March 2005 - Xymon - Xymon mailman web

[hobbit] Bug in notify
by dhd733＠yahoo.se 20 Mar '05

20 Mar '05

Perhaps I was to fast before, but this also works: MAIL root hobbit NOTICE NOALERT Henrik Stoerner <henrik at hswn.dk> wrote: > ---------- > Från: Henrik Stoerner[SMTP:HENRIK at HSWN.DK] > Skickat: den 20 mars 2005 14:54:46 > Till: hobbit at hswn.dk > Ämne: Re: [hobbit] Bug in notify > Automatiskt vidarebefordrat av en regel > On Fri, Mar 18, 2005 at 02:53:13PM -0500, Asif Iqbal wrote: > MAIL email1 at here.com email2 at here.com NOTICE NOALERT > > It only drops the second email address. Workaround is > > MAIL email1 at here.com NOTICE NOALERT > MAIL email2 at here.com NOTICE NOALERT This should fix it. Regards, Henrik --- hobbitd/do_alert.c 2005/03/03 21:19:01 1.53 +++ hobbitd/do_alert.c 2005/03/20 13:52:13 @@ -673,6 +673,7 @@ rwalk->format = currcp->format; rwalk->interval = currcp->interval; rwalk->criteria = currcp->criteria; + rwalk->noalerts = currcp->noalerts; } } } To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk Hobbithobbyist I am not young enough to know everything. -Oscar Wilde

1 0

[hobbit] Bug in notify
by dhd733＠yahoo.se 20 Mar '05

20 Mar '05

Hi, this: MAIL root hobbit REPEAT=20 COLOR=red works for me Regards Lars Henrik Stoerner <henrik at hswn.dk> wrote: > ---------- > Från: Henrik Stoerner[SMTP:HENRIK at HSWN.DK] > Skickat: den 20 mars 2005 14:54:46 > Till: hobbit at hswn.dk > Ämne: Re: [hobbit] Bug in notify > Automatiskt vidarebefordrat av en regel > On Fri, Mar 18, 2005 at 02:53:13PM -0500, Asif Iqbal wrote: > MAIL email1 at here.com email2 at here.com NOTICE NOALERT > > It only drops the second email address. Workaround is > > MAIL email1 at here.com NOTICE NOALERT > MAIL email2 at here.com NOTICE NOALERT This should fix it. Regards, Henrik --- hobbitd/do_alert.c 2005/03/03 21:19:01 1.53 +++ hobbitd/do_alert.c 2005/03/20 13:52:13 @@ -673,6 +673,7 @@ rwalk->format = currcp->format; rwalk->interval = currcp->interval; rwalk->criteria = currcp->criteria; + rwalk->noalerts = currcp->noalerts; } } } To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk Hobbithobbyist I am not young enough to know everything. -Oscar Wilde

1 0

Bug in notify
by iqbala-hobbit＠qwestip.net 20 Mar '05

20 Mar '05

MAIL email1 at here.com email2 at here.com NOTICE NOALERT It only drops the second email address. Workaround is MAIL email1 at here.com NOTICE NOALERT MAIL email2 at here.com NOTICE NOALERT In otherwords it does not take two email address in one line Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change." - Charles Darwin

3 4

alerts still not alerting
by dan.mcdonald＠austinenergy.com 20 Mar '05

20 Mar '05

I'm still flummoxed by hobbit-alerts. I'm certain I broke something, because I am not getting any alerts from the box. The only logs in /var/log/hobbit/page.log are 2005-03-11 07:49:30 Tried to down BOARDBUSY: Invalid argument 2005-03-14 17:24:21 Tried to down BOARDBUSY: Invalid argument I see a couple of those in the hobbitlaunch.log file as well, I also see the following error: 2005-03-19 10:14:21 Task bbdisplay started with PID 7417 2005-03-19 10:14:21 Task bbretest started with PID 7418 2005-03-19 10:14:29 Our child has failed and will not talk to us 2005-03-19 10:14:36 Our child has failed and will not talk to us Not knowning which child makes it difficult to figure out what is going on. bbpage is aparently running - the logfile says process 5892 is bbpage, and there is a process 5892 still running. I fixed the "unmatched" syntax error I had before. Here is a sample host that is not paging. The info page lists: Alerting: Service Recipient 1st Delay Stop after Repeat Time of Day Colors conn dan.mcdonald at austinenergy.com (R) 30m - 5d - red telnet dan.mcdonald at austinenergy.com (R) 30m - 5d - red Both telnet and conn have been down on this host for over two hours. The salient rule is: HOST=%. MAIL=dan.mcdonald at austinenergy.com REPEAT=140h DURATION>30m RECOVERED COLOR="red" UNMATCHED I imagine I'm doing something terribly silly, but I'm just not clear what it might be.

