May 2007 - Xymon - Xymon mailman web

Filtering event logs from windows sytems bbnt client
by a_stranberg＠hotmail.com 10 May '07

10 May '07

Hi All, Is it possible using the hobbit-clients.cfg file to centrally filter out windows eventlog messages by key word? I am running the bbnt client on the windows hosts and want to tune out for example any eventlog message about printing with out touching each windows client.Thanks-Aaron _________________________________________________________________ Create the ultimate e-mail address book. Import your contacts to Windows Live Hotmail. www.windowslive-hotmail.com/learnmore/managemail2.html?locale=en-us&ocid=TX…

3 2

[hobbit] still with the bb-histlog.sh errors
by bewhite＠fellowes.com 10 May '07

10 May '07

OK, here ya go. httpd.conf User www Group other ls -l $INSATLL_DIR/data/hist drwxr-xr-x 2 hobbit hobbit 40960 May 10 00:09 hist The listing of the contents of this file was too big to send to the mail list. But everything in the folder is owned by hobbit:hobbit. Thanks, Bruce -----Original Message----- From: Jones, Jason (Altrincham) [mailto:JasonAS_Jones at mentor.com] Sent: Thursday, May 10, 2007 2:48 AM To: hobbit at hswn.dk Subject: RE: [hobbit] still with the bb-histlog.sh errors Can you please post the ls -l of your $INSTALL_DIR/data/hist/ folder and the User and Group information from your apache http.conf (typically under $apache_install_dir/conf/) Thanks, Jason. _____ From: White, Bruce [mailto:bewhite at fellowes.com] Sent: 09 May 2007 21:39 To: 'hobbit at hswn.dk' Subject: RE: [hobbit] still with the bb-histlog.sh errors I too occasionally get this error. It seems to happen to me when the color is changed on a test for a special reason (i.e. the CPU going yellow after a reboot) or when the problem is extremely short in nature (i.e. the CONN test goes red for a single cycle of bbtest). Just my $.02, Bruce -----Original Message----- From: sholmes42 at gmail.com [mailto:sholmes42 at gmail.com] On Behalf Of Steve Holmes Sent: Wednesday, May 09, 2007 1:14 PM To: hobbit at hswn.dk Subject: Re: [hobbit] still with the bb-histlog.sh errors This is getting serious. I'm going to have to dig into the code (sigh) if no one out there has a fix. At the moment on my test hobbit instance I can't see any historical info other than green. That won't be too useful in production. I'm hoping to roll this out next week, but don't want to with these last couple of problems (see my earlier post about msgs :-). Is no one else having this problem? BTW, I'm not sure my message of 5/3 got to the list since I didn't get any replies and I was answering a question from Galen. But thanks in advance if you have any suggestions. Steve Holmes On 5/3/07, Steve Holmes <sholmes42 at mac.com <mailto:sholmes42 at mac.com> > wrote: What I get in the apache log is: [Thu May 03 10:35:17 2007] [error] [client xxx.xxx.xxx.xxx] Premature end of script headers: bb-histlog.sh, referer: http://hobbit.server.purdue.edu/hobbit-cgi/bb-hist.sh?HISTFILE=hobbit.client .purdue.edu.procs <http://hobbit.server.purdue.edu/hobbit-cgi/bb-hist.sh?HISTFILE=hobbit.clien t.purdue.edu.procs&ENTRIES=50&IP=0.0.0.0&DISPLAYNAME=hobbit.client.purdue.ed u> &ENTRIES=50&IP=0.0.0.0&DISPLAYNAME=hobbit.client.purdue.edu What the browswer presents is (scoured of html): 500 Internal Server Error Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, trouble and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. Apache/2.2.2 (Unix) mod_ssl/2.2.2 OpenSSL/0.9.8e DAV/2 mod_jk/1.2.19 mod_pubcookie/3.2.1 mod_perl/2.0.2 Perl/v5.8.7 Server at hobbit.server.purdue.edu <http://hobbit.server.purdue.edu> Port 80 And, BTW, I had to hunt a little to find one that failed. Several (red) worked just fine. Thanks, Steve. On 5/3/07, Galen Johnson < Galen.Johnson at sas.com <mailto:Galen.Johnson at sas.com> > wrote: Are you getting an error (if so, can you post it) or nothing? Is there anything in the apache logs? =G= -----Original Message----- From: Steve Holmes [mailto: sjh at allegro.ics.purdue.edu <mailto:sjh at allegro.ics.purdue.edu> ] Sent: Thursday, May 03, 2007 10:56 AM To: hobbit at hswn.dk <mailto:hobbit at hswn.dk> Subject: [hobbit] still with the bb-histlog.sh errors In the archive thread ending with: http://www.hobbitmon.com/hobbiton/2006/08/msg00429.html <http://www.hobbitmon.com/hobbiton/2006/08/msg00429.html> Anatoli Bogajewski suggests adding "HOBBITDREL="4.2.0" to hobbitserver.cfg to get rid of the problem with bb-histlog.sh (internal server error), which I've done. Still, I get some errors when trying to view an historical page. Some of them work. Some don't. It appears that the green ones work, but some of the non-green ones don't, although I haven't done an exhaustive test of that. Is there a more recent/comprehensive fix? Thanks, Steve. ---------------------------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc. ---------------------------------------------------- ---------------------------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc. ----------------------------------------------------

