January 2009 - Xymon - Xymon mailman web

Are custom alert colours possible?
by spa＠syntec.co.uk 29 Jan '09

29 Jan '09

If the only times I want to send an alert on a yellow are for custom tests, can I change yellow to orange in hobbitserver.cfg as below? ALERTCOLORS="red,yellow,purple" # Colors that may trigger an alert message OKCOLORS="green,blue,clear" # Colors that may trigger a recovery message To: ALERTCOLORS="red,orange,purple" # Colors that may trigger an alert message OKCOLORS="green,blue,clear" # Colors that may trigger a recovery message And then specify orange as a colour to be used by my custom test (if I want an alert)? Or are there some hard-coded assumptions about what colours are possible? I quick look in hobbitd_alert.c seems to suggest it might be possible, given this line: alertcolors = colorset(xgetenv("ALERTCOLORS"), ((1 << COL_GREEN) | (1 << COL_BLUE))); And the fact there is no mention of 'yellow' in the file, apart from in the comments. I was thinking that if I can eliminate yellow as an ALERTCOLOR, then it might solve the issues I have posted about this week in another thread... Kind regards, SebA

1 0

Fine grained access control
by philwild＠gmail.com 29 Jan '09

29 Jan '09

Hi Henrik/xymon users, I am not sure what the process for RFE's is but I have a request for an enhancement that is beyond what I can do with my non existent C programming skills... It would be nice if you could set up a finer grained access control within xymon. For example, set up a group for Oracle DBA's and then only give them access to hosts and/or tests that have been added to that group. I know it is possible to restrict views to certain pages using apache authentication and basic security and we use this, but more is needed above this that I believe can only be addressed within the code. For example. the defined groups should only be able to ack and disable/enable items associated with their group provided the group has been given permission to do that. It would also be nice to restrict the viewing of certain test columns to certain groups as well bb2 pages and reports etc... Thoughts? Cheers Phil

2 1

[trunk] snmp: ifmib question
by obeau79＠gmail.com 29 Jan '09

29 Jan '09

Hi, I started playing with xymon's snmp (hobbit-snmpmibs.cfg and hobbit-snmphosts.cfg) Looks like i could get ride of mrtg ;) I would like to know is there is some sort of fancy cgi to view all the stuff graphed in ifmib ? (viewing graphs from a 48 ports switch, using the "trends" column is going to a painful..) Olivier

1 0

[trunk] rrdcache flush for hobbitgraph.sh ?
by obeau79＠gmail.com 29 Jan '09

29 Jan '09

Hello, From the manual, i understand that rrd updates are flushed on disk every 30 minutes. I'm wondering if hobbitgraph.sh display graphs from the rrd on disk and if there is a kind a "flush rrdcache" for that hosts on cgi calls ? Olivier

1 0

Windows Updates in Hobbit
by xtheox40＠hotmail.com 29 Jan '09

29 Jan '09

Hi There, Are you able to post the code required to get Windows Updates displaying in hobbit As per the nagios external site e.g. Updates ready: 3Title: Security Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB960714)Reboot behavior: A reboot might be required after installation.KB article: 960714 Thanks,Theo Get what you want at ebay. Get rid of those unwanted christmas presents! _________________________________________________________________ Want to marry your mail? Combine your email accounts here! http://livelife.ninemsn.com.au/article.aspx?id=669758

1 0

Hostname aliases
by Padraig.Lennon＠pioneerinvestments.com 29 Jan '09

29 Jan '09

Hi, I have a windows server which has multiple DNS entries. Is it possible to configure an alias for the different names? i.e. Server is actually called prodwinserver1.domain.com put also has another reference devwinserver1.domain.com I would like to show the host in seperate pages which are exposed to different groups. Each should only see their reference to the server: i.e. The prod group should see prodwinserver1.domain.com The dev group should see devwinserver1.domain.com Is this possible? regards, Padraig Lennon Senior Systems Integration Engineer Pioneer Investments Management Ltd 5th Floor | 1 Georges Quay Plaza | Georges Quay | Dublin 2 | Rep. of Ireland. Tel. +353 (0)1 480.2081 | Fax. +353 (0)1 480.1111 padraig.lennon at pioneerinvestments.com <mailto:firstname.surname at pioneerinvestments.com> | www.pioneerinvestments.com Please consider the environment before printing this e-mail

