December 2006 - Xymon - Xymon mailman web

DOWTIME specification? (snapshot of 10 aug. 06)
by Dominique.Frise＠unil.ch 13 Dec '06

13 Dec '06

Hi, The bb-hosts man-page says: DOWNTIME=[columns:]day:starttime:endtime:cause[,day:starttime:endtime:cause] But the info column decodes: DOWNTIME=[days:]columns:starttime:endtime:cause[,day:starttime:endtime:cause] Examples: bb-hosts: 1.2.3.4 kawa2 # DOWNTIME=http,orcl:246:0000:0130:Backups info column: Planned downtime: http, orcl:246:0000:0130:Backups (wrongly decoded) bb-hosts: 1.2.3.4 kawa2 # DOWNTIME=246:http,orcl:0000:0130:Backups info column: Planned downtime: Tue/Thu/Sat:http, orcl:0000:0130:Backups (correctly decoded) Which one is right? Dominique UNIL - University of Lausanne

1 0

How to unsubscribe
by vadud3＠gmail.com 12 Dec '06

12 Dec '06

On 12/12/06, Bhupendra Patel <mukhi65 at yahoo.com> wrote: > I have requested for unsubscribe my email list, but i > am still getting lost email about hobbit. please take > me off the list. Your email is not relevant to the original subject. I just changed it. Send an empty email to hobbit-unsubscribe at hswn.dk to unsubscribe > > Thanks. > > --- Henrik Stoerner <henrik at hswn.dk> wrote: > > > On Thu, Dec 07, 2006 at 11:27:08PM +0100, Stef Coene > > wrote: > > > On Thursday 07 December 2006 23:01, Trent Melcher > > wrote: > > > > Has anyone thought about or implemented a > > configuration database backend > > > > for hobbit, primarily a database replacement for > > the hobbit-clients.cfg > > > > and hobbit-alerts.cfg to start....these are a > > couple that I would like > > > > to buils a webfront to and be able to give > > limited access to users so > > > > they could modify thresholds and alerting > > capabilities when needed. > > > > > > > > I did this about 4 years back for Big Brother > > using Informix, I was > > > > able to setup thresholds and a replacement for > > the bb-host file inside a > > > > couple tables in a database. However back then > > Big Brother was mostly > > > > shell scripts and flat files for all its > > configuration. So adding hooks > > > > into it for talking to a databse was easy. With > > hobbit its all compiled > > > > code and Im not sure where to start, plus I > > don't have access to an > > > > Informix database or the API's for it anymore so > > Im looking at mysql and > > > > its api's for writing code in C. > > > > > > We are thinking about using mysql for storing > > trends and status messages. > > > > > > > Be careful with the status messages, at least if you > > want to store the > > current status in a DB. Historical status messages - > > those that are > > currently stored in the histlogs/ directory - are > > OK, but for the > > current status log I think that the overhead > > associated with updating > > each status log in a DB every 5 minutes will be very > > high. And the > > number of times you'll actually be retrieving these > > data will probably > > be very small. > > > > Copying the historical statuslogs (or the current > > ones) is very easy to > > do with an extra Hobbit worker module hanging off > > the "status" or > > "stachg" channels. You do not need to make any > > modifications to Hobbit > > itself - you basically run "hobbitd_channel > > --channel=stachg MYDBPROGRAM" > > and your program is fed all of the status messages > > on it's STDIN. > > > > > > As for the trends data, I believe there are some > > patches to the rrdtool > > library that will let you store the RRD files in a > > DB. Check the rrd-users > > mailing list. > > > > > > My personal favourite for a DB backend would be > > SQLite, since this > > eliminates all requirements for an external DB > > ressource. You don't > > want your monitoring to stop working when the DB > > becomes inaccessible. > > > > > > > > Regards, > > Henrik > > > > > > To unsubscribe from the hobbit list, send an e-mail > > to > > hobbit-unsubscribe at hswn.dk > > > > > > > > > > > ____________________________________________________________________________________ > Yahoo! Music Unlimited > Access over 1 million songs. > http://music.yahoo.com/unlimited > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

