January 2008 - Xymon - Xymon mailman web

bbwin 0.10 available
by etienne.grignon＠gmail.com 28 Jan '08

28 Jan '08

Hello, After more than a year without new release, I publish today BBWin 0.10. This is the new stuffs I put in it: BBWin 0.10 Preview version - December 30th 2007 ------------------- +New Features ** Centralized mode for agents cpu, disk, memory, msgs, netstat, ports, procs, timediff, uptime ** Centralized mode graphing network traffic ** See the bbWin webpage for instructions http://bbwin.sourceforge.net/ * Msgs agent reports parts of description events when the message file contening the static string can't be found. It will reports as the Windows Event Viewer, just like this : "The description for Event ID ( XXX ) in Source ( XXX ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: XXXXX, XXXXX." * You can use environment variables in the bbwinupdate agent. Example : <setting name="filename" value="bbwin\%COMPUTERNAME%.cfg" /> * svcs services rules can be used with comments * disk agent can monitor free space from XX-rom drive and not only if a media is inserted. (feature requested to monitor dvd-ram burning state) * disk agent can monitor volume mount points * Proxy access : BBWin can access to your hobbit server through a proxy (http proxy) You can specify a user/password if you use http proxy basic authentication. * disk agent will alert you if a disk monitored with a custum rule disappear from the Server. (Example : external usb harddrive turned off) * uptime agent : add max delay option to get alerts when servers are up for a too long time * who agent : report current connected users on the servers Here the link for the download : http://sourceforge.net/projects/bbwin About the centralized mode, to handle it with bbwin, you have to use a patch for hobbit 4.2 or for the future 4.3, it is available on http://bbwin.sourceforge.net/ The centralized mode for BBWin in hobbit sources has been developed by François Lacroix, one of the new developper of devmon. Big thanks to him. Even if we tested on our servers, it may contains bugs so you should test it not on productions servers for the moment. You can report bugs on the bbwin or hobbit mailing list so we can improve the solution. We hope to have something enough good to be included in hobbit 4.3 and will continue to update the patch for hobbit 4.2. The client-local.cfg is not supported for the moment. It is the next step (files, dir, logs, clientupdate). I have also some general questions about bbwin : Actually, svcs only works as a local agent because there is no option for it in hobbit-clients.cfg, it is very specific to Windows world. What do you prefer ? - we keep svcs agent with local configuration. BBWin can handle centralized mode with agents which will run with local configuration - we create a new option for the hobbit-clients.cfg which will be only used for Windows client - May be you have other good ideas about that problem. At this time, it is only about svcs agent but for advanced features in the future, we will have other choices to make. With the centralized mode, you will see that you get graphs for each of your networks connections. However, for Windows, the names are too long compared to the unix name (eth0, eri0..). So, at this time, I use the mac address of the network card for the graph name. Would you prefer to use the name by making a very short name ? the ip address ? or is the mac address fine ? There is a new agent 'who' used to report current connected users on the windows servers. There is no alert for it at this time. Which relevant type of alerts could be useful ? there is no alert options on Unix side. I was thinking of a rule like PROC but called USER with a minimum logged number and a maximum logged number for a username. For 2008, I will do my best to create more releases. 2007 was not a good year :-) The first goal will be to finalize the centralized mode with all the unix options. I now use the sourceforge subversion repository so you will always get the lastest sources of BBWin. As usual, let me know if you get troubles with this new version. Happy new year for all the hobbit community :-) Etienne.

6 6

Notification logs analysis
by emarganne＠be.tiauto.com 28 Jan '08

28 Jan '08

Hello, I downloaded some files which are about the log analyis but I can not tell if they need other files. Also I do not really know how to compile properly the C code to "add" it to an already installed Hobbit version. If someone could explain me how I could make that feature work, I am very interested. Best regards, Etienne. ________________________________ From: Marganne, Etienne Sent: Thursday, January 03, 2008 4:23 PM To: hobbit at hswn.dk Subject: Notification logs analysis Hello, Could you please tell me which part of the code of the futur 4.3 release of Hobbit performs the notification log analysis? Please also let me know if it is independent from all the other new features of that release. I am very enthusiast about that feature and I would like to test and if it works according to my desire put into production. Also of course if you think for some reason that there could be bugs in that feature let me know :-). Thank you, Marganne Etienne. DISCLAIMER: The information contained in this transmission may contain privileged and confidential information. It is intended only for the use of the person(s) named above. If you are Not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

