also viewing the syslogs and entry logs directly with the original timestamp is fine as well. I checked my local timezone and php timezone just to be sure and they are reporting correctly, I would imagine this would break the original timestamp anyway which is not the problem here. Hover over example: I find it particularly weird as not every device is doing this, the ones that are have no real pattern either, mixture of N7K,N5K,ASA etc and some even have a mixture of working and broken entries (individual device overview): [image: Inline image 1] Anyone else seen this, any ideas? Cheers.

4 9

Alerts
by Josh Hopper 06 Oct '14

06 Oct '14

I'm a noob and I apologize. I'm having trouble determining if it's the Alert Checkers I am setting up that is not sending me mail or if it's the new mail settings. I've just moved from the old alerts to the new ones. A test goes as follows: administrator@network-monitoring:/opt/observium$ ./test_mail.php -h apc-pdu-02.purafilter2000.com Observium v0.14.10.5859 Test E-mail Configuration My Hostname: network-monitoring.purafilter2000.com E-mails ENABLED globally E-mails use PHP-builtin MAIL backend E-mails send from: ITObserviumNotify(a)purafilter2000.com Try send test notification for apc-pdu-02.purafilter2000.com to these email(s): ITObserviumNotify(a)purafilter2000.com Notification for apc-pdu-02.purafilter2000.com SENT. I do have POSTFIX installed. And below is an image of a few of my alerts I've been trying: [cid:image001.png@01CFDEE7.26E27260] Assistance would be awesome. I want device down/up, ping, port utilization, some stuff for storage, etc. However, if someone could point me in the right direction on getting alerts from one checker I think I can noodle my way around the others. Thanks. -- Sincerely, Joshua Hopper, A+ CE Network Administrator [cid:image002.jpg@01CFDEE7.26E27260] 420 3rd Ave NW Hickory NC 28601 Office: 828-449-1839x2160 | Cell: 828-855-7565 Protect Plus Air Holdings, LLC and Affiliates, Protect Plus, LLC and Affiliates, Imagine One Resources, LLC and Affiliates, Protect Plus Surfaces, LLC and Affiliates Confidentiality Notice: This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation.

3 3

sysLocation location_map rewrite
by Tylla 06 Oct '14

06 Oct '14

Hi! I've done my homework and found the previous messages about this subject, nevertheless I would like to express my opinion. I think the current solution (by giving the coordinates in square brackets at the end of the overridden location string) is acceptable, but in the long run the actual location (coordinates) and the user readable location should be kept separate. I mean normally the sysLocation should contain some human readable/understandable string about the location of the server, but the real location - for computer usage - is best given with a Lat/Lon coordinate pair. I think these shouldn't be mixed and only the human readable location should be displayed on the GUI. Anyway, the documentation should be extended with these informations. Maybe the custom_rewrite_location function should be mentioned too, which is used by the code if it is defined in the config.php and could help people with special needs. I'm a new user, so please spare me if I'm wrong. :) Tylla

1 0

Is there a upgrade to CE edition coming soon?
by Yucong Sun 06 Oct '14

06 Oct '14

Hi.. according to http://observium.org/wiki/Download_Community_Edition, the last release is 6month ago today. Is there a release coming soon ? :-p Cheers.

1 0

Guidence needed to fix my Alert Checkers
by Joy, Jees 06 Oct '14

06 Oct '14

Hello All, Thank you for the previous support you all provided. I need assistance again to finding the root cause, I often get false alarm on my servers (Windows and Linux). I have 2 Alarm Checkers, 1. System Uptime, it basically checks if any server's uptime is less than 5 minutes, it notify me. 2. Does a ping and snmp check every one minute, if it couldn't reach it alerts me. One of the server, I understand and the issue is with NIC teaming and it flaps, that I have arranged change management ticket so will be fixing it soon. But what I don't understand is, System Uptime triggers stating the uptime has been changed. But in reality no change has been happened. Also sometimes it alerts me Ping checker, for normal servers without bonding/teaming on both Unix and Windows. I checked the system loads, all of them are normal. Could you please let me know your thoughts and any help if available. I wonder if my Alert Checker configuration is wrong. Below is my alert checkers [cid:image001.png@01CFE164.62A0FA90] Best Regards, Jees Joy Internal IT **************************************************************** "PLEASE NOTE: This email, and any attachments hereto, are intended only for use by the specified addressee(s) and may contain legally privileged and/or confidential and/or proprietary information of KVH Co., Ltd. and/or its affiliates (including personal information). If you are not the intended recipient of this email, please immediately notify the sender by email, and please permanently delete the original, any print out and any copies of the foregoing. " ****************************************************************