1 0

Configuration database backend.
by tmelcher＠saionline.com 12 Dec '06

12 Dec '06

Has anyone thought about or implemented a configuration database backend for hobbit, primarily a database replacement for the hobbit-clients.cfg and hobbit-alerts.cfg to start....these are a couple that I would like to buils a webfront to and be able to give limited access to users so they could modify thresholds and alerting capabilities when needed. I did this about 4 years back for Big Brother using Informix, I was able to setup thresholds and a replacement for the bb-host file inside a couple tables in a database. However back then Big Brother was mostly shell scripts and flat files for all its configuration. So adding hooks into it for talking to a databse was easy. With hobbit its all compiled code and Im not sure where to start, plus I don't have access to an Informix database or the API's for it anymore so Im looking at mysql and its api's for writing code in C. I guess Im looking to see if anyone has started some development in this area? Thanks Trent Trent Melcher Unix/Linux Systems Administrator Securities America Financial Corporation (402) 399-9111 x2774 tmelcher at saionline.com Securities America, Inc., a Registered Broker/Dealer, Member NASD/SIPC. Advisory services offered through Securities America Advisors, Inc., an SEC Registered Investment Advisory .

10 19

RRD problem with a Custom Script
by Gudmundur.Ingvarsson＠landsbanki.is 12 Dec '06

12 Dec '06

Hello Hobbit lovers. I'm hoping someone can help me with this dilemma I'm facing. I created these settings and the script to count the number of connections to a specific IP.PORT from a few machines. The status comes correctly into Hobbit and it does go to the warning and critical levels if they are exceeded and the monitor works quite well. What isn't working is the RRD graph. On one hand it seems the rrd file is not being generated although Hobbit does link to a graph in the status page. But no graph is displayed and clicking on the hobbit graph rb-conn link gives four magnifying glasess and hourly, daily etc lines. But again, no graphs. On the other if I use the NCV feature hobbit does generate the RRD but not only links it wrong in the web-gui but also writes the information wrong into it. The Output from the RRD file  <rrd> <version> 0001 </version> <step> 300 </step>  <lastupdate> 1165934698 </lastupdate>  <ds> <name> Heildartegngingarfr </name> <type> DERIVE </type> <minimal_heartbeat> 600 </minimal_heartbeat> <min> 0.0000000000e+00 </min> <max> NaN </max>  <last_ds> 8 </last_ds> <value> 1.9800664452e+00 </value> <unknown_sec> 0 </unknown_sec> </ds> Can anyone help me please, I've banged my head against my desk for a couple of days now but still nothing happens. I must be missing something which I have not been able to find on this mailing list or anywhere else. Am I doing this all wrong? Should I be using the --extra-scripts option for hobbitd_rrd or just the NCV or should I skip both and kick the Hobbit!? Below are all the settings I have for this. This is the line as it comes into Hobbit @@HOBBITDCHK-V1||myhostname|rb-conn|666.666.666.666|green||green|1165925931|1165925328|1165927731|0|0|-1|0|status myhostname.rb-conn green Tue Dec 12 12:18:51 CUT 2006\n\n\tCurrent connections from myhostname to RB currently at 75 (OK)\n\t|| This is from hobbitgraph.cfg [rb-conn] TITLE Kjarna tengingar til RB YAXIS Tegningar DEF:p=rb-conn.rrd:rb-conn:AVERAGE AREA:p#DD0000:Connections COMMENT:\n GPRINT:p:LAST: \: %5.1lf%s (cur) GPRINT:p:MAX: \: %5.1lf%s (max) GPRINT:p:MIN: \: %5.1lf%s (min) GPRINT:p:AVERAGE: \: %5.1lf%s (avg)\n >From hobbitserver.cfg TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tcp,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sendmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,files,procs=processes,ports,clock,lines,rb-conn" GRAPHS="la,disk,inode,qtree,files,processes,memory,users,vmstat,iostat,tcp.http,tcp,ncv,netstat,ifstat,mrtg::1,ports,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,clock,lines,rb-conn" NCV_rb-conn = "Heildartegngingarfr:GAUGE" >From clientlaunch.cfg on the client machine [rb-conn] ENVFILE $HOBBITCLIENTHOME/etc/hobbitclient.cfg CMD $HOBBITCLIENTHOME/ext/RB-Connections.sh 80 150 LOGFILE $HOBBITCLIENTHOME/logs/rbcon.log INTERVAL 5m And the script from the ext directory on the client machine (Called RB-Connections.sh) #!/bin/ksh # This script is an extension for the BB client running on # your server. It will feed data about the local kjarna connections # into Hobbit. COLUMN=rb-conn # Name of the column OUTPUT=$(netstat -an | grep 555.555.555.555.3120 | wc -l|awk '{ print $1}') WARN="$1" PANIC="$2" if [[ $OUTPUT -ge $PANIC ]] then COLOR="red" STATUS="Critical" elif [[ $OUTPUT -ge $WARN ]] then COLOR="yellow" STATUS="Warning" else COLOR="green" STATUS="OK" fi # Tell Hobbit about it $BB $BBDISP "status $MACHINE.$COLUMN $COLOR `date` Current connections from $MACHINEDOTS to RB currently at $OUTPUT ($STATUS) " exit 0 Fyrirvari/Disclaimer http://www.landsbanki.is/disclaimer

