I suggest to improve installation documentation, and provide additional optional official dockerhub containers (built on base image Debian) separate for running netxms server, netxms webui etc.
of course for database just use existing mariadb container.
And update installation documentation.
This will provide much easier deployment, official one, updated and maintained
Hello,
we are using latest NetXMS on Debian, and using only Web console.
Is it possible to have Single Sign On enabled, and configured to work with Azure Active Directory (Microsoft Entra ID / Office 365) users? If so, can somebody share configuration steps?
This is not LDAP authentication nor RADIUS.
As I understand it should be under
> Central Authentication Service (CAS) single sign-on is supported in web interface only.
User management โ NetXMS Administrator Guide (4.2.433)
ย but i do not see way to enter URLs, application id, secret etc., for newly created Azure AD Application Registration
Thank you for your support and great product.
After upgrading to 3.0.0 we started regularly receiving the following errors in the nxagentd log:
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '4454-SQL Server 2012 Client Tools-11.2.5058.0' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '5956-SQL Server 2008 R2 SP1 Common Files-10.51.2500.0' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '6002-SQL Server 2008 R2 SP2 Common Files-10.52.4000.0' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '6014-Microsoft SQL Server 2008 Analysis Services-10.4.6000.29' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '6016-Microsoft SQL Server 2008 R2 Setup (English)-10.53.6000.34' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '6024-SQL Server 2008 R2 SP1 Common Files-10.51.2500.0' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '6340-SQL Server 2012 Common Files-11.0.2100.60' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '6783-SQL Server 2012 Common Files-11.3.6020.0' for key 'PRIMARY'
[db.driver ] SQL query failed (Query = "INSERT INTO software_inventory (node_id,name,version,vendor,install_date,url,description) VALUES (?,?,?,?,?,?,?)"): Duplicate entry '7049-Azure AD Authentication Connected Service-14.0.23107' for key 'PRIMARY'
ย
The exact same nine errors repeat themselves every minute, in the same order.
How can we rectify this? We're ignoring the errors for now since there doesn't seem to be any negative effect from them, other than filling up the logs.
Any info on when we might expect NetXMS Debian buster packages?
Thank you
@tomaskir said in SNMP pool of multiple devices under same IP but with different SNMP port:
IP address uniqueness is one of the basic concepts in NetXMS... I am pretty sure internally the code also relies on single IP = single device a lot.
Victor will however have to comment more on this.Simply put a Raspberry Pi, or similar $30 Linux machine into the network, and use it as a proxy.
I believe so and I agree with you.
But since it is a small network with one router and one local switch, i should not buy another device ($5 or whatever) for this simple local network and basic SNMP monitoring.
This is simple NetXMS software limitation then, and my request/proposal is to change the behavior and single IP = single device. I also understand that this is core of the system possibly.
I currently use zoning and it works, which I am trying to avoid.
I do not have devices where I can install NetXMS agent so I can't use proxy.
Enabling simple that IP address must not be unique would resolve the issue.
@zev said in Monitor multiple devices using SNMP on one public IP with NAT:
One of solutions can be creation of zones and add devices with same IP in different zones.
thank you for the option, I am aware of it.
So if I have about 10 local network switches, behind one router with nat/public ip, i need to have 10 different zones, one for each switch, which is annoying and destroying the organization of netxms nodes.
but thank you for the info.
@troffasky said in Monitor multiple devices using SNMP on one public IP with NAT:
@hkusulja said in Monitor multiple devices using SNMP on one public IP with NAT:
I hoped for native NetXMS solution
Site-to-site VPN? TBH the cheapest VPN-capable router will be about the same price as an SBC to run nxagent on, so not much difference either way.
Can you fool NetXMS with multiple DNS/hosts entries pointed at the same IP address?
I can not change routers.
The problem is not network connectivity, I have NAT with port forwarding and connection is possible.
The problem is in NetXMS configuration, which always translates the DNS hostname to IP , and then I have multiple same IPs for more nudes/devices.
Ability to have multiple nodes with same public IP, but pooling using different ports (SNMP...).
Currently this causes node save IP conflict error.
@tomaskir said in Monitor multiple devices using SNMP on one public IP with NAT:
Solution without new feature request would be to put a Raspberry Pi (or a similiar SBC) into the network and use it as a proxying agent.
Wish I could help in another way, but without a proxy in the network, not much can be done in this case.
Ok, thank you for the info, I will search for the raspbian (.deb) package of netxms agent.
I hoped for native NetXMS solution 
Hi,
I am running latest stable NetXMS 2.x.
I have few locations/clients, with one public IP, and in local area network there are only local routers and switches, without local server where I can place NetXMS agent.
I want to SNMP pool all local switches and routers using one public IP, but using different SNMP port (I have configured NAT and port forwarding).
The problem is that NetXMS says that I have IP conflict.
What is solution, without new feature requests?
Thank you
@alk said in Missing latest Debian packages ?:
Yes, my bad โ packages will be available tomorrow.