1 0

[trunk] coredump on hobbitfetch
by obeau79＠gmail.com 29 Jan '09

29 Jan '09

$ /data/hobbit/server$ gdb bin/hobbitfetch tmp/core GNU gdb 6.4.90-debian Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i486-linux-gnu"...Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/lib/libz.so.1...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /lib/tls/i686/cmov/libc.so.6...done. Loaded symbols for /lib/tls/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Core was generated by `/data/hobbit/server/bin/hobbitfetch --server=127.0.0.1 --no-daemon --pidfile=/d'. Program terminated with signal 6, Aborted. #0 0xb7f4f410 in ?? () (gdb) bt #0 0xb7f4f410 in ?? () #1 0xbfc2ed9c in ?? () #2 0x00000006 in ?? () #3 0x0000734c in ?? () #4 0xb7e28811 in raise () from /lib/tls/i686/cmov/libc.so.6 #5 0xb7e29fb9 in abort () from /lib/tls/i686/cmov/libc.so.6 #6 0x08051a01 in sigsegv_handler (signum=11) at sig.c:58 #7 0xb7f4f420 in ?? () #8 0x0000000b in ?? () #9 0x00000033 in ?? () #10 0x00000000 in ?? () (gdb)

3 6

hobbit
by mpushpalatha123＠gmail.com 29 Jan '09

29 Jan '09

Hi, I need to know to how to generate hobbit report in excel format -- With Regards Pushpalatha

4 5

Graphs stop update 24 hours after client reboot; start again 24 hours later.
by TRBrand＠cvs.com 28 Jan '09

28 Jan '09

Hi all, I need some help/suggestions to figure out why my "cpu load" and "users & processes" graphs stop updating about 24 hours after the systems reboot. The updates stop for anywhere from 12 to 24 hours, then simply start back up again. Only the "CPU load" and the "Users and Processes" graphs are having the problem; disk, memory, cpu utilization, network traffic don't miss a beat. We have a number of identically configured systems, they all reboot around 00:30 local time (they are in different time zones) Wednesday mornings. And they all stop reporting cpu-load/users-and-processes graphs sometime Thursday mornings and then start up again Thursday afternoon/Friday morning. They don't all stop/start at exactly the same time, but the majority do stop/start at the same time. I end up with about a 24 hour gap in my graphs every week. The rrd files are all updated except for the la.rrd, procs.rrd, and users.rrd: -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 16:56 clock.rrd -rw-r--r-- 1 hobbit hobbit 38536 Jan 22 16:56 disk,cvsrx.rrd -rw-r--r-- 1 hobbit hobbit 38536 Jan 22 16:56 disk,root.rrd -rw-r--r-- 1 hobbit hobbit 38536 Jan 22 16:56 ifstat.eth0.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 00:38 la.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 16:56 memory.actual.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 16:56 memory.real.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 16:56 memory.swap.rrd -rw-r--r-- 1 hobbit hobbit 57520 Jan 22 16:56 mysql.rrd -rw-r--r-- 1 hobbit hobbit 304312 Jan 22 16:56 netstat.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 00:38 procs.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 16:57 tcp.conn.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 16:59 tcp.ssh.rrd -rw-r--r-- 1 hobbit hobbit 19552 Jan 22 00:38 users.rrd -rw-r--r-- 1 hobbit hobbit 323296 Jan 22 16:56 vmstat.rrd I've restarted the hobbit client and the hobbit server; no help. Any pointers/suggestions would be very welcome! Tom Tom Brand CVS/pharmacy

2 2

[hobbit] hobbit-alerts.cfg: behaviour of TIME and DURATION together
by spa＠syntec.co.uk 28 Jan '09