3 3

alerting
by jonbjorn＠mbl.is 12 Dec '06

12 Dec '06

Hi all. How do I get hobbit to send alert (email, sms) when http connection times out and the color is white ? regards JB

2 1

[hobbit] Ghost Clients report
by massimo.morsiani＠gilbarco.com 12 Dec '06

12 Dec '06

Hi all, looking at "Ghost Clients" report page I have: Hostname Sent from Report age Connected 10.28.64.54 0:49 Florence 10.28.64.54 0:49 flrwscrd9.flr.gilbarco.com 10.28.66.17 0:22 INTERNAL 10.28.64.54 0:50 Link 10.28.64.54 0:49 Outside 10.28.64.54 0:49 Tunnel 10.28.64.54 0:49 Uplink 10.28.64.54 0:49 where flrwscrd9 is the only "real ghost" client. What are all the other entries? Note that 10.28.64.54 is the IP address of my Hobbit server. Any explanation/suggestion/similar situation? Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.p.a. via de' Cattani, 220/G 50145 Firenze tel: +39-055-30941 fax: +39-055-318603 email: massimo.morsiani at gilbarco.com web: http://www.gilbarco.it This message (including any attachments) contains confidential and/or proprietary information intended only for the addressee. Any unauthorized disclosure, copying, distribution or reliance on the contents of this information is strictly prohibited and may constitute a violation of law. If you are not the intended recipient, please notify the sender immediately by responding to this e-mail, and delete the message from your system. If you have any questions about this e-mail please notify the sender immediately.

3 2

change color
by c.rehberger＠oclcpica.org 12 Dec '06

12 Dec '06

Hello, sorry for my stupid question... On server side I've added a new service in bb-services which makes an smtp on a specified port of a mailserver. The entry in bb-hosts looks like: 193.31.10.90 hunter-in.Sisis.de # ntp ssh postini1 When the service "postini1" fails the color switches to yellow. Where can I configure, that the color goes to red like the ssh service? Thanx a lot Chris -- Christian Rehberger System Consultant · OCLC PICA GmbH Grünwalder Weg 28g · 82041 Oberhaching · Germany t +49-(0)89-61308 333 · f +49-(0)89-61308 399 e c.rehberger at oclcpica.org · w http://www.oclcpica.org

1 0

Big Alerting Issue
by geoff.hallford＠gmail.com 12 Dec '06

12 Dec '06

Hi, I have a problem where Hobbit is not properly sending alerts based on the PAGE criteria. When I look at the info button for TESTHOST and TESTHOST1, it *DOES* shows an alert to test at test.org. When I run the test 'bbcmd hobbitd_alert --test TESTHOST --color=red' or 'bbcmd hobbitd_alert --test TESTHOST --color=red' it *DOESN'T' show that it matched an alert: 00023954 2006-12-10 21:14:51 Matching host:service:page 'TESTHOST:--color=red:' against rule line 314 00023954 2006-12-10 21:14:51 Failed 'PAGE=$SERVER1,$SERVER2 COLOR=red' (pagename not in include list) I also did a real test of taking the host down and no page went out and nothing is listed in the /var/log/hobbit/notifications.log. THIS IS URGENT IF ANYONE CAN HELP. I recently switched my alerts to be by pagename and thought it should work based on the info page but I guess not. Thanks. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SETUP bb-hosts ------------ page servers Servers subpage wintel Wintel Servers 10.10.10.10 TESTHOST page other Other subpage othersub Other page 20.20.20.20 TESTHOST1 hobbit-alerts.cfg ----------------------- $SERVER1=servers/wintel $SERVER2=other/othersub PAGE=$SERVER1,$SERVER2 COLOR=red MAIL test at test.org RECOVERED

3 3

[hobbit] Problem viewing "Critical Systems"
by Tom_D._Bullers＠omb.eop.gov 11 Dec '06

