MikroTik

Jotne

I will try to look inn to wireguard error, but since I am not at home for some weeks and has bad internet and not access to my normal equipment, it will take some time.

Jotne

Let's look at my mountaintop CCR2116 as an example. We can get there relatively easily from June to October. At my work many years ago, I did setup several Wifi links on mountain tops. Some times they just stopped working or we just like to reboot them. So found a solution. Using a power adapter th...

Jotne

@normis not a big request, but could you post the new release in exact the same format as routerOS? like this: What's new in v4.0beta9: *) return ESC shortcut to close sub windows; *) add support for Groups for Saved router list in Login window; *) add support to import Saved address list .cdb file ...

Jotne

I will do when rfc 5424 is implemented. MT told this may wait to a mayor new release. As far as I see there are several mayor new function even i this release, all marked !) Like these two: !) device-mode - after upgrade, mode "advanced" is set by default and traffic-gen, changing active p...

Jotne

Good to see new beta releases :)
But sad to see no information about fixing the broken log format. :(
Have waited 7 year, so can wait some more ;)
viewtopic.php?t=124291

Jotne

Here are a list of mayor changes (that MT has called it using the ! symbol in the change history) since 7.10 version change 7.15 !) system - added support for AMPERE (R) and ARM64 CHR installations (new ARM64 CHR image available) 7.15 !) system - added support for AMPERE (R) hardware (new ARM64 ISO ...

Jotne

On one side you are right, but on the other - if you asking something for years for a really huge enterprise - why not just create your own log proxy to convert it to whatever you want? This will help anyone that do need logs from the RouterOS. We have adopted lot of stuff to make it simpler to han...

Jotne

I don't think that you will see such fundamental rework in any minor release. 7.16 to 7.16.1 is a minor change. 7.16 to 7.17 is a mayor change. Or do I missunderstand the naming and there will not be done anything before 8.x? Also I can find 100+ mayor change that has been added since first 7.x ver...

Jotne

*) system - added full RFC 5424 for the logging This is what I wish for. Not sure MT understand how important logging is on larger business system with lots of devices. I have asked for this over at least 7 years and nothing has changed. viewtopic.php?t=124291 So please MT do something about this me...

Jotne

With all those change, is like a long-term release........ MT has not released a Long Term version in the 7 series yet. And if you look back in history, you will see the how many version was released before a long term was released. Here is all the first version of Long-Term releases: version 6.30....

Jotne

That is a terrifyingly large amount of changes.

There has been releases with more changes :)

train	count
6.43	459
6.42	433
6.47	416
6.46	414
6.39	399
7.2	392
6.40	376
6.38	365
6.44	361
6.48	357
6.45	351
7.16	322
6.41	287
7.15	276
7.14	267

Jotne

I am having a problem with the Netwatch reporting.

For me the netwatch script do works fine. It should send a log line each time one device goes up and down.
Since the script is very simple, it may be a config error or a bug. Try take som up/down manually and see in the logs.

Jotne

Going to skip v4. This is a step back. As mentioned before: 1. Colouring makes it hard to read. 2. Menu's are now hidden in dropdown menu's. Too much clicking and repeating. 3. Dropdown menu's are not consistent! Some of them are on top, some of them are formed below in a gray bar. For instance: dr...

Jotne

Ye, the wifi/wireless mess. Not sure how to handle that. One of my problem is that I do not have both types. But will try to look inn to it.

Jotne

Script updated to 5.7 Fixes when a pool is used in more than one DHCP server. Since the pool is the same for one or more DHCP server we only take the first find. Change from: :local dname [/ip dhcp-server get [find where address-pool=$poolname] name] to: :local dname [/ip dhcp-server get [:pick [fin...

Jotne

Found the error in DHCP part of the script. It was not made by me, so needed som time to figure out where the error is. This part tries to find what DHCP server the pool is used in: :local dname [/ip dhcp-server get [find where address-pool=$poolname] name] It does expect just one server, but in you...

Jotne

Not sure why the CMD part gives error. Try this from command line: { :global cmd :local f 0 :foreach i in=[/system history find] do={ :if ($i = $cmd) do={ :set f 1 } :if ($f != 1) do={ :put "StartCMD" :put [/system history get $i] :put "EndCMD" } } :global cmd [:pick [/system his...

Jotne

@Josephny

To start over/delete the device db, or just edit it, install "Splunk App for Lookup Editing". Open it and find device_kvstore. Here you can mark all and just remove rows or edit them.

Jotne

Release info still missing ; at end of lines, like this (to be equal RouterOS): *) added undo / redo / safe mode; *) added command line launch parameters ( WinBox <connect-to> <addresess> <password>); *) fix auth via RADIUS on macOS; *) fix opening http url on Windows (for SwOS); *) improved several...

Jotne

it will show cache full, an error message saying "DNS cache full" appears, which I hadn't encountered before...

It may have something to do with you config. You can post it here.

Jotne

That was my thought as well.

