June 2006 - Xymon - Xymon mailman web

testing pulldata in hobbit
by adam.scheblein＠marquette.edu 30 Jun '06

30 Jun '06

Greetings, I have been testing the new pulldata option in the snapshot from June 29, 2006, however I have run into a problem. Basically, hobbit has decided to not pull data from 2 of my 5 clients that I am testing this on. This is in a trucluster 5 environment and its cluster mate is also having the same problems. When I installed I made sure to completely wipe out the client directory (just in case - plus I had not made any customizations). I am not sure where to look because I have look through the logs and can't find anything referencing this host. Any ideas?? Thanks, Adam

3 4

enable/disable
by bb4＠richter-it.net 30 Jun '06

30 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, at the moment we use BB as our primary server and we use Hobbit too but only as a display server for our customer. So if we disable a service or machine on BB the customer still sees the red,yellow or purple dots. Is there a way to send the data to the Hobbit server too? Maybe we can use: http://hobbitusr:hobbitpwd at hobbitserver/hobbit-seccgi/hobbit-enadis.sh?server=XXX&service=YYY in our enable/disable script we're using for BB to send the data to Hobbit? Regards Torsten - -- Download my public key from: http://www.keyserver.net:11371/pks/lookup?op=get&search=0x899093AC -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3-nr1 (Windows XP) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFElYBl7DlmxomQk6wRAmZaAJ9a2uyrMy0T6xGcpUwA8u/eC/wOfACgob5r IfnrwDJomodxTBE8p0D5XWs= =m3s3 -----END PGP SIGNATURE-----

2 3

whois to act like sslcert?
by Jason.Chambers＠geosoft.com 30 Jun '06

30 Jun '06

Hi Henrik, Is there any way to get a whois type function to act like sslcert to warn you when your dns is about to expire? I know it sounds cheesy, but I thought it would be a neat idea. Jason Chambers IT Helpdesk Support <http://www.geosoft.com/20> eosoft Inc. 85 Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: 416-369-0111 x344 Fax: 416-369-9599 www.geosoft.com

3 3

conn test periodically fails (fping execution code 99)
by bernie9998＠gmail.com 30 Jun '06

30 Jun '06

I am having some trouble with the hobbit monitoring server. While at first, it seemed to be functioning fine, a few minutes later, the conn test failed across the board, and I received a yellow warning under the bbtest column. The actual error message under the bbtest details stated: Error output: Execution of '/usr/sbin/fping -Ae' failed with error-code 99 fping invocation failed: No such file or directory This is really weird, as the output of 'ls -l /usr/sbin/fping' shows that it is in fact there, and all have permissions to execute it: -rwsr-xr-x 1 root root 23600 Jun 2 2005 /usr/sbin/fping Not to mention that this problem seems to be periodic, and not continual. The test will fail about every 3-5 minutes and then succeed about another 3-5 minutes later, only the repeat the process again. Has anyone else experienced this? I'm running this on Fedora Core 2, hobbit version 4.1.2p1-1. Thanks in advance for your assistance. -Brian

1 0

[wishlist] Better support of the @@ tag in NCV trends
by cgoyard＠cvf.fr 30 Jun '06

30 Jun '06

Hi all, In do_ncv.c, I see this : 42: while (l && *l && strncmp(l, "@@\n", 3)) { If I understand correctly, that means the program will stop processing the status file if it encounter a "@@\n" line. Well, I tried and it seems to work that way (I have a status showing something like two counters followed by a bunch of SNMP values that I don't want to graph). It do not seem to be documented. Now the real cool thing would be to have start tag, so NCV values could be added last instead of first. (because humans like nice status reports and computer don't care to take the last bits). When the program hits the start tag, it forgets whatever it got and starts over. For people interrested, the status show this way : Thu Jun 29 18:41:21 CEST 2006 - 3623995988 incoming reqs - 845313333 outgoing reqs inreqs: 3623995988 outreqs: 845313333 @@ wwwServiceDescription.1 = CacheFlow 700/4.x.xxxx wwwServiceContact.1 = xxxxxxxxx at yyy.zz wwwServiceProtocol.1 = mgmt.xx.x.xx wwwServiceName.1 = myhostname wwwServiceType.1 = wwwCachingProxy (...) wwwSummaryInRequests.1 = 3624092091 wwwSummaryOutRequests.1 = 845335728 only the two first lines get a graph line. (the blank line before the @@ seems to be mandatory too) -- Charles

