Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-08-23 21:17:03

@Ken Rizzo (krizzoatopsvision.com) has joined the channel

jowen (jowen@opsvision.com)
2017-08-23 21:21:42

@jowen has joined the channel

terrycummiskey (tcummiskey@opsvision.com)
2017-08-23 22:45:34

@terrycummiskey has joined the channel

pbackman (pbackman@opsvision.com)
2017-08-24 04:56:58

@pbackman has joined the channel

ToJoMoJo (toddejohnson13@gmail.com)
2017-08-24 14:31:15

@ToJoMoJo has joined the channel

David Ishmael (dishmael@trace3.com)
2017-08-24 14:48:37

@David Ishmael has joined the channel

tbarron (wbarron@opsvision.com)
2017-08-27 22:44:38

@tbarron has joined the channel

gbarry (gbarry@opsvision.com)
2017-08-29 16:22:30

@gbarry has joined the channel

marktrubl (mtrubl@opsvision.com)
2017-08-29 16:32:55

@marktrubl has joined the channel

bhughesov (bhughes@opsvision.com)
2017-09-12 17:49:47

@bhughesov has joined the channel

Jeff Markland (jmarkland@trace3.com)
2017-09-18 16:23:33

@Jeff Markland has joined the channel

jmleczko (jmleczko@sciencelogic.com)
2017-09-19 17:08:14

@jmleczko has joined the channel

Brian Miller (bmiller65@gmail.com)
2017-09-22 19:41:53

@Brian Miller has joined the channel

Leonie Zeumer (lzeumer@sciencelogic.com)
2017-09-28 13:43:50

@Leonie Zeumer has joined the channel

Jason Keck (jason_keck@symantec.com)
2017-10-03 19:26:54

@Jason Keck has joined the channel

Philip Rogers (philiprogersjr@gmail.com)
2017-10-03 19:30:35

@Philip Rogers has joined the channel

Chris Strickland (cstricklan@gannett.com)
2017-10-03 20:03:01

@Chris Strickland has joined the channel

Ed Osiecki (eosiecki@gannett.com)
2017-10-03 20:07:43

@Ed Osiecki has joined the channel

Matthew Waugh (mawaugh@cisco.com)
2017-10-03 20:08:09

@Matthew Waugh has joined the channel

Robert Gruener (robert.gruener@team.telstra.com)
2017-10-03 22:37:14

@Robert Gruener has joined the channel

Dougie (douglasstvnsn@gmail.com)
2017-10-05 14:28:45

HOWDY!!!!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-05 14:32:58

hey Dougie

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-05 14:33:17

I expect you'll see the most traffic in <#C6S9UUPMX|em7-admins>

Gregers (gpn@tdc.dk)
2017-10-06 23:01:05

So happy about the slam group. Excellent initiative!

๐Ÿ‘ Tom Robijns
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-06 23:05:56

๐Ÿ‘

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-07 14:41:23

@Ken Rizzo (krizzoatopsvision.com) set the channel purpose: This channel is for team-wide communication and announcements. All team members are in this channel. We encourage you to join and participate in the #em7** channels for technical assistance and collaboration

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-07 15:33:20
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-07 15:33:32

@Ken Rizzo (krizzoatopsvision.com) pinned their Image ScienceLogic Collaboration to this channel.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-07 16:23:23

http://passionateaboutoss.com/

passionateaboutoss.com
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-09 16:37:38

@channel what did everyone think of the t-shirts we handed out at Symposium? We thought they were pretty "cool". Did the rest of you agree?

Mike Gray (mike@graywind.org)
2017-10-09 16:41:34

I'm always a fan of old-school Batman references. ๐Ÿ™‚

๐Ÿ‘ Chris Strickland
Brian D (brian.davenport@tierpoint.com)
2017-10-09 16:53:20

Anyone else having issue dialing right now?

Brian D (brian.davenport@tierpoint.com)
2017-10-09 16:53:41

(or getting through to scilo support at all?)

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-09 16:55:08

I get "an application error has occurred"

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-09 16:55:28

lemme try to get the support manager

Brian D (brian.davenport@tierpoint.com)
2017-10-09 16:55:38

was about to call our account manager ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-09 16:57:34

we know that's the right number, yes?

Brian D (brian.davenport@tierpoint.com)
2017-10-09 16:58:06

Via Phone: United States:

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-09 16:58:10

yep, thx

Brian D (brian.davenport@tierpoint.com)
2017-10-09 16:58:27

800# gives me 20 rings on support

Brian D (brian.davenport@tierpoint.com)
2017-10-09 16:58:30

and it hangs up

Tom Robijns (tom.robijns@realdolmen.com)
2017-10-09 17:02:06

Is there a difference between creating a request via the portal or calling?

Brian D (brian.davenport@tierpoint.com)
2017-10-09 17:02:40

Not really

Tom Robijns (tom.robijns@realdolmen.com)
2017-10-09 17:02:47

Since I'm in EMEA region, it feels like support is always half a day waiting, no clue if that is 'normal' response time

Brian D (brian.davenport@tierpoint.com)
2017-10-09 17:02:51

What we do where I work is make a ticket then call

๐Ÿ‘ jowen, Tom Robijns
jowen (jowen@opsvision.com)
2017-10-09 17:02:53

my workflow is usually make it on the portal and then call them right away and give them the tid ๐Ÿ™‚

๐Ÿ‘ Brian D, Tom Robijns
Brian D (brian.davenport@tierpoint.com)
2017-10-09 17:05:02

More specifically if I make a ticket sev 5/4, sometimes 3, its a fire off and forget till they update, otherwise its ticket and call

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-09 18:06:26

@channel here is an update regarding call in support:

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-09 18:06:27

Update - The system recovery is still ongoing, and we are seeing that some accounts are now able to login. This is an ongoing process, and soon all accounts will be able to access Callbar. Oct 9, 10:20 PDT Update - Our Engineers are being able to recover the system to operation. Very soon you will be able to see improvements on the ability to login and to make/receive calls. Oct 9, 09:50 PDT Update - Our Engineering team has identified exactly what the issue is and we are working to restore the service. We will update the incident again in 30 minutes. Oct 9, 09:23 PDT Identified - We're currently experiencing an issue where agents aren't able to log into the Agent Dashboard as well as issues in making and receiving phone calls. We're working to mitigate the issue and will provide another update shortly. Oct 9, 08:58 PDT

jowen (jowen@opsvision.com)
2017-10-09 18:21:14

yeah they have gotten outbound calls working, still working on incoming last I heard

Brian D (brian.davenport@tierpoint.com)
2017-10-09 18:47:24

My ticket with them about calls, indicates inbound should now work.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-10 13:28:25

Welcome @Pete to the SLAM slack!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-10 15:25:12

I'm hoping we can hit 100 SLAM Slackers by the end of the week. If you have any work mates or just anyone involved in EM7 that you think could benefit from participating this group, please invite them to join. We'll do something special for the 100th subscriber, not sure what yet but it will be "cool"... LOL

Jason Keck (jason_keck@symantec.com)
2017-10-11 15:58:52

Hey everyone, my team is growing and im looking for some high energy people to help grow our sciencelogic stack and also get involved with other tools. We encourage integration, innovation, and creativity so we will absolutely keep you challenged and engaged.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-11 16:14:47

@Jason Keck are you considering contractors or FTE only?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-11 16:29:43

weโ€™ve got lots of those type of people

Jason Keck (jason_keck@symantec.com)
2017-10-11 17:03:23

I am considering both let me know when you have some time to talk about my requirements to see if we can work together.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 11:45:16

Anyone other than Mr. Keck in here from the AZ area? Specifically Tucson or Phoenix?

Mike Gray (mike@graywind.org)
2017-10-13 13:00:59

Originally yes, but Iโ€™ve been in SoCal for 10 years

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 13:03:26

unless you want to go back itโ€™s not going to help ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 13:23:13

if anyone wants more t-shirts for your team or didnโ€™t get one at the Symposium, email shirts@opsvision.com with your size and address to get a free one shipped

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 14:25:45

@channel I need splunk engineers in Denver CO for an immediate project (6-13 weeks). If anyone knows someone Iโ€™d appreciate the referral!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 14:34:28

also if you know anyone whoโ€™d like to learn ScienceLogic and make a career shift, weโ€™re always open to new talent and will train for free

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 14:35:52
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 14:36:37

Can you post that again with a title so I can pin it to the channel? right now itโ€™s Pasted Image at 2017-xxxxx

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 14:40:04

@ToJoMoJo

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 14:40:35

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

} Ken Rizzo - OpsVision Solutions (https://slam-ug.slack.com/team/U6TU5BAF9)
ToJoMoJo (toddejohnson13@gmail.com)
2017-10-13 14:42:51

ok, let me add the front and name it...

ToJoMoJo (toddejohnson13@gmail.com)
2017-10-13 14:47:12

Official 1st-issue SLAM! User Group T-shirt 2017

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 14:55:29

@Ken Rizzo (krizzoatopsvision.com) pinned @ToJoMoJoโ€™s Image SLAM! T-Shirt 2017.JPG to this channel.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 16:48:29

We need 1 more LinkedIn forum user to hit our near term goal of 100. Know anyone who hasnโ€™t joined yet that should?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-13 16:48:44

Weโ€™re still 24 away from the 100 goal for Slack as well.

LOwen (leah@leahowen.com)
2017-10-14 02:39:49

How do you wear your SLAM! shirt? Post a picture of you wearing the SLAM! shirt on Twitter or Facebook using #slamug and be entered to win a $50 gift card. You must be entered by Friday, October 27th to win. If you don't have your SLAM! shirt yet, email shirts@opsvision.com with your size and address. We will ship you one for free! #sciencelogic #sciencelogic17

jowen (jowen@opsvision.com)
2017-10-14 02:45:55

^hey looks like I am a model! ๐Ÿ’ฏ

๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com)
LOwen (leah@leahowen.com)
2017-10-14 04:43:57

@LOwen pinned their Image SLAMshirt.jpg to this channel.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-15 19:26:50

Am I the only โ€œworking for the weekend?โ€

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-15 19:50:37

if youโ€™ve got any favorite bots or apps youโ€™d like to see integrated into this Slack domain, hit me up with your request and Iโ€™ll see if I can accommodate the request

polly
2017-10-16 13:45:01

@Ken Rizzo (krizzoatopsvision.com) has a poll for you! Votes in this poll are anonymous ๐Ÿ”’.

<p><strong>1</strong>: Polls don't bother me, I'll ignore them if I don't care. <code>โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡โ–‡</code> 100% (15)</p>
<p><strong>2</strong>: Polls are the devil, start doing those and I'm outta here. <code>โข</code> 0%</p>
Total votes
<p>15</p>
Comments
<p>๐Ÿ’ฌโ€‚Looks like polls are not evil! Good deal.</p>
Tom Robijns (tom.robijns@realdolmen.com)
2017-10-16 18:00:22

Hi, Anyone else has this issue? if you go to preferences tab and add 'Note' column to the table, it goes perfect. However if I click on Console preferences (events tab, Actions button) and modify something there, my Notes column is gone.

EricN - SILO (enagley@sciencelogic.com)
2017-10-16 18:03:01

hey Tom, its a known bug found in 8.3.1

โœ… Tom Robijns
EricN - SILO (enagley@sciencelogic.com)
2017-10-16 18:03:24

hasn't been addressed yet however

jowen (jowen@opsvision.com)
2017-10-16 18:29:44

To anyone in SoCal I am gonna be hitting up the HackNight at the Orange Space in Redlands, CA on Wednesday, Oct 18 @ 6:30PM, if anyone else is going, hit me up so I know who to look for! http://www.theorange.space/hacknight

The Orange Space
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-16 20:17:13
Scot (sneedy@gannett.com)
2017-10-16 21:41:26

@jowen Wish we had something like that in VA!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-16 23:30:10

*Thread Reply:* We could make that happen

jowen (jowen@opsvision.com)
2017-10-16 21:43:22

I agree! maybe next time I am out in VA we can arrange a silo-meetup that would be sweet ๐Ÿ™‚

Scot (sneedy@gannett.com)
2017-10-16 22:34:49

I think a local Silo UG was the original symposium but hell I donโ€™t even put pants on to go to work now days with Skype,Slack and Zoom.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-17 13:43:24

https://www.wired.com/story/krack-wi-fi-wpa2-vulnerability/

WIRED
ToJoMoJo (toddejohnson13@gmail.com)
2017-10-17 14:51:38

Headline: "New KRACK-Hack Attacks PAP, CHAP and 4WAP with Whack Backslap"

Scot (sneedy@gannett.com)
2017-10-17 15:30:39

https://github.com/kristate/krackinfo

GitHub
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-17 22:04:05

Is your bigger than mine? Iโ€™m curious who is managing the largest environment by device count?

jowen (jowen@opsvision.com)
2017-10-17 22:11:32

I think this hack reminds us again how important it is to have an up-to-date CMDB. Without that how would an enterprise be confident that they have all devices patched?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-17 22:13:05

indeed

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-18 13:49:48

There is a new channel that you can join if you wish called <#C7L99ABSR|em7-bugs>. All users are invited and new users will be auto added.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-18 13:51:25

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

} Ken Rizzo - OpsVision Solutions (https://slam-ug.slack.com/team/U6TU5BAF9)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-18 14:24:46

welcome @Dave Hatz!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-18 16:07:46

OpsVision has a new website. Nothing special to look at necessarily but itโ€™s been updated. Any feedback is welcome. There are some additional pages coming but this is what we have so far. www.opsvision.com

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-18 17:40:38

probably should have put that in #random huh

EricN - SILO (enagley@sciencelogic.com)
2017-10-18 17:41:20

woops ๐Ÿ˜„

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 10:27:14

welcome @Gustav @Tony @Phil Preen @pacmanza @Ronelle @Francois Roos @Jason!!

๐Ÿ‘ Jason, Tony
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 10:34:29

removed an integration from this channel: Brand24

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 10:37:18

welcome @Mr H

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 10:37:36

How did the new joins find out about us?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 11:06:53

welcome @Rabie vdM

pacmanza (david.harrison@appcentrix.co.za)
2017-10-19 11:19:10

thanks guys ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 14:08:46

welcome @James

Phil Preen (p.preen@uk.cdw.com)
2017-10-19 14:13:20

Hi all, we were linked from our USA team who came across slack at the symposium

๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com)
Phil Preen (p.preen@uk.cdw.com)
2017-10-19 14:13:34

at least that goes for 3 of us

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 14:49:51

I canโ€™t figure out how to invite everyone and I forget how I added channels to the auto invite so for anyone that cares, there is an <#C7L99ABSR|em7-bugs> channel you can also join

Brian D (brian.davenport@tierpoint.com)
2017-10-19 18:21:51

@Ken Rizzo (krizzoatopsvision.com) Would that be called the default channels in the workspace settings?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:22:57

probably ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:23:21

thx, that was it

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:23:22

updated

Brian D (brian.davenport@tierpoint.com)
2017-10-19 18:23:29

I cant help ya on the invite everyone... sounds like a bot thing to me

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:23:31

but itโ€™s only going to help newcomers

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:23:49

I found some code you can run but Iโ€™m not gonna get that invested

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:23:55

I pinned it to the channel

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:24:01

they can find it there if they care enough

jowen (jowen@opsvision.com)
2017-10-19 18:34:27

Look at that @Ken Rizzo (krizzoatopsvision.com) we are only 6 users away from triple digits!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:34:47

slowly but surely

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:34:51

100th person gets a prize

jowen (jowen@opsvision.com)
2017-10-19 18:35:21

makes 6 fake emails and joins slack group

jowen (jowen@opsvision.com)
2017-10-19 18:35:28

jk ๐Ÿ™‚

Brian D (brian.davenport@tierpoint.com)
2017-10-19 18:35:32

^^ was thinking same thing ๐Ÿ˜›

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:35:34

itโ€™s not that exciting

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:35:47

maybe a gold star sticker

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-19 18:36:04

or a cookie

๐Ÿ˜‚ jowen
๐Ÿช jowen, EricN - SILO, SLacker
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-20 18:18:11

welcome @lkrice15 Keith

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-20 18:18:34

glad you could make it to the party!

jowen (jowen@opsvision.com)
2017-10-20 18:20:55

Welcome Keith!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-24 20:30:31

Ding Ding Ding! We have a winner! @Carlos Junco is our 100th Slack Slammer to join the group @channel @ToJoMoJo

๐ŸŽ‰ jowen, Tom Robijns
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-24 20:30:40

Tell him what heโ€™s won Todd!

ToJoMoJo (toddejohnson13@gmail.com)
2017-10-24 20:38:32

@Carlos Junco - As our Triple-digit member, you've won a $20 gift certificate to Starbucks, an original SLAM! T-shirt, and access to the most knowledgeable group of ScienceLogic users on the planet ๐ŸŒ! Congratulations and thank you, and @channel for your collective participation and continued collaboration on EM7.

๐Ÿ‘ LOwen
ToJoMoJo (toddejohnson13@gmail.com)
2017-10-24 20:40:04

@Carlos Junco please let me know what shirt size you want for your SLAM! T.

Carlos Junco (carlos.junco@netjernetworks.com)
2017-10-24 20:40:12

@ToJoMoJo Thanks!

Carlos Junco (carlos.junco@netjernetworks.com)
2017-10-24 20:42:00

Small will be perfect! @ToJoMoJo do you need something extra?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-24 20:51:58

an address would be good

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-24 20:52:11

I would email shirts@opsvision.com with your info

Carlos Junco (carlos.junco@netjernetworks.com)
2017-10-24 20:52:57

Ok @Ken Rizzo (krizzoatopsvision.com) I will send it. Thanks

LOwen (leah@leahowen.com)
2017-10-24 22:52:55

@channel Win $50 gift card by just wearing your SLAM! shirt - this is the last week to enter. Post your pic on Facebook or Twitter using hashtag #SLAMUG to enter.

LOwen (leah@leahowen.com)
2017-10-24 22:56:11

@here ^

๐Ÿ‘ jowen, Ken Rizzo (krizzo_at_opsvision.com)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-25 11:53:50
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-26 15:13:14

welcome @Richard Chart!!! Happy to have you here!

Richard Chart (rchart@sciencelogic.com)
2017-10-26 15:50:50

*Thread Reply:* Thank you - very happy to join!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-26 15:55:40

Believe it or not weโ€™ve had requests for 100 more shirts! Thatโ€™s as many as we took to the Symposium. Iโ€™m shocked how well these caught on.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-26 15:56:11

email shirts@opsvision.com before early next week if you arenโ€™t already on the list. They are all free for the time being.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-26 15:57:09

if you work AT ScienceLogic see Steve Kazan as he has a bunch for internal staff already on order

Jason Keck (jason_keck@symantec.com)
2017-10-27 22:44:02

Anyone Else having issues with the new Chrome 62.0 update and ScienceLogic user interface?

jowen (jowen@opsvision.com)
2017-10-27 22:47:40

what version of em7?

jowen (jowen@opsvision.com)
2017-10-27 22:48:13

I went to check what version I am on and looks like chrome decided now is a good time to update to the latest so I will find out shortly ๐Ÿ™‚

jowen (jowen@opsvision.com)
2017-10-27 22:57:23

So far everything seems to be working in my 8.2 and 8.5 system

jowen (jowen@opsvision.com)
2017-10-27 22:57:35

what issue are you seeing specifically?

LOwen (leah@leahowen.com)
2017-10-30 19:44:13

Congratulations @Steve K! You are the winner of our SLAMUG shirt gift card giveaway! A $50 Amazon gift card is coming your way from @Ken Rizzo (krizzoatopsvision.com). Enjoy!

LOwen (leah@leahowen.com)
2017-10-30 19:44:50

@channel ^^ ๐ŸŽ‰ ๐ŸŽ‰

๐ŸŽŠ Tom Robijns
SLacker (jesse.farnham@redriver.com)
2017-10-30 19:46:23

I feel like next up should be a SLAMUG MUG give away! ๐Ÿ˜›

ToJoMoJo (toddejohnson13@gmail.com)
2017-10-30 19:48:25
LOwen (leah@leahowen.com)
2017-10-30 19:49:01

@SLacker I like the way you think! That's a good idea!

