July 2007 - Xymon - Xymon mailman web

Regex for PROC Check does not work.
by arisyrup＠gmail.com 19 Jul '07

19 Jul '07

Hello, I am using hobbit-4.2.0 and am having a problem for process check. The following is a configuration of hobbit-clients.cfg I use. PROC "%aciaprd.*java.*-Dprocess" When I check the regular expression with hobbitd_client --test it seems ok. Hostname (.=end, ?=dump, !=reload) [host_a]: Test (cpu, mem, disk, proc, log, port): proc To read 'ps' data from a file, enter '@FILENAME' at the prompt ps command string: aciaprd 10953 10867 0 09:34 ? 00:00:02 /usr/java/j2sdk1.4.2_11/jre/bin/java -Dprocess=cia-prd-automaton-IRSA_HSI_split -Dlog4j.debug=true ps command string: Process %aciaprd.*java.*-Dprocess color green: Count=1, min=1, max=-1 But the host_a html result actually shows red for the check. Can anyone experienced this before? Can anyone help me, please.

3 4

BBWIN MSG Ignore rule problem
by bewhite＠fellowes.com 19 Jul '07

19 Jul '07

HI all, We recently started running BBWIN on several machines. The client is set to run in local mode and I have configured a series of ignore rules in the config file. I copied the example and edited it. Below is one of several: <ignore logfile="Application" eventide="1711" /> Despite the ignore rule above, it is still setting the msg test to red. red application: error - 2007/07/19 09:24:14 - gv_vserver (1711) - WINDOM\psitacct "Line device call cc_MakeCall, failed on Channel 15, Error:- Error reason = 10f - Can not accept event in current state." Any ideas on what I have done wrong or is their a bug in BBWIN? Thanks, Bruce ---------------------------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc. ----------------------------------------------------

1 0

IBM MQ Test
by jkwade＠futurefrontiers.com 18 Jul '07

18 Jul '07

Has anyone seen a recent test for IBM MQ, or have one they have written? I have one off deadcat, but I had to do a lot of mods to get it to work. I'm looking for something that might be more recent. Thanks..James

1 0

Log & Ignore Patterns
by James.Wade＠hhsc.state.tx.us 18 Jul '07

18 Jul '07

Hello All, I need some assistance with hobbit-clients.cfg and using the Ignore pattern. Basically, the developers want to alert on: SocketException However, if it's: SocketException: Brokenpipe they want to ignore these. Is there anyway to configure this. Here's what I have: LOG /opt/WebSphere /log/SystemErr.log %CWWBE0085E|SocketException|NullPointerException|SocketTimeout|Incompatible types|Assertion IGNOR E="%SocketException: Brokenpipe" COLOR=RED James

1 0

Oracle Monitor -- Hobbit
by robert.herron＠gmail.com 18 Jul '07

18 Jul '07

James, I use bb-roracle (current v 2.20) with Hobbit. It runs on six of my HP-UX-based servers. Two of these servers monitor databases on remote servers. In most cases, these remote servers are Windows boxes but one or two monitored databases reside on Linux hosts that I was too lazy to get bb-roracle.sh to run directly on. I originally implemented bb-roracle with all database stats reporting back to the host that ran bb-roracle. So, all databases monitored by XXX appeared on the XXX.oradb page in Hobbit. If you had 10 monitored database instances, that XXX.oradb page would be really large. I recently moved to an individual pages per database. This makes alerting via SMS/cell phone text message much cleaner. Here's what the pertinent sections of bb-hosts and bb-roracle.ids look like: #bb-hosts page Unix Unix group-compress 192.168.222.111 fintest # oratns page Windows Windows group-compress 192.168.222.123 timecard # oratns 192.168.222.132 loaddata # oratns page Database Databases group-compress 192.168.222.111 fintest.financetest # noconn 192.168.222.123 timecard.timeentry # noconn 192.168.222.132 loaddata.loaddata # noconn #bb-roracle.ids #type SID userid password tests log-as-host listener-name LOCAL financetest bbuser bbpasswd aBE fintest.financetestlsnr_fintest REMOTE timeentry bbuser bbpasswd aBEfijk timecard.timeentry REMOTE loaddata bbuser bbpasswd aBEfijk loaddata.loaddata By the way, I'm the Herron mentioned in bb-roracle's revision history. On 18 Jul 2007 14:49:08 -0000, James Wade wrote: > > > I'm looking at implementing an Oracle monitor in > > Hobbit, and I thought I'd ask for a recommendation. > > > > On deadcat, I've seen Roracle-2-21a. > > > > How would this be implemented in Hobbit, I have > > multiple database servers. Are we looking at a > > client, or implementing a single script from the server > > to monitor the database servers? > > > > The problem I've seen is that if it's not a client, the > > gui doesn't show up on the associated system. > > > > Any pointers would be appreciated. > > > > Thanks….James >