3 2

[hobbit] Filtering event logs from windows sytems bbnt client
by a_stranberg＠hotmail.com 10 May '07

10 May '07

Thanks for the tip, that appears at first glance to be a new agent, what I am trying by best to do is avoid installing a new agent on our 200+ hosts, just the change control would take me a couple of days. :) Know of anyway to filter messages from the bbnt client at the hobbit host level, maybe using the ignore string?-Aaron> Date: Thu, 10 May 2007 00:10:26 -0400> From: gjohnson at trantor.org> To: hobbit at hswn.dk> Subject: Re: [hobbit] Filtering event logs from windows sytems bbnt client> > Aaron Stranberg wrote:> > Hi All,> > Is it possible using the hobbit-clients.cfg file to centrally > > filter out windows eventlog messages by key word? I am running the > > bbnt client on the windows hosts and want to tune out for example any > > eventlog message about printing with out touching each windows client.> >> > Thanks> >> > -Aaron> >> > ------------------------------------------------------------------------> > Add some color. Personalize your inbox with your favorite colors. Try > > it! > > <www.windowslive-hotmail.com/learnmore/personalize.html?locale=en-us&ocid=RM…>> Have you looked at bbwin? I believe it already handles this for you.> > > =G=> > > To unsubscribe from the hobbit list, send an e-mail to> hobbit-unsubscribe at hswn.dk> > _________________________________________________________________ See what you’re getting into…before you go there. http://newlivehotmail.com/?ocid=TXT_TAGWL_migration_HM_viral_preview_0507

1 0

[hobbit] Problems with "query"
by Chris.Morris＠RWEsystemsUK.com 10 May '07

10 May '07

It works for me. Have you set the $BBSERVER variable to point to your server, either proper ip address or 127.0.0.1? I used bb 127.0.0.1 "query server.test" and have the path to the executable in my $PATH. Regards, Chris > -----Original Message----- > From: re.charge at gmx.de [SMTP:re.charge at gmx.de] > Sent: Thursday, May 10, 2007 12:00 PM > To: hobbit at hswn.dk > Subject: [hobbit] Problems with "query" > > Hello there, > i got some problems while trying to use the "query" option in hobbit. > At first : the BBServer and Client is up and running correct. > > i already enabled and disabled different tests with the usual (bb > $BBSERVER "disable my,server,com.procs")comand. > > But when i was trying to get infomation by using "query" nothing happend. > > Here is what i am typing: > /opt/bb/bb16e1/bin/bb $BBSERVER "query my,server,com.procs" > > the man page tells me that this is the exact sysntax, so now i am confused > ... > > i also tryed to get the debug mode running, but it wont work :/ > > somebody got any idea what i am doing wrong ? > > Greetings & thx > Andi > > > -- > Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! > Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > ********************************************************************** The days are getting lighter! Replace your light bulbs with energy-saving recommended ones; just one can reduce your lighting costs by up to £100 over the lifetime of the bulb - and they last up to 12 times longer than ordinary light bulbs. Source: Energy Saving Trust 2007 ********************************************************************** This e-mail including any attachments is provided for general information purposes only and does not constitute advice except to the addressee if expressly stated in this email. For the avoidance of doubt the contents of this email and any attachments are subject to contract and are not intended to and will not constitute a legally binding contract or any part of a legally binding contract. The information contained in this email and any attachments is confidential. It is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution or copying of the message or associated attachments is strictly prohibited. If you have received this e-mail in error, please notify postmaster at RWEsystemsUK.com and permanently delete the email and any attachments immediately from your system. You should not retain, copy or use this email or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you for your co-operation. Neither RWE Systems UK Ltd nor any of the other companies in the RWE Group from whom this e-mail originates accept any responsibility for losses or damage as a result of any viruses and it is your responsibility to check attachments (if any) for viruses. RWE Systems UK Ltd Registered office: Mistral, Westlea Campus, Chelmsford Road, Swindon, Wiltshire, SN5 7EZ. Registered in England and Wales: company number 6052966. *******************************************

