Community discussions

Search found 51 matches

by fengyuclub
Wed Aug 07, 2019 9:39 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Recently, one of my ccr is a bit problematic. I can only recover from the time when the device is powered off and restarted. The top of the log in winbox can see red like "system, error System rebooted because of kernel failure" or "Out of memory condition was detected", but I can't see it in splunk...
by fengyuclub
Sat Jul 27, 2019 4:56 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

I have Splunk Enterprise license, gmail alert can't be real-time, mobile mail client can't update mail in real time, there is a delay of about 10 minutes, so I choose wechat alert.I received some wechat alert, but some of them use the search to save as an alert, I can't receive a wechat alert, I don...
by fengyuclub
Thu Jul 25, 2019 12:46 pm
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Splunk is really powerful, I see splunk have a lot of apps to install, in our China use wechat (similar to facebook, telegram) this social software, I saw this social software related app, WeChat Alert App for Splunk, I installed this App, sending test messages from wechat is successful, but I don't...
by fengyuclub
Sat Jul 20, 2019 7:10 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Host=x.x.x.x Although this option is available, some devices have an internet connection that is a dynamic ip obtained by adsl dialing. So before the log warning, add an identity=xxxxx to distinguish the mikrotik device. After testing, it is feasible and runs very well.
by fengyuclub
Sat Jul 20, 2019 5:59 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Understand, add host=x.x.x.x in front of the search statement you gave to open my ccr and rb.
by fengyuclub
Sat Jul 20, 2019 5:46 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Jotne,Great, I did it according to your script, and the beautiful chart shows normal. I tried to add scripts to my multiple ccr and routerboards, so my interface has a lot of duplicate names, such as bonding1 and bridge1, how can I distinguish between them, or change the name for each interface. 4.p...
by fengyuclub
Fri Jul 19, 2019 12:26 pm
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Tested on other ccr1016 your script is successful, it should be the problem of the interface name, but it is important to draw the splunk graphics, I hope you can add to the new version.
3.png
by fengyuclub
Fri Jul 19, 2019 11:47 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Your script, the regular expression method, no success without any output, it doesn't matter, my code is as follows I want to know how to search for rich charts, and there are 14.8Mbps and 14833 display problems. This is not important. The important thing is how splunk draws charts. mycode { :local ...
by fengyuclub
Fri Jul 19, 2019 5:03 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

{ :local iname; :local monitor; :local speedRX; :local speedTX; :local mbpsRX; :local mbpsTX; :foreach interface in=[/interface find] do={ :delay 100ms; :set $iname [/interface get $interface name]; :set $monitor [/interface monitor-traffic $iname as-value once]; :set $speedRX ($monitor->"rx-bits-p...
by fengyuclub
Thu Jul 18, 2019 1:27 pm
Forum: General
Topic: rx,tx byte rate in interface menu
Replies: 7
Views: 1374

Re: rx,tx byte rate in interface menu

/interface monitor-traffic LAN once do={:put $"rx-bits-per-second" }
How to record this value to the log and let it display like 14.5Mbps, retaining a decimal point. Trying to find the entire forum, many will not work.
by fengyuclub
Mon Jul 15, 2019 10:07 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

What command do you use on the router to see this data?
interface monitor-traffic ether1

Search forums see scripts with such calls
  "/interface monitor-traffic ether1 once do={
:put ($"tx-bits-per-second"/1000 /1000 )
}"
by fengyuclub
Mon Jul 15, 2019 6:24 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

How can I write the interface tx-bits-per-second parameter to the log and then plot it in splunk.
by fengyuclub
Fri Jul 12, 2019 11:42 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Splunk is too powerful. If I have multiple ccr1016, how can I transfer data to the splunk server, how do I distinguish syslogs from different mikrotik routers?
by fengyuclub
Fri Jul 12, 2019 6:02 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

The data is coming, some of the tables are already filled, some still have no data, such as dns, it doesn't matter, I want to know how to monitor the flow table of an interface (wan), just like mirkrotik's built-in mrtg chart, every 5 minutes, 30 minutes and so on. . . As shown
1.png
by fengyuclub
Thu Jul 11, 2019 1:03 pm
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

