December 2006 - Xymon - Xymon mailman web

Feature Request: Incident Reporting
by geoff.hallford＠gmail.com 18 Dec '06

18 Dec '06

Hi Henrik, I saw in the history of the mailing list that an Incident Reporting feature has been requested to basically show: start time, notifications, when acked, when recovered and so forth. Do you have any estimate for this feature? I am really interested in having this feature. Thank you.

1 0

Graph Presentation
by jkwade＠futurefrontiers.com 18 Dec '06

18 Dec '06

Hello All, I've modified the old larrd bb-iostat.sh script to send iostat information to Hobbit so that I could graph busy and wait states of disks, and it works great. However, I'd like to make the graphs a little more presentable. Can someone give me some suggestions on doing the following below or if it's not possible. 1) I have several NFS & Hard Mounts that I'm checking busy and wait states for. A lot of them get NaN's because the busy and wait states are 0, zero. I can tell it to only graph something that is greater than a number, but I would prefer that it did not list the filesystem(s) that have NaN's below the graph. Can this be done? 2) Also, when graphing a lot of data, you get all the colors, but it becomes difficult to figure out which one belongs to which data. Is there a way to have rrd give you the datapoint information when you move the cursor over it? ie, I put the cursor over a line, and it says, /export/home, and gives me the numbers. Thanks..James

2 1

MYSQL support
by jbeltram＠int.inetu.net 18 Dec '06

18 Dec '06

Just wondering if there are any plans to move away from storing the logs/hist/histlogs etc from the flat filesystem to a MYSQL db format? This way there could be clusters of servers. Just wondering....looks great!! Thanks, Jason Beltrame, CCNP, CCDA Network Engineer INetU Managed Hosting Phone: (610) 266-7441 Toll-Free: 888-664-6388 Fax: (610) 266-7434 ----------------------------- INetU Managed Hosting - Expert Hosting Solutions

2 1

overzealous Hobbit client on RHL 9
by jjj863＠gmail.com 18 Dec '06

18 Dec '06

Hobbit client (4.2RC1-20060712) is overzealous on only one of the RHL9 (Redhat Linux 9 ) clients . It scans tasklist every 5s. This doesn't happen for my other RHL9 clients or CentOS 4 clients. Any idea on how to either stop scanning this frequent or stop logging such scans? /var/log/hobbit# tail clientlaunch.log 2006-12-18 09:46:35 Starting tasklist scan 2006-12-18 09:46:40 2006-12-18 09:46:40 Starting tasklist scan 2006-12-18 09:46:45 2006-12-18 09:46:45 Starting tasklist scan 2006-12-18 09:46:50 2006-12-18 09:46:50 Starting tasklist scan 2006-12-18 09:46:56 No files modified, skipping reload of /usr/lib/hobbit/client/etc/clientlaunch.cfg 2006-12-18 09:46:56 2006-12-18 09:46:56 Starting tasklist scan

