April 2006 - Xymon - Xymon mailman web

simple log question
by rmcgraw＠purdue.edu 06 Apr '06

06 Apr '06

I changed BBSERVERLOGS="/var/log/hobbit to BBSERVERLOGS="/local/hobbit/server/logs" and most of the logs are now being written to the new directory except for hobbitlaunch.log and hobbitlaunch.pid. They are still being written in /var/log/hobbit. Is there another variable that I need to change or is this compiled into the code? Thanks Robert _____________________________________________________________________ Robert P. McGraw, Jr. Manager, Computer System EMAIL: rmcgraw at purdue.edu Purdue University ROOM: MATH-807 Department of Mathematics PHONE: (765) 494-6055 150 N. University Street FAX: (419) 821-0540 West Lafayette, IN 47907-2067

2 1

"Client data" vs graph update date inconsistency
by gmbfly98＠gmail.com 06 Apr '06

06 Apr '06

I have a problem with one client that has stopped reporting data for a week. On the Hobbit server, the graphs for the individual monitoring stats (cpu, memory, disk, etc) show as being updated, but the "Client data" link shows it last being updated last week. I know the client data has changed, and the hobbit client is running. The IP and DNS is correct. I haven't changed anything on the client side, or anything on the server side for this host. Also, ping and SSH tests to the client work correctly. server bb-hosts entry (client IP e.f.g.h): a.b.c.d gumby-411 # CLIENT:gumby-411.FQDN ssh client hobbitclient.cfg (server IP a.b.c.d): BBDISP="e.f.g.h" BBDISPLAYS="" I tried dropping the columns and letting them regenerate, but they came back with the same week-old data. Any ideas?

1 3

FDQN question (using hobbit-4.2-alfa-20060404)
by Dominique.Frise＠unil.ch 06 Apr '06

06 Apr '06

Hi, As we do monitor only one domain with Hobbit, we set FQDN to false in hobbitserver.cfg. While testing rules in hobbit-clients.cfg with hobbitd_client we noticed that HOST entries must be fully qualified to be recognised: HOST=argos,eliot LOAD 8.0 16.0 LOG messages quota_ufs HOST=argos.unil.ch,eliot.unil.ch LOAD 8.0 16.0 LOG messages quota_ufs [bb at iris etc]$ ../bin/hobbitd_client --test Hostname (.=end, ?=dump, !=reload) []: argos Unknown host Hostname (.=end, ?=dump, !=reload) [argos]: argos.unil.ch Test (cpu, mem, disk, proc): cpu Load: Yellow at 8.00, red at 16.00 Uptime: From boot until 1h ,and after uptime Is that normal behaviour? Dominique UNIL - University of Lausanne

3 4

4.2-alpha : hobbitreports.sh crashes
by CHRIS.MORRIS＠RWEnpower.com 06 Apr '06

06 Apr '06

I am still having the same problem with the pre-generated reports (daily, weekly, monthly) on AIX 5.2 > /usr/local/hobbit2/server/bin/bbcmd --env=/usr/local/hobbit2/server/etc/hobbitserver.cfg hobbitreports.sh daily + '[' daily == '-?' -o daily == --help -o 1 -eq 0 ']' + '[' /usr/local/hobbit2/server = '' ']' + REPORTTOPDIR=/usr/local/hobbit2/server/www/periodic + REPORTTOPURL=/hobbit2/periodic + REPTYPE=daily + '[' daily == '' ']' + TODAY= + '[' '' == '' ']' + TODAY=today + '[' daily == daily ']' ++ /usr/linux/bin/date '--date=today -1 day' +%Y/%m/%d + REPDIR=daily/2006/04/05 ++ /usr/linux/bin/date '--date=today -1 day' '+%d %b %Y' + set 05 Apr 2006 + SDAY=05 + SMON=Apr + SYEAR=2006 ++ /usr/linux/bin/date '--date=today -1 day' '+%d %b %Y' + set 05 Apr 2006 + EDAY=05 + EMON=Apr + EYEAR=2006 ++ /usr/linux/bin/date +%s --date '05 Apr 2006 00:00:00' + STIME=1144191600 ++ /usr/linux/bin/date +%s --date '05 Apr 2006 23:59:59' + ETIME=1144277999 + mkdir -p /usr/local/hobbit2/server/www/periodic/daily/2006/04/05 + BBWEB=/hobbit2/periodic/daily/2006/04/05 + /usr/local/hobbit2/server/bin/bbgen --reportopts=1144191600:1144277999:0:nongr --recentgifs --subpagecolumns=2 /usr/local/hobbit2/server/www/periodic/daily/2006/04/05 /usr/local/hobbit2/server/bin/hobbitreports.sh: line 78: 22090 IOT/Abort trap (core dumped) BBWEB=$REPORTTOPURL/$REPDIR $BBHOME/bin/bbgen --reportopts=$STIME:$ETIME:0:nongr $BBGENREPOPTS $REPORTTOPDIR/$REPDIR + exit 0 gdb ../bin/bbgen core GNU gdb 6.0 Copyright 2003 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "powerpc-ibm-aix5.1.0.0"... (no debugging symbols found)... Core was generated by `bbgen'. Program terminated with signal 6, Aborted. #0 0xd01ecf40 in raise () from /usr/lib/libc.a(shr.o) (gdb) bt #0 0xd01ecf40 in raise () from /usr/lib/libc.a(shr.o) #1 0xd020d2c8 in abort () from /usr/lib/libc.a(shr.o) #2 0x10026040 in sigsegv_handler () #3 <signal handler called> #4 0x1000fedc in strncpy () #5 0x10014754 in parse_histlogfile () #6 0x100150fc in parse_historyfile () #7 0x100106a8 in init_state () #8 0x1001136c in load_state () #9 0x2000e5f8 in ?? () Any chance this can be fixed? Thanks Chris **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither RWE npower nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). *****************************************************************************

