September 2006 - Xymon - Xymon mailman web

[hobbit] Alert Setup Question
by PNIXON＠ci.somerville.ma.us 15 Sep '06

15 Sep '06

Henrik, I don't suppose this has come up from anyone else since we discussed it last? I'm getting yelled at because we got a $400 overage charge this month on our pagers due to the 2500 alerts that went out. If you have no plans for it, I'll write an external script to handle it. Thanks, Pat -----Original Message----- From: PNIXON at ci.somerville.ma.us [mailto:PNIXON at ci.somerville.ma.us] Sent: Monday, November 21, 2005 1:19 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Alert Setup Question I knew someone would get it eventually! I'll see if I can use it as is for now and get back to you if it becomes a big inconvience or issue. It's just kind of counter-productive to be working on something and getting 10 pages in a row. I suppose I can also build out the DEPENDS stuff to limit the backscatter from a downed item. Thanks for the response Henrik. --Pat -----Original Message----- From: henrik at hswn.dk [mailto:henrik at hswn.dk] Sent: Friday, November 18, 2005 6:00 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Alert Setup Question On Fri, Nov 18, 2005, PNIXON at ci.somerville.ma.us wrote: > 7:00 HostA generates an alert which gets sent to pageme at here.com > 7:05 HostB generates an alert which does not get sent to pageme at here.com > because they got paged in the 15 minutes > 7:18 HostA is fixed now, but HostB is still broken and generating an > alert, which gets sent to pageme at here.com > 7:22 HostC breaks now, no Alert to pageme at here.com > 7:33 HostB is still Broken, sends an alert to pageme at here.com Not possible. The Hobbit alert module doesn't really have the concept of "page groups"; if you want to compare with BB, it behaves like the BB pager with "pagetype" set to "EVENT". Each recipient configured to receive an alert for a specific HOST.TEST combination gets all alerts; there is no way of configuring Hobbit to send max. N alerts to a given recipient in a 15-minute period. I'm not saying that is the optimum solution for everyone, and it might be changed if you can convince me there is enough people who need it - but so far, you're the first one to ask for such a feature. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Route tag question
by PNIXON＠ci.somerville.ma.us 15 Sep '06

15 Sep '06

Hey all, I'm wondering if there's a way to define system-wide route tags via the default host entry and then add to them using the route tag on the individual hosts? --Pat

1 0

mail alert problem.
by simone＠clikka.com 15 Sep '06

15 Sep '06

Hi all I'm using hobbit and I got some problem with mail notification of alerts. here hare my configuration off hobbit-alert.cfg HOST=* MAIL dest at domain.tld REPEAT 1 SCRIPT /tmp/p test REPEAT 1 My system is Mandriva 2006 The problem is that hobbit doesn't send emails. (I checked the logs of mailserver) and in page.log I find this: "temporary mail file: Permission denied" I tried to use the mail command as hobbit user and it works and the mail arrives ("echo test | mail -s test dest at domain.tld). I'm sure that hobbit is trying to send mails because in notification.log I see correct activities of notification and my test scritp /tmp/p is being executed, but mail it doesn't being sent. Where hobbit tries to store tmp file for mailing? Can someone give me some hint? thanks

1 0

Propagation of red ack check marks
by jonescr＠cisco.com 15 Sep '06

15 Sep '06

When I ack something on a sub page, the status turns into a red check mark, but the status on the main page just stays the normal red. Is there a way to enable the red checkmark icon to propagate up to the main page? Otherwise it looks like there is a non-acknowledged error when there is not. -Charles

