September 2006 - Xymon - Xymon mailman web

PROC test question
by marco.pizzoli＠gmail.com 21 Aug '09

21 Aug '09

Hi all, I am a hobbit newby. I have a question about the PROC test: is there a way to define a test about the presence of a particular proc executed by a particular user? I'm in a situation where I have some daemons that could be started by a lot of (machine)users and so I would like to check the user the proc run as. Thanks in advance Marco

4 3

cupsd
by stoner-lists＠comcast.net 04 Jun '08

04 Jun '08

For those who want to monitor a cups print server, here's a definition you can put in your bb-services file: [cupsd] send "GET /printers\r\n" expect "HTTP/1.1 200 OK" port 631 Alternatively, you could just use http://host:631/printers in your bb-hosts file. The cupsd is, for monitoring purposes, a web server. -Jeff "Fun with Users #1: ln -s /dev/random /etc/motd"

2 1

ntpdate question
by Dirk.Kastens＠uni-osnabrueck.de 09 Mar '08

09 Mar '08

Hi, before updating our hobbit server to version 4.2.0, I tested the ntp configuration with the bb-ntp-1_4.sh script on the client nodes. When I now configure the server to use the ntp network test instead, I realize that this doesn't work with most of our RedHat clients. I get the response ntpdate -u -q -p 2 a.b.c.d server a.b.c.d, stratum 0, offset 0.000000, delay 0.00000 29 Aug 10:53:26 ntpdate[3509]: no server suitable for synchronization found The network test works with all AIX clients and with older RedHat clients. The manual page of ntpdate on a RedHat machine says, that "the ntpdate program is to be retired from this distribution". Is there another way of testing the ntp synchronisation from the server side or do I still have to use the bb-ntp.sh script? Best wishes, Dirk Kastens

9 10

Client for NetApp storage and Weblogic Server
by fduranti＠q8.it 28 Sep '07

28 Sep '07

Hi all, I'm currently developing 3 perl client to use with Network appliance Storage, Weblogic Servers and Database (SQL/Oracle/Informix and Mysql). At this moment only the weblogic and netapp scripts are available, the database check for Oracle/Informix and with connection check to sqlserver will be probably available the next week. I uploaded the scripts to deadcat but i got some problems downloading them so I've also created a project on sourceforge and I'm uploading the scripts there (and I will also try to create a mailing list so that if users have the need to contact me they can do that there). The homepage on sourceforge is http://sourceforge.net/projects/hobbit-perl-cl/ <BLOCKED::http://sourceforge.net/projects/hobbit-perl-cl/> Thanks and sorry for the advertise but this seems the better place to let users know about hobbit clients available :D Regards Francesco Duranti

3 7

msgs file with html code
by vadud3＠gmail.com 05 Jul '07

05 Jul '07

Hi When I receive alerts related to messages file it comes with html code in my mail box like this. &red Critical entries in <a href="/hobbit-cgi/bb-hostsvc.sh?CLIENT=hobbit.client.com&SECTION=msgs:/var/adm/mess +ages">/var/adm/messages</a> &red Aug 17 15:39:55 hobbit.client.com WARNING: [ID 702911 user.error] this is a test message Full log <a href="/hobbit-cgi/bb-hostsvc.sh?CLIENT=hobbit.client.com&SECTION=msgs:/var/adm/messages">/var/adm/m +essages</a> Aug 17 15:39:55 hobbit.client.com WARNING: [ID 702911 user.error] this is a test message I am using hobbit client 4.2.0 and hobbit server 4.2.0. I sure did not play with any html code to make the output like this. Also I saw an email about keeping the full log link in the web gui for easy troubleshooting. But is that also apply to email. In otherwords can I just receive alert related lines and not the full log underneath. OR do I need to define SMS in hobbit-alerts.cfg page to achieve that? Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

2 3

[hobbit] Purples, all non-green view
by KauffmanT＠nibco.com 23 Jan '07

23 Jan '07

Oh, my! It certainly does! Tom Kauffman -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, May 12, 2006 11:05 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Purples, all non-green view On Fri, May 12, 2006 at 02:41:19PM +0000, David Gore wrote: > There was some talk of the purples not showing up on the 'All non-green > view'. We are also disappointed that the purples have been removed from > this page. Our main page is the ANV page and would really like to have > that back. Could we at least have it back with a flag? Or did we some > how remove the purples on the ANV page with some flag in the latest > snapshot? Seems I broke it somewhere. This should put the purples back on the bb2 page. Henrik CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

2 3

Email alert based on specific process
by iqbala-hobbit＠qwestip.net 15 Nov '06

15 Nov '06

Hi All I am using bb-proctab to monitor a list of processes and if any process a whole group get alert. Is there a way I can setup the alert with process specific. So if proc 1 out the list dies only user 1 get alert and so on. I know I could use the SCRIPT feature but like to keep that as the last resort. I am using hobbit 4.1.2 on Solaris 8. The process list I am concern about is running bb1.9c client on Solaris 8 as well. Sorry if it were already discussed in the mailing list. Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "..there are two kinds of people: those who work and those who take the credit...try to be in the first group;...less competition there." - Indira Gandhi