SLacker (jesse.farnham@redriver.com)
2017-10-30 19:52:16

I know there is a limit to how many days in a row I could wear that shirt (likely one days...). Really no limit on how many days in a row i can use a mug though. ๐Ÿ˜ƒ

๐Ÿ‘ LOwen, EricN - SILO
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-31 19:31:00

welcome @Jeremy Sherwood

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-10-31 19:31:10

glad to see youโ€™ve joined the party

jowen (jowen@opsvision.com)
2017-10-31 19:43:19

Welcome!

LOwen (leah@leahowen.com)
2017-11-01 20:56:03

@channel EM7 8.6 went GA today! Check the portal to download the patch or ISO and check out the new features.

๐Ÿ‘ jowen, Stijn Vanderelst
๐ŸŽ‰ Tom Robijns, jowen
EricN - SILO (enagley@sciencelogic.com)
2017-11-01 21:02:00

2FA support added ๐Ÿ˜„

EricN - SILO (enagley@sciencelogic.com)
2017-11-01 21:02:40

also, chrony config via the web configurator

EricN - SILO (enagley@sciencelogic.com)
2017-11-01 21:02:50

is still reading through the release notes

Phil Disco (brandon.vloch@cdw.com)
2017-11-01 21:05:06

IYou must reboot each appliance after installing the 8.6.0 release. - I assume this means collectors as well?

jowen (jowen@opsvision.com)
2017-11-01 21:05:27

I would assume so

Brian D (brian.davenport@tierpoint.com)
2017-11-01 21:05:32

2FA via RSA SecurID, does not sound like one can use the time token one can get via things like google authenticator

Brian D (brian.davenport@tierpoint.com)
2017-11-01 21:06:00

All EM7 devices are considered appliances in my book, so yes, reboot all

Scot (sneedy@gannett.com)
2017-11-01 21:06:14

NOTE: The 8.6.0 releases include multiple operating system updates that address known security vulnerabilities. These important security updates will not take effect until each appliance in your system is rebooted. You must reboot each appliance after installing

jjenkins (jjenkins@hosting.com)
2017-11-01 21:07:22

of course it's GA...now that I just upgraded to 5.1.2 ๐Ÿ™„

Brian D (brian.davenport@tierpoint.com)
2017-11-01 21:07:41

^^ we just went 7.8 to 8.5.0

jjenkins (jjenkins@hosting.com)
2017-11-01 21:08:01

That's a fun process.... recently went through that with our dev instance.

Mike Gray (mike@graywind.org)
2017-11-01 21:08:22

I'll wait until 8.6.1 thanks

Scot (sneedy@gannett.com)
2017-11-01 21:08:47

Grrr, When is MFA going to be supported for OKTA?

๐Ÿ‘ Brian D, Tom Robijns
jjenkins (jjenkins@hosting.com)
2017-11-01 21:08:58

Yea, probably going to wait a few weeks...

Mike Gray (mike@graywind.org)
2017-11-01 21:09:27

We're planning to move to 8.5 next week

jowen (jowen@opsvision.com)
2017-11-01 21:10:08

One of our guys is going to fire up the patch on one of our 8.5.1.1 lab systems so we can see if anything breaks ๐Ÿ™‚ stay posted

Mike Gray (mike@graywind.org)
2017-11-01 21:10:33

How's life out there on that bleeding edge? ๐Ÿ˜‚

jowen (jowen@opsvision.com)
2017-11-01 21:10:43

sharp ๐Ÿ˜‚

๐Ÿ˜‚ jjenkins, Mike Gray, EricN - SILO, Ken Rizzo (krizzo_at_opsvision.com)
Scot (sneedy@gannett.com)
2017-11-01 22:01:25

350+ OS Packages

EricN - SILO (enagley@sciencelogic.com)
2017-11-01 22:02:31

and about 354MB

EricN - SILO (enagley@sciencelogic.com)
2017-11-01 22:02:45

for the 8.5.0 -> 8.6.0 patcher

Scot (sneedy@gannett.com)
2017-11-01 22:08:18

2 parts OS and Release, Looks like release has a new vmlinuz and ramfs so don;t reboot until both are done or reboot twice.

Scot (sneedy@gannett.com)
2017-11-01 22:09:02

8.5.1.2 -> 8.6 deployed fine from UI in stand alone dev instance.

EricN - SILO (enagley@sciencelogic.com)
2017-11-01 22:09:03

usually best to wait for the end to reboot anyway

EricN - SILO (enagley@sciencelogic.com)
2017-11-01 22:09:13

i'm patching one via the API right now

Scot (sneedy@gannett.com)
2017-11-01 22:10:08

Going to let it burn in overnight. Later folks

Scot (sneedy@gannett.com)
2017-11-02 16:47:05

No fallout to report from 8.6 in terms of system logs events ui. Small dev test though.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-03 17:38:15

based on community feedback the overt marketing messaging has been removed and will cease. Thatโ€™s not what I want this forum to be focused on.

๐Ÿ‘ EricN - SILO, Arthur, Tom Robijns
LOwen (leah@leahowen.com)
2017-11-08 23:28:34

@here As you might have seen at the Symposium, Swordfish and Redfish are on the radar for ScienceLogic. See the latest blog post: https://www.sciencelogic.com/blog/swordfish-part-1

ScienceLogic
Stijn Vanderelst (stijn.vanderelst@realdolmen.com)
2017-11-09 13:54:00

8.5.1.2 -> 8.6 update on our AIO system without errors.

Mike Gray (mike@graywind.org)
2017-11-09 20:11:22
EricN - SILO (enagley@sciencelogic.com)
2017-11-09 20:18:50

haha awesome

Mike Gray (mike@graywind.org)
2017-11-09 20:22:10

Like Elvis said, a little less conversation, a little more action ๐Ÿ˜‰

๐Ÿ‘ Jeffrey Bailey
Scot (sneedy@gannett.com)
2017-11-13 15:54:23

Elvis hold music would be ok.

๐Ÿ‘ Mike Gray
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-13 17:51:59

welcome to the party @KenR

LOwen (leah@leahowen.com)
2017-11-13 19:31:56

Hey all! @jowen has made a ProTip on how to search more effectively in ScienceLogic. You can check it out here: https://www.youtube.com/watch?v=HRr9th2Fo-A&t=41s

YouTube
} OpsVision Solutions (https://www.youtube.com/channel/UCpM0AGghD5lypcqFcBsEhZA)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-28 20:54:00

LOL hi @Gary Arrington (www.opsvision.com) aka Gary

Gary Arrington (www.opsvision.com) (garrington@opsvision.com)
2017-11-28 20:55:48

Hello @channel

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-28 20:56:13

๐Ÿ˜ณ

jowen (jowen@opsvision.com)
2017-11-28 20:56:25

lol nice screen name ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-28 20:56:45

he's not as creative as you J

๐Ÿ˜‚ jowen
Gary Arrington (www.opsvision.com) (garrington@opsvision.com)
2017-11-28 20:57:56

Right

ToJoMoJo (toddejohnson13@gmail.com)
2017-11-29 13:12:24

@channel - This is Todd w/ OpsVision. This is not an EM7 question, but I need some assistance. I am the lone Windows user in the company, and my laptop is jacked-up from the latest forced Windows System Update. If anyone on here knows Windows, I would appreciate any help to fix this that you can offer. I have it "on" now, because once it goes to Sleep mode, it will not quickly boot up again; instead, I get screen flashes like snow on an old CRT television, which persists for minutes. Then, it randomly boots after multiple power cycles and interminable wait. The last known "stable state" was the moment before the new Windows update applied themselves on Monday night. Please PM me if you have any ideas on what has caused this to occur - I really need some help!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-29 13:15:12

@Gary Arrington (www.opsvision.com) Can help

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-29 13:15:32

You want to do a system restore to before the last update

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2017-11-29 13:16:21

https://www.lifewire.com/how-to-use-system-restore-in-windows-2626131

Lifewire
EricN - SILO (enagley@sciencelogic.com)
2017-12-04 17:01:41

8.6.1 is LIVE

๐ŸŽ‰ Tom Robijns, jowen, Long - Symantec, todd
๐Ÿ‘ Larry S - SL
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-01-09 13:56:15

our apologies that delivery of the SLAM t-shirts was a bit delayed but I believe everyone should have them (that ordered) by now? Please let me know if you did not receive your shirt. Thanks!

SLacker (jesse.farnham@redriver.com)
2018-01-09 14:31:47

Regarding the T-Shirts. I see you are saying to let you know if we did not get them. Well...I wanted to let you know that I DID get mine, and it is pretty sweet. Thanks opsvision.

๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com)
Phil Disco (brandon.vloch@cdw.com)
2018-01-12 15:06:07

I got mine today - thank you

Brian D (brian.davenport@tierpoint.com)
2018-02-16 20:08:34

Its friday, so a little afternoon fun. How many of you have seen little random easter eggs in documents or even the star wars crawler like credits for EM7?

Mike Gray (mike@graywind.org)
2018-02-16 20:09:39

I haven't seen the credits, but every set of system release notes have some sort of fun easter egg

๐Ÿ˜‚ Tom Robijns
skylar92 (skylar@ligado.com)
2018-02-28 19:41:16

Hey all, was wondering where one could go for some basic documentation that goes a step above the listed docs on the portal. In particular looking for something about passing alarms from a server via snmp traps into SL, but this server collects all alarms from different network components and so its like multipoint collected, forwarded to SL, then in SL i want to make virtual devices, and split this out .... not sure where to post this type of Q, but I thought this would be a good start -

SLacker (jesse.farnham@redriver.com)
2018-02-28 20:32:51

for traps, you probably want a message collector (although a data collector can handle that task as long as it is sufficiently sized and there isn't a message collector in its group).

SLacker (jesse.farnham@redriver.com)
2018-02-28 20:34:05

but as for digesting all messages for many machines through one machine and then parsing it all out to virtual devices, you got me on that one, no idea (sorry). Someone else may know. I'm assuming you are trying to avoid configuring each monitored device to send traps to a message collector as well as whatever server they are currently sending to?

EricN - SILO (enagley@sciencelogic.com)
2018-02-28 20:34:55

iirc em7 maps traps to devices via hostname or ip address

EricN - SILO (enagley@sciencelogic.com)
2018-02-28 20:35:02

that probably won't work with virtual devices

jowen (jowen@opsvision.com)
2018-02-28 23:57:11

Yeah that is an interesting use-case and AFIK you cannot add devices based on an SNMP Trap (not SNMP-Get) without some customization and IMO is not probably the best way to build your devices based only on SNMP Traps. You will want something you can poll on a regular interval that can build out the Virtual Devices. However, if customer requirements are to use Traps I think the way I would approach it is make an event policy on that central server that catches all traps. Then create a runbook automation to read the message of the trap and then send an API call to SL to create the Virtual Devices.

skylar92 (skylar@ligado.com)
2018-03-01 19:23:38

so, if im one of those people who dont know how to run a discovery on an ip, to get the device into SL, where do i start ๐Ÿ˜• feeling overwhelemd ...

EricN - SILO (enagley@sciencelogic.com)
2018-03-01 19:53:05

system > manage > discoveries

jowen (jowen@opsvision.com)
2018-03-01 19:54:42

you will want to create a discovery job and then trigger the job with the lightning bolt, but before you do all that just make sure you got the credentials (snmp community strings) setup for the devices.

jowen (jowen@opsvision.com)
2018-03-01 19:56:09

There are a lot of options on discovery job creation, but try creating a discovery of one device and see the results before you try and discover the whole network. This will help you to learn what options you want and donโ€™t want.

jowen (jowen@opsvision.com)
2018-03-01 19:56:37

turning on log-all on the discovery will also help you troubleshoot the issues you may run into

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-02 07:21:17

@skylar92 how about just add the device in silo : Registry -> Actions -> Create physical device [BETA]

skylar92 (skylar@ligado.com)
2018-03-02 13:40:40

awesome, thanks for the pointer to the portal doc, i hoenstly didn't know that ... that helped a ton for me and our team!!!

skylar92 (skylar@ligado.com)
2018-03-02 13:41:19

just a tad confused ... the discovery then runs dynamic apps, and its the dynamic apps that pull the ... 'info' ... via ... oids? but it just seems like everything is all predefined in the NETSNMP: CPU ... 'dynamic app' ...

skylar92 (skylar@ligado.com)
2018-03-02 13:59:32

Hey guys! Interesting question. Is there a naming convention for things in the system, like policies, devices, dynamic apps etc?

EricN - SILO (enagley@sciencelogic.com)
2018-03-02 14:59:50

not really. Some powerpacks will have naming conventions within themselves, but not necessarily across the whole system

skylar92 (skylar@ligado.com)
2018-03-05 20:01:21

Hey guys, here is a question ... is there any way to bulk load event policies into the tool. we have around 17k existing event/alarms in netcool to transfer over to sciencelogic ...

we looked in api, but there is no post ... to the event_policy 'table' ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:21:49

@skylar92 Do you really need all those policies? Will they be triggered by DynApps or API? If it is API, you're better of creating a few generic policies with regex matches

๐Ÿ‘ EricN - SILO, jowen
jowen (jowen@opsvision.com)
2018-03-05 20:35:02

I totally agree with Tom. When switching tools esp netcool to SL you want to figure out what all the events are doing and find out how the new tool (SL) handles events much differently than netcool. I firmly believe a solid look at what you have and implementing them individually is by far the preferred and probably only recommended way to do it. However, the other way you could possibly get around which is definitely not recommended and I would eagerly warn that this advice carries no warranty however, if you are well versed in xss you could invoke an xss attack on your em7 session and work around it.

skylar92 (skylar@ligado.com)
2018-03-05 20:41:16

i have no clue or previous experience with NMS netcool or SL ...

skylar92 (skylar@ligado.com)
2018-03-05 20:41:27

we have if message = x, then event log as y, logic, in netcool.

skylar92 (skylar@ligado.com)
2018-03-05 20:41:51

system throws a trap/snmp/or log message, tool catches it, parses it, and then does this if x then y logic that the business smes have determined ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:42:24

that sounds like api/syslog/trap eventlogs with regexes all over them to me ๐Ÿ™‚

skylar92 (skylar@ligado.com)
2018-03-05 20:44:55

yeah @Tom Robijns thats what its like ... is that recommended or ?

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:45:13

let me give you a comparison: one of our customers uses zabbix and has a team creating & defining alerts on them. They also define alerts that we should alert on so we agreed to start those messages with <customerid><zabbix>;eventid=<numberforgoodandbad>;message=whatever;severity=<Minor|Major|Critical>;Type=<Problem|OK>

skylar92 (skylar@ligado.com)
2018-03-05 20:46:11

@Tom Robijns is that the naming convention, or you mean one policy to catch everything with a regex

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:46:12

so we have 4 event policies catching all their events

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:46:50

1 event policy for critical, one for major, one for minor and one for healthy, which looks for Type=OK

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:47:16

so no matter how many alerts they want us to respond to, silo can do so ๐Ÿ™‚

skylar92 (skylar@ligado.com)
2018-03-05 20:47:42

yeah but how do they know what event is what if youre looping them all into one of four events ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:48:33

all event policies have regexes, only 1 event policy will match and report the proper event severity

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:48:44

are you familiar with regex?

skylar92 (skylar@ligado.com)
2018-03-05 20:49:09

yes...however ...

skylar92 (skylar@ligado.com)
2018-03-05 20:49:14

we have 17k 'eventids'

skylar92 (skylar@ligado.com)
2018-03-05 20:49:20

each with a varying source

skylar92 (skylar@ligado.com)
2018-03-05 20:49:25

and severity ...

skylar92 (skylar@ligado.com)
2018-03-05 20:49:33

without flatout copying this file i have into here ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:49:42

let's start a thread here...

skylar92 (skylar@ligado.com)
2018-03-05 20:49:51

*Thread Reply:* good call.

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:50:01

*Thread Reply:* ๐Ÿ˜‰

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:50:27

*Thread Reply:* Can you distill a pattern in the messages?

skylar92 (skylar@ligado.com)
2018-03-05 20:51:08

*Thread Reply:* event abc1 event abc2 event abc3 event abc4

then sl policies slpolicy for abc1

  • if message contains abc1 severity = 1 message text = xxx

slpolicy for abc2

  • if message contains abc2 severity = 2 mesage text = yyy

slpolicy for abc3

  • if message contains abc3 severity = 1 mesage text = zzz

so on so on ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:51:47

*Thread Reply:* so the message (for example) does not contain a severity you can use?

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:52:00

*Thread Reply:* it can be a number even

skylar92 (skylar@ligado.com)
2018-03-05 20:52:37

*Thread Reply:* no, we have a matrix

skylar92 (skylar@ligado.com)
2018-03-05 20:53:09

*Thread Reply:* that says this eventid, from this source, has this seveirty, has this 'type' (not sure what that means), and has a particular 'reason' and 'action' (event message / advisor notes).

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:53:46

*Thread Reply:* can you paste a few actual events?

skylar92 (skylar@ligado.com)
2018-03-05 20:55:55

*Thread Reply:* common-bmcSoftware-BMCPMPORTAL-AVAILABLESPACEPER BMC 3 1 0 3600 0:00:00 Server Disks at 95% Utilization Create Remedy Ticket and Assign to IT-OPS/Sys Admin 6/6/2013 17:17

skylar92 (skylar@ligado.com)
2018-03-05 20:56:22

*Thread Reply:* eventid source severity type suppress_escl expiretime threshold reason action updated common-bmcSoftware-BMCPMPORTAL-AVAILABLESPACEPER BMC 3 1 0 3600 0:00:00 Server Disks at 95% Utilization Create Remedy Ticket and Assign to IT-OPS/Sys Admin 6/6/2013 17:17

skylar92 (skylar@ligado.com)
2018-03-05 20:56:28

*Thread Reply:* sorry this format is grabage ...

skylar92 (skylar@ligado.com)
2018-03-05 20:56:32

*Thread Reply: garbage*

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:56:44

*Thread Reply:* you can use the backtick ``

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:56:51

*Thread Reply:* anyways

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:57:15

*Thread Reply:* I see a nice pattern there ๐Ÿ™‚

skylar92 (skylar@ligado.com)
2018-03-05 20:57:22

*Thread Reply:* eventid common-bmcSoftware-BMCPMPORTAL-CPU_USAGE

source BMC

severity Default

type 1

reason CPU Usage 95%

action DURING OFFICE HOURS - Create Remedy Ticket assign to IT-OPS/Sys Admin, call IT-OPS on call person

skylar92 (skylar@ligado.com)
2018-03-05 20:58:02

*Thread Reply:* and another

skylar92 (skylar@ligado.com)
2018-03-05 20:58:07

*Thread Reply:* eventid common-bmcSoftware-BMCPMPORTAL-SQLSERVERDOWN

source

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:58:08

*Thread Reply:* is there also an eventthat says 'ok' ?

skylar92 (skylar@ligado.com)
2018-03-05 20:58:09

*Thread Reply:* BMC

skylar92 (skylar@ligado.com)
2018-03-05 20:58:38

*Thread Reply:* i dont know ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:58:47

*Thread Reply:* lol

skylar92 (skylar@ligado.com)
2018-03-05 20:58:49

*Thread Reply:* i mean there are a ton of events over 200 for 'bmc' alone and yea i see some

skylar92 (skylar@ligado.com)
2018-03-05 20:58:51

*Thread Reply:* gc_ready

skylar92 (skylar@ligado.com)
2018-03-05 20:58:53

*Thread Reply:* gc_online

skylar92 (skylar@ligado.com)
2018-03-05 20:58:58

*Thread Reply:* gcnodestartup

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:59:16

*Thread Reply:* those are all 'reasons' or 'actions'?

skylar92 (skylar@ligado.com)
2018-03-05 20:59:23

*Thread Reply:* those were evnt ids

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:59:34

*Thread Reply:* ah ok

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 20:59:43

*Thread Reply:* anyways

skylar92 (skylar@ligado.com)
2018-03-05 21:00:04

*Thread Reply:* i did a quick filter in here and cant really find anything with 'ok' ...

skylar92 (skylar@ligado.com)
2018-03-05 21:00:23

*Thread Reply:* but point being ... with all these unique event ids ... the only way i can see to get these if x then y in the system is via event policies,

skylar92 (skylar@ligado.com)
2018-03-05 21:00:28

*Thread Reply:* and that means 17k event policies ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:00:31

*Thread Reply:* let me try create a regex for you

skylar92 (skylar@ligado.com)
2018-03-05 21:00:53

*Thread Reply:* common-bmcSoftware-BMCPMPORTAL-AVAILABLESPACEPER common-bmcSoftware-BMCPMPORTAL-CPUUSAGE common-bmcSoftware-BMCPMPORTAL-SQLSERVERDOWN common-bmcSoftware-BMCPMPORTAL-TAPEMOUNTREQUIRED common-bmcSoftware-BMCPMPORTAL-GPSSERVICEFAILURE common-bmcSoftware-BMCPMPORTAL-MPLSLINKDOWN common-bmcSoftware-BMCPMPORTAL-ALARMSTARTUP common-bmcSoftware-BMCPMPORTAL-ALARMSTOP common-bmcSoftware-BMCPMPORTAL-CORBASTARTUP common-bmcSoftware-BMCPMPORTAL-CORBASTOP common-bmcSoftware-BMCPMPORTAL-DBSTARTUP common-bmcSoftware-BMCPMPORTAL-DB_STOP

skylar92 (skylar@ligado.com)
2018-03-05 21:01:41

*Thread Reply:* severityies 3 Default 4 3 1 1 1 4 1 4 1 4

reasons Server Disks at 95% Utilization CPU Usage 95% SQL Server Down Tape Mount Required Unknown Unknown Process started by operator Process stopped by operator Process started by operator Process stopped by operator Process started by operator Process stopped by operator

actions Create Remedy Ticket and Assign to IT-OPS/Sys Admin DURING OFFICE HOURS - Create Remedy Ticket assign to IT-OPS/Sys Admin, call IT-OPS on call person Create Remedy ticket and assign to IT-OPS/Sys Admin Create Remedy Ticket and assign to IT-OPS/Sys Admin; Call Tech Ops Contact Tier 3 during normal business hours Contact Tier 3 during normal business hours No action required No Action Required as this is part of the FAX Shutdown - Contact Ottawa Tier 2 if a plan shutdown in not occuring. No action required No Action Required as this is part of the FAX Shutdown - Contact Ottawa Tier 2 if a plan shutdown in not occuring. No action required No Action Required as this is part of the FAX Shutdown - Contact Ottawa Tier 2 if a plan shutdown in not occuring.

