July 2005 - Xymon - Xymon mailman web

Handling SNMP traps with Hobbit
by Andy.Farrior＠victoriacollege.edu 18 Jul '05

18 Jul '05

My technicians have been bugging me about wanting to receive SNMP traps from various equipment. The only references to SNMP traps and Hobbit I could find were forwarding Hobbit events as SNMP traps to NMS servers like OpenView or something. I don't have either; so I've tried to implement SNMP trap handling with Hobbit using an external perl script, snmptrapd, SNMPTT, and SEC. I've put my configuration notes here if you're interested: http://cerebro.victoriacollege.edu/hobbit-trap.html If you find something grossly wrong, let me know. thanks, andy

3 2

Release candidate 4.05 compilation errors
by lars.ebeling＠leopg9.no-ip.org 18 Jul '05

18 Jul '05

Hi, got this: cc -o hobbitd_rrd hobbitd_rrd.o hobbitd_worker.o do_rrd.o ../lib/libbbgen .a -L/usr/local/lib -lrrd -L/usr/local/lib -lz -lm -L/usr/local/lib -lpcre -lnsl /usr/ccs/bin/ld: Unsatisfied symbols: strtoll (code) collect2: ld returned 1 exit status makeÄ1Å: *** Ähobbitd_rrdÅ Error 1 makeÄ1Å: Leaving directory é/home/hobbit/hobbit-4.0.5RC1/hobbitd' make: *** Ähobbitd-buildÅ Error 2 $ Regards Lars Ebeling http://leopg9.no-ip.org Hobbithobbyist "Never run after your own hat. Others will be delighted to do it; why spoil their fun?" -- Mark Twain

1 0

[hobbit] Handling SNMP traps with Hobbit
by Andy.Farrior＠victoriacollege.edu 16 Jul '05

16 Jul '05

I've updated the trap.pl script to read from hobbitdboard. let's try that again. http://cerebro.victoriacollege.edu/hobbit-trap.html thanks, Andy

1 0

[hobbit] Host info screen question
by Al.Jeffcoat＠orhs.org 16 Jul '05

16 Jul '05

Bah... Stupid typo... Thanks for pointing it out to me... You've no idea how long I looked at the one that works, and then looked at the one that didn't work, and missed that... Al __________________________________ Al Jeffcoat -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, July 15, 2005 5:31 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Host info screen question On Fri, Jul 15, 2005 at 04:41:43PM -0400, Jeffcoat, Al wrote: > On another host, we had put in a DESCR previously as a test, and removed > it today when I put in the DOWNTIME tag. Now, on the info tab for that > system, it did remove the Description, but is not putting the DOWNTIME > tag in the same place as the other "working" downtime tags. However, on > the bottom of this page, it has "Other tags:ftp telnet > DOWNTIME:0:1930:2000", so I'm assuming that Hobbit knows about the > downtime. If it's not listed as a downtime-setting, Hobbit doesn't recognize it as such. The "other tags" is basically just a list of all unknown (to Hobbit) tags defined for this host - e.g. for custom tests you have enabled for this host. Check the syntax. If it's as you wrote, then it's wrong: It should be "DOWNTIME=....", not "DOWNTIME:". Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandoregional.org . If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Regional Healthcare by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Regional Healthcare.

1 0

[hobbit] Handling SNMP traps with Hobbit
by Andy.Farrior＠victoriacollege.edu 16 Jul '05

16 Jul '05

-----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sat 7/16/2005 2:22 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Handling SNMP traps with Hobbit >Instead of reading the checkpoint file, I'd query the hobbit daemon >directly. You do this with the bb client tool and the "hobbitdboard" >command. E.g. to fetch the hostname and expiry-time for all "trap" >statuses you can do this: > $BB $BBDISP "hobbitdboard test=trap fields=hostname,validtime" >The output looks like this: > adsl.hswn.dk|1121498714 > backup-mx.post.tele.dk|1121498714 > www.sslug.dk|1121498623 I should have known you could do something like that with Hobbit.... I'll play with that. (There was a voice in the back of my head that told me not to use the checkpoint file, but I didn't know what else to use. must read all docs...) Thanks. >Another - perhaps more elegant - solution is to change Hobbit so >that you can send a status-message that does not expire. I'd be >willing to implement such a change since it does make sense for >this kind of integration with other systems. (I have a similar >problem on my system where it receives e-mails instead of SNMP >traps). However, then you will not get any indication if your >SNMP module stops working, so each method has its benefits and >drawbacks. For now, I think I'll try using long LIFETIME values like 24h or 48h and set the status to "no traps to report" after that time period. >My Perl skills are really poor, so I'd love it if you could >change the trap.pl script to use the hobbitdboard command instead >of the checkpoint file. I *should* have something by Monday. thanks Henrik! Andy

