Johan,
Try deleting the rule and adding it again.
That warning is a sing of something nor correctly working.
Javier
[EMAIL PROTECTED] wrote:
only one trigger rule : (I notice this warning) : under trigger rules administration Triggers Administration More Less Add
Action ID Description Type Edit Del View Rules 2 Interface Status Change Match Alarms Match Events
under : view rules :
Action ID Position Field Operator Value Action Action Parameters if Match Edit Del 2 10 If is Not In Warning: call_user_func_array(): First argumented is expected to be a valid callback, '' was given in d:\jffnms\lib\gui.controls.inc.php on line 529 Then Send Mail Subject: <interface-client_shortname> < Comment: Default Trigger Continue And
Greetz,
Johan
----- Original Message ----- From: "Javier Szyszlican" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, July 07, 2004 5:14 PM
Subject: Re: [jffnms-users] Re: cpu values not discovered on cisco 800
Hi Johan,
If you want to limit a user by a customer interfaces, you have to create a customer, thats right. But you could have used a map, or used the Customer access directly (only to the performance graphs).
You don't have to touch 'Different Alarm for UP event' thats an internal parameter that will not affect the triggers.
The trigger system should be sending you all the events you filtered with the rules.
What trigger rules do you have? are they event or alarm rules?
As for the limits, a (Customer Limited) User should only see its stats in the Start Page, and it can only change a few profile options, it can see them all, but it can't change them. Profile options are defined in a Menu, so you can modify them.
Javier
[EMAIL PROTECTED] wrote:
Hi,
It seems to work too : i figured out that i have to make for same client
a
customer AND a user : so this works too. Next : I notice that I only
get
alerts when the interfaces go down : is it possible to receive an alert
too
when the interface comes up ? I notice that in the Event Types Administration there is a rule Interface Protocol Big Fault Interface <interface> Protocol <state> <info> (<client> <interface-description>)
and that this causes the down messages. I notice that there is a bit further "different alarms for up event" . But when I point there for
example
"internal", I dont see anything when interfaces comes up again. What
exactly
do I ave to with this "different alarms for up event" ? Other question : Is there a way to limit the users's rights. I see that
they
receive the views/start page with all the options : where can I limit
the
topics they can see. Also users appear to have rights to edit their own profile, which i dont want : also possibility to avoid this ? ps : sorry for the number of questions, I will try to limit them :))
Greetings, Johan
----- Original Message ----- From: "Javier Szyszlican" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, July 05, 2004 3:54 AM
Subject: Re: [jffnms-users] Re: cpu values not discovered on cisco 800
Hi Johan,
You have to use Users for this.
And you CAN filter a User view by a Customer ID, use the Customer Filter profile option, and use the Customer ID as a value.
So that user will only see the customer interfaces and events.
This also works with maps using the Base Map profile option.
Javier
[EMAIL PROTECTED] wrote:
Javier,
Thx this works too. Thx a lot. Now another question :)) woops. It is
perhaps
an idea for next version : what I like to have is that customers only
can
see the statistics of their own router, this means the customers
section
(not users) and if there is a possibility that they can receive a mail
when
some of their interfaces goes down, i.e. a customers triggers
administration
and a profile for the customers. I notice that now there is a users
section
for this. You could see use the customer as user, but with user I see
all
the routers and not the only one of the customer. What I also try to
get
fixed is some kind of events integrated in the performance trends,
which
makes the customer can see that his interface goes up and down.
If you can help me, let me know
greetz,
Johan
----- Original Message ----- From: "Javier Szyszlican" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Sunday, July 04, 2004 3:15 AM
Subject: [jffnms-users] Re: cpu values not discovered on cisco 800
Hi Johan,
You should add a new poller with this OIDs in the Pollers screen, then add them to the Cisco Router Poller Group, copy all other values from the normal Cisco CPU Utilization poller.
Javier
[EMAIL PROTECTED] wrote:
Javier,
thx a lot : i get the correct bandwidth settings discovered correctly
now.
But life goes on and I have some new issues. It concerns the cpu
monitoring
of certain cisco's. With cisco 1700 series, correct values are being
given.
Nevertheless with cisco 800 series (dsl routers) memory is being
given
correctly, but with cpu no values are returned. Normally they should
use
OID
1.3.6.1.4.1.9.2.1.57.0 and OID 1.3.6.1.4.1.9.2.1.58.0. Do I have to change something in some of the scripts (which script?)
or
is
there possibility that this works by adding specific mib (in
/usr/mibs/
?)
Greetings, Johan
----- Original Message ----- From: "Javier Szyszlican" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, June 30, 2004 10:15 PM
Subject: Re: [jffnms-users] Can't get MySQL Pipe working with
syslog-ng
Claytom
Good, now add this:
destination jffnms_processing { program ("mysql -u jffnms -pjffnms jffnms <
/tmp/mysql.pipe"); };
log { source (s_jffnms); filter (f_jffnms); #if you use it destination (d_jffnms); };
And restart syslog-ng.. and show me the ps fax again.
