February 2007 - Xymon - Xymon mailman web

polling Windows clients
by lebarber＠gmail.com 15 Feb '07

15 Feb '07

I have a problem, we have some Windows servers sitting behind a 1-way NAT'ing firewall that I need to monitor. If these were Unix/Linux boxes I could just use hobbitfetch, but I don't think bbwin supports polling. I was wondering if there was some way of combining msgcache and bbproxy in such a way that it would be possible to retrieve information this way. If it was possible to do this I could than place a small linux box behind the firewall and then use hobbitfetch to monitor the boxes. The only other solution that I can see is to place a complete hobbit instance behind the firewall, but that would give our operations people yet another screen to monitor, and I would like to avoid that, if I could. Thanks, Larry Barber

1 0

[hobbit] FORMAT=HTML available?
by gumby3203＠gmail.com 15 Feb '07

15 Feb '07

I looked through the documentation and source code, and it doesn't look like there is a FORMAT=HTML. Basically, there are a few html content checks that I am doing with Hobbit, and I would like the emails that get sent out to use the HTML MIME format. It looks like the default MAIL output is plain-text. Would it be possible to add HTML as an option for the FORMAT= command?

1 0

[hobbit] SMS +additional messages
by gumby3203＠gmail.com 15 Feb '07

15 Feb '07

I wrote my own external Hobbit script to provide a more detailed SMS output, but is still shorter than the regular email alerts. It's really short, so I've copy/pasted it below: <SCRIPT> #!/bin/bash msg=`echo "${BBALPHAMSG}" | egrep "&yellow|&red"` msg="\n${msg}" # CODE: #======= subject="!HB ${ACKCODE}" alert="${BBHOSTSVC} ${BBCOLORLEVEL}" message="\n${alert}${msg}" echo -e "${message}" | mail -s "${subject}" $RCPT </SCRIPT> To use this, you replace MAIL [recipients] [flags] with SCRIPT [hobbit home]/server/ext/oursms [recipients] [flags] where "[hobbit home]" is the Hobbit home directory, and "oursms" is the name of the script above. You can of course name it whatever you want. Essentially, this does what FORMAT=SMS does, except that it also displays the items that are red. Also, if you use the above script, make sure you don't include FORMAT=SMS. Hello, > > I am rolling my monitoring over to sending email text messages to cell > phones using the SMS format option. > This works great :-) > > but....... > Some of the users would like some more information in the message, how > can I include some additional parameters... > Specifically, when i am using DEVMON and the if_stat monitor status. It > comes in the normal email formatting, but not in SMS. > > thanks, michael > > > -- > > Michael A. Price > Performance Network Engineering > NASA/GSFC Code 440.8/LMB > Greenbelt, Maryland 20770 > Phone: 240-684-1356 > Cell: 410-507-7476 > e-mail: mprice at hst.nasa.gov > ---------------------------------------------- > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

1 0

My msgs test doesn't work
by gcastellini＠gmail.com 15 Feb '07

15 Feb '07

I put in in my "client-local.cfg": [hostdemo] log:/var/adm/messages:10240 and HOST=hostdemo LOG WARNING COLOR=red in the "hobbit-clients.cfg" file. I put a "WARNING" in my messages with "echo "WARNING" >" and a logger command but doesnt happends. In my msgs column this appear: System logs at Thu Feb 15 17:04:43 ART 2007 No entries in /var/adm/messages <http://149.194.61.199:8080/hobbit-cgi/bb-hostsvc.sh?CLIENT=energyfs&SECTION…> Full log /var/adm/messages <http://149.194.61.199:8080/hobbit-cgi/bb-hostsvc.sh?CLIENT=energyfs&SECTION…> WARNING But never turn to red status. I have solaris 10 (06/06) sparc platform, the client is also sol10.

