Community discussions

MikroTik App

Search found 104 matches

by fengyuclub
Mon Apr 08, 2024 6:08 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊

I didn't read your update carefully. After following step 2a), it worked normally. Thank you.
by fengyuclub
Mon Apr 01, 2024 1:26 pm
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊

What is your routerOS version and script version? Post output of: /ip/kid-control/print It should show the day of week its enabled like this: Columns: NAME, SUN, MON, TUE, WED, THU, FRI, SAT # NAME SUN MON TUE WED THU FRI SAT 0 Monitor 0s-1d 0s-1d 0s-1d 0s-1d 0s-1d 0s-1d 0s-1d If that is ok, you ha...
by fengyuclub
Sat Mar 30, 2024 5:38 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊

You have followed the 2e settings about kid control?
This is for sure. I submitted the bug after confirming it.
by fengyuclub
Tue Mar 26, 2024 3:27 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊

`index` sourcetype=mikrotik module=script script=health host=10.0.0.1 name=temperature | where value>50 Error message: "Error in 'SearchParser': The search specifies a macro 'index' that cannot be found. Reasons include: the macro name is misspelled, you do not have "read" permission...
by fengyuclub
Wed Mar 06, 2024 3:28 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

I upgraded an rb750Gr3, upgraded v5.3 to v5.6, and then saw the scene as shown below. I understand that the serial number is not displayed, but for what purpose is the other attributes not displayed? At least the "identity" is displayed. , or where I made it rough, please tell me. 2024-03-...
by fengyuclub
Mon Aug 28, 2023 6:07 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

Updated "MikroTik Device Traffic" to give correct graphs if router is rebooted or counter is reset. Get your update from git. After the update, the above problem has been solved,but "script error: error - contact MikroTik support and send a supout file (10)" This error message s...
by fengyuclub
Mon Aug 28, 2023 5:26 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

fengyuclub Hi problem with "script error: error - contact MikroTik support and send a supout file (10)" in "#Get detailed command history RouterOS" is probalby related to number of enrities in /system history - if there are too many entries, an error message appears (even execut...
by fengyuclub
Fri Aug 25, 2023 1:12 pm
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

One of my ccr1016-12G doesn’t record data to splunk anymore. I can see the error message in the mikrotik log, as shown in the figure below, every time it is 998. It’s very strange. I try to stop and delete the corresponding one according to the error log field. "# Count IP in address-lists"...
by fengyuclub
Mon Jul 17, 2023 3:56 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 974

Re: help!!! received a warning that the authorization is invalid

When I replaced this router with a spare router (also a ccr1016-12G), the replaced ccr1016 with a problematic authorization went back to normal after re-powering on and logging in, and there was no authorization prompt. Not sure what the problem is. Luckily I have a spare router, otherwise it would ...
by fengyuclub
Mon Jul 17, 2023 2:39 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 974

Re: help!!! received a warning that the authorization is invalid

The business cannot be stopped, and there is no choice but to replace the backup route.
by fengyuclub
Mon Jul 17, 2023 12:54 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 974

Re: help!!! received a warning that the authorization is invalid

device serial number and supout.rif file has been sent to support@mikrotik.com,hope it can be resolved soon。
by fengyuclub
Mon Jul 17, 2023 12:45 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 974

Re: help!!! received a warning that the authorization is invalid

What did you do, before this happened?

