October 2007 - Xymon - Xymon mailman web

File monitoring with BBWin
by allan＠zandahar.net 31 Oct '07

31 Oct '07

Howdy, Just wondering if anything further has been written for the fsmon external script in BBWin to be able to monitor files the same way the Hobbit client does. I've had a requirement come up today that I need to generate an alert if files with a particular string get created. If/When it fails it starts generating dump files like theres no tomorrow. I've had a quick look on deadcat and found one called 'filecheck.cmd' that looks like it could do the trick but am yet to even download and look at it Allan

2 1

bbd and http showing as purple on localhost
by mohnkern＠gmail.com 31 Oct '07

31 Oct '07

Since about 12 days ago I'm seeing something really strange. Hobbit on my local machine is reporting bbd and httpd as "not reporting" and the individual information is dated back 12 days. However, this is the machine the hobbit server is running on. I can't quite figure out why its saying bbd is not reporting, when I' m actually connecting to it and retrieving data (does this make sense?) All other monitors (including pings to other machines) are reporting correctly. Anyone have a suggestion?

3 4

Compiled Hobbit SCO Client
by Ken.Cooper＠Intelliverse.com 31 Oct '07

31 Oct '07

Anyone have one that will run on 5.0.4, 5.0.5, 5.0.6 Ken Cooper Sr. NOC Technician Phone|770.663.5079 ken.cooper at intelliverse.com

2 1

hobbit-clients.cfg not working?
by skjoldar＠gmail.com 31 Oct '07

31 Oct '07

Hi guys, first post here. I have been searching archives and google all day, but so far have come across nothing. Scenario: Server has disk with oracle data store, is always on 99% and swap (this is normal for these hosts is always between 50 and 60 modified hobbit-clients.cfg to say HOST=cypher DISK /data2 IGNORE DISK /data3 IGNORE DISK /data4 IGNORE HOST=brown,crusher,cypher MEMSWAP 60 80 DEFAULT # These are the built-in defaults. UP 1h LOAD 5.0 10.0 DISK * 90 95 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 97 Yet nothing on the display changes. Disk is still red (i had it on 100 101 as well before ignore) and swap still shows yellow. /data2 (94% used) has reached the WARNING level (90%) red /data3 (99% used) has reached the PANIC level (95%) yellow /data4 (92% used) has reached the WARNING level (90%) The is being read, because when I make an error it shows up in the log file, but these changes have no effect. What am I missing? Thanks Stef

4 18

repeated crashes of hobbitd_client
by kpalmer＠networkcar.com 31 Oct '07

31 Oct '07

after a recent restart of a stable hobbit server (v4.2.0) instance (> 1 year without issues), hobbitd_client is now repeatedly crashing. a sanitized version of what gdb reports follows: GNU gdb Red Hat Linux (6.3.0.0-1.143.el4rh) Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1". Core was generated by `hobbitd_client'. Program terminated with signal 6, Aborted. Reading symbols from /lib/libpcre.so.0...done. Loaded symbols for /lib/libpcre.so.0 Reading symbols from /lib/tls/libc.so.6...done. Loaded symbols for /lib/tls/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 #0 0x003d17a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 (gdb) bt #0 0x003d17a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 #1 0x004127a5 in raise () from /lib/tls/libc.so.6 #2 0x00414209 in abort () from /lib/tls/libc.so.6 #3 0x0805d4e6 in sigsegv_handler (signum=11) at sig.c:57 #4 <signal handler called> #5 rbtFind (h=0x0, key=0x8f25178) at rbtr.c:379 #6 0x08054cb8 in getrule (hostname=0x8f25178 "hostname.foo.com", pagename=0x8f246e0 "oldprod", classname=0xb7e7b04f "linux", ruletype=C_LOAD) at client_config.c:237 #7 0x08054f32 in get_cpu_thresholds (hinfo=0x8f246e0, classname=0xb7e7b04f "linux", loadyellow=0xbfee0654, loadred=0xbfee0658, recentlimit=0xbfee065c, ancientlimit=0xbfee0660, maxclockdiff=0xbfee0664) at client_config.c:1209 #8 0x08049fde in unix_cpu_report ( hostname=0xb7e7b033 "hostname.foo.com", clientclass=0xb7e7b04f "linux", os=OS_LINUX, hinfo=0x8f25110, fromline=0xbfee1810 "\nStatus message received from xxx.xxx.xxx.xxx\n", timestr=0xb7e7b085 "Tue Oct 30 23:19:57 PDT 2007", uptimestr=0xb7e7b128 " 23:19:57 up 71 days, 1:14, 0 users, load average: 0.29, 0.23, 0.19", clockstr=0xb7e94e94 "epoch: 1193811603.588122\nlocal: 2007-10-30 23:20:03 PDT\nUTC: 2007-10-31 06:20:03 GMT\n", msgcachestr=0x0, whostr=0xb7e7b175 "", psstr=0xb7e7eca3 " PID PPID USER STARTED S PRI %CPU TIME %MEM RSZ VSZ CMD\n 1 0 root Aug 20 S 24 0.0 00:00:49 0.0 504 1540 init\n 2 0 root Aug 20 S 139 0.0 00:00:00 0.0 0"..., topstr=0xb7e8afca "\n\n 23:19:58 up 71 days, 1:14, 0 users, load average: 0.29, 0.23, 0.19\n526 processes: 525 sleeping, 1 running, 0 zombie, 0 stopped\nCPU states: cpu user nice system irq softirq iowait "...) at hobbitd_client.c:263 #9 0x0804d035 in handle_linux_client ( hostname=0xb7e7b033 "hostname.foo.com", clienttype=0xb7e7b04f "linux", os=OS_LINUX, hinfo=0x8f25110, sender=0xb7e7b025 "xxx.xxx.xxx.xxx", timestamp=1193811604, clientdata=0xb7e7b055 "client hostname,foo,com.linux linux\n[date") at client/linux.c:55 #10 0x080514ed in main (argc=1, argv=0xbfee1e24) at hobbitd_client.c: 1788

