June 2006 - Xymon - Xymon mailman web

LOG monitoring from serverside
by allan＠zandahar.net 13 Jun '06

13 Jun '06

Hi All I have been playing with the latest release of the client and sever over the past few days and have managed to get everything working (and some cool new bits) apart from the log file monitoring. I can get it so it shows the log file on the hobbit display/web but I cannot get it to search for anything and cause a status change I have this in client-local.cfg [db184.corporatesystems.com.au] file:/usr/bin/make file:/usr/bin/gcc log:/var/log/messages:10240 And then this in the hobbit-clients.cfg HOST=db184.corporatesystems.com.au PORT "LOCAL=%([.:]10042)" state=LISTEN TEXT=WEBMIN PORT "LOCAL=%([.:]22)" state=LISTEN TEXT=SSH PORT "LOCAL=%([.:]50000)" state=LISTEN TEXT=DB2 PROC cron 1 -1 yellow FILE /usr/bin/make MODE=644 FILE /usr/bin/gcc MODE=644 LOG /var/log/messages verify COLOR=yellow This is a few lines from the log [root at db184 root]# cat /var/log/messages |grep Verify Jun 5 03:00:04 db184 kernel: 3w-xxxx: scsi2: AEN: INFO: Verify started: Unit #0. Jun 5 05:41:17 db184 kernel: 3w-xxxx: scsi2: AEN: INFO: Verify complete: Unit #0. Jun 8 15:30:27 db184 kernel: 3w-xxxx: scsi2: AEN: INFO: Verify started: Unit #0. Jun 8 15:30:29 db184 3w-xxxx[29749]: INFORMATION: Verify started on unit 0 on controller ID:2. (0x29) I have tried regex entries and all sorts and still cant get anything out of it and I'm going crazy. 'verify' is part of a string that comes out when you start a verify on the 3ware raid controller in that server. The man page says the matching string is case insensitive but I have tried it with proper case also. Can someone please help point out the stupid thing I'm doing as I'm sure the log file monitoring does actually work :) Cheers Allan

4 8

Modem monitoring
by JMSmith＠stvincenthealth.com 13 Jun '06

13 Jun '06

I've been using Big Brother for about 4 years and have been testing Hobbit and plan to switch over soon. I have a situation that I have never been able to figure out how to address, so I'd like to throw it out here and see if anyone has any ideas. We have a terminal server with 7 fax modems connected to it. A Unix server uses it to fax reports out to various doctor's offices around town. For reasons that we've never been able to figure out, one or more of the modems will occasionally "lock-up", i.e. quit responding to commands. This usually locks the associated serial port on the terminal server as well. I would like to be able to monitor these modems by connecting to their port on the terminal server, i.e. 192.168.1.15:2001, send them an "AT" command, wait a few seconds for a response, then disconnect. I can't figure out a way to connect to them with the additional requirement of having to use the network port that they addressed by on the terminal server...in this case, 2001 through 2007. Any help would be greatly appreciated. And , by the way, I think Hobbit is great! I think it is a big improvement upon Big Brother, although I must admit that we're on the "better than free" license since we are a non-profit, so I haven't seen what Quest may have done with it. Thanks in advance! Jim Smith NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.

4 3

[hobbit] Modem monitoring
by JMSmith＠stvincenthealth.com 13 Jun '06

13 Jun '06

It works! However, I only want it to test once or twice an hour. If I can figure that part out, I'll be in good shape! -----Original Message----- From: Smith, Jim [mailto:JMSmith at stvincenthealth.com] Sent: Monday, June 12, 2006 3:26 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Modem monitoring Thanks a bunch for that quick reply! I'll do as you suggest. -----Original Message----- From: Tom Georgoulias [mailto:tomg at mcclatchyinteractive.com] Sent: Monday, June 12, 2006 3:14 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Modem monitoring Smith, Jim wrote: > I would like to be able to monitor these modems by connecting to their > port on the terminal server, i.e. 192.168.1.15:2001, send them an "AT" > command, wait a few seconds for a response, then disconnect. I can't > figure out a way to connect to them with the additional requirement of > having to use the network port that they addressed by on the terminal > server...in this case, 2001 through 2007. Kind of thinking out loud here, but what if you make a custom entry in the bb-services file, with the send command containing AT (and whatever else you need), and what you should expect back. CHeck the bb-services man page for details on this, as well as the bb-hosts man page. I set up a couple of custom network tests using the bb-services file for some proprietary applications, and it seems to work pretty well. I never tried to do what you want to do, but a custom entry in bb-services would be my first approach. Someone else with much more knowledge and experience might weight in on this as well. Tom To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.

