September 2006 - Xymon - Xymon mailman web

Redhat 3 R5 vmstat
by dstuffle＠deltafaucet.com 04 Sep '06

04 Sep '06

Seems that RedHat 3 Update 5 has the same vmstat output that the default "linux" OS works with. The README.CLIENT instructs to use the --os-rhel3 tag, but there needs to be an exception for Update 5. [hobbit at rhlxprd2 client]$ cat /etc/redhat-release Red Hat Enterprise Linux AS release 3 (Taroon Update 5) [hobbit at rhlxprd2 client]$ vmstat 1 1 procs memory swap io system cpu r b swpd free buff cache si so bi bo in cs us sy id wa 0 0 0 45396 79248 2510044 0 0 4 9 1 11 1 1 32 1 David This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

1 0

GROUP setting in alerts
by dstuffle＠deltafaucet.com 04 Sep '06

04 Sep '06

hello, I may not be understanding the GROUP setting correctly. My hobbit-clients.cfg has this: HOST=rhlxdev1 PROC ImageServer yellow PROC "ImageServing/jre/bin/java" PROC mysql GROUP=security PROC sawmill GROUP=security And my hobbit-alerts.cfg has this: HOST=rhlxdev1 GROUP=security MAIL $efairhurst Is this the correct way to have the $efairhurst user alerted for only the "mysql" and "sawmill" procs? If so, should it show up in the info column alert rules? Thanks DavidThis email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

2 1

Snapshot compile errors
by dunne＠ntms1.accuweather.com 03 Sep '06

03 Sep '06

Greetings, When I try to compile the latest snapshot (OS X) I receive the following errors: make[1]: Entering directory `/Users/hobbit/Desktop/snapshot/bbnet' gcc -g -O -Wall -Wno-unused -D_REENTRANT -DBIND_8_COMPAT=1 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -DDarwin -I. -I/Users/hobbit/Desktop/snapshot/include -I/opt/local/include -DBBGEN_SSL -DBBGEN_LDAP -DBBGEN_LDAP_USESTARTTLS -I/usr/include -I/usr/include -c -o bbtest-net.o bbtest-net.c bbtest-net.c: In function 'load_tests': bbtest-net.c:510: error: 'MULTIPING_POOL' undeclared (first use in this function) bbtest-net.c:510: error: (Each undeclared identifier is reported only once bbtest-net.c:510: error: for each function it appears in.) bbtest-net.c: In function 'main': bbtest-net.c:2190: warning: pointer targets in passing argument 1 of 'dupstrbuffer' differ in signedness bbtest-net.c:2239: warning: enumeration value 'TOOL_CONTEST' not handled in switch bbtest-net.c:2239: warning: enumeration value 'TOOL_FPING' not handled in switch bbtest-net.c:2239: warning: enumeration value 'TOOL_HTTP' not handled in switch bbtest-net.c:2239: warning: enumeration value 'TOOL_LDAP' not handled in switch gmake[1]: *** [bbtest-net.o] Error 1 gmake[1]: Leaving directory `/Users/hobbit/Desktop/snapshot/bbnet' gmake: *** [bbnet-build] Error 2 I understand the snapshots are a work in progress, just wanted to advise. Thanks, Mike Michael Dunne Systems Support Specialist AccuWeather, Inc. ~HISTORY, n. An account mostly false, of events mostly unimportant, which are brought about by rulers mostly knaves, and soldiers mostly fools. (Ambrose Bierce, "The Devil's Dictionary")~

1 0

uptime column
by etienne.grignon＠gmail.com 03 Sep '06

03 Sep '06

Hello all, I have a question for you about the idea to separate the cpu column of the uptime alert. The idea would be to create a new column called uptime which will be yellow or red if it reboots. The advantage is for history. When you actually look to the history to find quickly when the server has rebooted in the past, it is not easy to know if it was a reboot or a cpu alert, you have to click on each different alert status to check the content. But, with this new column, even if the width of each BB page is larger than before, it would be so easy to list all reboots of a host. I implemented this in BBWin and it is very appreciated by my colleagues, so that's why I post the message to get the opinion of you. I think putting uptime alert in the cpu column was inherited from big brother so may be it could be changed depending the agreement of Henrik and hobbit users. Henrik, what do you think about that ? Regards, -- Etienne GRIGNON

