December 2009 - Xymon - Xymon mailman web

Building hobbit-nkview.cfg from cmdb (Critical systems view)
by franchu.garcia＠gmail.com 22 Dec '09

22 Dec '09

Hi all, I'm trying to generate the hobbit-nkview.cfg file from an external source (our CMDB) and not using the Critical systems editor, hobbit-nkedit.sh . As I've being unable to find docs on the format for the hobbit-nkview.cfg file, I'm just hoping you help me to gather the relevant into. The requirements are: - All monitored hosts are subject to appear in the Critical systems view. - All hosts are applied Prio3 by default. - Some checks (columns) may have higher priority than host's default. ie: load-balanced host is prio3 but http check in that host is prio2. Playing around with the editor, I've being able to produce this : # fake host definition that all unix hosts inherit dummy_unix_template|content||||2|Group in charge|| dummy_unix_template|cpu||||2|Group in charge|| dummy_unix_template|disk||||2|Group in charge|| dummy_unix_template|files||||2|Group in charge|| dummy_unix_template|fullduplex||||2|Group in charge|| dummy_unix_template|hardware||||2|Group in charge|| dummy_unix_template|http||||2|Group in charge|| dummy_unix_template|info||||2|Group in charge|| dummy_unix_template|memory||||2|Group in charge|| dummy_unix_template|meta||||2|Group in charge|| dummy_unix_template|msgs||||2|Group in charge|| dummy_unix_template|network||||2|Group in charge|| dummy_unix_template|ntp||||2|Group in charge|| dummy_unix_template|ping||||2|Group in charge|| dummy_unix_template|ports||||2|Group in charge|| dummy_unix_template|procs||||2|Group in charge|| dummy_unix_template|raid||||2|Group in charge|| dummy_unix_template|ssh||||2|Group in charge|| dummy_unix_template|sslcert||||2|Group in charge|| dummy_unix_template|temp||||2|Group in charge|| dummy_unix_template|timediff||||2|Group in charge|| dummy_unix_template|updates||||2|Group in charge|| # real servers actual_unix_host1|=dummy_unix_template actual_unix_host2|=dummy_unix_template ...etc However this has a number of drawbacks : - I've being unable to find a regexp to match all columns. Then it makes necessary to know in advance all the columns that all hosts can have (and involve the development team each time a new column is required). - It's also a problem since most of our HTTP checks are named content_* , ie: content_InternalURL , content_APP1, etc). any ideas? best regards

2 1

Question about RRDTOOL Graphs in Xymon
by fredbo＠club-internet.fr 22 Dec '09

22 Dec '09

Hi all, In Xymon normaly we can see some statistics in each graphs , example for load average on last 48 hours, we have : max min average. My question : Is Xymon or Rrdtool store these results in a text format file or it is "dynamic" ? My conf is Solaris 10 / Xymon 4.2.3 and Rrdtool 1.2.9 Thanks Best Regards, FB

3 2

TS - hobbitpasswd
by d.tom.schmitt＠L-3com.com 21 Dec '09

21 Dec '09

Is there a way to use Active Directory credentials instead of or in addition to the hobbitpasswd file? This is to satisfy the Windows server group? Thanks, Tom Schmitt Senior IT Staff - R&D Phone (801) 594-3030 Cell (801) 231-7230 eFax (413) 480-6873 D.Tom.Schmitt at L-3Com.com \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo--

2 1

Tinh Do is out of the office.
by tinh.do＠continental-corporation.com 21 Dec '09

21 Dec '09

I will be out of the office starting 12/21/2009 and will not return until 01/04/2010. If you have any urgent needs please call me on my cell. I will respond to your message when I return.

1 0

BBWin Question
by andreas.sin＠itc.alstom.com 21 Dec '09

21 Dec '09

Hello In the Hobbit Webinterface when you click on the "trends" icon you get an overview of different diagrams for the last 48 hours such as CPU load, Disk utilisatization, memory utilization, etc. There is also one diagram for "users and processes". Actually the amount of users is permanently at 0 (zero) although it's a terminal server, where I have up to 40 users working concurrently day by day. Does somebody know, based on what hobbit is gathering the informations about the # of users? I mean based on which command? It would be perfect, if hobbit would be able to count the ica sessions. Is there a possibility to get those informations monitored? cheers Andi Kind regards / Freundliche Grüsse Andreas Sin, System Engineer ALSTOM (Switzerland) Ltd. (ITSSC) IT Shared Service Centre _____________________________________________ Group Data Centre Baden Brown Boveri Strasse 7 5401 Baden Switzerland Tel: +41 (0)56 205 12 21 Mobile: +41 (0)79 619 35 36 e-Mail : andreas.sin at itc.alstom.com Mit Alstom das Klima schützen. Ist es wirklich notwendig diese Email zu drucken? With Alstom, preserve the environment. Is printing this email really necessary ? :._______________ VERTRAULICHKEIT: Dieses e-mail und alle angehängten Dateien sind vertraulich und privilegiert. Sollten Sie nicht als namentlicher Empfänger aufgeführt sein, informieren Sie unverzüglich den Absender und machen Sie den Inhalt nicht für Dritte zugänglich, noch darf dieser gedruckt oder für andere Zwecke verwendet, kopiert oder auf irgend einem Medium gespeichert werden. CONFIDENTIALITY : This e-mail and any attachments are confidential and may be privileged. If you are not a named recipient, please notify the sender immediately and do not disclose the contents to another person, use it for any purpose or store or copy the information in any medium.