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:03:22

*Thread Reply:* prepping regex... ๐Ÿ™‚

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:09:29

*Thread Reply:* ok, I have a regex that might help you

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:09:31

*Thread Reply:* (?i)^([\w-]+)(?:\s{2,})(\w+)(?:\s{2,})(\d+|Default)(?:\s{2,})(\d+)(?:\s{2,})(\d+)(?:\s{2,})(\d+)(?:\s{2,})

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:10:08

*Thread Reply:* if you go to regex101.com

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:10:32

*Thread Reply:* enter the regex above and use the text you typed in this thread

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:11:44

*Thread Reply:* got it?

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:12:08

*Thread Reply:* the site will highlight the groups in my regex

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:16:07

*Thread Reply:* @skylar92 ?

skylar92 (skylar@ligado.com)
2018-03-05 21:23:36

*Thread Reply:* hey sry

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:24:00

*Thread Reply:* np

skylar92 (skylar@ligado.com)
2018-03-05 21:28:08

*Thread Reply:* i dont know what to paste into that.;

skylar92 (skylar@ligado.com)
2018-03-05 21:28:09

*Thread Reply:* also

skylar92 (skylar@ligado.com)
2018-03-05 21:28:15

*Thread Reply:* i dont know how capturing all our eventids

skylar92 (skylar@ligado.com)
2018-03-05 21:28:27

*Thread Reply:* like if message contain event id, then configure policy as per the other columns

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:28:42

*Thread Reply:* that's the beauty of regex: you don't need one per eventid

skylar92 (skylar@ligado.com)
2018-03-05 21:28:58

*Thread Reply:* but what about the policy

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:29:06

*Thread Reply:* you can just 'skip' the parts you don't like

skylar92 (skylar@ligado.com)
2018-03-05 21:29:08

*Thread Reply:* you can only have one type of event message in the policy body ..

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:29:48

*Thread Reply:* you went to regex101?

skylar92 (skylar@ligado.com)
2018-03-05 21:30:04

*Thread Reply:* yeah

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:30:14

*Thread Reply:* in the top section, enter the regex I sent

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:30:29

*Thread Reply:* (starting with the (?i) )

skylar92 (skylar@ligado.com)
2018-03-05 21:30:31

*Thread Reply:* how can i post images in here.

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-05 21:30:54

*Thread Reply:* paste them in a private chat

skylar92 (skylar@ligado.com)
2018-03-05 21:31:19

*Thread Reply:* yeah, you in dnd

skylar92 (skylar@ligado.com)
2018-03-08 16:37:43

hey all, quick q about snmp traps ... we have some servers that are throwing traps, do we need to specifically setup a SNMP forwarding address on these devices? Or will the traps be picked up by SL when I do a discovery ...

I am discovering the IPs now, but its a production system, I don't see any 'downside' to doing this ... from an ITGC standpoint -

skylar92 (skylar@ligado.com)
2018-03-08 16:38:24

also, quick add on, how do you know what the SNMP credential is ... ???

doughealy (doug.healy@csra.com)
2018-03-08 16:46:55

@skylar92 You have to specify the Trap destination host in the SNMP agent config on the host(s), you should send them to EM7 assuming they are being monitored by EM7. They should be associated with the Device when they come in. The config is outside of Discovery and is done per host.

skylar92 (skylar@ligado.com)
2018-03-08 16:47:24

oh so we actually have to do work on each host itself ... ok ...

skylar92 (skylar@ligado.com)
2018-03-08 16:47:53

so, on that note, is it common to have the host spitting traps to a dev test and a prod environment at all times? is that possible on all hosts? I know little about the host side of things -

doughealy (doug.healy@csra.com)
2018-03-08 16:48:26

yes , if you are discovering devices with SNMP Cred's , you have to configure the Devices to accept the EM7 SNMP requests to make Discovery work

doughealy (doug.healy@csra.com)
2018-03-08 16:49:35

SNMP Traps are not discovered , they are sent from the host , you can have multiple Trap receivers in an env , but if you are using EM7 to Discover and Monitor devices you should also send Traps there

skylar92 (skylar@ligado.com)
2018-03-08 16:50:54

so would you say discovery and 'trap alarm management' are two mutually exclusive things?

skylar92 (skylar@ligado.com)
2018-03-08 16:51:07

or do you need the device/host discovered so that its incoming traps have a place to live

doughealy (doug.healy@csra.com)
2018-03-08 16:51:07

are you trying to limit the Traps based on env ?

skylar92 (skylar@ligado.com)
2018-03-08 16:51:35

I was told that the 'servers' can only forward to two destinations ...

skylar92 (skylar@ligado.com)
2018-03-08 16:51:54

and im like, i want to do this all in dev first, make policies etc, cause its my 1st time working with SL, about 2 weeks now.

skylar92 (skylar@ligado.com)
2018-03-08 16:51:58

so super green

doughealy (doug.healy@csra.com)
2018-03-08 16:52:28

yes Discovery and Traps are separate but are based on SNMP

doughealy (doug.healy@csra.com)
2018-03-08 16:53:11

For Traps to make any sense in EM7 you would need to have the Deive Discovered and Modeled as SNMP

skylar92 (skylar@ligado.com)
2018-03-08 16:53:44

ok,

doughealy (doug.healy@csra.com)
2018-03-08 16:53:51

then they will be aligned to that device and will show up in the Logs Tab , from there you can make appropriate Events/Alerts as needed

skylar92 (skylar@ligado.com)
2018-03-08 16:53:58

so, im cool with that,

doughealy (doug.healy@csra.com)
2018-03-08 16:54:48

syslog is very similar , if you have EM7 as a Log Host for a server it needs to be Discovered for Em7 to Know what to do with it

skylar92 (skylar@ligado.com)
2018-03-08 16:55:45

i have an ip, how can i get 'in that box' to forward the snmp traffic to the SL dev env ... and on top of that, i have an ip 10.1.3.100 for my SL dev env, what do i need to specify on 10.10.220.201 (host/server) so it forwards its snmp traffic ...

skylar92 (skylar@ligado.com)
2018-03-08 16:56:09

note, i am 100% fine if there is documentation for this and I can follow that, because I feel like I am asking the most basic of questions and sounding quite annoying ...

skylar92 (skylar@ligado.com)
2018-03-08 16:56:44

i was thinking of puttying into that box, then 'sending the snmp traffic to sl dev' ... but that box is a production box ... so /shrug

doughealy (doug.healy@csra.com)
2018-03-08 17:03:27

do you have admin access to these boxes ?

skylar92 (skylar@ligado.com)
2018-03-08 17:04:10

most likely not

doughealy (doug.healy@csra.com)
2018-03-08 17:05:45

no problem on the level of the questions , there is a lot really good Doc's (PDF) on the Silo Portal , the Credentials and Discovery is what you are looking for

doughealy (doug.healy@csra.com)
2018-03-08 17:06:03

are you in a ITIL shop ?

skylar92 (skylar@ligado.com)
2018-03-08 17:07:16

we're a satellite network communications company ... lol

doughealy (doug.healy@csra.com)
2018-03-08 17:07:20

are they Windows or **Nix ?

skylar92 (skylar@ligado.com)
2018-03-08 17:07:34

we implemented servicenow, ... oh its a mix, but more heavily on linux

doughealy (doug.healy@csra.com)
2018-03-08 17:07:45

cool .. are you monitoring satellites with EM7 ?

skylar92 (skylar@ligado.com)
2018-03-08 17:07:46

(if thats what you mean)

skylar92 (skylar@ligado.com)
2018-03-08 17:07:48

lol

skylar92 (skylar@ligado.com)
2018-03-08 17:07:54

pieces of the satellite network yeah -

doughealy (doug.healy@csra.com)
2018-03-08 17:08:36

yea , I figured if you were SN then you have to open a Tix and put in all the details of what you need done by the Admins of those systems

skylar92 (skylar@ligado.com)
2018-03-08 17:09:04

the 'servers' that handle the calls over the sat network are what I'm trying to monitor today haha

doughealy (doug.healy@csra.com)
2018-03-08 17:11:24

to get started you will need the Host(s) SNMP agent configured properly to accept the request from Em7 , Creds are the important part there. Then you will create a Discovery session in EM7 for the IP's you want to Discover and Monitor

skylar92 (skylar@ligado.com)
2018-03-08 17:11:54

how do i know what the creds are though, that's the part im a bit hungup on ... does the server admin set that up or ...

skylar92 (skylar@ligado.com)
2018-03-08 17:12:41

in terms of itil, we are a pretty close group, so I just talked a bit to the guy running that part of the business and he said that he would have to setup that forwarding on those servers, i just wanted to make sure i knew what he was talking about / anything to tell him, re the credentials etc

skylar92 (skylar@ligado.com)
2018-03-08 17:12:44

and/or port

doughealy (doug.healy@csra.com)
2018-03-08 17:13:25

yes you will have to ask the server admins to create the proper SNMP configuration , the Creds are called SNMP Community string on the Server side , EM7 calls it a Cred .

doughealy (doug.healy@csra.com)
2018-03-08 17:18:47

if the admin guys already have a standard they should be able to give you what you need

doughealy (doug.healy@csra.com)
2018-03-08 17:19:36

if not you can pick one when you request the config , have you done any Discovery sessions yet ?

doughealy (doug.healy@csra.com)
2018-03-08 17:20:28

it is a lot easier when you have access to the server and Em7 , then you can work it all out before you request it for Prod

skylar92 (skylar@ligado.com)
2018-03-08 17:20:31

we discovered a server that we are admins on (we are the devops team, we interface with sat eng team, and other teams)

doughealy (doug.healy@csra.com)
2018-03-08 17:20:58

so you have full access to the SNMP config on the server ?

skylar92 (skylar@ligado.com)
2018-03-08 17:21:00

but someone else did the snmp config and just knew what comm string to use -

skylar92 (skylar@ligado.com)
2018-03-08 17:21:21

on the server that we discovered yesterday for other elemenst yeah, but for this one im trying to do, probably not, but the guy im working with most likely does, sorry

skylar92 (skylar@ligado.com)
2018-03-08 17:21:29

btw, you are super helpful, really appreciate this

skylar92 (skylar@ligado.com)
2018-03-08 17:22:36

so when we go to forward traps to SL on this server ...

skylar92 (skylar@ligado.com)
2018-03-08 17:22:41

this SNMP config ...

doughealy (doug.healy@csra.com)
2018-03-08 17:22:44

cool .. it should be the same then for this new server , have him provide the Comm string and use that in the Discovery , are you breaking systems out into Org's ?

skylar92 (skylar@ligado.com)
2018-03-08 17:22:47

what ip/port would we need to use -

skylar92 (skylar@ligado.com)
2018-03-08 17:22:54

not really ... yet ...

skylar92 (skylar@ligado.com)
2018-03-08 17:23:12

this will be the 1st one i did, our other team member is out today or else id ask him haha

skylar92 (skylar@ligado.com)
2018-03-08 17:23:26

i have an ip for our all in one dev box ... but im pretty sure traps need to go to ... port 161? 162? 514?

skylar92 (skylar@ligado.com)
2018-03-08 17:23:36

and im pretty sure that is going to be a step in the snmp config ... ?

doughealy (doug.healy@csra.com)
2018-03-08 17:23:42

oh .. SNMP Traps are 162

doughealy (doug.healy@csra.com)
2018-03-08 17:24:00

yes , all of those ports for SNMP/Traps and Syslog

skylar92 (skylar@ligado.com)
2018-03-08 17:24:15

so, coming from the server, into SL, we use port 162, not 161 ...

skylar92 (skylar@ligado.com)
2018-03-08 17:24:21

yeah, and syslog is the 514 -

doughealy (doug.healy@csra.com)
2018-03-08 17:36:39

yes , 162 incoming to Em7 for Traps

doughealy (doug.healy@csra.com)
2018-03-08 17:37:15

if you are talking to the Firewall guys , then Em7:162 is the destination

doughealy (doug.healy@csra.com)
2018-03-08 17:37:40

Em7:161 is the Source for SNMP queries

doughealy (doug.healy@csra.com)
2018-03-08 17:40:11

a caveat toSNMP Traps is if you are doing anything custom on the Hosts with Traps , they have to be in a MIB file that can be imported into Em7

doughealy (doug.healy@csra.com)
2018-03-08 17:40:34

that allows Em7 to know what to do with them when they come in

EricN - SILO (enagley@sciencelogic.com)
2018-03-08 17:40:42

you don't actually have to have the mibs imported. They'll still work without them. It'll just look ugly ๐Ÿ˜›

EricN - SILO (enagley@sciencelogic.com)
2018-03-08 17:41:11

but if you set up your event policies right, you can make them say whatever you want anyway

doughealy (doug.healy@csra.com)
2018-03-08 17:41:31

yea , I have not had to manually import MIB to often , most of the time Traps are handled with the already present MIBs

doughealy (doug.healy@csra.com)
2018-03-08 17:42:22

yes event policy configs are key to getting value out of the incoming Traps and Syslog as well

doughealy (doug.healy@csra.com)
2018-03-08 17:42:46

fun stuff once you get the flow of it going

skylar92 (skylar@ligado.com)
2018-03-08 18:53:48

@doughealy so what about the snmp credentials, why do they need to point to 161, or do they / should they? or should they point to 162 as well?

skylar92 (skylar@ligado.com)
2018-03-08 18:59:47

@doughealy also note on discovery, can you leave it as default method, or do you need to select what port (udp:161 snmp vs tcp:161 snmp)???

skylar92 (skylar@ligado.com)
2018-03-08 19:14:01

**snmp credentials as in the creds in SL used for discovery

doughealy (doug.healy@csra.com)
2018-03-08 19:17:44

@skylar92 the Cred needs to be created separately in System --> Credentials once it is saved you wil see it in the list of SNMP creds for Discovery .

doughealy (doug.healy@csra.com)
2018-03-08 19:17:56

default method is fine

doughealy (doug.healy@csra.com)
2018-03-08 19:19:20

pretty much everything can be set to default in Discovery except the IP(s) of the host(s) and the Cred

doughealy (doug.healy@csra.com)
2018-03-08 19:19:42

you can always change the Org later or modify thresholds

jowen (jowen@opsvision.com)
2018-03-08 19:21:31

SNMP is UDP:161 and Traps are sent over port 162 (UDP also I believe) Although the name is so similar its best to think of SNMP as a completely different component from SNMP Traps.

jowen (jowen@opsvision.com)
2018-03-08 19:23:21

SNMP is EM7 asking ServerX โ€œWhat is your name, ip, etc, etcโ€ฆโ€ on a regular interval, on the other hand SNMP Trap is ServerX telling EM7 โ€œHey your primary PSU just failed over to backupโ€

jowen (jowen@opsvision.com)
2018-03-08 19:24:31

so Traps are usually used for event triggers within a system, while SNMP is used as a Profile/status of all the components

skylar92 (skylar@ligado.com)
2018-03-09 16:23:17

yeah @jowen that's my feel of that too, we are more concerned about the servers and their traps, as more of a reactionary, and eventually we will probably move towards also including proactive monitoring (or so it seems/feels to me) via EM7 asking the status, as opposed to EM7 being told when something is up.

skylar92 (skylar@ligado.com)
2018-03-09 16:24:11

I was just curious if, after the device is configured to send its traps to SL, if we needed to do anything on SL side, outside of a discovery using the snmp creds used during the snmp config of the device right -

EricN - SILO (enagley@sciencelogic.com)
2018-03-09 16:30:17

you could also discover as pingable

skylar92 (skylar@ligado.com)
2018-03-09 19:43:18

what is the argument for not loading mibs

skylar92 (skylar@ligado.com)
2018-03-09 19:43:27

my team is convinced that nothign will work without a mib

EricN - SILO (enagley@sciencelogic.com)
2018-03-09 19:45:44

SL doesn't strictly need the mibs to work

EricN - SILO (enagley@sciencelogic.com)
2018-03-09 19:45:58

but it makes things prettier and slightly easier to work with

EricN - SILO (enagley@sciencelogic.com)
2018-03-09 19:46:10

keep in mind though that we include a lot of mibs out of the box

Mike Gray (mike@graywind.org)
2018-03-10 00:39:03

Some other NMS software requires the MIB, they may be thinking of that

skylar92 (skylar@ligado.com)
2018-03-13 18:49:12

hey guys, does anyone know how we can get the 'destination' or 'ip address' of the 'sender of a trap' ... im still super green with this ... but we have one box that is forwarded a bunch of traps, the addresses and stuff are in the raw trap itself ... but in sciencelogic all i see is %M and the message of the trap, an the trap oid, and oids of any 'trap detail' elements. much love โค

EricN - SILO (enagley@sciencelogic.com)
2018-03-13 18:50:42

EM7 parses that on its own. those traps should be auto aligned to a device

EricN - SILO (enagley@sciencelogic.com)
2018-03-13 18:51:44

that gets processed on the collector on receipt of the trap

skylar92 (skylar@ligado.com)
2018-03-13 19:00:19

the traps are being forwarded from a server ...

skylar92 (skylar@ligado.com)
2018-03-13 19:00:23

to em7 ...

