March 2008 - Xymon - Xymon mailman web

Sending Alerts
by joshua＠stenhouseconsulting.com 06 Mar '08

06 Mar '08

Hello, I will have a script sending alerts to Hobbit based on email which is piped to the script. Thanks to those who helped get me this working!! My question is about how Hobbit handles alerts. I understand that Hobbit goes blue if no report is received after X (default 30min?) amount of time and my alerts will likely only come through once a day or maybe longer. Can Hobbit be set to stay green until it received a yellow or red condition and then stay in that condition until it is acknowledged and/or until another green condition is received? If only one message/report is coming each day and hobbit goes blue after 30 minutes it will almost always be blue. How do I resolve this in Hobbit? If Hobbit can't do this then I have to keep the status of the alerts externally and have my script run every x min to send Hobbit green /yellow/red status. Someone else must have tackled this issue!? Thanks Josh ________________________________ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.

1 2

clientupdate with bbmessage
by philwild＠gmail.com 06 Mar '08

06 Mar '08

Hello hobbit users, Can anyone tell me if bbmessage.cgi correctly handles clientupdate processes?The man page does not mention this and I am guessing that it does not. Is there a document somewhere that describes the client update process from a communications perspective? Cheers Phil -- Tel: 0400 466 952 Fax: 0433 123 226 email: philwild at gmail.com

1 0

[hobbit] Cleanup Script, and alert issue
by martin.flemming＠desy.de 05 Mar '08

05 Mar '08

Sorry, the attachment was blocked by our spamfilter :-( .. i will talk with our postmaster tomorrow, or got somebody else it too ? martin On Wed, 5 Mar 2008, Martin Flemming wrote: > > Hi ! > > .. here as attachement .. we would suggest, > it should be stored in the wikki or on the shire ... > > http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit > http://www.trantor.org/theshire/doku.php/about > > shouldn't it .. ? > > cheers, > martin > > > On Wed, 5 Mar 2008, Maschino, Shawn (SABIC Innovative Plastics) wrote: > >> Hi everyone. I've read in prior posts about an admin clean-up >> script that sounds like it will clean up Hobbit's data files for systems >> that are no longer in the bb-hosts list. I could use a copy of that, >> and the URL in the mails and on the Shire point to >> http://www.fh-augsburg.de/~henk/hobbit/ >> <http://www.fh-augsburg.de/~henk/hobbit/> which I can't get in to. Is >> the script no longer available, or perhaps hidden in the 4.2.0 release >> somewhere I haven't noticed it? >> >> If someone could pass on a copy it would be appreciated. I'm hoping >> the script is smart enough to deal with includes in the bb-hosts file, >> as all my systems are defined in sub-files and just included in there. >> >> Secondly, and somewhat related, our install has been sending a mass >> number of email alerts for systems and alerts no longer defined. I hope >> the clean-up script will address that, but just for future reference is >> there any file or queue I can look into to see what is pending as >> alerts? I disabled the alerting via hobbitlaunch.cfg for now and won't >> want to turn it back on until I know it is safe. We flooded 1800+ >> alerts and can't have that happen again! >> >> Thanks, >> >> Shawn > Gruss Martin Flemming ______________________________________________________ Martin Flemming DESY / IT office : Building 2b / 008a Notkestr. 85 phone : 040 - 8998 - 4667 22603 Hamburg mail : martin.flemming at desy.de ______________________________________________________

1 1

Restarting hobbit server
by Robert-Manocchia＠IDEXX.com 05 Mar '08

05 Mar '08

The hobbit server hardware was switched from one virtual server to another newer box. The nodename and IP address remained the same. I brought down the hobbit client and hobbit server on the box and halted it. It was then switch to the new hardware. I restarted the hobbit server and hobbit client. Now I cannot get the web page to appear. Am I missing something.?

2 1

Cleanup Script, and alert issue
by shawn.maschino＠sabic-ip.com 05 Mar '08

05 Mar '08

Hi everyone. I've read in prior posts about an admin clean-up script that sounds like it will clean up Hobbit's data files for systems that are no longer in the bb-hosts list. I could use a copy of that, and the URL in the mails and on the Shire point to http://www.fh-augsburg.de/~henk/hobbit/ <http://www.fh-augsburg.de/~henk/hobbit/> which I can't get in to. Is the script no longer available, or perhaps hidden in the 4.2.0 release somewhere I haven't noticed it? If someone could pass on a copy it would be appreciated. I'm hoping the script is smart enough to deal with includes in the bb-hosts file, as all my systems are defined in sub-files and just included in there. Secondly, and somewhat related, our install has been sending a mass number of email alerts for systems and alerts no longer defined. I hope the clean-up script will address that, but just for future reference is there any file or queue I can look into to see what is pending as alerts? I disabled the alerting via hobbitlaunch.cfg for now and won't want to turn it back on until I know it is safe. We flooded 1800+ alerts and can't have that happen again! Thanks, Shawn

