May 2006 - Xymon - Xymon mailman web

Hobbit 4.1.2p2 release ?
by frederic.mangeant＠steria.com 30 May '06

30 May '06

Hi Henrik as there are already 5 patches (*) for Hobbit 4.1.2p1, don't you think a 4.1.2p2 version should be released ? Maybe it would save some time for Hobbit beginners ? (*) hobbit-4.1.2p1-query.patch <http://www.hswn.dk/hobbitsw/hobbit-4.1.2p1-query.patch> hobbit-4.1.2p1-grouptitle.patch <http://www.hswn.dk/hobbitsw/hobbit-4.1.2p1-grouptitle.patch> hobbit-4.1.2p1-history.patch <http://www.hswn.dk/hobbitsw/hobbit-4.1.2p1-history.patch> hobbit-4.1.2p1-fgets.patch <http://www.hswn.dk/hobbitsw/hobbit-4.1.2p1-fgets.patch> hobbit-4.1.2p1-doublehost.patch <http://www.hswn.dk/hobbitsw/hobbit-4.1.2p1-doublehost.patch> -- Frédéric Mangeant Steria EDC Sophia-Antipolis

2 1

problem with RECOVERED
by Dominique.Frise＠unil.ch 30 May '06

30 May '06

Hi, We are using 4.2-alfa-20060423 (snapshot of 25th may) and see problems with recovered messages/SMS: they sometimes don't get sent. We have a general Macro in hobbit-alerts.cfg that is used by all mail or SMS rules: ##### Mail & SMS defaults #### $MAIL_DEFS=REPEAT=24h RECOVERED $SMS_DEFS=COLOR=red FORMAT=SMS $MAIL_DEFS ##### Mail & SMS recipients #### $MAIL_DF=MAIL example at example.com $MAIL_DEFS $SMS_DF=SCRIPT $SENDSMS 0123456789 $SMS_DEFS #### Example rule #### HOST=argos,bigmac,docusurf,eliot,fmp7web,ged,hippocrate,iris,mailc,midas,zeb1,zeb2,zelda,zelda2 $MAIL_DF $SMS_DF In the following notifications.log you can see that recovered message never got sent for hobbitd: Thu May 4 05:01:31 2006 uldns2.smtp (130.223.4.5) abc.def at xy.ch 1146711691 725 Thu May 4 05:01:46 2006 uldns2.smtp (130.223.4.5) abc.def at xy.ch 1146711706 725 15 Thu May 4 06:03:57 2006 iris.hobbitd (130.223.27.23) abc.def at xy.ch 1146715437 0 Thu May 4 07:02:24 2006 falco.sslcert (130.223.5.21) www.ddd at xy.ch 1146718944 0 Thu May 4 07:05:54 2006 mailc1.msgs (130.223.27.61) root at localhost 1146719154 400 Thu May 4 07:10:55 2006 mailc1.msgs (130.223.27.61) root at localhost 1146719454 400 300 The history log shows that hobbitd was recovered after 2 cycles (10 min. 1 sec). Last 50 log entries (Full HTML log) Date Status Duration Thu May 04 06:13:58 2006 green 1:38:44 Thu May 04 06:03:57 2006 yellow 0:10:01 I have another example for a procs test where the duration was 23 min. BTW: a man page for log formats would be helpful. Dominique UNIL - University of Lausanne

5 17

bbgen core dump on "empty" alternate pages
by kolbjorn.barmen＠uninett.no 30 May '06

30 May '06

I just noticed something today... A few weeks ago I set up an alternate view "TESTING:" where I can put hosts that are still not in production, but that might be interesting to monitor by the people who are setting them up. As it was I had two such hosts. A few days ago I moved those over to PROD: which left TESTING: empty - no hosts. This caused bb-gen to core dump every time it tried to create the page for TESTING: - I just noticed this when playing with the report generator and noticed that the bbgen test for the server changed between red and green every 5 minutes or so... (I have not set up paging and email alerts yet - go figure ;) ) I fixed this by putting a dummy host in bb-hosts: 0.0.0.0 dummy # TESTING: noconn noinfo notrends However, I guess this can be fixed for 4.2 (if it isnt already) so I thought I'd mention it. Hopefully I'm not the only one who can reproduce this :) -- Kolbjørn Barmen UNINETT Driftsenter