1 0

- high availability
by Paolo De Michele 05 Oct '14

05 Oct '14

hi everybody, anyone know if it is possible set up observium in high availability? I'm thinking to use it for all my servers but I have necessity to have 2 or more nodes anyone can help me? thanks in advance cheers

6 8

Re: [Observium] - high availability
by Marco Spicuglia 04 Oct '14

04 Oct '14

hi Adam, HA is often a requirement from the enterprise world. Monitoring systems are often considered business critical, which means guaranteed HA. I'd appreciate a HA observium setup too. Sent from Samsung Mobile -------- Original message -------- From: Adam Armstrong <adama(a)memetic.org> Date: 03/10/2014 13:48 (GMT+01:00) To: Observium Network Observation System <observium(a)observium.org> Subject: Re: [Observium] - high availability What is the value of high availability for a non-service affecting support application? Needless complication for no appreciable gain is the cornerstone of all IT failure. Adam. Sent with AquaMail for Android http://www.aqua-mail.com On 3 October 2014 11:49:07 Paolo De Michele <paolo(a)paolodemichele.it> wrote: > hi everybody, > > anyone know if it is possible set up observium in high availability? > I'm thinking to use it for all my servers but I have necessity to have 2 > or more nodes > > anyone can help me? > thanks in advance > > cheers > > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

7 9

Alerts
by Josh Hopper 02 Oct '14

02 Oct '14

Is it possible to use the old alerts in the newest version of Observium? Of course, they might have to be enabled. -- Sincerely, Joshua Hopper, A+ CE Network Administrator [cid:image001.jpg@01CFDD5F.9E801720] 420 3rd Ave NW Hickory NC 28601 Office: 828-449-1839x2160 | Cell: 828-855-7565 Protect Plus Air Holdings, LLC and Affiliates, Protect Plus, LLC and Affiliates, Imagine One Resources, LLC and Affiliates, Protect Plus Surfaces, LLC and Affiliates Confidentiality Notice: This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation.

3 2

Re: [Observium] rename graph
by Support 01 Oct '14

01 Oct '14

Hi, I've made exactly that on the link of the wiki but although the command line work fine (see bottom) in the graph i'm not be able to see the description of interface the remote host is an Ubuntu 14.04 LTS the observium is update to current release 0.14.9.5846 :~# snmpwalk -v2c -c public 172.16.xx.xx .1.3.6.1.2.1.31.1.1.1.18 IF-MIB::ifAlias.1 = STRING: IF-MIB::ifAlias.2 = STRING: Primary Interface IF-MIB::ifAlias.3 = STRING: regards, Giuseppe _____________________________________________________________________ NUCKLEO Information Technology Solutions Support & Delivery Team http://www.nuckleo.com _____________________________________________________________________ Di Venerdì, 26-09-2014 alle 19:50 Adam Armstrong ha scritto: Hi, This is normally done by setting the port description on the device. We don't allow setting of configuration which can be done on devices in the UI as it encourages bad operational habits. Linux hosts don't have the ability to set port descriptions, so you have to rely on a script to inject the descriptions into SNMP. This script will do it for Ubuntu/Debian http://www.observium.org/wiki/IfAlias_descriptions_on_Debian/Ubuntu Thanks, adam. On 2014-09-24 10:23, Support wrote: > Hi, > is possible to rename single graph? > like 'Internet Traffic' instead of generic eth0 > > regards, > Giuseppe > > _____________________________________________________________________ > NUCKLEO Information Technology Solutions > Support & Delivery Team > http://www.nuckleo.com [1] > _____________________________________________________________________ > > > Links: > ------ > [1] http://www.nuckleo.com > > _______________________________________________ > observium mailing list > observium(a)observium.org > http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

Known bug in the gui ?
by Raphael Mazelier 29 Sep '14

29 Sep '14

Hello, Sorry if it was a know bug but I have a very frustrating bug in the seach bar or link in the overview page. When I click on ports down, or ports disabled I have an empty set result. (but the count is OK). http://observium.test.net/ports/state=down/ => empty set http://observium.test.net/ports/state=admindown/ => empty set Another customic bug is clicking on ignored/alert/ sensors link redirect me to http://observium.test.net/health/ but there is no search bar ?! Thanks for this great project anyway. -- Raphael Mazelier

