January 2006 - Xymon - Xymon mailman web

[hobbit] linux version
by KauffmanT＠nibco.com 06 Jan '06

06 Jan '06

Not to start a distro war - But I've had no problems with SuSE 8.2, 9.0 and SUSE 9.3. I'm planning to go to SLES 9 in another month or so. Tom ________________________________ From: Michael Frey [mailto:michael_frey at glic.com] Sent: Friday, January 06, 2006 11:00 AM To: hobbit at hswn.dk Subject: [hobbit] linux version I have had a linux rh 7.3 server running, and have had issues with the history graphs. I tried to upgrade to Fedora C3, bit that looks to be missing some important pieces. What would be the recommended version of Linux to avoid all of these isuues? Redhat 9? Thanks Michael Frey ________________________________ This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

5 12

Alerting and regular expression
by JamesHorwath＠glic.com 06 Jan '06

06 Jan '06

I am converting from BB to Hobbit, Hobbit is a really nice piece of code. I am in the process of converting my rule set from BB to Hobbit and have a couple of questions. I have found if I try to define this: $FOO_HOST=%*myhost I receive an error message because I start with a '*'. I haven't found the magic to escape this. As a work-around I did this: $FOO_HOST=%[a-zA-Z0-9]*myhost I have several rulesets based on business needs, and I was hoping to have a default rule to catch anything which does not match business specific rules at the top. Something similar to this: $ALL_HOSTS=%[a-zA-Z0-9]* Using the hobbit_alert directive I have found that hosts can match on multiple rule sets. So if I have a server defined in rule set one, it will match in rule set one and then fall down to my default rule and match there also. Is there a way to specify to stop rule searching once a match is found? Does anyone have any experience to impart on how they do multiple rules. Thanks in advance, Jim ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

2 1

./hobbit-4.1.2p1/hobbitd/etcfiles
by Schrittenlocher＠rz.uni-frankfurt.de 06 Jan '06

06 Jan '06

Hi, am I right that the files in ./hobbit-4.1.2p1/hobbitd/etcfiles are only for documentation and upgrade-checks and aren't used in runtime (so they shouldn't be modified?) kind regards and thanks Rolf -- Mit freundlichen Gruessen Rolf Schrittenlocher HRZ/BDV, Senckenberganlage 31, 60054 Frankfurt Tel: (49) 69 - 798 28908 Fax: (49) 69 798 2881 LBS: lbs-f at mlist.uni-frankfurt.de Persoenlich: schritte at rz.uni-frankfurt.de

3 2

[hobbit] Network tests stopped graphing
by adam.scheblein＠marquette.edu 06 Jan '06

06 Jan '06

I was using an old bb command from my previous bb installation, I found the correct one and when I use it all it gives me is about 7 lines of blank space. The rrd files seem to be updating, but I am getting an error in my rrd-status.log file 2006-01-06 07:24:20 RRD error updating /usr/local/hobbit/data/rrd/HOSTNAME/tcp.ftp.rrd from 134.48.22.240: illegal attempt to update using time 1136553860 when last update time is 1136553860 (minimum one second step) And this keeps repeating in the past The messages that are coming through using the bbcmd listener look like: @@status#171614|1136561819.575708|134.48.20.42||HOSTNAME|memory|11365636 19|green||green|1136389790|0||0| status HOSTNAME.memory green Fri Jan 6 08:26:06 CST 2006 - Memory OK Memory Used Total Percentage &green Physical 980M 1024M 95% &green Swap 85M 1664M 5% Thanks, Adam -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thursday, January 05, 2006 4:31 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Network tests stopped graphing On Thu, Jan 05, 2006 at 03:31:29PM -0600, Scheblein, Adam wrote: > Henrik, > > I have noticed that I am starting to have similar problems, however they > are with the memory graphs and when I try to do bb 127.0.0.1 > "hobbitdboard host=HOSTNAME fields=msg" (replacing HOSTNAME with the > hostname) I get the following error: > > bb: Can't open 127.0.0.1 I don't know which "bb" command you're using, but that error message does not look like anything that I wrote in the Hobbit "bb" utility. In fact, I checked and henrik at osiris:~/hobbit$ grep -i "can.t open" */*.c finds no matches in my Hobbit sources. A connect-error should give you either "connect to bbd failed - <OS errortext>" or "Could not connect to bbd@<some more text>" I think those two observations are un-related. Are your memory RRD files being updated ? If not, are there any errors in the rrd-status.log file? If you run (as the hobbit user) bbcmd hobbitd_channel --channel=status grep -A 10 "^@@.*|memory|" do any memory status updates appear for these hosts, and what do they look like ? Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

SLA 99.9999 question?
by rower.master＠gmail.com 06 Jan '06

06 Jan '06

Hi Friends, Is there a way to report SLA with 4 decimals digits - "99.9999" ? Thanks in advance, Mario.