It’s true that I set it wrong, Mikrotik changed to MikroTik, and it should be fine, then I will report it.
by fengyuclub
Tue Jul 09, 2019 5:51 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

There is no local listening udp514, now there is data in, but click on the meter in the Mikrotik2.7 dashboard, most of them do not have any charts, how to add or customize the dashboard you need here, for example, I want The wan's real-time or past and downstream traffic in a certain period of time,...
by fengyuclub
Mon Jul 08, 2019 12:57 pm
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

After starting Splunk, go to Search & Reporting menu. Add following search: sourcetype=mikrotik and set last 24 hour. Do you then see any data? If not try to just use a * (star) and last 24 hour. If you do not see any data, make sure Router is sending data to correct IP/Port. Splunk is listening on...
by fengyuclub
Sat Jul 06, 2019 6:50 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

Reinstalled splunk on ubuntu18.04, is a virtual machine under esxi, the deployment is very simple and normal, according to the steps of the top post, but the splunk dashboard can not see the task data incoming. Very strange, what else do I need to pay attention to? Please forgive my English using Go...
by fengyuclub
Wed Jul 03, 2019 5:36 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved

I have been paying attention to this post, very powerful chart, but the cumbersome construction and the lack of relevant knowledge have been unsuccessful. I can only temporarily use the mrtg icon inside routeros to temporarily cope with it. I hope the poster can write the deployment manual from the ...
by fengyuclub
Tue Jul 02, 2019 2:43 pm
Forum: General
Topic: Bonding (802.3ad) + Switch = Poor performance
Replies: 2
Views: 353

Re: Bonding (802.3ad) + Switch = Poor performance

"after few times throughput goes down and does not exceed 1-2MB/sec (everything else still works except bandwidth)." 
This phenomenon is exactly the same as my failure.
by fengyuclub
Tue Jul 02, 2019 2:41 pm
Forum: General
Topic: Bonding (802.3ad) + Switch = Poor performance
Replies: 2
Views: 353

Re: Bonding (802.3ad) + Switch = Poor performance

My question is about the link aggregation problem, the same ccr1016, one can fail another ccr1016bonding, just the switch is different, after searching the forum, I found this post and I have the same problem, please can get the answer. Is the switch required to support the lacp protocol to do the b...
by fengyuclub
Fri Jan 18, 2019 3:08 am
Forum: Useful user articles
Topic: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything) Topic is solved
Replies: 234
Views: 74145

Re: Using Splunk to analyse MikroTik logs 2.5 (Graphing everything) Topic is solved

Good idea moving the cpu reading to the top. I have updated fist post view new version. PS mine du not give much difference in CPU when script is running. Maybe you device is some under-powered or you have som wrong in your configuration (fasttrack or hw acceleration missing) I see that MB is wrong...
by fengyuclub
Wed Jan 16, 2019 3:55 am
Forum: General
Topic: Netflow packet analysis software for home network
Replies: 7
Views: 2194

Re: Netflow packet analysis software for home network

http://blogs.catapultsystems.com/mdowst/archive/2018/06/18/install-elastiflow-on-ubuntu-18-04-part-1/ According to the 4 steps of the above article, the installation is complete, you can access, but how to inject the traffic data of mikrotik router into elastiflow? The xxxx.json dashboard file impor...
by fengyuclub
Sat Sep 16, 2017 5:50 am
Forum: Scripting
Topic: how to send Notifications via Pushover & Pushbullet
Replies: 6
Views: 2017

Re: how to send Notifications via Pushover & Pushbullet

It's great to support Pushbullet.
by fengyuclub
Sat Sep 16, 2017 5:49 am
Forum: Scripting
Topic: how to send Notifications via Pushover & Pushbullet
Replies: 6
Views: 2017

Re: how to send Notifications via Pushover & Pushbullet

It's great to support Pushbullet.
by fengyuclub
Sat May 27, 2017 6:51 am
Forum: Scripting
Topic: Netwatch script doesn't work
Replies: 8
Views: 1448

