November 2005 - Xymon - Xymon mailman web

Clients reporting to both a BB server and Hobbit
by kmckinnis＠macrovision.com 08 Nov '05

08 Nov '05

I saw the recent thread regarding using bbproxy to replicate the display, and would like to do something similar. However, ideally, what I'd like is to use something like bbrelay to have the clients report to both hobbit and bb, while I get hobbit fully set up. I know the alert structure is a little different, and I'd like to have time to tweak things and such instead of doing an abrupt cutover. Is it possible to have the clients actually report to both servers, such that both bb and hobbit will process the data (as bbnets or whatever). I googled hobbit and bbrelay but didn't come up with too much. Will bbrelay do what I want, or does it just forward the reports instead of processing it on both servers? I want BB to remain fully functional for the time being, as I'm monitoring over 2000 machines with paging and ext and pg scripts which kick off other things.

3 2

[hobbit] Clients reporting to both a BB server and Hobbit
by v.everett＠afgonline.com.au 08 Nov '05

08 Nov '05

Hi I never touched the BB-server. (It isn't under my control) I changed the clients. (A pain if you have many monitored clients) If you add the Hobbit server to the client bb-hosts file as a display server, all the nateive and correctly configured tests will start sending results to the Hobbit server. Like this. # cat bb-hosts 192.168.8.15 samwise # BBDISPLAY BBPAGER <--- the original BB server 192.168.8.1 webserve # http://webserve/ 192.168.8.2 appserv1 # 192.168.8.3 appserv2 # 192.168.8.4 dbserve # 192.168.8.6 devserve # 192.168.0.16 frodo # BBDISPLAY BBPAGER <--- added by me (our first hobbit server) 192.168.0.14 shire # BBDISPLAY BBPAGER <--- added by me (our new hobbit server) (We have 2 hobbit servers because I am busy migrating to a more stable platform) All tests that are "native" to BB will start sending results to all servers with the BBDISPLAY parameter in bb-hosts. Most of the external tests have this line which sends the status. $BB $BBDISP "status $MACHINE.$TEST $COLOR `date` - $STATUS $LINE" The $BBDISP varaible will be automatically populated with the BBDISPLAY servers from the bb-hosts file (See above) The less cleverly written tests might have a line like this. $BB 192.168.0.16 "status $MACHINE.$TEST $COLOR `date` - $STATUS $LINE" If you want to send you results to a second or even a third server, keep adding lines. $BB 192.168.0.16 "status $MACHINE.$TEST $COLOR `date` - $STATUS $LINE" $BB 192.168.0.14 "status $MACHINE.$TEST $COLOR `date` - $STATUS $LINE" This is a cute trick which is useful if you only want to send results to one hobbit/bb server and not all of them. As in my case, there is a BB server, which I am not to disrupt. However, you might also want to limit what gets reported on the "business user" display, and what gets reported to your own server. Run 2 servers, and limit output to the business one, and send the extra infor to your private one. It is very useful if you have jumpy non-tech people who phone you every time ANYTHING goes red. :-) Hope this helps. Regards Vernon ----- No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. -----Original Message----- From: Kimberly McKinnis [mailto:kmckinnis at macrovision.com] Sent: Tuesday, 8 November 2005 10:21 AM To: hobbit at hswn.dk Subject: RE: [hobbit] Clients reporting to both a BB server and Hobbit :) so my specific question is... to make my clients report to both servers I only add the hobbit server as a bbrelay in the bb server's bb-host file? I'm not understanding the steps I need to take to run them in parallel. At the moment, I have a hobbit server running completely seperately and just pinging hosts, no clients are reporting to it. -----Original Message----- From: Vernon Everett [mailto:v.everett at afgonline.com.au] Sent: Monday, November 07, 2005 6:02 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Clients reporting to both a BB server and Hobbit Hi The short answer is yes. We have a 3rd party (they provide Dc services) that use Big Brother. Since I joined the company, I started using Hobbit, but had to do so without disrupting their Big Brother. I have also started migrating some of our servers to Hobbit client. We now have BB-client and Hobbit client running on our servers, reporting to Hobbit in our offices, and Big Brother server at our data centre hosts. It gets a little confusing, but keeps things interesting :-) Do you have a more specific question? Regards Vernon ----- No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. -----Original Message----- From: Kimberly McKinnis [mailto:kmckinnis at macrovision.com] Sent: Tuesday, 8 November 2005 9:42 AM To: hobbit at hswn.dk Subject: [hobbit] Clients reporting to both a BB server and Hobbit I saw the recent thread regarding using bbproxy to replicate the display, and would like to do something similar. However, ideally, what I'd like is to use something like bbrelay to have the clients report to both hobbit and bb, while I get hobbit fully set up. I know the alert structure is a little different, and I'd like to have time to tweak things and such instead of doing an abrupt cutover. Is it possible to have the clients actually report to both servers, such that both bb and hobbit will process the data (as bbnets or whatever). I googled hobbit and bbrelay but didn't come up with too much. Will bbrelay do what I want, or does it just forward the reports instead of processing it on both servers? I want BB to remain fully functional for the time being, as I'm monitoring over 2000 machines with paging and ext and pg scripts which kick off other things. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.

