CaMM (Cacti Message Management) plugin v1.6.7 2010-08-26

mcutting · Post by **mcutting** » Fri Sep 11, 2009 5:22 am

Works great - thanks.

Glad it wasn't me going mad !

gthe · Post by **gthe** » Fri Sep 11, 2009 5:27 am

And me too!

And thank you for your patience with for my mistakes.

mcutting · Post by **mcutting** » Fri Sep 11, 2009 5:29 am

gthe - No, thank YOU for a great plugin.

mcutting · Post by **mcutting** » Sun Sep 13, 2009 10:55 am

mcutting wrote:Works great - thanks.

Glad it wasn't me going mad !

Actually gthe, the email only seems to work if forced from the rules window - the CAMM poller doesn't seem to pick this up. The rule is definitely working, as in the syslogs, I can see an email envelope icon on the right hand side, but I do not recieve any email.

If I run the rule manually, it seems to work (although it sends a load of emails, which seems to be by design)

Any ideas ?

Thanks

mcutting · Post by **mcutting** » Mon Sep 14, 2009 9:59 am

Update:

I have just created a new rule which works fine if I run it manually. However, the poller never deletes the records based on the rule match ?

gthe · Post by **gthe** » Mon Sep 14, 2009 12:51 pm

I need cacti debug log for poller and force runs.

intenso · Post by **intenso** » Tue Sep 15, 2009 12:37 am

hi,

nice tool but i have one problem with camm:

the camm syslogview never shows me any time data in the datatime row for any device!

the database i have checked, timestamps are gathered.

can anyone help me please?

thanks

gthe · Post by **gthe** » Tue Sep 15, 2009 12:43 am

intenso - try last version v1.6.4a.

mcutting · Post by **mcutting** » Tue Sep 15, 2009 2:27 am

gthe wrote:I need cacti debug log for poller and force runs.

Here we go - a bit long winded, but..

Code: Select all

RULE EXECUTED MANUALLY

09/15/2009 08:18:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:18:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:18:47 AM - camm: Poller[0] - Found count records==[1627]
09/15/2009 08:18:47 AM - camm: Poller[0] - SQL where conditions=[message like '%Cisco CallManager: 3:%' AND `syslog`.`plugin_camm_syslog`.`status`=2]
09/15/2009 08:18:47 AM - camm: Poller[0] - Process already processed record (force execute)
09/15/2009 08:18:47 AM - camm: Poller[0] = Start process rule id=[134] 

POLLER RUNNING

09/15/2009 08:25:47 AM - camm: Poller[0] S3.1 The next syslog Tree to DB run time has been determined to be NOW
09/15/2009 08:25:47 AM - camm: Poller[0] S3. Checking to determine if it's time to run AutoCreate Tree Menu.
09/15/2009 08:25:47 AM - camm: Poller[0] S2.1 The next AutoPurge process run time has been determined to be at '2009-09-15 8:25:48'. Last run time was '2009-09-15 8:10:48'
09/15/2009 08:25:47 AM - camm: Poller[0] S2. Checking to determine if it's time to run AutoPurge process.
09/15/2009 08:25:47 AM - camm: Poller[0] S1.3 Use syslog pre table. Move processed records to main syslog table
09/15/2009 08:25:47 AM - camm: Poller[0] Alert Rule 'SRST-Alerts' - Email Action - has been activated without records
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%SRST%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[124]
09/15/2009 08:25:47 AM - camm: Poller[0] Alert Rule 'KCC was unable to form a complete spanning tree' - Email Action - has been activated without records
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '% Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[129]
09/15/2009 08:25:47 AM - camm: Poller[0] Alert Rule 'KCC has detected problems' - Email Action - has been activated without records
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%Knowledge Consistency Checker (KCC) has detected problems%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[128]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%TermServDevices: 1111%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[109]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%sshd%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[110]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[9]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%Cisco CallManager: 3:%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[134]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like 'MRM Service:%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[112]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%Cannot format event ID%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[117]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%console%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[108]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[3]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[(((message like '%SYSTEM: STATS%' OR message like '%SYSTEM: camm%' ) OR message like '%SYSTEM: boost%' ) OR message like '%SYSTEM: thold%' ) AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[125]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%Authentication failure%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[113]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[2]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%sudo%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[106]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[8]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%SCRUTINIZER:%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[126]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[0]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[(((message like '%6398%' OR message like '%7076%' ) OR message like '%6482%' ) OR message like '%6102%' ) AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[121]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[4]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%print%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[111]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[5]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like '%cron%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[107]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[23]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like 'snmpd%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[105]
09/15/2009 08:25:47 AM - camm: Poller[0] -3 Delete records.
09/15/2009 08:25:47 AM - camm: Poller[0] - Select records to process = [1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Found count records==[3076]
09/15/2009 08:25:47 AM - camm: Poller[0] - SQL where conditions=[message like 'Security%' AND `syslog`.`plugin_camm_syslog_incoming`.`status`=1]
09/15/2009 08:25:47 AM - camm: Poller[0] - Process only new records
09/15/2009 08:25:47 AM - camm: Poller[0] = Start process rule id=[100]
09/15/2009 08:25:47 AM - camm: Poller[0] S1.2 Found 3156 new syslog messages to process
09/15/2009 08:25:47 AM - camm: Poller[0] S1.2 Found new traps to process
09/15/2009 08:25:47 AM - camm: Poller[0] S1.1 Use SYSLOG component
09/15/2009 08:25:47 AM - camm: Poller[0] S1. Found 18 camm rules to process
09/15/2009 08:25:47 AM - camm: Poller[0] S0. About to enter camm poller processing
09/15/2009 08:25:47 AM - camm: Poller[0] S0. Found enabled DEBUG mode. Output will be verbose

intenso · Post by **intenso** » Tue Sep 15, 2009 2:53 am

hi,

thanks for the upgrade tip but the problem still exists.

any idea?

mcutting · Post by **mcutting** » Tue Sep 15, 2009 2:56 am

intenso wrote:hi,

thanks for the upgrade tip but the problem still exists.

any idea?

You probably need to clear the browser cache before you notice any difference

intenso · Post by **intenso** » Tue Sep 15, 2009 3:10 am

oha...

ok, youre right. it works.

thanks

gthe · Post by **gthe** » Tue Sep 15, 2009 4:05 am

mcutting, ah yes! You use pre-table!
Here is the fix (I hope):

Code: Select all

ALTER TABLE `syslog`.`plugin_camm_syslog_incoming` MODIFY column  `alert` SMALLINT(3) unsigned NOT NULL default '0' ;

or use this file with fix:

mcutting · Post by **mcutting** » Tue Sep 15, 2009 5:19 am

Thanks - just implemented the below

Code: Select all

ALTER TABLE `syslog`.`plugin_camm_syslog_incoming` MODIFY column  `alert` SMALLINT(3) unsigned NOT NULL default '0' ;

Will revert shortly.

mcutting · Post by **mcutting** » Tue Sep 15, 2009 5:27 am

Works

Rule count is increasing, messages are being deleted, and no longer show up in the main syslog view.

Thanks !

CaMM (Cacti Message Management) plugin v1.6.7 2010-08-26

Who is online