July 2007 - Xymon - Xymon mailman web

bbcombotest patch (child service color)
by daniel＠benzedrine.cx 27 Jul '07

27 Jul '07

I noticed that when you build services upon services (like bbcombotest.cfg(5) suggests you may), the parent services don't properly show the children's color in the status data part, i.e. instead of showing "&green" or "&red", they always show up as "&unknown". The patch below fixes this for me here. Also, allow unescaped underscores, they are not used in operators. Daniel --- hobbitd/bbcombotest.c.orig 2007-07-27 13:09:57.000000000 +0200 +++ hobbitd/bbcombotest.c 2007-07-27 12:53:07.000000000 +0200 @@ -249,6 +249,8 @@ errptr = errtext; *errptr = '\0'; + *color = gethobbitdvalue(hostname, testname, &errptr); + /* First check if it is one of our own tests */ for (walk = testhead; (walk && ( (strcmp(walk->reshostname, hostname) != 0) || (strcmp(walk->restestname, testname) != 0) ) ); walk = walk->next); if (walk != NULL) { @@ -256,8 +258,6 @@ return walk->result; } - *color = gethobbitdvalue(hostname, testname, &errptr); - /* Save error messages */ if (strlen(errtext) > 0) { if (*errbuf == NULL) @@ -293,7 +293,8 @@ if (!insymbol) { insymbol = 1; symp = symbol; } *symp = *inp; symp++; } - else if (insymbol && (isdigit((int) *inp) || (*inp == '.'))) { + else if (insymbol && (isdigit((int) *inp) || (*inp == '.') || + (*inp == '_'))) { *symp = *inp; symp++; } else if (insymbol && ((*inp == '\\') && (*(inp+1) > ' '))) {

1 0

pattern matching on http test
by emarganne＠be.tiauto.com 27 Jul '07

27 Jul '07

Hello, I have added a couple a month ago a test on the content of some http pages to know if the answers Hobbit was getting were the good ones. For that I used the pattern matching rules and everything worked fine. Now I noticed that sometimes the test goes blank without any reason, the web servers are still up, ... Does someone have seen such a trouble? If yes how did you solve that? Thank you for any feedback, Marganne Etienne. DISCLAIMER: The information contained in this transmission may contain privileged and confidential information. It is intended only for the use of the person(s) named above. If you are Not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

1 0

[hobbit] Feature requests; filter out
by michael.nemeth＠lmco.com 27 Jul '07

27 Jul '07

Windoz, AIX HP_UX Solaris Linux for sure, probably more. But I'm really only worried about Solaris. I only have two hp server with hobbit clients but a variety of Solaris (2.5 thought 10). Just if I forget to edit the Sol. script I end up with dozens of these pseudo FS, which are really just a few real FS. So Solaris in script would be a convenience, give me clean builds/installs. Basicly on the HP I capture then later echo the header line ; then make sure that Im getting a single line per FS (in the script already) and grep out only lines staring with /dev. I think you CAN get lines that don't start with /dev but the Sys/adm got go out of his way to do this. So Im not sure if this is a generic Solution for HP. For Solaris you just add it to list of FS to exclude. On just about any OS >>On Thu, Jul 26, 2007 at 12:26:57PM -0400, michael nemeth wrote: >> Forgot the most important and easiest ! Please filter out the mvfs FS. >> This is the clearcase versioning tool pseudo FS. It acts either as a >> lofs or nfs FS. > >Forgive my ignorance, but: What OS is this on? Regards, Henrik -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | _p_ Mike Nemeth | ___| |_____ email(w) michael.nemeth at lmco.com Work: 856 359-1425 |><___________) | Home Page:http://www.geocities.com/mjnemeth/ | Work Page:http://scorpion/~nemethm/ | Work Page:http://phlccase/SWUNIX/mnemeth/ |++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

1 0

Not getting alerts for log entries on Solaris 10 Update 3 (SPARC)
by kbourn＠adpt-tech.com 27 Jul '07

27 Jul '07

I am having issues with getting Hobbit to report log entries from client log files. The server is getting the log data but, despite a valid string entry in the log file, no alerts are generated. Here is an excerpt from my client-local.cfg file: [hosta-z1] log:/var/adm/messages:10240 And a corresponding entry from the hobbit-clients.cfg file: HOST=hosta-z1 LOG /var/adm/messages sshd COLOR=red The status never changes for this host despite sshd entries existing in the /var/adm/messages file. I used "sshd" because I KNOW that there are current entries in /var/adm/messages since everytime hobbit runs an ssh check on the server an sshd message is generated. I have chosen this string just to troubleshoot this problem... Clicking on "msgs" for this host, there is a message "No entries in /var/adm/messages". But if I click on the "/var/adm/messages" link it shows recent entries with the sshd string in the log file as the following shows: [msgs:/var/adm/messages] Jul 25 16:59:34 hosta-z1 sshd[4164]: [ID 800047 auth.info] Connection closed by 10.0.0.68 Jul 25 17:04:37 hosta-z1 sshd[4507]: [ID 800047 auth.info] Connection closed by 10.0.0.68 Jul 25 17:09:39 hosta-z1 sshd[4857]: [ID 800047 auth.info] Connection closed by 10.0.0.68 Jul 25 17:14:41 hosta-z1 sshd[5192]: [ID 800047 auth.info] Connection closed by 10.0.0.68 Jul 25 17:19:41 hosta-z1 sshd[5534]: [ID 800047 auth.info] Connection closed by 10.0.0.68 Jul 25 17:24:40 hosta-z1 sshd[5884]: [ID 800047 auth.info] Connection closed by 10.0.0.68 Jul 25 17:29:45 hosta-z1 sshd[6222]: [ID 800047 auth.info] Connection closed by 10.0.0.68 Does anyone know what the problem may be? Is there possibly any known issues with Hobbit logging under Solaris 10 Update 3 for SPARC? I have tried almost everything I can think of to get this to work and I am getting no where. Thanks in advance for any help. -Ken

