November 2007 - Xymon - Xymon mailman web

help with devmon template required
by klomph＠nlr.nl 19 Nov '07

19 Nov '07

Hi All, I'm trying to create a template for monitoring our printers with devmon. I'm using the "hrPrinterDetectedErrorState" snmp variable (.1.3.6.1.2.1.25.3.5.1.2.1) to get the status of the printer. According to the MIB the error conditions are encoded as bits in a octet string. So I think this means that I have to convert the octet to a number to do a switch My transforms file looks like: ===== transforms file ============= PrinterErrorNum : CONVERT : {hrPrinterDetectedErrorState} oct hrPrinterErrorState : SWITCH : {PrinterErrorNum} 0 = normal, 1 = request service, 2 = offline, 4 = jamed, 8 =door open, 16 =now toner, 32 = low toner, 64 = no paper, 128 = low paper sysUpTimeSecs : MATH : {sysUpTime} / 100 UpTimeTxt : ELAPSED : {sysUpTimeSecs} ========== In the output a get a clear error for the hrPrinterErrorState. According to the debug output devmon is first making the switch before it is doing the convert. ==== debug output ==== [07-11-19 at 10:10:34] DEBUG TESTS: Doing math transform on pzn2401/sysUpTimeSecs [07-11-19 at 10:10:34] DEBUG TESTS: Doing elapsed transform on pzn2401/UpTimeTxt [07-11-19 at 10:10:34] DEBUG TESTS: Doing switch transform on pzn2401/hrPrinterErrorState [07-11-19 at 10:10:34] DEBUG TESTS: Doing convert transform on pzn2401/PrinterErrorNum [07-11-19 at 10:10:34] DEBUG TEST: Rendering status message for pzn2401 [07-11-19 at 10:10:34] DEBUG TESTS: pzn2401 had one or more clear errors during test status ========== Please help, how can I solve this ? Regards, Bert Klomp

1 0

Hobbit alerts - Changing the sender's name
by akincaid＠beckautogroup.com 16 Nov '07

16 Nov '07

Never mind, guys. I figured it out. If you go to the users and groups and change the Full Name to whatever you want it accomplished what I desired. There are username and Full Name fields. The Full Name field is who the emails come from. Of course this is in Fedora Core, which is gui linux for newbies. From: Aaron Kincaid Sent: Friday, November 16, 2007 8:26 AM To: hobbit at hswn.dk Subject: Re: Hobbit alerts - Changing the sender's name I am a newbie at Linux to say the least. I took a box, loaded Fedora Core 7, and followed the instructions to create a Hobbit box, so I have no idea how it sends out. It uses sendmail, I guess. All I know is that it works BETTER than Big Brother. Anyway, when an alert email shows up, the senders name is "hobbit" and the boss man wants it to be specific to location so it would say "Location1 Hobbit" instead. The details show it comes from hobbit <hobbit at domain.com> I did check the /etc/passwd file but I don't want to mess something up. I don't know the ramifications of changing things around in there. Aaron From: Aaron Kincaid Sent: Thursday, November 15, 2007 11:20 AM To: hobbit at hswn.dk Subject: Hobbit alerts - Changing the sender's name Gentlemen, Is there a way to change the way the alerts are sent out from hobbit? I have a couple hobbit servers and I plan to add more in the future so I want my emails to come from a customized name instead of "hobbit". Where do I go to change the sender's name? Aaron Kincaid

2 1

Maintenance vs. clear messages
by km＠keithm.us 16 Nov '07

16 Nov '07

All, A question about emails from alarms. When a test or host is put into maintenance a clear email is sent. That clear message looks identical to a clear message sent when a problem actually clears. How can I distinguish between a maintenance clear and a real clear and modify the message accordingly? I am using the HTML wrapper for email messages. Any help would be appreciated.

