February 2005 - Xymon - Xymon mailman web

Strange things?
by lars.ebeling＠duni.se 22 Feb '05

22 Feb '05

Hi All, This is an extract from my bb-hosts file in hobbit: 192.168.0.2 leopg9 # BBDISPLAY BBPAGER BBNET bbd http://leopg9/ 192.168.0.100 Leo 192.176.5.1 Duni This is suddenly reported: Tue Feb 22 17:54:10 2005 conn ok Service conn on Duni is OK (up) green <http://192.168.0.2/hobbit/gifs/green.gif> 62.119.162.107 is alive (0.46 ms) A totally different IP-address. That my outside address. I alse get an error in bbtest: Error output: xgetenv: Cannot find value for variable HOME Henrik, you still got the URL? Regards Lars

2 1

Alert macro syntax
by Kevin.Hanrahan＠novainfo.com 22 Feb '05

22 Feb '05

Hi all, I could use some help with the syntax for alert using macros. I tried defining servers as such: $GROUP1=server1 server2 server3 $GROUP2=server4 And then defined a pagegroup as such: $SYSADMIN=kevin at domain.com Then I made some rules: HOST=$GROUP1 MAIL $SYSADMIN COLOR=red REPEAT=15m RECOVERED HOST=$GROUP2 MAIL $SYSADMIN COLOR=red REPEAT=15m RECOVERED The rule for GROUP2 works as it should but the rule for GROUP1 (the one with multiple servers) does nothing at all! I have tried enclosing the multiple server names in quotes like this: $GROUP1="server1 server2 server3" But that made no difference....still no alerts. Can someone tell me the proper syntax for defining multiple items in a macro? Thank you. Kevin Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this email and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this email. If you have received this email in error, please notify us immediately by replying to the message and delete the email from your computer. This e-mail is and any response to it will be unencrypted and, therefore, potentially unsecure. Thank you. NOVA Information Systems, Inc.

2 1

larrd-graphs.cgi equivalent, or how to display a bunch of graphs from various hosts at once
by tgeorgoulias＠nandomedia.com 21 Feb '05

21 Feb '05

In Big Brother, there was a script on deadcat.net called "larrd-graphs.cgi" that provided an easy way to display a bunch of graphs from different hosts for comparison called "larrd graph reports". Is there an equivalent way to do those comparisons in hobbit? It was a quite handy way to see how the load average fluctuated between a farm of servers in a single view... Tom

2 1

Suggestion for Defaults
by iqbala-hobbit＠qwestip.net 21 Feb '05

21 Feb '05

Hi I would like to suggest if it is not only there. I like a way to set the default for the followings REPEAT, currently it is 30 and I like to change it not for all my 200 entries separately but as a default value I like to have FORMAT assumed as default to TEXT. Right now I have to atleast mentioned the word FORMAT in all my 200 rules separately Same thing for COLOR. Currently I have to mention COLOR=red which I like to set as default. Do I set that in the --alertcolors? BTW, if I choose COLOR=RED it fails, I assume it is case sensitive ?! It would be great if I could Add more than one email alias in the same MAIL line. Save me lot of writing, but It is a mere suggestion and can be put off forever :-) There are all the suggestion with the assumption that they are not already exist. Thanks for such an excellent tool -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "...it said: Install Windows XP or better...so I installed Solaris..."

3 11

[hobbit] Disk space alerts
by hale.barbara＠cnf.com 21 Feb '05

21 Feb '05

James - There is a bb-disk_by_fs.sh on www.deadcat.com which can replace the bb-disk.sh in the Big Brother client. I took that as a starting point and made some modifications for our shop. It has been a godsend since we had the same problem. If you want my version so you can compare to the deadcat one I would be happy to send it to you. Barbara -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, February 18, 2005 2:08 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Disk space alerts On Fri, Feb 18, 2005 at 01:40:31PM -0500, James B Horwath wrote: > Does hobbit allow you to send disk space alerts to different people. For > example if I have a data base machine, the sys admins would get the O/S > type alerts, the DBA's get the database filesystem alerts, and the WEB > developers would get the WEB filesystem alerts. This was always my big > wish list from BB. In the current version, Hobbit behaves like BB in that respect. I have some ideas and the beginnings of some code that would allow you to do this, by filtering status-messages on the Hobbit server before they are processed by the normal daemon. My idea was that since the RRD graph module is already parsing a lot of the data, it wouldn't be terribly difficult to match the data fed into the RRD files against some thresholds, and trigger an alert e.g. if utilisation of a single disk goes above some threshold. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] Program crashed - MY FAULT
by mlowery＠alliedtechgroup.com 21 Feb '05

