December 2006 - Xymon - Xymon mailman web

Question about Disk RULE
by rleon＠racenter.com 20 Dec '06

20 Dec '06

I was wondering how I can get this rule to work? Right now it is not working the way I expect. Everything has the 90 95 threshhold. HOST=myhost DISK * 90 95 DISK /g98 90 95 DISK /g01 80 90 DISK /j01 80 90 DISK /i98 90 95 DISK /home 80 90 DISK %^/i.*/ 100 101 DISK %^/j.*/ 100 101 DISK %^/g.*/ 100 101 Thanks Richard

4 10

[hobbit] Question about Disk RULE
by KauffmanT＠nibco.com 20 Dec '06

20 Dec '06

This is that difference between the perl regexp parsing and the shell parsing we're used to - you want '.*' (dot asterisk) where you have just '*'. IIRC, in perl, that means 'match any charcter (the dot)' followed by 'match any number of the previous character (the asterisk)'. Tom ________________________________ From: Richard Leon [mailto:rleon at racenter.com] Sent: Wednesday, December 20, 2006 3:06 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Question about Disk RULE Ok I think it is something with my wildcard. When I added the "DISK /g05 IGNORE" line it did ignore /g05. But I don't want to have to add every single filesystem. So what is wrong with my wildcard? DISK %^/i.*/ 100 100 DISK %^/j.*/ 100 100 DISK %^/g.*/ IGNORE CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

1 0

ext script that collects process creation data, like sar -c
by tomg＠mcclatchyinteractive.com 20 Dec '06

20 Dec '06

Does anyone have an ext script that collects process creation data in a similar fashion to what is displayed by "sar -c"? Tom -- Tom Georgoulias Systems Engineer McClatchy Interactive

1 0

problem with the latest snapshot
by jjj863＠gmail.com 20 Dec '06

20 Dec '06

hi, there, I downloaded the latest snapshot ( http://www.hswn.dk/beta/hobbit-snapshot.tar.gz ). It buit just fine as RPM on a up-2-date CentOS 4.4 test server, using the included hobbit.spec. Once I updated the server and a CentOS 4 (also up-2-date CentOS 4.4) client, however, I got a lot of 'purple' for the client and for the Hobbit server itself. ~hobbit/client/logs/hobbitclient.log on both server and the client claims the following: 2006-12-20 11:57:43 connect to bbd failed - No such file or directory 2006-12-20 11:57:43 Whoops ! bb failed to send message - Connection failed tcpdumping on the server and client showed no attempts to send any packets to 1984 port. manual connecting to server's 1984/tcp port works just fine from the client. Plus the client piece on the Hobbit server experienced the same problem, I don't think this is a networking issue.

1 0

Disk setting
by rleon＠racenter.com 20 Dec '06

20 Dec '06

I was wondering how I can get this rule to work?

1 0

Matt Armstrong is out of the office.
by marmstrong5＠csc.com 20 Dec '06

20 Dec '06

I will be out of the office starting 18/12/2006 and will not return until 22/12/2006. I amon leave but I will respond to your message when I return.

1 0

[hobbit] how can I receive alerts for every new trigger matched for 'LOG'
by jjj863＠gmail.com 19 Dec '06

19 Dec '06

anybody? I'd like to get confirmation, one way or the other, Hobbit at its current form won't work for this purpose, before I go down the road of custom scripts and such.. On 11/28/06, Jerry Yu <jjj863 at gmail.com> wrote: > > the LOG check clears itself after 30m, if it didn't see the offending > entries again. If this 30m can be changed to 5m or 6m, then, I can get new > offenders (as it will trigger status change for certain). > > On 11/28/06, Peter Welter <peter.welter at gmail.com> wrote: > > > > Sounds a bit like a question I posted two weeks ago: Hobbit responds > > on status-changes (green-.yellow->red->etc). You can make it detect > > several issues, but when another issue comes up and the status itself > > does not change, you will not be notified. > > > > Although the GROUP-keyword for DISK and PROC adds granularity, this is > > not possible for LOG (yet?!) and although the GROUP-keyword is very > > powerful, the above remains so this does not solve your problem. > > > > Regards, > > Peter > > > > 2006/11/27, Jerry Yu <jjj863 at gmail.com>: > > > hi, there, > > > I have a LOG check for "error: #1" "error: #2" in a log file. We'd > > like to > > > receive email alerts for each every trigger matched, "%error: #" since > > we > > > needs to know the all the error # reported. > > > Right now, it generates email alerts. but not for every new > > triggers. No > > > alerts are generated for a newly matched trigger log entry if the > > STATUS is > > > red/yellow already. In my thinking, if the LOG check itself can be > > > RECOVERED after 5m (I believe the default is 30m), this ought work. > > > > > > Does anybody know how to change the default from 30m to 5m (for a > > single > > > check/test)? > > > Any alternative/recommendations to get the desired results? I > > initially > > > thought a 'creative' combination of 'REPEAT=5 DURATION<10' would do > > it... > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > > >

1 1

Problems with HTTPS Continue
by geoff.hallford＠gmail.com 19 Dec '06

19 Dec '06

Hi Everyone, I still have problems getting Hobbit to check URL's that are HTTP*S*. I have compiled with SSL support and the testing does work on items such as LDAPS and SSH but it will not work for HTTPS. Does anyone have any thoughts? I get the following message: --- Mon Dec 18 14:01:59 2006: https://142.224.108.83/apps/SCMClientWin32.exe - Not Found The requested URL /error/HTTP_BAD_REQUEST.html.var was not found on this server. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request. ------------------------------ Apache/2.0.55 (Unix) Server at localhost Port 1443 Seconds: 0.00

4 8

apache trends missing some data
by rmunsch＠solutionsforprogress.com 19 Dec '06

19 Dec '06

Hello list, I'm watching a webserver and trending Apache Utilization, Apache Workers, Apache CPU Util, and Apache Requests per Second. Only "Apache Workers" shows data and has a graph. The other three show NaN. All other tests are green. All other client data is coming in and graphing. The bb-hosts line for the host is: <ip addy> ws2 # ssh http://<URL> apache=https://<ip addy>/server-status?auto TRENDS:*,apache:apache|apache1|apache2|apache3 ssldays=30:15 which seems to be the way to do it in the docs. What i don't understand is how one apache test graphs and three show NaN; i'd assume an all-or-nothing sort of arrangement. I can't figure out what i'm doing wrong to be missing three of the four, and if it's wrong, i don't know how i'm getting the one... TIA, -- Rob Munsch Solutions For Progress IT www.solutionsforprogress.com

2 2

bbwin 0.9 available
by etienne.grignon＠gmail.com 19 Dec '06

19 Dec '06

Hello, First at all, I'm deeply sorry for the large delay between 0.8 and 0.9. I will try to do not disappoint you the next time ... For the 0.9, these are the news : + New Features * Msgs agent reports events username and you may filter event with user name * Msgs agent reports some statistics about each event log file. You can activate an option which alert you when an event log is full. See the help chm file for details. * New BBWinUpdate agent : it used for the semi centralized mode. You can configure the agent to download configurations updates from a central hobbit server. * First version of BBWin centralized mode implemented. Backend for hobbit not coded. Look at the BBWin.cfg example in the doc folder or in the documentation + Updates * system uptime sometimes returns 0 seconds on the first query. BBWin now send a green status when this happens to avoid incorrect alerts. * msgs now formats description field in status so you don't have to scroll your window to read a large event description * disk agent reported alerts on unrecognized disks (like disks part of cluster resources on the inactive node of an MSCS cluster). These disks are now automatically ignored. * cluster.exe is more verbose when it check the Windows version * procs agent now is using rules with signs '+' or '-' because XML format doesn't accept '<' sign in attributes ... However, the compatibility with '<' and '>' is preserved. * msgs summary option is removed. It is enabled by default and there is no use to disable it. + Bugs * limit option for cpu agent was wrong in the number of lines reported, it is fixed. * When an agent had no configuration in BBWin.cfg and if it was loaded, BBWin crashed, it is fixed. * msgs agent had a memory leak when an initialization was made to get event description. it is fixed. * wlbs script external had a bug to load the configuration file. it is fixed. * cpu agent were always missing one process in the ps report. it is fixed. * externals agent was crashing BBWin if its configuration was empty. it is fixed. For the centralized mode, there are no backend on the hobbit part for the moment ... so, you can enable the bbwin centralized mode it to see that it is working (You will be able to see the small link "clientdata" in each status sub page of your host) but it is not usable at this time. The others news are that I tested BBWin 0.8 and 0.9 on Windows Vista Ultimate, and it is working just fine. I'm using BBWin on over 300 productions servers. The only problems I got are resolved with the bug fixes included in BBWin 0.9. With the bbwinupdate agent, you can centralize all or some of your configuration rules even if it is not the fully hobbit centralized mode that every body is expecting for. Here the link for the download : http://sourceforge.net/projects/bbwin As always, let me know if you get troubles with this new version. Regards, Etienne

3 2