June 2008 - Xymon - Xymon mailman web

Custom graphing problem
by Mike.Wood＠kci1.com 26 Jun '08

26 Jun '08

Hi All, I need a bit of help with a custom graph. I'm going through the "howtograph.html", but I never get any results at all on the hobbit server. On my remote AIX client "dallas", I have this script: ------------------ #!/usr/bin/sh # Get numperm, minperm, maxperm, and calculate computational memory numperm=`vmstat -v|grep numperm|awk '{print $1}'` minperm=`vmstat -v|grep minperm|awk '{print $1}'` maxperm=`vmstat -v|grep maxperm|awk '{print $1}'` MSGFILE=$BBTMP/memperm.txt print "minperm: $minperm" > $MSGFILE print "maxperm: $maxperm" >> $MSGFILE print "numperm: $numperm" >> $MSGFILE $BB $BBDISP "status $MACHINE.memperm green `date` `cat $MSGFILE` " exit 0 ------------------- And this stanza in the clientlaunch.cfg: ------------------- [memperminfo] ENVFILE $HOBBITCLIENTHOME/etc/hobbitclient.cfg CMD $HOBBITCLIENTHOME/ext/memperm INTERVAL 5m ------------------- I have verified that the script is running on the client. However, I never get a memperm column on the Hobbit Server. What am I missing? Thanks! Mike Wood UNIX System Administrator Kinetic Concepts, Inc. 6103 Farinon Drive San Antonio, TX, 78249 E-mail: mike.wood at kci1.com Office: (210) 255-6382 Mobile: (210) 825-5134 ***************************************************************************** "CONFIDENTIALITY NOTICE: This transmission (including any accompanying attachments) is confidential, is intended only for the individual or entity named above, and is likely to contain privileged, proprietary and confidential information that is exempt from disclosure requests under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, use of or reliance upon any of the information contained in this transmission is strictly prohibited. Any inadvertent or unauthorized disclosure shall not compromise or waive the confidentiality of this transmission or any applicable attorney-client privilege. If you have received this transmission in error, please immediately notify us at postmaster at kci1.com." Kinetic Concepts, Inc. ******************************************************************************

2 2

Trouble with Hobbit Alerts
by ncavanagh＠bimedia.net 26 Jun '08

26 Jun '08

Hello all, I hope that someone might be able to help me here. I have Hobbit server 4.2.0 installed on a Pc running Ubuntu 8. The server is configured to monitor a couple of test servers (one internal, and one external). Everything seems to function fine except for the alerts. My /etc/hobbit/hobbit-alerts.cfg file has the following lines: HOST=bimload1 SERVICE=cpu,disk,memory,procs,conn SCRIPT /usr/bin/sendalerts.pl n8 MAIL me at bimedia.net When I try to test this using: ./bbcmd hobbitd_alert --test bimload1 cpu I get the following: 2008-06-26 08:34:07 Using default environment file /usr/lib/hobbit/ client/etc/hobbitserver.cfg 00027518 2008-06-26 08:34:07 send_alert bimload1:cpu state Paging 00027518 2008-06-26 08:34:07 Matching host:service:page 'bimload1:cpu:' against rule line 120 00027518 2008-06-26 08:34:07 *** Match with 'HOST=bimload1 SERVICE=cpu,disk,memory,procs,conn' *** 00027518 2008-06-26 08:34:07 Matching host:service:page 'bimload1:cpu:' against rule line 120 00027518 2008-06-26 08:34:07 *** Match with 'HOST=bimload1 SERVICE=cpu,disk,memory,procs,conn' *** 00027518 2008-06-26 08:34:07 Script alert with command '/usr/bin/ sendalerts.pl' and recipient n8 00027518 2008-06-26 08:34:07 Matching host:service:page 'bimload1:cpu:' against rule line 120 00027518 2008-06-26 08:34:07 *** Match with 'HOST=bimload1 SERVICE=cpu,disk,memory,procs,conn' *** 00027518 2008-06-26 08:34:07 Mail alert with command 'mailx -s "Hobbit [12345] bimload1:cpu CRITICAL (RED)" me at bimedia.net' But when I check my mail logs and syslogs and hobbit logs it looks like the sendalert.pl script never fires off, and the email is never sent. I can send email using mailx from the command line and i can run the sendalert.pl script form the command line, and both produce the expected results. I have even sent the permissions for the sendalrt.pl script to be 777 (yes this is a security risk but for now I just wanted to make sure it was not a permissions issue). Why is the script not running not the email being sent via hobbit-alert? Am I missing anything? I would greatly appreciate any assistance in this matter Thank you, N8

1 0

[hobbit] Service SMTP on xxxxxx is not OK : Unexpected servic e response
by bewhite＠fellowes.com 26 Jun '08

