January 2006 - Xymon - Xymon mailman web

Disk test not turning red
by rsmrcina＠wi.rr.com 10 Jan '06

10 Jan '06

I have Hobbit 4.1.2 running on varying SLES8 and SLES9 systems. A Hobbit client reports the following (in the client data): [df] Filesystem 1024-blocks Used Available Capacity Mounted on /dev/dasda1 788632 670344 78228 90% / /dev/dasdb1 1559000 1479812 0 100% /opt shmfs 322136 0 322136 0% /dev/shm The disk test for this system shows the same information. There is nothing in the hobbit-clients for this host that would change how the disk test is reported. I do have this coded in the file (the host in question is waspr1): HOST=waspr1 MEMACT 98 99 The disk test happily shows green even though it is clear that the /opt file system is full. -- Rich Smrcina VM Assist, Inc. Main: (262)392-2026 Cell: (414)491-6001 Ans Service: (360)715-2467 rich.smrcina at vmassist.com Catch the WAVV! http://www.wavv.org WAVV 2006 - Chattanooga, TN - April 7-11, 2006

1 0

hobbit client configuration.
by tlp-hobbit＠holme-pedersen.dk 09 Jan '06

09 Jan '06

Hi All, I am looking at some strange behaviour of the client part. I have 2 servers with the hobbit client. In the hobbit-clients.cfg file I have written the following HOST=myserver1.domain.com PROC heartbeat 7 PROC syslogd PROC cron PROC sshd PROC httpd PROC ipvs the same for both servers. Now if I go to the proc page I see "No process checks defined" and only in the event of an error does the right client configuration appear on the page, but only for a second after which it goes bach to "No process checks defined". Running clients and servers on RHEL3 using hiobbit 4.1.2.p Any thoughts ? Regards, Thomas

1 0

maint.pl - enadis.cgi
by Schrittenlocher＠rz.uni-frankfurt.de 09 Jan '06

09 Jan '06

Hi, in ~/hobbit/help/manpages/man1/bb.1.html: notify HOSTNAME.TESTNAME <message text> Hobbit only, not supported by BB. This triggers an informational message to be sent to those who receive alerts for this HOSTNAME+TESTNAME combination, according to the rules defined in /hobbit-alerts.cfg <http://lbscgi2.rz.uni-frankfurt.de/hobbit/help/manpages/man5/hobbit-alerts.…>(5)/ This is used by the Hobbit *maint.pl* script to notify people about hosts being disabled or enabled, but can also serve as a general way of notifying server administrators. I think maint.pl is replaced by hobbit-enadis.cgi and this should be corrected? -- Mit freundlichen Gruessen Rolf Schrittenlocher HRZ/BDV, Senckenberganlage 31, 60054 Frankfurt Tel: (49) 69 - 798 28908 Fax: (49) 69 798 2881 LBS: lbs-f at mlist.uni-frankfurt.de Persoenlich: schritte at rz.uni-frankfurt.de

2 1

apache graphs on http page?
by bgmilne＠staff.telkomsa.net 09 Jan '06

09 Jan '06

I have the apache trend graphs working (ie they show up on the trends page for hosts configured for it), but I was wondering if it was possible to have the http page have not only the tcp response time graph, but the trend graphs as well. GRAPHS:*,http:apache|apache1|apache2|apache3 doesn't seem to work ... Adding "http=apache" to TEST2RRD in hobbitserver.cfg also didn't help. Regards, Buchan -- Buchan Milne ISP Systems Specialist B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592)

2 3

Multiple hostnames - CLIENT:hostname
by Schrittenlocher＠rz.uni-frankfurt.de 09 Jan '06

09 Jan '06

Hi, we are using virtual hostnames which are often transferred from one machine to another. So database.server and web.server might be hosted today on machine A and tomorrow on machine B. One machine can have several virtual hosts, each of them related to a service. We want hobbit to present all common data (like ssh, conn) for all these hosts ($hostname and virtual hosts A and B) and we want the client to send data to the server using specific hostnames (e.g hostname xxx for external script A and hostname yyy for external script B). How do I change the client's name before sending a message by an external script? How can common data be presented for several hosts? I've seen the possibility to add "CLIENT:hostname" to bb-hosts. But I think that is not what we need. We don't want to change the hostname, but to present the same data send by a client by different names (more than one). Thanks for your help! kind regards Rolf -- Mit freundlichen Gruessen Rolf Schrittenlocher HRZ/BDV, Senckenberganlage 31, 60054 Frankfurt Tel: (49) 69 - 798 28908 Fax: (49) 69 798 2881 LBS: lbs-f at mlist.uni-frankfurt.de Persoenlich: schritte at rz.uni-frankfurt.de

1 0

[hobbit] Network tests stopped graphing
by adam.scheblein＠marquette.edu 06 Jan '06