1 0

Alert Config.
by jkwade＠futurefrontiers.com 31 Oct '07

31 Oct '07

Will this work O.K.? HOST=%ep* SERVICE=http MAIL 555555555 at mycell.com REPEAT=15 COLOR=RED DURATION>5m DURATION<35 RECOVERED So, that it will not page the cell unless the outage lasts longer than 5 minutes, and will only page twice. (Assuming after 5 minute outage it pages, then pages every fifteen minutes for thirty minutes - twice) Thanks..James James Wade

4 4

Issue with bbproxy
by akincaid＠beckautogroup.com 30 Oct '07

30 Oct '07

Having an issue with bbproxy. I have a main hobbit box 192.168.213.5 and a secondary box that currently has 192.168.213.4 (it will be moved offsite after testing and setup is completed) I want .4 to forward all info to .5, but 4 does not need to display anything locally. On .4 I have tried various things with no apparent progress. In hobbitlaunch.cfg I disabled hobbitd as instructed and set [bbproxy] up as follows [bbproxy] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg CMD $BBHOME/bin/bbproxy --hobbitd --bbdisplay=192.168.213.5 --report=$MACHINE.bbproxy --pidfile=$BBSERVERLOGS/bbproxy.pid On the main server .5, I get the following messages under hobbit process Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Hostname 'apollo.tfc.com' in tree, but no host-info Hostname 'bomgar' in tree, but no host-info Do I need to do something on .5? I tried adding 'apollo.tfc.com' and 'bomgar' to the bbhosts file on .5 but that appears to have produced resulted in .5 simply checking the hosts out for itself instead of using .4's results. So, several questions: 1) How to I display the result from .4 on .5? 2) Where will the info appear? On the bb.html page or can I make it appear in one of my existing PAGE groups? 3) In the future can I use --bbdisplay=192.168.213.5 to use the FQDN for when I finally deploy it? Thanks in advance, Aaron Kincaid

2 1

Strange "problem" with refreshes
by swilson＠uchicago.edu 30 Oct '07

30 Oct '07

Problem is a bit of a strong word, but it is annoying. I'm in the process of switching from and old Big Brother server to a Hobbit server. All in all, Hobbit is far and away better. But there is one nagging difference. When I scroll down in a web page on my Big Brother server, and then reload (either the auto reload, or manually reloading) my web browser stays at the same position. With Hobbit, all reloads start me back up on the top of the page. This is particularly annoying if I scroll down and I'm looking at a specific host. When the automatic reload happens, I'm bumped up to the top and have to scroll down again. I've tried playing around with the header and removing things that were different from my Big Brother headers, and it didn't matter. I also doublechecked that there was nothing odd in my Apache config... and I couldn't find anything. Does anyone have any ideas what is up with this? Or is it simply something I'll have to live with to use the otherwise superior Hobbit? I've tried searching both this archive and Google, and I haven't come up with anything. Thanks! Scott Wilson Lead System Administrator swilson at uchicago.edu NSIT - DCS - SeaSol

7 18

How can see I group alerts setting under info column ?
by tj_yang＠hotmail.com 30 Oct '07

30 Oct '07

>From R1, I was able to configure the GROUP alerts on disk partition. Also the testing using " bin/hobbitd_alert --debug --test ..." is also working. The only problem is that I can't see the disk partitions alerts recipient shown under "info" column. Thus no easy way to show disk partition owners by just looking at "info" column of that machine. Am I doing something wrong ? or this is the current limitation of 4.2.0 ? R1: http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Other_Docs/FAQ#Q… T.J. Yang _________________________________________________________________ Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx…

2 1

Monitoring from the server
by johan.boye＠latecoere.fr 30 Oct '07

30 Oct '07

Hello, Here is a bb-host example : 1.2.3.4 fooserver # conn http ssh http://fooserver/ If "http" test failed, is there a way to make the alarm YELLOW status and not RED ? Another question, Is there a way to make an HTTP link on the NAME of the service on the web interfaces ? Thanks! "Les informations contenues dans ce message electronique peuvent etre de nature confidentielles et soumises a une obligation de secret. Elles sont destinees a l'usage exclusif du reel destinataire. Si vous n'etes pas le reel destinataire, ou si vous recevez ce message par erreur, merci de le detruire immediatement et de le notifier a son emetteur." "The information contained in this e-mail may be privileged and confidential. It is intended for the exclusive use of the designated recipients named above. If you are not the intended recipient or if you receive this e-mail in error, please delete it and immediately notify the sender."

2 1