November 2006 - Xymon - Xymon mailman web

bbtest frequency fromm 5 m to 120m
by tj_yang＠hotmail.com 02 Nov '06

02 Nov '06

I decreased the bbnet test from 5 minute to 2 hrs. This is one thing I dare not do on BB server.I did it on my test server ;) Am I missing anything to adjust the bbnet check interval ?I am starting to see gap on all the trending graphs. [bbnet] ENVFILE /opt/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd CMD bbtest-net --report --ping --checkresponse --dnslog=$BBSERVERLOGS/dns.log --concurrency=1000 LOGFILE $BBSERVERLOGS/bb-network.log INTERVAL 120mT.J. Yang _________________________________________________________________ Call friends with PC-to-PC calling -- FREE http://get.live.com/messenger/overview

2 1

[hobbit] bbtest frequency fromm 5 m to 120m
by tj_yang＠hotmail.com 02 Nov '06

02 Nov '06

Well, I got all lots of purple icons now. it now make sense since the hobbit system work around 5m interval.So the question is what is the maximum interval without triggering the purple icons ?T.J. YangFrom: tj_yang at hotmail.comTo: hobbit at hswn.dkDate: Thu, 2 Nov 2006 13:55:50 -0600Subject: [hobbit] bbtest frequency fromm 5 m to 120m I decreased the bbnet test from 5 minute to 2 hrs. This is one thing I dare not do on BB server.I did it on my test server ;) Am I missing anything to adjust the bbnet check interval ?I am starting to see gap on all the trending graphs. [bbnet] ENVFILE /opt/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd CMD bbtest-net --report --ping --checkresponse --dnslog=$BBSERVERLOGS/dns.log --concurrency=1000 LOGFILE $BBSERVERLOGS/bb-network.log INTERVAL 120mT.J. YangCall friends with PC-to-PC calling -- FREE Connect now! _________________________________________________________________ Call friends with PC-to-PC calling -- FREE http://get.live.com/messenger/overview

2 1

Hosts going purple
by jeffnewman75＠gmail.com 02 Nov '06

02 Nov '06

Hi, I am running the latest hobbit server/client (with all the patches applied) and I still have AIX hosts going purple due to the netstat command (nearest I can tell) >From ps: # ps -ef | grep hob hobbit 13306 16692 0 03:58:28 - 0:00 sh /usr/local/hobbit/client/bin/hobbitclient.sh hobbit 15572 13306 0 03:58:28 - 0:00 sh /usr/local/hobbit/client/bin/hobbitclient-aix.sh root 16262 12252 0 11:07:52 pts/0 0:00 grep hob hobbit 16692 1 0 Oct 30 - 0:03 /usr/local/hobbit/client/bin/hobbitlaunch --config=/usr/local/hobbit/client/etc/clientlaunch.cfg --log=/usr/local/hobbit/client/logs/clientlaunch.log --pidfile=/usr/local/hobbit/client/logs/clientlaunch.devarb2.pid hobbit 18104 15572 64 03:58:29 - 206:41 netstat -an hobbit 20870 15572 0 03:58:29 - 2:55 grep ^tcp If I go on that host (which is purple right now) and run "netstat -an | grep ^tcp" it runs just fine. This happens mostly on AIX 4.3.3 There is nothing in any log file on the client to indicate any problem. Can provide any needed info. Thanks, Jeff

1 0

Too many tests for one host
by ndorfsman＠gmail.com 02 Nov '06

02 Nov '06

Hi, I'm currently working on bb-roracle test (I'll post the new version on deadcat, probably with NCV numbers). It's raising an issue which I did't think about....I will have too many test to display for one host without horizontal scrolling ! Does anyone ever meet this ? Any idea to go against that ?

5 6

[hobbit] OpenVMS, Hobbit client, precompiled?
by David.Gore＠verizonbusiness.com 02 Nov '06

02 Nov '06

Anyone have a compiled hobbit client for OpenVMS they would like to share? ~David

2 1

Ignoring proc alerts in the default section
by JamesHorwath＠glic.com 02 Nov '06

02 Nov '06

All: I have a default section in my /etc/hobbit/hobbit-alerts.cfg with something like this: PROC my_process PROC his_process I have a couple of servers that do not run the processes my_process or his_process and as a result they are showing errors because of the definitions in my DEFAULT section. How can I have a server ignore the default section? If I have 99.9% of the hosts using the 2 process and only 2 or 3 which don't, any suggestions on how to handle it? Thanks in advance, Jim ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