1 0

Default Alerts stop working.
by Zafar Pravaiz 29 Sep '14

29 Sep '14

Dear All, I notice that default email alerts for device down, UP, reboot and BGP flapping etc has stop working. I don’t configure any alert checker. It was working fine but suddenly stop working. Any clue? my local mail MTA is working fine. Thanks Zafar Pravaiz IT Senior Systems Engineer Information Technology Department Tel +971 6 515 2164 Fax +971 6 515 2112 American University of Sharjah PO Box 26666, Sharjah United Arab Emirates http://www.aus.edu <http://www.aus.edu/> zpravaiz(a)aus.edu <mailto:youremail@aus.edu>

3 3

Observium and MediaWiki
by Senses0 29 Sep '14

29 Sep '14

If any of you are using a local wiki powered by MediaWiki, you might find this useful. http://senses0.blogspot.com/2014/09/observium-and-mediawiki.html

1 0

"Shell Shock" BASH exploit announced - Patch your boxes
by tonto＠decoygaming.com.au 28 Sep '14

28 Sep '14

Hey all, This isn't technically about Observium but felt it was worth bringing to your attention. https://www.us-cert.gov/ncas/current-activity/2014/09/24/Bourne-Again-Shell… A bash exploit has been announced that allows remote code execution. Updates are available for Debian/Ubuntu/RHEL via APT/YUM. Might be an idea to patch your Observium boxes. Regards, Matt "Tonto" Harper - DecoyGaming

5 5

Sensor Subtypes
by Milton Ngan 27 Sep '14

27 Sep '14

So what is the direction that the sensors are heading? Are subtypes going to go away? Or are they the way forward? I saw that alerting for subtypes was just removed, and that the recommendation is to use the general sensor class for alerting. Alerting for subtypes can be made to work with a simple change, however it would also break the generic sensor type. I am just trying to understand if I should just ignore the sensor subtypes altogether because a generic sensor alerting infrastructure is where things are headed. M.

3 4

graph color
by Zhenhui Liang 27 Sep '14

27 Sep '14

Guys, This might be a general RRD question. So in almost all graphing, we have those shaded color area and solid color line. Although I have a general idea on what they mean, I still want some official explanations regarding their meanings. Thanks. I attached a cpu usage graph here as an example. We have grey shaded area, and solid red line. I guess the red line is some kind of moving average? While grey shows spikes? Or how else could I inteprete this? Thanks a lot. Zhenhui[cid:2CB03DFE-FFA0-4DA8-9438-EB2732F92119]

3 3

rename graph
by Support 27 Sep '14

27 Sep '14

Hi, is possible to rename single graph? like 'Internet Traffic' instead of generic eth0 regards, Giuseppe _____________________________________________________________________ NUCKLEO Information Technology Solutions Support & Delivery Team http://www.nuckleo.com _____________________________________________________________________

2 1

Trail the alerting functionality
by Vini 26 Sep '14

26 Sep '14

Hi All, I am evaluating Observium for a job and I was wondering if any of you know of a way to enable the alerting functionality as a trail? I could not find anything on the website about it but if I cannot trial it first and compare to the other options I have I won't be able to make a case to pay for the subscription. Any info would be much appreciated. Thanks Vin

4 4

Graph blank problem
by chott＠praha1.net 26 Sep '14

26 Sep '14

Hello guys Last two week i have problem with Graph blank places for few times Observium is connected by localy switch gigabit line same problem in localy SNMP for server Where is problem? Disk? RAM ? SQL? Tomas [email-header-praha1] Tomas Chott technický ředitel chott(a)praha1.net<mailto:chott@praha1.net> Phone: +420 245 004 005 Mobile: +420 604 930 119 Certifikace: Cisco CXFS, CCDA, SMBEN, SMBAM, CCNA Ubiquiti UCWA, UEWA, UCRSS, UCT Authorised Trainer Cisco, Ubiquiti, TP-Link, Synology Metropolitní síť Praha 1 z.s.p.o. Jindrisska 18 110 00 Praha 1 Czech Republic www.praha1.net<http://www.praha1.net/> [Popis: Facebook]<http://www.facebook.com/praha1net> [Popis: LinkedIn] <http://www.linkedin.com/pub/tomas-chott/49/97a/1aa>