2 2

Mailing list problems - should be fixed now
by henrik＠hswn.dk 05 Mar '08

05 Mar '08

There's been some problems with the mail server hosting the Hobbit mailing list over the past few days. It seems that mail has been rejected with a temporary error, so your mails to the list might have been delayed. It hasn't affected all mail, but some of it certainly has been queued up. The problem was caused by a clamav virus scanner acting up; Debian bugtracker http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=467298 has the details. My Hobbit setup did catch that clamav was misbehaving, but I didn't realize that it would have this impact on the mailsystem. I expect the backlog to be flushed out over the next few hours. Sorry for any inconvenience it may have caused. Regards, Henrik

1 0

rrd-status.log messages
by tlewick＠tradebotsystems.com 05 Mar '08

05 Mar '08

Hi all, I am receiving the following messages in my rrd-status.log file... Got over-size message, truncating at 131072 bytes (max 131072) Dropping (more) garbled data Bad data in channel, skipping it. Everything seems to be working, but don't really know where to look to see what host(s) this is coming from. Can someone tell me where I can change the max message size hobbit can receive? Or RRD? Thanks, Taylor Lewick

1 0

[Devmon] [hobbit] RE: Devmon Turning Purple
by mprice＠sgt-inc.com 05 Mar '08

05 Mar '08

We upgrade devmon to 0.3.0rc1 as well and we were good for a couple days until it went purple again. We changed our cronjob to be every 15 minutes and are ok now. We have no updates for you as of this point yet. Sorry, michael On 3/5/08 9:41 AM, "Whilding, Craig" <Craig_Whilding at mentor.com> wrote: > I've discovered something with this purple problem. If the module that > parses hobbit client data isn't running then devmon seems to remain > fine. > > Basically on one of our servers that runs a proxy sending data to > localhost and our main server one of the modules has died so that no > linux client data gets to the local display. Haven't quite worked out > what will have died yet as I need to run a diff with another box to > check the dead channel but whatever it was it seems to be the service > that devmon disagreed with. > > Any progress on debugging what devmon code causes the problem in the > first place? I can leave this broken for now on mine as the local > display is only a backup if the wan link fails. > > Regards, > Craig > > -----Original Message----- > From: devmon-support-bounces at lists.sourceforge.net > [mailto:devmon-support-bounces at lists.sourceforge.net] On Behalf Of > Buchan Milne > Sent: 21 February 2008 10:22 > To: hobbit at hswn.dk > Cc: devmon-support at lists.sourceforge.net > Subject: Re: [Devmon] [hobbit] RE: Devmon Turning Purple > > On Wednesday 20 February 2008 18:44:24 Joyner, William wrote: >> > I've upgraded to the new release and still have the issues with purple >> > errors. I do however like that it shows the devmon process in Hobbit > as >> > a monitored piece. > > One of mine running 0.3.0rc1 has been green for 16 days (it doesn't get > restarted automatically) ... it went purple last night. I'll add logging > at > the places I suspect may be problematic, and try and reproduce ... > > Regards, > Buchan > > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devmon-support mailing list > Devmon-support at lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/devmon-support > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devmon-support mailing list > Devmon-support at lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/devmon-support > -- Michael A. Price EOS Network Security Engineer SGT, Inc. www.sgt-inc.com NASA/GSFC Code 428.0 Greenbelt, Maryland 20770 e-mai: mprice at sgt-inc.com desk: 301-614-5848 cell: 410-507-7476 ------------------------------------------------------------------------- PGP Public Key available from keyserver.pgp.com -------------------------------------------------------------------------

1 0

df output incorrect only produces yellow instead of red.
by Craig_Whilding＠mentor.com 05 Mar '08

05 Mar '08

One of our solaris servers has had the /var partition fill up to 100%. This has had a knock on effect of somehow killing the df command. Not although the line below is displayed and is red the actual page has only gone yellow. Expected strings (capacity and Mounted) not found in df output How do I change this so that the page goes red when I lose disk reporting? Thanks. Regards, Craig Whilding IT Systems Contractor Mentor Graphics 1 Edward Court Altrincham Business Park Altrincham WA14 5GL

2 2

Changes in checking file hashes?
by tschenk＠pironet-ndh.com 05 Mar '08

05 Mar '08

Hi all, Sorry if this was discussed before, I could not find it. After running 4.2.0 for some time I wanted to try the nightly snapshot again. All the file checks turned red, complaining about missing md5 data. Did I miss a configuration change? Error message: File has MD5 hash (No MD5 data) - should be c784b19d0034235fbf6de2accc6e86b6 Client data: [file:/bin/bash] type:100000 (file) mode:555 (-r-xr-xr-x) linkcount:1 owner:0 (root) group:2 (bin) size:516392 clock:1204716972 (2008/03/05-12:36:12) atime:1204716816 (2008/03/05-12:33:36) ctime:1029943369 (2002/08/21-17:22:49) mtime:947116452 (2000/01/06-00:54:12) md5:c784b19d0034235fbf6de2accc6e86b6 Reagards, Thomas

1 0