October 2007 - Xymon - Xymon mailman web

yellow vs. red alerts and DURATION tag--looking for workaround
by hobbit_user＠yahoo.com 08 Oct '07

08 Oct '07

Hi, This issue has been brought up by other users, for example: http://www.hswn.dk/hobbiton/2007/08/msg00097.html I have a very similar issue: For all yellow alerts, we want to send email only. For red alerts, we want to first page a primary oncall person only, then if a test is still red after 20 min, we want to page a secondary oncall person. Example config: MAIL email COLOR=yellow,purple MAIL page.primary COLOR=red MAIL page.secondary COLOR=red DURATION>20m This works for most tests, but with disk and cpu services (which are likely to be in the yellow state for >20m before going red), the end result is that usually the primary and secondary get paged simultaneously when disk or cpu tests go red. So, if a disk is gradually filling up and goes to the yellow state at midnight (and email is sent but nobody reads it at that hour), then goes to the red state at 3:30am, both the primary and secondary oncall people get paged at 3:30am instead of the primary getting paged at 3:30am and the secondary at 3:50am. Can you think of any workaround to get the alerts to behave in the manner we desire? (That is, the secondary only gets paged 20m after a test has gone red no matter how much time the same test has been yellow.) I tried this: MAIL page.secondary COLOR=red,!yellow DURATION>20m in hopes that pages to the secondary wouldn't take into account time a test had been in the yellow state, but this didn't work. --------------------------------- Catch up on fall's hot new shows on Yahoo! TV. Watch previews, get listings, and more!

1 0

Monitoring Web sites with Hobbit
by Ashish_Vashisht＠WrightExpress.com 08 Oct '07

08 Oct '07

I am new to hobbit and as per the description it seems that hobbit can monitor http/https site. Can It monitor sequence of sites, almost like a simulated Synthetic transaction? Thanks Ashish Vashisht Senior Tivoli Administrator Wright Express Corp Work: 207-523-7537 Cell: 207-332-4813

7 17

[hobbit] Trend Graphs Stopped Showing Data
by mlivensp＠sonoma-county.org 08 Oct '07

08 Oct '07

The CPU status for the host shows green. All other statuses show green, and all the other trend graphs show current data. I don't see a core file, and nothing that looks like a log entry in hobbitlaunch.cfg. Mike >>> henrik at hswn.dk 10/8/2007 9:01:02 AM >>> On Mon, Oct 08, 2007 at 08:38:50AM -0700, Mike Livenspargar wrote: > We are a new installation of Hobbit 4.2.0, running on SuSE > Linux ES 10 SP1 machines. All has been working fine for a > couple of months until yesterday when the CPU load and Users > and Processes trend graphs for a particular machine stopped > showing data. All other trend graphs for that machine appear > to be working correctly. The graphs appear on the Trends > page, but the last 16 hours or so show no data for those two > graphs. Is the CPU status for that host showing a purple status ? If yes, then for some reason the cpu status is not being updated, and this affects the graph updates. There's also been one report that the hobbitd_rrd module crashed on a specific status message, which could also explain it. In that case, you should have a core file in the ~hobbit/data/tmp/ directory, and some log-entries in hobbitlaunch.cfg. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Trend Graphs Stopped Showing Data
by mlivensp＠sonoma-county.org 08 Oct '07

08 Oct '07

We are a new installation of Hobbit 4.2.0, running on SuSE Linux ES 10 SP1 machines. All has been working fine for a couple of months until yesterday when the CPU load and Users and Processes trend graphs for a particular machine stopped showing data. All other trend graphs for that machine appear to be working correctly. The graphs appear on the Trends page, but the last 16 hours or so show no data for those two graphs. I'm not familiar with rrd but I do see that the procs.rrd, users.rrd and la.rrd files on the hobbit server have datetime stamps coinciding with the last reported data (about 16 hours ago). The other .rrd files have current datetime stamps. I've tried restarting the hobbit server and the client but that did not fix the problem. What steps can I take to try to resolve this problem? Thank you, Mike

3 2

[hobbit] help needed
by ansiimire＠africaonline.co.ug 08 Oct '07

08 Oct '07

Hi all, I realise am asking alot of questions but i was wondering if anyone could help me with the procedure of operating on an application from suid root. Iam working on devmon application and am denied permision to perfom certain commands because devmon is not in the sudoers file. how do i put it there? Thanks for all your help.