SLGDT (abel.leyva@gdt.com)
2018-03-13 19:02:24

Under System >> Settings >> Behavior...do you have "Ignore trap agent-addr varbind" check-marked?

skylar92 (skylar@ligado.com)
2018-03-13 19:03:31

let me check ..

skylar92 (skylar@ligado.com)
2018-03-13 19:03:35

all the traps are coming from a server

skylar92 (skylar@ligado.com)
2018-03-13 19:03:38

but before that

skylar92 (skylar@ligado.com)
2018-03-13 19:05:39

they are coming from multitude of different devices,

skylar92 (skylar@ligado.com)
2018-03-13 19:05:47

like multipoint, to point, then this point is fwd them to SL

skylar92 (skylar@ligado.com)
2018-03-13 19:06:01

and we believe that it is this fwd of traps, using this tool called 'socket station'

skylar92 (skylar@ligado.com)
2018-03-13 19:06:29

https://www.augur.com/SocketStation/

augur.com
skylar92 (skylar@ligado.com)
2018-03-13 19:07:23
skylar92 (skylar@ligado.com)
2018-03-13 19:08:38

so no, it doesnt look like its checked off

SLGDT (abel.leyva@gdt.com)
2018-03-13 19:09:40

Ok cool

skylar92 (skylar@ligado.com)
2018-03-13 19:12:35

but its like, the traps are coming from over 200 different devices.

skylar92 (skylar@ligado.com)
2018-03-13 19:12:41

but when we get a trap

skylar92 (skylar@ligado.com)
2018-03-13 19:12:47

its just from one device 'the forwarder'

skylar92 (skylar@ligado.com)
2018-03-13 19:13:14

but we dont know how to get the original trap throwers ip address / name / address / info yknow ...

skylar92 (skylar@ligado.com)
2018-03-13 19:13:27

we dont want to go out and discover all these, due to licensing etc probably im guessing

SLGDT (abel.leyva@gdt.com)
2018-03-13 19:22:28

Is that "forwarder" doing any sort of trap translation? I took a quick look at their website and that was one of the things that I saw it could do.

skylar92 (skylar@ligado.com)
2018-03-13 19:24:48

im not sure

skylar92 (skylar@ligado.com)
2018-03-13 19:24:51

its really abstracted from us

skylar92 (skylar@ligado.com)
2018-03-13 19:25:36

i think they might be ...

skylar92 (skylar@ligado.com)
2018-03-13 19:26:23

they show up as xml or whatnot in some log

skylar92 (skylar@ligado.com)
2018-03-13 19:27:07

what are varbinds?

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-16 14:48:48

๐Ÿบ -oclock time here; have a great weekend!

EricN - SILO (enagley@sciencelogic.com)
2018-03-16 14:49:37

๐Ÿป

SLGDT (abel.leyva@gdt.com)
2018-03-22 19:25:23

Is anyone monitoring SAP?

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-28 19:07:26

Party ! We have our first Critical ticket! database node unreachable, all phonehome collectors unable to fail over

Sean Hook (shoo@plex.com)
2018-03-28 21:00:07

ouch

SLacker (jesse.farnham@redriver.com)
2018-03-28 21:42:39

Yikes Tom, I hope everything is back up for you. I don't want to bother you if you are still in a crit. sit. but once you have it sorted out I would be very interested to hear if you or SILO think it has anything to do with the version you are on. I'm hoping to go to 8.7 soon and phonehome functionality needs to work. ๐Ÿ˜ƒ

Tom Robijns (tom.robijns@realdolmen.com)
2018-03-29 11:43:55

Issue got resolved 20' after calling support. root cause analysis is still busy. Probably for tomorrow I guess

Brian D (brian.davenport@tierpoint.com)
2018-03-29 18:27:06

Lucky, got a gremlin that keeps coming back here randomly....

gardar (gardara@sensa.is)
2018-04-03 11:17:08

Does anyone here know what SL1 is?

Mike Gray (mike@graywind.org)
2018-04-03 20:13:39

Next iteration of EM7?

gardar (gardara@sensa.is)
2018-04-04 08:08:47

Yep seems like they are re-branding em7

skylar92 (skylar@ligado.com)
2018-04-05 18:02:45

hey all,

skylar92 (skylar@ligado.com)
2018-04-05 18:02:58

i have some scilo questions ... about events ... we have 'traps' coming in ...

skylar92 (skylar@ligado.com)
2018-04-05 18:04:40

but say, a trap has some detail, like temperature, so i want to know how to write a policy about if this piece of trap oid detail (or maybe varbinding?) is < x or > y then throw alarm with severity blah blah blah ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-05 19:04:59

Is it for a specific vendor and do you have the mib for it?

skylar92 (skylar@ligado.com)
2018-04-05 20:00:13

*Thread Reply:* https://www.augur.com/SocketStation/

augur.com
skylar92 (skylar@ligado.com)
2018-04-05 20:00:22

*Thread Reply:* we are using that and its fwding traps to scilo

skylar92 (skylar@ligado.com)
2018-04-05 20:00:30

*Thread Reply:* we are taking those traps and trying to 'do stuff' with them

skylar92 (skylar@ligado.com)
2018-04-05 20:02:00

*Thread Reply:* we have some mibs for some stuff ... it's 'resolving' the traps into english ... so we have things like

[blah blah blah status off blah blah blah] and [blah blah temp 85 blah blah blah]

and i want a policy that says, if temp trap, then if this trap detail oids value is a certain value, then make it an event/alarm

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-05 20:12:25

*Thread Reply:* snmp event policies are text-only so you will have to look it up in the message

skylar92 (skylar@ligado.com)
2018-04-05 20:13:21

*Thread Reply:* so how can you pull the value out of the text, and then do logic on it?

skylar92 (skylar@ligado.com)
2018-04-05 20:13:43

*Thread Reply:* like yes, the temp is listed in the trap message, but i dont want 120 policies for each different degree the system could be at right -

skylar92 (skylar@ligado.com)
2018-04-05 20:14:07

*Thread Reply:* if trap contains 1 then 'cold' if trap contains 2 then 'cold' ... if trap contains 55 then 'warm' ... etc

skylar92 (skylar@ligado.com)
2018-04-05 20:14:13

*Thread Reply:* like > < = etc -

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-05 20:14:49

*Thread Reply:* are the values and objects in separate snmp oids?

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-05 20:15:23

*Thread Reply:* eg 1.3.6.4.6: temp;1.3.6.4.7: 50; 1.3.6.4.8: High

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-05 20:17:07

*Thread Reply:* and is there an indicator that says 55 is above/below/good value?

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-05 20:19:18

*Thread Reply:* or even better, can you have you socketstation to set that for you?

skylar92 (skylar@ligado.com)
2018-04-05 19:59:45

it's custom

SLGDT (abel.leyva@gdt.com)
2018-04-06 20:11:07

Is anyone monitoring Forcepoint devices via SNMP

SLGDT (abel.leyva@gdt.com)
2018-04-06 20:11:47

The reason I ask is because they have 3 modules on the same device and each module uses a different community string. I am curious how ScienceLogic will be able to handle that

SLGDT (abel.leyva@gdt.com)
2018-04-06 21:29:05

Would it be possible to monitor the same device using 3 different SNMP Community Strings?

SLGDT (abel.leyva@gdt.com)
2018-04-06 21:29:08

at the same time:D

SLacker (jesse.farnham@redriver.com)
2018-04-09 12:59:58

I don't see why it wouldn't be possible. I'm having trouble imagining why you would want to, but I'm guessing you have a good reason. You may have to create copies of some DAs though as I think you can only have a given DA on a device once, and then that whole DA will use one credential. If you needed a different string for another oid in that same DA, I think you would need to copy the DA, apply it to the device, then set that DA to use a different credential (the other string you want to use)

SLacker (jesse.farnham@redriver.com)
2018-04-09 13:00:51

Oh, I am re-reading what you have above. Do the three modules each have their own IP address?

SLacker (jesse.farnham@redriver.com)
2018-04-09 13:41:59

One more note, I'm not sure about forcepoint specifically, but on some systems you can define multiple SNMP strings/users/groups. If adding additional SNMP strings to the devices is an option, that may be the easiest way to tackle this. Just add the same, new string, to all 3 modules.

SLGDT (abel.leyva@gdt.com)
2018-04-09 16:10:16

So the 3 modules all use the same IP address. Each module has what it believes are its own NICs as well as additional OIDs that need to be monitored. I was thinking about going the Custom DA route with each DA using its own SNMP String. So what is interesting about these devices is you can set the system to have a string of lets say "public". Each module will then automatically assign its String to itself. So for instance the proxy module will have a string of "public-proxy" and the web module would be "public-web".

SLacker (jesse.farnham@redriver.com)
2018-04-09 16:16:11

hrmmmm, I haven't had the "pleasure" to work with something like that before. that sounds like odd behavior.

SLacker (jesse.farnham@redriver.com)
2018-04-09 16:18:13

is that thing v3 capable

SLacker (jesse.farnham@redriver.com)
2018-04-09 16:18:14

?

SLacker (jesse.farnham@redriver.com)
2018-04-09 16:31:49

I wonder if setting up snmpv3 would resolve this issue, since v3 doesn't really use the community names that have the strange suffix applied. It uses a username that you configure and optionally, a password and encryption string.

SLacker (jesse.farnham@redriver.com)
2018-04-10 14:46:49

Anyone monitoring Fortinet devices?

skylar92 (skylar@ligado.com)
2018-05-01 15:05:16

*Thread Reply:* I read that as Fort nite haha

SLacker (jesse.farnham@redriver.com)
2018-04-10 14:47:29

I see there is a power pack, but it was posted in 2015...just wondering if anyone knows if the oids have changed much/at all, or if I may be better off using something else

Scot (sneedy@gannett.com)
2018-04-10 18:28:54

We have a few but also ran into the same issue. They are getting decommissioned this month so no value in doing anything more than host resource monitoring for me ATM.

Scot (sneedy@gannett.com)
2018-04-10 18:38:28

They do publish a MIB also.

Jason (j.horstead@uk.cdw.com)
2018-04-17 14:38:57

How do others here monitor Microsoft Clusters for failovers etc? There is not an out of the box solution as far as I'm aware...

SLacker (jesse.farnham@redriver.com)
2018-04-17 15:54:24

I haven't actually done it, but there is a section in the guide for it. The guide recommends discovering each node in the cluster and discovering the shared IP node as a separate device.

SLacker (jesse.farnham@redriver.com)
2018-04-17 16:25:04

I have a vCenter I'm struggling with. It ESXi 6.5. My credential test runs fine, discovery seems to get all the components and the relationships look right, but the collection for performance data seems to fail with an SSL problem. "Unable to connecto to vSphere Server: <Dynamic app name and number> [SSL: CERTIFICATEVERIFYFAILED]..."

SLacker (jesse.farnham@redriver.com)
2018-04-17 16:26:24

Anyone run into this and know where I may be going wrong? I find it strange because it should all use the same cred and address, so...if discovery and relationship mapping succeeds, why do performance collections fail?

SLacker (jesse.farnham@redriver.com)
2018-04-17 16:27:07

I'm also getting VMware Events just fine and they look right.

SLacker (jesse.farnham@redriver.com)
2018-04-17 16:30:19

additionally, testing the web access is successful (as far as the MOB page loading and giving me data)

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-17 16:41:26

@SLacker have you set the SSO in the credentials config? I think it's parameter 3. If so, better remove it

Sean Hook (shoo@plex.com)
2018-04-17 16:51:09

@Jason WSFC is not supported by SILO. @Tom Robijns was working on a homebrew, and we have hired out this work.

SLacker (jesse.farnham@redriver.com)
2018-04-17 16:51:47

originally we did have that set, nothing worked then. removed it and that is when discovery did find everything

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-17 23:07:47

@Jason We developed our own Windows server Failover cluster and used component discovery to migrate failover components from one device to another

Mike Jasper (mjasper@sciencelogic.com)
2018-04-20 16:19:46

Here's a general tip from the SL Doc team -- to get the most recent set of online docs, replace the version number with the word "latest" in the URL:

https://portal.sciencelogic.com/files/documentation/8-4/index.htm --> https://portal.sciencelogic.com/files/documentation/latest/index.htm

๐Ÿ‘ Tom Robijns
pbackman (pbackman@opsvision.com)
2018-04-25 22:02:48

@EricN - SILO Have you got any info when we can get a beta of SL1 so we can start getting used to all changes new interface dashboard and so on

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-26 14:18:53

sounds like someone had a sneak preview ๐Ÿ˜„

SLacker (jesse.farnham@redriver.com)
2018-04-26 14:43:49

Anyone using the Cisco: UCS power pack? Question about CPU metrics. The power pack description clearly says that it will get CPU metrics, but I don't get CPU metrics from it and I don't see a collection in any of its DAs that would make me think it gets it. Followup, assuming that the power pack doesn't actually get CPU metrics, anyone have an easy way to get that?

SLacker (jesse.farnham@redriver.com)
2018-04-26 14:45:04
Sean Hook (shoo@plex.com)
2018-04-26 15:22:17

UCS C or UCS B? We are using the UCS powerpack, because it does a nice job of creating the device component view - with the domains/chassis/blades

Sean Hook (shoo@plex.com)
2018-04-26 15:25:30

It is clumsy when it comes to Profiles, and at that level the UCS information is mostly only configuration

Sean Hook (shoo@plex.com)
2018-04-26 15:26:49

We do not get CPU level information from the UCS Powerpack - as you said, it does not appear to have a DA to do this. We are using either the NET-SNMP or the Windows DA checks depending on the device in question.

SLacker (jesse.farnham@redriver.com)
2018-04-26 17:12:29

@Sean Hook Gotcha, and thank you for the info, good sir!

pbackman (pbackman@opsvision.com)
2018-04-26 20:53:11

Anyone have a link for the latest sync server

pbackman (pbackman@opsvision.com)
2018-04-26 22:06:35

@EricN - SILO i have a strange question

In our system we have multiple custome's and we have one user policy only

in that we have a selection of default dashboards

is there a way to provide visibility to customer-specific dashboards using only the single generic user policy?

SLacker (jesse.farnham@redriver.com)
2018-04-27 12:26:15

*Thread Reply:* I think you want to use access keys with dashboards. Messy link coming:

SLacker (jesse.farnham@redriver.com)
2018-04-27 12:31:37

*Thread Reply:* I think you could also use the method described by Jeffrey Baily in the admin thread, but that has some downsides as well in that you then have to make sure the user that made the dashboard doesn't change org memberships and doesn't get deleted. If, instead, you just make the dashboard shared and select one or more required keys, then those users should be able to see the dashboard.

Mohammed (mohammed@ligado.com)
2018-04-27 03:36:39

Hello I want to extract from RegEx by using %R /%R. Here is my test TRAP : STRING: "Hello" ##.##99.55.22.2; (Trap 1.3.6. and I want to extract IP address, how ?

Mohammed (mohammed@ligado.com)
2018-04-27 03:37:06

What will be the RegEx ?

Mohammed (mohammed@ligado.com)
2018-04-27 03:37:28

to get that 99.55.22.2

Mohammed (mohammed@ligado.com)
2018-04-27 03:39:24

Clue is before IP address there will be always ##.##

Mohammed (mohammed@ligado.com)
2018-04-27 03:39:32

after IP address ;

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 06:35:32

Mohammed, this is a complete regex that should do the trick. Basically I search for the colon behind the ip address and work my way back: (\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b);(?&lt;=;)

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 06:35:57

You can verify regexes on regex101.com

Mohammed (mohammed@ligado.com)
2018-04-27 13:36:08

Let me try this

Mohammed (mohammed@ligado.com)
2018-04-27 13:38:28

Excellent ...... Thanks Tom, it works

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 16:58:28

Mike, that'll work, but also triggers 309.458.43.0 ๐Ÿ˜‰

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 17:01:34

This is a shorter version of my example: (\b(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b)

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 17:02:05

still not perfect because it also allows 3.2.1.0

Mike Gray (mike@graywind.org)
2018-04-27 17:06:49

If your dataset includes something like that i have nothing for you ๐Ÿ˜‰

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 17:11:53

I do suppose you can still argue that 224.x.x.x and 255.x.x.x aren't 'valid' addresses either ๐Ÿ˜‰ but i'ts gotta stop somewhere

Mike Gray (mike@graywind.org)
2018-04-27 17:12:37

I'm going to use my first one, but this has been a fun exercise

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 17:12:58

and by the way, my example was leant from https://www.regular-expressions.info/examples.html

Mike Gray (mike@graywind.org)
2018-04-27 17:13:34

Great minds ๐Ÿ˜‰

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-27 17:13:54

lol

Mohammed (mohammed@ligado.com)
2018-04-27 22:04:03

Tom, when I used it in Policy I am gettin IP address 99.55.22.2; it includes with ; (semicolon)

Mohammed (mohammed@ligado.com)
2018-04-27 22:04:09

I used : (\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?).(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?).(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?).(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b);(?<=;)

Mohammed (mohammed@ligado.com)
2018-04-27 22:04:26

I want to discard semicolon ;

Mohammed (mohammed@ligado.com)
2018-04-27 22:04:36

just IP address

Mohammed (mohammed@ligado.com)
2018-04-27 22:05:11

Here is the sample string . STRING: "Hello" ##.##99.55.22.2; (Trap 1.3.6.

Mohammed (mohammed@ligado.com)
2018-04-27 22:07:18

Also another sample string is : STRING: "LTD is down 1.59" ##.##99.55.22.2; (Trap 1.3.6.

Mohammed (mohammed@ligado.com)
2018-04-27 22:07:58

Also another sample string is : STRING: "Power is down for x amount of time" ##.##99.55.22.2; (Trap 1.3.6.

Mohammed (mohammed@ligado.com)
2018-04-27 22:08:44

there could be different different TRAPs but all I need only IP address

Mohammed (mohammed@ligado.com)
2018-04-27 22:09:10

and IP address could be different xxx.xxx.xxx.xxx

Tom Robijns (tom.robijns@realdolmen.com)
2018-04-28 07:23:06

then just skip the latest section: ;(?&lt;=;)

Mohammed (mohammed@ligado.com)
2018-04-28 16:49:44

ok thanks. Tom

skylar92 (skylar@ligado.com)
2018-05-01 15:07:05

Hey everyone ... I am very curious if we can parse out special characters or subsets of %M.

skylar92 (skylar@ligado.com)
2018-05-01 15:07:33

*Thread Reply:* for example, one of our %M coming across in the event policy when it gets hit is

skylar92 (skylar@ligado.com)
2018-05-01 15:07:35

*Thread Reply:* 13:16:20.97 >> CU RcvFlt: CUS=3 CU=5(5) CU=23(1)

skylar92 (skylar@ligado.com)
2018-05-01 15:07:54

*Thread Reply:* We're being asked if we could have the event message be CU RcvFlt: CUS=3 CU=5(5) CU=23(1) instead ...

Mike Gray (mike@graywind.org)
2018-05-01 15:11:13

*Thread Reply:* The event message is defined by the dynamic application aligned to that app, so you should be able to adjust the message going to %M from there

skylar92 (skylar@ligado.com)
2018-05-01 15:12:01

*Thread Reply:* We weren't using any dynamic apps ...

Mike Gray (mike@graywind.org)
2018-05-01 15:14:01

*Thread Reply:* What's triggering the event message?

skylar92 (skylar@ligado.com)
2018-05-01 15:14:16

*Thread Reply:* To my knowledge, we discovery, then the traps are coming in from the device, and %M is just part of the event policy so we can see what the event message of the trap is/was.

Mike Gray (mike@graywind.org)
2018-05-01 15:14:57

*Thread Reply:* Ah, then I'm not sure how to adjust it. Typically %M on a trap is the trap itself

skylar92 (skylar@ligado.com)
2018-05-01 15:15:05

*Thread Reply:* yeah, or the syslog

Mike Gray (mike@graywind.org)
2018-05-01 15:15:23

*Thread Reply:* Right, if it's syslog

skylar92 (skylar@ligado.com)
2018-05-01 15:15:27

*Thread Reply:* and our syslogs are <Apr 30> 08:50:55.23 message

skylar92 (skylar@ligado.com)
2018-05-01 15:15:39

*Thread Reply:* and so they are saying 'we want it to just say message'

skylar92 (skylar@ligado.com)
2018-05-01 15:15:44

*Thread Reply:* and im like ... that's %m ...

skylar92 (skylar@ligado.com)
2018-05-01 15:16:19

*Thread Reply:* %M - .:.:... some regex or something idk ...