2 1

Status not available
by tlabelsd＠telkom.co.za 10 May '07

10 May '07

Hi Everyone, I am a newbie to hobbit and have being tasked to set up hobbit for our growing network and, I installed hobbit and added two clients to bb-hosts file and added some tags to them but cpu,memory proc etc do not show on web interface, however when i click the icons on the http,ntp,ssh web interface i get status not available error below is a paste of hobbit-client.cfg and bb-hosts respectively # SETTINGS FOR HIDS5 HOST=cntrra02-rh-hids5.telkom.co.za UP 30m LOAD 6.0 12.0 DISK * 75 85 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 97 PROC crond 1 PROC syslog-ng 1 PROC sshd 1 PROC ntpdate 1 PORT LOCAL=%[\.:]514 STATE=LISTEN min=2 TEXT=syslog-ng PORT LOCAL=%[\.:]514 STATE=ESTABLISHED min=0 TRACK=syslog-ng TEXT=log FILE /var/log/sudo.log TRACK DIR /var/log TRACK # You need to define at least the Hobbit server itself here. #127.0.0.1 localhost # BBDISPLAY BBPAGER BBNET bbd http://localhost/ page servers Monitored Servers group-compress <font size="+1">Servers</font> 127.0.0.1 localhost # BBDISPLAY BBPAGER BBNET bbd http://localhost/ ssh disk ports disk files memory 165.143.60.206 cntrra02-rh-hids5 # NET:intern ssh ntp cpu memory procs ports disk files syslog-ng 165.143.145.150 cntrra20-rh-wiki # NET:intern ssh syslog ntp http://165.143.145.150/ cpu memory procs ports disk Thanks in advace -- Sello Tlabela <tlabelsd at telkom.co.za> Telkom SA ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 8

[hobbit] still with the bb-histlog.sh errors
by bewhite＠fellowes.com 10 May '07

10 May '07

I too occasionally get this error. It seems to happen to me when the color is changed on a test for a special reason (i.e. the CPU going yellow after a reboot) or when the problem is extremely short in nature (i.e. the CONN test goes red for a single cycle of bbtest). Just my $.02, Bruce -----Original Message----- From: sholmes42 at gmail.com [mailto:sholmes42 at gmail.com] On Behalf Of Steve Holmes Sent: Wednesday, May 09, 2007 1:14 PM To: hobbit at hswn.dk Subject: Re: [hobbit] still with the bb-histlog.sh errors This is getting serious. I'm going to have to dig into the code (sigh) if no one out there has a fix. At the moment on my test hobbit instance I can't see any historical info other than green. That won't be too useful in production. I'm hoping to roll this out next week, but don't want to with these last couple of problems (see my earlier post about msgs :-). Is no one else having this problem? BTW, I'm not sure my message of 5/3 got to the list since I didn't get any replies and I was answering a question from Galen. But thanks in advance if you have any suggestions. Steve Holmes On 5/3/07, Steve Holmes <sholmes42 at mac.com <mailto:sholmes42 at mac.com> > wrote: What I get in the apache log is: [Thu May 03 10:35:17 2007] [error] [client xxx.xxx.xxx.xxx] Premature end of script headers: bb-histlog.sh, referer: http://hobbit.server.purdue.edu/hobbit-cgi/bb-hist.sh?HISTFILE=hobbit.client .purdue.edu.procs <http://hobbit.server.purdue.edu/hobbit-cgi/bb-hist.sh?HISTFILE=hobbit.clien t.purdue.edu.procs&ENTRIES=50&IP=0.0.0.0&DISPLAYNAME=hobbit.client.purdue.ed u> &ENTRIES=50&IP=0.0.0.0&DISPLAYNAME=hobbit.client.purdue.edu What the browswer presents is (scoured of html): 500 Internal Server Error Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, trouble and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. Apache/2.2.2 (Unix) mod_ssl/2.2.2 OpenSSL/0.9.8e DAV/2 mod_jk/1.2.19 mod_pubcookie/3.2.1 mod_perl/2.0.2 Perl/v5.8.7 Server at hobbit.server.purdue.edu <http://hobbit.server.purdue.edu> Port 80 And, BTW, I had to hunt a little to find one that failed. Several (red) worked just fine. Thanks, Steve. On 5/3/07, Galen Johnson < Galen.Johnson at sas.com <mailto:Galen.Johnson at sas.com> > wrote: Are you getting an error (if so, can you post it) or nothing? Is there anything in the apache logs? =G= -----Original Message----- From: Steve Holmes [mailto: <mailto:sjh at allegro.ics.purdue.edu> sjh at allegro.ics.purdue.edu ] Sent: Thursday, May 03, 2007 10:56 AM To: hobbit at hswn.dk <mailto:hobbit at hswn.dk> Subject: [hobbit] still with the bb-histlog.sh errors In the archive thread ending with: http://www.hobbitmon.com/hobbiton/2006/08/msg00429.html <http://www.hobbitmon.com/hobbiton/2006/08/msg00429.html> Anatoli Bogajewski suggests adding "HOBBITDREL="4.2.0" to hobbitserver.cfg to get rid of the problem with bb-histlog.sh (internal server error), which I've done. Still, I get some errors when trying to view an historical page. Some of them work. Some don't. It appears that the green ones work, but some of the non-green ones don't, although I haven't done an exhaustive test of that. Is there a more recent/comprehensive fix? Thanks, Steve. ---------------------------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc. ----------------------------------------------------