3 2

[hobbit] Message alerts
by Kevin.Hanrahan＠novainfo.com 19 Mar '05

19 Mar '05

Nice idea...I will try it. Thanks KEvin -----Original Message----- From: Asif Iqbal [mailto:iqbala-hobbit at qwestip.net] Sent: Saturday, March 19, 2005 2:03 PM To: 'hobbit at hswn.dk' Subject: Re: [hobbit] Message alerts On Sat, Mar 19, 2005 at 12:03:51PM, Kevin Hanrahan wrote: > I hate the Windows event log! Is ther a way to centralize the "ignore > message" function in Hobbit? We get hammered with event log messages > about I am not sure if I understood your email but how about something like this cat script.sh #!/bin/sh PATTERN_FILE=${BBSERVERROOT}/server/etc/patterns echo "${BBALPHAMSG}" | $EGREP -f $PATTERN_FILE > /dev/null 2>&1 [ "$?" -ne 0 ] && { echo "${BBALPHAMSG}" | /bin/mailx -s "BB [$ACKCODE] $BBHOSTSVC is RED" $RCPT } exit 0 PATTERN file could be list of patterns--that can be put each on a separate line--that you don't want to be paged for. Then SCRIPT /path/to/script.sh user at here.com FORMAT=TEXT COLOR=red on your hobbit-alerts.cfg should may work. Again, I am answering based on what I assume you like to do. I might be totally wrong about your intension Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "..there are two kinds of people: those who work and those who take the credit...try to be in the first group;...less competition there." - Indira Gandhi To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this email and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this email. If you have received this email in error, please notify us immediately by replying to the message and delete the email from your computer. This e-mail is and any response to it will be unencrypted and, therefore, potentially unsecure. Thank you. NOVA Information Systems, Inc.

1 0

[hobbit] alerts still not alerting
by Dan.McDonald＠austinenergy.com 19 Mar '05

19 Mar '05

>> The salient rule is: >> HOST=%. >> MAIL=dan.mcdonald at austinenergy.com REPEAT=140h DURATION>30m >> RECOVERED COLOR="red" UNMATCHED > >Try this > > MAIL dan.mcdonald at austinenergy.com REPEAT=140h DURATION>30m > RECOVERED COLOR="red" UNMATCHED Made the change. Restarted hobbit. Added a new test - it turned red. Stayed red for 35 minutes. No alerts.

2 1

Message alerts
by Kevin＠ewormhole.com 19 Mar '05

19 Mar '05

I hate the Windows event log! Is ther a way to centralize the "ignore message" function in Hobbit? We get hammered with event log messages about every little thing that happens and most are just nonsense noise and trying to go and update 400+ windows servers about what to ignore every time a new event pops up is simply not practical. In addition, it seems the the Win client simply ignores some strings that you enter in the "ignore" field. I already thought of sending all the "msgs" notifications to a separate mailbox but trying to sort through 30000 messages each week is the definition of ridiculous. Any ideas welcome. Thanks Kevin P.S. The idea of deleting Windows has already occurred to me but I think the management might frown on that ;-)

2 1

[hobbit] Message alerts
by Kevin＠ewormhole.com 19 Mar '05

19 Mar '05

I did!...for just one day. I got a message from some manager who was all hot and bothered because she was not getting timely alerts or updates about server problems and demanded to be put on the alert list! I warned her several times that it might best for us sysadmins to let her know when there was a prob but she demanded to have alerts sent to her pager immediately....so I did as she asked. The next day she was begging to be taken off the alert list! It seem sthat she was kept up all night by her pager and got no sleep! Welcome to my world! -----Original Message----- From: McDonald, Dan [mailto:Dan.McDonald at austinenergy.com] Sent: Saturday, March 19, 2005 12:07 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Message alerts Importance: Low > I already thought of sending all the "msgs" notifications to a > separate mailbox but trying to sort through 30000 messages each week > is the definition of ridiculous. Any ideas welcome. >P.S. The idea of deleting Windows has already occurred to me but I >think the >management might frown on that ;-) Then I'd suggest you forward the messages to management's mailbox ;-) To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] Message alerts
by Dan.McDonald＠austinenergy.com 19 Mar '05

19 Mar '05

> I already thought of sending all the "msgs" notifications to a > separate mailbox but trying to sort through 30000 messages each > week is the definition of ridiculous. Any ideas welcome. >P.S. The idea of deleting Windows has already occurred to me but I think the >management might frown on that ;-) Then I'd suggest you forward the messages to management's mailbox ;-)

1 0

Can't get status messages
by Kevin.Hanrahan＠novainfo.com 19 Mar '05

19 Mar '05

I have just one machine that can't connect to the Hobbit server to deliver nessages. When I look in BBOUT I get this: Fri Mar 18 16:04:39 2005 bb-local.sh Fri Mar 18 16:04:39 2005 bb CAN'TFri Mar 18 16:09:38 2005 bb-memory.shFri Mar 18 16:09:3 9 2005 bb-local.sh Fri Mar 18 16:09:39 2005 bb CONNECTION TO 10.164.4.24 TIMED OUT... Fri Mar 18 16:09:39 2005 bb-local.sh Fri Mar 18 16:09:39 2005 bb CAN'T CFri Mar 18 16:14:38 2005 bb-memory.Fri Mar 18 16:14:3 9 2005 bb-local.sh Fri Mar 18 16:14:39 2005 bb CONNECTION TO 10.164.4.24 TIMED OUT... Fri Mar 18 16:14:39 2005 bb-local.sh Fri Mar 18 16:14:39 2005 bb CAN'T CONFri Mar 18 16:19:38 2005 bb-memorFri Mar 18 16:19:3 9 2005 bb-local.sh Fri Mar 18 16:19:39 2005 bb CONNECTION TO 10.164.4.24 TIMED OUT... I figured it was the firewall but I spoke with the firewalll guys and they proved that it wasn't. Got any ideas where I can look next? Thanks kevin Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this email and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this email. If you have received this email in error, please notify us immediately by replying to the message and delete the email from your computer. This e-mail is and any response to it will be unencrypted and, therefore, potentially unsecure. Thank you. NOVA Information Systems, Inc.

2 1