November 2005 - Xymon - Xymon mailman web

Monitoring syslog and other log files
by Allan.Marillier＠dana.com 11 Nov '05

11 Nov '05

Somebody please point me at some docs on setting filters for syslog and other log file monitoring, or give me some starting point. I've checked the archive, browsed through the installation and config pages, looked through man pages, and I'm just not seeing it. I have the standard configs on my clients, with clientlaunch.cfg and hobbitclient.cfg. I tried sending a few test messages to syslog using logger -p ERR test and logger -p ERROR test, but get nothing reported. hobbitclient.cfg has the default setup with the following. This is not the same as processes, disk etc. is it, where the client config is no longer used, but is set on the hobbit server? # For the msgs check DOMSGS="TRUE" NOMSGSCOLOR="clear" BBMSGSTAB="$BBHOME/etc/bb-msgstab" CHKMSGLEN="TRUE" IGNMSGS="" MSGEXPIRE="30:60" MSGFILE="/var/log/messages" MSGS="NOTICE WARNING" PAGEMSG="NOTICE" REDMSGSLINES="20" YELLOWMSGSLINES="10" Thanks.

4 5

Web page to subscribe to Hobbit email alerts
by Shawn.Maschino＠ge.com 11 Nov '05

11 Nov '05

Hello follow Hobbit admins (hobmins?). I'm fairly new to the list but have been running Hobbit for a while now. I've had a request come to me to put a web page together to let people register for getting Hobbit email alerts. It would just need to allow someone to select a server (or servers), the tests they want alerts for, and then enter their email address. When they submit the form it would automatically add a line in hobbit-alerts.cfg so they would get the alerts. It wouldn't need to be anything fancy, or support unsubscribing to alerts (although that would be nice). Before I tried my hand at hacking together something to do this I thought I'd check if anyone here has something already since it seemed like this probably has come up for someone before. I took a look at the code for the Enable/Disable alerts cgi page and thought I may be able to use that as a starting point, but if anyone here has already done something like this and wouldn't mind sharing it would be appreciated. Thanks! Shawn Maschino Technical Services - Server Operations GE Plastics shawn.maschino at ge.com

2 1

Questions about Enable/Disable/NOTICE
by jonescr＠cisco.com 10 Nov '05

10 Nov '05

1. When I disable a host in hobbit, it says it was disabled by unknown at 1.2.3.4 <mailto:unknown at 1.2.3.4>. In the bb maint.pl script, it had an option to put a username, but I don't see an option to do this in the Hobbit Maint page, so is "unknown" hard coded, or does it look for it somewhere else? 2. I added the "NOTICE" rule to my hobbit-alerts.cfg HOST=* SERVICE=* COLOR=red MAIL me at mydomain.com <mailto:me at mydomain.com> RECOVERED NOTICE I then tested disabling the cpu service for a host, and I received an email with the disable message: ----- From: hobbit at myhost.com <mailto:hobbit at myhost.com> Sent: Wednesday, November 09, 2005 5:01 PM To: me at mydomain.com <mailto:me at mydomain.com> Subject: Hobbit servername:cpu NOTICE servername:cpu INFO Monitoring of servername:cpu has been DISABLED by unknown for 240 minutes Disabled by: unknown @ 1.2.3.4 Reason: testing disable notice ----- This is what I expected to get. However, I then went and re-enabled the disabled service, and I did not get an email saying it was re-enabled. I checked the /var/log/maillog to make sure that it wasn't a mail delay. There simply was no email sent about the enable. I assume this isn't normal behavior :) -Charles