2 1

logfetch.status on Darwin clients
by Dominique.Frise＠unil.ch 30 May '06

30 May '06

Hi, On Darwin clients logfetch.status never get updated (shows 0 bytes) and thus alert messages never get expired: -----clientdata------ [msgs:/var/log/system.log] Apr 28 03:15:01 zelda2 cp: error processing extended attributes: Operation not permitted Apr 28 03:15:01 zelda2 cp: error processing extended attributes: Operation not permitted Apr 28 03:15:01 zelda2 cp: error processing extended attributes: Operation not permitted Apr 28 06:17:13 zelda2 sudo: bb : TTY=unknown ; PWD=/Users/bb ; USER=root ; COMMAND=/sbin/shutdown -H Apr 28 08:13:21 zelda2 su: bb to root on /dev/ttyp1 Apr 28 08:14:02 zelda2 sudo: bb : TTY=ttyp1 ; PWD=/Users/bb ; USER=root ; COMMAND=/sbin/SystemStarter stop BB Apr 28 08:15:36 zelda2 su: bb to root on /dev/ttyp1 Apr 28 08:16:08 zelda2 sudo: bb : TTY=ttyp1 ; PWD=/soft/pub/BB/hobbit/client/ext ; USER=root ; COMMAND=/sbin/SystemStarter stop BB Apr 28 08:16:08 zelda2 SystemStarter[3131]: "/Library/StartupItems/BB/BB" failed security check: not owned by UID 0 Apr 28 08:16:08 zelda2 SystemStarter[3131]: "/Library/StartupItems/BB/BB" failed security check: not owned by GID 0 Apr 28 08:16:08 zelda2 SystemStarter[3131]: Unknown service: BB Apr 28 08:16:12 zelda2 sudo: bb : TTY=ttyp1 ; PWD=/soft/pub/BB/hobbit/client/ext ; USER=root ; COMMAND=/sbin/SystemStarter stop BB Apr 28 08:16:12 zelda2 SystemStarter[3132]: "/Library/StartupItems/BB/BB" failed security check: not owned by UID 0 Apr 28 08:16:12 zelda2 SystemStarter[3132]: "/Library/StartupItems/BB/BB" failed security check: not owned by GID 0 Apr 28 08:16:12 zelda2 SystemStarter[3132]: Unknown service: BB Apr 28 08:16:18 zelda2 sudo: bb : TTY=ttyp1 ; PWD=/soft/pub/BB/hobbit/client/ext ; USER=root ; COMMAND=/sbin/SystemStarter start BB Apr 28 08:16:18 zelda2 SystemStarter[3133]: "/Library/StartupItems/BB/BB" failed security check: not owned by UID 0 Apr 28 08:16:18 zelda2 SystemStarter[3133]: "/Library/StartupItems/BB/BB" failed security check: not owned by GID 0 Apr 28 08:16:18 zelda2 SystemStarter[3133]: Unknown service: BB Apr 28 08:16:37 zelda2 sudo: bb : TTY=ttyp1 ; PWD=/soft/pub/BB/hobbit/client/ext ; USER=root ; COMMAND=/sbin/SystemStarter -d start BB Apr 28 08:16:37 zelda2 SystemStarter[3137]: "/Library/StartupItems/BB/BB" failed security check: not owned by UID 0 Apr 28 08:16:37 zelda2 SystemStarter[3137]: "/Library/StartupItems/BB/BB" failed security check: not owned by GID 0 Apr 28 08:16:37 zelda2 SystemStarter[3137]: Unknown service: BB Apr 28 08:20:49 zelda2 su: pam_authenticate: Authentication failure Apr 28 08:20:55 zelda2 su: bb to root on /dev/ttyp1 Apr 28 08:21:27 zelda2 SystemStarter[3154]: "/Library/StartupItems/BB/BB" failed security check: not owned by UID 0 Apr 28 08:21:27 zelda2 SystemStarter[3154]: "/Library/StartupItems/BB/BB" failed security check: not owned by GID 0 Apr 28 08:21:27 zelda2 SystemStarter[3154]: Unknown service: BB Apr 28 08:22:56 zelda2 sudo: bb : TTY=ttyp1 ; PWD=/soft/pub/BB/hobbit/client/ext ; USER=root ; COMMAND=/sbin/SystemStarter start BB Apr 28 08:24:12 zelda2 sudo: bb : TTY=ttyp1 ; PWD=/soft/pub/BB/hobbit/client/tmp ; USER=root ; COMMAND=/sbin/SystemStarter restart BB Apr 28 08:57:20 zelda2 su: bb to root on /dev/ttyp1 [logfile:/var/log/system.log] type:100000 (file) mode:640 (-rw-r-----) linkcount:1 owner:0 (root) group:80 (admin) size:3 clock:1146219697 (2006/04/28-12:21:37) atime:1146219697 (2006/04/28-12:21:37) ctime:1146207446 (2006/04/28-08:57:26) mtime:1146207446 (2006/04/28-08:57:26) ------------------ zelda:/soft/pub/BB/hobbit/client/tmp bb$ ls -la total 80 drwxr-xr-x 5 bb ci 170 28 Apr 12:28 . drwxr-xr-x 9 bb ci 306 27 Apr 09:10 .. -rw-r--r-- 1 bb ci 63 28 Apr 12:28 logfetch.cfg -rw-r--r-- 1 bb ci 34 28 Apr 12:28 logfetch.status -rw-r--r-- 1 bb ci 29495 28 Apr 12:28 msg.txt zelda:/soft/pub/BB/hobbit/client/tmp bb$ cat logfetch.status /var/log/system.log:0:0:0:0:0:0:0 zelda:/soft/pub/BB/hobbit/client/logs bb$ wc /var/log/system.log 349 2847 47437 /var/log/system.log hobbitclient.log is empty. Where could be the problem? Dominique UNIL - University of Lausanne