2 8

Re: [Observium] Generating Email Alerts till state change
by Moerman, Maarten 26 Sep '14

26 Sep '14

You’ll get an alert every 24hours. -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com From: <Joy>, Jees <Jees.Joy(a)KVHasia.com<mailto:Jees.Joy@KVHasia.com>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Thursday, September 25, 2014 at 12:34 PM To: "observium(a)observium.org<mailto:observium@observium.org>" <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Generating Email Alerts till state change Hey All, Thank you for this interesting product. We started to use Observium for basic and monitoring of our Linux and Windows infrastructure. I have a quick question regarding Alerts , I have configured Alert Checker as follows: Check Condition: device_status is 0 device_status_type is ping Device Match: hostname match * Entity Match * I get only one Alert per failure, then once recovered I get one recovery alert. I would like to keep getting alerts till the state is recovered or we manually suppress is it using ignore. Thank you very much. Best Regards, Jees Joy *************************************************************************** "PLEASE NOTE: This email, and any attachments hereto, are intended only for use by the specified addressee(s) and may contain legally privileged and/or confidential and/or proprietary information of KVH Co., Ltd. and/or its affiliates (including personal information). If you are not the intended recipient of this email, please immediately notify the sender by email, and please permanently delete the original, any print out and any copies of the foregoing. " ***************************************************************************

3 3

Documentation
by Søren Irbo 25 Sep '14

25 Sep '14

Hi! Stumbled upon this feature, are there other nice features, which are not documented? http://jira.observium.org/browse/OBSERVIUM-299 Can't find it here: http://www.observium.org/wiki/Configuration_Options#Custom_traffic_graphs /Søren

9 14

Generating Email Alerts till state change
by Joy, Jees 25 Sep '14

25 Sep '14

Hey All, Thank you for this interesting product. We started to use Observium for basic and monitoring of our Linux and Windows infrastructure. I have a quick question regarding Alerts , I have configured Alert Checker as follows: Check Condition: device_status is 0 device_status_type is ping Device Match: hostname match * Entity Match * I get only one Alert per failure, then once recovered I get one recovery alert. I would like to keep getting alerts till the state is recovered or we manually suppress is it using ignore. Thank you very much. Best Regards, Jees Joy **************************************************************** "PLEASE NOTE: This email, and any attachments hereto, are intended only for use by the specified addressee(s) and may contain legally privileged and/or confidential and/or proprietary information of KVH Co., Ltd. and/or its affiliates (including personal information). If you are not the intended recipient of this email, please immediately notify the sender by email, and please permanently delete the original, any print out and any copies of the foregoing. " ****************************************************************