2 1

Hobbit 4.2.0 crashes many times
by stefan_loos＠hotmail.com 15 Sep '06

15 Sep '06

Hello Henrik, I 've installed the 4.2.0 version of hobbit on a fresh installation of RedHat EL4 and since yesterday afternoon we have 25 core-dumps in the server directory and about 50 core-dumps in the server/tmp directory. Everything looks like the problem that me and Vernon had in july 2005 with a 4.0.x version. All pages look look like as we've just posted an evergreen page ;-) Here is what the gdb tool says (using the core-dump in the server directory): GNU gdb Red Hat Linux (6.3.0.0-1.132.EL4rh) Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1". Core was generated by `hobbitd --pidfile=/var/log/hobbit/hobbitd.pid --restart=/usr/local/hobbit/serve'. Program terminated with signal 6, Aborted. Reading symbols from /lib/libpcre.so.0...done. Loaded symbols for /lib/libpcre.so.0 Reading symbols from /lib/tls/libc.so.6...done. Loaded symbols for /lib/tls/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 #0 0x009557a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 (gdb) bt #0 0x009557a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 #1 0x009957a5 in raise () from /lib/tls/libc.so.6 #2 0x00997209 in abort () from /lib/tls/libc.so.6 #3 0x009c971a in __libc_message () from /lib/tls/libc.so.6 #4 0x009d1c12 in _int_realloc () from /lib/tls/libc.so.6 #5 0x009d2ad6 in realloc () from /lib/tls/libc.so.6 #6 0x08058399 in xrealloc (ptr=0x89f8b60, size=70543) at memory.c:149 #7 0x0804e053 in generate_outbuf (outbuf=0xbfe60cd4, outpos=0xbfe60cd8, outsz=0xbfe60cdc, hwalk=0x896f4f8, lwalk=0x896f568, acklevel=-1) at hobbitd.c:2194 #8 0x080501fa in do_message (msg=0x89d94d8, origin=0x805c703 "") at hobbitd.c:2825 #9 0x08053e76 in main (argc=8, argv=0xbfe648e4) at hobbitd.c:4352 Regards, Stefan

1 0

[hobbit] Syntax for multiple service exclusions?
by craig＠cookitservices.com 15 Sep '06

15 Sep '06

> EXSERVICE=vmio,memory >or > EXSERVICE=%vmio|memory Tried both of those, the vmio messages are stopped, but I still get memory messages through for this host... Thanks Craig Cook -- Systems Monitoring Consulting and Support Services http://www.cookitservices.com