2 1

Status of the beta test
by henrik＠hswn.dk 12 Jun '06

12 Jun '06

This is just to let everyone know what the current status is with the beta test, and what my plans are. The betatest status page is at http://www.hswn.dk/hobbitsw/betapatches/ The beta test has been quite succesful. There are currently 15 individual patches for the beta release fixing bugs - some of the patches adress more than one problem. Since the purpose of a beta test is to find bugs, this is good news. There are a few unresolved bugs left that I'm investigating. The most serious is a problem with hobbitping, where it appears to get some hosts right half of the time. If this cannot be resolved, I may choose to drop hobbitping as the default ping test tool, and go back to using fping. The other problems are some crashes that only happen for some users. They need to get fixed, obviously, but apparently require the right circumstances to trigger. So my plan currently is to send out a release candidate by the end of this week; by then I'll have to make up my mind about hobbitping. So do let me know if you see any weird behaviour with hobbitping, with the current patch applied. The release candidate testing will then take place next week, and the final release is tentatively scheduled for June 25th. So I think I'll make it for the Summer holidays. Regards, Henrik

1 0

hobbit server install on IRIX 8-(
by crlangfo＠ugs.com 12 Jun '06

12 Jun '06

All, I have finally got the prerequisites for rrdtool and rrdtool installed and tested on my IRIX system that I want to be my server for hobbit. The client configures and runs fine but the server configure fails as follows: sgicor6-> MAKE=gmake ./configure.server Configuration script for Hobbit This script asks a few questions and builds a Makefile to compile Hobbit Checking your make-utility Checking pre-requisites for building Hobbit Checking for RRDtool ... "test-rrd.c", line 30: error(1162): too few arguments in function call result = rrd_graph(pcount, rrdargs, &calcpr, &xsize, &ysize); ^ 1 error detected in the compilation of "test-rrd.c". gmake: *** [test-compile] Error 2 Not RRDtool 1.0.x, checking for 1.2.x Found RRDtool include files in /usr/local/rrdtool/include ERROR: RRDtool library files found in /usr/local/rrdtool/lib, but link fails. I have looked at rrd.sh. The test compile works with no problem. The test link gives multiple WARNING messages but most of them I expected because I have two versions of libpng and libz that are in my LD_LIBRARY_PATH. But I also get the following WARNING that I don't think I should be getting because I am using cc not gcc. ld32: WARNING 129: Cannot find libgcc_s.so.1, which is needed for proper transitive linking. Use -quickstart_info for more information. ld32: WARNING 129: Cannot find libgcc_s.so.1, which is needed for proper transitive linking. Use -quickstart_info for more information. I have tried this on three different machines with three different installation of gcc and none of my gcc installations have this library as part of there installs. The gcc installs that I have are 2.7.2, 2.95.1 and 3.3. I guess the first question is why is it trying to link a gcc library in when I am compiling with cc? And the second question would be if it is needed why is it not part of my gcc installations? 8-( Is the libgcc_s separate from gcc? I saw RPMs for a 3.4 version of it for linux systems. But I did not see separate source for other platforms. I may have put the wrong query to GOOGLE. Thanks in advance. Ken L.

