Howdy,
I wanted to thank everyone for the great support on this mailing list.
I have another puzzler…the last one I hope.
At the bottom of https://www.observium.org/docs/alerting_examples/ there are two alerts that rely on ifType eq ethernetCsmacd
For some odd reason when I rebuild they don’t want to apply to any of my devices. As soon as I change that to “*” they bring in all the devices. I went out and pulled the data on the Mikrotik router ports and they are responding with this same ifType. I checked it vis snmpwalk and also on a test router using http://ip/device/device=1/tab=port/port=1/view=data/
I’ve tried spelling out equals, wrapping ethernetCsmacd in quotes (view=data says it’s a 14 character string), and a few other things but I haven’t found the right incantation. These two entries currently match the examples and the demo server.
I’ve ensured that I have non-disabled ports and non-ignored ports that should be recognized.
&debug=1 reveals
SELECT `alert_status` FROM `alert_table` WHERE 1 AND `alert_test_id` = '7' AND (( `device_id` NOT IN (55) AND (`device_id` != ‘' AND `device_id` IS NOT NULL))) ORDER BY `device_id`, `alert_test_id`, `entity_type`, `entity_id` DESC
(not there wasn’t a LIMIT 0,100 at the end of that select like on other alerts…aside from that this select is the same as the other alerts)
Anyway that select returned 0 hits despite me having well over 100 active ports with that ifType.
Any suggestions on how to debug this further?
Thanks,
Joey
It's often useful to include screenshots of the relevant parts when asking these kinds of things. It's not uncommon for what people to write in emails not to match what they think they wrote in the alert checker :D
"ifType eq ethernetCsmacd" is definitely a valid entity match, and should match the majority of ports on most networks!
adam. On 25/01/2016 19:04:00, Joey Stanford joey@stan4d.net wrote: Howdy,
I wanted to thank everyone for the great support on this mailing list.
I have another puzzler…the last one I hope.
At the bottom of https://www.observium.org/docs/alerting_examples/ there are two alerts that rely on ifType eq ethernetCsmacd
For some odd reason when I rebuild they don’t want to apply to any of my devices. As soon as I change that to “*” they bring in all the devices. I went out and pulled the data on the Mikrotik router ports and they are responding with this same ifType. I checked it vis snmpwalk and also on a test router using http://ip/device/device=1/tab=port/port=1/view=data/
I’ve tried spelling out equals, wrapping ethernetCsmacd in quotes (view=data says it’s a 14 character string), and a few other things but I haven’t found the right incantation. These two entries currently match the examples and the demo server.
I’ve ensured that I have non-disabled ports and non-ignored ports that should be recognized.
&debug=1 reveals
SELECT `alert_status` FROM `alert_table` WHERE 1 AND `alert_test_id` = '7' AND (( `device_id` NOT IN (55) AND (`device_id` != ‘' AND `device_id` IS NOT NULL))) ORDER BY `device_id`, `alert_test_id`, `entity_type`, `entity_id` DESC
(not there wasn’t a LIMIT 0,100 at the end of that select like on other alerts…aside from that this select is the same as the other alerts)
Anyway that select returned 0 hits despite me having well over 100 active ports with that ifType.
Any suggestions on how to debug this further?
Thanks,
Joey
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
On Jan 25, 2016, at 14:08 , Adam Armstrong adama@memetic.org wrote:
It's often useful to include screenshots of the relevant parts when asking these kinds of things. It’s not uncommon for what people to write in emails not to match what they think they wrote in the alert checker :D
Copy that. I’m not used to attachments on mailing lists. :-)
"ifType eq ethernetCsmacd" is definitely a valid entity match, and should match the majority of ports on most networks!
Agh. I forgot I'd not merged the latest UI changes down to stable! If you do "svn up && ./discovery.php -u", it'll make these elements look like they're supposed to, rather than like they were designed by someone who couldn't decide between styles!
Have you run the "Rebuild" process on the navbar?
adam. On 26/01/2016 00:12:45, Joey Stanford joey@stan4d.net wrote:
On Jan 25, 2016, at 14:08 , Adam Armstrong <adama@memetic.org [mailto:adama@memetic.org]> wrote:
It's often useful to include screenshots of the relevant parts when asking these kinds of things. It’s not uncommon for what people to write in emails not to match what they think they wrote in the alert checker :D
Copy that. I’m not used to attachments on mailing lists. :-)
"ifType eq ethernetCsmacd" is definitely a valid entity match, and should match the majority of ports on most networks!