Re: Netwatch script doesn't work

tools/netwach host=74.125.135.138 up= /tool e-mail send to="youremail@gmail.com" subject="Internet Connection Status" body=([/system identity get name] . " back UP in " . [/system clock get time] . " on date " . [/system clock get date]) down= /tool e-mail send to="youremail@gmail.com" subject="Int...
by fengyuclub
Tue Mar 14, 2017 9:16 am
Forum: General
Topic: Feature/Bugfix required: UPNP
Replies: 1
Views: 753

Re: Feature/Bugfix required: UPNP

I am also the same problem, hope mikrotik can see and solve this problem.
by fengyuclub
Mon Jan 16, 2017 4:35 am
Forum: Beginner Basics
Topic: why specify the Dst.address, can not specify dst-port
Replies: 1
Views: 317

Re: why specify the Dst.address, can not specify dst-port

The problem is found, the problem is winbox3.8, winbox3.7 normal.
by fengyuclub
Mon Jan 16, 2017 3:58 am
Forum: Beginner Basics
Topic: why specify the Dst.address, can not specify dst-port
Replies: 1
Views: 317

why specify the Dst.address, can not specify dst-port

New version 6.37.3, why specify the Dst.address, can not specify dst-port, the option is gray, not available, how do I do port mapping operation? Upgrade 6.38 or so can not operate.
1.png
by fengyuclub
Wed Jan 04, 2017 9:13 am
Forum: Scripting
Topic: need help about a script
Replies: 2
Views: 499

Re: need help about a script

helpme
by fengyuclub
Tue Dec 27, 2016 11:48 am
Forum: Scripting
Topic: Scripting Ideas ??
Replies: 25
Views: 3465

Re: Scripting Ideas ??

by fengyuclub
Tue Dec 27, 2016 9:51 am
Forum: Scripting
Topic: need help about a script
Replies: 2
Views: 499

Re: need help about a script

:?:
by fengyuclub
Mon Dec 26, 2016 10:42 am
Forum: Scripting
Topic: need help about a script
Replies: 2
Views: 499

need help about a script

Read some topic, the perfect solution to my problem.http://forum.mikrotik.com/viewtopic.php?f=9&t=111627 :local oldip [/ip firewall address-list get [find list="xxxxxip"] address]; :local newip [/ip address get [find interface="adsl"] address]; :local newip [:pick $newip 0 [:find $newip "/"]]; :if (...
by fengyuclub
Tue Sep 13, 2016 5:41 am
Forum: Beginner Basics
Topic: How can we address-list in a dynamic ip address Export to file
Replies: 0
Views: 439

How can we address-list in a dynamic ip address Export to file

How can we address-list in a dynamic ip address Export to file,My intention is trying to host a daily list of online comparison.
chain=prerouting action=add-src-to-address-list src-address-list=ether1-lan address-list=Online address-list-timeout=5m log=no log-prefix=""
by fengyuclub
Tue Sep 06, 2016 6:39 pm
Forum: Wireless Networking
Topic: How to get Internet to the 2nd floor using WiFi with Mikrotik
Replies: 22
Views: 3003

Re: How to get Internet to the 2nd floor using WiFi with Mikrotik

I suggest you try, two ubnt NanoStation Loco M2 to each other on the radio, if the fear of 2.4g interference, then use loco m5, should be able to solve your problem.
by fengyuclub
Mon Sep 05, 2016 12:20 pm
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 976

Re: how to get a regular ip for myisp adsl?

I used the phrase "/ ip firewall nat remove [find comment ~" ^ upnp *. "];" After the wan ip change can delete the old upnp mapping.
by fengyuclub
Mon Sep 05, 2016 12:18 pm
Forum: General
Topic: Problem with UPNP/portforwarding
Replies: 5
Views: 898

Re: Problem with UPNP/portforwarding

I mean, if there are multiple network clients have upnp demand, dst.port the changes, restart the port after the client request (dst.port) will change, how to achieve it?
by fengyuclub
Fri Sep 02, 2016 1:02 pm
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 976

Re: how to get a regular ip for myisp adsl?