Jotne

The runtime is 20 days, and currently, the DNS cache has grown to 42,375 KiB. The DNS memory leak in RouterOS 7.15.3 is continuously occurring. Why have you set Cache size to 64MB? It seems that default on my routers is 2MB. Will not not the router use up to 64MB if its set to 64MB? (If you have a ...

Jotne

AppImage and Snap are also mentoned here, but described as bad.
What is the "best way" to distribute linux apps, in your opinion?

For me it would be that I can use the installer in Ubuntu, like

apt get winbox

Jotne

same happeing here on my gateway router ... (Running 7.15.3) the script stops on an error and tells me to contact MT support (not done yet) after rebooting the problem is gone for a while until (I guess, the memory is exhausted again) 1st impression was that it is happening in the kid control secti...

Jotne

Not sure what you mean by where is this being put. I can just add it to a variable and it works fine for me.

{
:local test [/ip cloud get public-address]
:put $test
}

Jotne

New version should be automatically available upon launch. Could you post the change log in same format like the RouterOS. Here ; is missing at end of the line What's new in v4.0beta3: *) fix crash on macOS 11; What's new in v4.0beta2: *) allow closing regular windows with Ctrl+W, Terminal still Ct...

Jotne

Upgrade one switch in production from 7.14.2 til 7.15.3 (that have kid control). So far only good news. Less disk space used and less memory used.

Jotne

I hope so, v7 is still far away from a production-ready replacement.

Can you give a list of why its not production-ready?

Jotne

I have not had time to test on 7.15.x, but will do. If it eats up memory, MT have a problem.

Jotne

Was waiting to see the igmp-proxy issue found on SUP-152693 that affects IPTV Movistar Spain fixed in 7.16

And I was waiting for a rewrite of the syslog system to follow rfc 5424 that was released in 2009!!!
Hope we have more luck with 7.17...

Jotne

@br0kenPKI

No need to spam the forum by quoting your own message that are just poste above the quoted one.

Jotne

Still no fix for igmp-proxy issue SUP-152693, so waiting for it at next versions.

Still no fix for logging mess SUP-105353 SUP-144261
viewtopic.php?t=124291

Jotne

I do agree with you. I guess some of the problems comes while Cisco buys other companies and do not update it to follow standard.
Logs from Palo Alto are 10 times better than the one from Cisco ASA. More info, better standard used.

Jotne

We can just hope that one day RFC5424 will be supported.

Jotne

Picture missing. Click Full Editor and use Attachements and put picture in the post. Do not use links.

Jotne

Loggs that script sends to Splunk can be fitted with a time prefix. But all that RouterOS does log by it self, will not have it.

PS If some are afraid that loggs will increase with time prefix, it can be trimmed of after its saved to the _time field.

Jotne

@optio @eworm, what is now the correct way to terminate a script without an error in the log? Well, you can just wrap your code into a block, den catch the error and do nothing... BUT! Be aware that this mutes ALL errors, even the legitimate ones that should be regarded! You should try to make scri...

Jotne

A good point. Read this thread https://forum.mikrotik.com/viewtopic.php?t=124291 to see how MT (not) follows the RFC. RFC-5424 clearly specify how time should be set in each message -> https://www.rfc-editor.org/rfc/rfc5424#section-6.2.3 We do use time from message in our work environment, since mas...

Jotne

Let me check my crystal ball: What's new in 7.91beta3 (2030-Jul-25 15:47): *) log - logging now partially following rfc 5424 standard; 😋 With close to 7 years since my first post, I guess we are closer to version 18 before some gets done. For people working with more high end/larger network solutio...

Jotne

What's new in 7.16beta5 (2024-Jul-25 15:47):

*) log - logging now following rfc 5424 standard;

I do hope to see the above message regarding logging mess SUP-105353 SUP-144261:
viewtopic.php?t=124291

Jotne

Rolling back the dns is shit

This is a beta version, not a production version.
Using beta in production are just asking for trouble.
If you have error, report it and it many be fixed.

Jotne

And now I did get a 10GB key, so it did take 3 days. I think you can request a new key 14 days before it ends.

Jotne

Since I am not working for Splunk, I can not help. Before I just requested a key and did get one.

Jotne

Here you have some

Jotne

It was not a joke :) My suggestion is that MT should keep a version, like 7.15 and keep it to it becomes long term in 7.15.xx At the same time there can be 7.16, 7.17 etc and the select a new version like 7.18 and keep it to long term Now you get 7.14 7.14.1, the jumps to 7.15 7.15.1 and next is 7.1...

Jotne

I did visit the site and for me it seems to work. After requesting a license I do get this message: Developer License Pending Review The developer license request is pending review. This process typically takes between 1-3 business days. Once your request is approved, your developer licence will be ...

Jotne

Should MT focus more on new functions or long term stable release

7.15.2 7.15.3 -> 7.15.x Long Term
or
7.16 7.17 7.18

Jotne

I think in my country with radio on full effect and 34db antenna the erpi will surpass the legal limit for use of some concession from the government.