Mike Gray (mike@graywind.org)
2018-05-01 15:16:32

*Thread Reply:* So, you can do it, it's just a bit complex

skylar92 (skylar@ligado.com)
2018-05-01 15:16:38

*Thread Reply:* oh can you ๐Ÿ™‚

Mike Gray (mike@graywind.org)
2018-05-01 15:16:40

*Thread Reply:* Do you have the Cisco Wireless PowerPack?

skylar92 (skylar@ligado.com)
2018-05-01 15:16:46

*Thread Reply:* let me check

Mike Gray (mike@graywind.org)
2018-05-01 15:16:52

*Thread Reply:* If so check out event policy "Cisco Wireless: Adhoc Rogue Auto Contained"

skylar92 (skylar@ligado.com)
2018-05-01 15:17:20

*Thread Reply:* no, we don't in our prod env

skylar92 (skylar@ligado.com)
2018-05-01 15:17:26

*Thread Reply:* ill download it -

Mike Gray (mike@graywind.org)
2018-05-01 15:17:57

*Thread Reply:* It looks like under "Identifier Pattern" you can enter the format of your particular trap/syslog and, using capturing groups in RegEx, identify what you want to snag from the message itself

skylar92 (skylar@ligado.com)
2018-05-01 15:18:20

*Thread Reply:* oh that would be nice

Mike Gray (mike@graywind.org)
2018-05-01 15:18:23

*Thread Reply:* For example, this identifier pattern:

Mike Gray (mike@graywind.org)
2018-05-01 15:18:24

*Thread Reply: bsnRogueAPDot11MacAddress: (.*); bsnClearTrapVariable: false;

Mike Gray (mike@graywind.org)
2018-05-01 15:18:33

*Thread Reply:* Your Identifier Format becomes:

Mike Gray (mike@graywind.org)
2018-05-01 15:18:33

*Thread Reply:* AP MAC Addr %1

Mike Gray (mike@graywind.org)
2018-05-01 15:18:42

*Thread Reply:* And the message is:

Mike Gray (mike@graywind.org)
2018-05-01 15:18:42

*Thread Reply:* Adhoc Rogue Auto Contained for %I

Mike Gray (mike@graywind.org)
2018-05-01 15:19:00

*Thread Reply:* An example would be something like:

Mike Gray (mike@graywind.org)
2018-05-01 15:19:09

*Thread Reply:* Adhoc Rogue Auto Contained for AP MAC Addr aa:bb:cc:dd

skylar92 (skylar@ligado.com)
2018-05-01 15:19:57

*Thread Reply:* oh that would be juicy

Mike Gray (mike@graywind.org)
2018-05-01 15:20:05

*Thread Reply:* To see further examples you can check your event policy manager and filter for "trap" as the type, then browse through some examples in your system

skylar92 (skylar@ligado.com)
2018-05-01 15:20:32

*Thread Reply:* what is /R %R /R ?

Mike Gray (mike@graywind.org)
2018-05-01 15:21:15

*Thread Reply:* Not sure offhand

Mike Gray (mike@graywind.org)
2018-05-01 15:22:00

*Thread Reply:* The documentation has a list of EM7 variables that should explain it further

Mike Gray (mike@graywind.org)
2018-05-01 15:23:43

*Thread Reply:* Click "guide" after you wrench an event policy and it will explain

Mike Gray (mike@graywind.org)
2018-05-01 15:23:54

*Thread Reply:* It's using RegEx to fill out your event message

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-01 20:33:19

*Thread Reply:* Thanks mike for pointing that regex out! With positive and negative lookahead I can finally resolve a bugging issue!

Mike Gray (mike@graywind.org)
2018-05-01 20:58:29

*Thread Reply:* Happy to help! I'm slowing becoming a RegEx convert...maybe one day I'll even be able to do it without the appropriate ritual sacrifice ๐Ÿ˜‰

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-05-02 01:06:43

ScienceLogic Users- register below for the SL1 demo and webinar coming up on May 16th: m.sciencelogic.com/SL1-productdemโ€ฆ #SL1 #AIOPS #Automation #cloudcomputing #noSQL

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-05-02 01:17:12

https://www.businesswire.com/news/home/20180501005278/en/ScienceLogic-Launches-Industry-First-Context-Infused-AIOps-Platform

businesswire.com
skylar92 (skylar@ligado.com)
2018-05-02 13:16:36

Hey fam, does anyone know if you can resize the columns on the event tab / screen?

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-02 13:42:44

*Thread Reply:* Yes: no you can't

๐Ÿ˜„ SLacker
๐Ÿ‘ Mike Gray
doughealy (doug.healy@csra.com)
2018-05-04 13:28:08

*Thread Reply:* you can change the "table row height" in the My Preferences setting to expand them if you choose Large but that is limited. I don't know of a way to change it otherwise

Sean Hook (shoo@plex.com)
2018-05-08 20:39:05

collector group

Sean Hook (shoo@plex.com)
2018-05-08 20:39:31

from the registry page, you can locate your device. Select the checkbox, then from the action button in the lower right locate the collector group

skylar92 (skylar@ligado.com)
2018-05-15 13:55:52

hey fam, we were super curious about Age/Elapsed ... it's not resetting when a new event comes in, we have some events where Last Detected is 5/15, but then it says Age/Elapsed is 3+ days .... what?

skylar92 (skylar@ligado.com)
2018-05-15 13:56:18

on hold waiting for a support agent to explain for 20 min now .... because their documentation is unclear ...

Brian D (brian.davenport@tierpoint.com)
2018-05-15 14:20:06

Last detected is when the event last fired, age/elapsed is the total time the event has been since first detection without a clearing event

Brian D (brian.davenport@tierpoint.com)
2018-05-15 14:20:14

@skylar92 ^^^

skylar92 (skylar@ligado.com)
2018-05-15 15:43:39

hey fam, is it best practice to have all devices send traps/traffic to each sciencelogic instance (dev/test/prod) or should all devices be sending to one device, that then sends traffic to the various instances ...

is there a MC that can send traffic to 3 diff envs???

it seems odd that we have to put so much traffic over out network, once it's made it to the internal network, its ok, but we have remote sites with devices, that send traffic from those remote site devices, to 3 different destinations, at like 3k traps a day, so 3k**3 = 9k traps a day ... thoughts?

Gerald M (gerald.miller@pacourts.us)
2018-05-15 15:45:50

You could stick a syslog server/relay in and then have that forward to your different environments. We are looking to roll this out ourselves in the next few weeks. I believe in one of the breakouts am symposium they were doing this.

skylar92 (skylar@ligado.com)
2018-05-15 15:46:52

we were using SocketStation ... but ScienceLogic chops off the Source Agent Address, so we dont know what device threw it, to ScienceLogic, it just looks like 'socket station' threw the trap ... which is not proper ...

skylar92 (skylar@ligado.com)
2018-05-15 15:47:10

We have now started to 'point all devices direct to the different silo ips'

skylar92 (skylar@ligado.com)
2018-05-15 15:47:21

(two all in ones, and one distributed, so in prod, it points to a MC)

Gerald M (gerald.miller@pacourts.us)
2018-05-15 15:50:00

Sorry I missed you said traps. Iโ€™ve been neck deep in syslog for the past few weeks.

SLacker (jesse.farnham@redriver.com)
2018-05-15 16:08:47

@skylar92 Have you looked into: use_v1trap_envelope_addr?

SLacker (jesse.farnham@redriver.com)
2018-05-15 16:09:20

I haven't used it, but the manual states:

SLacker (jesse.farnham@redriver.com)
2018-05-15 16:09:36

"The following global setting affects how the ScienceLogic platform processes SNMP traps:

usev1trapenvelopeaddr. In environments where Network Address Translation is performed on SNMP v1 trap messages sent to the ScienceLogic platform, you can configure the platform to read the envelope address (the address of the host sending the trap) instead of the agent address (the IP address variable sent as part of the trap). To use the envelope address instead of the agent address for SNMP v1 trap messages, the usev1trapenvelopeaddr=1 configuration option can be added to the [LOCAL] section of silo.conf on Message Collectors, Data Collectors that perform message collection, and All-In-One Appliances. If usev1trapenvelopeaddr is not defined in silo.conf or usev1trapenvelopeaddr=0 is defined, the platform will use the agent address for SNMP v1 trap messages."

SLacker (jesse.farnham@redriver.com)
2018-05-15 16:10:28

Not sure if your system is effectively performing NAT. This may not apply to your case. Just thought I would point it out since it sounded like what you were describing above.

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-15 17:06:18

@skylar92 how good do you know that SocketStation? In what format can it output what it receives?

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-15 17:07:05

Because if it is able to call silo's api, you could easily use that to make sure every entry in your SocketStation is sent to the right device in silo

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-15 17:07:57

worst-case, silo can process incoming Email and link it to a device if required.

SLacker (jesse.farnham@redriver.com)
2018-05-15 21:32:21

icky, just had a kernel panic on our primary db =(

๐Ÿ˜ฑ Tom Robijns
skylar92 (skylar@ligado.com)
2018-05-16 13:08:17

Is it possible to add default columns to the list of choices under โ€œevent console preferencesโ€? There are numerous columns I would like, IP or NodeAlias would be one, while many of the default columns have info that is not useful for me.

Sean Hook (shoo@plex.com)
2018-05-16 14:24:27

FYI - my current support ticket with SILO says that Local Users are all that is supported in the new UI (as of now). So no LDAP or SSO.

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-16 14:45:40

@Sean Hook it will be supported in 8.9 (that's what the video is promising)

Sean Hook (shoo@plex.com)
2018-05-16 14:46:04

SSO or Ldap? or both

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-16 15:28:11

sso

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-16 15:28:16

don't know about ldap

SLGDT (abel.leyva@gdt.com)
2018-05-16 17:19:39

Does anyone know where the logs are when you attempt to use Credential Test?

skylar92 (skylar@ligado.com)
2018-05-17 17:04:09

is there a better way to add things to a powerpack aside from clicking on over 1,000 policies ...

pbackman (pbackman@opsvision.com)
2018-05-17 17:56:09

in event select last day or a date and it will show you number of events found

skylar92 (skylar@ligado.com)
2018-05-17 18:45:49

*Thread Reply:* what is this in relation to?

skylar92 (skylar@ligado.com)
2018-05-17 18:59:05

what access governs the notes field on an event??? users with a certain policy can't edit this feild ...

skylar92 (skylar@ligado.com)
2018-05-17 18:59:07

field**

SLGDT (abel.leyva@gdt.com)
2018-05-17 19:04:08

Event Note:Add/Rem

skylar92 (skylar@ligado.com)
2018-05-17 19:25:32

*Thread Reply:* minty ... so, question, why isint this captured under Events - View OR the Events - Advanced keys OOB?

SLGDT (abel.leyva@gdt.com)
2018-05-17 19:05:58
Partha (partha.dasari@virtustream.com)
2018-05-22 10:53:08

Does anyone know if there is a powerpack for CentOS monitoring ?

Matt C (matthew.carter.914@gmail.com)
2018-05-22 12:25:10

im not aware of one but generic snmp should cover everything you need. what are you looking for specifically from a powerpack for centos?

Partha (partha.dasari@virtustream.com)
2018-05-22 13:10:20

i am actually looking if it has a capability to monitor services/processes running inside an appliance.

Partha (partha.dasari@virtustream.com)
2018-05-22 13:11:04

I plan to use ssh mechanism in monitoring the appliances and if the snmp is not supported..

Matt C (matthew.carter.914@gmail.com)
2018-05-22 13:34:48

*Thread Reply:* generally if snmp is enabled and configured to allow read access to the system processes, you can set by default in em7 monitoring policies for discovered services

Sean Hook (shoo@plex.com)
2018-05-22 14:07:20

*Thread Reply:* there re certain libraries that SILO will not let you load however - many of which are one that you will probably want if you intend to do anything at the system level

Mike Gray (mike@graywind.org)
2018-05-22 15:31:14

*Thread Reply:* There is an SSH PowerPack for Linux on the SiLo portal that accomplishes what you're describing, if I'm not mistaken

Mike Gray (mike@graywind.org)
2018-05-22 15:31:30

*Thread Reply:* I plan to implement it in our dev system in the next month and possibly roll to production depending on whether it does what we need

Mike Gray (mike@graywind.org)
2018-05-22 17:15:00

*Thread Reply:* Experience with neither

Mike Gray (mike@graywind.org)
2018-05-22 17:15:03

*Thread Reply:* They're going into dev

Partha (partha.dasari@virtustream.com)
2018-05-23 09:38:03

*Thread Reply:* i did check both the powerpacks.. any reason it is not in the OOB power packs with the iso ? is it still a pilot release ?

Matt C (matthew.carter.914@gmail.com)
2018-05-23 13:22:48

*Thread Reply:* could be pilot or could be community app. look for who it was released by on the portal as the community powerpacks are not supported by sciencelogic since they didnโ€™t actually make them

Partha (partha.dasari@virtustream.com)
2018-05-23 13:47:01

*Thread Reply:* Thanks Matt

Sean Hook (shoo@plex.com)
2018-05-23 16:37:03

*Thread Reply:* I think GOLD powerpacks are the ones on the ISO, but i could be wrong. Even these did not get me what i need - i am trying to get the status of services.

Partha (partha.dasari@virtustream.com)
2018-05-24 06:10:40

*Thread Reply:* Yes even I am looking for the same. Will try to check if the sciencelogic agent solution would be of any help in my case..

Vignesh Rajaram (vigneshkumar14194@gmail.com)
2018-05-23 09:30:24

Hi Partha,

As far as I know ScienceLogic agent will help you to monitor Process/Services inside an appliance/device. I have tried it already in CentOS it's works for me.

Vignesh Rajaram (vigneshkumar14194@gmail.com)
2018-05-23 09:40:01

Am sure the above link will help you to monitor process/services inside appliance/device in EM7

Partha (partha.dasari@virtustream.com)
2018-05-23 09:40:42

Thanks Vignesh

Partha (partha.dasari@virtustream.com)
2018-05-23 09:41:20

i am talking about a appliance have to check if these work over there.. will check it out..

Vignesh Rajaram (vigneshkumar14194@gmail.com)
2018-05-23 09:45:04

No problems Partha you can, the above link will definitely help you out my friend

Ali M (ali.mowazi@ligado.com)
2018-05-30 14:49:13

Hey I have a question hoping someone can help. I have 2 separate devices that send a trap with the same oid. When I create separate event policies only one first because they both depend on the same trap oid, any ideas how i can make a separate policy for each trap coming through. The only difference between the traps being received is the ip address but again the trap oid is the exact same

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-30 15:02:44

Hey Ali, ScienceLogic 'sees' which trap is sent from which device and will align the alert to the correct device. There's no need to create separate event policies

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:11:39

@Ali M Are you trying to have something different happen for each device? or the same thing?

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:13:43

hey @Tom Robijns that doesnt seem to be the case, only one event policy is firing

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:14:00

@SLacker different devices will have a different policy fire

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:14:22

IF you are trying to have something different for one of them, here is something you can try. You have policy 1 and 2 and device 1 and 2, you want event 1 for device 1 and event 2 for device 2, the the OID is the same. On event 1, suppress device 2. Change event 2 to have a detection weight of 1 (or higher) so it only catches the device you suppressed from event 1

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:15:09

@SLacker thats exactly what i tried to no avail but I didnt do anything with the detection weigh

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:15:20

I think that may get you the behavior you want (i am making some assumptions there)

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:15:36

weight**, so l will try that now and change the detectino weight for event 2

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:16:17

@SLacker your assumptions are correct, device a and device b both fire the same trap oid, i have event a and event b for each respective device and I want each event to fire for its respective device

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:16:34

however as of now only the one event is fired for both devices

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:18:36

did you already suppress device 2 on event 1?

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:18:58

what i had done originnally was surprise device 2 on event 1 and deice 1 on event 2

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:19:12

if you have suppressed the device from the event policy and it is still firing, that would be a silo case I think.

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:19:43

now im trying what you suggested , event 1 supproess device 2 and change weight of event 2 to 1

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:21:19

Yah what you suggested isnt working either, still only 1 policy firing for both devices

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:21:49

@SLacker when you say silo case, do you mean I should contact science logic?

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:22:21

If an event policy is firing for a suppressed device, i think you need to solve that first. Yeah, you should open a support case with them. If the device is suppressed on the event policy, that event should not fire for that device.

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:22:50

yea I was thinking the same I will do that

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:23:53

Sorry we couldn't be more helpful, but I think that will have to be the first step. It may help to let them know your ultimate goal when opening the case. You may get a support tech who can help you achieve it.

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:24:07

But they should definitely be able to at least get the suppression to work correctly

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:24:18

thanks anyway!

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:34:40

hey @SLacker I seem to have been making a mistake. I was using groups and realized that the device b was missing from the group. after adding that device back in the group, I get new behavior. Now one device a triggeres event a and supresses traps from device b but device b is just getting no events

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:41:40

Just a Recap for clarity : I have 2 Devices A and B both firing same trap oid. I have 2 policies Policy 1 and 2 both configured for this same trap oid. Policy 1 has detection weight 0 : and suppresses Device 2 , Policy 2 has detection weight 1 and suppresses no device.

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:42:44

I would think that should work... =(

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:47:27

Now device A is receiving traps from device a is matching with policy 1(which is also suppressing policy 2) but device 2 is not receiving anything although in the logs i can see a trap that is linked to policy 2 but with no event id(which leads me to assume that his trap is not linking to any event hence being suppressed?)

SLGDT (abel.leyva@gdt.com)
2018-05-30 15:52:25

the first policy is suppressing the device so it never even goes to the 2nd

SLGDT (abel.leyva@gdt.com)
2018-05-30 15:52:51

is multi-match on?

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:53:01

I think you need to A) make sure policy 2 is enabled, and B) check your multi match settings

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:53:37

Then open a case =(

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:54:48

I can't confirm that this will work, but this strategy was suggested to me by a SL support engineer ( after I explained how I achieved a similar setup but using RBAs and a lot of work....)

Mike Gray (mike@graywind.org)
2018-05-30 15:55:22

I've successfully pulled off that setup and it was suggested to me by SiLo Support as well

Mike Gray (mike@graywind.org)
2018-05-30 15:55:31

I didn't see the behavior you're experiencing though

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:56:03

Cause if you need to turn on multi match, then I think you will have to suppress every device (other than device 2) from event policy 2....that would be a huge problem as you add devices.

SLacker (jesse.farnham@redriver.com)
2018-05-30 15:56:11

well....you would have to work around that problem anyhow.

Mike Gray (mike@graywind.org)
2018-05-30 15:56:56

Ah, good call SLacker...I usually create a device group for what I want to fire against, and a device group called "Everything BUT <1st device group name>"

Mike Gray (mike@graywind.org)
2018-05-30 15:57:03

Or "NOT <1st device group name>"

Mike Gray (mike@graywind.org)
2018-05-30 15:57:28

Making sure both are dynamic

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:57:55

so Ill try to activate multi match and see what happens

Ali M (ali.mowazi@ligado.com)
2018-05-30 15:58:00

I dont have multi match on

Ali M (ali.mowazi@ligado.com)
2018-05-30 16:00:36

@SLGDT thats what i was assuming that once the first policy suppressed it it would be gone

Ali M (ali.mowazi@ligado.com)
2018-05-30 16:07:34

hey guys multi match was the key thanks guys!

Ali M (ali.mowazi@ligado.com)
2018-05-30 16:17:34

hey @SLacker @SLGDT this multi match works great I have a new issue now, we have a catch all policy and now that the multi match is on the catch all policy is also being triggered lol

SLacker (jesse.farnham@redriver.com)
2018-05-30 19:02:05

I think you will need to give your catch-all policy an even higher detection weight (maybe the highest)

SLacker (jesse.farnham@redriver.com)
2018-05-30 19:02:32

sorry for delay, got lots going on =( silly emergencies happen all at once. hahahahaha

skylar92 (skylar@ligado.com)
2018-05-30 19:27:36

Hey all, I am working on implementing a system that uses Syslogs ... On that, they are not using the ... conventional ... way of Syslogs ... The system uses Log4j 2 and syslog appenders to ... I think ... write to rsyslog ... (https://logging.apache.org/log4j/2.x/manual/appenders.html#SyslogAppender) Is there any way for Silo to integrate with rsyslog or somehow forward rsyslog or something ... The SMEs are saying it's on me to 'configure the science logic box' as they added the ip on the Syslog Appender ...

SLGDT (abel.leyva@gdt.com)
2018-05-30 19:40:56

Can they not forward all syslogs to your collectors?

skylar92 (skylar@ligado.com)
2018-05-30 19:44:53

*Thread Reply:* nope, they said they put something in their log4j appender and that's all they are willing to do

skylar92 (skylar@ligado.com)
2018-05-30 19:45:17

*Thread Reply:* i logged into the box that this is all configured on and tried to do whats in the silo documentation for verifying syslog service and got some weird result

skylar92 (skylar@ligado.com)
2018-05-30 19:45:40

*Thread Reply:* then i couldn't even find syslog.conf in the /etc/ file and so i went to the SME and he said that 'yeah we dont use syslog.conf, we use rsyslog and log4j ...

SLGDT (abel.leyva@gdt.com)
2018-05-30 19:55:50

*Thread Reply:* well that sucks

SLGDT (abel.leyva@gdt.com)
2018-05-30 19:59:11

*Thread Reply:* are they using this for syslogs or logs?

