May 2005 - Xymon - Xymon mailman web

support for Windows systems
by sblee＠tazmania.org 09 May '05

09 May '05

Since Hobbit can use the BB client, can it be used to actually monitor Windows clients (NT,W2K, XP)? I ask because the man page for BB-Host for BB lists a "svcs" service but I haven't seen any mention of one for Hobbit. Part of our migration from BB to Hobbit requires monitoring a syslog application on our Windows platforms.

2 1

[hobbit] support for Windows systems
by MilburnJA＠dot.il.gov 09 May '05

09 May '05

Hit send too fast. It will monitor Windows services. The client has a nice GUI config program. You just pick the services to monitor. -----Original Message----- From: Sue Bauer-Lee [mailto:sblee at tazmania.org] Sent: Monday, May 09, 2005 1:32 PM To: hobbit at hswn.dk Subject: [hobbit] support for Windows systems Since Hobbit can use the BB client, can it be used to actually monitor Windows clients (NT,W2K, XP)? I ask because the man page for BB-Host for BB lists a "svcs" service but I haven't seen any mention of one for Hobbit. Part of our migration from BB to Hobbit requires monitoring a syslog application on our Windows platforms. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] support for Windows systems
by MilburnJA＠dot.il.gov 09 May '05

09 May '05

I am using the BB Client to monitor about 300 Windows servers (NT4,Win3k and 2003). -----Original Message----- From: Sue Bauer-Lee [mailto:sblee at tazmania.org] Sent: Monday, May 09, 2005 1:32 PM To: hobbit at hswn.dk Subject: [hobbit] support for Windows systems Since Hobbit can use the BB client, can it be used to actually monitor Windows clients (NT,W2K, XP)? I ask because the man page for BB-Host for BB lists a "svcs" service but I haven't seen any mention of one for Hobbit. Part of our migration from BB to Hobbit requires monitoring a syslog application on our Windows platforms. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Apache Performance Monitoring
by Alexander.Sprotte＠eventim.de 09 May '05

09 May '05

Hi, i change from bigbrother to hobbit and it's running great. I check 200 Servers and Network devices. But i have problems with the apache performance monitoring. I add "apache=http://www.xxxxx.com/server-status?auto LARRD:*,apache:apache1|apache2|apache3" to the bb-host then crasht Hobbit (bbtest). (Hobbit checks the http stat of the same Server) I can received the Apache Status from the Hobbit Server with lynx but not with Hobbit. What's wrong ? I use Hobbit 4.0.3rc2 on SuSE 9.2 with Apache 2, SSL library : OpenSSL 0.9.7d 17 Mar 2004, LDAP library: OpenLDAP 20215. I have install all Modules (like pcre, libpng). Alexander Sprotte ------------------------------------------------------ (sorry 4 my bad English)

2 1

[hobbit] http test bug?
by v.everett＠afgonline.com.au 09 May '05

09 May '05

Makes sense. Is there any way (besides a custom script) to check content of a web page? http://www.mywebpage.com/users/special.html must contain the string "XXXXX" or must return output matching file /dir/samples/sample_match. In the particular case below, although the web server was up, the web application was classified as down. (An error caused it to prompt for username and password) Cheers Vernon P.S. The offer of those cold ones still stands. :-) Hobbit is an amazing tool. You have no idea how much kudos I have received for it. We can predict issues, pre-empt problems, and monitor almost anything automatically. I wonder how I ever managed without it. -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Monday, 9 May 2005 1:40 PM To: hobbit at hswn.dk Subject: Re: [hobbit] http test bug? On Mon, May 09, 2005 at 11:59:00AM +0800, Vernon Everett wrote: [http response 401 (Unauthorized) gives a green http status] This is deliberate. The purpose of the test is to determine if the web server is working, and sending back a 401 status (which in a browser would trigger a pop-up to enter a username+password) is sufficient indication that the server is indeed working. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.