26 Jun '08

We had a similar problem with our exchange server until I changed the bb-services file to be: [smtp] send "helo\r\nquit\r\n" expect "220" options banner port 25 Now the exchange response to smtp is much more stable, but my linux sendmail servers complain more often. I guess I need to make a smtpex with the above and restore the original smtp definition, which seemed to work better with Linux. Why can't MS just do things to standards? ......Bruce _____ From: Geoff Hallford [mailto:geoff.hallford at gmail.com] Sent: Wednesday, June 25, 2008 11:53 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Service smtp on xxxxxx is not OK : Unexpected service response I have also seen this happen when the response is slow from the mail server to show the 220 message. It does show it but is slow for some reason. I create a new service called smtp-slow by adding the following and then configure the bb-hosts entry with 'smtp-slow' instead of smtp. Just a thought. This way it doesn't require a 220 response but if it gets a valid "connection" it is okay. If it can't open a connection, it goes red. It does limit the amount of app validation but it is the only thing that worked in my case. [smtp-slow] send "mail\r\nquit\r\n" options banner port 25 On Wed, Jun 25, 2008 at 12:31 PM, Andrew Clarke <andrew at bccit.co.uk <mailto:andrew at bccit.co.uk> > wrote: As it happens, there are PIXs between the hobbit server & all the Exchange servers. However, they've all been there for ages (years in some cases). I'll have a chat with our resident Cisco guru & see if he made any changes at our end around 6th June, when things stopped working. Andrew Clarke Support and Technical Development Officer BCC IT Solutions DDI: 0871 288 2036 Tel: +44 (0)1239 710823 http://www.bccit.co.uk/ <http://www.bccit.co.uk/> Providers of business to business IT Solutions & Services Back-up - Anti Virus - Security - Servers - Wireless Networks - VPN - Remote Monitoring - Project Consultation Hardware Provision Servers & Workstations - Disaster Recovery - Proactive Diagnostics - System Migration - Fibre CAT5e Server Administration - Forensics - Grant Appraisal - Network Management - System Appraisals - Support Contracts ... For full e-mail terms & conditions of use, please follow the link to the bcc web site http://www.bccitsolutions.co.uk/index.php?option=com_content <http://www.bccitsolutions.co.uk/index.php?option=com_content&task=view& amp;id=24&Itemid=1> &task=view&id=24&Itemid=1 BCC IT Solutions is a trading name of European Computer Units Limited, Registered in Cardiff, Company Registration No. 2651835 Registered Office: Unit B Station Road, Newcastle Emlyn, Carmarthenshire, Wales, SA38 9BX -----Original Message----- From: Rob MacGregor [mailto:rob.macgregor at gmail.com <mailto:rob.macgregor at gmail.com> ] You wouldn't happen to have a Cisco PIX/ASA between the hobbit host and the mail server, with it configured to do "fixup"? Those are known for breaking things ;) Rob MacGregor To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk> -- 'If my answers frighten you then you should cease asking scary questions.' --Sam Jackson ---------------------------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc. ----------------------------------------------------

4 4

[hobbit] Testing Hobbit alerts
by Martin.Ward＠colt.net 26 Jun '08

26 Jun '08

> Anything logged in the page.log file ? Is hobbitd_alert running at all ? No, page.log hasn't been written to in months although the last entries in it were: 2007-09-27 22:44:29 Cannot open configuration file /opt/hobbit/server/etc/hobbit-alerts.cfg: No such file or directory 2007-09-27 22:50:38 Worker process died with exit code 0, terminating Which seems to show that while I was setting Hobbit up last year I didn't have this file. Hobbitd_alert isn't running and this is part of what is causing me issues as I can't find how it is started (this is where my ignorance shows through). > As a last resort, run hobbitd_alert with the "--debug" option > and let me see what it says. 2008-06-26 08:52:15 Want msg 1, startpos 0, fillpos 0, endpos -1, usedbytes=0, bufleft=266239 2008-06-26 08:53:15 No files modified, skipping reload of /opt/hobbit/server/etc/hobbit-alerts.cfg 2008-06-26 08:53:15 0 alerts to go 2008-06-26 08:53:15 Want msg 1, startpos 0, fillpos 0, endpos -1, usedbytes=0, bufleft=266239 2008-06-26 08:54:15 No files modified, skipping reload of /opt/hobbit/server/etc/hobbit-alerts.cfg 2008-06-26 08:54:15 0 alerts to go 2008-06-26 08:54:15 Bad data in channel, skipping it 2008-06-26 08:54:15 Want msg 1, startpos 0, fillpos 0, endpos -1, usedbytes=0, bufleft=266239 2008-06-26 08:55:15 No files modified, skipping reload of /opt/hobbit/server/etc/hobbit-alerts.cfg 2008-06-26 08:55:15 0 alerts to go 2008-06-26 08:55:15 Bad data in channel, skipping it 2008-06-26 08:55:15 Want msg 1, startpos 0, fillpos 0, endpos -1, usedbytes=0, bufleft=266239 2008-06-26 08:56:15 No files modified, skipping reload of /opt/hobbit/server/etc/hobbit-alerts.cfg 2008-06-26 08:56:15 0 alerts to go I started this run with the one possible alert set to green (so no alert was going to occur). At 08:54:00 I initiated the error event. This generates an extra debug entry: 2008-06-26 08:54:15 Bad data in channel, skipping it But I have no idea what this means... :-( |\/|artin ************************************************************************************* The message is intended for the named addressee only and may not be disclosed to or used by anyone else, nor may it be copied in any way. The contents of this message and its attachments are confidential and may also be subject to legal privilege. If you are not the named addressee and/or have received this message in error, please advise us by e-mailing security at colt.net and delete the message and any attachments without retaining any copies. Internet communications are not secure and COLT does not accept responsibility for this message, its contents nor responsibility for any viruses. No contracts can be created or varied on behalf of COLT Telecommunications, its subsidiaries or affiliates ("COLT") and any other party by email Communications unless expressly agreed in writing with such other party. Please note that incoming emails will be automatically scanned to eliminate potential viruses and unsolicited promotional emails. For more information refer to www.colt.net or contact us on +44(0)20 7390 3900.