4 4

NCV problems still
by Phil.Wild＠asgardwealthsolutions.com.au 06 Jan '06

06 Jan '06

Hi Hobbit users, Is anyone successfully using the NCV functionality to trend statistics for more than one variable? I can not seem to get two variables into an RRD and have not been able to find any hints by searching the archives. The rrd is created but only ever has the first variable (DEV) in it. Is there a way of turning on some form of debugging for the process that parses the status messages and builds the rrd file? Everything else seems to work fine including an external larrd script that builds rrd data for sar. My status message looks like this: green Fri Jan 6 13:51:36 WST 2006 DEV : 57 RUN : 20 Thanks Phil ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. =======================================================

4 3

[hobbit] Found the problem: NCV problems
by Phil.Wild＠asgardwealthsolutions.com.au 06 Jan '06

06 Jan '06

I found the cause of my NCV issue. It was in the client side script and related to where the last double quote resides. My client side script was: COLOR=green STATUS=`cat ${STATUS_FILE}` [[ $DEBUG -eq 0 ]] && $BB $BBDISP "status $MACHINE.$TEST $COLOR `date` $STATUS" # SEND IT TO BBDISPLAY Instead of COLOR=green STATUS=`cat ${STATUS_FILE}` [[ $DEBUG -eq 0 ]] && $BB $BBDISP "status $MACHINE.$TEST $COLOR `date` $STATUS " # SEND IT TO BBDISPLAY Thanks for your help. Cheers Phil -----Original Message----- From: Wild, Phil [mailto:Phil.Wild at asgardwealthsolutions.com.au] Sent: Friday, 6 January 2006 3:40 PM To: hobbit at hswn.dk Subject: RE: [hobbit] NCV problems still Wow, Thanks for going to this effort.... I also have no idea as to why. I will do some more digging and will let you know where I screwed up. Perhaps my client script is putting soemthing in the file that I don't see. I will try sending test messages as you have and see if things become better. Thanks Phil -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, 6 January 2006 3:14 PM To: hobbit at hswn.dk Subject: Re: [hobbit] NCV problems still On Fri, Jan 06, 2006 at 02:39:25PM +0800, Wild, Phil wrote: > > Fy first status message has a DEV line and a RUN line but it seems to > only process the DEV line. It has me stumped. I'm almost ready to give > up on the NCV functionality and write my own parsing script. I have absolutely no problems when I reproduce your setup. I've done it on the Hobbit demo site at http://www.hswn.dk/hobbit/servers/ - look at the bottom of the page for the "osiris.hswn.dk" host. All of the config. files are online, you can see them via the "Demo Site" menu item. The changes I made were: 1) Add "pro4=ncv" to TEST2RRD in hobbitserver.cfg 2) Add "pro4" (and "ncv" if it's not there) to GRAPHS in hobbitserver.cfg 3) Add a new setting NCV_pro4="DEV:GAUGE,RUN:GAUGE" to hobbitserver.cfg 4) Kill the hobbitd_rrd processes so they restart and pick up the new hobbitserver.cfg settings 5) Define the [pro4] setting in hobbitgraph.cfg [pro4] TITLE Pro4 graphs YAXIS Seconds DEF:dev=pro4.rrd:DEV:AVERAGE DEF:run=pro4.rrd:RUN:AVERAGE LINE2:dev#00CCCC:DEV time LINE2:run#FF0000:RUN time COMMENT:\n GPRINT:dev:LAST:DEV time \: %5.1lf%s (cur) GPRINT:dev:MAX: \: %5.1lf%s (max) GPRINT:dev:MIN: \: %5.1lf%s (min) GPRINT:dev:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:run:LAST:RUN time \: %5.1lf%s (cur) GPRINT:run:MAX: \: %5.1lf%s (max) GPRINT:run:MIN: \: %5.1lf%s (min) GPRINT:run:AVERAGE: \: %5.1lf%s (avg)\n 6) Start sending status messages for the "pro4" status using this script (dummy data, cut-and-pasted from your mails): #!/bin/sh $BB 172.16.10.2 "status osiris,hswn.dk.pro4 green `date` DEV : 57 RUN : 20 " exit 0 Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. ======================================================= To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. =======================================================

