February 2008 - Xymon - Xymon mailman web

[hobbit] Solaris 10 SMF monitor [was RE: Ext script to monitor Solaris 10 services]
by Martin.Ward＠colt.net 20 Feb '08

20 Feb '08

I did wonder about trying to avoid hard-coding the services but am not skilled enough in Hobbit to know where to do it. I tried doing what you suggested but I can't persuade the client to read the data from the server. I have the following on the server in the client-local.cfg file: [nms4.lon.oss.colt.net] svc:/network/ssh:default|svc:/site/tftpd:default And this is in the bb-hosts file: 10.44.85.209 nms4.lon.oss.colt.net # ssh Yet after restarting both server and client I only get this in the ~hobbit/client/tmp/logfetch.nms4.lon.oss.colt.net.cfg: log:/var/adm/messages:10240 log:/var/log/syslog:10240 Any pointers? |\/|artin -- > -----Original Message----- > From: Henrik Stoerner [mailto:henrik at hswn.dk] > Sent: 19 February 2008 13:06 > To: hobbit at hswn.dk > Subject: Re: [hobbit] Solaris 10 SMF monitor [was RE: Ext > script to monitor Solaris 10 services] > > > On Tue, Feb 19, 2008 at 12:36:28PM -0000, Ward, Martin wrote: > > So, having scripted around a couple of issues with sh(1) > > I have written the following. You are welcome to comment > > on it or suggest improvements. > > > > Find below bb-smf.sh > > ---- > > #!/bin/sh > > > > # A Hobbit script to examine specific Solaris 10 services. > > > > # Author: Martin Ward 19 Feb 2008. > > # Version: 1.0 - Initial version. > > > > # SVCS is a list of services to examine the status of. Each > name must > > be # enough to make it unique in the svcs list. Separate > each service > > with # a | so that we can use ${EGREP} to search for them. > > SVCS='svc:/network/ssh:default|svc:/site/tftpd:default' > > One obvious improvement would be to grab this setting from the > Hobbit "client-local.cfg" configuration. The host-specific > client-local setting is stored by the Hobbit client in > ~hobbit/client/tmp/logfetch.HOSTNAME.cfg, so assuming you put > a line like > svc:/network/ssh:default|svc:/site/tftpd:default > in client-local.cfg (on the Hobbit server), you could grab it using > SVCS=`grep '^svc:' $BBTMP/logfetch.$MACHINEDOTS.cfg` > instead of hardcoding it into the script. > > (Untested, but it should be rather trivial). > > > Regards, > Henrik > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > ************************************************************************************* The message is intended for the named addressee only and may not be disclosed to or used by anyone else, nor may it be copied in any way. The contents of this message and its attachments are confidential and may also be subject to legal privilege. If you are not the named addressee and/or have received this message in error, please advise us by e-mailing security at colt.net and delete the message and any attachments without retaining any copies. Internet communications are not secure and COLT does not accept responsibility for this message, its contents nor responsibility for any viruses. No contracts can be created or varied on behalf of COLT Telecommunications, its subsidiaries or affiliates ("COLT") and any other party by email Communications unless expressly agreed in writing with such other party. Please note that incoming emails will be automatically scanned to eliminate potential viruses and unsolicited promotional emails. For more information refer to www.colt.net or contact us on +44(0)20 7390 3900.

2 1

client-local OS/CLASS
by xavier.cherif＠gmail.com 20 Feb '08

20 Feb '08

Hi, i'm testing hobbit-4.20 on a some machines, and i've some trouble with the automatic update. client-local.cfg, can use the os of the box to check & download newer version of the client. As far as i known this can be done with a set of os type (like redhat/frebsd/sunos/...) or by the name of the machine. unfortunatly we have some sparc/x86 linux/solaris box. so having sunos or linux without processor type lead the client to dowload the bad version. For known i've found two solutions which are paintfull. 1. changing the runclient.sh to override class and/or os so the client-local.cfg would have some minimum changes at each upgrade. 2. make one entry by server in client-local.cfg and change every entries. did some known how to report processor type with the os string ? Regards