Jotne

Post a picture of equipment. :)

Add the picture to the post using Attachments, not just a link to en external site.

Jotne

This is the beta with most changes in the 7 series as far as I can see. And my MQTT support case was fixed :) 7.16beta1 145 7.13beta1 125 7.12beta7 121 7.9beta4 113 7.15beta4 111 7.8beta2 90 7.10beta5 85 7.7beta3 82 7.11beta2 81 7.3beta33 80 7.14beta3 77 7.10beta8 56 7.5beta4 56 7.15beta8 55 7.14bet...

Jotne

MQTT no longer works after upgrade to 7.15

I may have some to do with this:
viewtopic.php?t=207215

It was not mention in the change log, but its not the first time small changes are not mention in the log.

Jotne

Exciting release packed with updates and bug fixes. My whole fleet of routers (30+, various architectures) updated successfully, and good to see over 700kb of free space on my hAP ac2 (from around 300kb on 7.14.3) Good job dev team :D Updating an entire fleet of routers within 2 hours after release...

Jotne

After Long Wait ROS v7.15 with huge change log is here

247 listed. Exactly the same as in 7.14 ;)

Jotne

There was another monitoring system som years ago that did what we wanted. This was removed and the only solution to get information on traffic for each user is kid control.
You can invest in a more powerful router or use RouterOS on an X86 hardware.

Jotne

Is not that a different database (MaxMind Database) compare to the one that standard built inn iplocation do use?

Jotne

I did find an error in the manual for adlist https://help.mikrotik.com/docs/display/ROS/DNS It tells that for you to add a manual list you must run the following command: /ip/dns/adlist/add file=host.txt match-count=0 name-count=4 This is wrong since to add a list you need only /ip/dns/adlist/add fi...

Jotne

It will be fixed

Our bug tracker reports, that your issue has been fixed. This means that in the upcoming days, we plan to release a RouterOS update with this fix.

Jotne

We can for sure do some with this. But I think its better to start testing when 7.15 are released.
DNS may be the right place to put it, but if that does not right, its easy to move

Jotne

I do 100% agree to pe1chl If you have limited bandwidth, I would use some QoS. Example if you have 10MBps total and 4 users, you could give 2.5MBps to all 4. If some of the 4 does not use all their bandwidth, you can share it with the rest or the one who needs more. Edit, if this is for children, th...

Jotne

I need to block YouTube as much as possible to minimize access to the platform.

Why?

Jotne

What I do miss in this forum, is a hardware announcement section.
Since I do read the forum often, it would be nice to see that information here.

Like the new NetMetal AX
https://www.youtube.com/watch?v=UIAT38wOrZI

Jotne

SUP-151732

Jotne

When having IOT package on your router and export the config, you will see the MQTT password.
That should be only shown when doing an export show-sensitive

So MT please fix.

Jotne

@seriquiti
Make a new thread and post your config. There are many printing protocols so also post how to you connect to the printer.

Jotne

There is a change not included in change list. /system resource board-name for CHR now has extra information about the host/platform it is running on. For example, it might now be "CHR x86 Xen HVM domU" So, testing if board-name is "CHR" no longer works; you'd need to use someth...

Jotne

You are welcome.

If other has problem or suggestion, feel free to ask

Jotne

Thanks. Tested and fixed:

Changed from:
($board="CHR")

To:
($board~"CHR")

+ another minor fix.

Jotne

Thanks for info. Do you know from what version? 7.13.x still shows CHR

Jotne

It may help some, but where do you put a message like this: system,error,critical MikroTik: router was rebooted without proper shutdown Is this an error message with severity 3, or a critical message with severity 2 Only good way to fix this is for MT to use RFC 5424 and make all logs uniform with s...

Jotne

Does WinBox effectively issue CLI commands to get/set changes?

I would think so. If you look at command history, it looks the same if its run from Winbox or from terminal.

Jotne

Can it have some with that 6.49.13 is both long-term and stable?
viewtopic.php?t=204179

Jotne

This post is just to tell that 6.49.13 has change from Stable to Long Term?
If do tell this in the post.

6.49.13 was released 5 February her:
viewtopic.php?t=204179
i do not see any difference...

Why not make 6.49.14 Long Term. It even have more fixes than 6.49.13

Jotne

On my routers, 7.15beta9 are listed both under testing and development. So its not clear what is what

Jotne

If you read the title it says testing. Change channel stable = 7.14.2 testing = 7.15beta9 development = 7.15beta8 Not so sure about that. Read first post in this thread. There you will find " What's new in 7.15beta8 (2024-Mar-21 09:12): " posted in testing channel as well. So here I think...

Jotne

The logs look like this? script,info serial=75B70647AAAA MikroTik: .id=*5;activity=;blocked=false;bytes-down=0;bytes-up=0;disabled=false;dynamic=true;inactive=false;ip-address=192.168.10.241;limited=false;mac-address=D8:9E:CC:CC:CC:10;name=;rate-down=0;rate-up=0;script=kids;user= Most important are ...

