October 2007 - Xymon - Xymon mailman web

New to Hobbit --- file monitoring
by mohnkern＠gmail.com 31 Oct '07

31 Oct '07

I'm relatively new to Hobbit, but I'm learning quickly. I'm in a mixed OS environment, with one Linux server, one linux notebook, 2 windows machines, a network printer and a VOIP box. I've managed to get the bb-hosts file so it monitors all the equipment, and I've got the ports set so it's checking ports on the server. What I'd like to do is do file checking, starting with just to see if a file exists. I added the following to /etc/hobbit/hobbit-clients.cfg FILE "/etc/passwd" GREEN NOEXIST TRACK Just to have it check to see if /etc/passwd existed. (I may have this reversed, but more on that later). Restarting hobbit, and it still showed "no files being checked" So I added the following to /etc/hobbit//client-local.cfg file:/etc/passwd Restarted Hobbit, still nothing. I'm clearly missing a piece to the puzzle. There's also a directory /usr/lib/hobbit but I can't imagine any configure files go there. If it helps, I'm running Ubuntu 7.10. So if I want to monitor for file existence, on the server, where (and what) do I plug in?

4 8

Issue with bbproxy
by akincaid＠beckautogroup.com 31 Oct '07

31 Oct '07

The bb-hosts file on .4 (the remote server) has these entries: 192.168.213.4 apollo.tfc.com #bbd http://apollo.tfc.com 192.168.213.6 bomgar # ping http://192.168.213.6 I added these entries into the bb-hosts file on .5 (the main server) this morning 192.168.213.4 apollo.tfc.com #noconn 192.168.213.6 bomgar #noconn After doing this the messages in hobbitd went away Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Now my /hobbit/bb.html page shows both "remote" items but has no data on them other then bbproxy, info and trends on .4. The bbproxy icon on the main servers /hobbit page shows this: bbproxy for Hobbit version 4.2.0 Proxy statistics Incoming messages : 43 (0 msgs/second) Outbound messages : 292 Incoming message distribution - Combo messages : 12 - Status messages : 253 Messages merged : 10 Resulting combos : 2 - Page messages : 0 - Other messages : 31 Proxy ressources - Connection table size : 1 - Buffer space : 8 kByte Timeout/failure details - reading from client : 0 - connecting to server : 275 - sending to server : 0 - recovered : 0 - reading from server : 0 - sending to client : 0 Average queue time : 30.618 On .4 hobbitlaunch.cfg I changed all the other services that had NEEDS hobbitd to say NEEDS bbproxy as mentioned in http://www.hswn.dk/hobbiton/2006/08/msg00833.html, but this did not help. What am I missing? From: Aaron Kincaid Sent: Tuesday, October 30, 2007 1:55 PM To: hobbit at hswn.dk Subject: Issue with bbproxy Having an issue with bbproxy. I have a main hobbit box 192.168.213.5 and a secondary box that currently has 192.168.213.4 (it will be moved offsite after testing and setup is completed) I want .4 to forward all info to .5, but 4 does not need to display anything locally. On .4 I have tried various things with no apparent progress. In hobbitlaunch.cfg I disabled hobbitd as instructed and set [bbproxy] up as follows [bbproxy] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg CMD $BBHOME/bin/bbproxy --hobbitd --bbdisplay=192.168.213.5 --report=$MACHINE.bbproxy --pidfile=$BBSERVERLOGS/bbproxy.pid On the main server .5, I get the following messages under hobbit process Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Do I need to do something on .5? I tried adding 'apollo.tfc.com' and 'bomgar' to the bbhosts file on .5 but that appears to have produced resulted in .5 simply checking the hosts out for itself instead of using .4's results. So, several questions: 1) How to I display the result from .4 on .5? 2) Where will the info appear? On the bb.html page or can I make it appear in one of my existing PAGE groups? 3) In the future can I use --bbdisplay=192.168.213.5 to use the FQDN for when I finally deploy it? Thanks in advance, Aaron Kincaid