Email support@mikrotik.com with device serial number and supout.rif file

Forum can't help with this, you need support department
I have already submitted a request, do I still need to write to support@mikrotik.com?
by fengyuclub
Mon Jul 17, 2023 12:03 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 974

help!!! received a warning that the authorization is invalid

Today my CCR1016-12G received a warning that the authorization is invalid. Follow the prompts to update the License key, and it shows “done”, but after logging in again, the same prompt remains, indicating that the router will stop operating within 24 hours. What should I do? I also submitted a supp...
by fengyuclub
Mon Jul 03, 2023 3:38 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

My mikrotik is ccr1016, and the /system/health/print information is as follows: system health/pr Columns: NAME, VALUE, TYPE # NAME VALUE TYPE 0 cpu-temperature 50 C 1 fan1-speed 5730 RPM 2 fan2-speed 0 RPM 3 board-temperature1 28C 4 psu1-state ok 5 psu2-state fail How should I write the alarm script...
by fengyuclub
Sat Jul 01, 2023 5:24 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

thank you for your reply. I just applied for the 10G enterprise license according to your post. I read the official splunk manual about webhook, but I didn't find a solution. I'm looking for other ways. In fact, this notification is to solve the high temperature reminder caused by the power outage o...
by fengyuclub
Fri Jun 30, 2023 10:30 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

I set it up step by step according to the steps in your post, and it started working, and the data was indexed, which is great. There is another problem. I have been using a high temperature warning script, but now it seems that it cannot be used after v7. After reading many posts in the forum, I ca...
by fengyuclub
Fri Jun 30, 2023 4:32 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

You can use chown -R on the folder to sett correct user/group.
Installing it using git will be som manual work.
You can use git pull and point it directly to your folder, but that will make a risk of overwriting stuff you do manually.
please help me
by fengyuclub
Mon Jun 26, 2023 12:26 pm
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.9 (Graphing everything) 💾 🛠 💻 📊

I recently re-deployed a splunk9.0.5 machine on the intranet, and then forwarded all the previous logs to this splunk. The data can be indexed, but the dashboard in the application has no data, and even basic dhcp requests can be seen No, why is this? Is the splunk version too new?
by fengyuclub
Fri Mar 17, 2023 3:33 am
Forum: General
Topic: Can not access to the remote LAN through wireguard [SOLVED]
Replies: 21
Views: 3233

Re: Can not access to the remote LAN through wireguard [SOLVED]

First of all, I am not very familiar with mikrotik routing, but I basically understand your needs. Although wireguard is currently the best performing vpn, it still affects performance. The bypass mode is recommended for devices such as Android TV, no need to set. There are many xray clients for oth...
by fengyuclub
Tue Mar 14, 2023 9:47 am
Forum: General
Topic: Can not access to the remote LAN through wireguard [SOLVED]
Replies: 21
Views: 3233

Re: Can not access to the remote LAN through wireguard [SOLVED]

I think the VPN protocol is different. Commonly used VPN protocols such as ipsec are easily detected by gfw and block traffic. I understand. I guess I live in the same country as you. If you want to avoid censorship, you can consider deploying your own vps node with a more advanced xray protocol. I...
by fengyuclub
Tue Mar 14, 2023 3:40 am
Forum: General
Topic: Can not access to the remote LAN through wireguard [SOLVED]
Replies: 21
Views: 3233

Re: Can not access to the remote LAN through wireguard [SOLVED]

What is your purpose? I am somewhat dizzy after looking at your topology. If openwrt is for client bypass routing service, you can use ip dhcp-server option code 3 & 6 to distribute gateway and dns. If you are accessing internal lan-side services externally, you already have esxi, so it is more ...
by fengyuclub
Mon Mar 13, 2023 9:04 am
Forum: General
Topic: How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?
Replies: 6
Views: 761

Re: How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?

The problem is solved, just add a routing mark on the rb750 route chain=prerouting action=mark-routing new-routing-mark=main passthrough=no src-address-list=local-LAN in-interface=bridge2-LAN But in this case, you can see that the client cannot aggregate the sum of the bandwidth of the 3 ISPs, and c...
by fengyuclub
Sat Mar 11, 2023 4:24 am
Forum: General
Topic: How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?
Replies: 6
Views: 761

Re: How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?

yup, need to see complete config on both routers
/export file=anynameyouwish ( minus router serial number and any public WANIP info )
export file
by fengyuclub
Wed Mar 08, 2023 8:41 am
Forum: General
Topic: How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?
Replies: 6
Views: 761

Re: How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?

