October 2005 - Xymon - Xymon mailman web

[hobbit] Hobbit, Net-snmp snmptrap,and HPOV
by nfigaro＠effigie.fr 28 Jul '06

28 Jul '06

There is an option to snmptrap (from net snmp) to send full OIDs, otherwise they are cut. Instead of "snmptrap -v 1", the options should be : "snmptrap -v 1 -Of" Otherwise only the end of the OID is sent. Nicolas Figaro > -----Message d'origine----- > De : David Gore [mailto:David.Gore at mci.com] > Envoyé : lundi 19 septembre 2005 17:11 > À : hobbit at hswn.dk > Objet : Re: [hobbit] Hobbit, Net-snmp snmptrap,and HPOV > > > David Gore wrote: > > Coupe, Mark (ITD) wrote: > > > >> All, > >> > >> I'm trying to push alarms from Hobbit to HPOV. We have a custom > >> script that is invoking Netsnmp's snmptrap. The snmp traps are > >> reaching the HP Node Manager Event Browser correctly. > However, the OV > >> operations trap condition is not recognizing the trap. > The trap is > >> being displayed as "unmatched" in the Message Browser even though > >> there is a condition set up for that specific trap. > >> > >> When we look at the unmatched trap, it appears that the OID is not > >> being recognized and an '0' is inserted, for example instead of > >> .1.3.6.1.4.1.7058.0.XX, we are seeing .0.0.XX. > >> > >> Any guidance would be greatly appreaciated. > >> > >> Thanks, > >> > >> -Mark Coupe > > > > > > I, and perhaps others would be interested in what precisely you are > > doing? Are you pushing all hobbit alarms from the hobbit server to > > HPOV? > > > > Sorry, I am HPOV ignorant, but we are interested in > forwarding all the > > hobbit alarms/alerts as SNMP traps to one of Concord's > products. I am > > not to familiar with Concord's product either. I just know > the powers > > that be would like to have snmp traps from all our monitored hosts. > > > > In otherwords, I am interested in any system or methodology that > > someone > > has setup to forward alarms from the hobbit server to an > SNMP server. > > Any setups out there that someone is willing to share the details? > > > > David > > > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > > Here is Mark's script posted with permission: > > SCRIPT > > #!/bin/bash > > #SVCCODES="disk:100,cpu:200,procs:300,svcs:350,msgs:400,conn:5 > 00,http:60 > 0,ftp:721,ssh:722,ssh1:722,ssh2:722,telnet:723,smtp:725,fping: > 727,mq:729 > ,dns:800,pop2:809,pop-2:809,pop:810,pop3:810,pop-3:810,nntp:81 9,imap:843 > ,imap2:843,imap3:843,imap4:843,mrtg:850,swap:860,memory:870,sy > s:880,err: > 890,test:901" > > #Variables > #$OID - OID to be used without trailing value (.1.3.6.1.4.1.7058)(BB > default) > #$OIDTAIL - ending value of OID particluar to alarm type; > determined by "case" statement #$MACHIP - IP address of > device generating alarm; determined by hobbit #$BBHOSTNAME - > hostname of device generating alarm; determined by the hobbit > bb-hosts file #$BBSVCNUM - service code corresponding to the > service being monitored; determined by hobbit configuration > #$BBCOLORLEVEL - alarm level; determined by hobbit > #$RECOVERED - '0' denotes alarm; '1' denotes recovery #$HPOV > - the IP address of the destination HPOV server #TMPDIR - > directory for location of temporary file necessary for sed of $MACHIP > > ###Start script ### > ### > CHRONO=`date` > OID=.1.3.6.1.4.1.7058 > #Put your own OV server IP address in the next line. > HPOV=xxx.xxx.xxx.xxx TMPDIR=/home/hobbit/server/ext > > > case $BBSVCNUM in > 100) #Disk > OIDTAIL=10 > ;; > 200) #CPU > OIDTAIL=20 > ;; > 300) #Procs > OIDTAIL=30 > ;; > 350) #Svcs > OIDTAIL=40 > ;; > 400) #Msgs > OIDTAIL=50 > ;; > 500) #Conn > OIDTAIL=60 > ;; > 600) #Http > OIDTAIL=70 > ;; > #OIDTAIL=80 (not assigned) > 721) #FTP > OIDTAIL=90 > ;; > 722) #SSH > OIDTAIL=100 > ;; > 723) #Telnet > OIDTAIL=110 > ;; > 725) #SMTP > OIDTAIL=120 > ;; > 727) #Fping > OIDTAIL=130 > ;; > 729) #MQ > OIDTAIL=140 > ;; > 800) #DNS > OIDTAIL=150 > ;; > 809) #POP2 > OIDTAIL=160 > ;; > 810) #POP > OIDTAIL=170 > ;; > 819) #NNTP > OIDTAIL=180 > ;; > 843) #IMAP > OIDTAIL=190 > ;; > 850) #MRTG > OIDTAIL=200 > ;; > 860) #Swap > OIDTAIL=210 > ;; > 870) #Memory > OIDTAIL=220 > ;; > 880) #Sys > OIDTAIL=230 > ;; > 890) #ERR > OIDTAIL=240 > ;; > 901) #Test > OIDTAIL=250 > ;; > esac > > if [[ "$RECOVERED" = "0" ]]; then > if [[ "$BBCOLORLEVEL" = "purple" ]]; then > OIDTAIL=$(($OIDTAIL + 1)) > elif [[ "$BBCOLORLEVEL" = "yellow" ]]; then > OIDTAIL=$(($OIDTAIL + 2)) > elif [[ "$BBCOLORLEVEL" = "red" ]]; then > OIDTAIL=$(($OIDTAIL + 3)) > fi > elif [[ "$RECOVERED" = "1" ]]; then > BBCOLORLEVEL=green > fi > > #Following line: reads Hobbit IP into temporary file > echo $MACHIP > $TMPDIR/tmpfile.txt > > #Following lines: puts Hobbit 12 digit IP format in dotted > decimal and removes any leading zeroes. MACHIP=`sed > 's/$...$$...$$...$$...$/\1.\2.\3.\4/' > $TMPDIR/tmpfile.txt` > echo $MACHIP > $TMPDIR/tmpfile.txt > MACHIP=`sed -e 's/^00//' -e 's/^0//' -e 's/\.000/./' -e > 's/\.00/./' -e 's/\.0/./' -e 's/\.000/./' -e 's/\.00/./' -e > 's/\.0/./' -e 's/\.000/./' -e 's/\.00/./' -e 's/\.0/./' -e > 's/\.\.\./.0.0./' -e 's/\.\./.0./' -e 's/\.$/.0/' $TMPDIR/tmpfile.txt` > > #Following line: removes the temporary file > rm -f $TMPDIR/tmpfile.txt > > #Following line: forwards the error message to HPOV as an > SNMP message `snmptrap -v 1 -c mitcovo $HPOV "$OID" "$MACHIP" > 6 $OIDTAIL ""` > > echo "DATE: $CHRONO" >> /home/hobbit/server/ext/hpov-push.log > echo "snmptrap -v 1 -c public $HPOV "$OID" "$MACHIP" 6 > $OIDTAIL "" " >> /home/hobbit/server/ext/hpov-push.log > > > END SCRIPT > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