2 6

Hobbit client data truncated by server?!
by saam＠tomikoni.de 30 May '06

30 May '06

Hi, after reading the docs, searching the list, searching the source code i have no idea, what is going wrong here: Data that is sent by the hobbit client is truncated somewhere. My Hobbit client messages are about 30kB. The client sents the message to the server without loss (verified with netcat). Monitoring the client channel via [clientlogger] CMD hobbitd_channel --channel=client cat in hobbitlaunch.cfg results in: > >DATADATADATA >DATADATADATA >DATADATAD > >... DATA TRUNCATED ... > The received data is cut at approx 10kB. All MSG_* variables that limit communication are clearly above this value (MSG_CLIENT=256*1024). I have set anything to debug with no results. I did not find the place in the source code where the "DATA TRUNCATED" message is generated, so i can't trace back why it is truncated... Help me please! Regards, Mirko ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

3 2

RECOVERED alerts still sent outside of TIME window
by EES2Y＠hscmail.mcc.virginia.edu 29 May '06

29 May '06

Howdy all, We just had one of our engineers get a rude awakening last night by a UPS that had recovered from an error; I had thought that the RECOVERED pages were under the same TIME restrictions as normal alerts, but a quick look at the code leads me to believe that this is not so. Before I (or somebody else ;) attempts a fix, I wanted to make sure that there wasn't a valid reason behind this implementation. (I'm looking at the criteria match routine in the do_alerts.c file, specifically lines 899 through 914). TIA, -Eric Schwimmer Network Engineer UVA HSCS Network Engineering