SLGDT (abel.leyva@gdt.com)
2018-05-30 20:02:22

*Thread Reply:* I am reading up on this. When they output the data from the syslog appender what format are they pushing?

SLGDT (abel.leyva@gdt.com)
2018-05-30 20:09:02

*Thread Reply:* https://logging.apache.org/log4j/2.x/manual/layouts.html talks about the RFC5424 layout which is what you need

Siva (m.sivakumar.2308@gmail.com)
2018-05-31 14:18:09

Hi all, Good morning! I have a small issue with discovering a device using a template. The template I created has 6 DA's (These are custom dynamic app based on our requirement but developed from ScienceLogic's default DA) When I ran the discovery session with the template I created, all DA's in the template got aligned to the device. However, in few seconds the default DA's got aligned as well to the device. The default DA's are in "Enabled" status as we have some other requirement to accomplish with them. Is there a possible way we could skip the default DA's getting aligned to device as I don't need them and I am using template with the custom DA's in it. Any suggestions / recommendations much appreciated. Thank you so much!

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-31 14:24:05

Hello Siva, I think it is because the default DynApps have a 'Discovery' collection object, which causes ScienceLogic to auto-align them if the discovery contains an expected value

Siva (m.sivakumar.2308@gmail.com)
2018-05-31 14:26:20

Hi Tom .. Thank you! Yes I agree with you. But the default DA's are used for few other devices. So to discover them, I will have to leave them untouched. If I make some changes then discovering will be an issue. Any suggestions please?

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-31 14:27:43

If you don't need the default dynapps to be aligned automatically, the only option is to remove the discovery collection object from the default DA's

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-31 14:29:20

another (worse) option is to uncheck the 'Auto-Update' option on the devices you don't want the default DA's aligned

Siva (m.sivakumar.2308@gmail.com)
2018-05-31 14:35:06

Ok then if I remove the discovery collection object from default DA's, will I be able to use them without making any changes to their default behaviour? And please help me to understand, the worst scenario if I uncheck the 'Auto-Update' option. Thank you!

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-31 17:35:12

@Siva scienceLogic uses the discovery collection object on an Dynamic application to see if it should align that dynamic application with a certain device. Take (for example, not a real dynapp) a dynapp called 'Microsoft: Windows Domain Controller LDAP Performance'. This dynapp does not make sense to align to a server that is not a Windows domain Controller. If this dynapp would contain a Discovery collection object that says: if you find a value for this collection object, then align the Dynamic Application to this device. The result is for 2 separate servers - one being a domain controller and the other a sql server - the DynApp would only be aligned to the first device. If however you would remove the discovery collection object, ScienceLogic has no way to know to which device it should align the dynapp and will just skip it. Every night during Nightly Update (around 4-5am), ScienceLogic will run all dynamic applications with a discovery against all devices it could possibly match to and aligns the dynapp to the server that respond positive.

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-31 17:35:23

(so far option 1)

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-31 17:37:05

Option 2 is basically the inverse: On the device wrench -> Properties, there's a selection box 'Auto Update'. Default it is checked and basically means: 'During nightly update, include me to find out if there are dynamic applications that are useful for me' Unchecking that box simply prevents ScienceLogic from ever manually aligning any dynapp

skylar92 (skylar@ligado.com)
2018-05-31 18:19:42

hey, what does this mean ... 132.0.0.12 already used by DID 17 on CUG

Tom Robijns (tom.robijns@realdolmen.com)
2018-05-31 20:46:18

You try to add a device in silo with the same ip address as did 17 on the same collector group. That is not allowed

Siva (m.sivakumar.2308@gmail.com)
2018-06-01 08:00:25

Thanks much @Tom Robijns Will check get back if in questions!

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:26:16

hey Ive got a problem if anyone can help that would be great. I have a number of event policies in our scilo dev instance and these policies have some device groups being suppressed. but when i move these policies via power pack between my dev and test/prod instance they policies carry over without the suppressed groups.

SLacker (jesse.farnham@redriver.com)
2018-06-01 14:39:55

I think that makes sense.

SLacker (jesse.farnham@redriver.com)
2018-06-01 14:40:53

The device IDs will (likely) be different on your two stacks, so you wouldn't ( I imagine) want to have the suppressions exported with the PP.

SLacker (jesse.farnham@redriver.com)
2018-06-01 14:41:54

reread, I should have said device group ids

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:42:42

yah I would think so but when moving over policies that have other policies selected under the auto clear menu they still carry over

SLacker (jesse.farnham@redriver.com)
2018-06-01 14:43:26

But aren't those all contained within the PP you are moving?

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:44:34

no actually, we first created a bunch of policies and moved them over and then we realized we need clear policies and then moved those over after wards

SLacker (jesse.farnham@redriver.com)
2018-06-01 14:47:41

I think you should package up the related events in one PP and move them together...I could be wrong, but I think that way, the relationships will remain in tact.

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:49:16

not sure what you mean? Im trying to bring over event policies that suppressing certain device groups. but when the event comes over those suppressions are no longer there

SLacker (jesse.farnham@redriver.com)
2018-06-01 14:52:24

What kind of event policies are we talking about here?

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:55:11

Just a normal event policy created via registry - > event manager - > create . In that policy its event source is a trap and under the supressions tab I have a device group selected under the suppressed device groups

SLacker (jesse.farnham@redriver.com)
2018-06-01 14:55:51

ok, trap. cool

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:56:37

yep any ideas ?

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:57:09

the thing is we will have about 200 policies with suppressions and it feels super redundant to have to manually add the suppressed devices over and over

Ali M (ali.mowazi@ligado.com)
2018-06-01 14:57:35

in each instance and we have 3

SLacker (jesse.farnham@redriver.com)
2018-06-01 15:00:12

I guess I'm not sure. I don't think suppressions are supposed to export...but I could be wrong.

SLacker (jesse.farnham@redriver.com)
2018-06-01 15:10:02

I guess you could create a dynamic group definitions, add that to the power pack, then when you import it you would just add that one group to the suppressions. Tha'ts the best idea I have (if indeed event policies are NOT supposed to export with suppression). I guess in my mind, PPs are made to be taken from one system to another, where device and group IDs would be completely different. So i can't figure out how that would even work to move event suppressions from one stack to another.

SLacker (jesse.farnham@redriver.com)
2018-06-01 15:10:33

I may not be the best resource for this question though, but I didn't see anyone else responding...so, just trying to help.

Ali M (ali.mowazi@ligado.com)
2018-06-01 15:19:27

yah appreciate it thanks anyway

Ali M (ali.mowazi@ligado.com)
2018-06-01 15:19:37

if anyone else has any ideas that would be great!

SLacker (jesse.farnham@redriver.com)
2018-06-01 20:51:58

Anyone know what causes this type of event? System: EM7 major event: Device <number> is not aligned to dynamic app <number>

Mike Gray (mike@graywind.org)
2018-06-01 20:52:39

I believe I've seen that when the discovery object OID is not responsive on the device

SLacker (jesse.farnham@redriver.com)
2018-06-01 20:53:04

hrmmm, ok, thanks i'll look into that

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-01 22:59:49

I've seen it in cases where component devices are not monitored from the same collector as the root device

Mike Gray (mike@graywind.org)
2018-06-01 23:01:54

Ah, good call Tom, I've also seen that

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-06 17:45:16

Anyone gonna join the ScienceLogic webinar " Event Information: Webinar: Three CI Automation Workflows to Drive Business Value" in a few moments?

SLacker (jesse.farnham@redriver.com)
2018-06-06 18:44:43

meh, I missed it. Was it good?

SLacker (jesse.farnham@redriver.com)
2018-06-06 18:44:51

Driving value sounds good. ๐Ÿ˜ƒ

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-06 19:36:51

It was not bad... stating the obvious (keep your cmdb current) but did not really dove into it

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-06 19:37:57

One interesting thing: the customer had an automation from their SNOW to set maintenance for X hours

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-06 19:39:00

also when CI was retired, automation cleared all info in silo but also in snow (related tickets, open events, ...)

SLacker (jesse.farnham@redriver.com)
2018-06-06 21:20:08

Question: Anyone seen this and know how to fix it?

SLacker (jesse.farnham@redriver.com)
2018-06-06 21:20:09

EM7 major event: + Required process (Enterprise Database: Collector Task Manager) is not responding

SLGDT (abel.leyva@gdt.com)
2018-06-07 19:34:52

Does anyone have any issues where Serial Numbers are not being populated in the portal? Entity Configuration is pulling the serial number just fine and I can see it when I look at configs. It just wont populate.

SLacker (jesse.farnham@redriver.com)
2018-06-08 15:13:12

Good morning! (afternoon/evening/day), anyone know what the expected behavior is when merging a vCenter server (component device VM) with the vCenter server (root device)? Specifically, what does this do in the relationships? Should I expect a loop?

SLacker (jesse.farnham@redriver.com)
2018-06-08 15:18:50

vCenter VM--is child of-->Host server-->Cluster-->Folder-->Datacenter-->vCenter-->Repeat?

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-08 18:10:08

Hey Jesse. You simply can not merge a component device discovered with it's root device.

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-08 18:10:39

So if you have a vcenter, which is also a vm in the vmware environment, you'll always end up with 2 devices.

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-08 18:11:03

same applies to a standalone esx host: it 'discovers' the actual esx host, but you cannot merge them

SLacker (jesse.farnham@redriver.com)
2018-06-08 19:50:38

Ahhhh, ok. well, I guess I would have found that out if I had bit the bullet and tried. But I'm glad there is something in place to prevent that! Thanks @Tom Robijns!

โœ… Tom Robijns
SLGDT (abel.leyva@gdt.com)
2018-06-08 20:47:46

Has anyone ever had a datacollector lose it license for no reason?

Liz (ashraph.elizabeth@epa.gov)
2018-06-11 15:22:48

Hi, I'm new to EM7 and looking for features. I know it reports software inventory, but is there any granularity to report on things like who's using a particular app, % of time used, etc. Thanks.

Sean Hook (shoo@plex.com)
2018-06-11 16:12:20

@Liz App usage isnt something that I am aware of that has a report.

Liz (ashraph.elizabeth@epa.gov)
2018-06-11 16:25:07

OK. Thanks Sean.

SLacker (jesse.farnham@redriver.com)
2018-06-12 19:03:40

IF you were able to write python or powershell that would query a system for this information, then the ScienceLogic platform offers ways to trigger that code to run, ways to use the data returned as collection objects and presentations, and display that info on dashboards, trigger run book automation, etc. But, as Sean said, I don't think there is anything right out of the box that monitors app usage on a server.

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-14 10:26:07

Hello @Ken Rizzo (krizzoatopsvision.com) Is it possible to add a channel em7-documentation where we can discuss the ScienceLogic documentation content? (like typo's, information missing from doc, ...). For now I inform @Mike Jasper via DM but I think more people could contribute.

๐Ÿ‘ Mike Jasper, SLacker
Mike Jasper (mjasper@sciencelogic.com)
2018-06-14 12:15:44

*Thread Reply:* Also, feel free to use documentation@sciencelogic.com for doc issues. Thanks!

Siva (m.sivakumar.2308@gmail.com)
2018-06-14 11:30:03

Hi all, I ran into this error "PowerPack contains errors and cannot be compiled". Need some help on what error possibly it would be. (I was trying to build/export a PP that has 6 DA in it). Thanks!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-06-14 20:24:11

Sure

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-06-14 20:25:25

@channel there is now an <#CB828L7EH|em7-documentation> channel you can join. You won't see it unless you explicitly follow the link or search for it. New channels don't automatically show up in your sidebar.

๐Ÿ‘ Tom Robijns
Mike Jasper (mjasper@sciencelogic.com)
2018-06-14 20:27:06

Thanks!

Sean Hook (shoo@plex.com)
2018-06-14 20:57:00

so, we gonna flood the channle with all the crap we know now?

๐Ÿค” Mike Jasper
๐Ÿ˜ Mike Gray
skylar92 (skylar@ligado.com)
2018-06-18 19:29:10

has anyone had a hard time upgrading to 8.8?

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-18 20:27:25

Hey Skylar, We're holding back on 8.8 because of the known issues atm

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-18 20:28:00

especially the difference in the vanished/purged settings

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-18 20:29:05

before 8.8, setting vanish to 1 hour and purge to zero caused vanished devices to be purged 'never'. in 8.8, they are deleted immediately

skylar92 (skylar@ligado.com)
2018-06-19 14:17:59

@Tom Robijns are there any other downsides to 8.8?

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-19 16:10:09

*Thread Reply:* oh yeah... Release notes are full of them ๐Ÿ™‚

skylar92 (skylar@ligado.com)
2018-06-19 14:41:50

hey, does anyone know what this part of the documentation mean? Copy the Maria DB RPMs to the filesystem of both appliances.

Sean Hook (shoo@plex.com)
2018-06-19 15:24:37

aren't those the install files? (RPM = Redhat Package Manager)?

skylar92 (skylar@ligado.com)
2018-06-19 16:09:28

no clue,

skylar92 (skylar@ligado.com)
2018-06-19 16:09:37

I am a front end service now developer ... lol

skylar92 (skylar@ligado.com)
2018-06-19 16:09:41

but ... alas

skylar92 (skylar@ligado.com)
2018-06-19 16:10:06

the doc says 'take these maigcal RPMs that will come to you in the night' ... like wtf are these RPMs from haha

SLacker (jesse.farnham@redriver.com)
2018-06-19 16:16:26

yes, RPM files are install or update packages.

SLacker (jesse.farnham@redriver.com)
2018-06-19 16:17:08

You can install rpm files with: rmp -i package.name.rpm

SLacker (jesse.farnham@redriver.com)
2018-06-19 16:17:59

But more likely, if the document you are following just says to copy them to a location, then some later step (a script or something) will probably handle the appropriate install.

Matt C (matthew.carter.914@gmail.com)
2018-06-19 16:37:34

if youโ€™re trying to update, the zip file for the update likely had the packages you need

Matt C (matthew.carter.914@gmail.com)
2018-06-19 16:37:49

and the release notes documentation has the process for what you need to do

Liz (ashraph.elizabeth@epa.gov)
2018-06-22 13:13:51

Basic question-Can I generate a report of all of a device's File shares that show share names? Another issue is the Device Utilization report is not reporting all of the drives. Thanks.

Matt C (matthew.carter.914@gmail.com)
2018-06-22 16:40:59

depends what is pulling the drive shares. windows/linux? snmp or some kind of ssh app? depending on share permissions and the setup of the reporting collections, it may not be reporting back everything thatโ€™s on the device due to security. iโ€™d check visibility of collection type to those

Liz (ashraph.elizabeth@epa.gov)
2018-06-22 17:04:28

Windows. Most likely permissions. Thanks.

Liz (ashraph.elizabeth@epa.gov)
2018-06-25 16:52:52

Hi, has anyone experienced incorrect software install dates? Installed an app on 4/25/2018 and EM7 reports 1/20/2016. Same on multiple VM's. Where is it getting these dates?

Liz (ashraph.elizabeth@epa.gov)
2018-06-25 17:33:03

I've since found that Host Resource: Software reports the correct install dates. I still would like to know where the Software (tab) Install dates are coming from.

Matt C (matthew.carter.914@gmail.com)
2018-06-25 17:34:32

not sure. some of the baseline internal stuff is pretty invisible. best bet might be to just try a bunch of walks to figure out which OIDโ€™s are providing that value

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-25 18:42:18

Agreed, ICDA should resolve this: it'll allow you to create your own 'internal' dynapps

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-27 19:19:56

For those interested: starting from SL1, price model is slightly varied: PowerSync, PowerMap & Services are separate features on a monthly per-device fee (like the tiered fee)

SLacker (jesse.farnham@redriver.com)
2018-06-29 17:17:17

anyone using the agent successfully in 8.7?

Tom Robijns (tom.robijns@realdolmen.com)
2018-06-29 18:12:27

we don't use the agent, Jesse

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-02 14:23:39

anyone working this week? or is everybody making it an extra long weekend?

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-02 14:27:21

Working! (until friday)

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-02 14:27:53

how's your component cluster pp coming?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-02 14:30:36

better. I installed a 3 node WSFC cluster in AWS that I can take up and down at will so now I don't have to be so careful about everything I try to do which was slowing me down a bit (testing against prod)

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-02 14:31:07

hoping to make some good progress this week

Mike Gray (mike@graywind.org)
2018-07-02 15:04:45

Working!

Mike Gray (mike@graywind.org)
2018-07-02 15:04:52

Minus Wednesday, of course

Sean Hook (shoo@plex.com)
2018-07-02 15:36:16

working every day but wednesday

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-02 15:58:32

What's on Wednesday?

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-02 15:58:43

BAU here

Sean Hook (shoo@plex.com)
2018-07-02 16:02:11

Fourth of July. US Independence day

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-02 16:03:45

oh yes, Forgot about that

Sean Hook (shoo@plex.com)
2018-07-02 16:08:09

Anybody know if the Process policies do a 'like' or 'contains' match, or do i have to have the process arguments exact?

Sean Hook (shoo@plex.com)
2018-07-02 20:02:27

FYI - appears that they are

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-02 21:20:50

You probably got the email too but from our friends at ScienceLogic: The Customer Experience Organization is excited to announce the launch of our new Customer Support Platform on July 23rd. This new platform replaces the current ticket management system and offers a multitude of benefits including robust search capabilities, Best Practices Incident Management, and Knowledge Base.

SLacker (jesse.farnham@redriver.com)
2018-07-06 14:36:43

Good morning folks, I need to monitor the state of a single site-to-site VPN tunnel (the end I can monitor is on a Cisco ASA), I see that there is a Cisco VPN power pack, but it looks like that is for remote access VPNs. Does anyone know of a power pack that includes DAs and event policies for something like this? (I don't mind making it, but i don't want to reinwent the vheel if I don't have to.)

Mike Gray (mike@graywind.org)
2018-07-06 15:02:22

I'm not aware of a PowerPack that does that today. We've had to do custom apps for monitoring tunnels

skylar92 (skylar@ligado.com)
2018-07-10 13:35:55

hey, does anyone know if there is a way to set timeouts on policies/events to instantly clear? we thought 0 but that just means 'never expire' so we have them all expire after 1 min ...

Jarod (jarod.owen@1901group.com)
2018-07-10 14:49:19

Could you explain more the reason why you want an event to instantly clear? I'm not really sure, but it sounds like you might be able to use the log message instead of the event. If you need it to be an event, you might have to look at a run book to clear those events triggered off of the event itself. I don't know of a way outside of that to instantly clear an event.

Mike Gray (mike@graywind.org)
2018-07-10 15:09:32

We have ours set to expire after 1 minute as well, to not clutter the screen

Mike Gray (mike@graywind.org)
2018-07-10 15:10:04

The log message will clear the alert but I'm not positive that it will clear the event, as that's a separate area I haven't quite tested

Mike Gray (mike@graywind.org)
2018-07-10 15:10:08

1 minute expiration meets our needs just fine

Sean Hook (shoo@plex.com)
2018-07-11 17:43:42

So, is the feature request system down for everyone? I can see existing items, but cannot vote or create a new one.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-11 17:52:13

said they were taking it offline until the new system comes up

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-11 17:52:13

out

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-11 17:52:20

revamping the portal

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-11 17:52:44

23rd is the unveiling supposedly

SLacker (jesse.farnham@redriver.com)
2018-07-11 20:26:55

I hope the new site is faster

SLacker (jesse.farnham@redriver.com)
2018-07-11 20:27:11

I don't mind the organization, but the speeds (lack thereof) are frustrating

Mike Gray (mike@graywind.org)
2018-07-11 20:28:26

They're moving to Salesforce on the backend, I believe

Mike Gray (mike@graywind.org)
2018-07-11 20:28:39

The existing site hits the EM7 API and its backend is the EM7 ticketing system

Mike Gray (mike@graywind.org)
2018-07-17 15:47:55

There's that sweet sweet hold music

๐Ÿ˜ด Tom Robijns
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-23 23:08:46

As a moderator, I've been pretty much asleep at the wheel for these chat channels. I need to pay more attention and would like to figure out how to drive more participation so that it's a better resource for a wider audience, and will be more attractive to newcomers. I think we get a lot of people who join, don't see much activity and leave without giving it much of a chance. There are 190 users but I think it's fair to say we might have 10 that are regular active members. Any suggestions for me on how to do a better job? Other than pay more attention of course. Something I just noticed on the weekly activity reports is that 75% of the comms here are through private messages rather than in open channels. I'm not sure if that is because there is so little channel activity that it only takes one lengthy private conversation to be 75%, or if members don't see much value in keeping things open due to a lack of engagement. I suspect the the former, but fear the latter. I'm open to suggestions and constructive criticism if anyone wants to chime in.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-23 23:10:05

On my todo list is not let any knew users post questions that don't at least get a response, even if I can't give them an immediate answer. Looking back through some of the channels I see that's happened more than once which is my bad.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-23 23:11:11

I don't believe we have any systemic issues like trolls or spammers but if you guys/galls are seeing something I'm not, please let me know.

