NetXMS Support Forum

Specifically looking for the ZTE 9806H MIB's. But I can't find any ZTE mib's online
I really need the ability to read the temperature off these devices. ZTE directly won't help me for whatever reason

Only agent is the NetXMS server itself, so can I just use 127.0.0.1 for the node?
And how about longer commands with multiple lines? I have some custom scripts that are 50 lines long, impossible to put them into a single line

Quote from: Tursiops on May 28, 2019, 03:42:43 PM
Quite the opposite for us. We're mostly using agents and are still adding new items to our templates from ExternalParameters, etc.
So from our perspective it works great and I wouldn't want to have to switch from SNMP every time.

Allowing the default to be changed via client preferences or server configuration option could be a nice tweak though.

That's fair enough. I honestly don't know the majority of the user base but I would imagine it's primarily network devices rather than servers
An option to select would be the best of both worlds. As you can imagine having to change the drop down type a few hundred/thousand times gets old really fast, and that's exactly what we have to do 

Quote from: paul on May 28, 2019, 06:16:50 PM
As it stands, given I am already in a template that has SNMP DCI's - right click - duplicate - works even better as it already has an OID filled in and I can easily navigate to the OID I want.

I don't like using duplicate because I often have different polling periods, retention, transformation scripts, 'display on overview page' etc and these aren't visible on the DCI window, only when editing that DCI. So there have been a few occasions where i've duplicated an entry then found it has a transformation script I don't want. Hence I just don't bother anymore and do it from scratch to avoid setting something I didn't want
What I would REALLY like is the ability to do bulk edits by selecting multiple DCI's, properties, then edit the relevant option and hit ok to save it to all. That way even if I duplicated the wrong one it would be very fast and easy to fix it by editing, making sure everything I don't want is unticked, everything I do is set and just hitting ok

I'm slowly getting more comfortable with NetXMS but unfortunately it can be difficult to find out how to actually implement things at times One of these is how to send SSH commands to a device. I've googled and seen this is possible but I can't find any actual examples to help set it up

I want to be able to be able to send commands via SSH to a device. A simple example being I have created a DCI summary table to show MikroTik RouterOS versions. I want to be able to select all that are outdated, right click, choose Tools->MikroTik Commands->Update RouterOS
And in the background NetXMS would connect to the device with SSH and execute '/system package update install'

How do I set this up?
Then once I get the basics working, is it possible to parse more advanced commands via SSH? I.e. using variables so I could choose 'Update RouterOS' but specify a time as a variable and it would send
'/system scheduler add on-event="/system package update install" start-time=$NetXMSTimeVariable'
So the device would update at 3:30am instead of immediately

I see that NX-1537 (Hide value from 'last values' page) was added in 2.2.14 under 'other options' for a DCI. That's very handy, thank you! 
So now a viable workaround is possible by creating 2 DCI's. But would still be great if we can make this a bit cleaner with one of the other methods NX-1538 or NX-1539

I see that 1539 is implemented in version 3.0. Any ETA on when this is going to be available?

I find the default of 'NetXMS Agent' annoying and a bit puzzling, as i'm regularly adding OID's to monitor via SNMP but very rarely adding anything specific to NetXMS agent commands. I'm sure most people are in the same boat and its just 1 more step needed to add items
Is it possible to change the default to SNMP or add an option for it in server configuration?

I'm slowly piecing together an Oxidized installation for our environment but I want devices to automatically be discovered and added for backing up configs
Since we use NetXMS it seems most logical to have this handle the source database

Has anyone got either RANCID or Oxidized (I don't mind using either) to integrate with NetXMS to push devices to it?

Oxidized can use a variety of sources such as CSV, HTTP/HTTPS or SQL database. So is there a way to get NetXMS to create any of these (and add/remove devices) for Oxidized to read from?
I need it to export device name, IP address, device model and optionally username/password (i'm totally fine with creating this as an additional attribute on the object in NetXMS)

You mean NetXMS version 3.0?
Any ETA on release date?

I've done a google search, there are some really old topics but not sure if they apply

Essentially I just want to be able to clear old data. For instance I don't care about DCI data older than 30 days at the moment (current retention is set to 60 days)
Is there a way to delete all DCI data older than 30 days?

Same thing for Syslog. Can I delete all old data and/or filter it and delete all data matching certain terms?
I've turned on debugging for a few devices and they have added a lot of syslog entries, can I delete everything matching the term 'debug' for instance?