1 0

[hobbit] windows question
by rebecca_henderson＠link.freedom.com 19 Feb '08

19 Feb '08

I agree with you but my situation is I'm replacing a system that does monitor and schedule tasks so I'm trying to meet the needs of the windows community. An example of this would be HP-Openview ... Monitor, run tasks, email page etc.... I'm sure there is a way. Thank you for the reply. -----Original Message----- From: hobbit at hswn.dk [mailto:hobbit at hswn.dk] Sent: Monday, February 18, 2008 1:32 PM To: Rebecca Henderson; hobbit at hswn.dk Subject: RE: [hobbit] windows question Importance: Low I don't know the answer to that question, but I don't think a monitoring system is the proper tool to use for taking action. Jim Smith ======================================================================== === From: Rebecca Henderson [mailto:rebecca_henderson at link.freedom.com] Sent: Monday, February 18, 2008 3:27 PM To: hobbit at hswn.dk Subject: [hobbit] windows question Is it possible to schedule a windows reboot command through hobbit? See below C:\WINDOWS\system32\shutdown.exe/r/f I need to run this command on a few servers every night and send emails to operations, "email" which I finally got working J Any information would be appreciated. Thanks! Becki NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.

6 6

Alerting on "non-green" events of a given duration
by walterappleby＠yahoo.com 19 Feb '08

19 Feb '08

Scenario: We have several mail servers that are doing spam filtering. When they receive a spam definition update there is a brief recycle of the smtp services. This causes Hobbit's smtp test to go "colorful" (red or yellow). To avoid being notified every time there was a momentary blip due to this update cycle I setup an alert rule as follows: PAGE=mail_servers MAIL <my address at my domain> SERVICE=smtp DURATION>2m This works as desired by suppressing alerts for times when the smtp service goes from green to red or yellow and then back to green in less than two minutes. PROBLEM: The above rule does not alert me when the smtp service goes from green to red for 1 min, then red to yellow for 1 min, then yellow back to red for 1 min... etc. In this case since no one event is longer than two minutes I'm not getting alerts even though my servers are non-green for a longer period of time. The way I understand the DURATION keyword is that it keeps a timer on the present state (red, yellow, purple) and that when the state changes the timer is reset. What I want is a way to keep track of the total duration of non-green events. Whereas a blip when the smtp service recycles is acceptable, I need to know if it struggles to return to green afterward. DESIRED STATE: I want to be alerted when the smtp service is anything other than green for more than two minutes. This could be a single red or yellow event lasting more than two minutes or it could be a string of connected red and yellow events that when combined are greater than two minutes in length. Any help you can offer is appreciated. If you need more info or clarification please let me know. Thanks, Danny --------------------------------- Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.

2 3

Request For Comment: Hobbit in High Availability
by tj_yang＠hotmail.com 19 Feb '08

19 Feb '08

Sorry about last incomplete email. I am planning to turn an existing hobbit site into High availability architecture. I am reading the past discussions (R2) about this subject on mail list and putting putting together the wiki notes. Hoping others can comment and find if there is any design flaws. For hobbit on Linux users, you can contribute your HA solution using Linux. tj References: 1. http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Administration_G… 2. http://www.hswn.dk/std-cgi/htsearch?words=High+Availability&method=and&conf…

