News:

We really need your input in this questionnaire

Main Menu
Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - Victor Kirhenshtein

#4306
Hi!

Transformation scripts are very flexible - main limitation is what data you can access. First of all, all scripts run in strict sandbox environment, and cannot access any data outside of NetXMS server process. It is also possible to restrict script's access to data of nodes other then current (see http://wiki.netxms.org/wiki/SG:Security_Issues for explanation).

You can collect any data with NetXMS, it just matter of efforts you'll need to get them. There are few possible ways to get data:

1. SNMP - it is here out of the box, you can collect anything provided by SNMP. You can freely add new MIBs, but this is not necessary for data collection - only for MIB tree visualization for seemlier configuration.

2. agent extensions - you can develop your own sub-agents to provide application or device specific data (currently you have to do this in C, but later this year we will introduce support for sub-agents written in Java); if you can get your data with command line tools, you can integrate them into agent as external parameters or external parameter providers.

3. Application agents - we have small and simple "application agent" library which can be embedded into your application and provide internal data to NetXMS agenet.

4. SQL database - with ODBCQUERY sub-agent you can read data directly from SQL database.


We are trying to keep NetXMS as secure as possible. You have very flexible access right control; all access checks done in server, not in GUI nor API, so it's not possible to avoid it by using API directly for example. NetXMS uses own communication protocol, which is encrypted using AES-256 by default. Encryption scheme is pretty much standard - on client connect, server sends it's public RSA key to the client; client generates AES session key and sends it to server encrypted with server's public key. Same protocol used also for server-agent communications.

Best regards,
Victor

#4307
Hi!

Currently it's hard-coded value of 3 packets. I can make it configurable.

Best regards,
Victor
#4308
General Support / Re: wrong cpu utilization
September 19, 2013, 02:00:39 PM
Hi!

Please post content of /proc/stat from problematic node.

Best regards,
Victor
#4309
Сейчас без создания отдельных зон для каждого такого узла это сделать нельзя. Я подумаю, что можно будет сделать.
#4310
Я примерно представляю, в какой ситуации могла возникнуть такая ошибка, хотя повторить мне не удалось. На всякий случай изменил генерацию имен для prepared statements, в 1.2.9 это исправление войдет.
#4311
Да, можно. Процедура такая:

1. Остановите NetXMS сервер
2. В базе NetXMS выполните запрос

DELETE FROM users WHERE id=0;

3. Запустите сервер.

После этого можно будет зайти пользователем admin  с паролем netxms.
#4312
SNMP trap matchiong configuration for BayStack (now ERS) Avaya (Nortel) switches.
#4313
В LinkUp/LinkDown трапах должен быть параметр - индекс интерфейса. По индексу можно найти обьект интерфейса. Соответственно фильтр скрипт в правиле может быть таким:


iface = GetInterfaceObject($node, $2);
return iface != null;


Такой фильтр будет срабатывать только в том случае, если найден обьект интерфейса.

Альтернативный вариант - не удалять интерфейсы, а делать их unmanaged. Тогда скрипт может быть таким (для игнорирования unmanaged интерфейсов):


iface = GetInterfaceObject($node, $2);
return (iface != null) && (iface->status != 6);


По интерфейсам информации довольно много: http://wiki.netxms.org/wiki/NXSL:Interface, так что фильтры можно делать сложные.
#4314
General Support / Re: Agent action
September 17, 2013, 04:44:57 PM
Hi!

1. init problem is very interesting. I repeat same problem on Debian 6. Strange enough, giving full path to init binary solved it:

Action= test.pwd:/sbin/init 6

works fine.

2. Actions with output still not implemented.

Best regards,
Victor
#4315
Hi!

Actually, we didn't test alarm viewer app since 1.0.x versions. It is there only for historical reasons. I'll try to check what's happening, but not sure if I will be able to fix it. Did you think to switch to Java or web console for alarm display (if I understand correctly you have some kind of on-wall screen)?

Best regards,
Victor
#4316
Hi!

You are right, there was memory leak in NXCGetDCIDataEx. I've fixed it (SVN rev. 7673). This fix will be part of 1.2.9 release.

Best regards,
Victor
#4317
General Support / Re: I can not see my new mibs
September 13, 2013, 05:23:43 PM
Check if resulting compiled MIB file (netxms.mib) is in correct location. It should be in /usr/share/netxms/mibs. By default nxmibc places it in current directory.

Best regards,
Victor
#4318
General Support / Re: I can not see my new mibs
September 13, 2013, 04:56:54 PM
How did you compile MIBs? Was there any errors?

Best regards,
Victor
#4319
General Support / Re: Upgrade to 1.2.8 Version
September 13, 2013, 04:56:06 PM
You shouldn't use both methods ion same machine. Most likely you now have two incompatible set of binaries - one under /user and seconds under /usr/local (or other place if you specify --prefix at configure stage). Try to identify wrong binaries and delete them.

Best regards,
Victor
#4320
Quote from: Sergey on September 11, 2013, 01:31:27 PM
Замена иконок

Возможно загружать свои иконки для оборудования и пр. очень радует. Возможно ли заменить иконку по умолчанию, наприме для свитча?

Нет, нельзя. Я добавлю в feature requests :)

Quote from: Sergey on September 11, 2013, 01:31:27 PM
Доступ к web-интерфейсу

Как сделать доступ к веб-интрефейсу без запроса пароля? п.с. Идея состоит в следующем: Нужно просто предоставить доступ к картам через вэб , что бы мониторить состояние объектов на них.

Можно создать пользователя с read-only правами и использовать URL для логина как описано здесь: http://wiki.netxms.org/wiki/Autologin_for_Management_Console