March 2007 - Xymon - Xymon mailman web

Alerting and delay outside office hours
by dortsen＠gmail.com 21 Mar '07

21 Mar '07

Hi All, How do I set up alerting so that it will send alerts immediately between 07:00 and 22:00, but with a 15 minute delay (if the test still turns red) outside those hours. With BigSister I'm used to set up alerting in one file. But am I right that with Hobbit you might have to setup a few things in hobbit-alerts.cfg and in bb-hosts? Thanks! Dennis

2 2

[hobbit] Critical Systems templates (for cloning)
by gumby3203＠gmail.com 21 Mar '07

21 Mar '07

In setting up templates in the Critical Systems section for cloning, is it possible to create a template for ALL tests. In other words, can I fill in the "Host" field as "Production hosts", and fill in the "Test" field as "*", so that I can set up a blanket template for all production hosts, for all tests? Or do I have no choice but to create individual templates for all the tests?

1 1

remove sslcert test (included with the https test)
by dortsen＠gmail.com 21 Mar '07

21 Mar '07

Hi All, I'm setting up Hobbit for the first time (v4.2.0) At the moment we're using Big Sister, but we're looking for something with better performance and ease of use. I have set up some tests on several hosts. One of the checks I'm using is the https check. That all works well, a green smiley is displayed. The neat thing with the https check is that it also checks the expirydate of your SSL certificate (sslcert test). Here's what I'm looking for: I want to remove the sslcert test for a certain number of hosts. We use a traffic manager that holds all the real SSL certificates, we're using a self signed, expired certificate on the hosts in question. Hobbit warns me with a red sslcert status that the certificate has expired. I know I can disable the the test (turns the smiley into a blue one), but that's not what I want. I have als tried to drop the sslcert test (server/bin/bb localhost "drop hostname sslcert") and add the NOCOLUMNS:sslcert tag for the host in question in the bb-hosts file. The NOCOLUMNS tag works for other statusses (white) but when a status is red, I can't seem to remove the sslcert test. It keeps coming back in a short while after I dropped the test with the bb command. Have I overseen something here? Thanks, Dennis

3 4

Historical trends?
by kolbjorn.barmen＠uninett.no 21 Mar '07

21 Mar '07

Is there a way to get a historical trend view? Typical monday situation, I came to work to find a host down, but it happened more than 48 hours ago. Would be nice if there was a way to get trends view for previous periods :) -- Kolbjørn Barmen UNINETT Driftsenter

11 21

Custom Graph Issue
by stl19847＠yahoo.com 21 Mar '07

21 Mar '07

I cannot get the RRD file to be created. I have a script that polls a firewall via SNMP and returns the CPU usage. The test works fine and creates a column named "fwcpu". bb 127.0.0.1 "status firewall.fwcpu green $now_string \n\ncpu : $cpu" The output is as follows. Tue Mar 20 23:47:22 2007 cpu : 10 I modified TEST2RRD to the following. TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tcp,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sendmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,files,procs=processes,ports,clock,lines,fwcpu=ncv" I also added... NCV_fwcpu="cpu:GAUGE" Shut down hobbit and made sure that the hobbitd_rrd processes were gone. restarted it and I get nothing in the RRD folder for the device. I _DO_ get "hobbit graph ncv:fwcpu" showing up in my test pages. -- Stewart Larsen -- This sig intentionally left blank, other than this text explaining that if not for this text, this sig would be blank.

5 6

cosmetic: FONT-tag for "--pagetitle-links" option of bbgen
by eckert.thomas＠gmx.net 21 Mar '07

21 Mar '07

Hi all, if "--pagetitle-links" is used in BBGENOPTS to make the page title link to (sub-) pages too the color of the created link is not set correctly. This results in the link showing up with the default link color and getting the "visited-color" after the first click on it. (tested with firefox-2.0.0.2, firefox-1.0.2 The attached trivial patch (against vanilla 4.2.0) fixes this by adding the needed FONT-tags. Thanks for hobbit! Thomas -- "The inside of my head was exploding with fireworks. Fortunately, my last thought turned out the lights when it left." --- Calvin

1 0

hobbit-alert.cfg; PAGE filter with same host on multiple subpages?
by jorgen.lindqvist＠vattenfall.com 21 Mar '07