4 6

[hobbit] client-local.cfg: "ignore" ignored?
by gmbfly98＠gmail.com 30 Jun '06

30 Jun '06

I'm having a similar issue myself, though I'm running the 4.2-beta-20060605version. It seems only some of my "ignore" lines are working, depending on which other ones I have added. I'm trying to ignore the following types of messages: Jun 30 10:23:51 www upsd[7860]: Connection from 127.0.0.1 Jun 30 10:23:51 www upsd[7860]: Client on 127.0.0.1 logged out Jun 25 04:04:01 www crond(pam_unix)[15334]: session opened for user root by (uid=0) Jun 25 04:04:25 www crond(pam_unix)[15334]: session closed for user root Jun 25 04:05:02 www crond(pam_unix)[15413]: session opened for user mailman by (uid=0) Jun 25 04:05:06 www crond(pam_unix)[15413]: session closed for user mailman with the following "ignore" lines: ignore upsd.*from|on.*127\.0\.0\.1 ignore session opened|closed for user mailman|root If I remove the "ignore upsd..." line, the second one seems to work fine, and v.v. if I remove the second one. The log monitoring is being done on the Hobbit server itself, so it's not a problem with client-vs-server Hobbit versioning. Any ideas? Also, are quotes (" ") required around the expressions if they contain spaces, or is everything after the keyword "ignore" treated as the regular expression? Dominique Frise wrote: > > Hi, > > > > We have following config. in our server's client-local.cfg: > > > > ---------- > > [mailc] > > log:/var/log/messages:10240 > > ignore MailScanner > > ---------- > > > > The /var/log/messages of the "mailc" client is filled up with lines like > > following that we would like to exclude totally: > > > > ---------- > > May 13 06:26:41 mailc MailScanner[933]: HTML Img tag found in message > > 1Feli1-0004tG-Dt from dmawllet at hotmail.com > > ---------- > > > > The lines with "MailScanner" of "mailc" client (Debian 2.4.22) are never > > ignored. I.e. we get -yellow/red- alarms for lines with "MailScanner" > > tag in it. > > > > --- some infos from the client --- > > bb at mailc:~$ wc -l /var/log/messages > > 10790 /var/log/messages > > bb at mailc:~$ grep MailScanner /var/log/messages | wc -l > > 10795 > > bb at mailc:/soft/pub/BB/hobbit/client/tmp$ cat logfetch.* > > log:/var/log/messages:10240 > > ignore MailScanner > > > > > /var/log/messages:1306142:1281851:1252634:1227431:1200018:1156195:1115234 > > bb at mailc:/soft/pub/BB/hobbit/client/tmp$ > > --- > > > > What are we doing wrong? (client is running a snapshot of 25th april) > > > > > > Dominique > > UNIL - University of Lausanne > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > > After upgrading the server to the snapshot of 16 may it now works as > expected > :-). (client is still running snapshot of 25 april) > > > Dominique > UNIL - University of Lausanne > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

1 0

[hobbit] Status ok but conn history showing red on 2 hosts
by Guillaume.GALLIOT＠but.fr 30 Jun '06

