June 2005 - Xymon - Xymon mailman web

qpage
by Al.Jeffcoat＠orhs.org 14 Jun '05

14 Jun '05

Can someone tell me the format of adding qpage messages into the hobbit-alerts.cfg please? I have qpage working, and sending pages from CLI, but the following line in hobbit-alerts.cfg is not working for me: SCRIPT /usr/local/bin/qpage userid FORMAT=TEXT TIA __________________________________ Al Jeffcoat This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandoregional.org . If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Regional Healthcare by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Regional Healthcare.

4 3

Remove unwanted column
by caboyce＠rodney.govt.nz 14 Jun '05

14 Jun '05

Hi, I am using bbmrtg with Hobbit and decided to rename the bb*svc entries in the mrtg.cfg files to provide a more meaningful column name. I have deleted the old directories and files from the hobbit/data/histlog and hobbit/data/log directories but the old column will not disappear as I thought they would of. Is there another location/file that hobbit is building the page from that contains the old entry. Thanks Craig Boyce ##################################################################################### Disclaimer: The information in this electronic mail message is confidential and may be legally privileged. It is intended solely for the Addressee.Access to this internet electronic mail message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you have received this message in error please notify us immediately. Rodney District Council accepts no responsibility for any effects this email message or attachments has on the recipient network or computer system. #####################################################################################

2 1

Ldap on MS Active Directory Server
by mlowery＠alliedtechgroup.com 14 Jun '05

14 Jun '05

I have a Barracuda Spam firewall that relies on ldap lookups to determine if a recipient for a given e-mail is valid. I'd like to replicate what it is doing with Hobbit. The test that I'm running now will tell me if ldap is responding to queries, but I'd like to actually do a specific lookup for an e-mail address. The tests I have tried all return 0 entries, even though I know the user or e-mail exists. ##### Henrik wrote: ldap://10.2.165.108:389/ou=workoutusers,ou=WorkOutBase,o=sample.com??sub ?(uid=thomsonm) ##### I tried using the example Henrik gave, but it isn't working. I probably have to authenticate to bind to the ldap server (Windows 2000 Global Catalogue), but I'm not sure exactly how. I have tried: ldap://ldapserverip/dc=domain,dc=com ldap://ldapserverip/o=domain.com ldap://username:password at ldapserverip/dc=domain,dc=com ldap://username:password at ldapserverip/o=domain.com ldap://ldapserverip:389/ou=users,o=domain.com??sub?(uid=validuser) ldap://ldapserverip/dc=domain,dc=com?(objectclass=*) And about every other combination of these that I could think of. Some will return green, but if they do, they always say "yields 0 results". Any ldap gurus out there that can help me understand what I'm doing wrong. I've read the rfc on ldap urls, tried several of their examples, but I may be losing something in the translation (maybe I'm just not "getting" it). Thanks, Michael

1 0

[hobbit] Unexpected service response
by mlowery＠alliedtechgroup.com 13 Jun '05

13 Jun '05

It returns green too. The sendmail servers did log their disapproval, but they do to the method I had used as well. I added a "mail from:emailaddress" to it, and that seems to make everyone happy. [smtp] send "ehlo hostname.domainname.com\r\nmailfrom:hobbit at server.com\r\nquit\r\n" expect "220" options banner port 25 Michael Lowery -----Original Message----- From: Henrik Storner [mailto:henrik at hswn.dk] Sent: Friday, June 10, 2005 4:29 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Unexpected service response In <40534FFD21F8E9428DD8CCF2B60B09EC7C0C9D at atlitdc01.atg.local> "Lowery, Michael" <mlowery at alliedtechgroup.com> writes: [smtp flipping between green and yellow] >I have changed the smtp test to the following, and I get green, no >flapping between Yellow and green anymore in the history files either. >Is the test just wrong by default, or should I be concerned that I had >to change it from the default? > [smtp] > send "ehlo hostname.domainname.com\r\nquit\r\n" > expect "220" > options banner > port 25 The original test was the same as the BB way of testing. That is not to say it was "right", just to explain where I grabbed it from. Techically, the original test - which just sends "mail" and then "quit" - is improper; the "mail" command requires arguments, e.g. mail from: <some.email at address.net> so it isn't too surprising that some servers complain about it. I'm tempted to change it to [smtp] send "rset\r\nquit\r\n" expect "220" options banner port 25 and would like to hear if that also works with your setup. I think the reason for the "mail" command first was to please sendmail, which has a habit of logging connections that dont send a "mail" command (it generated a "NOQUEUE" entry in the log, but I dont know if it still does that). Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

Alert Mail only when sslcert fails
by nishioka＠rightnow.ne.jp 13 Jun '05

13 Jun '05

I am checking the expire date of an SSL certificate. I would like to receive alert mail only when sslcert test fails, but not when https connection test fails. If aforementioned setting is possible, please let me know how to configure hobbit-alerts.cfg. Also, I don't want hobbit to repeat the alert mail. I need only one alert for each failure when hobbit detects a problem.