1 0

Monitoring MSGS issues
by gadget＠rewse.jp 17 Dec '06

17 Dec '06

Hi all, I have two issues for MSGS. Thanks for your help. # Environment # Hobbit: Hobbit 4.2.0 OS: CentOS 4.4 (Linux 2.6.9) Hostname: oscar (Both Hobbit server and client) ---------------------------------------- 1. "ignore" clause in client-local.cfg doesn't filter out it. I set the below in client-local.cfg on oscar, but the msgs page on Hobbit shows the below. Why does not it filter out "br104fmx"? == ~hobbit/server/etc/clinet-local.cfg == [oscar] log:/var/log/messages:10240 ignore br104fmx == oscar - msgs == No entries in /var/log/messages Full log /var/log/messages Dec 17 16:50:43 uniform brl04fmx TCP connection dropped - Source:xxx.xxx.xxx.xxx,6293,WAN - Destination:xxx.xxx.xxx.xxx,53131,LAN Dec 17 16:50:43 uniform brl04fmx [2006-12-17 16:50:43] | From: [xxx.xxx.xxx.xxx] | Port:[53131] | [Blocked] Dec 17 16:51:16 uniform brl04fmx TCP connection dropped - Source:xxx.xxx.xxx.xxx,4689,WAN - Destination:xxx.xxx.xxx.xxx,445,LAN Dec 17 16:51:16 uniform brl04fmx [2006-12-17 16:51:16] | From: [xxx.xxx.xxx.xxx] | Port:[445] | [Blocked] Dec 17 16:52:22 oscar su(pam_unix)[4887]: session opened for user root by gadget(uid=500) Dec 17 16:55:43 uniform brl04fmx TCP connection dropped - Source:xxx.xxx.xxx.xxx,6293,WAN - Destination:xxx.xxx.xxx.xxx,53147,LAN (abbr) ---------------------------------------- 2. I set the below in hobbit-clients.cfg on oscar, but Hobbit doesn't alert it. Sent logfile is the below. Why does not Hobbit alert "failure"? PORT and PROC have no problems. == ~hobbit/server/etc/hobbit-clients.cfg == HOST=oscar PORT 139 "TEXT=NetBIOS: 139" PORT 445 "TEXT=SMB: 445" PORT 3303 "TEXT=MySQL: 3306" PORT 3690 "TEXT=Subversion: 3690" LOG /var/log/messages failure PROC nfsd PROC mysqld 2 PROC smbd PROC svnserve == oscar - msgs == No entries in /var/log/messages Full log /var/log/messages (abbr) Dec 17 17:28:40 uniform brl04fmx TCP connection dropped - Source:xxx.xxx.xxx.xxx,6293,WAN - Destination:xxx.xxx.xxx.xxx,53404,LAN Dec 17 17:28:40 uniform brl04fmx [2006-12-17 17:28:40] | From: [xxx.xxx.xxx.xxx] | Port:[53404] | [Blocked] Dec 17 17:30:26 oscar sshd(pam_unix)[5637]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=powermac user=gadget Dec 17 17:30:35 oscar sshd(pam_unix)[5637]: 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=powermac user=gadget Dec 17 17:33:39 uniform brl04fmx TCP connection dropped - Source:xxx.xxx.xxx.xxx,6293,WAN - Destination:xxx.xxx.xxx.xxx,53418,LAN Dec 17 17:33:39 uniform brl04fmx [2006-12-17 17:33:39] | From: [xxx.xxx.xxx.xxx] | Port:[53418] | [Blocked] (abbr) Thanks, -- Tats SHIBATA Rewse Lab.

3 2

how to report multiple temperture probe results
by jjj863＠gmail.com 16 Dec '06

16 Dec '06

hi, I noticed that hobbitgraph.cfg has a [temperature] section. How should I 1. report multiple probes from a single client in an extension script: a lump-all "status server1.temperature green" or one status call per probe? 2. collect these probes into RRD using NCV def in hobbitserver.cfg ? 3. set threshold centrally on the server? I initially set up my own extension script 'temps' and therein reports all six probes on a test server with one 'status server1.temps green' call. However, the NCV_temps def failed when a different server reports four/seven probes at once. As for alerting, I set up thresholds on the server. However, it doesn't generate any alert even if the threshold is obviously surpassed. wonder if the 'status blah GREEN' reported by the extension script kinda blocked such centralized checking? Thanks. jerry

1 1

Hobbit - Graph/Metric Reports
by jkwade＠futurefrontiers.com 15 Dec '06

15 Dec '06

Hello All, I was wondering, has anyone written any type of scripts that would allow you to graph systems based on specific parameters of a test. So, for example, Let's say I wanted to know all the systems that had swap or physical memory that had averaged 85% or above for a specific data range. I select, "All Systems", memory test, and >85%. This would draw a multi-graph with all the systems, their swap, physical memory, and what they had reached. I could set date ranges as well. This way, I could analyze cpu, memory, swap, disk i/o, disk space, etc., looking for systems needing infrastructure improvements. Thanks..James

