- observium - lists.observium.org

wmi issues, need a syntax change
by Tony Guadagno 13 Apr '22

13 Apr '22

Hi, I am guessing that wmi polling is not used very much but I do use it and find it handy. If you do use it, you are probably aware that your event logs are filling up with this error: The server-side authentication level policy does not allow the user domain\wmiuser SID (S-1-5-21-99999-3660327915-2769000259-31856) from address 1.1.1.1 to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application. I am getting 4 eventlog errors every polling interval (5 minutes) on every windows server. This is due to Microsoft enhancing security on wmi. (KB5004442-Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414) (microsoft.com)<https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-wind…>) There is a solution to this, you need to call wmi with pkt integrity enabled (wmic RPC_C_AUTHN_LEVEL_PKT_INTEGRITY support · Issue #41 · greenbone/openvas-smb (github.com)<https://github.com/greenbone/openvas-smb/issues/41>). So, for example wmic --user=domain.local\\user --password= //server.domain.local "select * from Win32_ComputerSystem" - throws the error in the target servers event log...also, this will start failing next year. However wmic --user=domain.local\\user --password= //ncacn_ip_tcp:server.domain.local[sign] "select * from Win32_ComputerSystem" will not throw the error wrapping the target server in ncacn_ip_tcp: and [sign] fixes the issue. So, would it be possible for you to enhance Observium to make the wmi calls this way? Thanks Tony

5 8

ping only device monitoring
by Tony Guadagno 13 Apr '22

13 Apr '22

Hi, I know this has been asked and answered before, but I cannot find anywhere to search old threads, so I need to ask again.... How do I configure Observium to monitor a device with ping but no SNMP ability? Thanks Tony

2 2

Date Preset
by Stuart Dyer 13 Apr '22

13 Apr '22

Hi Everyone, Does anyone know how to change the default date present [cid:image001.png@01D84E76.FA5F0BB0] When viewing a graph I would like the default graph to be the last Calendar month e.g if it is march show April 1 to 30 Regards, Stuart Dyer IT Administrator Phone: +61 2 8020 2063 | E-mail: stuart.dyer(a)innovit.com<mailto:stuart.dyer@innovit.com> [innovit-logo (002) trans 2018] Bringing quality to Master Data MLC Centre, Level 56 19-29 Martin Place <https://goo.gl/maps/2yiiJ2YC4H9SBjYX6> Sydney NSW 2000<https://goo.gl/maps/2yiiJ2YC4H9SBjYX6> Tel: +612 8020 2000 Fax: +612 8020 2099 Web: www.innovit.com<http://www.innovit.com/> Australasia | North America | Europe Follow us on LinkedIn<https://www.linkedin.com/company/innovit-australia-pty-ltd?trk=public_profi…> This electronic mail is solely for the use of the addressee and may contain information, which is confidential or privileged. If you receive this electronic mail in error, please delete it from your system immediately and notify the sender by electronic mail or using any of the following contact details.

3 3

FW: Total Core Traffic
by Peter Derissen 12 Apr '22

12 Apr '22

Hello, We have a lot of core links in our network. The total graphs are show on top. [cid:image001.png@01D84A72.89424B20] When I click on 1 of the graphs I get an error. [cid:image002.png@01D84A72.89424B20] When I check the URL I see that its very long. Could that be the problem and is there a way I can fix that? https://10.230.11.81/graphs/type=multi-port_bits_separate/to=1649323537/id=… Met vriendelijke groet, Peter Derissen Eurofiber Nederland Network Engineer Safariweg 25-31 +31 (0)6 11587110 3605 MA Maarssen [cid:image003.png@01D84A72.89424B20]<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eurof…> Volg ons op Twitter<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.c…> | Linkedin<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> | Facebook<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> | Youtube<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> Wilt u op de hoogte blijven van technische ontwikkelingen aan ons netwerk, nieuwe ICT ontwikkelingen en klantervaringen? Meld u dan aan voor onze maandelijkse nieuwsbrief<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmarketing…>. [cid:image004.jpg@01D84A72.89424B20]<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eurof…> ******** IMPORTANT NOTICE ******** This e-mail (including any attachments) may contain information that is confidential or otherwise protected from disclosure and it is intended only for the addressees. If you are not the intended recipient, please note that any copying, distribution or other use of information contained in this e-mail (and its attachments) is not allowed. If you have received this e-mail in error, kindly notify us immediately by telephone or e-mail and delete the message (including any attachments) from your system. Please note that e-mail messages may contain computer viruses or other defects, may not be accurately replicated on other systems, or may be subject of unauthorized interception or other interference without the knowledge of sender or recipient. Eurofiber only sends and receives e-mails on the basis that Eurofiber is not responsible for any such computer viruses, corruption or other interference or any consequences thereof. Eurofiber Nederland B.V. is registered in the Chamber of Commerce of Amsterdam with number 34134377, VAT number NL 8088.51.524 B01. Eurofiber N.V. has its registered office at Belgicastraat 5 bus 7, 1930 Zaventem and is registered under national number 0435.204.851. Eurofiber France has its registered office at 21 Avenue de la Cr?ativit?, 59650 Villeneuve d'Ascq and is registered under national number FR 83.822.249.074.

