CaMM (Cacti Message Management) plugin v1.6.7 2010-08-26

[gthe]

pthaynes,
thanks, I update install instructions.

[computer_guru]

Anybody get this error when they click install from the plugin management screen?

Fatal error: Call to undefined function camm_raise_message3() in /var/www/html/plugins/camm/setup.php on line 55

Cacti Version - 0.8.7e
Plugin Architecture - 2.5
Poller Type - Cactid v
Server Info - Linux 2.6.9-78.0.13.plus.c4smp
Web Server - Apache/2.0.63 (CentOS)
PHP - 5.1.6
PHP Extensions - libxml, xml, wddx, tokenizer, sysvshm, sysvsem, sysvmsg, standard, SimpleXML, sockets, SPL, shmop, session, Reflection, pspell, posix, mime_magic, iconv, hash, gmp, gettext, ftp, exif, date, curl, ctype, calendar, bz2, zlib, pcre, openssl, apache2handler, gd, ldap, mysql, mysqli, PDO, pdo_mysql, pdo_sqlite, snmp, eAccelerator
MySQL - 5.0.68
RRDTool - 1.2.23
SNMP - 5.1.2
Plugins

• Global Plugin Settings (settings - v0.5)
  Thresholds (thold - v0.4.1)
  Device Monitoring (monitor - v0.8.2)
  Network Discovery (discovery - v0.8.4)
  Network Tools (tools - v0.2)
  Syslog Monitoring (syslog - v0.5.2)
  Device Tracking (mactrack - v1.1)
  RRD Cleaner (rrdclean - v1.1)
  Update Checker (update - v0.4)
  FlowView (flowview - v0.4)
  Host Info (hostinfo - v0.2)
  Error Images (errorimage - v0.1)
  PHP Network Weathermap (weathermap - v0.96a)
  Create Aggregate Graphs (aggregate - v0.63)
  Documents (docs - v0.1)
  report it! (report it! - v0.5.0)

[computer_guru]

It would be nice if CAMM supported configuring what tables it kept data in and not just what is used for incoming data.

I want camm to look at syslog.syslog for syslog data not cacti.plugin_camm_syslog

there is no option for that.

[computer_guru]

Ok, i figured it out. you can ignore my other post. However, I would like to be able to disable grouping by type in the host tree.

Also, When I click a host under TRAPS it filters by that host, when I click a host on the SYSLOG tab it doesn't filter. I see all entries no matter what I click on the host tree.

[gthe]

Ok, i figured it out. you can ignore my other post. However, I would like to be able to disable grouping by type in the host tree.

Currently - no.

Also, When I click a host under TRAPS it filters by that host, when I click a host on the SYSLOG tab it doesn't filter. I see all entries no matter what I click on the host tree.

Any error in cacti.log ?

[computer_guru]

yes there was an error in my cacti log. Silly me for not looking there myself. I followed the error and found I was missing an index on the MySQL table. After adding the index everything works fine now. Thank you.

The only thing I really want now is an option to not group by type in the host tree. Can you add that in the next release? or suggest where I can make the change myself?

[gthe]

The only thing I really want now is an option to not group by type in the host tree. Can you add that in the next release? or suggest where I can make the change myself?

Well, I'll try to do it ...

[computer_guru]

Any ideas on the attached error?

This shows up when I click "save" after creating or modifying a rule that handles traps. All rules that handle syslog work fine.


I just created another rule after a ctrl F5 refresh and it worked. The type says snmptt and the other rules for traps say camm. Weird?

[mcutting]

Hmm - add new rule does not seem to work.

If I create a rule (see screenshot), I am unable to define any SQL strings ? Used to work fine in the previous version, but not this one. Also, rules created from the Syslogs screen get created ok, but return no data.

[torstentfk]

try this:
http://forums.cacti.net/download.php?id=21062

from
http://forums.cacti.net/viewtopic.php?t ... &start=495

and do not forget:
http://forums.cacti.net/viewtopic.php?t ... highlight=

[mcutting]

try this:
http://forums.cacti.net/download.php?id=21062

from
http://forums.cacti.net/viewtopic.php?t ... &start=495

and do not forget:
http://forums.cacti.net/viewtopic.php?t ... highlight=

Awesome - thanks.

[hojoloco]

I just found this and it looks great, however alert notification doesn't work for me. I am running cacti 8.8.7g, PIA 2.8, camm-1.6.62. I can create rules but emails never get sent out. I have successfully tested email from the Mail/DNS tab in cacti Settings. Any ideas?

