June 2007 - Xymon - Xymon mailman web

PORT checks & color
by dbourque＠weatherdata.com 14 Jun '07

14 Jun '07

Hi, On hosta, I monitor many connections, one of them is to hostb. hostb is currently being moved. I can't disable the port check, since all the other connection will no longer be monitored. Since alerts for hosta are only generated for red and yellow statuses, so I tried to use the following : PORT LOCAL=hosta.:30805 REMOTE=%hostb.* STATE=ESTABLISHED "TEXT=hostb connection" COLOR=purple This would keep monitoring all connections, without generating pages about hostb. Unfortunately, the color never goes to purple. I also tried using quotes, but eventually I commented out that line in hobbit-alerts.cfg. Is the color purple not a valid color for the PORT check ? is there a smarter way to do what I'm trying to do ? Thanks -Dan

1 0

Bluecat Networks Adonis Appliance
by Larry.Sherman＠rbsgc.com 14 Jun '07

14 Jun '07

A coworker in the PC Infrastructure team tried to get MOM to monitor the firms new DNS/DHCP appliance. MOM apparently crashed trying to process the MIB. He has asked me if Hobbit can monitor his device. I of course have assured him that it can. I'm thinking Devmon, but the device also offers ssh access to some type of console (I'm getting the manual tomorrow). Has anyone monitored one of these yet, and if so, any suggestions? Thanks, Larry ----------------------------------------- ******************************************************************* * This e-mail is intended only for the addressee named above. As this e-mail may contain confidential or privileged information, if you are not the named addressee, you are not authorized to retain, read, copy or disseminate this message or any part of it. ******************************************************************* *

3 3

cpu graph in hobbit with devmon
by klj＠Beredskabsstyrelsen.dk 14 Jun '07

14 Jun '07

Hey, I'm not sure this is the right list to ask this question. But I will try anyway and I'm sure somebody will tell me if it's the wrong place (-: I have a Hobbit running and watching some servers, with graphs and all I need. But I have now install devmon for some time ago, and I would like to have at graph on the cpu load of my router. The link to the graph is on the site but the browser shows the picture is missing. What have I done worng, please help me. Best regards, Kim Johansen.

1 0

Alerting: TIME format, crossing midnight
by haertig＠avaya.com 14 Jun '07

14 Jun '07

TIME=1:2200:0200 Would the above create one interval of four contiguous hours, "two hours at the end of Monday" immediately followed by "two hours at the start of Tuesday" Or would it create disconnected intervals: "two hours at the start of Monday", followed by 20 hours of no coverage, followed by "two hours at the end of Monday"

1 0

hobbit-alert.cfg: grouping recipients using macros
by haertig＠avaya.com 14 Jun '07

14 Jun '07

In the hobbit-alerts.cfg file, can you group recipients using macros? The help file only has examples for directives that use equal signs (e.g., HOST=%$MYHOSTS). The MAIL and SCRIPT directives have their first parameter defined as "a recipient", which doesn't necessarily imply that they'll accept a comma seperated list of recipients (although I expect they might well do this). Example: $JOHN=john at mycompany.com $FRED=fred at mycompany.com $JANE=jane at mycompany.com $MYGROUP=$JOHN,$FRED,$JANE $OTHERGROUP=$JOHN,$JANE HOST=whatever SERVICE=whatever MAIL $MYGROUP REPEAT=2h HOST=somethingelse SERVICE=somethingelse MAIL $OTHERGROUP REPEAT=2d

2 1

Does Hobbits LOG directive parse line-by-line, or all data?
by jonescr＠cisco.com 13 Jun '07

13 Jun '07

I have setup both types of logfile monitoring. In client-local, I have: log:/some/application/logfile.log:10240 ignore MARK linecount:/some/application/logfile.log timeouts:.*Session.Timeout.* The *log* directive makes the Hobbit client parse a particular application log. The *linecount* directive is being used so that Hobbit graphs the number of "Session Timeout" errors in a particular application log. My hobbit-clients.cfg includes this, for example: LOG /some/application/logfile.log %.*Session.Timeout.* color=yellow LOG /some/application/logfile.log %.*Session.Error.* color=red The above two entries allow me to get Hobbit alerts if there are any session timeouts in the log (yellow alert), or if there are any errors in the log (red alert). Now, what I need, is the ability to set alerts based upon HOW MANY timeouts or errors are in the log. I'm thinking this regex should work (it does according to pcretest): LOG /some/application/logfile.log %(.*Session.Timeout.*){10,} color=red The above *should* set a red condition if there are 10 or more Session Timeouts in the log, or at least in the part of the log that Hobbit received. My question is...does Hobbits logfile parsing perform the multi-line regex or single? If it applies the regex to the entire logfile, my regex should work. If it only tests each line individually, it will not. Other thoughts on Hobbits log monitoring: * I think it makes more sense for the the "linecount" to be in hobbit-clients.cfg instead of client-local.cfg * Its sort of confusing that "linecount" does not require a % in front of a regex, like everything else in Hobbit does (at least according to the man pages) * Why do we need client-local.cfg at all? Couldn't these directives all be done via hobbit-clients.cfg, and any clients that are using local instead of server-side config would then use client-local.cfg? * If Hobbit indeed does parse line-by-line and such my regex would fail, perhaps linecount could have an additional parameters to set an alert if the linecount is exceeded, something like: linecount filename pattern <optional minimum yellow count> <optional minimum red count>