1 0

[hobbit] Clients reporting to both a BB server and Hobbit
by kmckinnis＠macrovision.com 08 Nov '05

08 Nov '05

:) so my specific question is... to make my clients report to both servers I only add the hobbit server as a bbrelay in the bb server's bb-host file? I'm not understanding the steps I need to take to run them in parallel. At the moment, I have a hobbit server running completely seperately and just pinging hosts, no clients are reporting to it. -----Original Message----- From: Vernon Everett [mailto:v.everett at afgonline.com.au] Sent: Monday, November 07, 2005 6:02 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Clients reporting to both a BB server and Hobbit Hi The short answer is yes. We have a 3rd party (they provide Dc services) that use Big Brother. Since I joined the company, I started using Hobbit, but had to do so without disrupting their Big Brother. I have also started migrating some of our servers to Hobbit client. We now have BB-client and Hobbit client running on our servers, reporting to Hobbit in our offices, and Big Brother server at our data centre hosts. It gets a little confusing, but keeps things interesting :-) Do you have a more specific question? Regards Vernon ----- No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. -----Original Message----- From: Kimberly McKinnis [mailto:kmckinnis at macrovision.com] Sent: Tuesday, 8 November 2005 9:42 AM To: hobbit at hswn.dk Subject: [hobbit] Clients reporting to both a BB server and Hobbit I saw the recent thread regarding using bbproxy to replicate the display, and would like to do something similar. However, ideally, what I'd like is to use something like bbrelay to have the clients report to both hobbit and bb, while I get hobbit fully set up. I know the alert structure is a little different, and I'd like to have time to tweak things and such instead of doing an abrupt cutover. Is it possible to have the clients actually report to both servers, such that both bb and hobbit will process the data (as bbnets or whatever). I googled hobbit and bbrelay but didn't come up with too much. Will bbrelay do what I want, or does it just forward the reports instead of processing it on both servers? I want BB to remain fully functional for the time being, as I'm monitoring over 2000 machines with paging and ext and pg scripts which kick off other things. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] Clients reporting to both a BB server and Hobbit
by v.everett＠afgonline.com.au 08 Nov '05

08 Nov '05

Hi The short answer is yes. We have a 3rd party (they provide Dc services) that use Big Brother. Since I joined the company, I started using Hobbit, but had to do so without disrupting their Big Brother. I have also started migrating some of our servers to Hobbit client. We now have BB-client and Hobbit client running on our servers, reporting to Hobbit in our offices, and Big Brother server at our data centre hosts. It gets a little confusing, but keeps things interesting :-) Do you have a more specific question? Regards Vernon ----- No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. -----Original Message----- From: Kimberly McKinnis [mailto:kmckinnis at macrovision.com] Sent: Tuesday, 8 November 2005 9:42 AM To: hobbit at hswn.dk Subject: [hobbit] Clients reporting to both a BB server and Hobbit I saw the recent thread regarding using bbproxy to replicate the display, and would like to do something similar. However, ideally, what I'd like is to use something like bbrelay to have the clients report to both hobbit and bb, while I get hobbit fully set up. I know the alert structure is a little different, and I'd like to have time to tweak things and such instead of doing an abrupt cutover. Is it possible to have the clients actually report to both servers, such that both bb and hobbit will process the data (as bbnets or whatever). I googled hobbit and bbrelay but didn't come up with too much. Will bbrelay do what I want, or does it just forward the reports instead of processing it on both servers? I want BB to remain fully functional for the time being, as I'm monitoring over 2000 machines with paging and ext and pg scripts which kick off other things. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.