Javier
Clayton Dukes wrote:
Yes, Sorry -- let me clarify -- perhaps I have changed it some to fit my
already
running needs (Sorry :-))
Thanks for the help!
Here's my syslog-ng.conf:
# $Header:
/home/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo,v
1.3 2003/05/12 22:43:48 msterret Exp $ # # Syslog-ng default configuration file for Gentoo Linux # contributed by Michael Sterrett #
options { use_fqdn(yes); keep_hostname(yes); use_dns(no); long_hostnames(off); sync(0); log_fifo_size(1000);
# The default action of syslog-ng 1.6.0 is to log a STATS
line
# to the file every 10 minutes. That's pretty ugly after a
while.
# Change it to every 12 hours so you get a nice daily update
of
# how many messages syslog-ng missed (0). stats(43200); };
############################ # Set up Sources ############################ source src { unix-dgram("/dev/log"); internal(); }; source net { udp(); }; source s_jffnms { unix-dgram("/dev/log"); internal(); udp(); };
############################ # Set up Destinations ############################
# System Logs destination messages { file("/var/log/messages"); }; destination authlog { file("/var/log/auth.log"); }; destination syslog { file("/var/log/syslog"); }; destination kern { file("/var/log/kern.log"); }; destination maillog { file("/var/log/maillog"); }; # Core, Dist., Access and Security Layer Logs destination corelog { file("/var/log/core.log"); }; destination accesslog { file("/var/log/access.log"); }; destination distributionlog { file("/var/log/distribution.log"); }; destination securitylog { file("/var/log/security.log"); }; destination ciscolog { file("/var/log/cisco.log"); };
# Catch-all logs destination debug { file("/var/log/debug"); };
# MySQL Logs destination d_jffnms { pipe("/tmp/mysql.pipe" template("INSERT INTO syslog (date, date_logged, host, message)
VALUES
('$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', NOW\(\), '$FU LLHOST', '$MSG');\n") template-escape(yes)); };
############################ # Set up Filters ############################
# System Filters filter f_messages { level(info .. warn) and not facility(auth,
mail,
local6,
local5, local4, local3, local0); }; filter f_authpriv { facility(auth) ; }; filter f_syslog { not facility(auth) and not facility(mail); }; filter f_kern { facility(kern); }; filter f_mail { facility(mail); };
# Core, Dist., Access and Security Layer Filters filter f_core { facility(local6); }; filter f_distribution { facility(local5); }; filter f_access { facility(local4); }; filter f_security { facility(local3); }; filter f_cisco { facility(local6, local5, local4, local3); };
# Catch-all Filters filter f_debug { not facility(kern, auth, mail, local6, local5,
local4,
local3, local0); }; filter f_emergency { level(emerg); };
# MySQL Filters # No filter for MySQL #filter f_jffnms { facility(local6); }; # not needed for now
############################ # Set up Logs ############################
# System Logs log { source(src); source(net); filter(f_messages);
destination(messages);
};
##END Syslog-ng.conf
# PS FAX:
[EMAIL PROTECTED] root]# ps fax PID TTY STAT TIME COMMAND 1 ? S 0:14 init [3] 2 ? S 0:00 [powerd] 3 ? S 0:00 [keventd] 4 ? SN 0:00 [ksoftirqd_CPU0] 5 ? SN 0:00 [ksoftirqd_CPU1] 6 ? SN 0:00 [ksoftirqd_CPU2] 7 ? SN 0:00 [ksoftirqd_CPU3] 8 ? S 0:07 [kswapd] 9 ? S 0:00 [bdflush] 10 ? S 0:22 [kupdated] 17 ? S 0:00 [scsi_eh_0] 18 ? S 0:00 [scsi_eh_1] 19 ? S 0:00 [khubd] 156 ? Ss 0:00 /sbin/devfsd /dev 355 ? S 3:07 [kjournald] 1173 ? Ss 0:00 /bin/sh /usr/bin/mysqld_safe 1244 ? S 0:07 \_ /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql 1300 ? S 0:09 \_ /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/m 1301 ? S 4:22 \_
/usr/sbin/mysqld --basedir=/usr
--datadir=/var/lib/mysql --user=mysql --pid-file=/var/r 20646 ? S 0:53 \_
/usr/sbin/mysqld --basedir=/usr
--datadir=/var/lib/mysql --user=mysql --pid-file=/var/r 1316 ? Ss 0:27 /usr/sbin/apache2 -k start -D SSL -D PHP4 20814 ? S 0:00 \_ /usr/bin/perl
/usr/sbin/apache2splitlogfile
20815 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
PHP4
20816 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
PHP4
20817 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
PHP4
20818 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
PHP4
20819 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
PHP4
20820 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
PHP4
1438 ? Ss 0:01 /usr/lib/postfix/master 1453 ? S 0:00 \_ qmgr -l -t fifo -u 21248 ? S 0:00 \_ pickup -l -t fifo -u 1509 tts/0 Ss+ 0:00 /sbin/agetty 9600 ttyS0 vt100 9384 ? S 0:00 /usr/sbin/snmpd -P /var/run/snmpd.pid 27929 ? Ss 0:00 /usr/sbin/sshd 20847 ? Ss 0:00 \_ sshd: [EMAIL PROTECTED]/1 20853 pts/1 Ss+ 0:00 | \_ -bash 21315 ? Ss 0:00 \_ sshd: [EMAIL PROTECTED]/2 21319 pts/2 Ss 0:00 \_ -bash 21343 pts/2 R+ 0:00 \_ ps fax 20644 ? S 0:00 /usr/bin/rtgpoll -t /etc/rtg/targets.cfg 20647 ? S 0:00 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20648 ? S 0:06 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20649 ? S 0:06 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20650 ? S 0:05 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20651 ? S 0:06 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20652 ? S 0:06 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20653 ? S 0:05 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20654 ? S 0:06 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20655 ? S 0:06 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20656 ? S 0:05 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20657 ? S 0:06 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
20658 ? S 0:00 \_ /usr/bin/rtgpoll -t
/etc/rtg/targets.cfg
21237 ? Ss 0:15 /usr/sbin/syslog-ng
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Javier
Szyszlican Sent: Wednesday, June 30, 2004 1:00 PM Cc: [EMAIL PROTECTED] Subject: Re: [jffnms-users] Can't get MySQL Pipe working with
syslog-ng
Clayon,
But the configuration you show here its not the same.