5 5

Disk RRD problem with hobbit-client and OSF1 (Tru64)
by astavitsky＠yahoo.com 04 May '06

04 May '06

Hi! I'm using hobbit 4.1.2 server and clients. Some of my OSF1 (Tru64 4.0&5.1) clients' filesystems are being captured in RRD by mountpoint name and others by the device/domain. These are RRD files for a particular host:: ls -l HOSTNAME/disk* -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,arc.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,nfs,BOSS.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,nfs.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-26 20:13 HOSTNAME/disk,report.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,root_domain#root.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,rpt,MakPrd,progesaPrd,Act,CWNY.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,rpt,MakPrd,progesaPrd,Act,LongIsland.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,rpt,MakPrd,progesaPrd,Act,NewJersey.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,rpt,MakPrd,progesaPrd,Act.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,rpt.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,tmp_domain#tmp.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,usr_domain#usr.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,var,ase,mnt,asearc,arc.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,var,ase,mnt,asenfs,nfs.rrd -rw-r--r-- 1 hobbit hobbit 38532 2005-10-30 13:04 HOSTNAME/disk,var_domain#var.rrd And here is the hobbitlog for this: HOSTNAME|disk|green||1130372298|1130621525|1130623325|0|0|172.16.52.21|-1|||Y green Sat Oct 29 17:31:58 EDT 2005 - Filesystems OK Filesystem 512-blocks Used Available Capacity Mounted on root_domain#root 409600 252902 128032 67% / usr_domain#usr 2516576 1825636 638672 75% /usr var_domain#var 9437184 4114720 5284080 44% /var tmp_domain#tmp 409600 2682 385376 1% /tmp /nfs at asenfs 88821680 37803820 50792192 43% /nfs /arc at asearc 106643104 69304154 37257648 66% /arc nfs_dmn#nfs 88821680 37803820 50792192 43% /var/ase/mnt/asenfs/nfs arc_dmn#arc 106643104 69304154 37257648 66% /var/ase/mnt/asearc/arc /NFS at CEBOSS 377479160 298515328 78963832 80% /nfs/BOSS rpt_dmn#progesa 106643104 61776456 44815856 58% /rpt rptact_dmn#act 106643104 75460796 31101280 71% /rpt/MakPrd/progesaPrd/Act rptcwny_dmn#cwny 106643104 28278562 78320496 27% /rpt/MakPrd/progesaPrd/Act/CWNY rptli_dmn#li 71095392 19095496 51949920 27% /rpt/MakPrd/progesaPrd/Act/LongIsland rptnj_dmn#nj 71095392 3627144 67417760 6% /rpt/MakPrd/progesaPrd/Act/NewJersey I read earlier messages about hobbit_larrd misdetecting NT/UNIX disk output, but in this case it uses different columns for different filesystems on the SAME host. I'm at a loss why this is happening and how to fix it. Thanks,

4 4

bb-disk_by_fs.sh
by iqbala-hobbit＠qwestip.net 29 Jan '06

29 Jan '06

Hi All Has anyone used bb-disk_by_fs.sh with BB client? I am trying to find out how it will work with HOBBIT? There are few things I am concern about. 1. How will I manage alerts per partition which this script offers? 2. How will the graph work? Thanks for any feedbacks. I guess I could always try it myself on a test system if there is no feedback already. -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change." - Charles Darwin

2 2

Inexplicable purple on running services
by rmunsch＠solutionsforprogress.com 31 Oct '05

31 Oct '05

Consider the below. Approx. 25 minutes ago, across all monitored systems, all net monitored services - ssh, ldaps and dns - went to purple. They are still up, running, and just fine in every respect. The status message is even the same as when it was showing green. But now every ssh, ldaps and dns light is purple. The last thing i was messing with when this happened was the alerts config file; i hadn't touched bb-hosts. cpu, disk, memory etc. all remain green. I cannot find anything in the logs that indicated what changed 25 minutes ago. I have restarted the hobbitd. Something like this seemed to happen yesterday; after a number of monitored services were green and unchanging for a while, they went purple, yet report as "OK" across the board. While tweaking other settings, everything went back to normal. I don't understand what could call this, or why it's displaying the purple light when it "knows" it's fine. Any ideas? Mon Oct 31 16:30:06 2005 ssh ok Service ssh on <machinename> is OK (up) SSH-<ver>-OpenSSH_<ver> Seconds: 0.00 Status unchanged in 0 hours, 25 minutes Status message received from hobbitd -- Rob Munsch Systems Analyst, Solutions for Progress http://www.solutionsforprogress.com