1 0

Hobbit wiki?
by hobbit＠pvaughan.us 07 Nov '05

07 Nov '05

I searching to make sure my Hobbit issues haven't already been answered, I keep stumbling over a hobbit wiki at: http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit It's very very sparse... almost empty, and pretty out of date. Is anyone actually working on this, or is it abandoned?

3 2

[hobbit] No pages when going from yellow to red
by henrik＠hswn.dk 07 Nov '05

07 Nov '05

On Tue, Nov 01, 2005 at 05:25:33PM -0500, Larry.Barber at usda.gov wrote: > If you use separate rules for yellow and red alerts, say a > hobbit-alerts.cfg that looked something like: > > HOST a_host: > MAIL xxxx at yyy.com COLOR=red DELAY=0 REPEAT=30m RECOVERED > MAIL xxxx at yyy.com COLOR=yellow DELAY=0 REPEAT=30m RECOVERED > > would you then get a separate email when the condition turned red at > 22:45 below? No, and that might be something that could change. The repeat- checking code currently identifies an alert by the combination of hostname, servicename and recipient; I could easily change that so a separate line in the config-file would result in a new set of repeat-checks. > > 22:05 Test goes yellow - alert (yellow) is sent > > 22:35 Test still yellow - repeat alert (yellow) is sent > > 22:45 Test goes red. No alert is sent because it is only 10 minutes > > since the last alert went out. > > 23:05 Test still red - now an alert (red) is sent. Regards, Henrik

3 6

Hobbit Monitor 4.1.2 DISABLE a client script
by Steve.DiSorbo＠yale.edu 07 Nov '05

07 Nov '05

I Just converted from BB to Hobbit. I wrote a client script (modified old BB client script) to monitor an application, added to the clientlaunch.cfg file restarted hobbit and all is well. Because the application I am monitoring is faulty I added to the client monitory script a section of code to start up the application should it fail. To avoid having the application start up during the backup window I would disable the client script. When I was using BB this worked fine, but now that I have switched to Hobbit I think that even is the test is disabled the client script still fires and my application goes from blue to red to green. So now the 64K question ... what can I change so the test does not run when disabled or ... where did I error? Thanks.

1 0

Conn test failing
by jeff＠myismail.com 07 Nov '05

07 Nov '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ok, I've got some WEIRD problems here. My conn test (IE fping) is failing on the BBNET server itself! It's going red for no apparent reason. Here's the results of the page back to me: red Mon Nov 7 02:00:25 2005 conn NOT ok Service conn on 123.123.123.123 is not OK : Host does not respond to ping System unreachable for 70 poll periods (20867 seconds) &red 123.123.123.123 is unreachable Traceroute results: traceroute to 123.123.123.123 (123.123.123.123), 30 hops max, 38 byte packets 1 server3 (123.123.123.123) 0.075 ms 0.026 ms 0.020 ms And I have this problem with other servers too where the ping doesn't apparently go through yet the traceroute that gets run shows it DOES get through. Here's an example of that: red Mon Nov 7 01:55:25 2005 conn NOT ok Service conn on 124.124.124.124 is not OK : Host does not respond to ping System unreachable for 64 poll periods (19054 seconds) &red 124.124.124.124 is unreachable Traceroute results: traceroute to 124.124.124.124 (124.124.124.124), 30 hops max, 38 byte packets 1 69.45.152.2 (122.122.122.122) 0.459 ms 0.545 ms 0.600 ms 2 server2.myinternetservices.com (124.124.124.124) 1.085 ms 1.450 ms * As you can see, the traceroute DOES go through, if I hop onto the bbnet server and immediately do an fping, the fping goes through AND I can even ssh into the client server with no problems. So I don't know what's going on or how to fix it. Any ideas anyone? - -- Jeff Stuart Network Admin MyInternetServices 1-800-300-HOST -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDbxCbjkq2AIfBlPgRAq/uAJ49XK3Xcq8gAWHvn3WYL66PV+dfcACgx3Up p2hI853dCzma6yK50/Pgh34= =ouoR -----END PGP SIGNATURE----- -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.362 / Virus Database: 267.12.7/159 - Release Date: 11/2/2005