3 2

[hobbit] log file monitoring issues
by gmbfly98＠gmail.com 02 Nov '06

02 Nov '06

Maybe I'm just missing something in the documentation, but I can't seem to get the log file monitoring to work properly. In the example below, I'm trying to look at the "messages" and "maillog" files on Linux. Particularly, I'm trying to EXCLUDE the following "messages" lines: Aug 9 21:19:45 www upsd[7860]: Connection from 127.0.0.1 Aug 9 21:19:45 www upsd[7860]: Client on 127.0.0.1 logged out Aug 9 21:19:45 www upsd[7860]: Connection from 127.0.0.1 Aug 9 16:44:01 www crond(pam_unix)[5382]: session opened for user root by (uid=0) Aug 9 16:44:14 www crond(pam_unix)[5382]: session closed for user root Aug 9 16:45:01 www crond(pam_unix)[5484]: session opened for user mailman by (uid=0) Aug 9 16:45:01 www crond(pam_unix)[5484]: session closed for user mailman And EXCLUDE the following "maillog" lines: Aug 6 11:55:02 www sendmail[15076]: k76Ft1pU015076: from=<mailman at HOSTNAME>, size=576, class=0, nrcpts=1, msgid=<200608061555.k76Ft1A2015075 at HOSTNAME>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Below is the respective lines from the "client-local.cfg" file: log:/var/log/messages:10240 ignore upsd* Client|Connection 127.0.0.1 ignore session opened|closed for user mailman|root log:/var/log/maillog:10240 ignore relay=localhost.localdomain trigger denied And below the specific log entries I'm looking for from "hobbit-clients.cfg": LOG /var/log/maillog "relaying denied" color="yellow" Now, the problem I'm having... The "ignore" line for the /var/log/maillog file appears to be working correctly, as it does indeed ignore such entries as shown above. Also working is the "ignore session opened..." line for the /var/log/messages file. What is NOT working is the "ignore" line for the "upsd*" lines in /var/log/messages. For the life of me, I just can't figure out how to get that to work properly. That is, two of the three "ignore" lines are not working, as those lines still show up in the "full log" output. If anyone has any ideas, let me know. I'm also having problems with some logs not showing up on the messages page. Do you need both a "LOG" entries in the hobbit-clients.cfg AND client-local.cfg, or will an entry in only client-local.cfg be sufficient to have it show up on the messages page?

5 17

No recovered mail if red goes yellow?
by stefan.freisler＠aspect-online.de 02 Nov '06

02 Nov '06

Hi, what is to do if i will get recovered when status changed from red to yellow? I send SMS via Scripts where i made a test if the recovered Flag is set. My Problem is that we would get an recovered massage if it is going yellow. Is there an solution? thx wdsl

1 0

Ports data from other platforms
by rsmrcina＠wi.rr.com 01 Nov '06

01 Nov '06

I want to be able to provide ports data to Hobbit from the mainframe operating systems. They do not have and 'standard' Hobbit client nor do they present the equivalent of 'netstat' in the way that Linux does. I can reformat the 'netstat' into the Linux way, that's not a problem. What I would like to know is how to present this data to Hobbit so that it shows up properly in the ports column (with server based configuration and optional tracking capabilities). Is it as simple as sending the data as a 'ports' test or do I need to create a 'client' package and send it. If so, is the format the same as the 'client data' link with just that text data in the message? Thanks. -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 rich.smrcina at vmassist.com Catch the WAVV! http://www.wavv.org WAVV 2007 - Green Bay, WI - May 18-22, 2007

2 2

bbtest-net.c
by Bradley_Wallace＠glic.com 01 Nov '06

01 Nov '06

Hobbit Server - version 4.1.2p1 When a server that's monitored by Hobbit does not respond to ping (it's down), Hobbit generates the following message: nro6000c:conn red [201160] red  Wed Nov 1 13:22:18 2006 conn NOT ok Service conn on nro6000c is not OK : Host does not respond to ping System unreachable for 1 poll periods (0 seconds) &red 10.102.0.197 is unreachable See http://Hobbit/hobbit-cgi/bb-hostsvc.sh?HOSTSVC=nro6000c.conn The "!" in the second line of the message causes problems in Linux when handling the error message with ksh shell scripts. I believe that this message is generated by bbnet/bbtest-net.c, line 1582. If I take out the exclamation, is there a way I can just recompile bbtest-net.c and insert it into Hobbit, without re-making the whole installation? Or am I better off re-making the whole thing? <hr size=1> This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

2 1