3 6

[hobbit] windows question
by rebecca_henderson＠link.freedom.com 19 Feb '08

19 Feb '08

I'm not the windows admin. I'm UNIX, Linux... I'm just trying to put hobbit in place here. I think you are right about that. The "no response to ping" will be emailed to the operations group >From my hobbit server. That should be good enough. Thanks again! -----Original Message----- From: hobbit at hswn.dk [mailto:hobbit at hswn.dk] Sent: Monday, February 18, 2008 1:56 PM To: Rebecca Henderson; hobbit at hswn.dk Subject: Re: [hobbit] windows question Importance: Low If you're really gung ho about rebooting your Windows boxes every night use the machines themselves to issue the command at each night midnight (or whatever time). Josh On 2/18/08, Hubbard, Greg L <[ mailto:greg.hubbard at eds.com ]greg.hubbard at eds.com> wrote: Becki, Hobbit was developed under the "monitor and inform, but do nothing else" school of thought. It cannot schedule a reboot. However, you might be able to build something that would reboot a remote system and link it to the alert system if you think that is wise. What you would do is have the alert system run a custom script, and that custom script can do anything in your power. But, frankly, this is generally considered A Bad Idea in most circles. GLH -----Original Message----- From: Rebecca Henderson [mailto:[ mailto:rebecca_henderson at link.freedom.com ]rebecca_henderson at link.freedom.com] Sent: Monday, February 18, 2008 3:43 PM To: [ mailto:hobbit at hswn.dk ]hobbit at hswn.dk Subject: RE: [hobbit] windows question I agree with you but my situation is I'm replacing a system that does monitor and schedule tasks so I'm trying to meet the needs of the windows community. An example of this would be HP-Openview ... Monitor, run tasks, email page etc.... I'm sure there is a way. Thank you for the reply. -----Original Message----- From: [ mailto:hobbit at hswn.dk ]hobbit at hswn.dk [mailto:[ mailto:hobbit at hswn.dk ]hobbit at hswn.dk] Sent: Monday, February 18, 2008 1:32 PM To: Rebecca Henderson; [ mailto:hobbit at hswn.dk ]hobbit at hswn.dk Subject: RE: [hobbit] windows question Importance: Low I don't know the answer to that question, but I don't think a monitoring system is the proper tool to use for taking action. Jim Smith ======================================================================== === From: Rebecca Henderson [mailto:[ mailto:rebecca_henderson at link.freedom.com ]rebecca_henderson at link.freedom.com] Sent: Monday, February 18, 2008 3:27 PM To: [ mailto:hobbit at hswn.dk ]hobbit at hswn.dk Subject: [hobbit] windows question Is it possible to schedule a windows reboot command through hobbit? See below C:\WINDOWS\system32\shutdown.exe/r/f I need to run this command on a few servers every night and send emails to operations, "email" which I finally got working J Any information would be appreciated. Thanks! Becki NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system. To unsubscribe from the hobbit list, send an e-mail to [ mailto:hobbit-unsubscribe at hswn.dk ]hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to [ mailto:hobbit-unsubscribe at hswn.dk ]hobbit-unsubscribe at hswn.dk -- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

4 4

Page Display
by HS3082＠att.com 19 Feb '08

19 Feb '08

Is there a way to rename the page titles? Pages Hosted Locally ________________________________ Hobbit Server <http://10.184.16.150/hobbit/Hobbit_Server/Hobbit_Server.html> MNOC Workstations <http://10.184.16.150/hobbit/MNOC_Workstations/MNOC_Workstations.html> MNOC Citrix Farm <http://10.184.16.150/hobbit/Citrix_Farm/Citrix_Farm.html> MNOC Servers <http://10.184.16.150/hobbit/MNOC_Servers/MNOC_Servers.html> Test-Servers from BB <http://10.184.16.150/hobbit/Test_Servers_from_BBServer/Test_Servers_fro m_BBServer.html> OSS SE Servers <http://10.184.16.150/hobbit/OSS_SE_Servers/OSS_SE_Servers.html> I want to rename "Pages Hosted Locally" to something more fitting of my environment. Thank you, Howard Snyder hs3082 at att.com

