January 2006 - Xymon - Xymon mailman web

[hobbit] Network tests stopped graphing
by adam.scheblein＠marquette.edu 05 Jan '06

05 Jan '06

I still get the message bb: Can't open [my ip address] ________________________________ From: Larry Barber [mailto:lebarber at gmail.com] Sent: Thursday, January 05, 2006 4:03 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Network tests stopped graphing Try using your actual IP address, rather than 127.0.0.1. Thanks, Larry Barber On 1/5/06, Scheblein, Adam <adam.scheblein at marquette.edu> wrote: Henrik, I have noticed that I am starting to have similar problems, however they are with the memory graphs and when I try to do bb 127.0.0.1 "hobbitdboard host=HOSTNAME fields=msg" (replacing HOSTNAME with the hostname) I get the following error: bb: Can't open 127.0.0.1 Any ideas?? Thanks, Adam In <1127887079.13766.6.camel (at) newtoy.homelan> Geoff Steer <gsteer (at) firstwave.com.au> writes: >On Wed, 2005-09-28 at 07:28 +0200, Henrik Stoerner wrote: >> On Wed, Sep 28, 2005 at 11:28:32AM +1000, Geoff Steer wrote: >> > >> > For no reason that I can see, my network tests are no longer being >> > graphed. >> > I run tests for ldap, smtp and ssh. All tests on all hosts are working >> > with no alerts being generated. Until about 2 days ago, there was a >> > single graph available for each host that showed the response times for >> > these three tests and the ping test. Now all the graphs show is the >> > value for ping. >> >tail of /var/log/hobbit/rrd-status.log: Nothing unusual in there. >An ls -l of one host (only tcp related rrd's shown. >-rw-r--r-- 1 hobbit hobbit 19548 Sep 28 15:51 tcp.conn.rrd >-rw-r--r-- 1 hobbit hobbit 19548 Sep 28 15:51 tcp.ldap.rrd >-rw-r--r-- 1 hobbit hobbit 19548 Sep 28 15:51 tcp.smtp5000.rrd And the files are being updated. Could you send me (directly, not to the list) the output from bb 127.0.0.1 "hobbitdboard host=HOSTNAME fields=msg" as well as the RRD files for this host ? When viewing the detailed status for e.g. ldap or smtp, do you get a graph image that is empty, or no image at all ? Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Agentless clients
by scott＠PacketPushers.com 05 Jan '06

05 Jan '06

Henrik, Since you seem to be a fan of 'parse evertyhing on the server' have you ever considered adding the ability to have hobbit use 'agentless clients" ? By agentless, I mean only the trust relationship between the server and client is established, commands and output are done 'on-the-fly', every 5 minutes. After writing the VPN/sshbb/email I was thinkin it could be pretty easy to add this 'functionality' native to hobbit. -- Scott Walters -PacketPusher

5 9

[hobbit] Agentless clients
by adam.scheblein＠marquette.edu 05 Jan '06

05 Jan '06

What if you were to use ssh and xargs to collect the same client information and then just send that message straight into the hobbit listener? Would that work? Adam -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thursday, January 05, 2006 1:00 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Agentless clients On Thu, Jan 05, 2006 at 01:46:36PM -0500, Scott Walters wrote: > > > I agree that having similar functionality to bb-fetch could be useful > > for a *few* remote/DMZ hosts, but it certainly doesn't scale well. > > True, and I am not sold on the agentless clients idea either, but we've > got such a great framework to try it on. > > The first design decision in my mind would be if in agentless we mean > > 1) install/run/uninstall the hobbit client every 5m, i know this sounds > horribly inefficient but I am attracted to the simplicity of agent and > agentless machines being the 'same'. or just automagically install the > client if the trust exists . . . . . > > 2) only running the exact OS commands necessary and capturing the output. > This would require some new code on the server. But if done right, it > could perhaps replace existing clients. > > abstract the collection from the delivery . . . . You can easily combine 1) and 2). Running something like this on the client-polling server would do it: CLIENT="www.foo.com" CLIENTOS="linux" echo "client $CLIENT.$CLIENTOS" >/tmp/msg-$CLIENT.txt ssh $CLIENT < ~$BBHOME/bin/hobbitclient-$CLIENTOS.sh >>/tmp/msg-$CLIENT.txt $BB $BBDISP "@" </tmp/msg-$CLIENT.txt would run the normal client-side scripts without having them installed on each client box, and send the output to the Hobbit server in a normal "client" message. There is an issue with the OS'es that need special tools installed (usually to collect the memory statistics), but that can be worked around. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] SLA 99.9999 question?
by pwilliamson＠mandtbank.com 05 Jan '06