Can you give me some hints combined with my topology, although I have some basics of mikritok router settings, but I am not very professional.
by fengyuclub
Tue Mar 07, 2023 12:17 pm
Forum: General
Topic: How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?
Replies: 6
Views: 761

How should I configure a site-to-site VPN tunnel based on wireguard in a multi-wan environment?

Checked the official wiki document, the configuration is successful, the mikrotik devices at both ends are v7.7, just a few days ago, the mikrotik device at one end (rb750gr3) was upgraded to the latest version of v7.8, and then it didn’t work, and the other end Also upgraded to v7.8, still can't ac...
by fengyuclub
Fri Jan 20, 2023 3:01 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.8 (Graphing everything) 💾 🛠 💻 📊

Thank you for discovering the problem. After I enabled system/package/wireless, the problem was solved. Since I use the router as a hardrouter, there is a separate unifi control to take over the ap device, so the wireless module is naturally disabled. It should be the problem. As for the dhcp proble...
by fengyuclub
Fri Jan 13, 2023 4:53 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.8 (Graphing everything) 💾 🛠 💻 📊

Sorry I didn't read your post carefully
script=resource free_memory=1575 MB total_memory=1952 MB free_hdd_space=428 MB total_hdd_space=512 MB cpu_load=12 uptime=4w3d04:50:39 write-sect-total=
by fengyuclub
Thu Jan 12, 2023 3:28 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.8 (Graphing everything) 💾 🛠 💻 📊

Tested the script on several mikrotik, but again there is no output, as shown in this picture. 'print' will output information
2023-01-12_09-21-49.png
by fengyuclub
Fri Jan 06, 2023 10:24 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.8 (Graphing everything) 💾 🛠 💻 📊

index=* host=10.0.0.1 | fillnull value="-" | stats count by module script | sort -count script 5.1 dhcp - 186239 dns - 1017 script - 12 system - 4 e-mail - 1 script4.9 dhcp - 517849 script kids 115519 script neighbor 6456 script upnp 4935 script if_traffic 4785 script address_lists 4060 s...
by fengyuclub
Fri Dec 30, 2022 3:04 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.8 (Graphing everything) 💾 🛠 💻 📊

Using the 5.1 script, you can’t see any action in the log after manually running it, which can be understood as not running. After manually running the 4.9 script, you can see the output immediately. 5.1 Is this paragraph in the script the cause “# Get RouterOS main version (used to run different sc...
by fengyuclub
Thu Dec 29, 2022 3:58 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.8 (Graphing everything) 💾 🛠 💻 📊

The same two ccr1016s have the same firmware version 6.48.6, but one does not work after upgrading the 5.1 script. There is also a CCR1009-8G-1S that has the same problem. I checked the update log and other files, but I can’t see where the problem is. Can you tell me what the possible problem is?Cur...
by fengyuclub
Tue Sep 13, 2022 10:55 am
Forum: Useful user articles
Topic: 📌 Tool: Using Splunk to analyse MikroTik logs 4.0 (Graphing everything) 💾 🛠 💻 📊
Replies: 362
Views: 124161

Re: 📌 Tool: Using Splunk to analyse MikroTik logs 3.7 (Graphing everything) 💾 🛠 💻 📊

Although I updated the script and application today, I have always felt that the visualization of interface traffic is not very good. Where should I adjust it?
2022-09-13_15-52-13.png
by fengyuclub
Thu Jul 22, 2021 4:13 am
Forum: General
Topic: DHCP Offering Lease Without Success
Replies: 119
Views: 130811

Re: DHCP Offering Lease Without Success

Checked the log, this problem still exists, how to solve it, but it seems to have little effect.
2021-07-22_09-11-32.png
by fengyuclub
Mon Mar 30, 2020 10:19 am
Forum: Announcements
Topic: Winbox v3.22 released!
Replies: 117
Views: 84995

Re: Winbox v3.22 released!