4 6

[Devmon] [hobbit] Re: Devmon Turning Purple
by mprice＠sgt-inc.com 19 Feb '08

19 Feb '08

We have the same problem here. We changed it to restart every 30 minutes, but still we have times where it goes purple. I can not find a single log entry for any of this. Thanks, michael On 2/18/08 10:01 AM, "Simeon Berkley" <sberkley at mcclatchyinteractive.com> wrote: > Johan Unosson wrote: >> > I have the "purple" problem without using bbproxy. My devmon is running >> > on the same server as hobbit display server, and is reporting directly >> > to it. >> > >> > /Johan >> > >> > > > Same thing here. It will run for up to 3 weeks and then go purple. Devmon is > running on the same server as Hobbit. We're running release_0_3_0_beta2. So > far > I'm having hobbit page me so that I can shutdown devmon, make sure it's dead, > then restart it. I do this manually so that I can get a sense of when it's > failing. > > I noticed that I was getting a lot of errors about an undefined variable in > the > log even after devmon goes purple, so I did a little looking around and found > where the undefined variable was trying to be referenced in SNMP_Session.pm. I > then put a debug message in SNMP_Session.pm so that When the failure happens I > get a lot of log messages: > > response_community is undefined, bailing out of receive_response_3 > at /path/to/devmon/modules/dm_snmp.pm line 469 > > This error can appear without devmon going purple, but it is always present > when > devmon has crapped out. > > > > -- > S i m e o n B e r k l e y > > Systems Engineer > Mcclatchy Interactive > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devmon-support mailing list > Devmon-support at lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/devmon-support >

1 0

Solaris 10 SMF monitor [was RE: Ext script to monitor Solaris 10 services]
by Martin.Ward＠colt.net 19 Feb '08

19 Feb '08

This originally came about because I have a need to monitor a TFTP server. This uses UDP rather than TCP so unless I write a very specific script to transfer an existing file, monitoring the UDP server remotely is going to be difficult. However, if I monitor the TFTP service on the box itself it is much easier. I could simply do "ps -ef|grep tftpd | grep -v grep | wc -l" and if there is < 1 line then it's not running, but I thought it would be nicer to come up with a more generic script that actually monitors the SMF services. To my mind you ought to be able to specify which services you want monitored and have them all checked at once. In this manner I can check the TFTP daemon (which uses UDP), the syslog daemon (which is only accessible from the server) and anything that isn't TCP-enabled. As Ulric Eriksson has also pointed out, it is simple to parse the output from svcs -a, I was just trying not to reinvent the wheel. So, having scripted around a couple of issues with sh(1) I have written the following. You are welcome to comment on it or suggest improvements. Find below bb-smf.sh ---- #!/bin/sh # A Hobbit script to examine specific Solaris 10 services. # Author: Martin Ward 19 Feb 2008. # Version: 1.0 - Initial version. # SVCS is a list of services to examine the status of. Each name must be # enough to make it unique in the svcs list. Separate each service with # a | so that we can use ${EGREP} to search for them. SVCS='svc:/network/ssh:default|svc:/site/tftpd:default' # The name of the column in Hobbit COLUMN=smf # COLOUR defaults to green COLOUR=GREEN # When you modify a variable inside a while loop its value is local to that # loop. This means that when you reach the end of the loop the variable will # be the same value that it was before the loop was entered. For this reason # we have to store the services and colour in temporary files. SVCFILE=/tmp/svcs.$$ COLOURFILE=/tmp/svcs.colour.$$ # Get the svcs header line first MSGH=`svcs -a | head -1` # Scan through the svcs -a list. Use -a to ensure we get everything. svcs -a | ${EGREP} "${SVCS}" > $SVCFILE cat $SVCFILE | while read SVC do STATE=`echo ${SVC} | ${AWK} '{print $1}'` case "${STATE}" in 'uninitialized'|'offline'|'degraded') if [ "${COLOUR}" != "RED" ] then COLOUR="YELLOW" fi ;; 'maintenance'|'disabled') COLOUR="RED" ;; esac echo ${COLOUR} > $COLOURFILE done COLOUR=`cat ${COLOURFILE}` # Tell Hobbit about it $BB $BBDISP "status $MACHINE.$COLUMN $COLOUR `date` ${MSGH} `cat ${SVCFILE}` " rm -f ${SVCFILE} ${COLOURFILE} exit 0 ---- |\/|artin -- > -----Original Message----- > From: pkc_mls [mailto:pkc_mls at yahoo.fr] > Sent: 19 February 2008 09:44 > To: hobbit at hswn.dk > Subject: Re: [hobbit] Ext script to monitor Solaris 10 services > > > Ward, Martin a écrit : > > > > Hi all, > > > > I need a Hobbit ext script to monitor Solaris 10 services > and a quick > > search of the 'net reveals that there was a discussion about such a > > beast in this very mailing list. Did anything come of it? Does this > > script exist or should I go and try and write it myself? > > > you can check some network services from the server. > for the process, perhaps have a look at the procs settings in > the client. if that doesn't answer the question, could you > please explain a little > bit more what you mean by services ? > > > > |\/|artin > > -- > > Martin Ward > > *Network Systems Operations Specialist* > > DDI: +44 (0) 20 7863 5218 > > Fax: +44 (0) 20 7863 5610 > > Mob: +44 (0) 7971 97 77 21 > > _www.colt.net_ <file://www.colt.net> > > > > Data | Voice | Managed Services > > > > Help reduce your carbon footprint | Think before you print > > > > COLT Telecommunications, Beaufort House, 15 St Botolph > Street, London, > > EC3A 7QN UK > > Registered in England and Wales, registered number 02452736, VAT > > number GB 645 4205 50 > > > > > > > > > ********************************************************************** > > *************** > > The message is intended for the named addressee only and may not be > > disclosed to or used by anyone else, nor may it be copied > in any way. > > > > The contents of this message and its attachments are > confidential and > > may also be subject to legal privilege. If you are not the named > > addressee and/or have received this message in error, > please advise us > > by e-mailing security at colt.net and delete the message and any > > attachments without retaining any copies. > > > > Internet communications are not secure and COLT does not accept > > responsibility for this message, its contents nor > responsibility for > > any viruses. > > > > No contracts can be created or varied on behalf of COLT > > Telecommunications, its subsidiaries or affiliates ("COLT") and any > > other party by email Communications unless expressly agreed > in writing > > with such other party. > > > > Please note that incoming emails will be automatically scanned to > > eliminate potential viruses and unsolicited promotional emails. For > > more information refer to www.colt.net or contact us on > +44(0)20 7390 > > 3900. > > > -------------------------------------------------------------- > ---------- > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > ************************************************************************************* The message is intended for the named addressee only and may not be disclosed to or used by anyone else, nor may it be copied in any way. The contents of this message and its attachments are confidential and may also be subject to legal privilege. If you are not the named addressee and/or have received this message in error, please advise us by e-mailing security at colt.net and delete the message and any attachments without retaining any copies. Internet communications are not secure and COLT does not accept responsibility for this message, its contents nor responsibility for any viruses. No contracts can be created or varied on behalf of COLT Telecommunications, its subsidiaries or affiliates ("COLT") and any other party by email Communications unless expressly agreed in writing with such other party. Please note that incoming emails will be automatically scanned to eliminate potential viruses and unsolicited promotional emails. For more information refer to www.colt.net or contact us on +44(0)20 7390 3900.