1 0

[hobbit] display howto
by Craig_Whilding＠mentor.com 06 Apr '06

06 Apr '06

Thanks for the info Henrik, I'd already set this up but the network test bit was causing me problems (think id had BBDISPLAYS set for int and ext ip's), putting it in the script sorted that finally! I added the BBDISP value into the bbretest-net.sh script also. I use the NET: tag in bbhosts to locally test servers on the machine that's receiving info from other hobbit servers also. Thanks, Craig Whilding -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: 05 April 2006 21:23 To: hobbit at hswn.dk Subject: Re: [hobbit] display howto On Wed, Apr 05, 2006 at 04:09:54PM -0400, Lee J. Imber wrote: > > I have a rack of servers on the east coast with a hobbit server and a > second rack of servers on the west coast with it's own hobbit server. > Each hobbit server only reports on the servers in its rack. The two > hobbit server do not know the other exists. > > What I would like to do is make the east coast hobbit server be the > "master" server. > Is there a way that I can have the west coast hobbit server send it's > display to the east coast hobbit server. Insert a bbproxy between the clients and the hobbit server on your west coast installation, then configure bbproxy to forward incoming messages to both servers. Right now: * West coast hobbitd listens on 1.2.3.4 port 1984 * West coast client sends message to IP 1.2.3.4 port 1984 (hobbitd) With bbproxy: * West coast hobbitd listens on 127.0.0.1 port 1984 * West cost bbproxy listend on 1.2.3.4 port 1984 * West coast client sends message to IP 1.2.3.4 port 1984 (bbproxy) * bbproxy forwards incoming messages to 127.0.0.1 port 1984, and to east coast hobbitd on 5.6.7.8 port 1984. Note that you do not need any changes to the clients. Changes needed: * Add a --listen=127.0.0.1 to hobbitd in your west coast hobbitlaunch.cfg * Enable bbproxy in your west coast hobbitlaunch.cfg. Use the option "--bbdisplay=127.0.0.1,5.6.7.8" to tell it to forward requests to both servers. * Change the BBSERVERIP setting in your hobbitserver.cfg to point at the 127.0.0.1 address. This setting is used e.g. by the web CGI's that talk to the "real" hobbit server, so it is best to point this at the real server IP, not the proxy. * If you run network tests from the same server, then you probably need to change the CMD setting in hobbitlaunch.cfg also. Instead of calling bbtest-net directly, put it into a shell script wrapper and set BBDISP explicitly to the 5.6.7.8 address before running bbtest-net. Otherwise, it will pick up the BBSERVERIP setting and send the network test results to 127.0.0.1 - so they won't go through the proxy, and hence you won't see them on the east coast server. * Restart Hobbit Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