Quote from: Tursiops on December 20, 2018, 11:16:57 PM
Either way, for all I know right now that's not possible without doubling up on DCIs, i.e. creating a second DCI based on the first one. The first one is integer only, the second transforms the value into a string. That way you have both: string and integer history.

While not great, that would work if there's a way to segregate them, i.e. hiding one of the DCI's from the 'last values' view (probably not the best method) or i.e. changing its colour/status/something so it's obvious that this is for data logging, not for human reading. And sits down the bottom of the list not somewhere in the middle

I have plenty of OID's that are polled with numeric status codes i.e. Duplex 0=half 1=full and I like to use transformation to make this easier for people to read at a glance. So i'll set the value to String and use DCI transformation to say "Half" or "Full" instead of just 0/1.

The problem though is I lose the ability to graph. Graphs are super handy to spot changes over a broad period of time. If I leave it as an integer then I can just graph it, set period to a month and instantly see if the link if ever went into half duplex mode. Really hard when it's a string because I have to look at the DCI distory and try and spot a change in the list of thousands of poll entries

I'm sure there's a way to do this specifically for the 'Duplex' status but I have plenty of others i.e. GPS sync status that can have 6 different codes. Nobody is going to memorize what each code is. I do write them in the comments field of each DCI but it's several more steps to look this up

What i'd like is for when just looking at the objects 'last values' area it could show something in human readable text, but is still an integer in the database so it can graph it

Related to this https://www.netxms.org/forum/general-support/syslog-parser-how-to-parse-the-actual-syslog-message-in-the-alert/
whereby I want to log incorrect login attempts. But only want to generate the alert when there are i.e. 3 invalid login attempts within 30 seconds
So I set the 'Repeat Count' to 3 and 'Repeat interval' to 30 seconds but it doesn't seem to do anything at all. Every single invalid login attempt generates an alert

Edit: This is a bug
I noticed when I set the timer value in the 'Editor' view it would show, but when I change to 'XML' view the repeatcount is 0
Even if I change it in the XML view, if I exit and come back it goes back to 0 again. That is unless I set the value at least 60 or higher. It seems it doesn't like having any form of seconds as the repeat interval, it must be a minute or more
Edit2: Additionally this seems to apply to all SysLog messages, not to the specific device/IP it was received from

so if I try to login to DeviceA 2x, then DeviceB 2x and repeat this cycle every 60 seconds. I will get a Slack message saying I failed to login to DeviceB on the first attempt (I shouldn't get an alert at all)

Have setup a syslog parser that generates an event. Then I created an event processing policy that looks for that event and then it triggers an action (in this case, SLACK notification)

In this case it's a "login failure" message, and in the syslog message it includes the user account and IP address trying to login.
I'm getting the notification come through just fine, but it doesn't include the syslog text. I need that to be parsed through the event chain so I can see exactly what the message said

I'm not sure what parameter to add, and where exactly to add it? Do I add it to the Event, the Action? or the Event Processing Policy?

Edit: Nevermind figured it out. It's at the bottom of this page for anyone wondering https://www.netxms.org/documentation/adminguide/log-monitoring.html

QuoteConsider the following line is received via syslog, or added to a monitored file:

24.04.2015 12:22:15 1 5 system,error,critical login failure for user testUser from 11.2.33.41 via ssh
We can extract username and login method from the syslog message, and pass it as parameters to an event with the following rule:

<match>system,error,critical login failure for user (.*) from .* via (.*)</match>
<event>10000</event>
Username will be sent to the event as %1, IP address will not be sent, and login method will be sent as %2.

I actually did want to match the IP address so I changed the 'match' field in the syslog parser to "system,error,critical login failure for user (.*) from (.*) via (.*)"

Then I change the Event Configuration to "Login Failure: %1 - %2 (%3)"
And the Action to have text "%n - %m %M" which ultimately results in a message such as the below when failing a login attempt

Office Router - Login Failure: SpamUser - 1.2.3.4 (ssh)

Yeah the 'Object Details' section was completely missing, wasn't in View tab at all
I don't know what fixed it but I stopped the netxmsd service, unlocked and fixed the database, did an upgrade, rebooted the server and then undeployed and redeployed the latest web interface and it all started working again. My guess either a partially failed upgrade in the past, or a partially corrupted web GUI

Dunno what's happened here but i've logged into NetXMS and I have the Object Browser window showing Entire Network, Instrastructure, Templates etc. But the main window in the middle/right of the screen where you can click on a device and see all its information, DCI's, status etc is completely gone and I can't figure out how to get it back? the View menu doesn't give me an option for it
In addition to that, right clicking on an object and choosing Properties gives me the error "No Property Pages for [Device name]"