06 Jan '06

Also, I was wondering if this may have any bearing on the situation: 16677 hobbit 25 0 2896 1328 604 R 92.6 0.3 1:21.78 hobbitd_client As you can see, my hobbitd_client frequently goes up to 98 percent and normally does not go any lower than 60 percent. Could this be causing some type of bottleneck that is causing problems with the graphing? Thanks, Adam -----Original Message----- From: Scheblein, Adam [mailto:adam.scheblein at marquette.edu] Sent: Friday, January 06, 2006 9:47 AM To: hobbit at hswn.dk Subject: RE: [hobbit] Network tests stopped graphing I was using an old bb command from my previous bb installation, I found the correct one and when I use it all it gives me is about 7 lines of blank space. The rrd files seem to be updating, but I am getting an error in my rrd-status.log file 2006-01-06 07:24:20 RRD error updating /usr/local/hobbit/data/rrd/HOSTNAME/tcp.ftp.rrd from 134.48.22.240: illegal attempt to update using time 1136553860 when last update time is 1136553860 (minimum one second step) And this keeps repeating in the past The messages that are coming through using the bbcmd listener look like: @@status#171614|1136561819.575708|134.48.20.42||HOSTNAME|memory|11365636 19|green||green|1136389790|0||0| status HOSTNAME.memory green Fri Jan 6 08:26:06 CST 2006 - Memory OK Memory Used Total Percentage &green Physical 980M 1024M 95% &green Swap 85M 1664M 5% Thanks, Adam -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thursday, January 05, 2006 4:31 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Network tests stopped graphing On Thu, Jan 05, 2006 at 03:31:29PM -0600, Scheblein, Adam wrote: > Henrik, > > I have noticed that I am starting to have similar problems, however they > are with the memory graphs and when I try to do bb 127.0.0.1 > "hobbitdboard host=HOSTNAME fields=msg" (replacing HOSTNAME with the > hostname) I get the following error: > > bb: Can't open 127.0.0.1 I don't know which "bb" command you're using, but that error message does not look like anything that I wrote in the Hobbit "bb" utility. In fact, I checked and henrik at osiris:~/hobbit$ grep -i "can.t open" */*.c finds no matches in my Hobbit sources. A connect-error should give you either "connect to bbd failed - <OS errortext>" or "Could not connect to bbd@<some more text>" I think those two observations are un-related. Are your memory RRD files being updated ? If not, are there any errors in the rrd-status.log file? If you run (as the hobbit user) bbcmd hobbitd_channel --channel=status grep -A 10 "^@@.*|memory|" do any memory status updates appear for these hosts, and what do they look like ? Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Bug report
by michael_frey＠glic.com 06 Jan '06

06 Jan '06

Linux rh7.2 system. Core was generated by `hobbitd_client'. Program terminated with signal 6, Aborted. #0 0x40046a01 in ?? () (gdb) bt #0 0x40046a01 in ?? () #1 0x40047f82 in ?? () #2 0x40046848 in ?? () #3 0x08054b50 in ?? () #4 0x08049fd7 in ?? () #5 0x74203031 in ?? () Cannot access memory at address 0x3a303220 (gdb) Michael Frey ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

1 0

Using time in alerts
by JamesHorwath＠glic.com 06 Jan '06

06 Jan '06

It appears using times for alerting is not working as I expect. I have this rule: HOST=$MY_HOSTS MAIL $UnixEmail SERVICE=$UnixServices REPEAT=15m RECOVERED TIME:1-5:0800:1659 MAIL $UnixEmail SERVICE=$UnixServices REPEAT=60m RECOVERED TIME:1-5:0000:0759,1-5:1700:2359 MAIL $UnixEmail SERVICE=$UnixServices REPEAT=60m RECOVERED TIME:06:0000:2359 Based on these rules I would expect only one rule match at any time. But when I run the command: /usr/local/hobbit/server/bin/bbcmd hobbitd_alert --test jimhost cpu I receive a message saying it matched three times. Shouldn't the time token apply to the rule? Please advise, Jim ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

2 1

Excluding alerts
by JamesHorwath＠glic.com 06 Jan '06

06 Jan '06

I have hobbit monitoring AIX servers. On the servers I am running bb clients to send data to the Hobbit server. On of the tests I am doing it a errpt, which lists system software and hardware errors. Although I want to see a red status on the hobbit page I do not want to be paged for the alert. How do I disregard the alert. Here is what I have defined: $UnixServices=disk,inode,emc,memory,ssh,telnet,ftp,!errpt,!cpu HOST=$MY_HOST MAIL $MyPager SERVICE=$UnixServices REPEAT=15m RECOVERED TIME:1-5:0800:1659 MAIL $MyPager SERVICE=$UnixServices REPEAT=60m RECOVERED TIME:1-5:0000:0759,1-5:1700:2359 MAIL $MyPager SERVICE=$UnixServices REPEAT=60m RECOVERED TIME:06:0000:2359 I would expect this to page on disk, inode, emc, memory, ssh and telnet. It should ignore errpt and cpu. What am I missing? Regards, Jim ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

1 0

Excluding alert
by JamesHorwath＠glic.com 06 Jan '06

06 Jan '06

I have hobbit monitoring AIX servers. On the servers I am running bb clients to send data to the Hobbit server. On of the tests I am doing it a errpt, which lists system software and hardware errors. Although I want to see a red status on the hobbit page I do not want to be paged for the alert. How do I disregard the alert. Here is what I have defined: $UnixServices=disk,inode,emc,memory,ssh,telnet,ftp,!errpt,!cpu HOST=$MY_HOST MAIL $MyPager SERVICE=$UnixServices REPEAT=15m RECOVERED TIME:1-5:0800:1659 MAIL $MyPager SERVICE=$UnixServices REPEAT=60m RECOVERED TIME:1-5:0000:0759,1-5:1700:2359 MAIL $MyPager SERVICE=$UnixServices REPEAT=60m RECOVERED TIME:06:0000:2359 I would expect this to page on disk, inode, emc, memory, ssh and telnet. It should ignore errpt and cpu. What am I missing? Regards, Jim ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

1 0