Jotne

There seems to be a bug in history of commands that do break script and MT are not able to reproduce.
So can all test the command:

/system/history/print

and see if it gives error. If so maybe send a support file to MT.
More info here:
viewtopic.php?p=1066861#p1066861

Jotne

"MikroTik Device List" updated in git.
Changed to use serial instead of nat, to not give error while multiple routers are behind nat.

Working on handling the new wifi/wireless split.

Jotne

What is your routerOS version and script version? Post output of: /ip/kid-control/print It should show the day of week its enabled like this: Columns: NAME, SUN, MON, TUE, WED, THU, FRI, SAT # NAME SUN MON TUE WED THU FRI SAT 0 Monitor 0s-1d 0s-1d 0s-1d 0s-1d 0s-1d 0s-1d 0s-1d If that is ok, you hav...

Jotne

With my MikroTik for Splunk I sometimes need help and talk to users directly (screen sharing) to resolve a problem. You can to make other contact you by posting your private email, some that I do not like to do, since its can get spammed, or you can use a service like temp email, that gives you an t...

Jotne

Found a bug, there is no data in traffic

You have followed the 2e settings about kid control?

Jotne

The macro `index` are no longer used. It was just to make sure to get the data if both main index and mikrotik index was used. Try: index=mikrotik sourcetype=mikrotik module=script script=health host=10.0.0.1 name=temperature | where value>50 If that does not work. What is the output of: index=* so...

Jotne

[eddieb@hapax3-1] > sys history print error - contact MikroTik support and send a supout file (10) might be a bug ... even if I change something, there is no history visible and the same error This is clearly a bug. What OS and HW is this router. I do recommend to make a support case and also try a...

Jotne

The 16GB problem only aries when image becomes to large. Flash are mostly there to hold the boot image. So if MT are able to reduce the overall image so no router fails when begning upgrade, 16GB should be ok.

Jotne

Can you try to cut & past this to a terminal on a router giving problems. { :global cmd :local f 0 :foreach i in=[/system history find] do={ :if ($i = $cmd) do={ :set f 1 } :if ($f != 1) do={ :put "StartCMD" :put [/system history get $i] :put "EndCMD" } } :global cmd [:pick [...

Jotne

hmm

This has to do with the new wifi/wireless separation. We have to look inn to it how to handle both system.

Jotne

Since all routers needs to be configured to have serial number (one time job), I have updated the main start page "MikroTik device list" ot show all routers who is sending data to Splunk using only the old MikroTik tag so you can spot them and update the routers. Its not in the main zip fi...

Jotne

NB with 4.0 there are some importunt changes you need to follow: 1. All routers needs serial number in their logging tags (section 2a). If not you will not get any dashboard to work. To add serial, run the script in section 2a on all routers. (cut and past to a terminal windows. 2. If you for some r...

Jotne

What do you mean by blank pages? Image look ok.

Jotne

Do you get anything from it?
It should send syslog with errors etc + the script part.

Try to search
index=* host=<ip of device>

Send me a mail on this temp mail, and I can try to help: sowoyar992@glaslack.com

Jotne

V 4.0 finally released. Both files in first post and GIT are updated to latest version. # 4.0 (21.03.2024) # Changed to use serial in all dashboard # Changed many regex due to added serial # Changed to use MikroTik index directly without macro # Removed host_name and use identity in all dashboard #...

Jotne

I did have a similar problem on an RB750gr3. It stopped sending scripts logs. Looking at the scheduler it seems to not be working and have wrong dates. Disabled and Enabled the scheduler and scripts starts to run,

Jotne

Update to 7.15beta8 fails on wAP AC with error: upgrade failed, free 133kB disk space for a(null)upgrade

Even if MT has reduced size on latest version, your older version are to big to upgrade.
Netinstall may be the only way out.

Jotne

I am working on v4, should not be to long before I release it.

Jotne

Instead of using on-error, find out what version of RouterOS the router is running and the run the correct part with if:
Sample code to see main version:

{
:local ver [:tonum [:pick [/system resource get version] 0 1]] 
:put $ver
}

Jotne

Not sure why your RB750Gr3 does not show up with model etc. Try to do a search like this last 60 min index=* module=script script=sysinfo OR script=version NOT "log info" | stats values(script) by host It should list all devices sending sysinfo. It it does not show up, the script many not ...

Jotne

sent by email

Can you resend your contacts to wapek79368@mcuma.com

Jotne

Feature request: let us save graphs on USB/SD card finally!

RouterOS do support syslog so you can send any logs externally and graph everything. Look at my Mikrotik for Splunk.

Jotne

Here is the log message from an RB951Ui, using ADlist from example in the linked manual above:
.

ADList.png

What is wrong?

Also how to get the log from the use of the ADlist? (to send to external server)?

Jotne

Logging rules have always worked as "and" filters. You have unlimited options there. Example: dhcp,critical,error xxxxxxxxxxxxxxxx Is this a message with severity critical or severity error . (just one of many bad naming in the loging system) I will post about this until its fixed. It wil...

Jotne

Thanks for the new release.

But still no work on the logging mess:
viewtopic.php?t=124291

Jotne

Thank you...until now I did not need it but I have to see it now. It would be better to fix Netwatch/sending notification than add new interface for nothing... In large organisation with lots of routers (and switches) its normal to set IP on loop back interface so they are more easy to handle. A ro...

Jotne

Again a bad formatted script, with same error as the last one. You NEED to remove one } at the end of the script. Same script better formatted (without the } error). :local dateint do={ :local montharray ( "01","02","03","04","05","06",&quo...

Jotne

HOW to get it working back on remote location!???

Why did you upgrade a remote location, just some hour after a new release?
You should wait 14 days, read the forum, and then you maybe should upgrade.
Also if its a remote location, you should have an equal local device to test it on first.

Jotne

I'd like to know, is v7.14rc4 testing and v7.14 stable the same release, except maybe changing the version number and channel? Should I upgrade from v7.14rc4 to this?

Simple answer yes. RC are not ment for production, do upgrade.

Jotne

First of all, start by reformatting your ugly non readable one liner. You will never ever be able to see what is wrong in this mess. :local dateint do={ :local montharray ( "jan","feb","mar","apr","may","jun","jul","aug"...

Jotne

Is it already finished?

Finished??? 7.15 beta is not even released. It may be in alpha.

Jotne

In this thread i may mean something for that specific conversation. But its in anyway better to use new thread for every new version, as it was done before.

Jotne

Is this thread for 7.13.4 or 7.13.5. I see when you quote posts it uses the tilte for that post, not title for the thread, so posts above show 7.13.4 even if it should show 7.13.5.

So once again MikroTik. Use a new thread for every new Stable/Long Term a before.

Jotne

List of changes was short, a sign of not to many problems. But time will show.

Jotne

Please start a new thread for each new main version as it was before.

7.13.5 one more step against Long Term release :)

Jotne

Edit: Ok, my bad, the severity level does get set automatically when using the BSD Syslog option. Though, as mentioned, some other data is omitted instead. Example for logs not using BSD syslog (log part in red are tags I do add to the logs) dns serial=yyyyyyy MikroTik: done query: #56718 brb.duoli...

Jotne

Its clear that there are changes in routerOS that are not posted in the change releases.
After upgrading from 7.13.3 to 7.13.4 all script errors I did have, did go away.
viewtopic.php?p=1057168

Jotne

All script error did go a way after upgrading from 7.13.3 to 7.13.4

Jotne

Downgrade to an older smaller 6.x firmware. Then upgrade to 7.12.1

Jotne

Found out that I can't reboot my HEX without first deleting backup in storage because of lack of space. Space on 16mb devices is becoming a bit of a limiting factor. I have not that problem on my hEX. Running 17.3.3 and still have not removed the not needed wireless package, I have 1388KiB free out...

Jotne

6.46.8 are more then three years old. You should upgrade to a newer version. Why not go to 7.x for all devices. Sooner or later you will not get more devices that do supports 6.x software.
6.49.11 (just some month old) is long term release and should also be a better choice than 6.46.8.

Jotne

If you did read what I did write: Will not work since the output are sent to a the console and not to a variable.
The post was just to show that nothing was stored in the variable....

I suggested, it may work with SSH, but I have not tested it, so its just more of some to try.

Jotne

You may be able to do some with the SSH command, since it supports using output-to-file=, but not sure how.

Jotne

Will not work since the output are sent to a the console and not to a variable. Test this: (cut & past to a terminal window) { :local test [/system telnet 192.168.7.25 80] :put "Text should come after this" :put "===========================" :put $test } 1. Text are not writt...

Jotne

A lot of things are not in the docs. Since the 7.13 I need to uncheck the checkbox to verify the certificate, otherwise no DOH works. As far as I have learned, you should never uncechk the certificate. There are other problem if that does not work. I got here since I did get lots of DoH server conn...

Jotne

Strange thing that it only seems to be one router with problem.
RB951 with 17.3.3 works fine.

Jotne

This is just part of a bigger script, but for some reason it starts to log error to the log when this part is run. When cut/paste this to a terminal on a hex (750g3) router: { :local CmdHistory true :local train [:tonum [:pick [/system resource get version] 0 1]] :if ($train > 6 and $CmdHistory) do=...

Jotne

An interesting question here is how many use terminal vs gui to configure the router.
I do most config from gui when play around to test stuff.
For setting opp multiple routers, terminal is used with copy past, so do not really need all that help.

Jotne

Another problem with the F1 is that its mapped to system settings for the laptop.
So to get F1, you need to press FN F1 or go trough system settings and turn this off.
That may not be easy for may that have computer controlled by company and are blocking bios settings.

Jotne

Great news. v4.0 are on the way. Most importante change is that all loggs will be tracked by a unique serial number. This way even if you have many routers behind one single nat or routers with same name, it would be easy to separate all the devices. To prepare for the new version, you can just run ...

Jotne

@ MikroTik
Why do 6.49.13 get a new thread, but not 7.13.4?
I do not see why. It's much better with a new thread for every stable/long-term version.

Jotne

Please explain: Why are v7 release topics renamed and used throughout 7.13.x patch releases (7.13.1, 7.13.2, etc.) but on v6 there is still a separate topic for each release. 6.49.12 (and before all 6.49.x) got its own topic and now 6.49.13. Just want to understand. This I want to know as well. It ...

Jotne

Something new in 7.13+ makes the CAPsMANN part fail, even if its run in a do={} group.
To fix this I have updated scripts to 5.5 where CAPsMANN has been separated to an external script.

If you do not like to update the script, just remove the CAPsMANN part of the script and it will work.

Jotne

You can setup Splunk your self and have 100% control of the data. What is the different sending all logs to a sentral router??
To have secure transfer of external routers to a sentral Splunk/Router, use VPN.

Jotne

With Splunk you can get and graph all the logging you like. Free for up to 500MB logg/day.
See my post here:
viewtopic.php?t=179960

Jotne

!) rose-storage - moved SMB service in the RouterOS bundle;
!) smb - removed legacy SMB service (replaced with newer and faster ROSE SMB service);

These are mention on various version. Are there any change between beta8 or beta9?
Or this this is a list of change since 7.13???

Jotne

still kind of works on v7.13.3 I had to remove the capsman code. Getting error: expected end of command (line 290 column 50) Also had to set command history to false. That portion results in a hard interruption and crash. Since I do not have capsmann its som hard to test for me. Will try to look at...

Jotne

Hello, i just have a question. This link on the beginig of this thread, for download splunk app for mikrotik, is that the first one(oldest)? Where can be found updated one? Thanks? What have the link do you refer to. The app that I have created under section 1g- IF so there are a link to download i...

Jotne

20-30M a day is not much so a simple server should handle that. (also a windows server)

Jotne

I am still waiting for RouterOS logging in RFC 5424 standard. Requested this for more than 5 years???
viewtopic.php?t=124291

Jotne

Splunk runs much better/faster on Linux. Its created for Linux and ported to Windows. SSD disk are nearly a must when data is growing. You can in the script turn off modules that your do not need or that gives problem like to much DNS (but then you will not see DNS logs) How much do you log a day? Y...

Jotne

Its better to get the logs out of the router. For example, see my MikroTik for Splunk here:

viewtopic.php?t=179960

Jotne

Dont like the canvas at all. With ProSilver, its easy to see new post and where I have posted. (star)
.

Prosilver.png

Jotne

That's why I stick with version 7.12, as it's much more stable.

I have no problem with 7.13.1 on several routers with some complex configuration

I also believe that the 7.12 should become to long-term.

Believe is something you do in a church :)

Jotne

I may be in other situation as well so adding "hotspot" may not be needed.

Jotne

Can you double check the broadcast-address? It doesn't look like a broadcast address at all.

That is why I think you can just remove it and it will use bc address for local subnet, eks 178.118.85.255 (if its a c net)

Jotne

Just to confirm by looking at releases last 10 years, 6.49.12 is the first release that going back to stable when previous release in same train was long term.
.

LongTerm.png

Jotne

Not sure if you should put anything in the broad cast address. Here is my settings and works fine for all my devices. /system/ntp/server/print enabled: yes broadcast: yes multicast: yes manycast: yes broadcast-addresses: vrf: main use-local-clock: no local-clock-stratum: 5 auth-key: none

Jotne

MT should put out a hotfix for let's Encrypt

Why?
This is a beta and should not be used in production. Just wait until it are fixed.

Jotne

when a version goes to LT, I have not seen it goes backward to stable.
In my opinion with just small changes, 6.49.12 should be LT version.

Jotne

What????
6.49.10 and .11 Long Term
6.49.12 Stable
Are we going backward now?

Jotne

Use VPN. If VPN can not be used, following this would help some: 1. Use another port than default. 2. Use port knocking. This prevents someone from seeing open ports. 3. Use a long and good password. 4. Use access list to prevent any random internet from accessing your router. 5. Log everything. 6. ...

Jotne

In Winbox
Bridge -> Hosts

In Cli
/interface/bridge/host/print

You will see MAC, Interface, Bridge and VLAN for each device.
Then you can mix that together with the \ip\arp\print to get IP for the mac.

Jotne

Can someone suggest how to go about collecting non-DHCP-IP-assigned devices? (To be clear, I mean devices where the IP is set on the device; the DHCP server has no clue about them.) It can be done by comparing arp table with DHCP table. But you will not see IP that do not communicate with or trough...

Jotne

ticket SUP-136050 updated with autosupout generated on crash of 7.14alpha155

Is 7.14aplpha155 newer than 7.14beta? If not the test should be run on 7.14beta.

If 7.14aplpha155 is newer than 7.14beta, then I do not understand Mikrotiks version naming, since alpha should come before beta.

Jotne

Having 11 bugs corrected "(introduced in v7.13)" is a very important (and bad) signal. 7.13.1 does not have the worst list of number of fixes that was introduced in earlier version, but its in third place the last 10 years :) version count 7.11 14 6.48beta12 12 7.13.1 11 6.46.1 10 6.49bet...

Jotne

You are missing quotes.

Try this:

/ip/firewall/nat/remove [/ip/firewall/nat find to-ports="1001"]

Jotne

Update.

Runs fine on 7.13 as well.
I just wrap the whole script in { } and cut past it to a terminal windows. This way its easy to see if some breaks (red color).

PS this i a plain router installed with just default config. So it may be some thing in your config.

Jotne

Script do work fine on my 7.6 test router. Simple Queue was added for the new DHCP release, then removed if script was run after DHCP lease was removed. It may have change some thing in later version that do break it. Will do some more testing.

Jotne

system,error,critical router was rebooted without proper shutdown, probably kernel failure system,error,critical kernel failure in previous boot system,error,critical out of memory condition was detected Why MikroTik have you still not fixed the logging prefix mess? Are these message above an error...

Jotne

Just a tip. You can request a free 10GB/day license (Developer License) from Splunk. It will give you all function on Splunk with 10GB/day compare to 500MB/day and limited functions (no alerts, no cluster +++) . Only down side is that you need to request a new license every 6 month. https://dev.splu...

Jotne

, and I did that using some DHCP trickery and some shell scripts. They can't go online when they try and use private mode again. This will just be a temporary solution. What if they deny? I am not sure if you can turn this of pr network. So if you then take your device to a public net, you are at m...

Jotne

Script updated to 5.4 that only set the auto syslog server (dns) to not as default.
I do reformende that you do use it if your Syslog server do not have static IP

Jotne

Since I have several devices with dynamic public IP, I think it would be a better solution to use device name only or together with serial number, instead of IP that do changes to identify the device. This will require a mayor rewrite of lots of the code so it need to bee thought trough to not break...

Jotne

Just an FYI: This broke my setup (nothing would arrive at splunk..). The remote logging command was already using an IP as per your instructions under 2a, so this is generally not needed. (Had to indeed comment this out.) I think you did forget to set the DNS server. If not se, it will not resolve ...

Jotne

@anav Sorry for late reply. All works fine. I can now just add the same IP to the main router routing table and wireguard table and then are able to reach the remote site trough the wireguard tunnel :) Only miss a possibility to use an "address list". Than I can put the list in "Route...

Jotne

Oh common, new user interested in beta versions is either full of adrenaline or plain stupid. For all the rest, the release announcement for 7.13 has a few highlited warnings and the first item is talking about upgrade path with mandatory step of 7.12. I expect that such warning will be repeated in...

Jotne

Of course! That is not going away... always first upgrade to 7.12 or 7.12.1 That I do understand :) But for new user reading this thread and are not used to how stuff works, it should be written that to upgrade to 7.13 or later, you need first go to 7.12.x My point was that MT has forgot to add tha...

Jotne

Is there any upgrade restriction for 7.14 beta like 7.13? 1. When upgrading by using "check-for-updates", all versions earlier than 7.12 will display 7.12 as the latest available version. Upgrade from v7.12 to v7.13 or later versions must be done through 7.12 in order to convert wireless p...

Jotne

If someone does not make a support case it will not change.

Jotne

I tried 7.13 on RBM11g but the scripts don't work anymore!

What script?

PS Do add image to the post use Attachements when in full post mode. Link to other site may go away.

Jotne

Seems that most stuff works in 7.13, but are some skeptical if all the wireless scrips works, since there are more than one menu to go inn too.
And since I do not have all types of model, it would be nice with some feedback if there are things that do not work.

Jotne

I am asking the representatives of Mikrotik to define for me what they mean by the term "stable". I have a Mikrotik remotely halfway around the world. 1. What is stable as been answered many times here in the forum. 2. Upgrading a production system just as it has released is just asking f...

Jotne

@nicolap Have you read the beta and rc thread? If not read trough them.
viewtopic.php?t=201465
viewtopic.php?t=201989

Jotne

Pleas post new Announcements so that it show on all places, like under scripting. PS not the first time this has been done wrong.
-

post.png

Jotne

@andriys Why do you upgrade Android,IOS,Linux,Windows etc. New function, bug fixes and most importante security fixes. I guess you do not skip Windows updates for years? Nor is it recommended to do so. 5.6 was released in Mars 2020 and latest 5.6.19 was released in Juni 2020 , more than 3 years ago.

Jotne

I am struggling to get this to work. What I need is the get the client name from the DHCP table fro each devices in the Wifi registration table. Only first device gets listed, then scripts stops with "no such item" I now all (just two for test) has DHCP hostname and both should be listed. ...