Happy Burns Night btw….
On Jan 25, 2016, at 17:15 , Adam Armstrong adama@memetic.org wrote:
Agh. I forgot I'd not merged the latest UI changes down to stable! If you do “svn up && ./discovery.php -u", it'll make these elements look like they're supposed to, rather than like they were designed by someone who couldn't decide between styles!
I have a script for that. Done.
Have you run the “Rebuild" process on the navbar?
Yes, after each attempted change. All my other rules work as expected. It’s just these two with the ifType.
Entity type is set to "device" but you need to have it on "Ports" for it to look at....ports. :D
You'll need to delete and recreate the check, as you can't change the type from the UI.
*Spencer Ryan* | Senior Systems Administrator | sryan@arbor.net *Arbor Networks* +1.734.794.5033 (d) | +1.734.846.2053 (m) www.arbornetworks.com
On Mon, Jan 25, 2016 at 7:18 PM, Joey Stanford joey@stan4d.net wrote:
Happy Burns Night btw….
On Jan 25, 2016, at 17:15 , Adam Armstrong adama@memetic.org wrote:
Agh. I forgot I'd not merged the latest UI changes down to stable! If
you do “svn up && ./discovery.php -u", it'll make these elements look like they're supposed to, rather than like they were designed by someone who couldn't decide between styles!
I have a script for that. Done.
Have you run the “Rebuild" process on the navbar?
Yes, after each attempted change. All my other rules work as expected. It’s just these two with the ifType. _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Nice catch Spencer. I was far too distracted by the old styling!
Yeah, entity type is set to device!
adam. On 26/01/2016 00:20:52, Spencer Ryan sryan@arbor.net wrote: Entity type is set to "device" but you need to have it on "Ports" for it to look at....ports. :D
You'll need to delete and recreate the check, as you can't change the type from the UI.
Spencer Ryan | Senior Systems Administrator | sryan@arbor.net [mailto:sryan@arbor.net] Arbor Networks +1.734.794.5033 (d) | +1.734.846.2053 (m) www.arbornetworks.com [http://www.arbornetworks.com/]
On Mon, Jan 25, 2016 at 7:18 PM, Joey Stanford <joey@stan4d.net [mailto:joey@stan4d.net]> wrote:
Happy Burns Night btw….
On Jan 25, 2016, at 17:15 , Adam Armstrong <adama@memetic.org [mailto:adama@memetic.org]> wrote:
Agh. I forgot I'd not merged the latest UI changes down to stable! If you do “svn up && ./discovery.php -u", it'll make these elements look like they're supposed to, rather than like they were designed by someone who couldn't decide between styles!
I have a script for that. Done.
Have you run the “Rebuild" process on the navbar?
Yes, after each attempted change. All my other rules work as expected. It’s just these two with the ifType. _______________________________________________ observium mailing list observium@observium.org [mailto:observium@observium.org] http://postman.memetic.org/cgi-bin/mailman/listinfo/observium [http://postman.memetic.org/cgi-bin/mailman/listinfo/observium]
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
On Jan 25, 2016, at 17:20 , Spencer Ryan sryan@arbor.net wrote:
Entity type is set to "device" but you need to have it on "Ports" for it to look at....ports. :D
You'll need to delete and recreate the check, as you can't change the type from the UI.
356!
Thanks Spenc…. I’m going to crawl into a hole now and be embarrassed.
For explanation, we don't allow changing of entity type from the UI because it would mess up existing associations and historical stuff in the database!
adam. On 26/01/2016 00:24:19, Joey Stanford joey@stan4d.net wrote:
On Jan 25, 2016, at 17:20 , Spencer Ryan wrote:
Entity type is set to "device" but you need to have it on "Ports" for it to look at....ports. :D
You'll need to delete and recreate the check, as you can't change the type from the UI.
356!
Thanks Spenc…. I’m going to crawl into a hole now and be embarrassed. _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
participants (3)
-
Adam Armstrong -
Joey Stanford -
Spencer Ryan