1 0

[hobbit] NCV problems still
by Phil.Wild＠asgardwealthsolutions.com.au 06 Jan '06

06 Jan '06

Wow, Thanks for going to this effort.... I also have no idea as to why. I will do some more digging and will let you know where I screwed up. Perhaps my client script is putting soemthing in the file that I don't see. I will try sending test messages as you have and see if things become better. Thanks Phil -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, 6 January 2006 3:14 PM To: hobbit at hswn.dk Subject: Re: [hobbit] NCV problems still On Fri, Jan 06, 2006 at 02:39:25PM +0800, Wild, Phil wrote: > > Fy first status message has a DEV line and a RUN line but it seems to > only process the DEV line. It has me stumped. I'm almost ready to give > up on the NCV functionality and write my own parsing script. I have absolutely no problems when I reproduce your setup. I've done it on the Hobbit demo site at http://www.hswn.dk/hobbit/servers/ - look at the bottom of the page for the "osiris.hswn.dk" host. All of the config. files are online, you can see them via the "Demo Site" menu item. The changes I made were: 1) Add "pro4=ncv" to TEST2RRD in hobbitserver.cfg 2) Add "pro4" (and "ncv" if it's not there) to GRAPHS in hobbitserver.cfg 3) Add a new setting NCV_pro4="DEV:GAUGE,RUN:GAUGE" to hobbitserver.cfg 4) Kill the hobbitd_rrd processes so they restart and pick up the new hobbitserver.cfg settings 5) Define the [pro4] setting in hobbitgraph.cfg [pro4] TITLE Pro4 graphs YAXIS Seconds DEF:dev=pro4.rrd:DEV:AVERAGE DEF:run=pro4.rrd:RUN:AVERAGE LINE2:dev#00CCCC:DEV time LINE2:run#FF0000:RUN time COMMENT:\n GPRINT:dev:LAST:DEV time \: %5.1lf%s (cur) GPRINT:dev:MAX: \: %5.1lf%s (max) GPRINT:dev:MIN: \: %5.1lf%s (min) GPRINT:dev:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:run:LAST:RUN time \: %5.1lf%s (cur) GPRINT:run:MAX: \: %5.1lf%s (max) GPRINT:run:MIN: \: %5.1lf%s (min) GPRINT:run:AVERAGE: \: %5.1lf%s (avg)\n 6) Start sending status messages for the "pro4" status using this script (dummy data, cut-and-pasted from your mails): #!/bin/sh $BB 172.16.10.2 "status osiris,hswn.dk.pro4 green `date` DEV : 57 RUN : 20 " exit 0 Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. =======================================================

1 0

[hobbit] NCV problems still
by Phil.Wild＠asgardwealthsolutions.com.au 06 Jan '06

06 Jan '06

Hi Tracy, Thanks for the response. If you are expecting the number of variables to vary from one status message to the next then you need to write your own parsing script and store the variables in individual RRD's ala how the disk rrd's are built. Fy first status message has a DEV line and a RUN line but it seems to only process the DEV line. It has me stumped. I'm almost ready to give up on the NCV functionality and write my own parsing script. Cheers Phil -----Original Message----- From: Tracy J. Di Marco White [mailto:gendalia at iastate.edu] Sent: Friday, 6 January 2006 2:25 PM To: hobbit at hswn.dk Subject: Re: [hobbit] NCV problems still In message <AE1139DB2EF72D46BAF3CCEA8AC2A2A14B6FD7 at perntex01.sealcorp.net.au>, "Wild, Phil" writes: }Hi Hobbit users, } }Is anyone successfully using the NCV functionality to trend statistics }for more than one variable? I can not seem to get two variables into an }RRD and have not been able to find any hints by searching the archives. } }The rrd is created but only ever has the first variable (DEV) in it. } }Is there a way of turning on some form of debugging for the process that }parses the status messages and builds the rrd file? }Everything else seems to work fine including an external larrd script }that builds rrd data for sar. } }My status message looks like this: } }green Fri Jan 6 13:51:36 WST 2006 }DEV : 57 }RUN : 20 } }Thanks I was only able to get multiple variables into an rrd by deleting the rrd and starting over, then it started saving all of the variables properly. I assume the rrd file can't really grow new variables. I haven't yet figured out how to graph all of them though. Tracy J. Di Marco White Information Technology Services Iowa State University To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. =======================================================

3 2

[hobbit] Network tests stopped graphing
by adam.scheblein＠marquette.edu 05 Jan '06

05 Jan '06

Henrik, I have noticed that I am starting to have similar problems, however they are with the memory graphs and when I try to do bb 127.0.0.1 "hobbitdboard host=HOSTNAME fields=msg" (replacing HOSTNAME with the hostname) I get the following error: bb: Can't open 127.0.0.1 Any ideas?? Thanks, Adam In <1127887079.13766.6.camel (at) newtoy.homelan> Geoff Steer <gsteer (at) firstwave.com.au> writes: >On Wed, 2005-09-28 at 07:28 +0200, Henrik Stoerner wrote: >> On Wed, Sep 28, 2005 at 11:28:32AM +1000, Geoff Steer wrote: >> > >> > For no reason that I can see, my network tests are no longer being >> > graphed. >> > I run tests for ldap, smtp and ssh. All tests on all hosts are working >> > with no alerts being generated. Until about 2 days ago, there was a >> > single graph available for each host that showed the response times for >> > these three tests and the ping test. Now all the graphs show is the >> > value for ping. >> >tail of /var/log/hobbit/rrd-status.log: Nothing unusual in there. >An ls -l of one host (only tcp related rrd's shown. >-rw-r--r-- 1 hobbit hobbit 19548 Sep 28 15:51 tcp.conn.rrd >-rw-r--r-- 1 hobbit hobbit 19548 Sep 28 15:51 tcp.ldap.rrd >-rw-r--r-- 1 hobbit hobbit 19548 Sep 28 15:51 tcp.smtp5000.rrd And the files are being updated. Could you send me (directly, not to the list) the output from bb 127.0.0.1 "hobbitdboard host=HOSTNAME fields=msg" as well as the RRD files for this host ? When viewing the detailed status for e.g. ldap or smtp, do you get a graph image that is empty, or no image at all ? Henrik

3 2