3 2

Problems with "query"
by re.charge＠gmx.de 10 May '07

10 May '07

Hello there, i got some problems while trying to use the "query" option in hobbit. At first : the BBServer and Client is up and running correct. i already enabled and disabled different tests with the usual (bb $BBSERVER "disable my,server,com.procs")comand. But when i was trying to get infomation by using "query" nothing happend. Here is what i am typing: /opt/bb/bb16e1/bin/bb $BBSERVER "query my,server,com.procs" the man page tells me that this is the exact sysntax, so now i am confused ... i also tryed to get the debug mode running, but it wont work :/ somebody got any idea what i am doing wrong ? Greetings & thx Andi -- Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

2 1

still with the bb-histlog.sh errors
by sjh＠allegro.ics.purdue.edu 09 May '07

09 May '07

In the archive thread ending with: http://www.hobbitmon.com/hobbiton/2006/08/msg00429.html Anatoli Bogajewski suggests adding "HOBBITDREL="4.2.0" to hobbitserver.cfg to get rid of the problem with bb-histlog.sh (internal server error), which I've done. Still, I get some errors when trying to view an historical page. Some of them work. Some don't. It appears that the green ones work, but some of the non-green ones don't, although I haven't done an exhaustive test of that. Is there a more recent/comprehensive fix? Thanks, Steve.

3 3

PROC not found, but present
by charles.goyard＠orange-ftgroup.com 09 May '07

09 May '07

Hi, I have the following configuration : HOST=somehost PROC %^/usr/sbin/pdnsd 1 1 red and the procs columns sometimes reports : %^/usr/sbin/pdnsd (found 0, req. between 1 and 1) ... and with several other procs below : 5812 1 pdnsd Mar 07 S 16 0.0 01:29:15 0.1 2148 103608 /usr/sbin/pdnsd --daemon -p /var/run/pdnsd.pid Most of the time (99.65% of the time, to be picky), the status is green. How come ? Is it some bug ? It may be useful to tell that process runs on the hobbit server itself. Regards, -- Charles Goyard - charles.goyard at orange-ftgroup.com - (+33) 1 45 38 01 31 Orange Business Services - online multimedia // ingénierie

2 1

Hobbit package for Debian etch
by thomas＠bergauer.org 09 May '07

09 May '07

Hi! I was wondering how I can install hobbit server on a fresh installed Debian Etch, since the packages on sourceforge are for Sarge only and when I try to install it APT gets confused about unresolved dependencies: librrd0 and libssl0.9.7, even when the newer versions of it are installed. Is there a deb source package anywhere that I can use to compile hobbit for myself? best regards, Thomas -- Thomas Bergauer thomas at bergauer.org

5 4