4 5

Re: [Observium] Problem with the Mail Alerting
by SCHEIN David 24 Sep '14

24 Sep '14

Hello, Thanks for your answer, where I can find a tutorial to configure the checker, because the wiki is not clear for me. And in the earlier version the mail alert was automatical, why this feature was abandoned. Best regards David De : observium [mailto:observium-bounces@observium.org] De la part de Tom Laermans Envoyé : vendredi 12 septembre 2014 15:03 À : Observium Network Observation System Objet : Re: [Observium] ***SPAM*** Re: Problem with the Mail Alerting David, You need to create alert checkers to receive e-mail alerts. Tom On 09/12/2014 02:08 PM, SCHEIN David wrote: Hello, First thanks for your rapid answer, the alerts look like activated, like you can see below (I don't know if picture can be display on this maillinglist [cid:image001.png@01CFD1BE.AA3C1750] [cid:image002.png@01CFD1BE.AA3C1750] When in run the alerter.php on a device with an interface down : :/data/observium# php ./alerter.php -h sto-rtr-edge-agarik.seres.lan -d Observium v0.14.9.5798 Alerter DEBUG! Starting alerter run: PHP Warning: readfile(/data/observium/includes/debug/ref.css): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2474 PHP Warning: readfile(/data/observium/includes/debug/ref.js): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2482 <div><style> Warning: readfile(/data/observium/includes/debug/ref.css): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2474 </style> <script> Warning: readfile(/data/observium/includes/debug/ref.js): failed to open stream: No such file or directory in /data/observium/includes/debug/ref.inc.php on line 2482 </script><div class="ref"><span data-input><i>> </i><span data-expTxt>$vars</span><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `alert_tests` WHERE 1</span></span><div><span data-row><span data-cell><span data-title>string(35)</span></span></span></div></div></div>Cached 0 alert rules. <div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `alert_assoc`</span></span><div><span data-row><span data-cell><span data-title>string(27)</span></span></span></div></div></div><div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT `device_id` FROM `devices` WHERE `disabled` = 0 AND `hostname` LIKE 'sto-rtr-edge-agarik.seres.lan' ORDER BY `device_id` ASC</span></span><div><span data-row><span data-cell><span data-title>string(131)</span></span></span></div></div></div><div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `devices` WHERE `device_id` = '35'</span></span><div><span data-row><span data-cell><span data-title>string(48)</span></span></span></div></div></div>Processing alerts for sto-rtr-edge-agarik.seres.lan <div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT *,`alert_table`.`alert_table_id` AS `alert_table_id` FROM `alert_table` LEFT JOIN `alert_table-state` ON `alert_table`.`alert_table_id` = `alert_table-state`.`alert_table_id` WHERE `device_id` = '35'</span></span><div><span data-row><span data-cell><span data-title>string(212)</span></span></span></div></div></div><div><div class="ref"><span data-input><span data-backtrace>/data/observium/includes/common.inc.php:193</span></span><span data-output><span data-string data-tip="0">SELECT * FROM `alert_table` LEFT JOIN `alert_table-state` ON `alert_table`.`alert_table_id` = `alert_table-state`.`alert_table_id` WHERE `device_id` = '35'</span></span><div><span data-row><span data-cell><span data-title>string(155)</span></span></span></div></div></div> Best regards David De : observium [mailto:observium-bounces@observium.org] De la part de Tom Laermans Envoyé : vendredi 12 septembre 2014 12:21 À : Observium Network Observation System Objet : Re: [Observium] Problem with the Mail Alerting On 09/12/2014 11:25 AM, SCHEIN David wrote: I tried different config, but nothing is working and with this config when I do a test, I receive the e-mail in my gmail box, but nothing about port down or bgp session down... If test mail works, your config works. If you don't get alert mails, either there is a problem with the actual alerter or with your checkers. Please show your checkers, and check whether the "alerted" column in the test list has a value or says Never. Tom _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

8 18

Different Alert thresholds for different temperature sensors of the same cisco device
by Supun Rathnayake 24 Sep '14

24 Sep '14

Hi , We are using the Observium subscribed edition 0.14.9.5814 and trying to set different alerts for *different temperature sensor types* *of the same cisco device*, but could not find a proper method to do that. Please find the annexed screen-shots of the alert config. that we tried, and it matches all the temperature sensors (there are about 6 types). We are looking for the way to differentiate these sensors to set different threshold levels. Kindly let us know if there is a way to do this. -- With Best Regards, Supun Rathnayake Lanka communication Services (Pvt) Ltd. 65C, Dharmapala Mawatha, Colombo 07. Sri Lanka. Tel: +94-11-2437545 http://www.lankacom.net

2 2

Excluding docker mounts
by overige＠vanderpoel.com.au 23 Sep '14

23 Sep '14

Hi, I'm running docker containers on one of my workstations and the syslog on that machine is now getting heaps of 'permission denied errors' like this: *Sep 22 16:25:05 raven snmpd[3295]: /var/lib/docker/aufs/mnt/5e126344b6b34ec70d5982e5cdf121bdf9698342a9223f6ef2d1e7d01cf3fff7: Permission denied* If I execute a non-root *df -h'* I'm also getting *permission* *denied*. I've tried to exclude the mentioned path using *$config['ignore_mount_string'][]* but that didn't do anything. I assume the other way would be to exclude it somehow using snmpd config, but got no idea how to. Cheers, Pieter

