November 2009 - Xymon - Xymon mailman web

How do you check the status from other column from scripts?
by Jimmy.Aulestia＠telefonica.com.ec 27 Nov '09

27 Nov '09

How can i check or query the values from a other column in a script? I wooul like to execute a script1 that create the COLUMN 1, this script1 use the status, maybe COLOR o hobbitgraph variable from a COLUMN2 Greetings, Jimmy Aulestia ADMINISTRACION 0&M PLATAFORMA DE VOZ Movil: 08 771 4041 Oficina: 099996503 / 2227700 - ext 6503 Jimmy.Aulestia at telefonica.com.ec <mailto:Jimmy.Aulestia at telefonica.com.ec>

4 3

clientupdate The client did not report any logfile data and rrd-data.log error updating
by william.wagner＠ipacc.com 25 Nov '09

25 Nov '09

I am running xymon 4.2.3 on a solaris platform. I am deployed to 300+ clients and all is working. Today I decided to use clientupdate for the first time. The two clients I configured to receive the updates were updated but now the 'msgs' test on both clients returns "No log data available" and "The client did not report any logfile data". All other tests are still working. in a probably unrelated issue, I also see persistent messages in rrd-data.log: 2009-11-25 10:47:16 RRD error updating /export/home/xymon/data/rrd/<hostname>/ifstat.mac.rrd from <IP>: illegal attempt to update using time 1259167636 when last update time is 1259167636 (minimum one second step) any idea what is going on? thanks

1 0

AntiSpam & RBL Hits - Does it Make Sense to Monitor?
by wiskbroom＠hotmail.com 24 Nov '09

24 Nov '09

Hello All; Well, the more you play with Xymon, the more uses you come up with for it. For example, I am responsible for our AV/antispam/Postfix server, on that server we block inbound email based on anything from being on our "do not allow" list, to being on one of two RBL's we use, and of course being identified as either spam or a virus. So where am I going with this? I'd like to know if anyone out there is monitoring something similar, and query you folks to see if this even makes sense for Xymon? One reason why I'd like to add this into Xymon is that we already use too many "tools", and I'd like to either rid us of some of these or condense some of them into just one tool where possible. Of course having Xymon with its rrd graphs would play an important role too since my management would love to see that data in a graphical representation. Thanks all in advance, .vp

4 3

Procs --> output of a process from ps -ef is too long
by camorae＠googlemail.com 24 Nov '09

24 Nov '09

Hello guys, im having some problems to monitor processes with a long output (most of them are java processes). Hobbit seems to cut the output at certain size and i have to look for a string which appears at the end of the output. where can i change this length limit? tia, Cayo

5 9

Optimizing Xymon disk performance (was: Moving RRD processing to another server)
by henrik＠hswn.dk 24 Nov '09