3 2

config report (critical)
by rlapuz＠fcpp.fujitsu.com 31 Oct '07

31 Oct '07

Hi all! I added some hosts and services as critical systems and its working as expected. However, when I click Config report (critical), it says "0 hosts included". What seems to be the problem? I have Hobbit 4.2.0 w/ all-in-one patch installed in Fedora core 6 (1.60 GHzX2, 1 GB of RAM, 80 GB of HDD) Thanks and regards, Ryan

2 1

problem with CLASS definition
by jonescr＠cisco.com 31 Oct '07

31 Oct '07

I have a host whose client was started via: "./runclient.sh --class=APP_PRIMARY start" In the hobbit servers hobbit-clients.cfg, I have something similar to: CLASS=APP_PRIMARY PROC "someproc" PROC "/some/other/proc" .... DEFAULT PROC sshd The problem is that only the default proc "sshd" is being checked on the host. The expected behavior is that the CLASS would be used and other other procs checked instead. I know this has nothing to do with the DEFAULT setting, as using HOST=hostname works fine. I just cant get it to check the procs by CLASS. Is there any way to debug this? Shouldn't the CLASS show up in the "info" section? Do I need to put the class name in quotes on the command line? Thanks, -Charles

2 8

hobbit-clients.cfg LOG configuration
by hugeng＠gmail.com 31 Oct '07

31 Oct '07

Hi, In hobbit-clients.cfg LOG configuration, I want to catch critical event lines, which have the keyword "EventID" and either keyword of failed, failure or error. Looks this line doesn't work, any idea please? LOG /var/log/messages %EventID.*(failed|failure|error) thanks, ------ Geng

5 6

File monitoring with BBWin
by allan＠zandahar.net 31 Oct '07

31 Oct '07

Howdy, Just wondering if anything further has been written for the fsmon external script in BBWin to be able to monitor files the same way the Hobbit client does. I've had a requirement come up today that I need to generate an alert if files with a particular string get created. If/When it fails it starts generating dump files like theres no tomorrow. I've had a quick look on deadcat and found one called 'filecheck.cmd' that looks like it could do the trick but am yet to even download and look at it Allan

2 1

bbd and http showing as purple on localhost
by mohnkern＠gmail.com 31 Oct '07

31 Oct '07

Since about 12 days ago I'm seeing something really strange. Hobbit on my local machine is reporting bbd and httpd as "not reporting" and the individual information is dated back 12 days. However, this is the machine the hobbit server is running on. I can't quite figure out why its saying bbd is not reporting, when I' m actually connecting to it and retrieving data (does this make sense?) All other monitors (including pings to other machines) are reporting correctly. Anyone have a suggestion?

3 4

Compiled Hobbit SCO Client
by Ken.Cooper＠Intelliverse.com 31 Oct '07

31 Oct '07

Anyone have one that will run on 5.0.4, 5.0.5, 5.0.6 Ken Cooper Sr. NOC Technician Phone|770.663.5079 ken.cooper at intelliverse.com

2 1

hobbit-clients.cfg not working?
by skjoldar＠gmail.com 31 Oct '07

31 Oct '07

Hi guys, first post here. I have been searching archives and google all day, but so far have come across nothing. Scenario: Server has disk with oracle data store, is always on 99% and swap (this is normal for these hosts is always between 50 and 60 modified hobbit-clients.cfg to say HOST=cypher DISK /data2 IGNORE DISK /data3 IGNORE DISK /data4 IGNORE HOST=brown,crusher,cypher MEMSWAP 60 80 DEFAULT # These are the built-in defaults. UP 1h LOAD 5.0 10.0 DISK * 90 95 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 97 Yet nothing on the display changes. Disk is still red (i had it on 100 101 as well before ignore) and swap still shows yellow. /data2 (94% used) has reached the WARNING level (90%) red /data3 (99% used) has reached the PANIC level (95%) yellow /data4 (92% used) has reached the WARNING level (90%) The is being read, because when I make an error it shows up in the log file, but these changes have no effect. What am I missing? Thanks Stef