30 Jun '06

After having Disabled/enabled the conn test, history works again. It's like hobbit did not get the status change until reset manually ... /guillaume -----Message d'origine----- De : GALLIOT Guillaume [mailto:Guillaume.GALLIOT at but.fr] Envoyé : jeudi 29 juin 2006 17:34 À : 'hobbit at hswn.dk' Objet : [hobbit] Status ok but conn history showing red on 2 hosts Hello, I have a hobbit 4.1.2p1 running on linux RHEL4 I have some problems with the conn history showing red for 2 hosts The current status shows up as green for these hosts Event log & history show a red condition running since Tue Jun 27 17:19:25 2006 On other hosts history is updated without problems hobbit historyd is running >ps aux | grep history hobbit 17496 0.0 0.1 2072 664 ? S 16:17 0:00 hobbitd_channel --channel=stachg --log=/var/log/hobbit/history.log hobbitd_history hobbit 17515 0.0 0.1 2084 548 ? S 16:17 0:00 hobbitd_history "grep caen /var/log/hobbit/history.log" returns no match Owner, file and directories rights on ~hobbit/data/hist/ looks ok > pwd /opt/data/var/lib/hobbit/hist /var/lib/hobbit is a symlink to /opt/data/var/lib/hobbit >ls -ld .. drwxr-xr-x 11 hobbit hobbit 4096 avr 18 11:17 .. >ls -l ket,caen.conn -rw-r--r-- 1 hobbit hobbit 3198 jun 27 17:19 ket,caen.conn >ls -l ket,lisieux.conn -rw-r--r-- 1 hobbit hobbit 1743 jun 27 17:19 ket,lisieux.conn tail ket,caen.conn Tue Jun 13 16:45:56 2006 green 1150209956 6 Tue Jun 13 16:46:02 2006 red 1150209962 159 Tue Jun 13 16:48:41 2006 green 1150210121 90504 Wed Jun 14 17:57:05 2006 red 1150300625 351 Wed Jun 14 18:02:56 2006 green 1150300976 666988 Thu Jun 22 11:19:24 2006 red 1150967964 493 Thu Jun 22 11:27:37 2006 green 1150968457 119 Thu Jun 22 11:29:36 2006 red 1150968576 207 Thu Jun 22 11:33:03 2006 green 1150968783 452782 Tue Jun 27 17:19:25 2006 red 1151421565 tail ket,lisieux.conn Thu Jun 1 09:30:22 2006 green 1149147022 976 Thu Jun 1 09:46:38 2006 red 1149147998 679 Thu Jun 1 09:57:57 2006 green 1149148677 719 Thu Jun 1 10:09:56 2006 red 1149149396 468 Thu Jun 1 10:17:44 2006 green 1149149864 848140 Sun Jun 11 05:53:24 2006 red 1149998004 98069 Mon Jun 12 09:07:53 2006 green 1150096073 206047 Wed Jun 14 18:22:00 2006 red 1150302120 149 Wed Jun 14 18:24:29 2006 green 1150302269 1119296 Tue Jun 27 17:19:25 2006 red 1151421565 Running commands manually seems ok >fping ket.caen ket.caen is alive bbcmd bbtest-net --debug --ping ket.caen seems also ok :( Tried to restart the server : did nothing Does anyone had the same problem before ? /guillaume To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

BBOSTYPE solaris <> sunos
by ndo＠unikservice.com 30 Jun '06

30 Jun '06

Hi, I have few pbs with some deadcat scripts, which considers (and it's true) sunos is not solaris. Please, can't you take this in consideration....I'd like to have "solaris" in BBOSTYPE for sunos5/solaris2/solaris > 8 ;-) Nicolas

1 0

[hobbit] Couple possible enhancement requests?
by David.Gore＠verizonbusiness.com 30 Jun '06