Snipaste_2020-03-30_15-12-42.jpg
Why the font of my winbox is different from yours, how can I use arial font, only the menu bar is arial font.
by fengyuclub
Tue Mar 24, 2020 12:41 pm
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

Somehow just fine, I carefully compared the configuration before and after, only / ip route rule add action = lookup-only-in-table dst-address = 10.0.0.0 / 23 table = main is added later, it may be because the router has not restarted. I set it to restart every Sunday, does this rule need to restart...
by fengyuclub
Fri Mar 20, 2020 8:53 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

I added 4 mangles to the top as you said. You can see that the fourth one has no data packets passing through. What should I do?
add chain=postrouting src-address=1.1.1.1 protocol=tcp src-port=8180 action=log log-prefix=step4
1.png
by fengyuclub
Fri Mar 20, 2020 4:57 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

Removing sensitive stuff is ok, but it must not break ability to understand the config. If you ask about port 8888, I need to see dstnat rule for port 8888. Currently it's not there. If it contains a public address you want to hide, it's no problem, just replace it with your fake 2.2.2.2. I can loo...
by fengyuclub
Fri Mar 20, 2020 4:47 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

myconfig
by fengyuclub
Mon Mar 16, 2020 3:09 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

I gag when I see the use of VLAN1. I would change that to vlan100 or any other number but I doubt it has any thing to do with any of the issues at play. After reading your article about vlan and que, I was very inspired. Vlan1 is actually base vlan, or the default vlan and management vlan. Maybe my...
by fengyuclub
Mon Mar 16, 2020 3:05 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

Try again and be more accurate. There's no dstnat for port 8888 like you had in original post. Only dstnat going to 10.0.0.2 is port 1514, which can't work from LAN because it has in-interface=WAN-ether2. But that wouldn't work not only from vlans, but neither from main 10.0.0.0/23. And I'm not sur...
by fengyuclub
Sun Mar 15, 2020 6:56 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

re-upload
by fengyuclub
Sun Mar 15, 2020 6:55 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

Re: dualwan hairpin nat consultation

It's not hairpin NAT problem. Only devices in same subnet as server need hairpin NAT. In your case it's only vlan1. Both vlan10 and vlan11 have diffent subnet, so no hairpin NAT is needed there. It's probably your routing. If you mark routing from vlan10 and vlan11 in order to use WAN 2.2.2.2, it's...
by fengyuclub
Tue Mar 10, 2020 5:54 am
Forum: General
Topic: dualwan hairpin nat consultation
Replies: 16
Views: 5377

dualwan hairpin nat consultation

Hello everyone, I recently encountered a problem, I have read a lot of posts, it should be the problem of hairpin nat, but my situation may be a bit special, I hope to get answers My network configuration is roughly as shown in the figure. There are 2 Internet access lines, one is a static IP: 1.1.1...
by fengyuclub
Wed Aug 07, 2019 9:39 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Recently, one of my ccr is a bit problematic. I can only recover from the time when the device is powered off and restarted. The top of the log in winbox can see red like "system, error System rebooted because of kernel failure" or "Out of memory condition was detected", but I ca...
by fengyuclub
Sat Jul 27, 2019 4:56 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