28 Jan '09

Bizarrely and somewhat contradictory to the behaviour below is the behaviour of DURATION well inside of the times specified with the TIME rule. Is DURATION not reset when the colour of the alert changes??? That seems to be the only explanation for what I'm seeing (though it is early days to be certain). Or, to put it another way, is DURATION the non-green DURATION, rather than the duration of being in a certain colour? The config I currently have is: $pg-sebsms=me AT mysms2emailprovider.com TIME=W:0845:2355 HOST=DbR1 SERVICE=Special MAIL me AT work.co.uk COLOR=red DURATION>2 REPEAT=30 RECOVERED MAIL $pg-sebsms COLOR=red DURATION>15 REPEAT=300 RECOVERED I was hoping (and expecting) the above rules to only alert after 2 minutes and 15 minutes repectively of being red, given that COLOR=red is part of the rule. I do, however, acknowledge that there may be (rare) cases where you would want to include the yellow time in the DURATION. In which case, we really need REDDURATION, YELLOWDURATION and PURPLEDURATION rules. Or perhaps just a way of specifying how you want the DURATION to be calculated in that rule: DURATIONTYPE=<NONGREEN|LASTCHANGE> (that's either or). Or even more powerfully: DURATIONCALC=color[,color] (adds up the duration of being in these colour states). (However, this could become resource intensive if you specify DURATIONCALC=red,yellow,purple,green or something! On the other hand, one only needs to check back as far as DURATION, rather than calculate the total time in these colour states.) I am using Hobbit 4.3 (trunk) from Dec 9 2008. Looking carefully at 'man hobbitd_alert' this appears to be most relevant part: 'When a status first goes to one of the ALERTCOLORS, hobbitd_alert is notified of this change. It notes that the status is now in an alert state, and records the timestamp when this event started, and adds the alert to the list statuses that may potentially trigger one or more alert messages.' I do not, however, think that this timestamp should be what is used by the DURATION rule (it being far too simplistic), but it looks like it may very well be. Maybe this explains the behaviour I have with Big Brother's rules that I always considered a weird bug: sometimes the 'initial page delay' is not respected. This actually happened twice today and I got SMSes simultaneously from BB and Hobbit when they had 5 minute and 15 minute initial page delays respectively, and I got the SMS immediately after the red. It had however been yellow for some time before, but on BB my pagelevels is set to "red purple", so the yellow should have been ignored and not come into the equation. How frustrating! One of the main reasons I wanted to move to Hobbit was to eliminate this 'bug' in Big Brother! Still awaiting a reply on my message below BTW. Given my unfortunate theory, above, on what is going here, I suspect the TIME rule is causing this magic timestamp to never be recorded! Somehow it appears to be taking precedence over the DURATION rule when I wish the DURATION rule to take precedence (and I think that is more logical: if I wanted to mark it as downtime, I'd have put the TIME rule into bb-hosts not hobbit-alerts.cfg!). ;) 'man hobbitd_alert' could be clearer, e.g. on how rules interact with each other! Many thanks, SebA _____ From: SebA [mailto:spa at syntec.co.uk] Sent: 27 January 2009 14:35 To: hobbit at hswn.dk Subject: [hobbit] hobbit-alerts.cfg: behaviour of TIME and DURATION together It seems the combination of TIME=W:0845:2355 and DURATION>15 in hobbit-alerts.cfg means the earliest an alert can be sent out is 9 am. Is this what you would expect? I would have expected these two rules to mean the test should be in an alarm colour for more than 15 minutes and be between the times of 08:45 and 23:55, weekdays. Instead it seems to be relating the DURATION with the time such that the DURATION only applies _during_ the TIME. If the current behaviour is intended, than will using EXTIME instead of TIME be what I want? Oh! There is no EXTIME?! I assumed there was but I see no documentation for it apart from Henrik's suggestion that he might add it: <http://www.hswn.dk/hobbiton/2006/06/msg00417.html> http://www.hswn.dk/hobbiton/2006/06/msg00417.html Kind regards, SebA

1 0