4 4

[hobbit] hobbitclient, disk and AIX
by KauffmanT＠nibco.com 10 Nov '05

10 Nov '05

This has been on my to-do list for a while -- not because all the nfs clients tell me about the disk space, but because the df command hangs if a hard-mounted nfs filesystem becomes unavailable. With the BB client code, this ends up with purples for disk, swap, cpu, and messages (and maybe more -- running from memory here). Tom -----Original Message----- From: Frédéric Mangeant [mailto:frederic.mangeant at steria.com] Sent: Thursday, November 10, 2005 3:56 AM To: hobbit at hswn.dk Subject: Re: [hobbit] hobbitclient, disk and AIX Andy France a écrit : > I'm working my way through a small rollout of hobbitclient on some AIX 5.3 > boxen to replace the BB client. > > At present, I am having some issues with disk alerts, especially for NFS > mounted drives. > > As Henrik probably noticed, AIX is nice enough to *not* include the option > for specifying file system types in it's df command. Well... it does in > the sysv version but that won't let you get the results in kb :-) So if I > get a full disk on the NFS server, all the NFS clients let me know about it > too! Hi you can install GNU coreutils (ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/coreutils/c…) they provide some useful GNU commands like df : $ /usr/linux/bin/df --help [...] -l, --local limit listing to local filesystems [...] I'm using this with BB clients on AIX : DF="/usr/linux/bin/df -h -l" Regards, -- Frédéric Mangeant Steria EDC Sophia-Antipolis To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Fw: [hobbit] hobbitclient, disk and AIX
by Andy＠zespri.com 10 Nov '05

10 Nov '05

Andy France <Andy at zespri.com> wrote on 10/11/2005 09:38:34 p.m.: > Just a follow up on my own thread... > Andy France wrote on 10/11/2005 05:25:27 p.m.: > > I'm working my way through a small rollout of hobbitclient on some AIX > 5.3 > > boxen to replace the BB client. > > At present, I am having some issues with disk alerts, especially for NFS > > mounted drives. > > As Henrik probably noticed, AIX is nice enough to *not* include the > option > > for specifying file system types in it's df command. Well... it does in > > the sysv version but that won't let you get the results in kb :-) So if > I > > get a full disk on the NFS server, all the NFS clients let me know about > it > > too! > I've had a look at how BB resolves this issue. They grep the df output for > lines that begin with /dev. > This will work fine for me as all my LV's (logical volumes), whether > locally attached SCSI disks or fibre attached FAStT SAN disks, follow this > convention... which is kind of obvious seeing as i never noticed any > problems with the BB client! ;-) > Can anyone else confirm that all AIX systems will follow this > convention? I'm relatively new to AIX and only run 5.2 and 5.3. I > therefore feel I'm not qualified to categorically state that all local > filesystems will be created on logical volumes. Does AIX actually enfore > the use of LVM? > At this point, I've made the following change to my copies of > hobbitclient-aix.sh > df -Ik | sed ... > *becomes* > df -Ik | grep '^/dev' | sed... Whoops! df -Ik | grep -E '^/dev'\|'^Filesystem' | sed... :-) > Would anyone have objections to getting the source updated to match by > Henrik? > > Would it be possible to use a DEFAULT regex to exclude any lines with a : > > in them? Something like... > > DISK %*:.* 101 102 > > Although my perl regex experience is a bit light... so any clarification > > would be appreciated! > This would obviously become a bit redundant :-) > > Also - can you have multiple DISK lines undet the DEFAULT tag? The man > > page doesn't say much either way, although I've got it working fine on > one > > host entry for the PROC status > > Regards, > Andy. > ##################################################################################### > This email is intended for the person to whom it is addressed > only. If you are not the intended recipient, do not read, copy > or use the contents in any way. The opinions expressed may not > necessarily reflect those of ZESPRI Group of Companies ('ZESPRI'). > While every effort has been made to verify the information > contained herein, ZESPRI does not make any representations > as to the accuracy of the information or to the performance > of any data, information or the products mentioned herein. > ZESPRI will not accept liability for any losses, damage or > consequence, however, resulting directly or indirectly from > the use of this e-mail/attachments. > ##################################################################################### > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk ##################################################################################### This email is intended for the person to whom it is addressed only. If you are not the intended recipient, do not read, copy or use the contents in any way. The opinions expressed may not necessarily reflect those of ZESPRI Group of Companies ('ZESPRI'). While every effort has been made to verify the information contained herein, ZESPRI does not make any representations as to the accuracy of the information or to the performance of any data, information or the products mentioned herein. ZESPRI will not accept liability for any losses, damage or consequence, however, resulting directly or indirectly from the use of this e-mail/attachments. #####################################################################################

