Uploaded image for project: 'Observium'
  1. Observium
  2. OBS-529

Syslog: Additional Field in Device Properties for Setting up the IP AND Hostname

Details

    • Improvement
    • Resolution: Won't Fix
    • Minor
    • None
    • None
    • Web Interface
    • Debian 6

    Description

      APC Network products and some other vendors sending the IP Address instead of the hostname in their syslog message header. so observium will not recognize them because only the hostname can be set an will be recognized.

      Improvment?
      Additional Field in Device Properties for Setting up the IP AND the Hostname so Observium will display the syslog messages coming from hosts sending the ip address in the syslog message header

      Attachments

        Activity

          [OBS-529] Syslog: Additional Field in Device Properties for Setting up the IP AND Hostname
          techsiag Adrian added a comment -

          works for me and my APC UPS if i use this with rsyslogd:

          $ModLoad omprog
          $ActionOMProgBinary /opt/observium/syslog.php

          $template observium,"%fromhost-ip%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year%%$month%%$day% %timereported:8:25%||%msg%||%programname%\n "
          . :omprog:;observium

          techsiag Adrian added a comment - works for me and my APC UPS if i use this with rsyslogd: $ModLoad omprog $ActionOMProgBinary /opt/observium/syslog.php $template observium,"%fromhost-ip%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year% %$month% %$day% %timereported:8:25%||%msg%||%programname%\n " . :omprog:;observium
          ivo443 Ivo Syfrig added a comment -

          Sorry Adam, me again.

          Found everything.. all IP's are shown in the DB. but ...
          I have to Match the "device_id" from the Table "devices" to the IP Address
          in Table "ipv4_addresses" (ipv4_address_id or ipv4_address or whatever)

          The problem is that I get the IP Adresse instead of the Hostname in the Syslog Message from the Hosts.
          Seems to be normal on certain Hardware (APC, Fortinet and so on)
          PTR/A DNS records are fine..resolving.

          Sample of the malformed Address
          Oct 15 11:06:54 192.168.XX.XX Hostd: [2013-10-15 11:06:54.338

          If I don't get a matching with the hostname there are no messages shown under the GUI Tab "Syslog"

          any help would be very appreciated

          Thank you
          Ivo

          ivo443 Ivo Syfrig added a comment - Sorry Adam, me again. Found everything.. all IP's are shown in the DB. but ... I have to Match the "device_id" from the Table "devices" to the IP Address in Table "ipv4_addresses" (ipv4_address_id or ipv4_address or whatever) The problem is that I get the IP Adresse instead of the Hostname in the Syslog Message from the Hosts. Seems to be normal on certain Hardware (APC, Fortinet and so on) PTR/A DNS records are fine..resolving. Sample of the malformed Address Oct 15 11:06:54 192.168.XX.XX Hostd: [2013-10-15 11:06:54.338 If I don't get a matching with the hostname there are no messages shown under the GUI Tab "Syslog" any help would be very appreciated Thank you Ivo

          There is are tables in the database which store all IPs associated with hosts. ipv4_addresses is the one which stores IPv4 information.

          adama Adam Armstrong added a comment - There is are tables in the database which store all IPs associated with hosts. ipv4_addresses is the one which stores IPv4 information.
          ivo443 Ivo Syfrig added a comment -

          Hi Adam,

          sorry this maybe stupid question:
          What do you mean with " existing ipv4_address table"
          Which table?

          thx
          Ivo

          ivo443 Ivo Syfrig added a comment - Hi Adam, sorry this maybe stupid question: What do you mean with " existing ipv4_address table" Which table? thx Ivo

          This is better accomplished by using the existing ipv4_address table.

          Also, we will close any tickets which consist of nothing more than "add this feature kthnxbai".

          adama Adam Armstrong added a comment - This is better accomplished by using the existing ipv4_address table. Also, we will close any tickets which consist of nothing more than "add this feature kthnxbai".

          People

            adama Adam Armstrong
            ivo443 Ivo Syfrig
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: