Graphite graphs do not fully render

franpola · November 25, 2019, 11:14am

Hi there,

I have the graphite module enabled but the graphs are not showing correctly. This is how it looks like
imagen
imagen

The actual icinga web does not have any certificate, should I install one on the virtual host? could you point me to the correct file ??
root@srvfpamonp02:/etc/apache2# icinga2 --version
icinga2 - The Icinga 2 network monitoring daemon (version: r2.11.2-1)

Copyright (c) 2012-2019 Icinga GmbH (https://icinga.com/)
License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl2.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

System information:
  Platform: Ubuntu
  Platform version: 16.04.6 LTS (Xenial Xerus)
  Kernel: Linux
  Kernel version: 4.4.0-159-generic
  Architecture: x86_64

Build information:
  Compiler: GNU 5.4.0
  Build host: runner-LTrJQZ9N-project-298-concurrent-0

Application information:

General paths:
  Config directory: /etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /run/icinga2

Old paths (deprecated):
  Installation root: /usr
  Sysconf directory: /etc
  Run directory (base): /run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /run/icinga2/icinga2.pid

Disabled features: debuglog elasticsearch gelf icingastatus influxdb opentsdb statusdata syslog
Enabled features: api checker command compatlog graphite ido-mysql livestatus mainlog notification perfdata

root@srvfpamonp02:/etc/apache2# icinga2 daemon -C
[2019-11-25 12:05:26 +0100] information/cli: Icinga application loader (version: r2.11.2-1)
[2019-11-25 12:05:26 +0100] information/cli: Loading configuration file(s).
[2019-11-25 12:05:26 +0100] information/ConfigItem: Committing config item(s).
[2019-11-25 12:05:26 +0100] information/ApiListener: My API identity: srvfpamonp02
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 LivestatusListener.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 FileLogger.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 3 NotificationCommands.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 NotificationComponent.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 12 Notifications.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 IcingaApplication.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 18 HostGroups.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 65 Hosts.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 4 EventCommands.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 GraphiteWriter.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 PerfdataWriter.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 CheckerComponent.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 3 Zones.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 Endpoint.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 ExternalCommandListener.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 ApiUser.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 2 UserGroups.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 CompatLogger.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 ApiListener.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 1 IdoMysqlConnection.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 257 CheckCommands.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 3 TimePeriods.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 2 Users.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 75 Services.
[2019-11-25 12:05:26 +0100] information/ConfigItem: Instantiated 7 ServiceGroups.
[2019-11-25 12:05:26 +0100] information/ScriptGlobal: Dumping variables to file '/var/cache/icinga2/icinga2.vars'
[2019-11-25 12:05:26 +0100] information/cli: Finished validating the configuration file(s).

dnsmichi · November 25, 2019, 12:25pm

Hi,

which Graphite module and version are you using?

Cheers,
Michael

franpola · November 25, 2019, 12:31pm

dnsmichi · November 25, 2019, 12:42pm

So you are using the old community version, not Icinga’s official module. Try changing the installation.

franpola · November 25, 2019, 12:43pm

should i uninstall something?

dnsmichi · November 25, 2019, 12:50pm

Disable the graphite module and purge away its directory. Then install the new graphite module.

franpola · November 25, 2019, 12:59pm

I have uninstalled both graphite-carbon adn graphite-web but i dont see the place to download the new module…

dnsmichi · November 25, 2019, 1:03pm

I only was talking about the graphite Icinga Web module, not Graphite itself.

franpola · November 25, 2019, 1:20pm

ok, now is graphite installed again

franpola · November 25, 2019, 3:09pm

I am stuck with this… i dont know how to fix it

dnsmichi · November 25, 2019, 3:33pm

A little more details would help understand your problem. I currently don’t know where you’re at.

franpola · November 25, 2019, 3:39pm

I think it has to do with the certificate, because i have seen other similar problems because of this. Appareantly there is an ssl mismatch between the actual web server and the graphite one (I think,),or where the website is pulling the images from. So it keeps saying the websites certificate is no good. I would like to try to update icingaweb certificate and see if that helps…

Like I would like to fix this…

root@srvfpamonp02:/etc/ssl/certs# curl --verbose https://192.168.18.80/icingaweb2
*   Trying 192.168.18.80...
* Connected to 192.168.18.80 (192.168.18.80) port 443 (#0)
* found 148 certificates in /etc/ssl/certs/ca-certificates.crt
* found 599 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256
* server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
* Closing connection 0
curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
More details here: http://curl.haxx.se/docs/sslcerts.html

can you suggest an approach on how to update the certs…
thanks

dnsmichi · November 25, 2019, 6:26pm

We need to learn more about your setup, we cannot see your screen.

So that sentence implies that Graphite is running on a different web host. Which TLS certificate does it offer?

openssl s_client -connect graphitehost:443

And then, the web server where Icinga Web 2 is running on, too.

openssl s_client -connect icingawebhost:443

Both should present certificates signed by a trusted CA.

And of course, the TLS problem likely sources from a different thing. So we’d also need to know how you now have configured the official Graphite module in its config form.

franpola · November 26, 2019, 9:36am

root@srvfpamonp02:~# openssl s_client -connect graphitehost:443
gethostbyname failure
connect:errno=0
root@srvfpamonp02:~# openssl s_client -connect icingawebhost:443
gethostbyname failure
connect:errno=0