4 18

repeated crashes of hobbitd_client
by kpalmer＠networkcar.com 31 Oct '07

31 Oct '07

after a recent restart of a stable hobbit server (v4.2.0) instance (> 1 year without issues), hobbitd_client is now repeatedly crashing. a sanitized version of what gdb reports follows: GNU gdb Red Hat Linux (6.3.0.0-1.143.el4rh) Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1". Core was generated by `hobbitd_client'. Program terminated with signal 6, Aborted. Reading symbols from /lib/libpcre.so.0...done. Loaded symbols for /lib/libpcre.so.0 Reading symbols from /lib/tls/libc.so.6...done. Loaded symbols for /lib/tls/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 #0 0x003d17a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 (gdb) bt #0 0x003d17a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 #1 0x004127a5 in raise () from /lib/tls/libc.so.6 #2 0x00414209 in abort () from /lib/tls/libc.so.6 #3 0x0805d4e6 in sigsegv_handler (signum=11) at sig.c:57 #4 <signal handler called> #5 rbtFind (h=0x0, key=0x8f25178) at rbtr.c:379 #6 0x08054cb8 in getrule (hostname=0x8f25178 "hostname.foo.com", pagename=0x8f246e0 "oldprod", classname=0xb7e7b04f "linux", ruletype=C_LOAD) at client_config.c:237 #7 0x08054f32 in get_cpu_thresholds (hinfo=0x8f246e0, classname=0xb7e7b04f "linux", loadyellow=0xbfee0654, loadred=0xbfee0658, recentlimit=0xbfee065c, ancientlimit=0xbfee0660, maxclockdiff=0xbfee0664) at client_config.c:1209 #8 0x08049fde in unix_cpu_report ( hostname=0xb7e7b033 "hostname.foo.com", clientclass=0xb7e7b04f "linux", os=OS_LINUX, hinfo=0x8f25110, fromline=0xbfee1810 "\nStatus message received from xxx.xxx.xxx.xxx\n", timestr=0xb7e7b085 "Tue Oct 30 23:19:57 PDT 2007", uptimestr=0xb7e7b128 " 23:19:57 up 71 days, 1:14, 0 users, load average: 0.29, 0.23, 0.19", clockstr=0xb7e94e94 "epoch: 1193811603.588122\nlocal: 2007-10-30 23:20:03 PDT\nUTC: 2007-10-31 06:20:03 GMT\n", msgcachestr=0x0, whostr=0xb7e7b175 "", psstr=0xb7e7eca3 " PID PPID USER STARTED S PRI %CPU TIME %MEM RSZ VSZ CMD\n 1 0 root Aug 20 S 24 0.0 00:00:49 0.0 504 1540 init\n 2 0 root Aug 20 S 139 0.0 00:00:00 0.0 0"..., topstr=0xb7e8afca "\n\n 23:19:58 up 71 days, 1:14, 0 users, load average: 0.29, 0.23, 0.19\n526 processes: 525 sleeping, 1 running, 0 zombie, 0 stopped\nCPU states: cpu user nice system irq softirq iowait "...) at hobbitd_client.c:263 #9 0x0804d035 in handle_linux_client ( hostname=0xb7e7b033 "hostname.foo.com", clienttype=0xb7e7b04f "linux", os=OS_LINUX, hinfo=0x8f25110, sender=0xb7e7b025 "xxx.xxx.xxx.xxx", timestamp=1193811604, clientdata=0xb7e7b055 "client hostname,foo,com.linux linux\n[date") at client/linux.c:55 #10 0x080514ed in main (argc=1, argv=0xbfee1e24) at hobbitd_client.c: 1788

1 0