I mean this one:
# ---------------------------------------------------------- # #
Before
this
can work you have to do mkfifo /tmp/mysql.pipe # # ---------------------------------------------------------- #
# ---------------------------------------------------------- # # This is an example source, you may want to use your own # # ---------------------------------------------------------- #
source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); udp(ip(0.0.0.0) port(514)); };
# ---------------------------------------------------------- # #
These
are
the lines you have to add to your syslog-ng.conf # # ---------------------------------------------------------- #
destination jffnms_processing { program ("mysql -u jffnms -pjffnms jffnms <
/tmp/mysql.pipe"); };
destination d_jffnms { pipe ("/tmp/mysql.pipe" template("INSERT INTO syslog (date, date_logged, host, message)
VALUES
('$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', NOW\(\), '$FULLHOST', '$MSG' );\n") template-escape(yes)); };
# This is optional
filter f_jffnms { facility(local6); };
log { source (src); filter (f_jffnms); destination (d_jffnms); };
Also, can you show me a ps fax of your box after this is running ?
Javier
Clayton Dukes wrote:
I actually did follow those instructions verbatim, but still no
dice
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Javier
Szyszlican Sent: Wednesday, June 30, 2004 12:16 PM Cc: [EMAIL PROTECTED] Subject: Re: [jffnms-users] Can't get MySQL Pipe working with
syslog-ng
Hi Clayton,
You can also try the say suggested in the docs/unix/ folder.
Javier
Clayton Dukes wrote:
Howdy folks, I'm having trouble getting the pipe working for syslog-ng. I've read the documentation thoroughly and have the following
entries
in /etc/syslog-ng/syslog-ng.conf
source s_jffnms { unix-dgram("/dev/log"); internal(); udp(); }; destination d_jffnms { pipe("/tmp/mysql.pipe" template("INSERT INTO syslog (date, date_logged, host, message) VALUES ('$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', NOW\(\), '$FULLHOST
',
'$MSG');\n") template-escape(yes)); }; log { source(s_jffnms); destination(d_jffnms); };
and I have a shell script for the pipe:
#!/bin/sh
MYPIPE="/tmp/mysql.pipe"
if [ ! -e $MYPIPE ] ; then mkfifo $MYPIPE fi
while [ -e $MYPIPE ] ; do mysql -u jffnms --password=jffnms jffnms < $MYPIPE done
I run the script, then restart syslog-ng and then tail -f /tmp/mysql.pipe but I get no data. Anyone have any ideas?
Regards, Clayton Dukes CCNA, CCDA, CCNP, CCDP Sr. Network Engineer E Solutions Corp. http://www.esnet.com 813.301.2620 (o) 813.545.7373 (c)
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital
self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
-- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
I hope JFFNMS or I were helpful to you, if you can, please donate
at
http://jffnms.org/donate
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital
self
defense, top technical experts, no vendor pitches, unmatched
networking
opportunities. Visit www.blackhat.com _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
-- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
I hope JFFNMS or I were helpful to you, if you can, please donate at http://jffnms.org/donate
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
-- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
I hope JFFNMS or I were helpful to you, if you can, please donate at http://jffnms.org/donate
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
-- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
I hope JFFNMS or I were helpful to you, if you can, please donate at http://jffnms.org/donate
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
-- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
I hope JFFNMS or I were helpful to you, if you can, please donate at http://jffnms.org/donate
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
-- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
I hope JFFNMS or I were helpful to you, if you can, please donate at http://jffnms.org/donate
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
jffnms-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jffnms-users