2 1

Ext script to monitor Solaris 10 services
by Martin.Ward＠colt.net 19 Feb '08

19 Feb '08

Hi all, I need a Hobbit ext script to monitor Solaris 10 services and a quick search of the 'net reveals that there was a discussion about such a beast in this very mailing list. Did anything come of it? Does this script exist or should I go and try and write it myself? |\/|artin -- Martin Ward Network Systems Operations Specialist DDI: +44 (0) 20 7863 5218 Fax: +44 (0) 20 7863 5610 Mob: +44 (0) 7971 97 77 21 www.colt.net Data | Voice | Managed Services Help reduce your carbon footprint | Think before you print COLT Telecommunications, Beaufort House, 15 St Botolph Street, London, EC3A 7QN UK Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 ************************************************************************************* The message is intended for the named addressee only and may not be disclosed to or used by anyone else, nor may it be copied in any way. The contents of this message and its attachments are confidential and may also be subject to legal privilege. If you are not the named addressee and/or have received this message in error, please advise us by e-mailing security at colt.net and delete the message and any attachments without retaining any copies. Internet communications are not secure and COLT does not accept responsibility for this message, its contents nor responsibility for any viruses. No contracts can be created or varied on behalf of COLT Telecommunications, its subsidiaries or affiliates ("COLT") and any other party by email Communications unless expressly agreed in writing with such other party. Please note that incoming emails will be automatically scanned to eliminate potential viruses and unsolicited promotional emails. For more information refer to www.colt.net or contact us on +44(0)20 7390 3900.

3 2