February 2007 - Xymon - Xymon mailman web

Hobbit Mon 4.2 on RHEL
by Gary.Ciampa＠sas.com 16 Feb '07

16 Feb '07

Henrik, I'm running hobbit on a linux system along with 8 clients, two linux andn 6 windows. The problem is that somehow I've deleted my "uptime" and "netstat" columns from the two linux systems and can't seem to get the columns back? I have page defined which contains two groups, linux and windows, here are column headers...I've played around with bb and bbgen w/out success.... I believe at some point I did a "bb drop" for the netstat and uptime to clear up errors....but, can't seem to get the columns back. Thanks, Gary Linux Servers bbd </hobbit-cgi/hobbitcolumn.sh?bbd> bbgen </hobbit-cgi/hobbitcolumn.sh?bbgen> bbtest </hobbit-cgi/hobbitcolumn.sh?bbtest> conn </hobbit-cgi/hobbitcolumn.sh?conn> cpu </hobbit-cgi/hobbitcolumn.sh?cpu> disk </hobbit-cgi/hobbitcolumn.sh?disk> files </hobbit-cgi/hobbitcolumn.sh?files> hobbitd </hobbit-cgi/hobbitcolumn.sh?hobbitd> http </hobbit-cgi/hobbitcolumn.sh?http> info </hobbit-cgi/hobbitcolumn.sh?info> memory </hobbit-cgi/hobbitcolumn.sh?memory> msgs </hobbit-cgi/hobbitcolumn.sh?msgs> ports </hobbit-cgi/hobbitcolumn.sh?ports> procs </hobbit-cgi/hobbitcolumn.sh?procs> trends </hobbit-cgi/hobbitcolumn.sh?trends> Windows Servers conn </hobbit-cgi/hobbitcolumn.sh?conn> cpu </hobbit-cgi/hobbitcolumn.sh?cpu> disk </hobbit-cgi/hobbitcolumn.sh?disk> info </hobbit-cgi/hobbitcolumn.sh?info> memory </hobbit-cgi/hobbitcolumn.sh?memory> msgs </hobbit-cgi/hobbitcolumn.sh?msgs> netstat </hobbit-cgi/hobbitcolumn.sh?netstat> procs </hobbit-cgi/hobbitcolumn.sh?procs> svcs </hobbit-cgi/hobbitcolumn.sh?svcs> trends </hobbit-cgi/hobbitcolumn.sh?trends> uptime </hobbit-cgi/hobbitcolumn.sh?uptime> -------------------------------------------------------------------------------- EMIX64S01 EMIX64S02 EMIX64S05 EMIX64S06 RDCEWLMV2 - HPOVO Console EMIX64S08 - HPOVO Meta Windows Servers conn cpu disk info memory msgs netstat procs svcs trends uptime -------------------------------------------------------------------------------- EMIX64S01 EMIX64S02 EMIX64S05 EMIX64S06 RDCEWLMV2 - HPOVO Console EMIX64S08 - HPOVO Meta Gary T. Ciampa Enterprise Management Integration Phone: (919) 531-6140 Fax: (919) 677-4444 SAS/C and SAS/C++ Compiler <http://www.sas.com/sasc> SAS... The Power to Know

3 2

polling Windows clients
by lebarber＠gmail.com 15 Feb '07

15 Feb '07

I have a problem, we have some Windows servers sitting behind a 1-way NAT'ing firewall that I need to monitor. If these were Unix/Linux boxes I could just use hobbitfetch, but I don't think bbwin supports polling. I was wondering if there was some way of combining msgcache and bbproxy in such a way that it would be possible to retrieve information this way. If it was possible to do this I could than place a small linux box behind the firewall and then use hobbitfetch to monitor the boxes. The only other solution that I can see is to place a complete hobbit instance behind the firewall, but that would give our operations people yet another screen to monitor, and I would like to avoid that, if I could. Thanks, Larry Barber

1 0

[hobbit] FORMAT=HTML available?
by gumby3203＠gmail.com 15 Feb '07

15 Feb '07

I looked through the documentation and source code, and it doesn't look like there is a FORMAT=HTML. Basically, there are a few html content checks that I am doing with Hobbit, and I would like the emails that get sent out to use the HTML MIME format. It looks like the default MAIL output is plain-text. Would it be possible to add HTML as an option for the FORMAT= command?