1 0

[hobbit] R: [hobbit] question on disable until ok
by fduranti＠q8.it 14 Sep '06

14 Sep '06

I think the patch didn't got in .... Here it's the patch --- bb-xsnmp.pl.1_79 2006-09-14 16:18:55.000000000 +0200 +++ bb-xsnmp.pl 2006-05-14 00:10:48.000000000 +0200 @@ -1,6 +1,6 @@ -#!/usr/local/bin/perl +#!/usr/bin/perl # Monolithic SNMP gatherer for BigBrother. # Ported to work with Hobbit which doesn't have bb-combo.sh # Added support for quering the hobbit server to see if a conn test is red @@ -14,12 +14,12 @@ use strict; use Carp; use FileHandle; use FindBin qw($Bin $Script); -#use lib $ENV{'BBHOME'}."/ext/perl/"; -use lib qw(/local/packages/IT/HOBBIT/hobbit/server/ext/perl/); +use lib $ENV{'BBHOME'}."/ext/perl/"; +#use lib qw(/local/packages/IT/HOBBIT/hobbit/server/ext/perl/); use Net::SNMP qw(:snmp); use vars qw($VERSION); ( $VERSION ) = '$Revision: 1.79 $' =~ /\$Revision:\s+([^\s]+)/; my $debug = $ENV{'DEBUG'}; @@ -28,14 +28,14 @@ # I was not called by BigBrother. # In this case, I assume I'm testing and # print to stdout instead of # sending to BB. -my $defbbtmp = '/var/BB/bb/tmp'; -my $defbbhome = '/var/BB/bb'; +my $defbbtmp = '/home/hobbit/server/tmp'; +my $defbbhome = '/home/hobbit/server'; my $defbb = "$defbbhome/bin/bb"; -my $defbbdisp = 'enterprise.tigr.org'; +my $defbbdisp = 'itromlx10'; my $defmachine = 'localhost'; # For SNMP my $defretries = 3; my $deftimeout = 5; @@ -331,10 +331,14 @@ 529 => 'ascend', 789 => 'netapp', 1991 => 'foundry', 2021 => 'ucdavis', 3224 => 'netscreen', + 5624 => 'vhswitch', + 629 => 'mrswitch', + 52 => 'vhswitch', + 97 => 'cabletron', ); my %snmpsyntaxdb = ( # .1.3.6.1.2.1.2.2.1.8 'ifOperStatus' => { @@ -721,11 +725,11 @@ my $compaq_pct_temp_panic = 90; # For disk checks my $diskthreshdb_ref = undef; my $disk_defyellow = exists($ENV{'DFWARN'}) ? $ENV{'DFWARN'} : 90; -my $disk_defred = exists($ENV{'DFWARN'}) ? $ENV{'DFWARN'} : 90; +my $disk_defred = exists($ENV{'DFPANIC'}) ? $ENV{'DFPANIC'} : 90; # Turn on or off depending on whether or not you have more servers defined # than BB can display in one page. TODO: Automate this decision. # bindtree is the minimum necessary. my $l4_show_realservers = 0; @@ -806,12 +810,12 @@ } # Get a list of disabled hosts my @disabled; print "$ENV{'BBVAR'}/disabled\n" if $debug; -# opendir(DISABLED,"$ENV{'BBVAR'}/disabled") - opendir(DISABLED,"/local/packages/IT/HOBBIT/hobbit/data/disabled") + opendir(DISABLED,"$ENV{'BBVAR'}/disabled") +# opendir(DISABLED,"/local/packages/IT/HOBBIT/hobbit/data/disabled") || warn "Could not open the disabled hosts directory: $!\n"; while (my $dhost = readdir(DISABLED)) { if ($dhost =~ /^\.*$/) { next; } $dhost =~ s/\..*$//; $dhost =~ s/,/\./g; @@ -821,34 +825,41 @@ closedir(DISABLED) || warn "Could not close the DISABLED directory handle: $!\n"; SNMP: while (my($host,$community) = each(%$commdb_ref)) { # Make only one session + + my($snmpsession,$snmperror) = Net::SNMP->session( -hostname => $host, -community => $community, -debug => $debug, -retries => $defretries, -timeout => $deftimeout, -translate => [ -timeticks => 0x0 ], ); # Net::SNMP->session - +# +# check if host is down Butch Deal +# if(grep(/$host/, at disabled) >= 1) { print "$host is disabled. Skipping.\n"; next SNMP; } -# -# check if host is down Butch Deal -# + if ( $HOBBIT ) { my $string = "query ".$host.".conn"; - my $hoststat = `$ENV{'BB'} $ENV{'BBDISP'} "$string"`; - if ($hoststat =~ "red") { + my $hoststat = `$ENV{'BB'} $ENV{'BBDISP'} "$string" `; + if ( length($hoststat) == 0 ) { + print "$host is not in bbhost file. Skipping.\n"; + next SNMP; + } + if ($hoststat !~ "green") { print "$host is down. Skipping.\n"; next SNMP; } } + if (! defined($snmpsession)) { print((caller(0))[3].": SNMP session failed for '$host': $snmperror\n"); next SNMP; } @@ -868,15 +879,16 @@ (my $brandnum = substr($objectid,length($snmpoids{'enterprises'})+1)) =~ s/\..*$//; if (exists($enterprisenumbers{$brandnum})) { $enterprise = $enterprisenumbers{$brandnum}; } else { print("Unknown enterprise number '$brandnum' in ObjectID '$objectid'\n"); + print("Unknown enterprise number '$brandnum' in ObjectID '$objectid'\n"); next; } } else { print((caller(0))[3].": SNMP get request failed for '$host': ".$snmpsession->error()."\n"); - return; + next SNMP; } # Determine what OS version the machine is. my $version = undef; unless ($version = &detect_version($host,$snmpsession,$enterprise)) { @@ -2882,11 +2894,11 @@ $powercolors{$index} = 'red'; } } # while (my($index,$state) = each(%statedb)) # find worst color - my $worstcolor = &color_compare(values(%statedb)); + my $worstcolor = &color_compare(values(%powercolors)); # compose message $message = "status $commahost.$test $worstcolor ".scalar(localtime)."\n\n"; my @indices = sort { $a <=> $b } keys(%statedb); foreach my $index (@indices) { @@ -3356,11 +3368,11 @@ # Get disk names, skip over "snapshots" and aggregates # Skip trailing slashes to make it more like Unix if (my $result = $snmpsession->get_table(-baseoid => $snmpoids{'dfFileSys'})) { while (my($key,$value) = each(%$result)) { - next if $value =~ /\.snapshot$|^aggr/; + next if $value =~ /\/\.\.$|\.snapshot$|^aggr/; (my $index = $key) =~ s/^.*\.//; $value =~ s/\/$//; $disknamedb{$index} = $value; } # while (($key,$value) = each(%$result)) } else { @@ -3479,12 +3491,12 @@ my $worstcolor = 'green'; # This is where I insert any messages about specific partitions going over their limits my @indices = sort { $a <=> $b } keys(%disknamedb); foreach my $index (@indices) { - my $yellowlimit = $ENV{'DFWARN'}; - my $redlimit = $ENV{'DFPANIC'}; + my $yellowlimit = $disk_defyellow; + my $redlimit = $disk_defred; if ((exists($diskthreshdb_ref->{$host})) && (defined($diskthreshdb_ref->{$host})) && (exists($diskthreshdb_ref->{$host}{$diskmntdb{$index}})) && (defined($diskthreshdb_ref->{$host}{$diskmntdb{$index}}))) { $redlimit = $diskthreshdb_ref->{$host}{$diskmntdb{$index}}{'red'}; @@ -3557,12 +3569,12 @@ my $worstcolor = 'green'; # This is where I insert any messages about specific partitions going over their limits my @indices = sort { $a <=> $b } keys(%disknamedb); foreach my $index (@indices) { - my $yellowlimit = $ENV{'DFWARN'}; - my $redlimit = $ENV{'DFPANIC'}; + my $yellowlimit = $disk_defyellow; + my $redlimit = $disk_defred; if ((exists($diskthreshdb_ref->{$host})) && (defined($diskthreshdb_ref->{$host})) && (exists($diskthreshdb_ref->{$host}{$diskmntdb{$index}})) && (defined($diskthreshdb_ref->{$host}{$diskmntdb{$index}}))) { $redlimit = $diskthreshdb_ref->{$host}{$diskmntdb{$index}}{'red'}; > -----Original Message----- > From: Francesco Duranti [mailto:fduranti at q8.it] > Sent: Thursday, September 14, 2006 4:30 PM > To: hobbit at hswn.dk > Subject: [hobbit] R: [hobbit] question on disable until ok > > If you use the last bb-xsnmp it also check with hobbit query > command to see if a host is alive but it check only if the > host is "red" so it will not get disabled. I got some problem > with it because if it get a error in snmp response it exit > and don't continue to check other hosts... I've modified it > to continue to check.. Attached is a patch with the 1.79 > version available on deadcat that check if a host exist in > the bbhost file and if it's "conn" state is not "green" (so > if you've disabled the conn test it will not check for snmp. > > > ________________________________ > > Da: Marco Avvisano [mailto:marco.avvisano at regione.toscana.it] > Inviato: gio 14/09/2006 14.53 > A: hobbit at hswn.dk > Oggetto: Re: [hobbit] question on disable until ok > > > > > > > > Please DO NOT remove the hobbitd_filestore. > > We have quite a few lot custom scripts that use this "old > BB-style file > > interface" > > > > Yes there are many scripts that using these files ... for > example bb-xsnmp > if not find these files stop to make check.. > so if it's possible not only to remove from the new version, > but add it also > a in 'disable until' > > best regards > > Marco > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > > > >

2 1

question on disable until ok
by marco.avvisano＠regione.toscana.it 14 Sep '06

14 Sep '06

Hi Enrick, i have always the problem in 4.2.0, if i use 'disable until ok', that no files are created in see HOBBITHOME/data/disabled/ Regards Marco

4 5

Using POST to test web pages
by frederic.mangeant＠steria.com 14 Sep '06

14 Sep '06

Hi I'm trying to monitor a web application (Cacti) which needs a login/password. Here is the form : <form name="login" method="post" action="index.php"> <input type="text" name="login_username" size="40" style="width: 295px;"> <input type="password" name="login_password" size="40" style="width: 295px;"> <input type="submit" value="Login"> <input type="hidden" name="action" value="login"> </form> I've tried this in bb-hosts : post;http://10.20.30.40/cacti/;login_username=foo&login_password=bar;Logged The 'content' test is red, and running in debug mode gives no error but : 2006-09-14 11:16:20 Calc content color host phoenix : 2006-09-14 11:16:20 Content check on http://10.20.30.40/cacti/ is red 2006-09-14 11:16:20 Adding to combo msg: status phoenix.content red Thu Sep 14 11:16:20 2006: Content match failed The 'http' test is green. I've tested with Hobbit 4.1.2p2 and 4.2.0 (patched). Could it be related to cookies ? Thanks in advance. -- Frédéric Mangeant Steria EDC Sophia-Antipolis

3 2

Windows Server
by Dave.Steep＠qwest.com 14 Sep '06

14 Sep '06

Hi everyone Has anyone got Hobbit running on a windows server or do I need build a Unix Box.. Dave This communication is the property of Qwest and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

6 8