3 2

syslog-ng implementation and Cisco ASR9K
by Markus Klock 22 Sep '14

22 Sep '14

Hey guys! I´m setting up syslog-ng implementation and it works great for all my Cisco IOS-devices, however most of the devices in my network is Cisco ASR9K-routers running IOS-XR and it seems syslog from them wont go in to Observium. I did a quick look in the syslog-messages from the ASR9Ks and it seems IOS-XR actually don't use its hostname as hostname but instead use its active routeprocessors name (wtf cisco?!) making the syslog messages look something like this: RP/0/RSP0/CPU0:Nov 28 23:56:53.826 : config[65710]: %SYS-5-CONFIG_I : Configured from console by console Now there is a command that let you add a "hostname prefix" to the syslog messages, which means that I can type my own custom string as hostname for syslog, sadly it still just adds it before the RPS-id making the messages like this: router1 RP/0/RSP0/CPU0:router:Nov 28 23:56:53.826 : config[65710]: %SYS-5-CONFIG_I : Configured from console by console This of course makes it impossible for Observium to match the syslogged hostname to a hostname in the database. I took a look in the observium syslog-code and if I understand it correctly, if it fails to match the hostname it does a fallback and tries if maybe the IP-address is used as hostname and try to match it against a host in the database? In that case maybe I could change the syslog-ng template that forwards the data to Observium to instead use source IP instead of hostname? destination d_observium { program("/opt/observium/syslog.php" template ("$HOST||$FACILITY||$PRIORITY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template-escape(yes)); I tried change $HOST to $HOST_FROM and $SOURCEIP but no luck so far. Am I even on the right track here? Could something like this work to make my idiotic ASR9Ks show up in the Observium syslog? Thanks in advance for any advice /Markus

4 7

Alerting on temperature against device with multiple temperature sensors
by Jason Lixfeld 22 Sep '14

22 Sep '14

2 1

6800 weirdness
by Robert Williams 21 Sep '14

21 Sep '14

Hi, We've taken our first batch of 6807-XL chassis and have a couple of minor issues with the component identification and detection in Observium (r5815). I'm not sure if it's best to add a bug report or raise it on here, so I'll start here and move to JIRA if requested. In summary the hardware is reported as: "Hardware: ciscoProducts.1765" - if the same standard as the other 6xxx series is to be followed, this should be translated to "cat6807" I believe? Slightly more importantly, there are permanent 'false' alarm states for the 3.3v outputs on the PSUs which are present: There are 4 bays, numbers 1 and 2 have PSUs, 3 and 4 are empty. It correctly shows the sensor only for objects for 1 and 2, but shows them as 'false' not 'true' for being happy. The graphed integer is 2 (not 1). Console output say's it's OK, so probably (yet) another lying/inverse Cisco SNMP OID... power-converter 1: power-converter 1 : 3.3V Output: OK power-converter 2: power-converter 2 : 3.3V Output: OK Lastly, the Crossbars statistics are, well, a bit weird. Image below as it's easier to explain: I also have just noticed that all the other 6500 series chassis are showing a weird sensor (VTT this time) under the crossbar stats as well. So maybe this is a recent more general issue and is not directly related to the 6807 chassis? (This is a 6509 below) If this should all go to JIRA instead then can someone just let me know if I should split it into individual reports or not? Happy to do it, just want to follow the rules correctly :) Cheers as always! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

3 4

Netflow Integration
by Dimitar, GlobeIX 21 Sep '14

21 Sep '14

Hi guys, Let me thank you for paying attention to my previous email about "User/Client Account Login Interface" in the first place. I have another one. Does Observium offer any functionality and/or integration with Nfsen, Flowviewer or any other Netflow client/collector? Best Regards Dimitar GlobeIX E-Mail: da(a)globeix.net Tel: 1-212-671-0112; Mobile: +1-646-400-1119 Instant Messengers: ICQ: 28348789; MSN: dimitar(a)avramov.com; Skype: (Aeromit) Dimitar Avramov

3 2

Physical Memory vs Virtual Memory
by Darian Jimenez 19 Sep '14

19 Sep '14

Why is it that virtual memory is twice the physical memory for a server? Seems like the physical shows the right amount.

8 12

Re: [Observium] FW: FTOS 9.4 not working properly with Observium whereas 8.3.12.0 for Force10 switches
by Adam Armstrong 18 Sep '14

18 Sep '14

4 5

Higher values of ping statistics in Observium
by Arya, Renuka [BSD] - MED 18 Sep '14

18 Sep '14

Hi Team, I was looking into the ping statistics in All Devices ----- > Graphs --- > Ping. I understand this is the ping statistics between my Observium server and the network device. I am seeing really high values for the ping statistics. Almost ~ 600 ms for some Arista 7050-64R and for others spikes as high as ~7 secs. In actual, the RTT between the Observium server and these devices should by around 0.4-0.5 ms. Please see the attachment. Thanks ! Regards Renuka ________________________________ This email is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this email message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this email in error, please notify the sender and destroy/delete all copies of the transmittal. Thank you.