2 2

MEMPHYS went nuts
by jkikpole＠cairodurham.org 20 Dec '09

20 Dec '09

I've been setting up Xymon since I heard about it a couple of days ago. So far, its fantastic. Unfortunately, after a UPS malfunction that caused a whole room to restart, I have an inexplicable alarm. Take a look at this red alarm: Memory Used Total Percentage Physical 4294964640M 4084M 4294967231% Swap 0M 4096M 0% This is from a FreeBSD 7.x box that has 8GB of physical RAM and 4GB of swap. According to "top", the physical memory is still about 6.75GB free. I've restarted the daemon on the host in question as well as on Xymon's GUI/web server. I've even tried a bin/bb 127.0.0.1 "drop HOSTNAME memory" just to see if it would help. I'm not even sure where to start on this. It was working well for a day or so before going bad like this. My best guess right now is some kind of "wrap-around" problem with an integer or something like that causing bad data in memory. Suggestions? Thanks in advance, Jaime P.S. - The alarm is at the following URL, if that helps: http://cns.cairodurham.org/hobbit-cgi/bb-hostsvc.sh?HOST=cerberus.cairodurh… -- Network Administrator Cairo-Durham Central School District http://cns.cairodurham.org

3 6

Monitoring SMTP Relay server using hobbit
by bala150985＠gmail.com 19 Dec '09

19 Dec '09

Hi I have two Windows 2003 server which works as SMTP relay server. What are the key parameter of the server should I monitor from Xymon. I want to check certain parameters like 1. If the Mail server is accepting mails. 2. If the Mail Server is able to relay it to the next server. 3. Is my Mail relaying server free from open relaying and stuffs, How could I achieve all these using Xymon? I have BBNT "An NT/W2K **CLIENT** for Big Brother System & Network Monitor Version 1.08d" on all the Windows 2003 servers.

2 1

Critical alerts page and acks
by lebarber＠gmail.com 18 Dec '09

18 Dec '09

I am having a problem with the nkview page. "Acked" alerts do not disappear off the page, they stay on the Critical Systems page, without even a check mark to indicate that they have been acked. The check mark does show up on the normal page for that host and the acknowledgment text is displayed on the test page. Has anybody seen behavior like this, or have any idea what could be causing it? Thanks, Larry Barber

1 0

TS - YELLOW problem in history
by d.tom.schmitt＠L-3com.com 18 Dec '09

18 Dec '09

I have a problem on a Windows server/PC that shows YELLOW on UP-TIME using the BBWin server? The server has been rebooted many times, etc. The History shows: Top of Form Bottom of Form 2009-Dec-18 09:10:41 [netsupport.csw.L-3com.com] - uptime machine has been up more than 365 days 2040 days 20 hours 2 minutes 46 seconds Status unchanged in 4 days,3 hours, 37 minutes Status message received from 128.170.7.16 The XYMON system has only been up for less than a year? This server also shows in the event log that: Top of Form Bottom of Form 2009-Dec-18 09:12:30 [netsupport.csw.L-3com.com] application: warning - 2009/12/18 09:05:10 - OMCI (1253) - n/a "Chassis intrusion detected. This typically does NOT indicate a hardware failure. 1. Contact your Help Desk if you did not personally open your chassis. 2. Enter System Setup & Set Chassis Intrusion to 'Clear'." application: warning - 2009/12/18 08:35:10 - OMCI (1253) - n/a "Chassis intrusion detected. This typically does NOT indicate a hardware failure. 1. Contact your Help Desk if you did not personally open your chassis. 2. Enter System Setup & Set Chassis Intrusion to 'Clear'." EventLog Statistics: - application 10463 events since 406 days (25.77 events/day) current size is 4544 kb (max size is set to 5120 kb) retention is set to : Overwrite events as needed - internet explorer error : can't get eventlog file path 0 events since 14596 days (0.00 events/day) current size is 0 kb (max size is set to 0 kb) retention is set to : Overwrite events as needed - security 3467 events since 311 days (11.15 events/day) current size is 1600 kb (max size is set to 5120 kb) retention is set to : Overwrite events as needed - system 24253 events since 255 days (95.11 events/day) current size is 5120 kb (max size is set to 5120 kb) retention is set to : Overwrite events as needed Summary: - Events Analyzed: 2 - Events Matched: 2 - Events Ignored: 0 Status unchanged in 2 days,0 hours, 2 minutes Status message received from 128.170.7.16 Can you give me a place to begin correcting this problem. Thanks, Tom Schmitt Senior IT Staff - R&D Phone (801) 594-3030 Cell (801) 231-7230 eFax (413) 480-6873 D.Tom.Schmitt at L-3Com.com \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo--

3 2

running BB 4.2 and Xymon on the same host
by rolands＠logicaltech.com.au 18 Dec '09

18 Dec '09

Hi, I've just discovered Xymon, I have a Quest BB 4.2 server right now. BB is really buggy and most things don't work, and there is no real support, even though you pay for it... I'm stuck with the BB server for production. I would like to install Xymon on the same server for testing. Is this possible? Maybe I need to change the 1984 port for Xymon bbd. I could just use another virtual host on any port for the apache2 server. The problems I see is the clients sending bb data to both BB and Xymon. And running both BB and Xymon servers on the same host. Any ideas how to set this up? For infrastructure reasons I can't just setup another server, it is a lot of job as the BB server is in a DMZ. All servers are running Solaris 9/10 - Roland

2 1