2 1

[hobbit] hobbitclient, disk and AIX
by Mark.Deiss＠acs-inc.com 10 Nov '05

10 Nov '05

How is a mount of a CD-ROM/DVD drive handled? You may want to exclude those entries too - unless you have don't care about those pesky 100% always full reports on /dev/cdrom mounted to whatever... -----Original Message----- From: Andy France [mailto:Andy at zespri.com] Sent: Thursday, November 10, 2005 3:39 AM To: hobbit at hswn.dk Subject: Fw: [hobbit] hobbitclient, disk and AIX Just a follow up on my own thread... Andy France wrote on 10/11/2005 05:25:27 p.m.: > I'm working my way through a small rollout of hobbitclient on some AIX 5.3 > boxen to replace the BB client. > At present, I am having some issues with disk alerts, especially for NFS > mounted drives. > As Henrik probably noticed, AIX is nice enough to *not* include the option > for specifying file system types in it's df command. Well... it does in > the sysv version but that won't let you get the results in kb :-) So if I > get a full disk on the NFS server, all the NFS clients let me know about it > too! I've had a look at how BB resolves this issue. They grep the df output for lines that begin with /dev. This will work fine for me as all my LV's (logical volumes), whether locally attached SCSI disks or fibre attached FAStT SAN disks, follow this convention... which is kind of obvious seeing as i never noticed any problems with the BB client! ;-) Can anyone else confirm that all AIX systems will follow this convention? I'm relatively new to AIX and only run 5.2 and 5.3. I therefore feel I'm not qualified to categorically state that all local filesystems will be created on logical volumes. Does AIX actually enfore the use of LVM? At this point, I've made the following change to my copies of hobbitclient-aix.sh df -Ik | sed ... *becomes* df -Ik | grep '^/dev' | sed... Would anyone have objections to getting the source updated to match by Henrik? > Would it be possible to use a DEFAULT regex to exclude any lines with a : > in them? Something like... > DISK %*:.* 101 102 > Although my perl regex experience is a bit light... so any clarification > would be appreciated! This would obviously become a bit redundant :-) > Also - can you have multiple DISK lines undet the DEFAULT tag? The man > page doesn't say much either way, although I've got it working fine on one > host entry for the PROC status > Regards, Andy. ############################################################################ ######### This email is intended for the person to whom it is addressed only. If you are not the intended recipient, do not read, copy or use the contents in any way. The opinions expressed may not necessarily reflect those of ZESPRI Group of Companies ('ZESPRI'). While every effort has been made to verify the information contained herein, ZESPRI does not make any representations as to the accuracy of the information or to the performance of any data, information or the products mentioned herein. ZESPRI will not accept liability for any losses, damage or consequence, however, resulting directly or indirectly from the use of this e-mail/attachments. ############################################################################ ######### To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Fw: [hobbit] hobbitclient, disk and AIX
by Andy＠zespri.com 10 Nov '05

10 Nov '05

Just a follow up on my own thread... Andy France wrote on 10/11/2005 05:25:27 p.m.: > I'm working my way through a small rollout of hobbitclient on some AIX 5.3 > boxen to replace the BB client. > At present, I am having some issues with disk alerts, especially for NFS > mounted drives. > As Henrik probably noticed, AIX is nice enough to *not* include the option > for specifying file system types in it's df command. Well... it does in > the sysv version but that won't let you get the results in kb :-) So if I > get a full disk on the NFS server, all the NFS clients let me know about it > too! I've had a look at how BB resolves this issue. They grep the df output for lines that begin with /dev. This will work fine for me as all my LV's (logical volumes), whether locally attached SCSI disks or fibre attached FAStT SAN disks, follow this convention... which is kind of obvious seeing as i never noticed any problems with the BB client! ;-) Can anyone else confirm that all AIX systems will follow this convention? I'm relatively new to AIX and only run 5.2 and 5.3. I therefore feel I'm not qualified to categorically state that all local filesystems will be created on logical volumes. Does AIX actually enfore the use of LVM? At this point, I've made the following change to my copies of hobbitclient-aix.sh df -Ik | sed ... *becomes* df -Ik | grep '^/dev' | sed... Would anyone have objections to getting the source updated to match by Henrik? > Would it be possible to use a DEFAULT regex to exclude any lines with a : > in them? Something like... > DISK %*:.* 101 102 > Although my perl regex experience is a bit light... so any clarification > would be appreciated! This would obviously become a bit redundant :-) > Also - can you have multiple DISK lines undet the DEFAULT tag? The man > page doesn't say much either way, although I've got it working fine on one > host entry for the PROC status > Regards, Andy. ##################################################################################### This email is intended for the person to whom it is addressed only. If you are not the intended recipient, do not read, copy or use the contents in any way. The opinions expressed may not necessarily reflect those of ZESPRI Group of Companies ('ZESPRI'). While every effort has been made to verify the information contained herein, ZESPRI does not make any representations as to the accuracy of the information or to the performance of any data, information or the products mentioned herein. ZESPRI will not accept liability for any losses, damage or consequence, however, resulting directly or indirectly from the use of this e-mail/attachments. #####################################################################################