2 1

Disable feature on test page
by emarganne＠be.tiauto.com 15 Feb '07

15 Feb '07

Hello Mr Storner, Here is an idea of feature it could be nice to have: To add a little link in the display of a test page (meaning that when you click on a conn test for i.e.) to directly disable that. This could make life easier than browsing a lot of machines and tests like you must do for now. Another good point is that it could also solve the multiple admin users problem certain people have. Thank you for taking care of this, Etienne Marganne. TI Automotive. The information contained in this transmission may contain privileged and confidential information. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

2 2

Are pcre issues fixed in latest snapshot, or planned for 4.3?
by jonescr＠cisco.com 14 Feb '07

14 Feb '07

We never got a response to the pcre issues below, so inquiring minds want to know :) Thanks, -Charles > Henrik, > > I understand you are a busy fellow as of late, but could you > acknowledge the pcre issues that me and others are having? Mine are > specifically with macro usage, but I have seen a few other posts by > Hobbit users who are having similar issues in other areas. In all > cases the regex works fine when tested with the "pcretest" binary, but > they fail when used with Hobbit. > > Since you are busy I don't expect this issue to take priority, but it > would be nice to know that you are at least aware of it and plan to > take a look at the problem when time permits. > > Thank You > -Charles Jones > > > Charles Jones wrote: >> Dominique, >> >> Thank you for confirming this. Hopefully Henrik will notice and >> address this issue. >> >> -Charles >> >> Dominique Frise wrote: >>> Charles Jones wrote: >>>> I am again being bitten by regex problems. I am able to reproduce >>>> it with the following entries in hobbit-alerts.cfg: >>>> >>>> $IGNORE_HOSTS=%prod-web-(1|2|3|4|9|10|11)$ >>>> HOST=$IGNORE_HOSTS service=* >>>> IGNORE >>>> >>>> If I then check the "info" column of a host that is *not* supposed >>>> to be ignored, such as prod-web-12. It shows that it is indeed >>>> ignored. This is a serious problem as I have already missed alerts >>>> for some production hosts because of this problem. >>>> >>>> According to pcretest (Henriks recommended method of testing a >>>> Hobbit regex), there is nothing wrong with the regular expression >>>> that I am using: >>>> $ pcretest >>>> PCRE version 6.6 06-Feb-2006 >>>> re> /prod-web-(1|2|3|4|9|10|11)$/ >>>> data> prod-web-12 (*correctly not matching*) >>>> No match >>>> data> prod-web-19 (*correctly not matching*) >>>> No match >>>> data> prod-web-10 (*correctly matching*) >>>> 0: prod-web-10 >>>> 1: 10 >>>> >>>> From the above tests you can see that prod-web-12 does not match >>>> the regex when using pcretest, yet Hobbit is matching it for some >>>> reason. A possible work-around could be to not use a regex at all, >>>> such as $IGNORE_HOSTS=prod-web-1,prod-web-2,prod-web-3... but that >>>> is not really a solution if you have hundreds of hosts, and my main >>>> point is that regular expressions