SLacker (jesse.farnham@redriver.com)
2018-07-24 14:42:45

On the topic of DMs vs public chat, I think I tend to go DM if it gets too far off topic (just shooting the breeze) OR if the conversations get hyper specific to the point that it would just be really noisy for everyone else in the room.

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-24 17:12:56

Also complains about the product are more likely sent via dm ๐Ÿ˜ณ

๐Ÿ‘ Mike Gray
Tom Robijns (tom.robijns@realdolmen.com)
2018-07-24 17:14:29

I have a few other slackโ€™s, they have a โ€œbar talkโ€ channel where โ€œotherโ€ discussions go

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-24 17:35:09

fair enough

Matt C (matthew.carter.914@gmail.com)
2018-07-25 16:41:13

agreed with @SLacker most DMโ€™s i have get in far too deep to be of use to the channel or would otherwise just spam and annoy other users

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 18:31:56

I would think getting into the specifics of technical issues would be just the thing users would want to be able to reference later?

SLacker (jesse.farnham@redriver.com)
2018-07-25 18:48:52

Yeah, for technical issues that may matter to the group, i try to make a Thread anyhow.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:09:08

We've gone 3K messages over the 10K free message limit, This means older conversations are now being archived by Slack, but not made accessible via search for reference unless we upgrade to a paid account.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:09:19

Paying $12.50/user for 190 users (standard plan) is prohibitively expensive for OpsVision, and I doubt anyone here wants to pay for access to this channel. We don't qualify as a 501c3 or even non-profit (I've inquired previously) so free or reduced pricing is out.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:11:03

ScienceLogic has floated the idea of paying in the past, but then they control the content and would be free to use it as an advertising outlet, or remove any complaints they'd rather not have made public. (Not that they would, but they could).

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:11:44

We can leave it as-is and have only a 2-3 month rolling window of searchable content, or I can explore other options such as Discord to see if they have the same limitations.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:11:54

Anyone feel strongly one way or another?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:14:02

If not, we'll keep the status quo but wanted to put it out for comment.

SLacker (jesse.farnham@redriver.com)
2018-07-25 19:15:35

I think discord has a long history, I use it for some gaming at home, but I don't know what limits there are.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:17:45

I like discord better than slack, had I known about it when I started this channel we would have used that

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:17:58

I just wonder how many people we'll lose if there is a change of venue

SLacker (jesse.farnham@redriver.com)
2018-07-25 19:22:45

That could be a concern. as well as the content that is here. I'm guessing they don't make it easy to port out to another tool

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:24:44

if there is enough interest I'll research it and find otu

Mike Gray (mike@graywind.org)
2018-07-25 19:24:44

I like it being Slack because I already use Slack at work...but losing the historical data means we lose a lot of the point of this being here

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:25:08

you can put a plugin on so people can join either but it's annoying because it tags each msg with where it came from

Mike Gray (mike@graywind.org)
2018-07-25 19:25:12

Unless there's some way to maybe pin posts and have a script pull those posts into a knowledge base for the users hosted elsewhere

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:25:49

Mike: agreed, but if we stay every new comment made means an old one disappears so we'd only ever have recent history

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:26:08

unless of course we find a generous benefactor

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:26:26

I'll revisit discussions with SiLo about funding it but staying hands off

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:27:02

OR if the participants here do enough work with OpsVision then I'd be able to afford to pay it myself! ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 19:27:14

(or get your family and friends to hire us)

pbackman (pbackman@opsvision.com)
2018-07-25 19:27:54

Might be good if we start to use a place holder like google drive or anything like that , when we can store examples we have uploaded or even great threads

SLacker (jesse.farnham@redriver.com)
2018-07-25 19:51:25

so, you say 12.50 per user. Is that a one time fee? or annual? I could fork over $12.50 per year (but per month or whatnot would be too much)

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-25 19:59:39

Is the only reason to go to a paid version to have the history available? Or is slack forcing you to get a paid plan for other reason? For me personally, I don't really care about history older than x months. When I see something worth while, I copy it over to my onenote for future reference

SLacker (jesse.farnham@redriver.com)
2018-07-25 20:37:17

<--wishes he was as organized as Tom

๐Ÿ‘ Mike Gray
๐Ÿ˜Ž Tom Robijns
Mike Gray (mike@graywind.org)
2018-07-25 20:42:33

I'll go ahead and throw out a counter-argument, though: sometimes I don't care about a piece of information until it's relevant to me, i.e. I have a customer who needs me to set it up

Mike Gray (mike@graywind.org)
2018-07-25 20:42:53

It would be nice to have it searchable in here based on a memory of, oh yeah, I vaguely remember Tom saying something about this!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 20:52:00

yes, moving to a paid plan is just to keep the history, we don't have to change. To Tom's point, I don't always catch every conversation, or may not think something is relevant to me at the time and being able to search later is a huge advantage in my opinion.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 20:52:23

I don't copy stuff off because I assume I can search it later

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 20:53:10

I'm on a Netcool mailing list that has been running 10+ years and has the archives for all of it, and just 2 days ago I was helping a client with a really old version of software and we referenced a 6 year old email thread to fix his problem

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 20:53:32

that source of information on Netcool specific stuff is a gold mine that you can get nowhere else

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 20:55:02

on pricing, the cost is actually $6.67/per user/per month if pre-paid annually. 8/ea of monthly and the $12.50 is for the Plus plan, I didn't see that the first time

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 20:55:12

standard is all we'd need to keep a history

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 20:56:04

even if a few people would pay for access, the vast majority never would which means the community never gains the critical mass to be truly valuable

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 21:02:28

discord says it's free and always will be, they may monetize add-on's but never the core functionality. Trying to figure out how long they save chat logs.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 21:03:04

I suppose we could write a script to archive off this chat on a monthly basis for archiving maybe? I'd have to look into how that would be done.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 21:03:28

if they want you to pay, they may have some blockers in place to discourage it though

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 21:06:12

discord seems to save them "forever" but I don't think being free that anything is guaranteed

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-25 23:33:34

Off topic: KUDO's to the support team! our HA database cluster just stopped working and they got it all up & running in no time!

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-25 23:38:15

I have to admin that copying to onenote is my last resort since I'm not allowed to install extensions here. Having a bot for automation would be nice though (hint hint)

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:40:09

I'm happy to install some bots if you have any in mind that you think would be helpful

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:40:17

I think we can do up to 5 on the free tier

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:40:27

I'll see if there is a note taking bot

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:43:09

here is a very simple note taking bot: https://opsvisionsolutions.slack.com/apps/A0SPKPAQ3--notes

Slack App Directory
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:43:24

there are others that integrate with Word and other applications

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:43:39

if you find one you think you like let me know and I'll add it

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-25 23:45:12

Thank you, but don't think I can decide on that alone.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:45:36

we can also apparently use this to export channels. Maybe I'll script it to dump out monthly to a web archive that is searchable?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:45:37

https://opsvisionsolutions.slack.com/apps/A19P6G35Y-export

Slack App Directory
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:46:08

Well considering you are the only one that has asked for it I'd say the votes are unanimous on whatever you pick

๐Ÿ˜‚ Tom Robijns
๐Ÿ˜Ž pbackman
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:46:20

if others want to chime in we can look at other options as well

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-25 23:47:00

anyways, almost 2am here... time for bed. I'll see what I can come up with

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:47:05

good night

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-25 23:47:21

apps are easy to add or remove so we can try out several and see what works best

Mike Gray (mike@graywind.org)
2018-07-25 23:59:28

I like the searchable web archive option, personally

Mike Gray (mike@graywind.org)
2018-07-25 23:59:51

I snagged one of Tom's super useful scripts a few weeks ago, but I don't snag them all, and one day I may want to...

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 01:39:20

@Tom Robijns https://www.cloudpipes.com/integrations/onenote/slack

Cloudpipes
Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 08:56:57

If we pinpoint messages, do they get removed as well after awhile?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 14:08:08

I am not sure, itโ€™s on my list to check

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:19:21

Slack stats: 1,924 messages (+16.9%) over the last 30 days.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:19:30

I guess it's getting chattier

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:21:21
Mike Gray (mike@graywind.org)
2018-07-26 15:22:42

I blame Tom ๐Ÿ˜‰

Mike Gray (mike@graywind.org)
2018-07-26 15:22:58

And thank goodness for him!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:23:01

Welcome to our newest members as of July @adil @yaquaholic @William Beasley @Daniel @Davy Yuan

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 15:23:10

<-- shuts up now

๐Ÿคฃ Mike Gray
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:23:21

Tom is a definite gold mine

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 15:23:24

Welcome !

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:23:28

he needs to talk more

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:24:58

I've still got plenty of those batman shirts if anyone new wants an official SLAM t-shirt.

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 15:25:33

I don't mind having one, but I'm afraid it's gonna cost a bit much for a t-shirt

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:25:34
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:25:50

we ship anywhere anytime

Mike Gray (mike@graywind.org)
2018-07-26 15:25:53

I wear mine regularly to the gym

๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:26:04

send me your address Tom, I thought you had one

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 15:26:16

an address? sure I do ๐Ÿ˜„

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:26:36

and your size, etc

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 15:28:51

Thanks Ken, I was reluctant to request one because I'm from Europe. It'll be a very expensive T-shirt

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:29:13

it gets me advertising around the globe, it's cheap

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 15:29:44

lol; bye for now... going into sleep mode

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 15:29:49

night

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 19:26:47

That is way too much credit @SLacker you give me. I just want to help so I can get myself when Iโ€™m stuck. After all that is what a community is for

๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 23:30:30

you don't sleep very long

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 23:38:30

it wasn't sleep, afk

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-26 23:38:52

but now it's 1:40am and definitely time for sleep

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-26 23:39:10

definitely, talk to you tomorrow

Matt C (matthew.carter.914@gmail.com)
2018-07-27 14:17:36

i think the idea of the exporting to a one note for members would be a good idea @Ken Rizzo (krizzoatopsvision.com)

Matt C (matthew.carter.914@gmail.com)
2018-07-27 14:18:18

I know when someone posts a really useful bit of info or useful code, I usually copy it out into a rolling document on my local system so that I can at least find it if i remember it down the road.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 14:38:14

@David welcome to SLAM slack chat! You'll find most of the technical discussion happens in <#C6S9UUPMX|em7-admins> or <#C6TU7J223|em7-development>, but the other channels have useful info as well

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 14:39:22

please don't hesitate to ask questions or introduce yourself, we're trying to foster greater participation from the community to make this a more useful resource for everyone

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 14:39:48

(my slack somehow has autocorrect set to spanish and is complaining about every other word I type, weird)

Tom Robijns (tom.robijns@realdolmen.com)
2018-07-27 15:38:26

โ˜€ ENJOY THE WEEKEND!!!! 36ยฐC here in Belgium ๐Ÿบ ๐Ÿท

Sean Hook (shoo@plex.com)
2018-07-27 15:41:22

us americans have no idea what that means ๐Ÿ˜›

Matt C (matthew.carter.914@gmail.com)
2018-07-27 15:46:48

~95 i think. thatโ€™s hot lol

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 15:48:24

yeah I couldn't have told you if it was 60 or 100 in F

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 15:48:30

I know 0 is cold

Matt C (matthew.carter.914@gmail.com)
2018-07-27 15:50:03

hahaha just know that 16 is 60, and 24 is almost 74 and the exponential gets worse from there lol

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:09:31

I've added an <#CBZBARHFH|em7-security> channel, everyone should have gotten an invite but if you didn't, please feel free to join and share

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:35:18

Just an interesting factoid. Over the 190 users we have, they come from 58 different domains (after we cull any opsvision, slam-ug, sciencelogic, gmail, hotmail, yahoo, etc accounts). This is a fairly diverse group.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:35:32
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:41:11

Translation available: We have a global audience in this slack domain, so I've added a /translate app that will turn the conversation into whatever language you are most comfortable with. Please let me know if you have any issues using it. Also try @Translate to edit settings.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:41:19

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

} Ken Rizzo - OpsVision Solutions (https://slam-ug.slack.com/team/U6TU5BAF9)
Translate
2018-07-27 16:41:46

@Translate has joined the channel

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:46:18

รœbersetzung verfรผgbar: Wir haben ein globales Publikum in dieser lockeren Domain, also habe ich eine / translate App hinzugefรผgt, die die Konversation in die Sprache umwandelt, mit der Sie sich am wohlsten fรผhlen. Bitte lassen Sie mich wissen, wenn Sie Probleme haben, es zu verwenden.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:48:04

Traduzione disponibile: abbiamo un pubblico globale in questo dominio lento, quindi ho aggiunto un'app / traduttore che trasformerร  la conversazione in qualunque lingua tu stia meglio. Per favore fatemi sapere se avete problemi ad usarlo.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:48:47

let's try it here for now and I'll add to the other channels if it works as described

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:50:38

if you use the @Translate command you can change the channel settings and have it show up in the language of your choice. If anyone tests this out, your feedback is appreciated

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 16:57:50

The OneNote integration requires a CloudPipes subscription at $995/mo unfortunately

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:15:52

I've turned off the global do not disturb settings for Slack since we have users from all over the world who may be working any hour of the day. You should be able to set your own individual settings to override the global one. Let me know if anyone is having issues with setting that up.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:18:04

Data Retention: By default, Slack keeps all your files for the lifetime of your workspace. If youโ€™d like, you can have them deleted after a set amount of time. Note that this affects all files โ€” including images, docs, Slack posts and more. <- I believe this means if we pin files or messages they are not subject to the 10K message rule and will not be deleted in the rolling window. If anyone notices otherwise, let me know.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:39:10

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

} Ken Rizzo - OpsVision Solutions (https://slam-ug.slack.com/team/U6TU5BAF9)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:39:18

Use this link to invite your co-workers and friends to join us on SLAM slack: https://bit.ly/2wlQAUz

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:39:23

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

} Ken Rizzo - OpsVision Solutions (https://slam-ug.slack.com/team/U6TU5BAF9)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:39:40

sorry for spamming the channel, wanted to get some things pinned.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:39:48

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:39:52

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:40:45

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

} Ken Rizzo - OpsVision Solutions (https://slam-ug.slack.com/team/U6TU5BAF9)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 17:42:24

@Ken Rizzo (krizzoatopsvision.com) pinned a message to this channel.

} Ken Rizzo - OpsVision Solutions (https://slam-ug.slack.com/team/U6TU5BAF9)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 21:52:34

I've been considering adding a #General-IT channel where people could ask any technical question since when doing monitoring you are working with lots of other tech that might be stumping you

also an #EM7-Jobs channel that not only could OpsVision advertise open spots, but if anyone here needs to hire, or if anyone here needs to find a new place, they could use that as a resource to find something fast

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-27 21:54:04

@Tom Robijns @Mike Gray @Matt C (the people I saw last in <#C6TU7J223|em7-development> where I moved these comments from)

โœ… Tom Robijns
Tom Robijns (tom.robijns@realdolmen.com)
2018-07-27 21:57:38

The general is useful I think. The other Iโ€™m not a fan of because it opens the door for any kind of advertising. But that is just me hating ads...

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-29 13:27:04

the jobs or IT general? you can also just unsubscribe from any channels you don't want to see?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-29 13:27:28

oh you mean the IT general is useful

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-29 13:42:45

there is a Slack add-on for Microsoft Outlook called SLAM.. wonder how long until we're sued for the name

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-29 13:45:09

I've installed an anonymou vote app. If you click to respond no one will know who you are, not me or the group. I expect we'll get better participation with that then any of the others

BBZ1PQVCM
2018-07-29 13:46:21

should we add an #em7-jobs channel for posting open positions or helping SciLo engineers find work? You can unsubscribe if you don't wish to participate. (Choose one)

Results (8 voters):
BBZ1PQVCM
2018-07-29 13:47:24

should we add an #non-em7techsupport channel for general IT questions not related directly to ScienceLogic? Unsubscribe is available for those not wishing to play. _(Choose one)

Results (7 voters):
gardar (gardara@sensa.is)
2018-07-30 09:49:28

@Ken Rizzo (krizzoatopsvision.com) How about just moving things over to irc? Freenode for example

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-31 20:37:19

*Thread Reply:* Possibly. It's been a few years since I was on a true IRC channel, but that's all slack and discord really are. It's interesting how several companies figured out how to finally monetize something that has been free for well over 20 years.

gardar (gardara@sensa.is)
2018-07-30 09:52:07

On the subject of channels, I think we have too many channels around here, I'd suggest moving everything over to a single channel

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-30 15:57:03

@gardar your suggestion is noted, however the feedback I've gotten overwhelmingly from the community so far has been keep them separate, at least I think that's been the message. I'll double check and see what the current consensus is.

BBZ1PQVCM
2018-07-30 15:59:08

"Merge all the channels into one, or at least just a few?" (Choose one)

Results (8 voters):
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-30 15:59:17

that's anonymous btw

SLacker (jesse.farnham@redriver.com)
2018-07-30 16:02:19

Opinion: Separation of the channels provides a cleaner conversation. The Search feature is pretty good and fast for searching all the channels in an UG, so I don't have to fear forgetting which channel something was in. This way, if a specific channel gets too <annoying, chatty, boring, exciting, meaningful, meaningless, etc> I can just leave that channel and not miss the good stuff I'm interested in.

gardar (gardara@sensa.is)
2018-07-31 07:38:39

I totally agree keeping channels separated keeps things more organized, however from my experience in a small environment such as this with very few users, the discussion is all over the place and does not help with creating a community "feeling". I've seen this in numerous forums and message boards where it's just too split up for the size.

gardar (gardara@sensa.is)
2018-07-31 07:39:16

I'd suggest keeping it in one or at very least very few channels for now, and as the community grows then look at organizing things better

SLacker (jesse.farnham@redriver.com)
2018-07-31 15:25:53

Howdy folks. I'm having a heck of a time trying to get some Cisco MIBs to compile cleanly. Most of the errors I'm getting are thins I can work through, but I'm really stumped on some.

SLacker (jesse.farnham@redriver.com)
2018-07-31 15:28:07

Trying to compile: CISCO-LWAPP-AP-MIB. One of the errors I get is this: CISCO-LWAPP-AP-MIB.txt:48: identifier `CLApDot11RadioSubband' cannot be imported from module `CISCO-LWAPP-TC-MIB' Object Not Imported

SLacker (jesse.farnham@redriver.com)
2018-07-31 15:30:03

So off I go to the TC MIB and I see what looks right:

SLacker (jesse.farnham@redriver.com)
2018-07-31 15:30:56

CLApDot11RadioSubband ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "This textual convention defines the possible values of subbands a radio can support. Currently, this information is applicable only to A radios. all(1) - This radio is a regular A radio that operates in the full A band spectrum in the frequency range 4940 Mhz - 5850 Mhz. sub49(2) - This is an A radio that operates only in the public safety (4.9 Ghz) sub band in the frequency range 4940 Mhz - 5100 Mhz. sub52(3) - This is an A radio that operates only in the 5.2 Ghz sub band in the frequency range 5250 Mhz - 5350 Mhz. sub54(4) - This is an A radio that operates only in the 5.4 Ghz sub band in the frequency range 5470 Mhz - 5725 Mhz. sub58(5) - This is an A radio that operates only in the 5.8 Ghz sub band in the frequency range 5725 Mhz - 5850 Mhz." SYNTAX INTEGER { all(1), sub49(2), sub52(3), sub54(4), sub58(5) }

SLacker (jesse.farnham@redriver.com)
2018-07-31 15:32:06

It looks good to me, AND the TC MIB compiles just fine, so I'm wondering what the problem is. If anyone has ideas, i'm all ears. Wasn't sure which channel this belonged to so I'm posting it in general. If anyone thinks it fits elsewhere, I can move.