2 2

[hobbit] Conn test failing
by nfigaro＠effigie.fr 07 Nov '05

07 Nov '05

Hi, Did you check with the standard ping command that runs with your OS ? Could you also check to run the fping command on your server. N F > -----Message d'origine----- > De : Jeff Stuart [mailto:jeff at myismail.com] > Envoyé : lundi 7 novembre 2005 09:30 > À : hobbit at hswn.dk > Objet : [hobbit] Conn test failing > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Ok, I've got some WEIRD problems here. My conn test (IE > fping) is failing on the BBNET server itself! It's going red > for no apparent reason. Here's the results of the page back to me: > > red Mon Nov 7 02:00:25 2005 conn NOT ok > > Service conn on 123.123.123.123 is not OK : Host does not > respond to ping > > > System unreachable for 70 poll periods (20867 seconds) > > &red 123.123.123.123 is unreachable > Traceroute results: > traceroute to 123.123.123.123 (123.123.123.123), 30 hops max, > 38 byte packets 1 server3 (123.123.123.123) 0.075 ms > 0.026 ms 0.020 ms > > And I have this problem with other servers too where the ping > doesn't apparently go through yet the traceroute that gets > run shows it DOES get through. Here's an example of that: > > red Mon Nov 7 01:55:25 2005 conn NOT ok > > Service conn on 124.124.124.124 is not OK : Host does not > respond to ping > > > System unreachable for 64 poll periods (19054 seconds) > > &red 124.124.124.124 is unreachable > Traceroute results: > traceroute to 124.124.124.124 (124.124.124.124), 30 hops max, > 38 byte packets 1 69.45.152.2 (122.122.122.122) 0.459 ms > 0.545 ms 0.600 ms 2 server2.myinternetservices.com > (124.124.124.124) 1.085 ms 1.450 ms * > > As you can see, the traceroute DOES go through, if I hop onto > the bbnet server and immediately do an fping, the fping goes > through AND I can even ssh into the client server with no > problems. So I don't know what's going on or how to fix it. > Any ideas anyone? > > - -- > Jeff Stuart > Network Admin > MyInternetServices > 1-800-300-HOST > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2 (MingW32) > Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org > > iD8DBQFDbxCbjkq2AIfBlPgRAq/uAJ49XK3Xcq8gAWHvn3WYL66PV+dfcACgx3Up > p2hI853dCzma6yK50/Pgh34= > =ouoR > -----END PGP SIGNATURE----- > > > > -- > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.1.362 / Virus Database: 267.12.7/159 - Release > Date: 11/2/2005 > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

1 0

Problem with badhttp
by pbliss＠techvalleycom.com 06 Nov '05

06 Nov '05

Greetings all, I've got an ongoing issue that I just can't seem to get around where hobbit is reporting http timeouts on what I know to be healthy webservers. I've tried using badhttp in the bb_hosts file like so: 192.168.1.219 server.example.net # smtp ftp http://home.example.net badhttp:3:4:10 I though this would clear up my problem as it should tern clear after 3 failures, yellow after 4 and red only after 10, but in practice, it still is skipping all stages and going right to red on I assume the first test. The "red" condition usually lasts only between 9 and 50 seconds, so it's very difficult for me to note machine state of the server and monitor system while it's happening. SO if anyone has a direction to point me in towards either getting badhttp to behave as I expect it or to get http monitoring to work out this intermittent error, you would be a hero to me. Thanks Paul Bliss Network and Systems Administrator TechValley Communications pbliss at techvalleycom.com

2 1