1 0

[hobbit] Unexpected service response
by mlowery＠alliedtechgroup.com 10 Jun '05

10 Jun '05

Well, I've upgraded to Hobbit 4.0.4 and I'm still having smtp testing issues. I'm hoping someone can help me figure out why this is happening and guide me in the right direction. The problem is that I get Yellow results for a host that I'm running the smtp test on. The server is running postfix and I thought that information might be relevant, but it apparently isn't. This is happening on all my smtp servers, but this is the only host that remains Yellow. The others are always green, but have the same symptoms in their history files. The error I get is "Unexpected service response" on the hobbit page. In bb-services I have: [smtp] send "mail\r\nquit\r\n" expect "220" options banner port 25 In the hist file for the hosts, I get messages like the following: Wed Jun 8 23:20:11 2005 yellow 1118290811 38 Wed Jun 8 23:20:49 2005 green 1118290849 262 Wed Jun 8 23:25:11 2005 yellow 1118291111 38 Wed Jun 8 23:25:49 2005 green 1118291149 262 Wed Jun 8 23:30:11 2005 yellow 1118291411 38 Wed Jun 8 23:30:49 2005 green 1118291449 263 Wed Jun 8 23:35:12 2005 yellow 1118291712 20405 Thu Jun 9 05:15:17 2005 green 1118312117 302 Thu Jun 9 05:20:19 2005 yellow 1118312419 30 Thu Jun 9 05:20:49 2005 green 1118312449 268 Thu Jun 9 05:25:17 2005 yellow 1118312717 33 Thu Jun 9 05:25:50 2005 green 1118312750 267 Thu Jun 9 05:30:17 2005 yellow 1118313017 33 Thu Jun 9 05:30:50 2005 green 1118313050 268 Thu Jun 9 05:35:18 2005 yellow 1118313318 32 Thu Jun 9 05:35:50 2005 green 1118313350 268 Thu Jun 9 05:40:18 2005 yellow 1118313618 31 Thu Jun 9 05:40:49 2005 green 1118313649 269 Thu Jun 9 05:45:18 2005 yellow 1118313918 31 Thu Jun 9 05:45:49 2005 green 1118313949 272 Thu Jun 9 05:50:21 2005 yellow 1118314221 100607 Fri Jun 10 09:47:08 2005 green 1118414828 297 Fri Jun 10 09:52:05 2005 yellow 1118415125 10 Fri Jun 10 09:52:15 2005 green 1118415135 292 Fri Jun 10 09:57:07 2005 yellow 1118415427 20 Fri Jun 10 09:57:27 2005 green 1118415447 279 Fri Jun 10 10:02:06 2005 yellow 1118415726 31 Fri Jun 10 10:02:37 2005 green 1118415757 268 Fri Jun 10 10:07:05 2005 yellow 1118416025 44 Fri Jun 10 10:07:49 2005 green 1118416069 256 Fri Jun 10 10:12:05 2005 yellow 1118416325 49 Fri Jun 10 10:12:54 2005 green 1118416374 251 Fri Jun 10 10:17:05 2005 yellow 1118416625 56 Fri Jun 10 10:18:01 2005 green 1118416681 244 Fri Jun 10 10:22:05 2005 yellow 1118416925 1202 Fri Jun 10 10:42:07 2005 green 1118418127 299 Fri Jun 10 10:47:06 2005 yellow 1118418426 55 Fri Jun 10 10:48:01 2005 green 1118418481 244 Fri Jun 10 10:52:05 2005 yellow 1118418725 61 Fri Jun 10 10:53:06 2005 green 1118418786 243 Fri Jun 10 10:57:09 2005 yellow 1118419029 62 Fri Jun 10 10:58:11 2005 green 1118419091 239 Fri Jun 10 11:02:10 2005 yellow 1118419330 11 Fri Jun 10 11:02:21 2005 green 1118419341 286 Fri Jun 10 11:07:07 2005 yellow 1118419627 25 Fri Jun 10 11:07:32 2005 green 1118419652 273 Fri Jun 10 11:12:05 2005 yellow 1118419925 41 Fri Jun 10 11:12:46 2005 green 1118419966 259 Fri Jun 10 11:17:05 2005 yellow 1118420225 51 Fri Jun 10 11:17:56 2005 green 1118420276 249 Fri Jun 10 11:22:05 2005 yellow 1118420525 10703 Any help is greatly appreciated. Thanks, Michael -----Original Message----- From: Lowery, Michael Sent: Tuesday, June 07, 2005 8:00 AM To: hobbit at hswn.dk Subject: RE: [hobbit] Unexpected service response Ok, this may have been a stupid question, I don't know. But after further investigations, I see that this happens quite a bit on the other SMTP servers as well, they just report it occasionally and not long enough for me to be notified. There is only one host that constantly reports this. Is there something I should change in the way the test works to avoid getting the "Unexpected service response" message? Thanks, Michael -----Original Message----- From: Lowery, Michael Sent: Monday, June 06, 2005 1:51 AM To: hobbit at hswn.dk Subject: [hobbit] Unexpected service response I've never had a problem with the SMTP test before. Now, testing a postfix mail server, I get a Yellow alert, and the page says: Service smtp on mail.domain.com is not OK : Unexpected service response 501 Syntax error in parameters or arguments I can telnet to port 25 on this server with no problems from the hobbit server, I get a 220 message upon connect. Here is exactly what I get (names and IPs changed to protect the innocent). So what can be the problem here? [root at hobbit etc]# telnet mail.domain.com 25 Trying 20.30.40.51... Connected to adsl-20-30-40-51.dsl.hometown.isp.net (20.30.40.51). Escape character is '^]'. 220 SMTP service ready Thanks, Michael To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