I have Splunk Enterprise license, gmail alert can't be real-time, mobile mail client can't update mail in real time, there is a delay of about 10 minutes, so I choose wechat alert.I received some wechat alert, but some of them use the search to save as an alert, I can't receive a wechat alert, I don...
by fengyuclub
Thu Jul 25, 2019 12:46 pm
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Splunk is really powerful, I see splunk have a lot of apps to install, in our China use wechat (similar to facebook, telegram) this social software, I saw this social software related app, WeChat Alert App for Splunk, I installed this App, sending test messages from wechat is successful, but I don't...
by fengyuclub
Sat Jul 20, 2019 7:10 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Host=x.x.x.x Although this option is available, some devices have an internet connection that is a dynamic ip obtained by adsl dialing. So before the log warning, add an identity=xxxxx to distinguish the mikrotik device. After testing, it is feasible and runs very well.
by fengyuclub
Sat Jul 20, 2019 5:59 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Understand, add host=x.x.x.x in front of the search statement you gave to open my ccr and rb.
by fengyuclub
Sat Jul 20, 2019 5:46 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Jotne,Great, I did it according to your script, and the beautiful chart shows normal. I tried to add scripts to my multiple ccr and routerboards, so my interface has a lot of duplicate names, such as bonding1 and bridge1, how can I distinguish between them, or change the name for each interface. 4.p...
by fengyuclub
Fri Jul 19, 2019 12:26 pm
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Tested on other ccr1016 your script is successful, it should be the problem of the interface name, but it is important to draw the splunk graphics, I hope you can add to the new version.
3.png
by fengyuclub
Fri Jul 19, 2019 11:47 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Your script, the regular expression method, no success without any output, it doesn't matter, my code is as follows I want to know how to search for rich charts, and there are 14.8Mbps and 14833 display problems. This is not important. The important thing is how splunk draws charts. mycode { :local ...
by fengyuclub
Fri Jul 19, 2019 5:03 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

{ :local iname; :local monitor; :local speedRX; :local speedTX; :local mbpsRX; :local mbpsTX; :foreach interface in=[/interface find] do={ :delay 100ms; :set $iname [/interface get $interface name]; :set $monitor [/interface monitor-traffic $iname as-value once]; :set $speedRX ($monitor->"rx-b...
by fengyuclub
Thu Jul 18, 2019 1:27 pm
Forum: General
Topic: rx,tx byte rate in interface menu
Replies: 7
Views: 3202

Re: rx,tx byte rate in interface menu

/interface monitor-traffic LAN once do={:put $"rx-bits-per-second" }
How to record this value to the log and let it display like 14.5Mbps, retaining a decimal point. Trying to find the entire forum, many will not work.
by fengyuclub
Mon Jul 15, 2019 10:07 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

What command do you use on the router to see this data?
interface monitor-traffic ether1

Search forums see scripts with such calls
  "/interface monitor-traffic ether1 once do={
:put ($"tx-bits-per-second"/1000 /1000 )
}"
by fengyuclub
Mon Jul 15, 2019 6:24 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

How can I write the interface tx-bits-per-second parameter to the log and then plot it in splunk.
by fengyuclub
Fri Jul 12, 2019 11:42 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Splunk is too powerful. If I have multiple ccr1016, how can I transfer data to the splunk server, how do I distinguish syslogs from different mikrotik routers?
by fengyuclub
Fri Jul 12, 2019 6:02 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

The data is coming, some of the tables are already filled, some still have no data, such as dns, it doesn't matter, I want to know how to monitor the flow table of an interface (wan), just like mirkrotik's built-in mrtg chart, every 5 minutes, 30 minutes and so on. . . As shown
1.png
by fengyuclub
Thu Jul 11, 2019 1:03 pm
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

It’s true that I set it wrong, Mikrotik changed to MikroTik, and it should be fine, then I will report it.
by fengyuclub
Tue Jul 09, 2019 5:51 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

There is no local listening udp514, now there is data in, but click on the meter in the Mikrotik2.7 dashboard, most of them do not have any charts, how to add or customize the dashboard you need here, for example, I want The wan's real-time or past and downstream traffic in a certain period of time,...
by fengyuclub
Mon Jul 08, 2019 12:57 pm
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

After starting Splunk, go to Search & Reporting menu. Add following search: sourcetype=mikrotik and set last 24 hour. Do you then see any data? If not try to just use a * (star) and last 24 hour. If you do not see any data, make sure Router is sending data to correct IP/Port. Splunk is listenin...
by fengyuclub
Sat Jul 06, 2019 6:50 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