6 16

Monitoris MSSQL database size
by Rando Sui 12 Apr '22

12 Apr '22

Hello, How do you monitor MSSQL specific measures, I would like to monitor Database size, how do you do that? Could I add database size to my Apps SQL server charts list? [cid:image002.png@01D84E8D.80A79050] Is there any indirect method, I gather7inject data to observium mysql and just display data from database and issue alerts? Greetings, Rando.

1 0

Ubuntu LDAP
by Valerie Lim 11 Apr '22

11 Apr '22

Hi, We would like to check does installing Observium affect any LDAP Ubuntu settings as we are unable to access LDAP server after Observium is being installed. Appreciate share with us, to configure setting config.php file in Observium systems. Regards Valerie

1 0

Re: [Observium] need some help with an alert checker
by Tony Guadagno 07 Apr '22

07 Apr '22

Adam, thanks, I will give this a shot Tony From: Adam Armstrong via observium Sent: Thursday, April 7, 2022 4:04 PM To: 'Observium' Cc: Adam Armstrong Subject: Re: [Observium] need some help with an alert checker Hi Tony, https://docs.observium.org/entities/#status You want something like association status_descr equals Source of Output Power test conditions status_name notequals normal adam. From: observium <observium-bounces(a)observium.org> On Behalf Of Tony Guadagno via observium Sent: 07 April 2022 20:34 To: Adam Armstrong via observium <observium(a)observium.org> Cc: Tony Guadagno <tonyg(a)guadagno.org> Subject: [Observium] need some help with an alert checker Hi, I have been able to write some basic checks but I need a little help with this. I want to write a check to alert when my ups’ switch to battery. I think I can do that by checking if the “source of output power” is not normal, but I do not know how to translate that logic into conditions and associations..can someone help? Thanks BTW, is there an exchange where people post their checks for others to use? Tony

1 0

need some help with an alert checker
by Tony Guadagno 07 Apr '22

07 Apr '22

Hi, I have been able to write some basic checks but I need a little help with this. I want to write a check to alert when my ups’ switch to battery. I think I can do that by checking if the “source of output power” is not normal, but I do not know how to translate that logic into conditions and associations..can someone help? Thanks BTW, is there an exchange where people post their checks for others to use? Tony

2 1

Observium - how to encrypt data at rest with AES 256
by Ryan Tee 05 Apr '22

05 Apr '22

Hi. Would like to inquire followings : How to encrypt data at rest with AES256 in Observium systems ? We plan to use 256-bit AES encryption ensures data is secure at rest. Could share with us information if any. Thank you. Regards Ryan

3 4

Observium - database Security Server and TCP database port uses TLS v1.2 or above for communications
by Ryan Tee 05 Apr '22

05 Apr '22

Hi , We would like to check followings in Observium systems. How to make sure that, in Observium systems, database Security Server and TCP database port uses TLS v1.2 or above for communications. This is to ensure communication is secured. Appreciate share with us, to configure setting config.php file in Observium systems. Regards Ryan [cid:image001.png@01D84810.72D22180]

3 4