1 0

[hobbit] NETSTAT and Apache?
by Jason.Chambers＠geosoft.com 31 Oct '05

31 Oct '05

I'm running the hobbit client on the box that runs the server, but I do not see the netstat tab. Jason Chambers IT Helpdesk Support Geosoft Inc. 85 Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: 416-369-0111 x344 Fax: 416-369-9599 www.geosoft.com -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Monday, October 31, 2005 12:49 PM To: hobbit at hswn.dk Subject: Re: [hobbit] NETSTAT and Apache? On Mon, Oct 31, 2005 at 09:38:45AM -0500, Jason Chambers wrote: > Henrik, on your little example server, I can see you have netstat info > your linux server showing up on Hobbit. How did you do that? Is there > anyways I can get the windows version to show bandwidth instead of > packets? A "netstat" graph should show up automatically when you have the Hobbit client running on a box. Or the BB client with the bf-netstat script from LARRD. Or a BB Windows client with the bb_memory add-on. The Windows bb_memory add-on just grabs the output from "netstat -s". Windows doesn't count bytes, only packets, so that's all you can get. > Also, I was wondering why there isn't a tab for apache when you enable > it on bb-hosts, but the graph only shows up on the trends page? The apache data are sent in a "data" message, which doesn't trigger a status column. Because I think there's really no idea in making this a red/green status. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] NK Page
by CallahanT＠tessco.com 31 Oct '05

31 Oct '05

I believe by adding "NK=bb2" or similar to the end of the line in bb-hosts will display that test for that machine in NK if red or yellow. Tom Callahan -----Original Message----- From: Antonio Marques To: hobbit at hswn.dk Sent: 10/25/2005 1:12 PM Subject: [hobbit] NK Page Hi, how can I add events (like bb2 page) to NK page ? Thanks. Antonio Marques To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

4 5

delay creation of web pages
by bb4＠richter-it.net 31 Oct '05

31 Oct '05

Hi there, is it possible to delay the creation of the web pages in hobbit for a few minutes? The problem is that our customer is looking at the hobbit screen too and our suits are not very amused that he calls us instead of us calling him in case of an error. So management wants to delay the creation of the status pages in hobbit for a few minutes on the machine where the customer is looking at and on our internal machine everything should go the "old-fashioned" way. TIA Torsten

3 2

NETSTAT and Apache?
by Jason.Chambers＠geosoft.com 31 Oct '05

31 Oct '05

Henrik, on your little example server, I can see you have netstat info your linux server showing up on Hobbit. How did you do that? Is there anyways I can get the windows version to show bandwidth instead of packets? Also, I was wondering why there isn't a tab for apache when you enable it on bb-hosts, but the graph only shows up on the trends page? Jason Chambers IT Helpdesk Support eosoft Inc. 85 Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: 416-369-0111 x344 Fax: 416-369-9599 www.geosoft.com

2 1

alerts - pointing at mail server
by richard.kennard＠oxfordgenomesciences.com 31 Oct '05

31 Oct '05

Dear All, I've probably missed something obvious but........ I've set up some basic alerts in my hobbit config. Looking at the logs indicates that they are being triggered and attempting to send mail to the specified address. However - no mail arrives. I'm sure the reason is that the server doesn't know where to send them - I can't seem to find anywhere in the hobbit config files where I can tell it about my local smtp server. Do I need to be configuring sendmail on my hobit server or? Cheers! Rich

2 1

[hobbit] alerts - pointing at mail server
by CallahanT＠tessco.com 31 Oct '05

31 Oct '05

Hobbit uses whatever mail agent is specified in ..server/etc/bbdef.sh (I think that's the file) If using sendmail, you need to configure sendmail so it knows what to do.... Tom Callahan -----Original Message----- From: richard kennard [mailto:richard.kennard at oxfordgenomesciences.com] Sent: Monday, October 31, 2005 11:25 AM To: hobbit at hswn.dk Subject: [hobbit] alerts - pointing at mail server Dear All, I've probably missed something obvious but........ I've set up some basic alerts in my hobbit config. Looking at the logs indicates that they are being triggered and attempting to send mail to the specified address. However - no mail arrives. I'm sure the reason is that the server doesn't know where to send them - I can't seem to find anywhere in the hobbit config files where I can tell it about my local smtp server. Do I need to be configuring sendmail on my hobit server or? Cheers! Rich To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0