CaMM (Cacti Message Management) plugin v1.6.7 2010-08-26

[gthe]

No, it's a bad result.
Here's my result.

camm_snmptt.JPG (11.61 KiB) Viewed 12544 times

Do you have this situation arises every time you open the page? or just the first time?
as open, for example, 5 page?

[lasylve]

This situation appears every time I open the page, but when I stay on it, each refresh takes a normal time :

temps_camm2.jpg (9.48 KiB) Viewed 12542 times

In fact, I stay blocked on the "Loading startup variables..." message. As long as I stay on camm tab in cacti, the loading time is normal.

[gthe]

That's good.
You need to enable mysql slow query log.
http://dev.mysql.com/doc/refman/5.1/en/slow-query-log.html
restart mysql and open the plugin again - that would hit the log information about the request, which is so long running.
After that - let me see this log.

[lasylve]

Ok, here is the log :

mysql-slow.log.txt

(177.88 KiB) Downloaded 1400 times

[eqqchau]

Dear all,

I will a question about how the snmptt can receive a "known" trap and display in on CAMM.
I did put some required conf. file to /etc/snmp and configure the snmptt.ini file. However , i got a error message when I type "service snmptt start" . I did "service snmptt reload", and it loaded successfully.

Please help.

Alex

[msassman]

My syslogs have been blank after upgrading CactiEZ install from .8.7 c to .8.7 g. I checked the plugin_camm_syslog tables in the cacti database and they are empty. Syslog plugin does not work either. Should I have to change anything after upgrading?

syslog-ng.conf is as follows:

# syslog-ng configuration file.
#
# This should behave pretty much like the original syslog on RedHat. But
# it could be configured a lot smarter.
#
# See syslog-ng(8) and syslog-ng.conf(5) for more information.
#
# 20000925 gb@sysfive.com
#
# Updated by Frank Crawford (<Frank.Crawford@ac3.com.au>) - 10 Aug 2002
# - for Red Hat 7.3
# - totally do away with klogd
# - add message "kernel:" as is done with klogd.
#
# Updated by Frank Crawford (<Frank.Crawford@ac3.com.au>) - 22 Aug 2002
# - use the log_prefix option as per Balazs Scheidler's email
#

options {
sync(0);
time_reopen(10);
log_fifo_size(1024);
long_hostnames(off);
use_dns(yes);
use_fqdn(yes);
create_dirs(no);
keep_hostname(yes);
};

source s_sys { pipe ("/proc/kmsg" log_prefix("kernel: ")); unix-stream ("/dev/log"); internal(); };

destination d_cons { file("/dev/console"); };
destination d_mesg { file("/var/log/messages"); };
destination d_auth { file("/var/log/secure"); };
destination d_mail { file("/var/log/maillog"); };
destination d_spol { file("/var/log/spooler"); };
destination d_boot { file("/var/log/boot.log"); };
destination d_cron { file("/var/log/cron"); };
destination d_mlal { usertty("*"); };
destination d_kernel { file("/var/log/kern"); };


filter f_filter1 { facility(kern); };
filter f_filter2 { level(info) and
not (facility(mail)
or facility(authpriv)
or facility(cron)
or program("kernel")); };

filter f_filter3 { facility(authpriv); };
filter f_filter4 { facility(mail); };
filter f_filter5 { level(emerg); };
filter f_filter6 { facility(uucp) or
(facility(news) and level(crit)); };
filter f_filter7 { facility(local7); };
filter f_filter8 { facility(cron); };
filter f_kernel { level(info) and program("kernel"); };

#log { source(s_sys); filter(f_filter1); destination(d_cons); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_auth); };
log { source(s_sys); filter(f_filter4); destination(d_mail); };
log { source(s_sys); filter(f_filter5); destination(d_mlal); };
log { source(s_sys); filter(f_filter6); destination(d_spol); };
log { source(s_sys); filter(f_filter7); destination(d_boot); };
log { source(s_sys); filter(f_filter8); destination(d_cron); };
log { source(s_sys); filter(f_kernel); destination(d_kernel); };

source net {
udp();
};


destination d_mysql {
pipe("/tmp/mysql.pipe"
template("INSERT INTO plugin_camm_syslog (host, sourceip, facility, priority, sys_date, message, status) VALUES ( '$HOST', '$SOURCEIP', '$FACILITY', '$PRIORITY', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$MSG', '0' );\n")
template-escape(yes)
);
};

log { source(net); destination(d_mysql); };
log { source(s_sys); destination(d_mysql); };

# vim: syntax=syslog-ng

Any Ideas why I am no longer getting syslog data to database? I was previously using syslog .52 and it stopped working after the upgrade.

[lightenup]

All logs now flowing in great. But this is confusing.
When on my Syslogs tab and in my tree on left, if I click on an IP, then the right hand pane will show only messages relative to the IP I clicked on. However, if I am on my SNMP Traps tab and in my tree on left, if I click on an IP, then the right hand pane will not change at all. Is there a way to fix this so it shows only messages relative to the IP??

Gthe, Hammer733,

I am seeing the same issue. Today I upgraded to CAMM 1.6.75, running Cacti 0.8.7g, Plugin Architecture Version: 2.8. Was there a fix for this issue?

Thanks Again!

[lightenup]

hammer733 wrote:
All logs now flowing in great. But this is confusing.
When on my Syslogs tab and in my tree on left, if I click on an IP, then the right hand pane will show only messages relative to the IP I clicked on. However, if I am on my SNMP Traps tab and in my tree on left, if I click on an IP, then the right hand pane will not change at all. Is there a way to fix this so it shows only messages relative to the IP??


Gthe, Hammer733,

I am seeing the same issue. Today I upgraded to CAMM 1.6.75, running Cacti 0.8.7g, Plugin Architecture Version: 2.8. Was there a fix for this issue?

Thanks Again!

Never mind, must have been a browser caching issue. Everything works now!!

Thanks again for all the great work!

[computer_guru]

I am running CAMM 1.6.6. I get the following error (see screenshot). The only thing I changed was on the PC side. My hard drive failed and I am now on Windows 7. Still running the latest version of Firefix. Nothing else has changed.



Never mind, I optimized all my MySQL tables and the error went away.

[lightenup]

First of all great work on CAMM, works nicely!

I did have a request, in the rules can you add the ability to BCC an email address. This would be very helpfull!

Thanks!

[willhaigh]

Great work, I use CAMM every day for my network logging and email alerting.

Thanks for your great work!

[lightenup]

Gthe,

In regards to the alerting features could you please add the following:
1. Add a BCC email address field.
2. Increase the value of the email address string. I am running out of room, I am attempting to send emails out to my whole team of 12 people.
3. In the "Edit filter for rule" menu can you make the field "agentip" selectable for Syslog and Snmptt? This would really help me as I have 12 sites all with separate IP addressing and would let me notify just the staff at a given site.

Again, thanks for all the great work!

[smlick]

Hi Gthe
No news for your plugin? have you plan a new release with some improvement?

Regards
Alessio

[lightenup]

Another suggestion I have is to let you modify the sql select statement directly. I think the editor is great to get folks started, however, I have a need for more complex rules that combine AND, OR and NOT statements.

[computer_guru]

After a mail server issues sent a large amount of emails into my syslog, I no longer receive syslog emails from my rules. It has been like this over a day now. I have: rebooted the cacti server, optimzed all my MySQL tables, and checked the cacti log. I cannot figure out why CAMM will not send me an email. I normally get 40+ a day.

cacti host down messages come through just fine, but not CAMM messages.