2 2

Re: [Observium] The ports on the switches doesn't seems to display correct network throughput
by Adam Armstrong 18 Sep '14

18 Sep '14

2 1

Re: [Observium] Odd real time graph behavior
by Adam Armstrong 18 Sep '14

18 Sep '14

1 0

Re: [Observium] No port names in traffic accounting
by Adam Armstrong 18 Sep '14

18 Sep '14

1 0

weird mssql polling issue
by Simon Smith 18 Sep '14

18 Sep '14

Hi All does anyone have an idea why one of our machines is take 182s to do a poll? for some reason its doing a poll for mssql, yet when i look in the config modules its disabled? I’ve attached screenshots showing my issue is the a way i can debug whats going on and why its doing this? i did a manual ./discovery.php -h 43 and that doesn’t seem to show anything about mssql anything else maybe I’m missing? regards Simon

1 0

Alerts and e-mails
by Heironimus, Brian 17 Sep '14

17 Sep '14

Hello I have installed the software about 4 months ago. I have not been able to get the alerts to work at all. I do not have any of the alert pages in the drop down menu. In fact the only alert page that exists is http://192.168.1.31/add_alert_check. http://192.168.1.31/alerts, http://192.168.1.31/alert_checks and http://192.168.1.31/alert_Log just take me back to the homepage. I also do not see any of the alert HTML files under /opt/observium/html/pages except for Add_alert_check. I also have not been able to set it up to e-mail. I just update to 0.14.4.5229 this morning. I was on the May or June release. Thanks for the help, Brian Heironimus

4 4

Re: [Observium] confirm cecaf010d71bb02e45468eb5660a71210fd4f6ad
by Dimitar, GlobeIX 17 Sep '14

17 Sep '14

Hi guys, I just subscribed, I'm reviewing the Demo and wanted to ask: - Does Observium has user/client account login interface, as I was not able to find one? - Does the sub-section "Peering" in "Ports" visualize data collected on a Layer 2 peering switch for example? Best Regards Dimitar On Sep 17, 2014, at 1:46 PM, observium-request(a)observium.org wrote: > Mailing list subscription confirmation notice for mailing list > observium > > We have received a request from 192.168.122.1 for subscription of your > email address, "da(a)globeix.net", to the observium(a)observium.org > mailing list. To confirm that you want to be added to this mailing > list, simply reply to this message, keeping the Subject: header > intact. Or visit this web page: > > http://postman.memetic.org/cgi-bin/mailman/confirm/observium/cecaf010d71bb0… > > > Or include the following line -- and only the following line -- in a > message to observium-request(a)observium.org: > > confirm cecaf010d71bb02e45468eb5660a71210fd4f6ad > > Note that simply sending a `reply' to this message should work from > most mail readers, since that usually leaves the Subject: line in the > right form (additional "Re:" text in the Subject: is okay). > > If you do not wish to be subscribed to this list, please simply > disregard this message. If you think you are being maliciously > subscribed to the list, or have any other questions, send them to > observium-owner(a)observium.org. Dimitar GlobeIX E-Mail: da(a)globeix.net Tel: 1-212-671-0112; Mobile: +1-646-400-1119 Instant Messengers: ICQ: 28348789; MSN: dimitar(a)avramov.com; Skype: (Aeromit) Dimitar Avramov

1 0

Backwards switches
by Ryan McCully 17 Sep '14

17 Sep '14

Hi Everyone My switches are showing inbound traffic as outbound and outbound as inbound on Observium. I suspect it may be something to do with the SNMP in the switches that can't be changed therefore is it possible to swap the two on observium? My router which is also monitored by observium shows inbound and outbound correctly. Thanks Ryan

2 2

Re: [Observium] Problem with the Mail Alerting
by Matt Ladewig 17 Sep '14

17 Sep '14

New feature would be needed- Individual alert checker email address. That way one alert checker could be setup to match on .us.domain devices and send to the US NOC email address. A second checker then would be created to send .jp.domain devices to the JP NOC email address. Feature requests 876 and 988 would take care of it. Matt -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: Tuesday, September 16, 2014 9:30 AM To: Observium Network Observation System Subject: Re: [Observium] Problem with the Mail Alerting On 2014-09-16 17:15, Chip Pleasants wrote: > Is there a way to set an contact/email per device name scheme? So > lets say I want wanted .us.domain.com [2] names to go to the US NOC > and the jp.domain.com [3] names to go to the Japan NOC? Sounds like > you can set a different email per device, but that real hard to manage > if you have a lot devices. I wouldn't even know where to start doing something like that... :D adam. _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