1 0

help with snapshot 6-25-2008
by Andy.Farrior＠victoriacollege.edu 26 Jun '08

26 Jun '08

I think I've left out a step, but can't seem to figure out what. I compiled and installed the snapshot from 6-25-2008 (same problem with snapshot from 6-12-2008). After watching the hobbitlaunch.log file, I saw that Hobbit wants a "hobbitserver.cert" and "hobbitserver.key" file. I followed the instructions to create the "cert" and "key" files that were referenced here: http://www.hswn.dk/hobbiton/2008/04/msg00093.html Now Hobbit runs, but I'm having some wierdness with the "info" column. Hobbit receives and displays network side tests and client side tests just fine (conn/cpu/disk/http/...). If I click on the "info" status for a host that's running a Big Brother client (*nix/NT) or BBWin client in local mode, the bb-hostsvc.sh CGI script displays the info page just fine. However, if the client is running BBWin in central mode, Hobbit client, or the client on the Hobbit server itself, bb-hostsvc.sh generates an error in the Apache log: [Wed Jun 25 21:34:11 2008] [error] [client 74.192.56.211] Premature end of script headers: bb-hostsvc.sh, referer: <snip> Having the error occur with the "info" column for the Hobbit server seemed odd. Is this related to the development work for SSL-encrypted connections or did I miss a step somewhere? Thanks, Andy

1 0

mailack question
by allan＠zandahar.net 26 Jun '08

26 Jun '08

HI all A LONG time ago I asked about ack'ing an alert via email (or via sms-to-email) and to be able to do so without a subject. A patch was written at the time and it was included into the main codebase but unfortunately I did not get a chance to imeplement what I wanted to and never ended up testing it. Thats has just changed recently and now I am having issues acking an alert via text in the body. If i reply to an email and maintain the subject it works fine, if I try cut the subject and paste it as the body nothing happens. I havent gone as far as testing it via the sms-to-email app yet as I cant get it working from a normal email. I still have one other potential problem of me converting the [] in the alerts to () but thats more outbound sms and I can deal with it coming back inwards. Any suggestions appreciated Allan