Jotne

@BassTeQ
Please add image to the post, not a a link.
Use Full Editor & Preview -> Attachments (below the post window), add files.
You can use Place inline to fit it inn to the post.
.

image.png

Jotne

Totally get that, especially now there are a few different types out there haha Since there are new types, and script will fail if it does not exists, I need to test if the type of internet do exists. Can you post a output of /interface; :foreach i in=[find] do={:put [get $i type]} It would also be...

Jotne

The client name are just looked up using DNS lookup, so client on remote system will not show up. Not sure if there are any good solution for this. Maybe import all DNS from remote site.

Jotne

Yee, on step closer to a long term release :)

Jotne

My problem is that I do not have all MikroTik routers so can not test all hardware. Same its also hard to test all the overwhelming number of configuration option on the router.

Jotne

Winbox has nothing to do with memory leak on my test RB951 running 7.13Beta2 (since Winbox was not in use). Here you see memory usage last 2 days.
Stange it increments in the same amount, but not at a fixed time. Span on every sample is 5 min,
.

memory.png

Jotne

Script updated to 5.3 Only a small addition to enable use of DNS for syslog. Set your DNS name so it resolve it to an IP within the script. This helps out if router is on public IP and syslog server are on a dynamic IP # Auto update syslog server. 5.3 (if not needed, put a # in front of next two lin...

Jotne

I am having an issue in ROS 7.11

Script is tested and working with all version up to 7.13beta2

Try to split up the script in parts add the { } around the part and cut / past to terminal to see if some break.
You need to include the corresponding enable line like :local SystemResource true

Jotne

The new wifi package is now part of the routeros.npk bundle, beginning a new and exciting era for wifi features. I do think that the wording here are messing with people. There are no "wifi package" as in a separated package. The new "wifi" are part og the standard routeros pack...

Jotne

The way I understand it:

That makes some sense.

Jotne

This was not easy to understand. On a RB951 I did upgrade from 7.11 to 7.12 to 7.13beta1 running a simple configuration with wifi and nat. After upgrade to 7.13beta1, I got a new package named wireless. I do also see all my wifi configuration are under wireless tab and not under wifi. If wireless pa...

Jotne

Now that MT are working on the console commands, its also time to fix the logging (syslog) to become RFC compatible.
viewtopic.php?t=124291
https://www.rfc-editor.org/rfc/rfc5424

Jotne

This is actually already fixed in 7.13 which is coming soon. Deprecate message will not be sent if actual prefix is re-used.
7.13? not 7.12.1 ???

My thought as well. I am looking forward for a stable long term release 7.12.8

Jotne

Are you suggesting I make a global variable? This is probably one of the options, to make some kind of flag (variable). But I still wanted to understand JOBS.

Yes, it can be used to control the running state of the script.

Jotne

You can make a loop script that test i a variable is true.
Then you can just change the variable from 1 to 0 and the script stops.

Jotne

Email sent

Jotne

Config are way to over complicated to understand with lots of scripts and other stuff. I will try to read the short post first

Jotne

I do try to route some websites trough a VPN but can not get it to work. Setup: MyPC - MainMikrotikRouter(A) - ISP(A) ---- Internet ---- ISP(B) - RemoteRouter(C) - RemoteMikrotikRouter(B) - OtherPC Router A and B are setup with default NAT (and rules) There is a Wireguard tunnel between Router A and...

Jotne

Mikrotik will be used to get internet into an old mine (Cerro Gordo, USA) at 275 meter depth
Look at this video:
https://www.youtube.com/watch?v=pZYVgSlqzMY
At 9.33 you see a Hex and som other Mikrotik product.

Jotne

I see a smal bug that is not easy to fix. If interface counters has been reset or router rebooted within the time frame selected the counter will be wrong. This since it the counter increments all the time, except for reset and the the calculation between start and stop of a time frame will not show...

Jotne

Added graph to show tx and rx pie chart so you can see total traffic (over selected periode) transfered pr interface.

Updated files in the gir repository.
.

traffic.png

Jotne

Thanks for the feedback. I will look at a way to calculate/show total traffic pr interface over a given periode. Regarding the 500MB/day, there is a way around. You can request and developer license. https://dev.splunk.com/enterprise/dev_license/ + It give you 10GB/day It gives you all Splunk functi...

Jotne

It looks like many need to read the thread before post.
1. Back to Home are moved to v7.13 but can be found in 7.12beta releases.
2. QR code will be fixed

Jotne

Just download 7.12beta to an Arm router.

Jotne

What would be the difference between itens beginning with "!)" and beginning "*)" on the release notes?

Mayor/Importante changes vs normal/minor changes

Jotne

This is a test
Courier-This is a test
-This is a test
Veranda-This is a test
Tahoma-This is a test
Georgia-This is a test

Thanks to Andriys, I learned that I can use different fonts (BBCode) in post. Not all looks good.

Jotne

Netinstall

Jotne

version 7 was an anti-climax for Mikrotik, not as expected. Stupid comment without telling why. I do find this thread about your problem, but do not see any support number on the problem. https://forum.mikrotik.com/viewtopic.php?t=194895 Forum only will not solve it. For me and many other v7 works ...

Search found 3739 matches