What's the 450G ROS version? firmware version? That post is almost 10 years old... in addition, there have been lots of uPNP fixes. I carefully observed the ip address range my adsl out (isp) obtained, xx.xx.xx.2 ~ xx.xx.xx.12, how to make adsl out to get the desired ip address, otherwise, have bee...
by fengyuclub
Thu Sep 01, 2016 1:10 pm
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 976

Re: how to get a regular ip for myisp adsl?

Try this script. schedule it to run every 5mins. It will check if the ppoe has a new IP and if it does, it will remove the entries for upnp. :global currentIP; :local newIP [/ip address get [find interface="ppoe1"] address]; :if ($newIP != $currentIP) do={ /ip firewall nat remove [find comment~"^up...
by fengyuclub
Thu Sep 01, 2016 4:17 am
Forum: General
Topic: Problem with UPNP/portforwarding
Replies: 5
Views: 898

Re: Problem with UPNP/portforwarding

I find the solution myself!
Just create a rule manually, all parameter as the same as the previous UPNP rule, except fill the "dst. address" as "!192.168.0.0/16", instead of the WAN address, it works!
This solution is limited to the internal network has only one client device
by fengyuclub
Thu Sep 01, 2016 3:11 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 976

Re: how to get a regular ip for myisp adsl?

rb450g v6.36.2 fireware is 3.24 . The latest version
by fengyuclub
Wed Aug 31, 2016 5:43 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 976

Re: how to get a regular ip for myisp adsl?

http://forum.mikrotik.com/viewtopic.php ... pnp#p59994This topic is the same problem and I hope Solutions
by fengyuclub
Wed Aug 31, 2016 4:34 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 976

Re: how to get a regular ip for myisp adsl?

Why not simply use ip > cloud? If you have a web or other kind of server behind the mikrotik, you want to be available from outside, just create a CNAME (on your domain DNS) referring to the routerboard xxxxxxxxxx.sn.mynetname.net record. Thank you pukkita, maybe I did not explain what I mean, I am...
by fengyuclub
Tue Aug 30, 2016 10:38 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 976

how to get a regular ip for myisp adsl?

I press this script( http://forum.mikrotik.com/viewtopic.php?f=9&t=111073#p552202 ), if wan ip change, send e-mail notification, has been working satisfactorily. ip-per-acquisition are xx.xx.xx.2 ~ xx.xx.xx.12, how to make it in a fixed ip, such as xx.xx.xx.10, if not xx.xx.xx.10 , repeatedly dial, ...
by fengyuclub
Mon Aug 15, 2016 12:42 pm
Forum: Scripting
Topic: how to mail me if isp ip change (pppoe)?
Replies: 3
Views: 1975

Re: how to mail me if isp ip change (pppoe)?

Hi, I run a scheduled script, below, at regular intervals. Make sure your email settings on the router are working first and change the interface name as required. The script store the address in a firewall address-list so it can compare it if it changes. I use the same address-list for my hairpin ...
by fengyuclub
Fri Aug 12, 2016 6:07 am
Forum: Scripting
Topic: how to mail me if isp ip change (pppoe)?
Replies: 3
Views: 1975

Re: how to mail me if isp ip change (pppoe)?

i am a chinese user,my english is poor,please help me . thanks.
by fengyuclub
Thu Aug 11, 2016 1:30 pm
Forum: Scripting
Topic: how to mail me if isp ip change (pppoe)?
Replies: 3
Views: 1975

how to mail me if isp ip change (pppoe)?

Hi guys , I need a script code ,when my isp(pppoe) ip address changed ,send this changed ip to mymail,if ip isn't changed no send. How to do???
by fengyuclub
Tue Jan 12, 2016 4:52 am
Forum: Scripting
Topic: Automated Script backup Email Error
Replies: 4
Views: 1630

Re: Automated Script backup Email Error

Nice! Use your script successfully sent mail
by fengyuclub
Sat Sep 20, 2014 6:23 am
Forum: Beginner Basics
Topic: how bandwidth superposition
Replies: 1
Views: 437

how bandwidth superposition

2 wireless Internet access, the same isp, how bandwidth superposition, 2m + 2m = 4m
Another problem, how to use the new version “ip cloud”,what effect can be achieved?
please help