Great. We are waiting for the templates.gninja wrote:I've got a set of templates that polls the ESA for ~25 more data points and graphs them. I'm making sure I've got authorization to release the poller script (hits the status xml page instead of the snmp daemon), and then I'll post it all.
IF I don't get authorization, I'll still release the template and just tell you what the script does, it's pretty simple.
IronPort C10 Mail & Spam Appliance
Moderators: Developers, Moderators
Any update on this? Will you be able to share the templates?gninja wrote:I've got a set of templates that polls the ESA for ~25 more data points and graphs them. I'm making sure I've got authorization to release the poller script (hits the status xml page instead of the snmp daemon), and then I'll post it all.
IF I don't get authorization, I'll still release the template and just tell you what the script does, it's pretty simple.
Looks like I'll be able to share everything, but I've got to wait for one of our law-people to get back from xmas vacation so he can tell me if I need to make sure the company name is up near the top of the poller script, in bold letters. Or if I need to make sure the company name isn't associated with it at all.
Sorry about the delay.
Sorry about the delay.
FreeBSD/RHEL
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
Poller script and xml templates!
Here you go, gents.
XML template is built off of superdave913's original template, but there's a lot more information here. Shiny shiny information.
Device is polled both through snmp and through the web ui. Polling appears to introduce minimal to no load to the box, though that may change if you disable http and force https polling.
You'll need to update the data input method to reflect your esa admin password.
EDIT: updated to v1.1 of the poller script to automatically handle http and https. http is tried first, if it fails, https is tried. If that fails, then it exits.
XML template is built off of superdave913's original template, but there's a lot more information here. Shiny shiny information.
Device is polled both through snmp and through the web ui. Polling appears to introduce minimal to no load to the box, though that may change if you disable http and force https polling.
You'll need to update the data input method to reflect your esa admin password.
EDIT: updated to v1.1 of the poller script to automatically handle http and https. http is tried first, if it fails, https is tried. If that fails, then it exits.
- Attachments
-
- cacti_host_template_ironport_email_security_appliance.xml
- (285.44 KiB) Downloaded 3970 times
-
- cacti_check_esa.py.gz
- Python poller script for IronPort ESAs
- (1.01 KiB) Downloaded 3456 times
Last edited by gninja on Thu Jan 10, 2008 5:48 pm, edited 1 time in total.
FreeBSD/RHEL
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
-
- Cacti User
- Posts: 379
- Joined: Fri Feb 16, 2007 11:37 am
- Location: Emeryville, CA
- Contact:
Gninja,
I would love new scripts for my IronPort devices. One question, your script is a python script, i assume that i need to install Python on my cacti server?
Do you have pictures of the graphs produced?
thanks
app
I would love new scripts for my IronPort devices. One question, your script is a python script, i assume that i need to install Python on my cacti server?
Do you have pictures of the graphs produced?
thanks
app
[b]Cacti Version[/b] - 0.8.7b
[b]Plugin Architecture[/b] - 2.2 Beta
[b]Poller Type[/b] - CMD.php
[b]Server Info[/b] - Linux 2.6.9-78.0.1.ELsmp
[b]Web Server[/b] - Apache/2.0.52 (Red Hat)
[b]PHP[/b] - 4.3.9
[b]MySQL[/b] - 4.1.22
[b]RRDTool[/b] - 1.2.23
[b]SNMP[/b] - 5.1.2
[b]Plugins[/b][list]Global Plugin Settings (settings - v0.5)
SuperLinks (superlinks - v0.72)
Host Info (hostinfo - v0.2)
Report Creator (reports - v0.3)
Update Checker (update - v0.4)
Realtime for Cacti (realtime - v0.35)
Cacti Log View (clog - v1.1)
RRD File Cleaner (rrdclean - v0.36)
Network Discovery (discovery - v0.9)
Uptime (uptime - v0.4)[/list]
[b]Plugin Architecture[/b] - 2.2 Beta
[b]Poller Type[/b] - CMD.php
[b]Server Info[/b] - Linux 2.6.9-78.0.1.ELsmp
[b]Web Server[/b] - Apache/2.0.52 (Red Hat)
[b]PHP[/b] - 4.3.9
[b]MySQL[/b] - 4.1.22
[b]RRDTool[/b] - 1.2.23
[b]SNMP[/b] - 5.1.2
[b]Plugins[/b][list]Global Plugin Settings (settings - v0.5)
SuperLinks (superlinks - v0.72)
Host Info (hostinfo - v0.2)
Report Creator (reports - v0.3)
Update Checker (update - v0.4)
Realtime for Cacti (realtime - v0.35)
Cacti Log View (clog - v1.1)
RRD File Cleaner (rrdclean - v0.36)
Network Discovery (discovery - v0.9)
Uptime (uptime - v0.4)[/list]
Yes, you would need to install python to run the script.