1 0

freeBSD memory reporting problem?
by hayner＠temple.edu 15 Dec '06

15 Dec '06

I compiled the client on freeBSD 6.2 Beta and the default memory test seems to be looking in the wrong places: Fri Dec 15 13:17:20 EST 2006 - Memory CRITICAL Memory Used Total Percentage red Physical 4294964120M 4088M 4294967219% green Swap 0M 4096M 0% since the meminfo is a binary I had to replace this test with a modified bb-memtest.sh file. Is this a known problem? # uname -a FreeBSD eagles 6.2-BETA3 FreeBSD 6.2-BETA3 #0: Tue Nov 21 12:08:43 EST 2006 root at mybackpack-be.ocis.temple.edu:/usr/obj/usr/src/sys/GEN-SMP-PAE i386 # -- Chris Hayner Sr. Systems Administrator Temple University hayner at temple.edu 215-204-6617

1 0

Writing my own Scripts with RRD
by jkwade＠futurefrontiers.com 15 Dec '06

15 Dec '06

Hello, So, I took the old laard iostat script, and made a few changes, but overall the output is the same. I changed the name to iostat2. I then started send data to Hobbit. However, I can't see and rrd files being generated. I added iostat2 to the hobbitserver.cfg file, but no rrd. I then did the following iostat2=iostat, and it started inputting rrd files. However, I was trying to stay away from iostat and write me own test. I'm trying to figure out how to send data to Hobbit and graph it. If I do the suggested: iostat2=ncv, I get no rrd data. So, how do you get data going into Hobbit for rrd? Can someone point me in the right direction? I've read some of the rrd tutorials, not all. I'm trying to do my own iostat, and mpstat commands to track disk i/o wait and busy times, and mpstat multiple cpu graphs. I don't need alerts, just trends really. Thanks.James

4 4

[hobbit] server load issue, clientupdate bug?
by David.Gore＠VerizonBusiness.com 15 Dec '06

15 Dec '06

This appears to happen when you try to update files like runclient.sh, hobbitclient.sh, and hobbitclient-`uname -s`.sh or any other file that is not write-able. It can or was resolved by making the files write-able, a hassle for a bunch of hosts, and restarting the hobbit server. ~David David Gore wrote: > Henrik, > > For you consideration, I think the server may go a little crazy if you > try to send updated client packages to too many hosts at the same time, > false failed tests, pages sent on those same false failed tests, and > status pages not available for those same false failed tests: > > bb-display.log: > ... 2006-11-30 01:11:44 Whoops ! bb failed to send message - timeout > 2006-11-30 01:11:44 hobbitd status-board not available > > clientdata.log: > 2006-11-30 00:51:20 Whoops ! bb failed to send message - timeout > 2006-11-30 00:56:12 Whoops ! bb failed to send message - timeout > 2006-11-30 00:58:17 Whoops ! bb failed to send message - timeout > 2006-11-30 00:59:41 Whoops ! bb failed to send message - timeout > > hobbitclient.log: > [hobbit at hobbit1 logs]$ cat hobbitclient.log > 2006-11-30 00:58:16 Whoops ! bb failed to send message - timeout > > Here is what my config looks like client-local.cfg: > > [temip-be-hpux11] # these are class names, not host names > clientversion:temip-be-hpux11v10 > log:/var/adm/syslog/syslog.log:10240 > [temip-fe-hpux11] > clientversion:temip-fe-hpux11v10 > log:/var/adm/syslog/syslog.log:10240 > [temip-tns-hpux11] > clientversion:temip-tns-hpux11v2 > log:/var/adm/syslog/syslog.log:10240 > > I suppose I updated about 60+ remote hosts at once, perhaps we should > just try to figure out what our server can handle? Or should the server > be made to be smarter? The server is a simple 3 Ghz dual core Intel > Fedora Core 5 host with 1G of memory. > >

1 1