2 2

[hobbit] RE: **Caution-External**: RE: [hobbit] monitoring files and messages-newbie
by santoshbabu_perumal＠platts.com 16 Nov '07

16 Nov '07

Hi, my problem on viewing files has not been resolved yet.u can see the list of files if i click any of the files to view it is popping up new window saying do you want to save this file Name:bb-hostsvc.sh Type :Unknown File Type From :nypplweblogs.platts.mcgraw-hill.com .my hobbit-clients.cfg file HOST=tower FILE /var/adm/sa/sar* TRACK=sarlog my hobbit-client.cfg file [tower] file:`ls -t -1 /var/adm/sa/sar*` log:/var/adm/messages what could be the problem?please advice on this -------------------------------------------------------- The information contained in this message is intended only for the recipient, and may be a confidential attorney-client communication or may otherwise be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, please be aware that any dissemination or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the message and deleting it from your computer. The McGraw-Hill Companies, Inc. reserves the right, subject to applicable local law, to monitor and review the content of any electronic message or information sent to or from McGraw-Hill employee e-mail addresses without informing the sender or recipient of the message. --------------------------------------------------------

2 7

Hobbit alerts - Changing the sender's name
by akincaid＠beckautogroup.com 16 Nov '07

16 Nov '07

I am a newbie at Linux to say the least. I took a box, loaded Fedora Core 7, and followed the instructions to create a Hobbit box, so I have no idea how it sends out. It uses sendmail, I guess. All I know is that it works BETTER than Big Brother. Anyway, when an alert email shows up, the senders name is "hobbit" and the boss man wants it to be specific to location so it would say "Location1 Hobbit" instead. The details show it comes from hobbit <hobbit at domain.com> I did check the /etc/passwd file but I don't want to mess something up. I don't know the ramifications of changing things around in there. Aaron From: Aaron Kincaid Sent: Thursday, November 15, 2007 11:20 AM To: hobbit at hswn.dk Subject: Hobbit alerts - Changing the sender's name Gentlemen, Is there a way to change the way the alerts are sent out from hobbit? I have a couple hobbit servers and I plan to add more in the future so I want my emails to come from a customized name instead of "hobbit". Where do I go to change the sender's name? Aaron Kincaid

1 0

Hobbit alerts - Changing the sender's name
by akincaid＠beckautogroup.com 15 Nov '07

15 Nov '07

Gentlemen, Is there a way to change the way the alerts are sent out from hobbit? I have a couple hobbit servers and I plan to add more in the future so I want my emails to come from a customized name instead of "hobbit". Where do I go to change the sender's name? Aaron Kincaid

3 2

alerts problem
by joe＠tmsusa.com 15 Nov '07

15 Nov '07

Hello, I've installed hobbit 4.2.0 and I'm gradually building up a shadow hobbit environment here, adding tests and tweaking settings to come as close as possible to the behavior of our current big brother monitors. One behavior which I didn't expect is that I'm getting alerted for yellow conditions. I've edited hobbitserver.cfg such that the relevant lines now look like this: #ALERTCOLORS="red,yellow,purple" # Colors that may trigger an alert message ALERTCOLORS="red,purple" # Colors that may trigger an alert message Then reloaded hobbit without effect, then tried restarting it, but no joy - I'm still getting alerted about yellow conditions. How can I make hobbit perform as expected in this regard? Joe

1 1

[hobbit] alerts problem
by bewhite＠fellowes.com 15 Nov '07

15 Nov '07

Joe, What have you done to your hobbit-alerts.cfg? You should able to pick and chose which items you want alerts when yellow and which you want alerts when red by editing this file. .....Bruce -----Original Message----- From: Sloan [mailto:joe at tmsusa.com] Sent: Wednesday, November 14, 2007 6:53 PM To: hobbit at hswn.dk Subject: [hobbit] alerts problem Hello, I've installed hobbit 4.2.0 and I'm gradually building up a shadow hobbit environment here, adding tests and tweaking settings to come as close as possible to the behavior of our current big brother monitors. One behavior which I didn't expect is that I'm getting alerted for yellow conditions. I've edited hobbitserver.cfg such that the relevant lines now look like this: #ALERTCOLORS="red,yellow,purple" # Colors that may trigger an alert message ALERTCOLORS="red,purple" # Colors that may trigger an alert message Then reloaded hobbit without effect, then tried restarting it, but no joy - I'm still getting alerted about yellow conditions. How can I make hobbit perform as expected in this regard? Joe To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk ---------------------------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc. ----------------------------------------------------