You could also look through it and rewrite it in php or perl if that is better for you. It's not a very complex poller script.
List of graphs in the host template:
Traffic (displays average and peak)
Hard Bounce - 5xx
Hard Bounce - DNS
Hard Bounce - Expired
Hard Bounce - Filter
Soft Bounce - Events
Connections In/Out
CPU Usage
Disk IO
Dns Requests - Outstanding/Pending
Gen Bounce Recipients
Global Unsub Hits
Mail Transfer Threads
Memory Usage
Messages Dropped
Messages in Work Queue
Messages Injected
Open Files/Sockets
Queue Utilization
Recipients Completed
Recipients Deleted
Recipients Injected
Recipients Other - Hard bounce
Recipients Rejected
Ping Latency
I'll see what I can do about posting images later.
You could also look through it and rewrite it in php or perl if that is better for you. It's not a very complex poller script.
List of graphs in the host template:
Traffic (displays average and peak)
Hard Bounce - 5xx
Hard Bounce - DNS
Hard Bounce - Expired
Hard Bounce - Filter
Soft Bounce - Events
Connections In/Out
CPU Usage
Disk IO
Dns Requests - Outstanding/Pending
Gen Bounce Recipients
Global Unsub Hits
Mail Transfer Threads
Memory Usage
Messages Dropped
Messages in Work Queue
Messages Injected
Open Files/Sockets
Queue Utilization
Recipients Completed
Recipients Deleted
Recipients Injected
Recipients Other - Hard bounce
Recipients Rejected
Ping Latency
I'll see what I can do about posting images later.
FreeBSD/RHEL
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
gninja, first of all thank you for sharing this template (nice work). However, it seems to me that it does not work if https is enabled instead of http. I get the following error when try to use your script with https:gninja wrote:List of graphs in the host template:
Traceback (most recent call last):
File "./cacti_check_esa.py", line 52, in ?
client = urllib2.urlopen(url)
File "/usr/lib/python2.4/urllib2.py", line 130, in urlopen
return _opener.open(url, data)
File "/usr/lib/python2.4/urllib2.py", line 358, in open
response = self._open(req, data)
File "/usr/lib/python2.4/urllib2.py", line 376, in _open
'_open', req)
File "/usr/lib/python2.4/urllib2.py", line 337, in _call_chain
result = func(*args)
File "/usr/lib/python2.4/urllib2.py", line 1021, in http_open
return self.do_open(httplib.HTTPConnection, req)
File "/usr/lib/python2.4/urllib2.py", line 996, in do_open
raise URLError(err)
urllib2.URLError: <urlopen error (111, 'Connection refused')>
The same executed with http enabled on the interface works fine.
You have mentioned that the admin password is hardcoded in the Data Input method. What do you advise to do when using 9 IronPort appliances and almost every unit has its own admin password?
Thanks,
AL
Try editing line 45 of the script, changing http to https. If that doesn't work, I'll see what needs to be changed, tomorrow, as well as getting it updated to handle both.aleu wrote:gninja, first of all thank you for sharing this template (nice work). However, it seems to me that it does not work if https is enabled instead of http. I get the following error when try to use your script with https:gninja wrote:List of graphs in the host template:
Hrm, I'll update the template to have that set at the data source level, tomorrow.aleu wrote: You have mentioned that the admin password is hardcoded in the Data Input method. What do you advise to do when using 9 IronPort appliances and almost every unit has its own admin password?
FreeBSD/RHEL
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
Hmm, lame me Correcting this entry worked of course. I should have noticed that.gninja wrote:Try editing line 45 of the script, changing http to https. If that doesn't work, I'll see what needs to be changed, tomorrow, as well as getting it updated to handle both.
Great. Thanks again.gninja wrote:Hrm, I'll update the template to have that set at the data source level, tomorrow.
-
- Cacti User
- Posts: 379
- Joined: Fri Feb 16, 2007 11:37 am
- Location: Emeryville, CA
- Contact:
GNinja,
These look great. I am having a problem though with some of the graphs, most of them actually. I am getting the following in the error log:
The one for DS8225, i know why i am getting that error message, it is because the C30s that we have no longer have the Temperature sensors, so i need to disable that check. The other ones, i don't understand what is going on. When i try and run the script manually:
i get the following results:
so it appears that the data is able to be gathered, but for some reason, it is not getting passed to the proper items.