6 7

[hobbit] log file monitoring issues
by gmbfly98＠gmail.com 02 Nov '06

02 Nov '06

Maybe I'm just missing something in the documentation, but I can't seem to get the log file monitoring to work properly. In the example below, I'm trying to look at the "messages" and "maillog" files on Linux. Particularly, I'm trying to EXCLUDE the following "messages" lines: Aug 9 21:19:45 www upsd[7860]: Connection from 127.0.0.1 Aug 9 21:19:45 www upsd[7860]: Client on 127.0.0.1 logged out Aug 9 21:19:45 www upsd[7860]: Connection from 127.0.0.1 Aug 9 16:44:01 www crond(pam_unix)[5382]: session opened for user root by (uid=0) Aug 9 16:44:14 www crond(pam_unix)[5382]: session closed for user root Aug 9 16:45:01 www crond(pam_unix)[5484]: session opened for user mailman by (uid=0) Aug 9 16:45:01 www crond(pam_unix)[5484]: session closed for user mailman And EXCLUDE the following "maillog" lines: Aug 6 11:55:02 www sendmail[15076]: k76Ft1pU015076: from=<mailman at HOSTNAME>, size=576, class=0, nrcpts=1, msgid=<200608061555.k76Ft1A2015075 at HOSTNAME>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Below is the respective lines from the "client-local.cfg" file: log:/var/log/messages:10240 ignore upsd* Client|Connection 127.0.0.1 ignore session opened|closed for user mailman|root log:/var/log/maillog:10240 ignore relay=localhost.localdomain trigger denied And below the specific log entries I'm looking for from "hobbit-clients.cfg": LOG /var/log/maillog "relaying denied" color="yellow" Now, the problem I'm having... The "ignore" line for the /var/log/maillog file appears to be working correctly, as it does indeed ignore such entries as shown above. Also working is the "ignore session opened..." line for the /var/log/messages file. What is NOT working is the "ignore" line for the "upsd*" lines in /var/log/messages. For the life of me, I just can't figure out how to get that to work properly. That is, two of the three "ignore" lines are not working, as those lines still show up in the "full log" output. If anyone has any ideas, let me know. I'm also having problems with some logs not showing up on the messages page. Do you need both a "LOG" entries in the hobbit-clients.cfg AND client-local.cfg, or will an entry in only client-local.cfg be sufficient to have it show up on the messages page?

5 17

Small enhancement to Hobbit JavaScript menu
by frederic.mangeant＠steria.com 05 Oct '06

05 Oct '06

Hi Henrik I didn't find bb-datepage.sh the first time I set up Hobbit, maybe this small modification to ~/server/www/menu/menu_items.js would be helpful : --- menu_items.js.orig 2005-11-18 15:46:58.000000000 +0100 +++ menu_items.js 2005-11-18 15:53:50.000000000 +0100 @@ -6,7 +6,12 @@ ], ['Reports', null, null, ['Event log Report', '/hobbit-cgi/bb-eventlog.sh'], - ['Availability Report', '/hobbit-cgi/bb-rep.sh'], + ['Availability Reports', null, null, + ['Daily Report', '/hobbit-cgi/bb-datepage.sh?type=day'], + ['Weekly Report', '/hobbit-cgi/bb-datepage.sh?type=week'], + ['Monthly Report', '/hobbit-cgi/bb-datepage.sh?type=month'], + ['Custom Report', '/hobbit-cgi/bb-rep.sh'], + ], ['Snapshot Report', '/hobbit-cgi/bb-snapshot.sh'], ['Config Report', '/hobbit-cgi/hobbit-confreport.sh'], ], Regards, -- Frédéric Mangeant Steria EDC Sophia-Antipolis

3 2

Change request: FNPATTERN matching string
by fduranti＠q8.it 30 Sep '06

30 Sep '06

Hi Henrik, just another little request. The FNPATTERN is matched as a regular expression and this could is some situation cause problems matching the right file. For example I'm creating some rrd named xtradisk,diskname.rrd and they get matched with the normal disk test and I start to not get any disk graphs from disk and trend column. The simple solution is to put a "^" in front of the disk in the hobbitgraph.cfg. This is good for this test until the next one that will try to get wrong data. >From how the rrd are organized it make (at least to me) sense to have the FNPATTERN match directly against ^somedefinition because all graphs defined until now have the pattern in the form of testname_followed_by_something_else. The line responsible for the FNPATTERN is line 286 of web/hobbitgraph.c and changing it from: newitem->fnpat = strdup(p); To newitem->fnpat=malloc(strlen(p)+2); strcpy(newitem->fnpat,"^"); strcat(newitem->fnpat,p); Will do the trick (at least it seem to work). If in the future there's the necessity to define a pattern in the middle of the file it will be simply matched with a FNPATTER .*something so it should not create problems to other tests/graphs but will definitely create less problem with disk or data having something like disk inside of them. Francesco

1 0