1 0

SMS +additional messages
by mprice＠hst.nasa.gov 15 Feb '07

15 Feb '07

Hello, I am rolling my monitoring over to sending email text messages to cell phones using the SMS format option. This works great :-) but....... Some of the users would like some more information in the message, how can I include some additional parameters... Specifically, when i am using DEVMON and the if_stat monitor status. It comes in the normal email formatting, but not in SMS. thanks, michael -- Michael A. Price Performance Network Engineering NASA/GSFC Code 440.8/LMB Greenbelt, Maryland 20770 Phone: 240-684-1356 Cell: 410-507-7476 e-mail: mprice at hst.nasa.gov ----------------------------------------------

2 1

My msgs test doesn't work
by gcastellini＠gmail.com 15 Feb '07

15 Feb '07

I put in in my "client-local.cfg": [hostdemo] log:/var/adm/messages:10240 and HOST=hostdemo LOG WARNING COLOR=red in the "hobbit-clients.cfg" file. I put a "WARNING" in my messages with "echo "WARNING" >" and a logger command but doesnt happends. In my msgs column this appear: System logs at Thu Feb 15 17:04:43 ART 2007 No entries in /var/adm/messages <http://149.194.61.199:8080/hobbit-cgi/bb-hostsvc.sh?CLIENT=energyfs&SECTION…> Full log /var/adm/messages <http://149.194.61.199:8080/hobbit-cgi/bb-hostsvc.sh?CLIENT=energyfs&SECTION…> WARNING But never turn to red status. I have solaris 10 (06/06) sparc platform, the client is also sol10.

2 1

Disable feature on test page
by emarganne＠be.tiauto.com 15 Feb '07

15 Feb '07

Hello Mr Storner, Here is an idea of feature it could be nice to have: To add a little link in the display of a test page (meaning that when you click on a conn test for i.e.) to directly disable that. This could make life easier than browsing a lot of machines and tests like you must do for now. Another good point is that it could also solve the multiple admin users problem certain people have. Thank you for taking care of this, Etienne Marganne. TI Automotive. The information contained in this transmission may contain privileged and confidential information. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

2 2

hobbit-alerts problem
by jonescr＠cisco.com 14 Feb '07

14 Feb '07

I am again being bitten by regex problems. I am able to reproduce it with the following entries in hobbit-alerts.cfg: $IGNORE_HOSTS=%prod-web-(1|2|3|4|9|10|11)$ HOST=$IGNORE_HOSTS service=* IGNORE If I then check the "info" column of a host that is *not* supposed to be ignored, such as prod-web-12. It shows that it is indeed ignored. This is a serious problem as I have already missed alerts for some production hosts because of this problem. According to pcretest (Henriks recommended method of testing a Hobbit regex), there is nothing wrong with the regular expression that I am using: $ pcretest PCRE version 6.6 06-Feb-2006 re> /prod-web-(1|2|3|4|9|10|11)$/ data> prod-web-12 (*correctly not matching*) No match data> prod-web-19 (*correctly not matching*) No match data> prod-web-10 (*correctly matching*) 0: prod-web-10 1: 10 From the above tests you can see that prod-web-12 does not match the regex when using pcretest, yet Hobbit is matching it for some reason. A possible work-around could be to not use a regex at all, such as $IGNORE_HOSTS=prod-web-1,prod-web-2,prod-web-3... but that is not really a solution if you have hundreds of hosts, and my main point is that regular expressions are not working as they are documented. I've also tried other undocumented ways of using the regex, including: No hosts matched at all $IGNORE_HOSTS=%prod-web-(1|2|3|4|9|10|11)$ HOST="IGNORE_HOSTS" No hosts matched at all $IGNORE_HOSTS="%prod-web-(1|2|3|4|9|10|11)$" HOST=$IGNORE_HOSTS All hosts match (both web-12 and web-11) $IGNORE_HOSTS=prod-web-(1|2|3|4|9|10|11)$ HOST=%$IGNORE_HOSTS If anyone else can verify or reproduce this, it would be helpful in at least convincing Henrik to add it to the list of things to fix in the next version. I honestly hope that it's not a problem with Hobbit and instead something I am doing wrong - if so please enlighten me. -Charles