2 1

[hobbit] Help with graphing
by v.everett＠afgonline.com.au 09 May '05

09 May '05

Hi Henrik Thanks This helped me a lot. I got the graph working, but it's very busy. I need to split this over 2, or even 3 graphs. However, before I bug you any more, I would love to RTFM, as you say. > I'd advise anyone trying to do custom graphs to read the "rrdcreate" > man-page from RRDtool. Here you'll find this: However, I found this. :-( ---snip--- Not Found The requested URL /hobbit/help/manpages/man1/rrdcreate.1.html was not found on this server. Apache/2.0.54 (Debian GNU/Linux) PHP/4.3.10-13 mod_ssl/2.0.54 OpenSSL/0.9.7e Server at www.hswn.dk Port 80 ---snip--- If you get the time, could you repair it? Cheers, and thanks Vernon -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, 6 May 2005 4:02 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Help with graphing On Fri, May 06, 2005 at 02:45:29PM +0800, Vernon Everett wrote: > /var/lib/hobbit/rrd/aufin2/tablespace.rrd: can't parse argument > 'DS:siebprod.XDB:GAUGE:600:0:100' [snip] > /var/lib/hobbit/rrd/aufin2/tablespace.rrd: can't parse argument > 'DS:siebprod_LOADER_DATA:GAUGE:600:0:100' I'd advise anyone trying to do custom graphs to read the "rrdcreate" man-page from RRDtool. Here you'll find this: A ds-name must be 1 to 19 characters long in the characters [a-zA-Z0-9_]. [no graphs show up] > My hobbitgraph.cfg entry for this looks like this. > > ---snip--- > [ora9-sga] > FNPATTERN tablespace(.*).rrd > TITLE TableSpace Utilization > YAXIS % Full > DEF:p at RRDIDX@=@RRDFN@:pct:AVERAGE The DEF: line here is wrong. The "pct" here is the name of the dataset you want to graph - the same string that you use in the "DS:" definition of the RRD file. So to get a graph of the siebprod_XDB data, you should have DEF:p at RRDIDX@=@RRDFN@:siebprod_XDB:AVERAGE LINE2:p at RRDIDX@#@COLOR@:@RRDPARAM@ If you want to graph more than one dataset in a single image, you just add more DEF and LINE entries - but make sure you keep a unique name for each of the DEF's you define. E.g. DEF:whsidx at RRDIDX@=@RRDFN@:siebprod_WHS_INDEX:AVERAGE DEF:whsdata at RRDIDX@=@RRDFN@:siebprod_WHS_DATA:AVERAGE LINE2:whsidx at RRDIDX@#@COLOR@:@RRDPARAM@ LINE2:whsdata at RRDIDX@#@COLOR@:@RRDPARAM@ But that is usually not a good idea when you are also combining multiple RRD files into one graph. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.

3 2

http test bug?
by v.everett＠afgonline.com.au 09 May '05

09 May '05

Hi Henrik Might have a bug here. In my bb-hosts, I have the following line 192.168.0.8 afgweb01 # http://afgweb01.afgonline.com.au/test However, the http test returns green all the time, even when the service was down. When I clicked on the green diamond, I got this ---snip--- http://afgweb01.afgonline.com.au/test - OK HTTP/1.1 401 Access Denied Server: Microsoft-IIS/5.0 Date: Mon, 09 May 2005 03:19:15 GMT WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Connection: close Content-Length: 24 Content-Type: text/html Seconds: 0.00 ---snip--- Should this not have been displaying as red? Cheers Vernon _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.

2 1

bb-sar
by v.everett＠afgonline.com.au 09 May '05

09 May '05

Hi Has anybody managed to get the graphing working with bb-sar (as downloaded from deadcat)? Cheers Vernon _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.

1 0

[hobbit] No graph of nmailq-bf.sh
by soumya＠in-corporate.pacenet-india.com 08 May '05

08 May '05

Hi I have following files. 38532 Apr 24 13:41 disk,boot.rrd 38532 Apr 24 13:41 disk.rrd 19548 Apr 24 13:41 la.rrd 19548 Apr 24 13:41 mailq.rrd 19548 Apr 24 13:41 memory.actual.rrd 19548 Apr 24 13:41 memory.real.rrd 19548 Apr 24 13:41 memory.swap.rrd 304308 Apr 24 13:41 netstat.rrd 19548 Apr 24 13:41 procs.rrd 114468 Apr 24 13:41 sendmail.0.rrd 19548 Apr 24 13:39 tcp.conn.rrd 19548 Apr 24 13:39 tcp.ssh.rrd 19548 Apr 24 13:41 users.rrd 323292 Apr 24 13:39 vmstat.rrd -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sunday, April 24, 2005 1:13 PM To: hobbit at hswn.dk Subject: Re: [hobbit] No graph of nmailq-bf.sh On Sun, Apr 24, 2005 at 12:37:28PM +0530, Soumya K. Das wrote: > Nope...still not showing... have a look at the code below... > This is the mailq section of hobbitgraph file > [mailq] > FNPATTERN mailq(.*).rrd What RRD files do you have in the ~hobbit/server/data/rrd/HOSTNAME/ directory ? > Don't you think the @RRDFN@ should be requests instead of "requests" or > "total requests:" Nope - at the point where hobbitgraph.cfg gets involved, it doesn't look at the original status message any more. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

3 7

NK allevents log
by brianlynch＠gmail.com 08 May '05

08 May '05

Henrik, Would it be possible to create a log of only NK events? We currently use bbgen views to present a limited view to our NOC (via the bbgen ignore strings) and then use a custom php program to parse the allevents log and only pick out events that would have shown up on their view. We use this as a metric to track successful escalation of alerts. I'm considering switching to the NK model, but it would require a more complex program to identify NK alerts. Any thoughts? Thanks, Brian PS. Switching live to clustered hobbit in 2 weeks! Thanks for all your hard work!

3 2