are not working as they are >>>> documented. >>>> >>>> I've also tried other undocumented ways of using the regex, including: >>>> >>>> No hosts matched at all >>>> $IGNORE_HOSTS=%prod-web-(1|2|3|4|9|10|11)$ >>>> HOST="IGNORE_HOSTS" >>>> >>>> No hosts matched at all >>>> $IGNORE_HOSTS="%prod-web-(1|2|3|4|9|10|11)$" >>>> HOST=$IGNORE_HOSTS >>>> >>>> All hosts match (both web-12 and web-11) >>>> $IGNORE_HOSTS=prod-web-(1|2|3|4|9|10|11)$ >>>> HOST=%$IGNORE_HOSTS >>>> >>>> If anyone else can verify or reproduce this, it would be helpful in >>>> at least convincing Henrik to add it to the list of things to fix >>>> in the next version. I honestly hope that it's not a problem with >>>> Hobbit and instead something I am doing wrong - if so please >>>> enlighten me. >>>> >>>> -Charles >>>> >>> >>> I tried your config. and, yes, I have same strange behaviour. >>> We are running Hobbit 4.2.0 patched on Solaris 9. >>> >>> $ pcretest >>> PCRE version 4.5 01-December-2003 >>> >>> re> /prod-web-(1|2|3|4|9|10|11)$/ >>> data> prod-web-12 >>> No match >>> data> prod-web-19 >>> No match >>> data> prod-web-10 >>> 0: prod-web-10 >>> 1: 10 >>> >>> The column info and the rule tests below show that both prod-web-10 >>> and prod-web-12 are ignored but not prod-web-8. >>> >>> $ ./hobbitd_alert --test "prod-web-10" conn >>> 00015495 2007-01-12 07:52:45 send_alert prod-web-10:conn state Paging >>> 00015495 2007-01-12 07:52:45 Matching host:service:page >>> 'prod-web-10:conn:acadSys' against rule line 200 >>> 00015495 2007-01-12 07:52:45 *** Match with 'HOST=$IGNORE_HOSTS >>> service=*' *** >>> 00015495 2007-01-12 07:52:45 Matching host:service:page >>> 'prod-web-10:conn:acadSys' against rule line 200 >>> 00015495 2007-01-12 07:52:45 *** Match with 'HOST=$IGNORE_HOSTS >>> service=*' *** >>> 00015495 2007-01-12 07:52:45 IGNORE rule found >>> >>> >>> $ ./hobbitd_alert --test "prod-web-12" conn >>> 00016778 2007-01-12 07:58:50 send_alert prod-web-12:conn state Paging >>> 00016778 2007-01-12 07:58:50 Matching host:service:page >>> 'prod-web-12:conn:acadSys' against rule line 200 >>> 00016778 2007-01-12 07:58:50 *** Match with 'HOST=$IGNORE_HOSTS >>> service=*' *** >>> 00016778 2007-01-12 07:58:50 Matching host:service:page >>> 'prod-web-12:conn:acadSys' against rule line 200 >>> 00016778 2007-01-12 07:58:50 *** Match with 'HOST=$IGNORE_HOSTS >>> service=*' *** >>> 00016778 2007-01-12 07:58:50 IGNORE rule found >>> >>> >>> $ ./hobbitd_alert --test "prod-web-8" conn >>> 00016921 2007-01-12 07:59:50 send_alert prod-web-8:conn state Paging >>> 00016921 2007-01-12 07:59:50 Matching host:service:page >>> 'prod-web-8:conn:acadSys' against rule line 200 >>> 00016921 2007-01-12 07:59:50 Failed 'HOST=$IGNORE_HOSTS service=*' >>> (hostname not in include list) >>> ... >>> ... >>> >>> >>> Dominique >>> UNIL - University of Lausanne_ >>> >>> To unsubscribe from the hobbit list, send an e-mail to >>> hobbit-unsubscribe at hswn.dk >> >> To unsubscribe from the hobbit list, send an e-mail to >> hobbit-unsubscribe at hswn.dk > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk

1 0

FreeBSD client
by bill.hart＠burkecorp.com 14 Feb '07

14 Feb '07

I've recently been tasked with getting the hobbit client on some of our older servers. The older redhat box was no problem, but I've got a FreeBSD 2.2.6 box that is giving me fits. I have downloaded the files to compile on the server, including installing GNU "make" and then finding out later that gmake was already installed. When running gmake after a 'MAKE=gmake ./configure.client' I get the following : ld: bb.o: malformed input file (not rel or archive) gmake[1]: *** [../client/bb] Error 1 gmake[1]: Leaving directory 'usr/home/wish/hobbit-4.2.0/common' gmake: *** [common-client] Error 2 As a separate issue (potentially) the Hobbit installer doesn't detect the "make" that I've installed, though I can type 'make' at the command line just fine where I couldn't before. I've searched a bit through the archives and on the web, but can't find anything that seems to point me in the right direction. Any tips ? Thanks, Bill Hart Computer Support Supervisor

2 4

Admintool V0.2.0 Blank Pages
by dan.guertin＠twcable.com 14 Feb '07

14 Feb '07

Hi, Any Ideas why this is happening? Running Hobbit 4.2 on Solaris 9 X86, I added the Admintools V0.2.6 and Apache log is showing the following errors: /export/home/hobbit/cgi-secure/adminscripts_viewlogs.sh: syntax error at line 455: e_temp=$' unexpected /export/home/hobbit/cgi-secure/adminscripts_testalarm.sh: syntax error at line 455:`date_temp=$' unexpected /export/home/hobbit/cgi-secure/adminscripts_edit_files.sh: syntax error at line 28:`FILEX=' unexpected /export/home/hobbit/cgi-secure/adminscripts_chhostservice.sh: syntax error at line 455: `date_temp=$' unexpected /export/home/hobbit/cgi-bin/adminscripts_view_graph.sh: syntax error at line 455: `date_temp=$' unexpected Thanks Dan Guertin Senior Lab Engineer Team Lead Time Warner Cable dan.guertin at twcable.com <mailto:dan.guertin at twcable.com> 704-731-3704 Desk 704-891-2508 Cell ----------------------------------------- This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.

2 3

LOG not triggering
by bill.hart＠burkecorp.com 13 Feb '07

13 Feb '07

I'm hoping this is something obvious. My Hobbit server (4.2.0, patched on Friday) has the following entry in the hobbit-clients.cfg file : HOST=hobbit PROC arpwatch 1 LOG /var/log/messages "arpwatch" COLOR=yellow That is all I've changed, the default section remains the same The PROC line works fine, but the LOG seems to be ignored. I have entries in the messages file showing up on the hobbit server : System logs at Tue Feb 13 11:40:27 CST 2007 No entries in /var/log/messages Full log /var/log/messages Feb 13 11:09:07 hobbit arpwatch: bogon 0.0.0.0 Feb 13 11:25:34 hobbit arpwatch: bogon 169.254.49.204 Feb 13 11:25:36 hobbit last message repeated 2 times Feb 13 11:30:47 hobbit arpwatch: new station xx.xx.xx.xx Feb 13 11:34:51 hobbit arpwatch: new station xx.xx.xx.xx As you can see it's not triggering on the arpwatch entries there. I've tried arpwatch, "arpwatch:", and "arpwatch", as well as %.* in place of /var/log/messages, none of it seems to cause a yellow condition. Anyone have any pointers on what I'm doing wrong ? The logs all look clean in /var/log/hobbit, only entries for an external script I'm running that has nothing to do with this. Thanks, Bill Hart Computer Support Supervisor Burke Corporation 1516 South D Avenue PO Box 209 Nevada, IA 50201-0209 (515) 382-3575 x8406 www.BurkeCorp.com Always make it your best(r)

3 3

bbcmd usage
by emarganne＠be.tiauto.com 13 Feb '07

13 Feb '07

Hello all, I recently discovered a nice tool within Hobbit, the bbcmd command. As far as I understood it can execute some command and pass environment variables to it. But I just do not catch everything if for i.e. I want to execute the bb-rep.cgi. What must I do? Insert the environment in a file and then pass to the bbcmd? Like this? File content, report.cfg: BBREP="/home/hobbit/test/" START-MON=Feb START-DAY=9 START-YR=2007 END-MON=Feb END-DAY=16 END-YR=2007 STYLE=crit Or another way? And the command: bbcmd -env=report.cfg bb-rep.cgi. The aim of this is to try to enhance the report script some people in the list have received from. Enhance it in a way that it automatically fetches the .csv file and analyze it. If I come to a solution in some way or another I will make that update script available. Etienne Marganne TI Automotive. The information contained in this transmission may contain privileged and confidential information. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

2 1