Matt C (matthew.carter.914@gmail.com)
2018-07-31 15:34:05

is your TC-MIB up-to-date and have the enumerator for the CLApDot11RadioSubband?

Matt C (matthew.carter.914@gmail.com)
2018-07-31 15:34:30

at a glance it looks like itโ€™s failing on making the relationship with the TC-MIB

Matt C (matthew.carter.914@gmail.com)
2018-07-31 15:34:56

But iโ€™ve never had a mib compile fail so not really sure ๐Ÿ˜•

SLacker (jesse.farnham@redriver.com)
2018-07-31 15:54:16

My TC MIB is the most up to date version I have found. The longer snip above is a section of the TC-MIB

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-31 20:14:52

after I mentioned that 75% of our messages were in PM it appears everyone took it to heart

๐Ÿ‘ Tom Robijns
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-31 20:15:09

the blue line is public chat

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-31 20:15:46
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-07-31 20:35:10

Thank you

๐Ÿ‘ SLacker
Ryan England (rcengland@gmail.com)
2018-08-01 14:08:08

@Ryan England has joined the channel

๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com)
brendonakay (bak04280@gmail.com)
2018-08-01 16:08:24

@brendonakay has joined the channel

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-01 16:10:28

@brendonakay welcome to SLAM

๐Ÿ‘‹ brendonakay, Tom Robijns, SLacker
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-01 16:10:57

everyone here is either a ScienceLogic customer, partner/consultant, or works for ScienceLogic

brendonakay (bak04280@gmail.com)
2018-08-01 16:11:07

Thanks @Ken Rizzo (krizzoatopsvision.com)! Looking forward to learning what I can ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-01 16:11:36

most of the active participants run it day to day for their respective companies, same as you just a different tool

๐Ÿ‘ brendonakay
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-01 16:12:07

if you have questions, someone in this group knows the answer, ping me if you have any other questions

brendonakay (bak04280@gmail.com)
2018-08-01 16:13:13

Will do. Thanks!

Matt C (matthew.carter.914@gmail.com)
2018-08-01 16:18:31

can i just say, the release notes for 8.9 have me drooling

๐Ÿ‘ Tom Robijns
Tom Robijns (tom.robijns@realdolmen.com)
2018-08-01 16:50:48

Same here... Looks very promising

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-01 16:51:04

Though Experience taught me never to go for a .0 version

Mike Gray (mike@graywind.org)
2018-08-01 16:53:37

They look cool, but we're just starting to feel nice and stable on 8.7...I don't think we'll move to SL1 for a while

Matt C (matthew.carter.914@gmail.com)
2018-08-01 17:50:58

our lab is pretty stable (granted itโ€™s small, AIO, nothing more than a couple network devices and our prod em7 stuff being monitoredโ€ฆ)

Matt C (matthew.carter.914@gmail.com)
2018-08-01 17:52:17

but i did see something you might be interest in @Tom Robijns โ€œUpdated the PyWinRM library used in SL1 to version 0.3 and added the requestskerberos and requests credssp libraries. Made additional updates to invoke the new WinRM API and to support the encrypted flag for both Local User and Active Directory credentials.โ€

Matt C (matthew.carter.914@gmail.com)
2018-08-01 17:52:31

havenโ€™t looked into it too much but they may enable better kerberos interaction via snippets

Mike Gray (mike@graywind.org)
2018-08-01 17:52:39

About freaking time

Mike Gray (mike@graywind.org)
2018-08-01 17:52:49

They've been promising that for the last 4 releases

Matt C (matthew.carter.914@gmail.com)
2018-08-01 17:53:12

hahaha from what i gather, should make wrapping powershell requests in more flexible code easier

๐Ÿ‘ Mike Gray
Tom Robijns (tom.robijns@realdolmen.com)
2018-08-01 17:56:34

I already had a sneak preview of it, but was not allowed to share yet: Indeed 8.9.0 uses new powershell modules and 8.9.1 will completely resolve our kerberos SPN issue

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-01 17:57:33

They'll simply allow a prefix in the powershell credential if you'd want sclo to look for a different SPN (default= HTTP/FQDN)

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-01 17:57:56

so for example you can use HOST/%D in the device name

Matt C (matthew.carter.914@gmail.com)
2018-08-01 18:00:27

niiiiiice

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-01 18:03:40

Have to admit: I've got a really pesky escalation path ๐Ÿ™‚. I create a ticket to get a defect ack'ed and then I pull his strings to get it asap in builds ๐Ÿ˜‰

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-01 18:03:57

for that spn e.g. I created a ticket in February and it'll be resolved (hopefully) in September

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-01 18:57:07
gardar (gardara@sensa.is)
2018-08-02 12:02:56

In case some of you haven't seen this already: https://www.youtube.com/watch?v=lkBTWPuB504

YouTube
} ScienceLogic (https://www.youtube.com/user/ScienceLogic)
๐Ÿ‘ Tom Robijns
gardar (gardara@sensa.is)
2018-08-02 12:03:16

Pretty excited for this to be available!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-02 16:07:59

I've got a Python developer in training that is going to write a slack bot in Python. We don't yet have a purpose for said bot. If anyone has ideas for what it could do here, we'd love to hear them.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-02 16:08:10

I was thinking about a regex tester? I don't see any in the app store

Mike Gray (mike@graywind.org)
2018-08-02 16:51:20

It's neat but I don't know how much value it would provide since there are already a few great websites to do that job. Maybe he could scrape the channels for code and aggregate it? ๐Ÿ™‚

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:01:43

for me , having a bot I can ask questions would be nice, like `what is an snmp credential' and have an answer of a python dict containing an example credential

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:02:11

or a translator for unix times to actual (local) time

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:02:49

or ask an example powershell snippet, ssh snippet, ...

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:03:38

also a 'correct' explanation of EM7 terminology is very handy... some say event, other policy, ....

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:05:09

I'm in another slack channel where they use - to ask the slackbot something, like -welcome @username, which will submit a 'default' welcome message for the new user, guiding him/her in the different channels and their purposes

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:05:34

just rambling tbh: dodged the bullet of going with the family to a musical of 'sleeping beauty'

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:07:46

maybe also for those not on twitter a channel that follows some ScienceLogic guys and just writes their tweets there

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-02 17:08:08

<-- (still rambling, tries to shut up)

gardar (gardara@sensa.is)
2018-08-03 13:51:04

Or write a bot that posts em7 events to slack and release it as a powerpack? ๐Ÿ™‚

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-03 14:13:59

already have an rba for that ๐Ÿ˜„

gardar (gardara@sensa.is)
2018-08-03 14:28:41

That gives me an idea, would there be any interest of doing a community maintained place for code/snippets?

gardar (gardara@sensa.is)
2018-08-03 14:29:36

I realize not everyone is going to publish everything they've done for free on the internet, but many of us probably have something we don't mind sharing

gardar (gardara@sensa.is)
2018-08-03 14:30:31

It could possibly help bring the community together further

gardar (gardara@sensa.is)
2018-08-03 14:31:08

Perhaps just a git repo on gitlab/github to dump stuff into

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-03 16:10:56

OpsVision was going to setup a GitHub but it was pointed out ScienceLogic has a PowerPack library

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-03 16:11:16

I can still set one up just for SLAM that is snippets, and other odds and ends

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-03 16:11:20

@gardar

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-03 16:11:38

been meaning to anyways

Mike Gray (mike@graywind.org)
2018-08-03 16:13:23

This one? https://github.com/ScienceLogic

GitHub
Mike Gray (mike@graywind.org)
2018-08-03 16:13:34

Or are you talking about on the portal?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-03 16:44:23

yes, the portal. The last time I suggested a library the response was that SiLo already has a portal so wouldn't it be duplicating. But I don't think they have one off scripts and such, although I haven't checked either.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-03 16:44:48

plus it's moving so it's TBD what will be included in the new version

Mike Gray (mike@graywind.org)
2018-08-03 16:46:48

They have a handful of public scripts on their Github there, but nothing specifically for EM7

Robert Keidel (robert.keidel@emc.com)
2018-08-06 21:23:38

@Robert Keidel has joined the channel

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-07 05:21:32

Welcome @Robert Keidel! Feel free to ask questions about ScienceLogic and we will try to answer them.

gardar (gardara@sensa.is)
2018-08-07 08:38:09

@Ken Rizzo (krizzoatopsvision.com) yeah the powerpack library is just too "palished", when you put something on there you are releasing it formally, a github repo would suit better for scripts/snippets/runbooks that are small and/or have not been thoroughly tested

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-07 10:21:08

I agree, it also allows public contributions and creation of better power packs.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-07 12:25:42

OK, I've added it to my list of improvements

skylar92 (skylar@ligado.com)
2018-08-07 18:25:34

Hey, where can I ask a question about Python Snippet / RBA

Mike Gray (mike@graywind.org)
2018-08-07 19:02:06

Development?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-08 07:28:21

anywhere, you'll get redirected if it's not the right place

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-08 11:20:01

coming soon.... https://gitlab.com/slam-ug

GitLab
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-08 11:20:17

see @gardar if you have questions

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-08 11:20:31

a bigger announcement will happen when I have all the details worked out

gardar (gardara@sensa.is)
2018-08-09 10:06:51

Is anyone here familiar with http://opsfire.com ?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:09:12

from a long time ago

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:09:15

wasn't that heat before

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:09:30

if I'm thinking of the right one

gardar (gardara@sensa.is)
2018-08-09 10:10:35

I think Chris Cordray is behind it

gardar (gardara@sensa.is)
2018-08-09 10:10:43

Wasn't he the founder of ScienceLogic?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:11:14

co-founder yeah

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:11:25

and he is Founder of OpsFire (so sayeth LinkedIn)

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:11:48

at burwood now

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:12:01

they're in here somewhere...

gardar (gardara@sensa.is)
2018-08-09 10:12:41

Think they are here on slack?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:13:04

mike gray

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:13:11

burwood

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:13:14

not opsfire

gardar (gardara@sensa.is)
2018-08-09 10:13:26

They do have screenshots of some powerpacks on their site that are not available on the sciencelogic portal

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:14:15

funny story, I had to put in SolarWinds at a client because Burwood was pitching SiLo and we couldn't propose the same solution

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:14:25

even though i thought it should be EM7

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:14:33

was working under a partner who made the call

gardar (gardara@sensa.is)
2018-08-09 10:15:08

hah that's unfortunate

gardar (gardara@sensa.is)
2018-08-09 10:15:35

Couldn't you just show them the SL1 interface, if burwood did show them the old one? :P

gardar (gardara@sensa.is)
2018-08-09 10:15:42

and sell it as a different product haha

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:15:45

I think they said it was in teh top 5% of solarwinds implementations by size

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:15:56

this was 9 months ago

gardar (gardara@sensa.is)
2018-08-09 10:16:06

ah

gardar (gardara@sensa.is)
2018-08-09 10:17:11

So are you mainly doing sciencelogic and solarwinds?

gardar (gardara@sensa.is)
2018-08-09 10:17:30

Have you ever looked at zenoss?

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:17:33

we do a little bit of everything, we've been trying to focus on SiLo

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:17:34

yep

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:17:47

hold on, I'll show you our slide of competencies

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:18:32
gardar (gardara@sensa.is)
2018-08-09 10:18:55

I worked with zenoss at my previous employer, I still miss some of it, but sciencelogic does have some benefits over zenoss as well

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:19:00

not often I get to legitimately advertise what all we do without being a blatant marketing ploy ๐Ÿ™‚

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:19:29

yeah Zenoss isn't bad

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:19:59

i think that slide is missing a few things, but you get the point

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 10:20:47

I have to get back to this work, I'm doing too many projects at once and already behind. back in a bit

gardar (gardara@sensa.is)
2018-08-09 10:21:03

no worries

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 22:29:35

does anyone else find themselves constantly hitting save, instead of save as and overwriting the last thing you did? that has to be my biggest gripe with this solution design/interface

๐Ÿ˜ฌ Mike Gray
Mike Gray (mike@graywind.org)
2018-08-09 22:56:43

*Thread Reply:* My biggest gripe is lack of integration with any sort of VCS. My kingdom for Git integration!

๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com), Tom Robijns
Tom Robijns (tom.robijns@realdolmen.com)
2018-08-09 23:08:23

*Thread Reply:* I'd love to have some VCS integration as well. Also a 'clear' explanation of what a em7pp file actually is, is useful if we'd want to build one 'from the ground up'

Mike Gray (mike@graywind.org)
2018-08-09 23:09:16

*Thread Reply:* The preview I saw of the new SL1 UI for dynamic applications/runbook automation includes API integration, so you can jury-rig VCS integration through that

Mike Gray (mike@graywind.org)
2018-08-09 23:09:23

*Thread Reply:* Not sure when that comes out, but it'll be nice

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-09 23:11:47

*Thread Reply:* that would be an improvement, although you'd need your code to track which dynapp snippet you're modifying to update it. I suspect Api to be something like a POST to /application/<aid>/snippet/<snipid> to update the contents

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 22:34:17

I wish there was some sort of embedded version control

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 22:58:48

well that wasn't the window I was supposed to be typing in

Mike Gray (mike@graywind.org)
2018-08-09 22:59:54

Don't forget to hit "save as" ๐Ÿ˜‰

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 23:00:46

lol

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-09 23:01:47

that part I actually meant to post here

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-10 18:05:42

HOLIDAAAYYY time for me!!! Going afk for a week. Enjoy em7/sl1!

๐Ÿ’ฏ brendonakay, Mike Gray, Mike Jasper
Matt C (matthew.carter.914@gmail.com)
2018-08-10 18:06:15

have a good one @Tom Robijns !!!

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-10 18:06:38

see ya, enjoy

Tinesh (hifromtinesh@outlook.com)
2018-08-12 08:50:01

@Tinesh has joined the channel

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-12 10:24:30

Welcome to SLAM @Tinesh If you have any questions donโ€™t hesitate to ask. Youโ€™ll find the admin and dev channels to be the most active but anywhere you post you should get a response.

Tinesh (hifromtinesh@outlook.com)
2018-08-12 11:08:18

Sure thanks @Ken Rizzo (krizzoatopsvision.com)

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-12 11:11:22

Youโ€™ll find it is most active here on weekdays during US business hours. We have people from all over the world but the majority (at least active members) are in the US, but if you leave a message someone will get back to you when they logon.

๐Ÿ™‚ Tinesh
๐Ÿ‘ Tinesh
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-14 03:12:44
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-14 16:09:41

this is not SL related but may be of interest to some of you;

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-14 16:09:43

https://tinyurl.com/y95cob68

Join Mist and Verizon where we walk through how to use AI to build the IT infrastructure for the next decade.
Jonathan Chivers (jchivers@sciencelogic.com)
2018-08-21 12:03:14

@Jonathan Chivers has joined the channel

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-24 23:51:49

Does anyone has any idea when the next symposion will be held? Update video says 'Late Spring', but i'd like a more definitive answer...

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-25 16:49:09

I just asked the channel VP, he should know

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-26 17:14:22

@Tom Robijns this was the response, must not be locked in yet.

The event is scheduled for next Spring. I think the location will be in the DC area again.

๐Ÿ‘ Tom Robijns
John Johnson (johnsonj@yahoo.com)
2018-08-27 16:44:09

@John Johnson has joined the channel

skylar92 (skylar@ligado.com)
2018-08-27 17:49:24

hey all, does anyone know how i can send a trap from a virtual box vm running ubuntu?

Mike Gray (mike@graywind.org)
2018-08-27 18:03:19

Haven't done it myself but this is a promising start: http://www.net-snmp.org/tutorial/tutorial-5/commands/snmptrap.html

net-snmp.org
Mike Gray (mike@graywind.org)
2018-08-27 18:04:23

And good old Nagios: https://support.nagios.com/kb/article.php?id=493

support.nagios.com
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-27 23:36:47
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-27 23:36:57

you can replay alert files with that

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-27 23:37:15

or check out trap exploder, I think thatโ€™s free too

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-27 23:38:39

I think I have some perl scripts that will do the same as well if you are interested

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-28 09:46:28

Colleagues, with the help of @Ryan England I was able to update my ScienceLogic powershell module in the gallery. ScienceLogic-SL1 is the name of the module and you can find it https://www.powershellgallery.com/packages/ScienceLogic-SL1/1.2.4 or install it directly via install-module sciencelogic-sl1 . The module has been tested against SL version 8.7.1.

powershellgallery.com
๐Ÿ‘ Ken Rizzo (krizzo_at_opsvision.com)
๐Ÿ˜Ž Ken Rizzo (krizzo_at_opsvision.com)
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-28 13:45:12

Sorry it has taken so long @Tom Robijns (and I think) @Matt C but your shirts are shipping today or tomorrow. Had to dig them out from unpacking from my move.

๐ŸŽ‰ Matt C, Tom Robijns
Tom Robijns (tom.robijns@realdolmen.com)
2018-08-28 13:45:30

@channel question for the entire community: how many of you actually build dynapps and if so, what tool do you use ?

Sean Hook (shoo@plex.com)
2018-08-28 13:47:27

*Thread Reply:* I have built rather small DAs. I use notepad ++, but one of my devops guys is wanting is wanting me to use something else. We publish our scripts to our own github instance

SLacker (jesse.farnham@redriver.com)
2018-08-28 13:47:42

*Thread Reply:* I try not to, but I do when necessary. I do it in EM7, and if I have to write or modify code, I use Notepad++

jjenkins (jjenkins@hosting.com)
2018-08-28 13:48:33

*Thread Reply:* Same, notepad++, then publish to local github instance.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-28 13:49:24

*Thread Reply:* notpad++

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-28 13:49:47

*Thread Reply:* I say I will but almost never get anything into github

Dan Sinnett (dan@hydroxx.com)
2018-08-28 13:54:40

*Thread Reply:* Write all the time. Prefer Sublime editor since is works on windows and Mac as well as Git integration capabilities.

Mike Silva (mike.silva@vision.net)
2018-08-28 13:58:33

*Thread Reply:* I use sublime on linux, run python right there in a virtual env too.

Scot (sneedy@gannett.com)
2018-08-28 13:59:26

*Thread Reply:* I use sublime also.

Scot (sneedy@gannett.com)
2018-08-28 14:00:58

*Thread Reply:* A community github of DyApps would be awesome.

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-28 14:05:32

*Thread Reply:* @Scot we're (Tom and Gardar) are working on a gitlab

Scot (sneedy@gannett.com)
2018-08-28 14:07:15

*Thread Reply:* Great! Looking forward to contributing.

Matt C (matthew.carter.914@gmail.com)
2018-08-28 14:44:16

*Thread Reply:* visual studio code for me, local repo, test on collectors locally for python scripts and then re-factor for em7 (too impatient to wait for config pushes on minor changes)

Mike Gray (mike@graywind.org)
2018-08-28 15:16:20

*Thread Reply:* I write dynapps in EM7, but I usually develop in Pycharm with a virtualenv or directly on a collector using vim depending on the particular needs. Since there's no CI/CD options with EM7 I back up the code to our company Github on occasion. We also try to keep custom code in PowerPacks to export as needed.

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-28 13:45:58

Just thread my post pls if you build dynapps

Tom Robijns (tom.robijns@realdolmen.com)
2018-08-28 14:06:07

Reason I ask is because of โ€˜ourโ€™ gitlab setup, setup by @gardar , is starting to take shape

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-28 14:29:42

Slack upgraded us to the Standard platform for free for the next 30 days. You probably won't notice much difference but during that time I can access the entire history of the chat so I'm pushing to get the online archive system setup and functional before that runs out. Look for an update soon.

JustinCamp (justin_campbell@premierinc.com)
2018-08-28 14:31:52

@JustinCamp has joined the channel

jason (jdjabbour@live.com)
2018-08-28 14:50:15

@jason has joined the channel

Matt C (matthew.carter.914@gmail.com)
2018-08-28 20:29:45

out for the day. later folks

Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-29 15:49:59

ciao (I guess that was yesterday...)

Ray Hsu (rhsu@sciencelogic.com)
2018-08-29 18:09:30

@Ray Hsu has joined the channel

๐Ÿ‘‹ Tom Robijns
Ken Rizzo (krizzo_at_opsvision.com) (slack@slam-ug.com)
2018-08-29 18:55:33

@Ray Hsu welcome to the party!