21 Mar '07

Hi all! I have the same hosts defined on multiple pages/subpages and want to use the PAGE rules for defining alerts in hobbit-alerts.cfg This only seems to work for the "first" page, however, which is quite frustating... bb-hosts: page One subparent One A A 1.2.3.4 switch_1 # testip 1.2.3.5 switch_2 # testip 1.2.3.6 switch_3 # testip page Two subparent Two B B 1.2.3.4 switch_1 # noconn 1.2.3.6 switch_3 # noconn hobbit-alerts.cfg PAGE=One/A MAIL admin_one at foo.com PAGE=Two/B MAIL admin_two at foo.com The info column of switch_1 clearly tells me that Page/subpage is One/A and Two/B, however I can only see the alerting to admin_one at foo.com. Removing switch_1 from the One/A section enables my alerting to admin_two at foo.com. Is this a limitation in the Hobbit alerting? Something unforeseen? Or am I not thinking straight? Getting this to work would REALLY simplify my existance. I am implementing Hobbit Monitor in a quite big environment I believe... So far i have 832 switches in my bb-hosts file (takes 46 seconds to ping, according to bbtest). Not started on our servers yet. (No, I don't do this manually - I have designed a nice web GUI (PHP/MySQL) for all configurations ;) The best of regards to you all Jörgen Lindqvist Varberg, Sweden

1 0

Steve Aiello's Icons
by gjohnson＠trantor.org 21 Mar '07

21 Mar '07

I've added Steve Aiello's icons to The Shire...I've added a few new branches to the site for those who haven't been there in a while Reports, Alerts and Add-ons (some of these are anxiously awaiting your additions). =G=

1 0

List of Variables passed to Scripts
by geoff.hallford＠gmail.com 21 Mar '07

21 Mar '07

Hi, Is there a list of the variables that are passed to alerting scripts and what they contain? I haven't found a list and I would like to make our custom alerting script much more descriptive by adding items such as IP address, ... Thanks.

4 7

[hobbit] drop test not sticking...
by benjamin.gagnon＠yahoo.ca 21 Mar '07

21 Mar '07

I have been trying to hide the following 4 columns.... msgs, files, procs and ports None of those have a "no" option. Benjamin P.S. The only way I can get those columns to disappear is by using the group-only and group-except tags (or hacking the client script - see below). NOCOLUMNS + bb drop does not work for me at all (see my previous message). ----- Original Message ---- From: Dean Casey <dcasey at pathfire.com> To: hobbit at hswn.dk Sent: Monday, March 19, 2007 9:33:01 AM Subject: RE: [hobbit] drop test not sticking...  Since these are standard tests, as long as you have the host itself listed in the bb-hosts file, they will re-appear unless you use the “no<test>” tag – noconn noprocs nports, etc – as outlined in the help files. Use those tags at the appropriate level in the bb-hosts file and all will be well. Dean Casey From: Benjamin Gagnon [mailto:benjamin.gagnon at yahoo.ca] Sent: Monday, March 19, 2007 6:06 AM To: hobbit at hswn.dk Subject: Re: [hobbit] drop test not sticking... Thank you very much for your solution. I have dropped both procs and ports so far. I hacked the hobbit-client-<OS>.sh script on the client, restarted the client then dropped the tests once again from the server. Those 2 tests are now gone. I'm not sure how to get rid of msgs and files though. Doesn't appear to be any entry for these in the hobbit-client-<OS>.sh script. Anyone? There are no uncommented FILE or LOG entries in the client's localclient.cfg or in the server's hobbit-clients.cfg files. I'm confused as to why it is so difficult to remove standard client-side tests that I do not wish to perform at this point in time. Benjamin ----- Original Message ---- From: Buchan Milne <bgmilne at staff.telkomsa.net> To: hobbit at hswn.dk Cc: Benjamin Gagnon <benjamin.gagnon at yahoo.ca> Sent: Monday, March 19, 2007 4:23:55 AM Subject: Re: [hobbit] drop test not sticking... On Monday 19 March 2007, Benjamin Gagnon wrote: > Hi, I'm having a problem with dropping a host's test. > > I perform the following command from the server (there are no output errors > or errors in the error log)... > > bb 127.0.0.1 "drop opsappsl.lac-bac.gc.ca ports" > > Within a couple of minutes the ports column gets dropped and then a couple > of minutes later the column reappears. So the drop command works ok but > the settings do not stick. > > I've RTFM'd and searched the web for answers to no avail. Anyone have any > ideas? To remove a test: 1)Remove the test from the configuration file for the server that is running the test (so that no new data is generated) 2)Drop the test (to prevent the test from going purple now that it receives no data) However, note that the ports test is not run from the Hobbit server, the ports data is supplied by the client ... If you were dropping the entire host, this would make sense, but I can't see why you would want to drop the ports test for one host (and ... this is a bit tricky). Maybe you can explain? You could accomplish this by hacking up the hobbit-client-<OS>.sh script on the client. Regards, Buchan -- Buchan Milne ISP Systems Specialist - Monitoring/Authentication Team Leader B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592) The best gets better. See why everyone is raving about the All-new Yahoo! Mail. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0