1 0

[hobbit] Testing Hobbit alerts
by Martin.Ward＠colt.net 25 Jun '08

25 Jun '08

> Always use the "bbcmd" utility to setup the environment for > ... > So your command should be > bbcmd hobbitd_alert --test tac0.lon.ws.colt.net proc > Thanks Henrik, with that command I get: 00014153 2008-06-25 14:49:28 Matching host:service:page 'tac0.lon.ws.colt.net:proc:Netops' against rule line 128 00014153 2008-06-25 14:49:28 *** Match with 'HOST=tac0.lon.ws.colt.net' *** 00014153 2008-06-25 14:49:28 Matching host:service:page 'tac0.lon.ws.colt.net:proc:Netops' against rule line 128 00014153 2008-06-25 14:49:28 *** Match with 'HOST=tac0.lon.ws.colt.net' *** 00014153 2008-06-25 14:49:28 Mail alert with command '/bin/mailx -s "Hobbit [12345] tac0.lon.ws.colt.net:proc CRITICAL (RED)" martin.ward at colt.net' And I can confirm that running the mailx command specified DOES send an email, so the mail system itself is working correctly. Unfortunately Hobbit itself is not generating anything. My hobbit-alerts.cfg file looks like this: HOST=tac0.lon.ws.colt.net MAIL martin.ward at colt.net repeat=5m So any alert should email me. I have a simple test set up so that if I am not editing a specific file a process in not found and the "procs" column goes red, but no emails are forthcoming. I've even tried changing the "mailx" command to a simple script that logs whatever is output from Hobbit to a log file, but nothing comes out. It looks like the alerting functionality is not working or has been disabled somehow, but that makes no sense. Can you give me some more pointers as to where to look? |\/| -- > -----Original Message----- > From: Henrik Stoerner [mailto:henrik at hswn.dk] > Sent: 24 June 2008 22:39 > To: hobbit at hswn.dk > Subject: Re: [hobbit] Testing Hobbit alerts > > > On Tue, Jun 24, 2008 at 04:22:05PM +0100, Ward, Martin wrote: > > Also, in my hobbitserver.cfg I have this: > > MAILC="/bin/mailx" > > MAIL="$MAILC -s" > > > > So the theory goes that when an alert occurs the /bin/mailx > command is > > executed with various different parameters. > > > > The problem is, when I try and test it I get the following: > > > > hobbit at hbt0:/opt/hobbit/server/etc>hobbitd_alert --test > tac0.lon.ws.colt.net proc > > Always use the "bbcmd" utility to setup the environment for > your tests. That's the only way you can make sure > hobbitd_alert inherits the settings from your > hobbitserver.cfg - if you don't use bbcmd, then it will use > the built-in (compile-time) defaults. > > So your command should be > bbcmd hobbitd_alert --test tac0.lon.ws.colt.net proc > > > Regards, > Henrik > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > ************************************************************************************* The message is intended for the named addressee only and may not be disclosed to or used by anyone else, nor may it be copied in any way. The contents of this message and its attachments are confidential and may also be subject to legal privilege. If you are not the named addressee and/or have received this message in error, please advise us by e-mailing security at colt.net and delete the message and any attachments without retaining any copies. Internet communications are not secure and COLT does not accept responsibility for this message, its contents nor responsibility for any viruses. No contracts can be created or varied on behalf of COLT Telecommunications, its subsidiaries or affiliates ("COLT") and any other party by email Communications unless expressly agreed in writing with such other party. Please note that incoming emails will be automatically scanned to eliminate potential viruses and unsolicited promotional emails. For more information refer to www.colt.net or contact us on +44(0)20 7390 3900.

2 1

hobbitd_channel: enadis
by s_aiello＠comcast.net 25 Jun '08

25 Jun '08

I am trying to monitor and process communication on the enadis channel. I have been looking at messages comin in on this channel and see the following: @@enadis#6|1213126417.873757|127.0.0.1|HobbitServer|http|1213126657 @@ Which looking at the code I see the fields are: /* @@enadis|timestamp|sender|hostname|testname|expiretime */ Questions: 1. 1st field: comes in as enadis#1, enadis#2, enadis#3, etc. that #number seems to get reset whenever the hobbit daemon is reset. Any extrnal purpose for this incrementing # ? 2. The timestamp field has EPOC.Other#. What is the Other# after the period ? 3. expiretime, just looking for confirmation on possible values. EPOC for expiration time, Zero for enabling, and -1 means Until Ok ? 4. Where is the blurbage about the maint,"Disabled by:" & "Reason" ? I am running 4.2.0 With All-in-One patch. Any help would be appreciated. ~Steve

2 2

problems installing netapp.pl
by eositis＠ois.lv 25 Jun '08

25 Jun '08

Cheers- I have been struggling for the past few days to get netapppl to work on my hobbit server without luck. I have installed the sw as per the instructions and edited the relevant files. When I try to run netapp.pl manually it errors stating that the relevant netapp is not listed in the bbhost file. The server is listed servername ipaddr # netapp The usual tests run and results are shown on the webpage for conn, http, info, sslcer, trends. However none of the disk etc. info is shown. Hobbit has been upgraded to 4.2.0 and the latest allinone patch has been added. Perl has been updated to 5.8.8. The system is suse 9.3. At the moment I am not sure how to proceed and assistance would be appreciated. Sincerely, Elmars -- -------------------------------------------------------- Elmārs Osītis Valdes loceklis "OIS", sia Dubultu Prospekts 77, Jūrmala LV-2008 tel: +371 67767673 fax: +731 67767674 mailto:eositis at ois.lv http://www.ois.lv

3 5

Tracking file sizes
by michael.nemeth＠lmco.com 25 Jun '08

25 Jun '08

First: Sol9 sparc 4.2 with latest allinone patch in hobbit-client.cfg FILE /etc/ypfiles/passwd TRACK=passwd in client-local.cfg file:/etc/ypfiles/passwd size of file is 66758 But the graph show way out sizes!: cur:286723427454063.0 Search thought the archive I found someone with the same problem but they never got answer. Any Ideas whats wrong?

3 3