24 Nov '09

Hi Greg, I've taken the liberty of sending this to the Xymon list also, since it is probably of general interest. On Mon, Nov 02, 2009 at 11:39:09AM -0500, shea_greg at emc.com wrote: > > I'm having some trouble trying to figure out how to off-load RRD > processing with the 4.3.0 code. I found hobbitd_locator and that's > part of it, as well as hobbitd_channel, but it's not clear to me > how to setup the master and peer(s). Also how does this affect > the webpage generation? > > From earlier posts to the list, I have a single server running 4.2.0 > with over 70000 RRD files and I'm experiencing serious delays in processing > data and have to restart Hobbit every 15 minutes. One solution I'm aware > of and also Buchan had mentioned is to add more spindles. The standard 4.3.0 beta adds caching of RRD file updates, and this has a significant impact on the I/O load of the server - essentially, it means that hobbitd_rrd caches up to 12 updates (= 1 hour) before it does an actual update of the RRD file. Since the amount of disk I/O is almost identical whether you're doing one data update or 50, this caching eliminates about 90% of your disk I/O on the RRD files. So that would be the simplest solution to implement. I have 90000+ RRD files. I recently did a hardware upgrade of the server, but it isn't anything fancy - just a plain HP DL360 with a set of two 36 GB SCSI disks in hardware RAID-1. I used to off-load the RRD handling to another server, but it is now back on the main Xymon server. The amount of memory used for the cache isn't all that much - about 50 MB on my system. The only downside to this is that shutting down Xymon means all of the cached data must be flushed to disk - and this take a while, 10-15 minutes on my system. Another optimization to eliminate disk I/O is to move the generated webpages to a RAM disk. I have ~hobbit/server/www/ on a ram-disk; the gifs, help, menu, notes, rep and snap sub-directories are symlinks that point to "real" (disk-based) storage. This means all of the webpages that are re-generated once a minute resides on a RAM disk, eliminating all of the disk I/O that rewriting them causes. And since they are regenerated so often, it doesn't matter that they're wiped out when you reboot the server - they are regenerated within a minute after you have Xymon up and running again. But the remote RRD off-loading works, I've used it for more than a year. Here's how to set it up. First, webpage-generation is unchanged, it still happens on the main Xymon server and the fact that the RRD files are stored somewhere else is transparent. The main server runs the hobbitd_locator, which keeps track of where each of the hosts store their RRD files. The RRD server(s) only run hobbitd_rrd, and a webserver. On the main server, add these entries to your hobbitlaunch.cfg: [locator] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg LOGFILE $BBSERVERLOGS/locator.log NEEDS hobbitd CMD hobbitd_locator --listen=0.0.0.0:9000 [netrrd-status] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg NEEDS locator CMD hobbitd_channel --channel=status \ --log=$BBSERVERLOGS/netrrd-status.log \ --locator=127.0.0.1 \ --service=rrd [netrrd-data] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg NEEDS locator CMD hobbitd_channel --channel=data \ --log=$BBSERVERLOGS/netrrd-data.log \ --locator=127.0.0.1 \ --service=rrd The locator listens on port 9000 - it is a UDP based service (like DNS), so you may need to open up some firewalls to reach it. On the RRD offload-servers, you run only the hobbitd_rrd modules with some additional options that tell it to listen for data from a network connection. Here's the hobbitlaunch.cfg entry, assuming your main Xymon server has IP 192.168.1.1 and the RRD off-load server has IP 192.168.1.2: [netrrd-worker] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg CMD hobbitd_rrd \ --log=$BBSERVERLOGS/netrrd-status.log \ --rrddir=/var/lib/hobbit/rrd \ --locator=192.168.1.1:9000 \ --listen=192.168.1.2:9001 \ --locatorid=192.168.1.2:9001 \ --locatorextra=http://192.168.1.2/hobbit-cgi/ OK, this is a bit complicated - I'll try to explain what these options do. hobbitd_locator needs to know that this RRD-offload-server exists, and what hosts it is handling RRD files for. So hobbitd_rrd must announce itself to the locator - so the "--locator" option tells it how to contact the locator. hobbitd_rrd receives data from the remote hobbitd_channel over a network connection, so the "--listen" option tells it what IP and port-number it will use to listen for incoming connections from hobbitd_channel. The IP/portnumber that hobbitd_rrd listens on may not be the one that hobbitd_channel should use, because the RRD offload server could be hidden behind a NAT firewall or some other network-based address translation might be taking place. So the "--locatorid" option announces the IP+portnumber that hobbitd_channel should use to connect to the hobbitd_rrd service from the outside. Normally there is no NAT'ing, so "--listen" and "--locatorid" are identical. Finally, the "--locatorextra" tells the Xymon web-page tools what URL they should use when generating links to the Xymon graphs. Since the RRD files are no longer stored on the main Xymon server, you cannot access them via the same URL prefix that you use for all of the other Xymon webpages and CGI's - the "--locatorextra" option is used to tell Xymon what the URL is for the graphs. And yes, this means you will need to run a separate webserver on the RRD off-load server. When hobbitd_rrd starts up with these options, it will first contact the locator and tell it "hey, I can handle RRD files - if someone wants to send me some RRD data, they can contact me on 192.168.1.2 port 9001. And please pass this information to anyone who asks for it: http://192.168.1.1/cgi-bin". It then proceeds to scan the RRD directory to determine which hosts it has RRD files stored for, and for each host it then tells the locator "Hi, I am the RRD server on 192.168.1.2:9001, and I have RRD files for host foo.bar.com". After that, it just leans back and waits for someone to connect to it. Over on the main Xymon server, the hobbitd_channel modules are receiving data about RRD updates. Each time a new message arrives, they'll ask the locator "where are the RRD files stored for host abc1.bar.com" ? If the locator knows, then it will respond with the IP:portnumber of the RRD-server handling this host; if it knows that none of the known RRD servers handle this host (i.e. it is a new host) then it will just hand out the IP:portnumber of one of the RRD servers so new hosts can be added. When the hobbitd_channel module is told "send data for foo.bar.com to the RRD server at 192.168.1.2:9001" it will establish a TCP connection to that port (if it doesn't have one open already), and send the data to it. When hobbitd_rrd receives a new connection, it spawns an extra process to handle the connection, which receives the data and then does the actual RRD update. The connections between hobbitd_channel and the RRD offload-server are persistent, so once it is up and running you'll see two connections to your RRD offload server; one for each of the hobbitd_channel instances. The final piece of the puzzle is when you view the detailed status-log on the webpage, and the graph must show up on that page. The hobbitsvc.cgi utility will ask the locator "where are the RRD files for host foo.bar.com?" and get a response that includes the extra data that the locator was asked to pass on to anyone who asked. hobbitsvc.cgi knows that this data is the base of the CGI-URL for the RRD graph CGI, so instead of generating a link to the image URL on the main Xymon webserver, it generates a link that points to the RRD off-load server. The browser contacts the webserver running on the RRD-server, and the image is generated by the RRD-server. I hope that is enough to get you going. Regards, Henrik