2 4

FreeBSD client
by bill.hart＠burkecorp.com 14 Feb '07

14 Feb '07

I've recently been tasked with getting the hobbit client on some of our older servers. The older redhat box was no problem, but I've got a FreeBSD 2.2.6 box that is giving me fits. I have downloaded the files to compile on the server, including installing GNU "make" and then finding out later that gmake was already installed. When running gmake after a 'MAKE=gmake ./configure.client' I get the following : ld: bb.o: malformed input file (not rel or archive) gmake[1]: *** [../client/bb] Error 1 gmake[1]: Leaving directory 'usr/home/wish/hobbit-4.2.0/common' gmake: *** [common-client] Error 2 As a separate issue (potentially) the Hobbit installer doesn't detect the "make" that I've installed, though I can type 'make' at the command line just fine where I couldn't before. I've searched a bit through the archives and on the web, but can't find anything that seems to point me in the right direction. Any tips ? Thanks, Bill Hart Computer Support Supervisor

2 4

Admintool V0.2.0 Blank Pages
by dan.guertin＠twcable.com 14 Feb '07

14 Feb '07

Hi, Any Ideas why this is happening? Running Hobbit 4.2 on Solaris 9 X86, I added the Admintools V0.2.6 and Apache log is showing the following errors: /export/home/hobbit/cgi-secure/adminscripts_viewlogs.sh: syntax error at line 455: e_temp=$' unexpected /export/home/hobbit/cgi-secure/adminscripts_testalarm.sh: syntax error at line 455:`date_temp=$' unexpected /export/home/hobbit/cgi-secure/adminscripts_edit_files.sh: syntax error at line 28:`FILEX=' unexpected /export/home/hobbit/cgi-secure/adminscripts_chhostservice.sh: syntax error at line 455: `date_temp=$' unexpected /export/home/hobbit/cgi-bin/adminscripts_view_graph.sh: syntax error at line 455: `date_temp=$' unexpected Thanks Dan Guertin Senior Lab Engineer Team Lead Time Warner Cable dan.guertin at twcable.com <mailto:dan.guertin at twcable.com> 704-731-3704 Desk 704-891-2508 Cell ----------------------------------------- This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.

2 3

LOG not triggering
by bill.hart＠burkecorp.com 13 Feb '07

13 Feb '07

I'm hoping this is something obvious. My Hobbit server (4.2.0, patched on Friday) has the following entry in the hobbit-clients.cfg file : HOST=hobbit PROC arpwatch 1 LOG /var/log/messages "arpwatch" COLOR=yellow That is all I've changed, the default section remains the same The PROC line works fine, but the LOG seems to be ignored. I have entries in the messages file showing up on the hobbit server : System logs at Tue Feb 13 11:40:27 CST 2007 No entries in /var/log/messages Full log /var/log/messages Feb 13 11:09:07 hobbit arpwatch: bogon 0.0.0.0 Feb 13 11:25:34 hobbit arpwatch: bogon 169.254.49.204 Feb 13 11:25:36 hobbit last message repeated 2 times Feb 13 11:30:47 hobbit arpwatch: new station xx.xx.xx.xx Feb 13 11:34:51 hobbit arpwatch: new station xx.xx.xx.xx As you can see it's not triggering on the arpwatch entries there. I've tried arpwatch, "arpwatch:", and "arpwatch", as well as %.* in place of /var/log/messages, none of it seems to cause a yellow condition. Anyone have any pointers on what I'm doing wrong ? The logs all look clean in /var/log/hobbit, only entries for an external script I'm running that has nothing to do with this. Thanks, Bill Hart Computer Support Supervisor Burke Corporation 1516 South D Avenue PO Box 209 Nevada, IA 50201-0209 (515) 382-3575 x8406 www.BurkeCorp.com Always make it your best(r)

3 3