1 0

Turn off full system logs
by Chris.Morris＠RWEsystemsUK.com 28 Jan '08

28 Jan '08

Is there a simple way to turn off the full system logs displayed in the web page and sent in email alerts? I see you can use --no-ps-listing and --no-ports-listing, it would be useful to have a --no-full-msgs-listing as some log files can contain a large amount of data, which you could access using the links on the msgs page. Regards, Chris ********************************************************************** This e-mail including any attachments is provided for general information purposes only and does not constitute advice except to the addressee if expressly stated in this email. For the avoidance of doubt the contents of this email and any attachments are subject to contract and are not intended to and will not constitute a legally binding contract or any part of a legally binding contract. The information contained in this email and any attachments is confidential. It is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution or copying of the message or associated attachments is strictly prohibited. If you have received this e-mail in error, please notify postmaster at RWEsystemsUK.com and permanently delete the email and any attachments immediately from your system. You should not retain, copy or use this email or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you for your co-operation. Neither RWE Systems UK Ltd nor any of the other companies in the RWE Group from whom this e-mail originates accept any responsibility for losses or damage as a result of any viruses and it is your responsibility to check attachments (if any) for viruses. RWE Systems UK Ltd Registered office: Mistral, Westlea Campus, Chelmsford Road, Swindon, Wiltshire, SN5 7EZ. Registered in England and Wales: company number 6052966. *******************************************

2 1

hobbitd.log Errors : Bad timespec (missing colon or wrong weekdays): Sun
by linuxmasterjedi＠free.fr 28 Jan '08

28 Jan '08

Hi, I'm monitoring some databases only during the week, I've setup that : 0.0.0.0 dbname # noconn noping dbcheck DOWNTIME=Sat:2300:2359:Sauvegarde,Sun:0000:2359:Sauvegarde,Mon:0000:0500:Sauvegarde But in /var/log/hobbit/hobbitd.log, got this errors : ... ... 2008-01-21 23:54:44 Bad timespec (missing colon or wrong weekdays): Sun 2008-01-21 23:54:45 Bad timespec (missing colon or wrong weekdays): Sun 2008-01-22 00:03:21 Invalid timespec - expected 4 digits, got: 'Sauvegarde' 2008-01-22 00:03:21 Bad timespec (missing colon or wrong weekdays): Sun 2008-01-22 00:03:31 Invalid timespec - expected 4 digits, got: 'Sauvegarde' 2008-01-22 00:03:31 Bad timespec (missing colon or wrong weekdays): Sun 2008-01-22 00:03:34 Invalid timespec - expected 4 digits, got: 'Sauvegarde' 2008-01-22 00:03:34 Bad timespec (missing colon or wrong weekdays): Sun ... ... Any ideas why I have this issue ? Thanks by advance, Johan

2 1

Reduce polling cycle from 300 to 60 seconds
by pnixon＠gmail.com 28 Jan '08

28 Jan '08

Hey guys, It's been a couple of years since I've used hobbit. The search function isn't giving me the answer I'm looking for, so I thought I'd post and some insightful person would answer :) Where do I change the polling cycle from 300 to 60 seconds (or less)? Also, what about the webpage generator? I do understand that the RRD Graphs are going to be messed up, and possibly some other stuff may get wonky, but I'm going to have a minimal of items to monitor, just need the quicker notification of something of being down. Thanks in advance, --Pat