2 1

[hobbit] ALERTS time of day problem
by Mike.Rowell＠Rightmove.co.uk 29 May '06

29 May '06

Henrik, Thought it might be something like that, as a temporary fix I've created three different versions of the hobbit-alerts.cfg file and set cronjob's to move them into place as and when they are required. If we've got a beta due I'll wait for that, try it on my dev platform first if it's okay for a day I'll move it to the test (which is actually the redundant BB server), then to live, probably early week after the beta. Mike -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: 29 May 2006 20:55 To: hobbit at hswn.dk Subject: Re: [hobbit] ALERTS time of day problem On Mon, May 29, 2006 at 06:17:59PM +0100, Mike Rowell wrote: > Henrik, > > Thanks for the reply, the alert is being picked up on the following > line > > MAIL=support SERVICE=aq COLOR=RED FORMAT=SMS DURATION>5 REPEAT=1h > TIME=W:0900:1700 STOP > > Which is line 130 of the hobbit-alert.cfg file. The thing is that it > just alerted me at 18:10, which is outside of the TIME setting for > this entry. Any ideas as to what to try next? Here's the > notifications log entries for that alert > > Mon May 29 18:11:05 2006 server.aq (10.8.2.1) systems 1148922665 0 Mon > May 29 18:11:05 2006 server.aq (10.8.2.1) support 1148922665 0 You mentioned you were running the 4.2pre version, which is a rather early snapshot of the 4.2 release. I do believe this has been fixed in the current code; what happens is that basically the alert code would ignore the general criteria like TIME when used together with a MAIL setting. So - I'd like you to try it out with the current snapshot (which will be a beta-release in a day or two). Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs service. ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs service. ________________________________________________________________________

1 0

feature request
by olivier＠qalpit.com 29 May '06

29 May '06

Hello Henrik, I have customers that want to be able to restart their apache service via a sudo script, which causes un-desired alarms.. I would like to disable a host.event from the host itseft without setting --maint-senders to all my network ? i just want to be sure the disable comand came from the ip corresponding to the host-s ip in bb-hosts... Olivier

2 1

[hobbit] ALERTS time of day problem
by Mike.Rowell＠Rightmove.co.uk 29 May '06

29 May '06

Henrik, Thanks for the reply, the alert is being picked up on the following line MAIL=support SERVICE=aq COLOR=RED FORMAT=SMS DURATION>5 REPEAT=1h TIME=W:0900:1700 STOP Which is line 130 of the hobbit-alert.cfg file. The thing is that it just alerted me at 18:10, which is outside of the TIME setting for this entry. Any ideas as to what to try next? Here's the notifications log entries for that alert Mon May 29 18:11:05 2006 server.aq (10.8.2.1) systems 1148922665 0 Mon May 29 18:11:05 2006 server.aq (10.8.2.1) support 1148922665 0 Mike -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: 28 May 2006 16:17 To: hobbit at hswn.dk Subject: Re: [hobbit] ALERTS time of day problem On Thu, May 25, 2006 at 09:06:53AM +0100, Mike Rowell wrote: > > Hobbit has been running fine and we've starting making finer grained > control on the alerts so that we don't get paged out of hours for > stuff that we don't need to deal with. Below is the hobbit-alerts entries. > The problem is that last night at 03:30am we were called out for an > alert on the aq service which according to how the alert is setup > should only be paging us between 0900 and 1700 weekdays. This is on > 4.2PRE, we have newer snapshots running in test but I don't want to > upgrade this platform unless I have to as it is running completely > stable except for this TIME problem. Please add "--cfid" to the hobbitd_alert CMD line in hobbitlaunch.cfg. Next time this happens, the subject of the alert will include a "[cfid:NUMBER]" text which is the line-number of your hobbit-alerts.cfg configuration that triggered this alert. Also, it would be interesting to see your notifications.log entries for these alerts. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs service. ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs service. ________________________________________________________________________

2 1

Hobbit talk
by gendalia＠iastate.edu 29 May '06

29 May '06

I gave a one hour in house seminar on using Hobbit at our university. I wrote up a lot of the text I wanted to say, and I have it on our web pages, if anyone is interested in it. Most of the URLs are inaccessible to people who don't work for us, but the text might be of some use. http://gendalia.public.iastate.edu/Hobbit.txt Tracy J. Di Marco White Information Technology Services Iowa State University

3 2