Reinstalled splunk on ubuntu18.04, is a virtual machine under esxi, the deployment is very simple and normal, according to the steps of the top post, but the splunk dashboard can not see the task data incoming. Very strange, what else do I need to pay attention to? Please forgive my English using Go...
by fengyuclub
Wed Jul 03, 2019 5:36 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.7 (Graphing everything)

I have been paying attention to this post, very powerful chart, but the cumbersome construction and the lack of relevant knowledge have been unsuccessful. I can only temporarily use the mrtg icon inside routeros to temporarily cope with it. I hope the poster can write the deployment manual from the ...
by fengyuclub
Tue Jul 02, 2019 2:43 pm
Forum: General
Topic: Bonding (802.3ad) + Switch = Poor performance
Replies: 2
Views: 1236

Re: Bonding (802.3ad) + Switch = Poor performance

"after few times throughput goes down and does not exceed 1-2MB/sec (everything else still works except bandwidth)." 
This phenomenon is exactly the same as my failure.
by fengyuclub
Tue Jul 02, 2019 2:41 pm
Forum: General
Topic: Bonding (802.3ad) + Switch = Poor performance
Replies: 2
Views: 1236

Re: Bonding (802.3ad) + Switch = Poor performance

My question is about the link aggregation problem, the same ccr1016, one can fail another ccr1016bonding, just the switch is different, after searching the forum, I found this post and I have the same problem, please can get the answer. Is the switch required to support the lacp protocol to do the b...
by fengyuclub
Fri Jan 18, 2019 3:08 am
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309928

Re: Using Splunk to analyse MikroTik logs 2.5 (Graphing everything)

Good idea moving the cpu reading to the top. I have updated fist post view new version. PS mine du not give much difference in CPU when script is running. Maybe you device is some under-powered or you have som wrong in your configuration (fasttrack or hw acceleration missing) I see that MB is wrong...
by fengyuclub
Wed Jan 16, 2019 3:55 am
Forum: General
Topic: Netflow packet analysis software for home network
Replies: 6
Views: 6301

Re: Netflow packet analysis software for home network

http://blogs.catapultsystems.com/mdowst/archive/2018/06/18/install-elastiflow-on-ubuntu-18-04-part-1/ According to the 4 steps of the above article, the installation is complete, you can access, but how to inject the traffic data of mikrotik router into elastiflow? The xxxx.json dashboard file impor...
by fengyuclub
Sat Sep 16, 2017 5:50 am
Forum: Scripting
Topic: how to send Notifications via Pushover & Pushbullet
Replies: 8
Views: 6180

Re: how to send Notifications via Pushover & Pushbullet

It's great to support Pushbullet.
by fengyuclub
Sat Sep 16, 2017 5:49 am
Forum: Scripting
Topic: how to send Notifications via Pushover & Pushbullet
Replies: 8
Views: 6180

Re: how to send Notifications via Pushover & Pushbullet

It's great to support Pushbullet.
by fengyuclub
Sat May 27, 2017 6:51 am
Forum: Scripting
Topic: Netwatch script doesn't work
Replies: 8
Views: 2767

Re: Netwatch script doesn't work

tools/netwach host=74.125.135.138 up= /tool e-mail send to="youremail@gmail.com" subject="Internet Connection Status" body=([/system identity get name] . " back UP in " . [/system clock get time] . " on date " . [/system clock get date]) down= /tool e-mail se...
by fengyuclub
Tue Mar 14, 2017 9:16 am
Forum: General
Topic: Feature/Bugfix required: UPNP
Replies: 1
Views: 1456