4 5

New Xymonton feature
by Galen.Johnson＠sas.com 23 Nov '09

23 Nov '09

Greetings folks I figured while I was focused on updating the Xymonton site, I would add something new. There is now a hidden tag that can be used to collapse a block of, well, whatever. I used it to collapse those long sections of code. I've updated the page templates to include it and editted all the existing pages to add it. Hopefully, it will make some of the pages a bit more readable. While I was at it, I fixed a few pages that made no attempt to use the templates and made some minor modifications to a few others. I'm also looking into some other additions, including captcha...which seems to be sort of working. I may be missing a required module but I'll deal with that later. Remember, until the new dns propagates, you can get to the site at http://www.trantor.org/xymonton as well. =G=

3 2

[hobbit] Re: Devmon causing core dumps
by bgmilne＠staff.telkomsa.net 23 Nov '09

23 Nov '09

On Friday 31 October 2008 19:55:35 Robert Holden wrote: > When I run snmpwalk on my interfaces I get the following: > (I believe that the devmon template is using this ... notice that they are > all the same. Depending on the SNMP implementation (and may differ on different IOS versions). > A transform won't help) > IF-MIB::ifName.70 = STRING: AT5/0/0 > IF-MIB::ifName.71 = STRING: AT5/0/0 > IF-MIB::ifName.72 = STRING: AT5/0/0 > IF-MIB::ifName.73 = STRING: AT5/0/0 > IF-MIB::ifName.74 = STRING: AT5/0/0 One of our 7613's has: IF-MIB::ifName.1 = STRING: Gi3/1 [...] IF-MIB::ifName.128 = STRING: ATM10/1/0.0-atm subif IF-MIB::ifName.129 = STRING: ATM10/1/0-aal5 layer IF-MIB::ifName.130 = STRING: ATM10/1/0.0-aal5 layer IF-MIB::ifName.131 = STRING: VLAN-1 > (This could be used, but you would end up w/ very long names. G0/0 would > become GigabitEthernet0/0) > IF-MIB::ifDescr.70 = STRING: ATM5/0/0 > IF-MIB::ifDescr.71 = STRING: ATM5/0/0-atm layer > IF-MIB::ifDescr.72 = STRING: ATM5/0/0.0-atm subif > IF-MIB::ifDescr.73 = STRING: ATM5/0/0-aal5 layer > IF-MIB::ifDescr.74 = STRING: ATM5/0/0.0-aal5 layer On the same device as above: IF-MIB::ifDescr.1 = STRING: GigabitEthernet3/1 [...] IF-MIB::ifDescr.128 = STRING: ATM10/1/0.0-atm subif IF-MIB::ifDescr.129 = STRING: ATM10/1/0-aal5 layer IF-MIB::ifDescr.130 = STRING: ATM10/1/0.0-aal5 layer IF-MIB::ifDescr.131 = STRING: unrouted VLAN 1 > (This may be helpful ... somehow ignore all type 37 and type 49, and sub > interface 0 ??) > IF-MIB::ifType.70 = INTEGER: sonet(39) > IF-MIB::ifType.71 = INTEGER: atm(37) > IF-MIB::ifType.72 = INTEGER: atmSubInterface(134) > IF-MIB::ifType.73 = INTEGER: aal5(49) > IF-MIB::ifType.74 = INTEGER: aal5(49) But, in my case, I want to graph: IF-MIB::ifName.103 = STRING: ATM10/1/0.1-aal5 layer (it is the only interface which shows the correct traffic) > I will open a bug if you like. Is the issue that originated this thread > the same as the one I am experiencing? Well, there are two aspects to the bug: 1)Devmon should strip invalid characters out of interface names for the RRD data sent with the status message. 2)The Hobbit RRD collector module for devmon should not segfault if data is not in the format: <name_without_spaces> value[:value[:value]] Regards, Buchan