BBWin 0.5 problem ?
by ctruffier＠pack-solutions.com 06 Apr '06

06 Apr '06

Hello, I'm using latest version of BBWin on a Windows 2000 Advanced Server, this version replace bbnt since about four days but nothing is reported to my hobbit server for cpu, memory... Here are the config file for this server and the entry in bb-hosts file: BBWin config file: <?xml version="1.0" encoding="utf-8" ?> <configuration> <bbwin> <setting name="hostname" value="seth" /> <setting name="timer" value="5m" /> <setting name="bbdisplay" value="192.168.0.104:1984" /> <load name="cpu" value="cpu.dll" /> <load name="disk" value="disk.dll" /> <load name="externals" value="externals.dll" /> <load name="procs" value="procs.dll" /> <load name="memory" value="memory.dll" /> <load name="stats" value="stats.dll" /> <load name="uptime" value="uptime.dll" /> <setting name="loglevel" value="9" /> <setting name="logpath" value="C:\BBWin.log" /> </bbwin> <cpu> <setting name="default" warnlevel="80" paniclevel="95" delay="3" /> </cpu> <disk> <setting name="default" warnlevel="90%" paniclevel="95%" /> </disk> <externals> <setting name="logstimer" value="60" /> </externals> <memory> <setting name="physical" warnlevel="95" paniclevel="98" /> <setting name="page" warnlevel="70" paniclevel="90" /> <setting name="virtual" warnlevel="80" paniclevel="90" /> </memory> <procs> </procs> <uptime> <setting name="delay" value="1h" /> <setting name="alarmcolor" value="yellow" /> </uptime> </configuration> BB-HOSTS entry: 192.168.0.5 seth # BBDISPLAY BBPAGER BBNET http://seth/ Thanks -- Christophe Truffier Pack-Solutions

4 6

Alarm hysteresis
by jht＠lj.net 06 Apr '06

06 Apr '06

Is it possible to have an alarm that is triggered at threshold A but doesn't go way until it drops to threshold B? Example: Alarm at 80% Turn off alarm only if drops below 70%

2 1

Untaring todays (6/4) snapshot
by lars.ebeling＠leopg9.no-ip.org 06 Apr '06

06 Apr '06

Hi, untaring todays snapshot gave hobbit-4.2-alfa-20060404 instead of expected hobbit-snapshot directory. Is this correct? Regards Lars Ebeling http://leopg9.no-ip.org Hobbithobbyist "It is better to keep your mouth shut and appear stupid than to open it and remove all doubt." -- Mark Twain

1 1

charset labeling
by oyama＠impress.co.jp 06 Apr '06

06 Apr '06

Hi, Is it possible to insert the following meta tag in the html header automatically? <META http-equiv="Content-Type" content="text/html;CHARSET=UTF-8"> In my bb-hosts, I have some COMMENT tags in Japanese. So, that would be useful for the browsers whose default charset is set to euc_jp or something (not utf-8). Thanks, keio

4 5

[hobbit] Alert config issue or question -- 4.2 Alpha Release (and 4.03 Rc1)
by KauffmanT＠nibco.com 05 Apr '06

05 Apr '06

OK, I *am* dense today. Found the way to specify duration on the test (DUH!) and am now trying to figure out wha' hoppened last week. Time to set up controlled test environment again . . . Tom -----Original Message----- From: Kauffman, Tom [mailto:KauffmanT at nibco.com] Sent: Wednesday, April 05, 2006 1:03 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Alert config issue or question -- 4.2 Alpha Release (and 4.03 Rc1) Well, I feel better, but then I'm still stumped. We had an instance last week where the telnet test failed for 21 minutes -- and no alerts went out. This box acts as a telnet server for half our remote-site scanners, so if we loose it, we have production people not working :-( What's the syntax for adding the duration on the test? I tried "bin/bbcmd hobbitd_alert --test whq-sapcon-1 telnet DURATION=361" while I was playing around, to no apparent avail (on the 4.2 alpha). Thanks! Tom -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Wednesday, April 05, 2006 12:09 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Alert config issue or question -- 4.2 Alpha Release (and 4.03 Rc1) On Wed, Apr 05, 2006 at 11:52:00AM -0400, Kauffman, Tom wrote: > I've a problem with my running 4.03RC1 (yeah, I know :-) that doesn't > seem to change with 4.2 Alpha. > 00018172 2006-04-05 11:42:36 Failed 'MAIL techsupt at localhost UNMATCHED DURATION>6m REPEAT=4h' (min. duration 0<360) > > So if I'm reading this correctly, my 'duration>6m' is being interpreted > as 'duration>6h'. The intent here is to require two failed tests before > paging. Where have I gone wrong? You're not reading it correctly. When you put DURATION>6m into the config, Hobbit internally converts that into 360 seconds. The output you see means that the current duration of the alert (0 seconds) - was less than the minimum duration required (360 seconds). I cannot recall if the test option in 4.0.3 allows you to specify the duration for the test-alert; with newer version you can, and then you'd see the the "0" change accordingly. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

1 0