Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help getting unbound grafana dashboard working

    Bounties
    3
    16
    3.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bigjohns97
      last edited by

      I posted for help in the general forum but I noticed this section and thought it would be interesting to see if anyone was up for helping me get this dashboard working for unbound and grafana.

      https://forum.netgate.com/topic/152023/unbound-grafana-dashboard

      Quote from thread

      "https://grafana.com/grafana/dashboards/6549

      Previous unifi gateway / pihole user who has recently switched over to pfSense and really miss the stats dashboard but love the added protection from pfBlockerNG and wondering if anyone has successfully been able to setup a dashboard like above using pfSense.

      I have Grafana and ElasticSearch running but having some issues with some of the unbound specific settings and scripts mentioned in the implementation link above and was wondering if anyone has ever tried implementing this and if they had some guidance on what is specifically different between pfSense and the FreeBSD information posted above.

      Really looking forward to the stats on domains hit, most used clients, as well as the cache hit stats in a dashboard type view."

      1 Reply Last reply Reply Quote 0
      • kiokomanK
        kiokoman LAYER 8
        last edited by kiokoman

        you are lucky, i just started playing with this just yesterday
        i don't have ElasticSearch, i tested this using telegraf on pfsense and grafana with InfluxDB in a raspberry

        in telegraf on pfsense
        Additional configuration for Telegraf:

        [[inputs.unbound]]
        binary = "/usr/local/sbin/unbound-control"
        thread_as_tag = false

        and i have the data on my grafana, the field list is long

        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
        Please do not use chat/PM to ask for help
        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

        B 1 Reply Last reply Reply Quote 1
        • B
          bigjohns97 @kiokoman
          last edited by

          @kiokoman said in Help getting unbound grafana dashboard working:

          you are lucky, i just started playing with this just yesterday
          i don't have ElasticSearch, i tested this using telegraf on pfsense and grafana with InfluxDB in a raspberry

          in telegraf on pfsense
          Additional configuration for Telegraf:

          [[inputs.unbound]]
          server = "127.0.0.1:53"
          binary = "/usr/local/sbin/unbound-control -c /var/unbound/unbound.conf"
          thread_as_tag = false

          Immagine.jpg

          and i have the data on my grafana, the field list is long

          Immagine2.jpg

          Looks good @kiokoman and would definitely be simpler than installing everything that this guide uses. I wonder if all of the same information will be there for the graphs that he uses though.

          Did you see the guide from the grafana dashboard page?

          https://www.tumfatig.net/20180618/monitoring-unbound8-using-net-snmp-telegraf-influxdb-and-elasticsearch/

          some really interesting dashboards and information that are usually default on pihole

          1 Reply Last reply Reply Quote 0
          • B
            bigjohns97
            last edited by

            BTW i tried the additional config that you have and still don't see the bind_counter option when building up my query, not sure why?

            1 Reply Last reply Reply Quote 0
            • kiokomanK
              kiokoman LAYER 8
              last edited by kiokoman

              🤷 is unbound listening on port 53?

              ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
              Please do not use chat/PM to ask for help
              we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
              Don't forget to Upvote with the 👍 button for any post you find to be helpful.

              B 1 Reply Last reply Reply Quote 1
              • B
                bigjohns97 @kiokoman
                last edited by bigjohns97

                @kiokoman It is, one thing I did notice is when i try and run the "/usr/local/sbin/unbound-control -c /var/unbound/unbound.conf" from command line it shows me the help options as if I am not doing something right. I have verified that the unbound.conf is there in that location and since it's showing me the command line help I am guessing the control script is there.

                I did notice that doing a netstat -an that it shows *:53 maybe I need to configure unbound to just the loopback?

                1 Reply Last reply Reply Quote 0
                • kiokomanK
                  kiokoman LAYER 8
                  last edited by kiokoman

                  pfsense version?
                  i'm using 2.5.0 maybe it's different for older version, let me check

                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                  Please do not use chat/PM to ask for help
                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                  B 1 Reply Last reply Reply Quote 1
                  • B
                    bigjohns97 @kiokoman
                    last edited by

                    @kiokoman 2.4.5

                    1 Reply Last reply Reply Quote 0
                    • kiokomanK
                      kiokoman LAYER 8
                      last edited by kiokoman

                      @bigjohns97 said in Help getting unbound grafana dashboard working:

                      /usr/local/sbin/unbound-control -c /var/unbound/unbound.conf

                      the command line work on 2.4.5 also,

                      the complete command is

                      /usr/local/sbin/unbound-control -c /var/unbound/unbound.conf stats
                      

                      if you want to try, that "stat" should be added by the telegraf plugin
                      now i check if the plugin is the same..
                      telegraf is the same version telegraf-1.13.4_1
                      it should work

                      ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                      Please do not use chat/PM to ask for help
                      we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                      Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                      B 1 Reply Last reply Reply Quote 1
                      • B
                        bigjohns97 @kiokoman
                        last edited by

                        @kiokoman adding stats to the end did get me the output I was looking for via command line. I did noticed that I haven't updated any of my packages since upgrading to 2.4.5 so I did upgrade and now have the same version as you.

                        Did you leave unbound binded to all interfaces or did you select specific interfaces?

                        1 Reply Last reply Reply Quote 0
                        • kiokomanK
                          kiokoman LAYER 8
                          last edited by kiokoman

                          binded to all,
                          still nothing ater update?
                          i have this on my 2.4.5

                          2020-04-03T20:00:40Z E! [inputs.unbound] Error in plugin: error gathering metrics: error running unbound-control: fork/exec /usr/local/sbin/unbound-control -c /var/unbound/unbound.conf: no such file or directory (/usr/local/sbin/unbound-control -c /var/unbound/unbound.conf [-s 127.0.0.1@8853 stats_noreset])
                          

                          this is not happening on 2.5.0

                          investigation needed...