Hi, no problem, but is there any progress ?
Regarding to: https://www.netxms.org/forum/announcements/new-debian-repository/
The latest Debian packages are missing. any news about this ?
@victor said in To many alerts / emails when node is down (48 port network switch):
If topology information is correct, you can try to use this script: http://wiki.netxms.org/wiki/Script_Example:_Additional_Information_About_Connected_Node as an example of how to get connected nodes and for SYS_NODE_DOWN event check if node is connected to the switch which is already down.
Hi, maybe my question was not clear enough.
For another example, I do have node (windows server with agent) which has 10x DCI's , 10x network interfaces, 10x network services.
If node goes down, I do not want to receive email / alert for each stuff (every network interface, every network service) that this is down now.
Also is it possible to send email as digest (every 5 mins, grouped in one email) etc.
Thank you
@victor said in DCI in template with {instance} parameter in WMI, WMI as tables?:
NetXMS agent uses PDH API to access performance counters. You can add feature request to our bug tracker for instance discovery support for perf counter DCIs.
Great, thank you, feature request is created here: https://www.radensolutions.com/chiliproject/issues/567
@victor said in Network service HTTP/HTTPS monitor, check output and response time:
Currently you cannot see what output agent was gathered nor measure response time. Feel free to fill feature request
Best regards,
Victor
Ok, thank you. I am marking this as answered/solved.
New feature request is here: https://www.radensolutions.com/chiliproject/issues/565
Thank you once again.
@victor said in DCI in template with {instance} parameter in WMI, WMI as tables?:
Hi!
WMI (stands for Windows Management Instrumentation) is not Windows Performance Counters - it's two different things. First you should understand what exactly you want to use. From the name \PhysicalDisk({instance})\Disk Reads/sec I suppose you are trying to use Windows Performance Counters. In this case, instance discovery will not work because DCI origin is not agent. It could be a feature request, but currently it's not possible.
Best regards,
Victor
I believe that NetXMS agent uses, local WMI to localhost to get Performance Counters, however maybe I am wrong and thank you for correcting me.
Ok, yes, I am interested in Performance Counters - {instance} feature then, any clues about this ?
Thank you
@victor said in Bug / SQL injection? Monitoring Windows Event Logs and NetXMS Server SQL errors:
No, it's not due to apostrophe character and SQL injection is not possible here. You can see that SQL statement is a prepared statement with placeholders - it is not constructed dynamically from external data. Also, error message clearly states "Violation of PRIMARY KEY constraint 'PK__alarm_ev__E6249E6BFEDA1E4D'. Cannot insert duplicate key in object 'dbo.alarm_events'. The duplicate key value is (1704, 64513)" - actual problem is that system for some reason tries to insert duplicate record into table. It is definitely a bug, but not a security threat.
Best regards,
Victor
Thank you for fast and correct response.
Now I understand this is NOT SQL injection / security hole.
Sometimes I also have: "String or binary data would be truncated", but there is lot of duplicate items.
Something maybe about wrong collecting windows event logs on a agent/client maybe or event processing rules 
I do have latest available stable version.
Hi,
I have configured monitoring Windows Event Logs, I do log message description (%m).
However, my NetXMS server started throwing events SYS_DB_QUERY_FAILED [52]
Example ofย Event Message:
Database query failed (Query: INSERT INTO alarm_events (alarm_id,event_id,event_code,event_name,severity,source_object_id,event_timestamp,message) VALUES (?,?,?,?,?,?,?,?); Error: [Microsoft][SQL Server Native Client 10.0][SQL Server]Violation of PRIMARY KEY constraint 'PK__alarm_ev__E6249E6BFEDA1E4D'. Cannot insert duplicate key in object 'dbo.alarm_events'. The duplicate key value is (1704, 64513).)
AlarmText: Database query failed (Query: INSERT INTO alarm_events (alarm_id,event_id,event_code,event_name,severity,source_object_id,event_timestamp,message) VALUES (?,?,?,?,?,?,?,?); Error: [Microsoft][SQL Server Native Client 10.0][SQL Server]Violation of PRIMARY KEY constraint 'PK__alarm_ev__E6249E6BFEDA1E4D'. Cannot insert duplicate key in object 'dbo.alarm_events'. The duplicate key value is (1704, 64513).) Custom message:
UserTag:
I believe that is due to my initial error message which has ' sign. So this is SQL injection to NetXMS alarm_events table.
So this is a huge bug and big security risk for all NetXMS users.
I belive this should be fixed ASAP.
Also, please correct me if I am wrong...
@yshiro said in How to disable SYS_INCORRECT_NETMASK event ?:
Hi, you can disable it on "Configuration\Event processing Policy" just look for "Generate alarm when incorrect network mask detected on interface" and disable this policy.
Hi, thank you for a tip, however as I said, I have already disabled in Event processing policy. The issue is that NetXMS Agents are still generating this Events, and if you look real-time Event monitor, there are lot of them, so I am trying to disable this feature / event log generation for this.
Thank you