3 5

Feature requests; filter out MVFS
by michael.nemeth＠lmco.com 26 Jul '07

26 Jul '07

Forgot the most important and easiest ! Please filter out the mvfs FS. This is the clearcase versioning tool pseudo FS. It acts either as a lofs or nfs FS. -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | _p_ Mike Nemeth | ___| |_____ email(w) michael.nemeth at lmco.com Work: 856 359-1425 |><___________) | Home Page:http://www.geocities.com/mjnemeth/ | Work Page:http://scorpion/~nemethm/ | Work Page:http://phlccase/SWUNIX/mnemeth/ |++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

5 4

Alerts color filtering
by Daniel.Hartmeier＠pax.ch 26 Jul '07

26 Jul '07

To resolve the issue I'd like to suggest the following patch: --- hobbitd/hobbitd_alert.c.orig Thu Jul 26 20:38:33 2007 +++ hobbitd/hobbitd_alert.c Thu Jul 26 20:39:12 2007 @@ -636,9 +636,10 @@ /* * Send one "recovered" message out now, then go to A_DEAD. * Dont update the color here - we want recoveries to go out - * only if the alert color triggered an alert + * only if the alert maxcolor triggered an alert */ awalk->state = A_RECOVERED; + awalk->color = awalk->maxcolor; } if (oldalertstatus != newalertstatus) { This makes sure that when filtering recovery messages, we don't compare the current (most recent) color of the alert, but the worst color the alert has gone through. So when you have a filter like MAIL foo at bar.com COLOR=red RECOVERED and the service goes through the sequence green -> red -> yellow -> green you not only get a critical mail on red, but also a recovery mail on green. Or is the existing behaviour (without the patch) really intentional, and some people actually prefer to get only the critical mail without any recovery mail in this and similar cases? If so, why? Daniel

1 0

Feature request for 4.3.0 (depends)
by trent.melcher＠sitel.com 26 Jul '07

26 Jul '07

Henrik Do you have a timetable when you plan on moving the depends function out from under bbnet? A feature request I have is to be able to use the depends tag to link a specific ports test to a procs test. Example: port 22 is being checked PORT LOCAL=%[.:]22$ STATE=LISTEN "TEXT=SSH listener" also process sshd is being watched PROC sshd TRACK=sshd TEXT=ssh If PROC sshd dies go red, it would be nice if the ports test goes clear instead of red. Thanks Trent Melcher

4 7

Strange rrd problem
by tk＠westend.com 26 Jul '07

26 Jul '07

Hi, I've set up a hobbit server to monitor a couple of systems. However the network test graphs from exactly one system are looking quite strange: http://www.westend.com/pop3-1.png http://www.westend.com/pop3-2.png (zoomed in view) According to this graph pop3 is answering always within zero seconds (I can't imagine this). And the response time of pop3s is alternating in such specific way that rrd draws triangles. I've already deleted the rrd files, but the effect remains the same. The system is running Debian 4.0 (librrd2 version 1.2.15-0.3). Has anybody seen such strange effects before? All other systems and even other services on the same system are looking reasonable. Ciao, Thomas -- Thomas Kähn WESTEND GmbH | Internet-Business-Provider Technik CISCO Systems Partner - Authorized Reseller Im Süsterfeld 6 Tel 0241/701333-18 tk at westend.com D-52072 Aachen Fax 0241/911879 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Die Gesellschaft ist eingetragen im Handelsregister Aachen unter HRB 7608 Geschäftsführer: Thomas Neugebauer, Thomas Heller, Michael Kolb

4 7

Is "cause" in maintenance mode logged ?
by tj_yang＠hotmail.com 26 Jul '07

26 Jul '07

I can't seem to find the reason/cause string been logged in hobbit server's log files. My goal is to have availability report show the bule color and with its reasons for maintenance. T.J. Yang _________________________________________________________________ http://im.live.com/messenger/im/home/?source=hmtextlinkjuly07

3 2

bug report: hobbit client for solaris can't report zombie process
by tj_yang＠hotmail.com 26 Jul '07

26 Jul '07

The existing ps command in hobbit-client-sunos.sh won't report zombie processes. I changed the long ps -A command to just "ps -eaf" and it can report the zombie now. Question is will "ps -eaf" break anything on hobbit server side ? root at login3> diff hobbitclient-sunos.sh hobbitclient-sunos.orig 55,56c55,56 < #ps -A -o pid,ppid,user,stime,s,pri,pcpu,time,pmem,rss,vsz,args < ps -eaf --- >ps -A -o pid,ppid,user,stime,s,pri,pcpu,time,pmem,rss,vsz,args > root at login3> T.J. Yang _________________________________________________________________ http://newlivehotmail.com

2 1