Current development plans
by henrik＠hswn.dk 10 Jun '05

10 Jun '05

It seems version 4.0 has reached some stability - there are still a few odd bug reports, but nothing that looks like major problems. So I thought it would be worthwhile to let you know what my plans are. First, I'm currently pretty busy with other stuff so questions raised here are not being answered as quickly as I'd like to. Rest assured that they have not been forgotten, and I will look at all of the reports and questions - but probably not very much for the next week or so. I'm currently working on a 4.0.5 release which will be a performance- improvement release. The current Hobbit code has a flaw in the alert- module, that makes it use much more CPU time than it should - especially if you have a large number of statuses that are in an alert state, but which do not have any recipients defined in hobbit-alerts.cfg. This will be released sometime in June. But summer is upon us, and that means less development activity - so things will slow down as the temperature rises. So don't expect a lot of activity during the summer. When I pick up speed again, I haven't yet decided if I should go for the alert/acknowledge improvements that I've talked about for some time, or if I should tackle the issue of a Hobbit client and get that into a reasonable shape for the more common platforms. I have some ideas for a rather different client architecture than the current one, and the client is also *the* missing piece of the whole Hobbit puzzle - so I could be tempted to get that done. I'd like some feedback on what you find most urgent. Regards, Henrik

10 12

[hobbit] Current development plans
by U.Kirbach＠EnBW.com 10 Jun '05

10 Jun '05

Hello Henrik and all on the list, i would like to suggest one addition to the server part of hobbit: - a replacement for larrd-graphs from Tom Schmidt tschmidt at micron.com (from deadcat.net) because i like to compare several RRD graphs from some hosts It's sometime good, if you have a strange situation on some of your hosts and you look for their behaviour in the past. Many thanks for your work Mit freundlichen Grüßen Uwe Kirbach -- Uwe Kirbach EnBW Service GmbH Betrieb Enterprise Systeme und Infrastruktur Systemmanagement Unix Durlacher Allee 93 76131 Karlsruhe Tel: +49 (0)721-63-14139

1 0

[hobbit] Current development plans
by craig＠cookitservices.com 10 Jun '05

10 Jun '05

Okay, here is some more info from the author... ---- http://madstop.com/svn/libmetrics/ At this point it's just about pulled directly out of ganglia, although I've added a bit so it actually acts like a library interface -- your code doesn't need to know as much about the internals. It should be straightforward to build a client around this code. > This post just came up on the hobbitmon mailing list: > > <snip> > So my idea currently is to design a new type of client. It won't generate > "status" > messages, it will just collect data. Imagine a client that just sends Hobbit a > "client data" package, like [...] This shouldn't be difficult to do, but it's just about exactly what ganglia already does. Unfortunately, ganglia is relatively special-purpose and thus won't scale to doing other tasks like sending alerts, but it already sends all of its data to a central node, and you can easily configure aggregation nodes that then send the rest of the data further upstream. It's a pretty slick system for getting graphs of data, and because it's all XML you can easily parse the data and do whatever else you want with it. > I think it is the same concept at the metric thing I am thinking about. > It may be a development shortcut... I highly recommend spending an hour or so getting ganglia working, just so you understand it and know how much it can already do. I don't know how much you're hoping to accomplish on the client, but ganglia might suffice. In general, I agree that for many cases it makes sense for clients to push performance data to the server, especially for info that can only be collected locally like disks, as long as you have some process on the server that causes an alert if it hasn't heard from the client recently. The reason I split the libmetrics stuff out (and no one else is actually using it at this point, although the ganglia people have expressed interest in coding to the library instead of what they have) is because I'm planning on using it eventually in puppet, so that puppet could actually collect these stats as one of its tasks and then make them available via SOAP or something. At some point your config mgmt tools will have to integrate with your monitoring tools, so that you can do things like respond to high or low loads, so I'm just thinking a bit ahead on that. ---- Craig Cook -- Systems Monitoring Consulting and Support Services http://www.cookitservices.com

1 0

[hobbit] Current development plans
by craig＠cookitservices.com 10 Jun '05

10 Jun '05

That client style sounded familiar... This may be what you are looking for: http://sourceforge.net/projects/libmetrics It is a metrics library that has been extracted from a larger tool http://ganglia.sourceforge.net/ Does not have any files though, I'm checking on the status now. May save a lot of work... Craig Cook -- Systems Monitoring Consulting and Support Services http://www.cookitservices.com

1 0