5 4

[hobbit] where can I find viewconf.sh file
by fduranti＠q8.it 02 Sep '06

02 Sep '06

If you check the yesterday messages you'll find the source posted on the mailing list... ________________________________ From: T.J. Yang [mailto:tj_yang at hotmail.com] Sent: Friday, September 01, 2006 4:37 AM To: hobbit at hswn.dk Subject: [hobbit] where can I find viewconf.sh file I like to display hobbit configuration file also, where can I find this script ? http://www.hswn.dk/hobbit-cgi/viewconf.sh Regards tj

2 1

"snapshot report" generating wide variety of report times?
by brodie＠mcw.edu 01 Sep '06

01 Sep '06

Hi- when I run the "snapshot report" (say, for 9am, August 31), the main system display shows a date of Aug 31, 9am. Cool. But as soon as I drill down to any server's report (cpu, disk, procs, whatever)- the actual dates of the report displayed are all over the place- days and even weeks off. (Aug 15, Aug 22, etc). Any idea what is going on????? --------------------------------------------------------- Kent C. Brodie - brodie at phys.mcw.edu Department of Physiology Medical College of Wisconsin (414) 456-8590

3 2

newbie question about event duration
by haubertj＠alfredstate.edu 01 Sep '06

01 Sep '06

Can some one explain, or just point me to an explanation, how hobbit computes duration of an event? I am using a standard hobbit installation, on debian testing, testing 63 hosts. I have not changed any test intervals from the default. I don't understanding how a system which checks every 5 minutes, and rechecks every minute can return a connectivity down event less than a minute long. I recently had a network card in a printer go bad, and the symptom was a lot of short duration disconnects, some of which were reported by hobbit to be less than a minute long. -- Tim Hauber ACES Network Manager Alfred State College "Proximity to wonder has blunted our perception and appreciation of it" --Tim Hartnell in 'Exploring ARTIFICIAL INTELLIGENCE on your Commodore 64'

2 1

Another stellar release
by rsmrcina＠wi.rr.com 01 Sep '06

01 Sep '06

I've finished implementing Hobbit 4.2 at a customer site, the last little problem being the rrd issue that Henrik (and others) confirmed the problem that I was having with moving graphs between architectures. When the release notes indicated that there was up to a 50% reduction in CPU Utilization, I really took notice. This customer runs Hobbit in a shared, virtualized environment (in a Linux virtual machine on the mainframe). In this environment we like applications that get the work done while using the least amount of CPU and memory possible. Before 4.2 at it's peak the Hobbit virtual machine would use ~13% of the CPU. I wasn't worried too much about that, since the peak comes at a consistent interval. After 4.2 I've noticed that the Hobbit virtual machine now barely gets about 1% of CPU Utilization. I was very surprised at the significant reduction in resources required for this release. I must commend Henrik, not only on this wonderful achievement, but also on the amazing new features in 4.2. May all your releases be so good! Regards, -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 rich.smrcina at vmassist.com Catch the WAVV! http://www.wavv.org WAVV 2007 - Green Bay, WI - May 18-22, 2007

5 8

Messing with logfiles before Hobbit sees them
by greg.hubbard＠eds.com 01 Sep '06

01 Sep '06

Shire folk: I have a log file that I need to pass through a filter before Hobbit reviews it. I know I can simply some up with some "tail -f | filter > updated.file" kludge. Is there a way to get Hobbit to do this when it reads the file? Any ideas? GLH

3 3

[hobbit] Memory usage BBWIn 0.8
by ivan.verbeeck＠vmma.be 01 Sep '06

01 Sep '06

Etienne, I'll fix it that way. Thanx for your time! Regards, Ivan -----Original Message----- From: Etienne Grignon [mailto:etienne.grignon at gmail.com] Sent: woensdag 30 augustus 2006 12:45 To: hobbit at hswn.dk Subject: Re: [hobbit] Memory usage BBWIn 0.8 Hi Ivan, 2006/8/29, Ivan Verbeeck <ivan.verbeeck at vmma.be>: > Etienne, > > After i changed the time to 10min, the memory used by BBWin is still > growing, but not as fast as before. The event logs contains both > information events and warning events. The stats for the 10m: > Events Analyzed: 303 (1123 for 30m) > Events Matched: 101 (404 fof 30m) > Events Ignored: 0 > > The description fields of most of the events are about 200 chars long. > I'm actually doing some tests and investigations with what you said. I'm testing BBWin with a delay on 200 days for msgs (it represents 274330 events so it is a nice test), and the memory seems to grow indeed ... For the moment and for this server, you should remove the msgs agent load directive in BBWin.cfg until I find out the solution. Regards, -- Etienne GRIGNON To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

5 11