Can you offer any assistance with this? Should i post a full debug log of a poller pass?
let me know
thanks
app
These look great. I am having a problem though with some of the graphs, most of them actually. I am getting the following in the error log:
Code: Select all
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8231] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8230] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8219] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8224] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8234] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8222] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8240] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8239] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8245] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8244] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8243] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8242] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8241] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8236] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:26 AM - CMDPHP: Poller[0] Host[278] DS[8217] WARNING: Result from SNMP not valid. Partial Result:
01/11/2008 07:15:25 AM - CMDPHP: Poller[0] Host[278] DS[8218] WARNING: Result from SNMP not valid. Partial Result:
01/11/2008 07:15:25 AM - CMDPHP: Poller[0] Host[278] DS[8221] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:25 AM - CMDPHP: Poller[0] Host[278] DS[8220] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:25 AM - CMDPHP: Poller[0] Host[278] DS[8223] WARNING: Result from CMD not valid. Partial Result:
01/11/2008 07:15:25 AM - CMDPHP: Poller[0] Host[278] DS[8225] WARNING: Result from SNMP not valid. Partial Result:
Code: Select all
e:\python25\python.exe cacti_check_esa.py -p XXXXXX 10.4.200.20
i get the following results:
Code: Select all
inj_msgs:18216117 inj_recips:20781516 gen_bounce_recips:4465172 rejected_recips:1336329 dropped_msgs:503936 soft_bounced_evts:3755723 completed_recips:20213813hard_bounced_recips:7342624 dns_hard_bounced_recips:157890 5xx_hard_bounced_recips:2402225 filter_hard_bounced_recips:4166702 expired_hard_bounced_recips:615807 other_hard_bounced_recips:0 delivered_recips:12870849 deleted_recips:340 global_unsub_hits:0 conn_in:2 conn_out:0
Can you offer any assistance with this? Should i post a full debug log of a poller pass?
let me know
thanks
app
[b]Cacti Version[/b] - 0.8.7b
[b]Plugin Architecture[/b] - 2.2 Beta
[b]Poller Type[/b] - CMD.php
[b]Server Info[/b] - Linux 2.6.9-78.0.1.ELsmp
[b]Web Server[/b] - Apache/2.0.52 (Red Hat)
[b]PHP[/b] - 4.3.9
[b]MySQL[/b] - 4.1.22
[b]RRDTool[/b] - 1.2.23
[b]SNMP[/b] - 5.1.2
[b]Plugins[/b][list]Global Plugin Settings (settings - v0.5)
SuperLinks (superlinks - v0.72)
Host Info (hostinfo - v0.2)
Report Creator (reports - v0.3)
Update Checker (update - v0.4)
Realtime for Cacti (realtime - v0.35)
Cacti Log View (clog - v1.1)
RRD File Cleaner (rrdclean - v0.36)
Network Discovery (discovery - v0.9)
Uptime (uptime - v0.4)[/list]
[b]Plugin Architecture[/b] - 2.2 Beta
[b]Poller Type[/b] - CMD.php
[b]Server Info[/b] - Linux 2.6.9-78.0.1.ELsmp
[b]Web Server[/b] - Apache/2.0.52 (Red Hat)
[b]PHP[/b] - 4.3.9
[b]MySQL[/b] - 4.1.22
[b]RRDTool[/b] - 1.2.23
[b]SNMP[/b] - 5.1.2
[b]Plugins[/b][list]Global Plugin Settings (settings - v0.5)
SuperLinks (superlinks - v0.72)
Host Info (hostinfo - v0.2)
Report Creator (reports - v0.3)
Update Checker (update - v0.4)
Realtime for Cacti (realtime - v0.35)
Cacti Log View (clog - v1.1)
RRD File Cleaner (rrdclean - v0.36)
Network Discovery (discovery - v0.9)
Uptime (uptime - v0.4)[/list]
Sorry I missed it when you posted this originally. If you're still having problems, let me know and I'll see what I can figure out.apperrault wrote: Can you offer any assistance with this? Should i post a full debug log of a poller pass?
FreeBSD/RHEL
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
The poller script should work just fine on the S650 WSA. Try it out, if it doesn't work, I'll track one down and figure out what the problem is.spoonman wrote:Has anyone dealt with an IronPort S650 WebSecurity appliance...We just got one and would like to get some info stats from it??
FreeBSD/RHEL
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
cacti-0.8.7i, spine 0.8.7i, PIA 3.1+boost 5.1
MySQL 5.5/InnoDB
RRDtool 1.2.27, PHP 5.1.6
Who is online
Users browsing this forum: No registered users and 0 guests