1 0

Error in logs after recent update to 4.2.0
by dpullman＠cme.nist.gov 18 Jul '07

18 Jul '07

I'm afraid I have no idea where to start looking for what the cause of this error my be. We upgraded our display and bbtest server, which is a RHEL 4 x86_64 box, to 4.2.0 at the very end of June. Since then we have the following about every ten minutes in /var/log/messages: Jul 16 09:48:36 frodo-70 kernel: hobbitd_history[28138]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:48:41 frodo-70 kernel: hobbitd_history[28148]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:48:50 frodo-70 kernel: hobbitd_history[28161]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:58:55 frodo-70 kernel: hobbitd_history[28899]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:59:00 frodo-70 kernel: hobbitd_history[28905]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:59:06 frodo-70 kernel: hobbitd_history[28915]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:59:10 frodo-70 kernel: hobbitd_history[28928]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:59:15 frodo-70 kernel: hobbitd_history[28934]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 Jul 16 09:59:20 frodo-70 kernel: hobbitd_history[28940]: segfault at 0000000000000000 rip 0000003e05f5ce3f rsp 0000007fbfff5020 error 4 This system ran 4.1.2p1 for more than a year with no issues. I did an upgrade in place. No changes otherwise. I would be very grateful for even the slightest hint on how to start looking for the problem. Thanks very much -- David Pullman Systems Administrator Manufacturing Engineering Laboratory National Institute of Standards & Technology Mail Stop 8203 100 Bureau Drive Gaithersburg, MD 20899-8260 Tel: (301) 975-5385 Fax: (301) 926-3842 E-mail: david.pullman at nist.gov

2 2

Log Parser for Windows
by Padraig.Lennon＠pioneerinvestments.com 18 Jul '07

18 Jul '07

Hi, First off let me tell you what a great project this is.. I hope to contribute a number of modules very soon... I work in a financial industry and have (will continue to) write a number of hobbit external tests for systems we monitor. Murex/LatentZero/CharlesRiver to name a few (all trading systems). Would it be benefical to contribute the tests to the project over the coming months? There is a distinct lack of Business-orientated external tests provided by any monitoring system at the moment.. Just a thought... My real question is as follows: (It may be slightly OTT) I use the bbwin client on our windows hosts. We have log files (Propriety format) outside of the event log mechanism which I need to parse for defined strings. I would like to know what people use for parsing these text files. I can write something in perl if needs be but I don't want to reinvent the wheel. Can the messages module in bbwin parse external log files? I can't seem to find any information about this... Any help on this matter would be greatly appreciated... Thanks, Padraig

1 0

[hobbit] LOG Pattern IGNORE syntax
by vadud3＠gmail.com 18 Jul '07

18 Jul '07

OK here is another PCRE issue with IGNORE pattern I have this on ~hobbit/server/etc/hobbit-clients.cfg HOST=host.domain.net LOG /var/adm/messages "%(?-i)WARNING|(?-i)NOTICE|(?-i)ERROR" IGNORE=%Power.*Supply.*0.*NOT.*okay But I still get alert as following &red Critical entries in <a href="/hobbit-cgi/bb-hostsvc.sh?CLIENT= host.domain.net&SECTION=msgs:/var/adm/messages">/var/adm/messages</a> &red Jul 13 15:04:34 host envctrltwo: [ID 771032 kern.warning] WARNING: Power Supply 0 NOT okay I did a pcretest and it did match so why is hobbit still alerting? (hobbit)@hobbit:~/server/etc$ pcretest PCRE version 4.5 01-December-2003 re> "Power.*Supply.*0.*NOT.*okay" data> Jul 13 15:04:34 host envctrltwo: [ID 771032 kern.warning] WARNING: Power Supply 0 NOT okay 0: Power Supply 0 NOT okay On 6/3/07, Giovanni - Gestor Redix <giovanni at redix.com.br> wrote: > > Everything ok with your syntax, i just would try removing the > double-quotes... > > BTW, If you need to ignore a phrase that uses spaces, use \s to separate, > like the following syntax: > LOG blablabla %blablabla IGNORE=%one\stwo\swords > > Another example: IGNORE=%one\stwo|other\sword|word > > Cheers > > Asif Iqbal wrote: > > Is this a valid syntax? > > LOG /var/adm/messages "%(?-i)WARNING|(?-i)NOTICE|(?-i)ERROR" > IGNORE=%SUNWsrspx|srsxfer > > I want no alert for lines, in `/var/adm/messages', that has either or > both of these two words > > SUNWsrspx > srsxfer > > Thanks > > -- > > Asif Iqbal > PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu > > > -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

2 2

hobbit alerts
by rlapuz＠fcpp.fujitsu.com 18 Jul '07

18 Jul '07

Good day! I can't make the hobbit alerts work.. Hobbit server is installed in a computer w/o dns settings, and we have our own email server. how can I make the hobbit server to send email notifications to our email server on which my email resides? Please help! Thanks in advance Ryan

4 10

Oracle Monitor -- Hobbit
by jkwade＠futurefrontiers.com 17 Jul '07

17 Jul '07

Hello All, I'm looking at implementing an Oracle monitor in Hobbit, and I thought I'd ask for a recommendation. On deadcat, I've seen Roracle-2-21a. How would this be implemented in Hobbit, I have multiple database servers. Are we looking at a client, or implementing a single script from the server to monitor the database servers? The problem I've seen is that if it's not a client, the gui doesn't show up on the associated system. Any pointers would be appreciated. Thanks..James James Wade

2 1