21 Feb '05

If it helps any, I didn't have anything after the "apache" key word, no parenthesis, nothing... It looked something like: xxx.xxx.199.22 gandalf.domain.com # # BBPAGER BBNET BBDISPLAY http://host1.domain.com http://host2.domain.com http://host3.domain.com http://host4.domain.com http://host5.domain.com pop3 smtp ssh dns ftp mrtg mailq trap apache all on one line, of course. Michael Lowery -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thursday, February 17, 2005 11:37 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Program crashed - MY FAULT Hi Michael, On Thu, Feb 17, 2005 at 10:24:25AM -0600, Lowery, Michael wrote: > Henrik, > At some point just before I patched the file, I had also added the > "apache" key word to a host in bb-hosts. After removing it and > restarting Hobbit, everything returned to normal. OK, you had an error in the syntax for the check. It was "cont=apache;http://199.227.199.22/server-status?auto)" but when you use a "cont" setting - instead of just the "apache" keyword - you must have some data for the content-matching. And the parenthesis at the end looks like a typo :-) So it should have been "cont=apache;http://199.227.199.22/server-status?auto;." Or just "apache=http://199.227.199.22/server-status?auto" which internally in bbtest-net becomes the same thing. I'll go back and see why it crashed - it shouldn't... Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

bug report
by discardable1＠gmail.com 21 Feb '05

21 Feb '05

When I setup my site I pointed the two cgi directories at different urls, the secure script, bb-ack.sh runs from /secure-cgi/bb-ack.sh but when you try to do the acknowledgment it posts back to /cgi-bin/bb-ack.sh?ACTION=Ack&DELAY=60&MESSAGE=don%27t+know&NUMBER=123&Send=Send Is this a known bug and is there a patch for it? I'm going to have a look through the source and see if I can work out a fix just in case. Robin

2 2

[hobbit] bb-ack.sh submit fails
by GThiesfeld＠webmd.net 20 Feb '05

20 Feb '05

I set up the ack and maint pages in the sec-cgi directory. I have the authentication set up, and I'm very happy with it. My maint page is working great, but I'm having a problem with the ack page. The page comes up fine, but when I hit the send button, it sends me to /hobbit-cgi/bb-ack.sh, which isn't there anymore. I'm running RC2 with the post-RC2.patch. I haven't tried to ack anything since beta5, though. Also, I like how you've fixed up the disabled status page to show who disabled it, and for how long, etc. Would it be possible to have that info in the disabled email as well? Thanks, Gordon

2 1

acklog empty
by iqbala-hobbit＠qwestip.net 20 Feb '05

20 Feb '05

Hi All I just ran this as user hobbit bb 127.0.0.1 "hobbitdack 181402 999" to delay the red alert related to the ackcode 181402 for 999 mins. I got another alert after this command with the same ackcode for same host.service Is my syntax wrong? I do not see any thing in data/acks/acklog file. Also the time stamp on acklog show one week old. Any help with this would be greatly appreciated Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change." - Charles Darwin

2 3

[hobbit] pagetype: HOST alerting feature?
by blysik＠shutterfly.com 20 Feb '05

20 Feb '05

<snip 'depends' snippet> Interesting. So I guess one way to do it would be to have all checks for a given host depend on that hosts conn check. So if I'm comprehending correctly, this should work: 1.2.3.4 foo # <http://foo/> http://foo/ smtp depends=(http:foo/conn),(smtp:foo/conn) In theory, the http and smtp checks would be clear if conn is red, and no alert would be sent for them. (While an alert would be sent for the red conn check.) That's pretty cool, but unfortunately doesn't solve the problem I've run into: I have some hostsA which all nfs mount from hostB. hostB dies. Now when hostsA bb clients run its disk check, the df hangs, which causes all those local bb checks to purple in hobbit. hobbit proceeds to send out five alerts per host (one for each local purple). In the past, bigbrother would only send out one alert per group of purples. Is there any way to roll-up alerts like this? -- Bruce Z. Lysik <blysik at shutterfly.com> Operations Engineer

2 1