Data Query returned 0 rows

[cheinzle]

I know there are lots of posts on this question, but none that seemed to match what I have (that I found). I have a Fortigate 60D that I am able to get interface statistics collected from and graphed. I am trying to also graph per-firewall-policy traffic.

I get the error:
"This data query returned 0 rows, perhaps there was a problem executing this data query. You can run this data query in debug mode to get more information."

Running this in debug mode returns:

+ Running data query [10].
+ Found type = '3' [SNMP Query].
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/fg_policy.xml'
+ XML file parsed ok.
+ <oid_num_indexes> missing in XML file, 'Index Count Changed' emulated by counting oid_index entries
+ Executing SNMP walk for list of indexes @ '.1.3.6.1.4.1.12356.101.5.1.2.1.1.1' Index Count: 0
+ No SNMP data returned

from the command line:
snmpwalk -v2c -c xxxxx 192.168.40.1 1.3.6.1.4.1.12356.101.5.1.2.1.1.1
iso.3.6.1.4.1.12356.101.5.1.2.1.1.1.1.1 = INTEGER: 1
iso.3.6.1.4.1.12356.101.5.1.2.1.1.1.1.2 = INTEGER: 2
iso.3.6.1.4.1.12356.101.5.1.2.1.1.1.1.3 = INTEGER: 3
.....
iso.3.6.1.4.1.12356.101.5.1.2.1.1.1.1.34 = INTEGER: 34
iso.3.6.1.4.1.12356.101.5.1.2.1.1.1.1.35 = INTEGER: 35
iso.3.6.1.4.1.12356.101.5.1.2.1.1.1.1.36 = INTEGER: 36

Cacti Version 0.8.8b
Cacti OS unix
SNMP Version NET-SNMP version: 5.7.2.1
RRDTool Version RRDTool 1.4.x

Why is Cacti not able to return results when the command line does?

any ideas?

[TheWitness]

Upgrade.

[choefing]

Found this as I run into same issue with a Fortigate 1240 running Cacti with a slightly recent 1.2.13.
Any hints ?

Total: 0.000000, Delta: 0.000000, Found data query XML file at '/var/www/html/cacti-1.2.13/resource/snmp_queries/fortinet_vpn_statistics.xml'
Total: 0.000000, Delta: 0.000000, Running Data Query [44].
Total: 0.000000, Delta: 0.000000, Found Type = '3' [SNMP Query].
Total: 0.000000, Delta: 0.000000, XML file parsed ok.
Total: 0.000000, Delta: 0.000000, <oid_num_indexes> missing in XML file, 'Index Count Changed' emulated by counting oid_index entries
Total: 9.010000, Delta: 9.010000, Executing SNMP walk for list of indexes @ '.1.3.6.1.4.1.12356.101.12.2.2.1.1' Index Count: 0
Total: 9.010000, Delta: 0.000000, No SNMP data returned

where

Code: Select all

#snmpwalk -v2c -c xyz 11.22.33.44 .1.3.6.1.4.1.12356.101.12.2.2.1.1
SNMPv2-SMI::enterprises.12356.101.12.2.2.1.1.1 = INTEGER: 1
SNMPv2-SMI::enterprises.12356.101.12.2.2.1.1.2 = INTEGER: 2
SNMPv2-SMI::enterprises.12356.101.12.2.2.1.1.3 = INTEGER: 3
SNMPv2-SMI::enterprises.12356.101.12.2.2.1.1.4 = INTEGER: 4
...

with

Code: Select all

        <name>Fortinet VPN statistics</name>
        <description>From Fortinet fnFortiGateMib->fgVPN->fgVpnTunTable</description>
        <oid_index>.1.3.6.1.4.1.12356.101.12.2.2.1.1</oid_index>
        <index_order>fgVpnTunIndex</index_order>
        <index_order_type>alphabetic</index_order_type>
        <fields>

        <fgVpnTunIndex>
                <name>Index</name>
                <method>walk</method>
                <source>index</source>
                <direction>input</direction>
                <oid>.1.3.6.1.4.1.12356.101.12.2.2.1.1</oid>
        </fgVpnTunIndex>

rgds

[TheWitness]

You might want to check if you have SELinux enabled and disable it if so. If you don't want to disable it, you will have to learn about audit2allow.

[choefing]

Thx for the feedback.
Unfortunately its a non SELinux enabled debian system.

The system is running quite a few stock and self made xml/queries like a charm but this is the only one giving me headache and I'm stuck.
If someone managed to get a Fortinet query running, I'd appreciate any input.

[TheWitness]

Not sure I can provide much help. This is not my area of expertise. Hopefully someone else who knows these things better can help.