2 1

Hobbit temp.sh that uses lmsensors (submission)
by jonescr＠cisco.com 25 Jan '08

25 Jan '08

I dunno if I sent this before, I hacked up an ext script that would report the temperature to Hobbit. Folks here don't usually use Celcius so the script uses the -f option. For this to work you must have lm_sensors installed and configured (via sensors-detect). -Charles #!/bin/sh # YELLOW and RED THRESHOLD VALUES for TEMPERATURE YTMP=75 RTMP=79 # SENSORS="/usr/bin/sensors -f" COLOR=green MSG=Error # # PARSE TEMPERATURE INFORMATION. TMP=`${SENSORS}| ${GREP} -i temp|tail -1|cut -d"(" -f1|cut -d"°" -f1|cut -d"+" -f2|cut -d"." -f1` if [ ${TMP} -le ${YTMP} ]; then COLOR=green MSG="The Temperature is currently ${TMP}F, which does not exceed the Warning level (${YTMP}F)" fi if [ ${TMP} -gt ${YTMP} ] && [ ${TMP} -lt ${RTMP} ]; then COLOR=yellow MSG="The Temperature is currently ${TMP}F, which is exceeds the Warning level (${YTMP}F)" fi if [ ${TMP} -gt ${RTMP} ]; then COLOR=red MSG="The Temperature is currently ${TMP}F, which exceeds the Panic level (${RTMP}F!)" fi $BB $BBDISP "status $MACHINE.temp $COLOR `date` $MSG temp : $TMP "

1 0

SNMPTRAPD
by forums＠triadbiz.rr.com 25 Jan '08

25 Jan '08

I had a question about catching traps using SNMPTRAPD. I am wondering if there is a way to not send unknown traps to hobbit at all. Kinda let them fall by the waist side so that hobbit doesn't even display a clear icon. The reason I am trying to do this is because sometimes I receive a legitimate trap and then another trap comes behind it that might be not as detailed in explaining what is wrong and turns the trap green or yellow instead of red. So I wanted to remove these entries out of the snmptt conf for that device and then it would be an unknown trap and hopefully be able to not display it at all. Any Ideas? Josh

1 0

disabling monitoring selectively
by Charlie.Dillard＠usdoj.gov 25 Jan '08

25 Jan '08

In regard to my earlier post "disabling monitoring selectively" it appears that the bb-hosts command group-except cpu does the trick. For anyone else having this issue the command can be extended to group-except cpu|info|disk and so forth. The file bb-hosts.5.html in the Help pulld-downs has more info. ----------------------------------------------------------------- Charles T. Dillard Linux engineer Unisys / U.S. DOJ Work: 202 616 2149 Cell: 571 264 0514 20 Massachusetts Avenue Washington, D.C. 20529 -----------------------------------------------------------------

1 0

disabling monitoring selectively
by Charlie.Dillard＠usdoj.gov 25 Jan '08

25 Jan '08

At my company Hobbit 4.2.0 is running on Linux Redhat AS 3 servers. I need to make a change. I have an existing group - Group One - that has one server named Server A and which two events are being monitored - conn and cpu. I want to create a Group Two that has the same Server A and I want monitor conn. I do not want to monitor cpu. I have tried commands in the bb-hosts file like nocpu, NOCOLUMNS: cpu all the intuitive stuff. Group Two allways duplicates Group One. I am doing this to provide a simplied view - Group Two - for our help desk. Has this ever been done? If so, can someone point the way. Many thanks. ----------------------------------------------------------------- Charles T. Dillard Linux engineer Unisys / U.S. DOJ Work: 202 616 2149 Cell: 571 264 0514 20 Massachusetts Avenue Washington, D.C. 20529 -----------------------------------------------------------------

1 0

[hobbit] Tracking Users -- Ideas
by jkwade＠futurefrontiers.com 25 Jan '08

25 Jan '08

Webalizer does do a lot of what I'm looking to do. However, I want to be able to have the number of users and hits traced through Hobbit so that I can pull up metric graphs and compare to CPU, Memory, Networks, etc.., This will allow me to compare hardware usage with the number of users accessing the infrastructure for future growth and performance analysis. James _____ From: Ralph Mitchell [mailto:ralphmitchell at gmail.com] Sent: Thursday, January 24, 2008 11:03 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Tracking Users -- Ideas Dunno if/how it could be integrated into Hobbit, but I think Webalizer (http://www.mrunix.net/webalizer/) does exactly what you're looking for. Ralph Mitchell

1 0