2 1

[hobbit] Use hobbit in operation center with critcal systems view
by henrik＠hswn.dk 15 Nov '07

15 Nov '07

On Mon, Oct 15, 2007 at 09:29:53AM +0200, Gräub Roland wrote: > In our environment the Operation Center always call when a alerts shows > up on their Event Console and acknowledge the alert. With this action > the alert is no longer visible for the operators. > > Now following questions/toughts came up when we look closer; > > Acknowledge; > If an alert is acknowledge from the operators in critical systems > this is a fix acknowledge for the given time, also when there is a > status change. > When a problem is fixed and goes red/yellow again it will not shown > up in critical view until the acked time is expired. > This sould be an option to ack a alert until a status change (like in > disable until ok). I decided against the "ack-until-ok" method, because in my experience systems often go briefly ok while being fixed, and then they crash again. (E.g. you'd reboot a server and all the processes startup, but one process that is being monitored dies after a few minutes). So the monitoring reports OK for a few minutes, and then go red - if you did use an "ack-until-ok" it would show up on the critical systems view again, triggering a new ticket. What happens now is that when the status goes green, a timer kicks off in Hobbit which lasts 12 minutes (i.e. 2 normal test cycles, plus a bit for good measure). If the test has been OK throughout those 12 minutes then the ack is cleared; if it goes non-green during that time the timer is reset and the ack persists (at least until it eventually expires). > The option Host-ack seems to be broken, on my system only one Test is > acknowledged although the Host-ack Checkbox is selected. A quick test says you're right. Will have to look into that. > Log; > Missing a Log/Report from Critical view. A Report with information about > the alerts and acknowledgeds information that were made in Critical systems > would be helpful. Right now it isn't even being logged, except inside the Hobbit daemon. A reporting tool is needed, I agree. > Definition (Edit Critical Systems); > Easiest way for us; made standard definitions and add host to this templates. Works fine. > But i miss a connection between alerts and critical view definition. Something like a option in hobbit-alerts.cfg to define that this rule is also valid for critical view. > Send a email when a alert shows up in critical view with all the possibiltys form hobbit-alerts.cfg. Wouldn't these two do the same thing ? Using the alert definitions to control the critical view is an interesting idea, I hadn't thought of that. > Special Case missed or belated Messages by Operation Center; > Now some application/scripts sends Alerts to the Console View and the Operation Center make an alert call for each event. > A problem in Hobbit/BB is when changes happen in red messages, the Operation Center didnt realize that until the acknowledge time runs out and they make the alert call again. > This can happen for example in the disk status test (a second filesystem goes red) or with nested Tests/Logfiles. With the Event Console they get two messages (each for one Filesystem). This is a problem with all of the tests that have multiple ways of going red: disk, procs, msgs and http are the common ones. I don't have solution to that right now. The way Hobbit works right now assumes that when you get an alert about the "disk" status, you keep on fixing it until the status goes green - and then the Operations Center won't need to raise a ticket for the second event. Regards, Henrik

5 6

Devmon if_col
by jonbjorn＠mbl.is 15 Nov '07

15 Nov '07

Hi All. I´ve been using devmon for some time to monitor cisco switches. Thanks to devmon I noticed I had collisions on one of the interface on my core switch, after fixing the port speed and duplex I want to reset the counters for that interface. I ran "clear counters gigabi... ifnr" and "clear controllers ethernet-controller.." but devmon is still showing me old counters on the if_col page. How do I reset the counter ?? regards JB

2 1