30 Jun '06

We have had several complete failures of the hobbit client when it hangs trying to look at remote file systems. Do you think the -l option should be the default? We typically do not care about NFS mounted or NIS mounted file systems although others may. Of course when Hobbit hangs ALL the tests go purple and you are unaware when it happens in the middle of the night. From the Solaris man page: -l Report on local file systems only. This option is used only for mounted file systems. It cannot be used with the -o option. I was also wondering if 'bbcmd' could be upgraded to accommodate different home directories? It appears to use the home directory that you compiled it with which works most of the time except when you copy bbcmd to a client host with a different home directory. nmsbb at thisHost:/var/home/nmsbb/client> bin/bbcmd perl ext/bb-se.pl 2006-06-29 16:27:37 Using default environment file /export/home/nmsbb/client/etc/hobbitclient.cfg 2006-06-29 16:27:37 Cannot open env file /export/home/nmsbb/client/etc/hobbitclient.cfg - No such file or directory -- David Gore (v965-3670) Enhanced Technology Support (ETS) Network Management Systems (NMS) IMPACT Transport Team Lead - SCSA, SCNA Page: 1-800-PAG-eMCI pin 1406090 Vnet: 965-3676

3 3

hobbit-clients.cfg
by paul.moore＠verizonbusiness.com 29 Jun '06

29 Jun '06

I'm having a problem with the hobbit-clients.cfg matching. The documentations states the below but I'm experiencing it matching all lines. # Rules are evaluated from the top of this file and down, and the first # matching rule is used. So you should put the specific rules first, and # the generic rules last. Here is the layout of my cfg file. HOST=pdcd20-ic1 PROC sm_server 9 9 RED HOST=pdcd20-ic1 PROC sm_server 5 5 RED HOST=%(c[ar]y|omz|rch|[pn]dc)(d14-icb2|d02-icb1).* PROC sm_server 4 4 RED HOST=%(c[ar]y|omz|rch|[pn]dc)(d20-icb1|(d15-icb[1-2])|d15-ic2|d02-ic1|d14-ic 1).* PROC sm_server 3 3 RED HOST=%(c[ar]y|omz|rch|[pn]dc)(d20-ic[1-3]|d15-ic[3-5]|d[0-9]*-icb).* PROC sm_server 2 2 RED HOST=%(c[ar]y|omz|rch|[pn]dc)d[0-9]*-ic.* PROC sm_server 1 1 RED DEFAULT # These are the built-in defaults. UP 1h LOAD 5.0 10.0 DISK * 90 95 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 97 -=-=- Here is what I get in test ../bin/hobbitd_client --test --debug --config=hobbit-clients. cfg Hostname (.=end, ?=dump, !=reload) []: ? PROC sm_server 9 9 red HOST=pdcd20-ic1 (line: 142) PROC sm_server 5 5 red HOST=pdcd20-ic1 (line: 144) PROC sm_server 4 4 red HOST=%(c[ar]y|omz|rch|[pn]dc)(d14-icb2|d02-icb1).* (line: 146) PROC sm_server 3 3 red HOST=%(c[ar]y|omz|rch|[pn]dc)(d20-icb1|(d15-icb[1-2])|d15-ic2|d02-ic1|d14-ic 1).* (line: 148 ) PROC sm_server 2 2 red HOST=%(c[ar]y|omz|rch|[pn]dc)(d20-ic[1-3]|d15-ic[3-5]|d[0-9]*-icb).* (line: 150) PROC sm_server 1 1 red HOST=%(c[ar]y|omz|rch|[pn]dc)d[0-9]*-ic.* (line: 152) UP 3600 -1 (line: 155) LOAD 5.00 10.00 (line: 156) DISK * 90 95 0 -1 red (line: 157) MEMREAL 100 101 (line: 158) MEMSWAP 50 80 (line: 159) MEMACT 90 97 (line: 160) Hostname (.=end, ?=dump, !=reload) [?]: pdcd20-ic1 Test (cpu, mem, disk, proc): proc ps command string: sm_server ps command string: sm_server ps command string: Process sm_server color red: Count=2, min=9, max=9 Process sm_server color red: Count=2, min=5, max=5 Process sm_server color green: Count=2, min=2, max=2 Process sm_server color red: Count=2, min=1, max=1 -=-=- As you can see it matches 4 different times. -=-=- Paul Moore V966-5159 MSO OSS Support -=-=-=-=-= Pinky, Are You Pondering What I'm Pondering? Well, I think so Brain but if Jimmy cracks corn and no one cares, why does he keep doing it?

1 0