2 1

[hobbit] Modem monitoring
by JMSmith＠stvincenthealth.com 12 Jun '06

12 Jun '06

Thanks, but I'm running on AIX. ________________________________ From: Milburn, John A. [mailto:John.Milburn at illinois.gov] Sent: Monday, June 12, 2006 3:20 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Modem monitoring You may be able to get the information from WMI using a vbscript. http://www.microsoft.com/technet/scriptcenter/scripts/apps/server/fax/de fault.mspx ________________________________ From: Smith, Jim [mailto:JMSmith at stvincenthealth.com] Sent: Monday, June 12, 2006 2:55 PM To: hobbit at hswn.dk Subject: [hobbit] Modem monitoring I've been using Big Brother for about 4 years and have been testing Hobbit and plan to switch over soon. I have a situation that I have never been able to figure out how to address, so I'd like to throw it out here and see if anyone has any ideas. We have a terminal server with 7 fax modems connected to it. A Unix server uses it to fax reports out to various doctor's offices around town. For reasons that we've never been able to figure out, one or more of the modems will occasionally "lock-up", i.e. quit responding to commands. This usually locks the associated serial port on the terminal server as well. I would like to be able to monitor these modems by connecting to their port on the terminal server, i.e. 192.168.1.15:2001, send them an "AT" command, wait a few seconds for a response, then disconnect. I can't figure out a way to connect to them with the additional requirement of having to use the network port that they addressed by on the terminal server...in this case, 2001 through 2007. Any help would be greatly appreciated. And , by the way, I think Hobbit is great! I think it is a big improvement upon Big Brother, although I must admit that we're on the "better than free" license since we are a non-profit, so I haven't seen what Quest may have done with it. Thanks in advance! Jim Smith NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system. NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.

1 0

[hobbit] Modem monitoring
by JMSmith＠stvincenthealth.com 12 Jun '06

12 Jun '06

Thanks a bunch for that quick reply! I'll do as you suggest. -----Original Message----- From: Tom Georgoulias [mailto:tomg at mcclatchyinteractive.com] Sent: Monday, June 12, 2006 3:14 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Modem monitoring Smith, Jim wrote: > I would like to be able to monitor these modems by connecting to their > port on the terminal server, i.e. 192.168.1.15:2001, send them an "AT" > command, wait a few seconds for a response, then disconnect. I can't > figure out a way to connect to them with the additional requirement of > having to use the network port that they addressed by on the terminal > server...in this case, 2001 through 2007. Kind of thinking out loud here, but what if you make a custom entry in the bb-services file, with the send command containing AT (and whatever else you need), and what you should expect back. CHeck the bb-services man page for details on this, as well as the bb-hosts man page. I set up a couple of custom network tests using the bb-services file for some proprietary applications, and it seems to work pretty well. I never tried to do what you want to do, but a custom entry in bb-services would be my first approach. Someone else with much more knowledge and experience might weight in on this as well. Tom To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.

1 0

[hobbit] hobbitping problem.
by michael.nemeth＠lmco.com 12 Jun '06

12 Jun '06

With the 12-Jun-2006 snapshot I'm still get conn errors there are no error messages in bb-network.log. However Im wondering if there is now differwnt problem, Im ONLY getting waves of ping failures/recovered on the first two (three IPs) hosts ; the first being the hobbit server it self! Doing this for 5 minute cycle. -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | _p_ Mike Nemeth | ___| |_____ email(w) michael.nemeth at lmco.com Work: 856 359-1425 |><___________) | Home Page:http://www.geocities.com/mjnemeth/ | Work Page:http://faraday.motown.lmco.com:3000/~nemethm/ | Work Page:http://ortfsb/~mnemeth/ |++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

hobbitd warning: Cookie xxxxxx not found, dropping ack
by Dominique.Frise＠unil.ch 12 Jun '06

12 Jun '06

Hi, Passed a certain time, alerts cannot be acked. What is the value for this period and is it configurable? Thanks. Dominique UNIL - University of Lausanne

3 4

[hobbit] enhancement request?
by David.Gore＠verizonbusiness.com 12 Jun '06

12 Jun '06

Hello, It looks to us like this fails, or at least we cannot get it to work in regards to log file monitoring: trigger %INFO.*shot|ERROR.*OutOfMemoryError We do see the whole string get sent to the client from the server. I was thinking the reason it doesn't work is because it is a server dependent client and has no PCRE libraries (client), so perhaps regular expressions in client-local.cfg although allowed will not work unless you have the PCRE libraries on the client host. So my enhancement request would be to include the PCRE calls in the client? Is that possible, statically link to the PCRE libraries and remove the need to install PCRE on hosts you would like to use it? I am sure I am not the only one who cannot install PCRE on the some or all the client hosts. Or perhaps my trigger command should work and I have done something wrong? -- David

2 1