2 3

xymonton down ???
by doctor＠makelofine.org 23 Nov '09

23 Nov '09

An HTML attachment was scrubbed... URL: <http://lists.xymon.com/pipermail/xymon/attachments/20091121/e3f268fb/attach…>

7 11

not getting ssh status for any host
by pankaj.dorlikar＠gmail.com 23 Nov '09

23 Nov '09

Hi, i have xymon4.2.2 and rhel 5.2 os.i have a server and 120 clients. on some of the clients,i was getting purple status for ssh.then i removed it by using ./bb 127.0.0.1 "drop clientname ssh" on server and the purple status gone for those clients but now there is no status for ssh on display page for client.I want green status for ssh for all clients again.what should i do?Rest all thins are ok. My hostfile is like: page rack001 Yuva Compute title YUVA Compute subpage rack900 Row1-Rack6 conn group-only conn 172.29.1.49 mn49.mgmt.acc.in # 172.29.1.50 mn50.mgmt.acc.in # 172.29.1.51 mn51.mgmt.acc.in # 172.29.1.52 mn52.mgmt.acc.in # 172.29.1.53 mn53.mgmt.acc.in # 172.29.1.54 mn54.mgmt.acc.in # subpage rack901 cpu group-only cpu 0.0.0.0 mn49.mgmt.acc.in # noconn 0.0.0.0 mn50.mgmt.acc.in # noconn 0.0.0.0 mn51.mgmt.acc.in # noconn 0.0.0.0 mn52.mgmt.acc.in # noconn 0.0.0.0 mn53.mgmt.acc.in # noconn 0.0.0.0 mn54.mgmt.acc.in # noconn subpage rack904 ssh group-only ssh 0.0.0.0 mn49.mgmt.acc.in # noconn 0.0.0.0 mn50.mgmt.acc.in # noconn 0.0.0.0 mn51.mgmt.acc.in # noconn 0.0.0.0 mn52.mgmt.acc.in # noconn 0.0.0.0 mn53.mgmt.acc.in # noconn 0.0.0.0 mn54.mgmt.acc.in # noconn ....and so on Kindly help Regards, pankaj

6 12

OpenSUSE 11.1: Devmon: Perl-Compile-Error for BER.pm
by hj.beckers＠kreis-steinfurt.de 23 Nov '09

23 Nov '09

Hi all, This question is neither xymon nor devmon specific, I think, so I ask here, because I'm subscribed to this list ... Starting devmon complains about a missing BER.pm: "./devmon Can't locate BER.pm in @INC ( @INC contains: /home/xymon/devmon-0.3.1-beta1/modules /usr/lib/perl5/5.10.0/x86_64-linux-thread-multi /usr/lib/perl5/5.10.0 /usr/lib/perl5/site_perl/5.10.0/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.10.0 /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.10.0 /usr/lib/perl5/vendor_perl .) at /home/xymon/devmon-0.3.1-beta1/modules/dm_snmp.pm line 24. BEGIN failed--compilation aborted at /home/xymon/devmon-0.3.1-beta1/modules/dm_snmp.pm line 24. Compilation failed in require at ./devmon line 25. BEGIN failed--compilation aborted at ./devmon line 25." but according to the following find it is there: "find /usr -name BER.pm -print /usr/lib/perl5/vendor_perl/5.10.0/Convert/BER.pm" Do I have to include the complete Path to BER.pm in @INC? Yours hjb

2 2