05 Jan '06

That equates to 31.5 seconds of downtime per year. Since I'm guessing you're doing a 5 minute test interval, this doesn't make much sense. Actually, 99.99% would be a good balance, since this equates to 52 minutes and 33 seconds of downtime per year. All this is moot if management wants to see 6 nines, which is funny since the standard is 5 nines... (5:15 per year of d/t) Paul >>> rower.master at gmail.com 01/05/06 8:22 AM >>> Hi Friends, Is there a way to report SLA with 4 decimals digits - "99.9999" ? Thanks in advance, Mario.

2 1

Larrd graphs not working
by JamesHorwath＠glic.com 05 Jan '06

05 Jan '06

I'm trying to help a coworker debug/fix Hobbit running on Linux 7.2. I know BB pretty well, but I'm just learning Hobbit. Everything on the Hobbit install works fine, except the larrd historical graphs. For example at the bottom of machine X's disk page the icon for the larrd is grayed out. I can click on it and see the next three grayed out icons which should be larrd graphs. I have looked at things like permissions, read some documentation, etc. This is new territory and we need to get the data there. This was working at one time, a change was made and now it does not work. We are not sure what change was made. Thanks in advance, Jim ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

9 17

[hobbit] Help: Trying to use the NCV functionality of hobbit
by Phil.Wild＠asgardwealthsolutions.com.au 05 Jan '06

05 Jan '06

Thanks for this but something is still not right. I have made the change to the env variable as suggested (see extract from hobbitserver.cfg below) NCV_pro4="DEV:GAUGE,RUN:GAUGE" TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tc p,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sen dmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy ,hobbitd,pro4=ncv" # This defines which RRD files to include on the "trends" column webpage, # and the order in which they appear. GRAPHS="la,disk,inode,qtree,memory,users,vmstat,iostat,tcp.http,tcp,nets tat,mrtg::1,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,iis health,citrix,bbgen,bbtest,bbproxy,hobbitd,pro4,ncv" I removed the existing rrd file then restarted hobbit (did a stop, wait 10 seconds then start). I waited for the client tos end data and checked that an RRD file was generated. The rrd file still only has one of the columns (DEV - see below). Is there perhaps something wrong with my collected data: green Wed Jan 4 13:16:08 WST 2006 DEV : 39 RUN : 18 Cheers and thanks Phil /usr/local/rrdtool/bin/rrdtool dump ../../data/rrd/peruxas5.sealcorp.com.au/pro4.rrd | head -50  <rrd> <version> 0003 </version> <step> 300 </step>  <lastupdate> 1136445962 </lastupdate>  <ds> <name> DEV </name> <type> GAUGE </type> <minimal_heartbeat> 600 </minimal_heartbeat> <min> 0.0000000000e+00 </min> <max> NaN </max>  <last_ds> UNKN </last_ds> <value> 6.0000000000e+02 </value> <unknown_sec> 52 </unknown_sec> </ds>  <rra> -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Wednesday, 4 January 2006 5:37 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Help: Trying to use the NCV functionality of hobbit On Wed, Jan 04, 2006 at 01:36:32PM +0800, Wild, Phil wrote: > > My hobbit server is receiving the following from the client without > issue (not incluing the =====) ======== green Wed Jan 4 13:16:08 WST > 2006 > DEV : 39 > RUN : 18 > ======== > > I have modified hobbitserver.cfg with the following: > ======== > NCV_pro4="GAUGE" This one is wrong, is thould be NCV_pro4="DEV:GAUGE,RUN:GAUGE" You must restart Hobbit after this change, and you should also delete any "pro4.rrd" files below the hobbit data/rrd/ directory to make sure they get re-created with the correct setting. > GRAPHS="la,disk,inode,qtree,memory,users,vmstat,iostat,tcp.http,tcp,ne > ts > tat,mrtg::1,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,i > is health,citrix,bbgen,bbtest,bbproxy,hobbitd,pro4" And this one is missing the "ncv" item. Just add it somewhere. > I am having real trouble determining how to debug this further. Have a look at http://www.hswn.dk/~henrik/howtograph.txt . This document will be part of the Hobbit documentation soon. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. =======================================================

1 0

Help: Trying to use the NCV functionality of hobbit
by Phil.Wild＠asgardwealthsolutions.com.au 05 Jan '06