3 2

Monitorin logs from batch jobs
by rlapuz＠fcpp.fujitsu.com 08 Oct '07

08 Oct '07

Hi all! I want to monitor if the batch jobs from crontab runs successfully or not. The batch jobs have log files which tells me if it is ok or not. Can someone teach me on how to monitor logs from batch jobs using Hobbit? Thanks and regards, Ryan

1 0

CGI script errors / browser attempts to download file
by pmcilrath＠marketron.com 08 Oct '07

08 Oct '07

Hi, Thanks everyone for your recommendations on my first noob post. They really helped. I decided to create a new thread for this problem. " http://<MYSERVERNAME>/hobbit/bb.html is working normally and brings me up to the normal "Main View" screen. The "All Non-Green" screen works as well. But everything else....and I mean everything else....my browser tries to download a file rather than run the cgi script to generate the new page/report. I checked and made sure my hobbit-server.cgi file points at the /usr/libexec/hobbit/cgi-bin directory, and I also made sure that my http.conf file points at the right cgi-bin for hobbit-cgi and cgi-secure for hobbit-seccgi. Im stumped! Has anyone seen this behaviour before? Paul </PRE>The information contained in this e-mail message may be confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this e-mail message in error, please e-mail the sender at exadmins at marketron.com

6 7

[hobbit] Disable of http Test
by jkwade＠futurefrontiers.com 05 Oct '07

05 Oct '07

Hi Galen, I tried that but it didn't work. I finally got it to work. I looked at some of the other scripts and did the same thing they were doing: STATUS="disable $machine.http -1 Running Deployment of from $FROM_STREAM to $TO_STREAM" $HOBBIT_HOME/bin/bb 198.168.0.222 "$STATUS" This worked fine. James -----Original Message----- From: Galen Johnson [mailto:Galen.Johnson at sas.com] Sent: Friday, October 05, 2007 3:59 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Disable of http Test I think you just need to remove the outer quotes... $HOBBIT_HOME/bin/bb 198.168.0.222 \"disable $machine.http -1 Running Deployment of from $FROM_STREAM to $TO_STREAM\" =G= -----Original Message----- From: James Wade [mailto:jkwade at futurefrontiers.com] Sent: Friday, October 05, 2007 4:45 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Disable of http Test Hey, I'm having problems scripting the disable. I'm using ksh. Here's what I'm doing: $HOBBIT_HOME/bin/bb 198.168.0.222 "\"disable $machine.http -1 Running Deployment of from $FROM_STREAM to $TO_STREAM\"" Here's the debug output: + machine=server1 + HOBBIT_HOME=/home/hobbit/client + FROM_STREAM=TEST1 + TO_STREAM=TEST2 + /home/hobbit/client/bin/bb 198.168.0.222 "disable tiers_trnprd6.http -1 Running Deployment from TEST1 to TEST2" It doesn't work. Now if I grab the bottom line using cut and paste, and execute it on the line manually, it works just fine. I know it's the way you have to put the disable in double quotes, but I can't seem to get it to work. Any help would be appreciated. Thanks..James -----Original Message----- From: James Wade [mailto:jkwade at futurefrontiers.com] Sent: Thursday, October 04, 2007 1:05 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Disable of http Test What about disable until O.K.? I looked at the manpage and didn't see it. Thanks....James -----Original Message----- From: Tom Georgoulias [mailto:tomg at mcclatchyinteractive.com] Sent: Thursday, October 04, 2007 11:54 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Disable of http Test Josh Luthman wrote: > Just to clarify this, is this command > > /home/shire/server/bin/bbcmd bin/bb 127.0.0.1 "disable foo.conn 60" then? > > Is the 60 in seconds or minutes? Minutes. To run that command from a remote server and not on the hobbit server, you would need to use $BBDISP instead of 127.0.0.1. Tom To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

[hobbit] Disable of http Test
by jkwade＠futurefrontiers.com 05 Oct '07

05 Oct '07

Hey, I'm having problems scripting the disable. I'm using ksh. Here's what I'm doing: $HOBBIT_HOME/bin/bb 198.168.0.222 "\"disable $machine.http -1 Running Deployment of from $FROM_STREAM to $TO_STREAM\"" Here's the debug output: + machine=server1 + HOBBIT_HOME=/home/hobbit/client + FROM_STREAM=TEST1 + TO_STREAM=TEST2 + /home/hobbit/client/bin/bb 198.168.0.222 "disable tiers_trnprd6.http -1 Running Deployment from TEST1 to TEST2" It doesn't work. Now if I grab the bottom line using cut and paste, and execute it on the line manually, it works just fine. I know it's the way you have to put the disable in double quotes, but I can't seem to get it to work. Any help would be appreciated. Thanks..James -----Original Message----- From: James Wade [mailto:jkwade at futurefrontiers.com] Sent: Thursday, October 04, 2007 1:05 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Disable of http Test What about disable until O.K.? I looked at the manpage and didn't see it. Thanks....James -----Original Message----- From: Tom Georgoulias [mailto:tomg at mcclatchyinteractive.com] Sent: Thursday, October 04, 2007 11:54 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Disable of http Test Josh Luthman wrote: > Just to clarify this, is this command > > /home/shire/server/bin/bbcmd bin/bb 127.0.0.1 "disable foo.conn 60" then? > > Is the 60 in seconds or minutes? Minutes. To run that command from a remote server and not on the hobbit server, you would need to use $BBDISP instead of 127.0.0.1. Tom To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

4 3

Security question
by akincaid＠beckautogroup.com 05 Oct '07

05 Oct '07

I have shored up security for how my users connect to specific areas, but I have found that if they mouse around they can get into specific places such as the cgi-bin areas. Is there a way to shore up one particular file. Specifically the configuration file under reports called the config report. Thanks, Aaron Kincaid

2 1