Alerts for down state
by Bruce Reeves 16 Sep '14

16 Sep '14

I have been trying a few combinations of the wiki examples for alerts and most work, but a simple down state keeps eluding me in defining an alert. Does anyone have an example they'd could share of it working? Sent while mobile, please excuse typos.

2 2

PHP Vulnerabilities on Ubuntu LTS
by Adam Armstrong 16 Sep '14

16 Sep '14

Hi Guys, Update if you need to : http://securityaffairs.co/wordpress/28294/security/flaws-php5-ubuntu.html i.e., if you're using ubuntu! adam.

1 0

Changing Alert checking frequency
by Darian Jimenez 15 Sep '14

15 Sep '14

I've setup a couple of alerts however I don't see a way to have the alerts email sent out say every 5 minutes or w/e if the alert is triggered. Is there a way to cahnge this? I have a server which triggered an alert and last time alerted is more than 30 minutes ago.

1 0

Monitoring services
by Darian Jimenez 15 Sep '14

15 Sep '14

Is there any way that observium can monitor windows services ? Sent from my iPhone

2 4

postif mailq alerter
by Franjo Posavec 15 Sep '14

15 Sep '14

Hi, what is best way to set alert for postfix mailq? with linux-agent, or via snmp? P.S. Using paid version Best regards, -- Franjo Posavec system administrator entitas d.o.o. T: +385 (0)40 600 002 S: franjo.posavec

2 2

Interface description parser issues
by Chard, Alex (REA-SYD) 14 Sep '14

14 Sep '14

Hi All, Wondering if anyone can help with this... I have Observium setup on about 30 switches and routers. The only feature I haven't been able to get working is the tagging interfaces based on description as Transit, peering etc. As an example, this is one of our Internet transit interfaces: interface GigabitEthernet0/1 description Transit: {14379} (Pipe Networks AS24130) [100Mbit] Observium tells me: Total Graph for ports of type : Transit None found. Any ideas why this might not work? Many thanks, Alex Chard This e-mail is for the use of the intended recipient(s) only. If you have received this e-mail in error, please notify the sender immediately and then delete it. If you are not the intended recipient, you must not use, disclose or distribute this e-mail without the author's permission. We have taken precautions to minimise the risk of transmitting software viruses, but we advise you to carry out your own virus checks on any attachment to this e-mail. We cannot accept liability for any loss or damage caused by software viruses.

2 2

Re: [Observium] f5 bandwidth
by Zhenhui Liang 13 Sep '14

13 Sep '14

>From switch port side which connect to our f5, I can clearly see traffic is at 500M bps. Just from f5 side, it seems not polling correct at all. Thanks. On 9/12/14, 1:11 PM, "Zhenhui Liang" <ZhenhuiLiang(a)eharmony.com> wrote: >Hi, > >We have several f5 load balancers added. But from observium ui, I saw >they report traffic way lower than what f5¹s own guy replies. The >difference is quite huge. >From observium, each interface shows bandwidth usage like less than 1M >bps. >From f5, it shows several hundreds of mega bps. >Although from f5¹s dashboard, it¹s hard to understand, it doesn¹t say >which interface etc, it simply say out, in client side, server side etc. > >Also from observium, it reports each interface as 10Mbps. > >Do we know if F5 is broken? > >Thanks. > > ‹Zhenhui >_______________________________________________ >observium mailing list >observium(a)observium.org >http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

2 2

Need assistance adding an application...
by Christopher K. Brown 13 Sep '14

13 Sep '14

Anyone familiar with adding an application? I think I have everything the documentation said to do in place, and I followed the example of a patch (asterix) that added an application, but I cannot get the web GUI to display the new app in the Apps tabs and dropdowns. I have an application that spits out data in the right place...I can telnet to the polling port and the output includes my new data with the proper <<< >>> header. So I'm thinking I may have to add a row to the applications table in the observium database? Is that a necessary step? The php looks like it needs an 'app_id' from somewhere. Thanks for any assistance.

2 1