Re: Feature/Bugfix required: UPNP

I am also the same problem, hope mikrotik can see and solve this problem.
by fengyuclub
Mon Jan 16, 2017 4:35 am
Forum: Beginner Basics
Topic: why specify the Dst.address, can not specify dst-port
Replies: 1
Views: 784

Re: why specify the Dst.address, can not specify dst-port

The problem is found, the problem is winbox3.8, winbox3.7 normal.
by fengyuclub
Mon Jan 16, 2017 3:58 am
Forum: Beginner Basics
Topic: why specify the Dst.address, can not specify dst-port
Replies: 1
Views: 784

why specify the Dst.address, can not specify dst-port

New version 6.37.3, why specify the Dst.address, can not specify dst-port, the option is gray, not available, how do I do port mapping operation? Upgrade 6.38 or so can not operate.
1.png
by fengyuclub
Wed Jan 04, 2017 9:13 am
Forum: Scripting
Topic: need help about a script
Replies: 2
Views: 1364

Re: need help about a script

helpme
by fengyuclub
Tue Dec 27, 2016 11:48 am
Forum: Scripting
Topic: Scripting Ideas ??
Replies: 25
Views: 6666

Re: Scripting Ideas ??

by fengyuclub
Tue Dec 27, 2016 9:51 am
Forum: Scripting
Topic: need help about a script
Replies: 2
Views: 1364

Re: need help about a script

:?:
by fengyuclub
Mon Dec 26, 2016 10:42 am
Forum: Scripting
Topic: need help about a script
Replies: 2
Views: 1364

need help about a script

Read some topic, the perfect solution to my problem.http://forum.mikrotik.com/viewtopic.php?f=9&t=111627 :local oldip [/ip firewall address-list get [find list="xxxxxip"] address]; :local newip [/ip address get [find interface="adsl"] address]; :local newip [:pick $newip 0 [:...
by fengyuclub
Tue Sep 13, 2016 5:41 am
Forum: Beginner Basics
Topic: How can we address-list in a dynamic ip address Export to file
Replies: 0
Views: 869

How can we address-list in a dynamic ip address Export to file

How can we address-list in a dynamic ip address Export to file,My intention is trying to host a daily list of online comparison.
chain=prerouting action=add-src-to-address-list src-address-list=ether1-lan address-list=Online address-list-timeout=5m log=no log-prefix=""
by fengyuclub
Tue Sep 06, 2016 6:39 pm
Forum: Wireless Networking
Topic: How to get Internet to the 2nd floor using WiFi with Mikrotik
Replies: 22
Views: 5182

Re: How to get Internet to the 2nd floor using WiFi with Mikrotik

I suggest you try, two ubnt NanoStation Loco M2 to each other on the radio, if the fear of 2.4g interference, then use loco m5, should be able to solve your problem.
by fengyuclub
Mon Sep 05, 2016 12:20 pm
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 2203

Re: how to get a regular ip for myisp adsl?

I used the phrase "/ ip firewall nat remove [find comment ~" ^ upnp *. "];" After the wan ip change can delete the old upnp mapping.
by fengyuclub
Mon Sep 05, 2016 12:18 pm
Forum: General
Topic: Problem with UPNP/portforwarding
Replies: 5
Views: 2021

Re: Problem with UPNP/portforwarding

I mean, if there are multiple network clients have upnp demand, dst.port the changes, restart the port after the client request (dst.port) will change, how to achieve it?
by fengyuclub
Fri Sep 02, 2016 1:02 pm
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 2203

Re: how to get a regular ip for myisp adsl?

What's the 450G ROS version? firmware version? That post is almost 10 years old... in addition, there have been lots of uPNP fixes. I carefully observed the ip address range my adsl out (isp) obtained, xx.xx.xx.2 ~ xx.xx.xx.12, how to make adsl out to get the desired ip address, otherwise, have bee...
by fengyuclub
Thu Sep 01, 2016 1:10 pm
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 2203

Re: how to get a regular ip for myisp adsl?