05 Jan '06

Hello Hobbit users. We have recently installed hobbit to replace a bigbrother PE installation. I am trying to make use of the ncv functionality mentioned in the hobbitd_rrd man page. My hobbit server is receiving the following from the client without issue (not incluing the =====) ======== green Wed Jan 4 13:16:08 WST 2006 DEV : 39 RUN : 18 ======== I have modified hobbitserver.cfg with the following: ======== NCV_pro4="GAUGE" TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tc p,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sen dmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy ,hobbitd,pro4=ncv" # This defines which RRD files to include on the "trends" column webpage, # and the order in which they appear. GRAPHS="la,disk,inode,qtree,memory,users,vmstat,iostat,tcp.http,tcp,nets tat,mrtg::1,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,iis health,citrix,bbgen,bbtest,bbproxy,hobbitd,pro4" ======== The rrd file is created as expected by hobbit, but only seems to include the DEV column. Output from /usr/local/rrdtool/bin/rrdtool fetch pro4.rrd AVERAGE produces (cut down) DEV 1136266500: nan 1136266800: nan --- deleted lines --- 1136352600: 7.9365079365e-03 1136352900: nan I am having real trouble determining how to debug this further. I am also having trouble producing the graph but am sure that relates to my inexperience with hobbit but will get there with more reading. Any help would be appreciated.... Thanks Phil ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. =======================================================

1 0

Using ssh to retrieve hobbit data
by JamesHorwath＠glic.com 04 Jan '06

04 Jan '06

I am converting my BB 19.c system to Hobbit 4.1.2p1. With BB I used to use ssh to fetch data from remote servers in a DMZ (using the bb-fetchtab). Can I do this in Hobbit. I have searched the mail archive and manuals and didn't see the option anywhere. Regards, Jim Jim Horwath SANS Certified: GCUX, GCIH, GCIA, GHTQ, GREM Unix Admin ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

4 5

Help: Trying to use the NCV functionality of hobbit
by Phil.Wild＠asgardwealthsolutions.com.au 04 Jan '06

04 Jan '06

Hello Hobbit users. We have recently installed hobbit to replace a bigbrother PE installation. I am trying to make use of the ncv functionality mentioned in the hobbitd_rrd man page. My hobbit server is receiving the following from the client without issue (not incluing the =====) ======== green Wed Jan 4 13:16:08 WST 2006 DEV : 39 RUN : 18 ======== I have modified hobbitserver.cfg with the following: ======== NCV_pro4="GAUGE" TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tc p,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sen dmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy ,hobbitd,pro4=ncv" # This defines which RRD files to include on the "trends" column webpage, # and the order in which they appear. GRAPHS="la,disk,inode,qtree,memory,users,vmstat,iostat,tcp.http,tcp,nets tat,mrtg::1,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,iis health,citrix,bbgen,bbtest,bbproxy,hobbitd,pro4" ======== The rrd file is created as expected by hobbit, but only seems to include the DEV column. Output from /usr/local/rrdtool/bin/rrdtool fetch pro4.rrd AVERAGE produces (cut down) DEV 1136266500: nan 1136266800: nan --- deleted lines --- 1136352600: 7.9365079365e-03 1136352900: nan I am having real trouble determining how to debug this further. I am also having trouble producing the graph but am sure that relates to my inexperience with hobbit but will get there with more reading. Any help would be appreciated.... Thanks Phil ======================================================= IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading on to any computer system. No warranty is given or made by Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited that the information is free of a virus or any other defect or error and they will not be liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states they are the views of Asgard Wealth Solutions Limited, Asgard Capital Management Limited or SECURITOR Financial Group Limited, as the case may be. =======================================================

2 1

graphing question
by rmcgraw＠purdue.edu 03 Jan '06

03 Jan '06

I am new to the hobbit and trying to understand how it all works together. I have my server and client up and running and seems to be doing just fine but I still do not understand all the nuances of the code so the reason for this question. I have noticed that under the trend the "disk utilization" graphs have four disk systems plotted on one graph. Yet under the "disk" icon the "disk utilization" graphs show two graphs. The first graph has the plot for 3 file systems and the second for one file systems. I assume that these two graphs are created with the same hobbitgraph.cfg. Is this correct? Are these two graphs created differently? Thanks _____________________________________________________________________ Robert P. McGraw, Jr. Manager, Computer System EMAIL: rmcgraw at purdue.edu Purdue University ROOM: MATH-807 Department of Mathematics PHONE: (765) 494-6055 150 N. University Street FAX: (419) 821-0540 West Lafayette, IN 47907-2067

1 0