11 Dec '06

I'm getting a segmentation fault when running the hobbit-nkview.sh script. I looked at the file that hobbit is generating when I select the "Critical Systems" file menu option. This is the content. <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>500 Internal Server Error</title> </head><body> <h1>Internal Server Error</h1> <p>The server encountered an internal error or misconfiguration and was unable to complete your request.</p> <p>Please contact the server administrator, you at example.com and inform them of This si the error in Apache: [Mon Dec 11 16:42:42 2006] [error] [client 10.11.14.60] Premature end of script headers: hobbit-nkview.sh, referer: http://localhost:10001/s-hob-cgi/bb-eventlog.sh When I try to execute the cgi script from the command line I get a segmentation fault: [s-hob1 at saomb60 cgi-bin]$ /home/s-hob1/hobbit/server/bin/hobbit-nkview.cgi Content-type: text/html Segmentation fault [s-hob1 at saomb60 cgi-bin]$ I did a standard compile under RedHat on a Compaq DL380 server. I don't know what else I can do to resolve this. Any Ideas? Thanks. -tom ~~~~~~~~~~~~~~~~~~~~~~ Tom Bullers Systems Administrator Phone: (202)395-5678 mailto:tom_bullers at omb.eop.gov > -----Original Message----- > From: Henrik Stoerner [mailto:henrik at hswn.dk] > Sent: Monday, December 11, 2006 11:36 AM > To: hobbit at hswn.dk > Subject: Re: [hobbit] Problem viewing "Critical Systems" > > On Mon, Dec 11, 2006 at 11:20:43AM -0500, Bullers, Tom D. wrote: > > > I get the the same error, but with this browser it's a bit more > > descriptive - "The file hobbit-nkview.sh" is of type > application/x-sh, > > and Mozilla does not know how to handle this file type. > The file is > > lcoated at: http://hostname:1000 > > > > What should Mozilla do with this file?" > > > > It seems that Apache is trying to send the .sh file instead > of executing it and forwarding the output. > > What's the full URL for that link you're clicking on ? > "http://hostname:1000" doesn't look right, there must be > something more than that. > > Check your Apache setup for the ScriptAlias settings. The > results you get indicate that the directory with the > hobbit-nkview.sh is considered a normal document directory by > Apache, instead of a script (CGI) directory. > > > Regards, > Henrik > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > >

1 0

[hobbit] Help with disk monitoring
by PNIXON＠ci.somerville.ma.us 11 Dec '06

11 Dec '06

In the meantime, before you get around to all your clients, you can edit the bbsys.local file and change DF="/bin/df -k" Line to: DF="/bin/df -kP" Which will take out the extra line return. *PS - Dangit Henrik! I knew this answer and was looking for it to see where to change it! Hehehe! -----Original Message----- From: Bailey, Edward [mailto:ebailey at transunion.com] Sent: Monday, December 11, 2006 4:42 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Help with disk monitoring Thanks for your quick response:) I did see that we have the big brother client installed so I need to plan on upgrading the clients first. Thanks again Ed > -----Original Message----- > From: Henrik Stoerner [mailto:henrik at hswn.dk] > Sent: Monday, December 11, 2006 4:28 PM > To: hobbit at hswn.dk > Subject: Re: [hobbit] Help with disk monitoring > > On Mon, Dec 11, 2006 at 04:21:16PM -0500, Bailey, Edward wrote: > > Also the file systems from these problem servers show up > differently > > as well. The standard file system mounts are displayed without an > > issues but the LVM maps display the mount point but nothing else > > > > /dev/mapper/sysvg-opt > > /dev/mapper/sysvg-var > > /dev/cciss/c0d0p1 2016016 216060 1697544 12% / > > /dev/cciss/c0d0p2 3020172 950024 1916728 34% /usr > > This is a classical problem with the Big Brother client - you are > apparently using the BB client instead of the Hobbit client. What's > happening is that the "df" command used on the monitored servers > breaks long lines in the output, so your "df" output looks like > > Filesystem 1K-blocks Used Available Use% Mounted on > /dev/sda1 579598 192382 356293 36% / > /dev/mapper/vg1-lv_usr > 2568144 648964 1788724 27% /usr > /dev/mapper/vg1-lv_var > 1048540 733448 315092 70% /var > > and since the BB client does a 'grep "^/dev"' to weed out entries like > tmpfs, you only get the /dev/mapper line, not the next line with the > actual data in it. > > The solution is to change the DFCMD setting on your servers to "df > -P", making it use the POSIX format output. > > > Regards, > Henrik > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > > > ------------------------ CONFIDENTIALITY NOTICE This e-mail and any attachments contain information which may be confidential or privileged and exempt from disclosure under applicable law. If you are not the intended recipient, be aware that any disclosure, copying, distribution, or use of the contents of this information is without authorization and is prohibited. If you have received this email in error, please immediately notify us by returning it to the sender and delete this copy from your computer system. Thank you. ------------------------ To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0