[hojoloco]

Turned on debug for CAMM and Cacti here is a snippet of the log

07/15/2010 03:54:27 PM - camm: Poller[0] Alert Rule 'Port_security' - Email Action - has been activated without records
07/15/2010 03:54:27 PM - CMDPHP: Poller[0] DEVEL: SQL Exec: "UPDATE `plugin_camm_rule` SET `count_triggered`=`count_triggered`+'0',`actual_triggered`='0' WHERE id='100';"
07/15/2010 03:54:27 PM - camm: Poller[0] - Select records to process = [0]
07/15/2010 03:54:27 PM - CMDPHP: Poller[0] DEVEL: SQL Assoc: "SELECT `cacti`.`plugin_camm_syslog`.* FROM `plugin_camm_keys` LEFT JOIN `cacti`.`plugin_camm_syslog` ON (`krid`=`cacti`.`plugin_camm_syslog`.`id`) WHERE `plugin_camm_keys`.`rule_id`='100' AND `ktype`=1 AND `cacti`.`plugin_camm_syslog`.`status`=2 ;"
07/15/2010 03:54:27 PM - CMDPHP: Poller[0] DEVEL: SQL Exec: " INSERT IGNORE INTO `plugin_camm_keys` (`krid`,`rule_id`,`ktype`) SELECT `id`, '100','1' FROM `cacti`.`plugin_camm_syslog` WHERE message like '%PORT\_SECURITY%' AND `cacti`.`plugin_camm_syslog`.`status`=2"
07/15/2010 03:54:27 PM - camm: Poller[0] - SQL where conditions=[message like '%PORT\_SECURITY%' AND `cacti`.`plugin_camm_syslog`.`status`=2]
07/15/2010 03:54:27 PM - camm: Poller[0] - Process already processed record (force execute)
07/15/2010 03:54:27 PM - camm: Poller[0] = Start process rule id=[100]

[hahnn]

smlick,
Very strange....
Can you run this queries in mysql command line and show me the full error output / results ?

Code: Select all

SELECT CONVERT(GROUP_CONCAT(concat(t2.`rule_id`, ' [',t3.name, ']'),';\r\n' SEPARATOR '') USING UTF8) as rules_name,t1.*,host.description, host.host_template_id, host.id as device_id FROM (SELECT * FROM `syslog_ng`.`plugin_camm_syslog` where `id`='36548451' ) as t1 Left join host on (t1.`sourceip`=`host`.`hostname` ) left join plugin_camm_keys as t2 on (t2.`krid`=t1.`id`) left join plugin_camm_rule as t3 on (t2.rule_id=t3.id) ;

Code: Select all

SELECT * FROM `syslog_ng`.`plugin_camm_syslog` where `id`='36548451'

I have the same problem when double-clicking a trap: the error window with "Nrow data for this ID" is displayed and there is nothing in "view full trap" window.

I may be wrong but here is my analysis of the problem:

I don't use SYSLOG-NG, and in camm settings, syslog-ng is disabled. I use only traps with snmptrapd and snmptt. By consequence, I don't have any database with syslog_ng tables.

I think that the problem in this version of camm, the 1.6.62 compared to the one I used previously (which was 1.5.51), is that it does SQL requests which absolutely need the syslog_ng tables, the kind of request at the top of my answer here. Maybe because it tries to correlate the data between all the underlying products it is based on (syslog-ng, snmptt, ...).

So, if I'm right, would it be possible to have a version of camm which is able to run fine WITHOUT syslog_ng and syslog_ng tables ? Otherwise there is no interest to keep a setting like "Use SYSLOG: true/false".

Can somebody confirm my analysis or tell if this is completely wrong ?

That's just my 1 cent

KR.

[hahnn]

I'm continuing my tests about the impossibility to have the "view full trap" window showing anything.

I've installed syslog-ng v 3.0.2, and it is configured to send all in the plugin_camm_syslog table of the database used by camm. Then I've enabled syslog in camm (set to true in the settings).

So, a new "Syslogs" tab appeared and I can see all my syslog entries in camm.

But no luck, double-clicking as for SNMP traps on a log entry, the "View full syslog message" window has the same problem. Same error again: No row data for this ID.

So I don't think that what I wrote just in my previous post is of any interest...

An idea somebody ?

Thanks for your support

KR.