1 0

[hobbit] windows C# code
by jeffnewman75＠gmail.com 13 Jun '07

13 Jun '07

Henrik, Any update on the patch? Thanks, Jeff On 5/29/07, Jeff Newman <jeffnewman75 at gmail.com> wrote: > Henrik, > > Where should I watch for the patch: > > http://www.hswn.dk/beta/snapshot/ > or > http://www.hobbitmon.com/hobbitsw/patches/ > ? > > Thanks, > Jeff > > > On 5/23/07, Henrik Stoerner <henrik at hswn.dk> wrote: > > On Tue, May 22, 2007 at 07:55:20PM -0500, Jeff Newman wrote: > > > The below code displays on the page right, however, when the hobbit > > > ncv module builds the RRD file, the ds names are things like: > > > greenCurrentConnections > > > greenTimeinGC > > > yellowBytesinallHeapsMB > > > redApplicationsRunning > > > > Hobbit's ncv module breaks when you use the color-icon markers. > > Didn't know that, but I checked the code and it will include the > > color in the ds name, as you've found. > > > > The quick fix is to change your code so it always has the data > > you want to store for graphs with no color-icons in front of the > > ds name. E.g. your output could be > > > > &yellow Heap size is 99 MB > > > > BytesinallHeaps: 99 > > TimeinGC: 200 > > > > I'll update the ncv module to skip any color markers in front of the ds > > names. > > > > > > Regards, > > Henrik > > > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > > >

1 0

ssh on one onterface and ping on other interface
by vadud3＠gmail.com 13 Jun '07

13 Jun '07

How do I ping test a client on one of its interface and ssh test on its other interface? A client has two interfaces, hme0 and hme1. Each interface has its own IP on same subnet. How do I craft the the bb-hosts entry for this system so that I can ping on interface and ssh on the other interface but keep the name of the host same as the IP that matches to hme0 interface? Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

6 9

conn graph not being created
by Lance.Wantenaar＠easyJet.com 13 Jun '07

13 Jun '07

I am struggling to get hobbit to draw graphs for conn test for host on my hobbit system. I am using version 4.20 which is a fresh build from source. All the software installation is under the hobbit user in the hobbit directory. This is a new install. I got my bb-host file from an older bb server. I do get 2 graphs which are displayed and that is for the old BB server and the localhost. At the moment the graph is not being drawn just displayed. Error message for one of the devices on the conn page. No graph is displayed. "Service conn on luton_7204_loopback0 is OK Hobbit system error" When I click on the graph it goes through to the webpage for the hourly, daily, weekly and monthly graphs but again they aren't displayed. How do I troubleshoot this to resolve the issue? Lance Wantenaar

3 6

How to send alerts on new status, ignoring repeat ?
by charles.goyard＠orange-ftgroup.com 13 Jun '07

13 Jun '07

Hi, at my company we manage alert filtering with an homebrew tool. One of its features is that it sends alerts on the second identical message received (anti up/down/up feature). It is somewhat equivalent to the DURATION keyword, with the difference it's not time-based, but count-based. The "repeat" feature of hobbitd_alert defeats this mecanism, because it resends an alert every 5 minutes. The problem arises when a specific status reports every 5 minute and a few seconds : 02:00:00 the db1 host sends "db1.sql red" 02:00:01 hobbitd_alerts sends "db1.sql red" to my external filter 02:00:02 my external filter queues the alert until a second one comes 02:05:00 hobbitd_alerts sends "db1.sql red" to my external filter 02:05:01 my external filter pages "db1.sql red" to the crew 02:05:04 the db1 host sends "db1.sql green" 02:05:05 hobbitd_alerts sends "db1.sql green" to my external filter 02:05:06 my external filter pages "db1.sql recovered" to the now awakened crew My question is : is there a way to tell hobbit not to repeat alerts, but to send alerts only upon reception of a status from a client ? If not, I believe the "security code" is the same whenever an alert gets repeated, so I'll have to modify my filter to check for that. (or maybe write a real stripped down equivalent of hobbitd_alert that only relays incoming statuses to my filter). -- Charles Goyard - charles.goyard at orange-ftgroup.com - (+33) 1 45 38 01 31 Orange Business Services - online multimedia // ingénierie

1 0