1 0

NKTIME and DOWNTIME
by Al.Jeffcoat＠orhs.org 15 Jul '05

15 Jul '05

Hello All, I have a question regarding NKTIME and DOWNTIME. If a host has a specified DOWNTIME, and also has a specified NK:test, do I need to also specify an NKTIME? Or does the DOWNTIME cover both pieces? What I don't want is for a test to show up on the NK page during a normal downtime. I've specified downtime, so that a tech doesn't get a page, but some tests are also on the NK view for executives to see. Thank you __________________________________ Al Jeffcoat This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandoregional.org . If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Regional Healthcare by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Regional Healthcare.

2 1

Looking at Hobbit, have a few questions
by steve.aiello＠ge.com 15 Jul '05

15 Jul '05

Is there a maillist archive, I am sure others have had the same questions as me. We currently use BigBrother, and have a bbclient on most of our servers. I see hobbit has a young/alpha client only for BSD. Could I just use the BigBrother client to send data to a hobbit server ? We currently have Solaris, Linux, & windows servers to be monitored. Thanks, Steven

2 1

[hobbit] Looking at Hobbit, have a few questions
by Larry.Barber＠usda.gov 15 Jul '05

15 Jul '05

The BigBrother client will work fine with hobbit. Thanks, Larry Barber On Fri, 2005-07-15 at 13:25 -0500, steve.aiello at ge.com wrote: > Is there a maillist archive, I am sure others have had the same > questions as me. > > We currently use BigBrother, and have a bbclient on most of our > servers. > I see hobbit has a young/alpha client only for BSD. Could I just use > the > BigBrother client to send data to a hobbit server ? We currently have > Solaris, Linux, & windows servers to be monitored. > > Thanks, > Steven > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

1 0

Need some pointers on logrotate script..
by hobbit＠visions.se 15 Jul '05

15 Jul '05

Hey, Trying to fix so that my logrotate will add a line at the top after each rotation so that /var/log/messages file wont be empty (dont want to disable lenght checking through bb client - since the log might be emptied if a box is hacked). This is how my /etc/logrotate.d/syslog looks like: /var/log/messages /var/log/secure /var/log/maillog /var/log/spooler /var/log/boot.log /var/log/cron { sharedscripts postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true endscript } This is what I think I should change it to (never touched these kinda files before): /var/log/messages { postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true echo '### This file has been rotated by logrotate ###' >> /var/log/messages endscript } /var/log/secure /var/log/maillog /var/log/spooler /var/log/boot.log /var/log/cron { sharedscripts postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true endscript } Will this work? Thanks in advance for any advice :)

1 0

[hobbit] Page, subpage directives
by mlowery＠alliedtechgroup.com 15 Jul '05

15 Jul '05

Great! Saves a lot of typing... :-) Thank you for your help!! Michael -----Original Message----- From: Henrik Storner [mailto:henrik at hswn.dk] Sent: Friday, July 15, 2005 9:37 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Page, subpage directives In <11A68CB62CC8384C847633FE841BFF60017E0D at atlitswing.atg.local> "Lowery, Michael" <mlowery at alliedtechgroup.com> writes: >Is it possible to put a directive such as NKTIME or DOWNTIME or >REPORTTIME as a page or subpage directive to act globally for everything >underneath it? You can do it with the ".default." host. Like this: page somepage This is a page # Define defaults for all hosts that follow this, until the next .default. host 0.0.0.0 .default. # DOWNTIME=0:0200:0600 NKTIME=W:0900:1700 10.0.0.1 host1.foo.com # ssh 10.0.0.2 host2.foo.com # ftp 0.0.0.0 .default. This was added in Hobbit 4.0.2. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0