1 0

capital letters in bbcombotest.cfg
by nishioka＠rightnow.ne.jp 10 Nov '05

10 Nov '05

I can operate bbcombotest properly when I use small letters in bbcombotest.cfg, but when capital letters are used in bbcombotest.cfg, the result of bbcombotest is not displayed on bb.html. [OK] <bbcombotest.cfg> combo-savvis.combo=(bhr1\-pos\-13\-0\.SantaClarasc4\.savvis\.net.conn || csr12\-ve240\.SantaClarasc5\.savvis\.net.conn) <bb-hosts> 0.0.0.0 combo-savvis # noconn [NG] <bbcombotest.cfg> COMBO-SAVVIS.combo=(bhr1\-pos\-13\-0\.SantaClarasc4\.savvis\.net.conn || csr12\-ve240\.SantaClarasc5\.savvis\.net.conn) <bb-hosts> 0.0.0.0 COMBO-SAVVIS # noconn Please let me know if using capital letters in bbcombotest.cfg is illegal or not.

1 0

Questions about enable/disable (NOTICE) messages
by charljon＠cisco.com 09 Nov '05

09 Nov '05

1. When I disable a host in hobbit, it says it was disabled by unknown at 1.2.3.4. In the bb maint.pl script, it had an option to put a username, but I don't see an option to do this in the Hobbit Maint page, so is "unknown" hard coded, or does it look for it somewhere else? 2. I added the "NOTICE" rule to my hobbit-alerts.cfg HOST=* SERVICE=* COLOR=red MAIL me at mydomain.com <mailto:me at mydomain.com> RECOVERED NOTICE I then tested disabling the cpu service for a host, and I received an email with the disable message: ----- From: hobbit at myhost.com <mailto:hobbit at myhost.com> Sent: Wednesday, November 09, 2005 5:01 PM To: me at mydomain.com Subject: Hobbit servername:cpu NOTICE servername:cpu INFO Monitoring of servername:cpu has been DISABLED by unknown for 240 minutes Disabled by: unknown @ 1.2.3.4 Reason: testing disable notice ----- This is what I expected to get. However, I then went and re-enabled the disabled service, and I did not get an email saying it was re-enabled. I checked the /var/log/maillog to make sure that it wasn't a mail delay. There simply was no email sent about the enable. I assume this isn't normal behavior :) -Charles

1 0

[hobbit] hobbit client versions
by adam.scheblein＠marquette.edu 09 Nov '05

09 Nov '05

Is this available in 4.1.2 or is there a patch, or should I get the latest snapshot? Thanks, Adam -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Wednesday, November 09, 2005 10:00 AM To: hobbit at hswn.dk Subject: Re: [hobbit] hobbit client versions On Wed, Nov 09, 2005 at 09:20:23AM -0500, Pat Vaughan wrote: > > On 08/11/05, Scheblein, Adam <adam.scheblein at marquette.edu> wrote: > >> Does anyone have any ideas on this?? > > > > Don't know about "easy", but the following does work (even if it is ugly): > > > > strings bb | grep "^[1-9]\." > > > > Will work for all versions of hobbit up to and including 9 :-) > > > > I don't think this is consistant on all platforms. Probably not. I've added a "--version" option for the "bb" and "bbcmd" commands now - both of these are included in the client installation. So in the future, you can run "bbcmd --version" and it will say henrik at osiris:~/hobbit$ ./common/bbcmd --version Hobbit version 4.1.2 Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1