Try this script. schedule it to run every 5mins. It will check if the ppoe has a new IP and if it does, it will remove the entries for upnp. :global currentIP; :local newIP [/ip address get [find interface="ppoe1"] address]; :if ($newIP != $currentIP) do={ /ip firewall nat remove [find co...
by fengyuclub
Thu Sep 01, 2016 4:17 am
Forum: General
Topic: Problem with UPNP/portforwarding
Replies: 5
Views: 2021

Re: Problem with UPNP/portforwarding

I find the solution myself!
Just create a rule manually, all parameter as the same as the previous UPNP rule, except fill the "dst. address" as "!192.168.0.0/16", instead of the WAN address, it works!
This solution is limited to the internal network has only one client device
by fengyuclub
Thu Sep 01, 2016 3:11 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 2203

Re: how to get a regular ip for myisp adsl?

rb450g v6.36.2 fireware is 3.24 . The latest version
by fengyuclub
Wed Aug 31, 2016 5:43 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 2203

Re: how to get a regular ip for myisp adsl?

http://forum.mikrotik.com/viewtopic.php ... pnp#p59994This topic is the same problem and I hope Solutions
by fengyuclub
Wed Aug 31, 2016 4:34 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 2203

Re: how to get a regular ip for myisp adsl?

Why not simply use ip > cloud? If you have a web or other kind of server behind the mikrotik, you want to be available from outside, just create a CNAME (on your domain DNS) referring to the routerboard xxxxxxxxxx.sn.mynetname.net record. Thank you pukkita, maybe I did not explain what I mean, I am...
by fengyuclub
Tue Aug 30, 2016 10:38 am
Forum: Scripting
Topic: how to get a regular ip for myisp adsl?
Replies: 9
Views: 2203

how to get a regular ip for myisp adsl?

I press this script( http://forum.mikrotik.com/viewtopic.php?f=9&t=111073#p552202 ), if wan ip change, send e-mail notification, has been working satisfactorily. ip-per-acquisition are xx.xx.xx.2 ~ xx.xx.xx.12, how to make it in a fixed ip, such as xx.xx.xx.10, if not xx.xx.xx.10 , repeatedly di...
by fengyuclub
Mon Aug 15, 2016 12:42 pm
Forum: Scripting
Topic: how to mail me if isp ip change (pppoe)?
Replies: 3
Views: 4969

Re: how to mail me if isp ip change (pppoe)?

Hi, I run a scheduled script, below, at regular intervals. Make sure your email settings on the router are working first and change the interface name as required. The script store the address in a firewall address-list so it can compare it if it changes. I use the same address-list for my hairpin ...
by fengyuclub
Fri Aug 12, 2016 6:07 am
Forum: Scripting
Topic: how to mail me if isp ip change (pppoe)?
Replies: 3
Views: 4969

Re: how to mail me if isp ip change (pppoe)?

i am a chinese user,my english is poor,please help me . thanks.
by fengyuclub
Thu Aug 11, 2016 1:30 pm
Forum: Scripting
Topic: how to mail me if isp ip change (pppoe)?
Replies: 3
Views: 4969

how to mail me if isp ip change (pppoe)?

Hi guys , I need a script code ,when my isp(pppoe) ip address changed ,send this changed ip to mymail,if ip isn't changed no send. How to do???
by fengyuclub
Tue Jan 12, 2016 4:52 am
Forum: Scripting
Topic: Automated Script backup Email Error
Replies: 4
Views: 2294

Re: Automated Script backup Email Error

Nice! Use your script successfully sent mail
by fengyuclub
Sat Sep 20, 2014 6:23 am
Forum: Beginner Basics
Topic: how bandwidth superposition
Replies: 1
Views: 783

how bandwidth superposition

2 wireless Internet access, the same isp, how bandwidth superposition, 2m + 2m = 4m
Another problem, how to use the new version “ip cloud”,what effect can be achieved?
please help