                          ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                          Please do not use chat/PM to ask for help
                          we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                          Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                          B 1 Reply Last reply Reply Quote 1
                          • B
                            bigjohns97 @kiokoman
                            last edited by

                            @kiokoman still nothing on the grafana side, I tried adding stats to the end of the command, I tried enabling the ping option like you have in your screenshot, nothing gave me the table in grafana, I have even been restarting grafana every time to make sure that wasn't it. I do know that it's resetting the telegraph instance because i can see the tcp session starting over as I am monitoring the session via pftop in the GUI.

                            I know it's working because my system stats dashboard is still working just fine.

                            1 Reply Last reply Reply Quote 0
                            • kiokomanK
                              kiokoman LAYER 8
                              last edited by kiokoman

                              uhm i have the same error on my 2.5.0 now.. but idk .. anyway
                              i was reading this
                              https://github.com/influxdata/telegraf/tree/master/plugins/inputs/unbound

                              ## The default location of the unbound config file can be overridden with:
                              # config_file = "/etc/unbound/unbound.conf"
                              

                              but this does not work because config_file is not defined inside pfsense plugin

                              binary = "/usr/local/sbin/unbound-control"
                              

                              this work but if you add -c /var/unbound/unbound.conf it's unable to execute the command

                              the only workaround i found is to create a symlink inside the unbound-control default directory...

                              -c file       config file, default is /usr/local/etc/unbound/unbound.conf
                              

                              the workaround is as follow:

                              rm /usr/local/etc/unbound/unbound.conf
                              ln -s /var/unbound/unbound.conf /usr/local/etc/unbound/unbound.conf
                              

                              inside
                              telegraf on pfsense
                              Additional configuration for Telegraf:

                              [[inputs.unbound]]
                              binary = "/usr/local/sbin/unbound-control"
                              thread_as_tag = false
                              

                              to test the plugin:

                              /usr/local/bin/telegraf -config=/usr/local/etc/telegraf.conf --test --input-filter unbound
                              2020-04-03T20:57:16Z I! Starting Telegraf 1.13.4
                              > unbound,host=pfSense.kiokoman.home infra_cache_count=0,key_cache_count=0,mem_cache_message=66072,mem_cache_rrset=66072,mem_mod_iterator=1bla bla bla
                              

                              ah i found out what i was doing wrong, my bad sorry, as i said i started to use this only yesterday... the old pictures were about bind9 not unbound 😂 😂

                              Immagine.jpg

                              ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                              Please do not use chat/PM to ask for help
                              we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                              Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                              B 1 Reply Last reply Reply Quote 1
                              • B
                                bigjohns97 @kiokoman
                                last edited by

                                @kiokoman said in Help getting unbound grafana dashboard working:

                                uhm i have the same error on my 2.5.0 now.. but idk .. anyway
                                i was reading this
                                https://github.com/influxdata/telegraf/tree/master/plugins/inputs/unbound

                                ## The default location of the unbound config file can be overridden with:
                                # config_file = "/etc/unbound/unbound.conf"
                                

                                but this does not work because config_file is not defined inside pfsense plugin

                                binary = "/usr/local/sbin/unbound-control"
                                

                                this work but if you add -c /var/unbound/unbound.conf it's unable to execute the command

                                the only workaround i found is to create a symlink inside the unbound-control default directory...

                                -c file       config file, default is /usr/local/etc/unbound/unbound.conf
                                

                                the workaround is as follow:

                                rm /usr/local/etc/unbound/unbound.conf
                                ln -s /var/unbound/unbound.conf /usr/local/etc/unbound/unbound.conf
                                

                                inside
                                telegraf on pfsense
                                Additional configuration for Telegraf:

                                [[inputs.unbound]]
                                binary = "/usr/local/sbin/unbound-control"
                                thread_as_tag = false
                                

                                to test the plugin:

                                /usr/local/bin/telegraf -config=/usr/local/etc/telegraf.conf --test --input-filter unbound
                                2020-04-03T20:57:16Z I! Starting Telegraf 1.13.4
                                > unbound,host=pfSense.kiokoman.home infra_cache_count=0,key_cache_count=0,mem_cache_message=66072,mem_cache_rrset=66072,mem_mod_iterator=1bla bla bla
                                

                                ah i found out what i was doing wrong, my bad sorry, as i said i started to use this only yesterday... the old pictures were about bind9 not unbound 😂 😂

                                Immagine.jpg

                                I was able to get it working after doing the symlink what a crazy solution.

                                I am still interested in using the original dashboard I posted about along with a security based one that I found on reddit.

                                1 Reply Last reply Reply Quote 0
                                • kiokomanK
                                  kiokoman LAYER 8
                                  last edited by

                                  I do not know what is more crazy honestly, in the link you posted requires you to tamper with different system configurations that reset when you update pfsense,
                                  this has been added to telegraf 4 month ago so it will eventually work on pfsense when they upgrade the package

                                  ## The default location of the unbound config file can be overridden with:
                                  # config_file = "/etc/unbound/unbound.conf"
                                  

                                  and when this happens there will be no need for the symlink, keeping the system clean

                                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                  Please do not use chat/PM to ask for help
                                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                  1 Reply Last reply Reply Quote 0
                                  • A
                                    andrema2
                                    last edited by

                                    @kiokoman said in Help getting unbound grafana dashboard working:

                                    rm /usr/local/etc/unbound/unbound.conf

                                    Hi,

                                    I tried what you said, but dispite the conf file with

                                    Unbound Statistics
                                    statistics-interval: 0
                                    extended-statistics: yes
                                    statistics-cumulative: no

                                    the stats is cumulative, which is no good for influx. How did you manage to make it not cumulative ?

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.