October 2010 - Xymon - Xymon mailman web

How do I IGNORE CPU alerts for specific hosts?
by willowbrookmagic＠hotmail.com 21 Oct '10

21 Oct '10

I have alerts setup for a specific page in Xymon. There are certain host that go Red and green throughout the day whichs sends out alerts. The Wintel team is aware of the issue. I would like to create an expection for these specific hosts not to send out notification. I tried this based on documention i found but its not working. IGNORE HOST=$CPU_EXCEPTION SERVICE=cpu $NOTIFICATION_GROUP Thanks

2 1

Scheduled disable causes crash?
by johan.sjoberg＠deltamanagement.se 20 Oct '10

20 Oct '10

Hi! During the last month, we have had some problems with Xymon when using scheduled disabled (added from the web interface). The first problem we had was on September 17th, when hobbitd crashed while/after running the scheduled disable. We got the following error in hobbit.log 2010-09-17 05:00:00 Fatal error in select: Bad file descriptor 2010-09-17 05:00:00 Setup complete After that incident, I enabled verbose logging for hobbitd, and turned up the logging for some other process as well. This morning at 06:00 we had a new scheduled disable. This time hobbitd just stopped logging after running the disable. The web interface did not work correctly. When clicking a test, an "Internal server error" message was displayed. Also, the bbgen test went purple (last update at 05:59:26). The only errors I have been able to find in the logs are in bb-display.log: 2010-10-05 06:00:26 xstrdup: Cannot dup NULL string 2010-10-05 06:01:26 xstrdup: Cannot dup NULL string 2010-10-05 06:02:27 xstrdup: Cannot dup NULL string 2010-10-05 06:12:30 xstrdup: Cannot dup NULL string 2010-10-05 06:13:35 xstrdup: Cannot dup NULL string 2010-10-05 06:14:39 xstrdup: Cannot dup NULL string 2010-10-05 06:24:40 xstrdup: Cannot dup NULL string 2010-10-05 06:25:41 xstrdup: Cannot dup NULL string 2010-10-05 06:26:42 xstrdup: Cannot dup NULL string 2010-10-05 06:36:47 xstrdup: Cannot dup NULL string 2010-10-05 06:37:48 xstrdup: Cannot dup NULL string 2010-10-05 06:39:54 xstrdup: Cannot dup NULL string 2010-10-05 06:40:54 xstrdup: Cannot dup NULL string 2010-10-05 06:41:54 xstrdup: Cannot dup NULL string Xymon was restarted at 06:43. Here is the hobbit.log from the time. It was too large to paste in the mail. http://pastebin.com/JuU0BHje We are running Xymon 4.2.3 on CentOS 5. Best regards, Johan Sjöberg

1 1

depends-like test for processes
by colin.coe＠gmail.com 19 Oct '10

19 Oct '10

Hi all I'm trying to do a depends-like test for processes. What I'd like is ensure that process foo is running on one of four hosts, if the process is running on more than one host or on none, a red flag should be raised. Has anyone done this previously? Thanks CC -- RHCE#805007969328369

2 2

devmon or mrtg which is good for network devices monitoring
by rigved.sharma123＠gmail.com 19 Oct '10

19 Oct '10

Hi, sorry for the earlier mail..i want to know which one is good for xymon for network devices monitoring..devmon/mrtg. Please help. Rigved ---------- Forwarded message ---------- From: <xymon-owner at xymon.com> Date: Mon, Oct 18, 2010 at 1:38 AM Subject: Returned post for xymon at xymon.com To: rigved.sharma123 at gmail.com Hi! This is the ezmlm program. I'm managing the xymon at xymon.com mailing list. I'm working for my owner, who can be reached at xymon-owner at xymon.com. I'm sorry, your message (enclosed) was not accepted by the moderator. If the moderator has made any comments, they are shown below. ---------- Forwarded message ---------- From: rigved sharma <rigved.sharma123 at gmail.com> To: xymon at xymon.com Date: Mon, 18 Oct 2010 00:08:37 +0530 Subject: devmon/mrtg which is good

7 6

Graphing issue with data that only changes once every 24 hours
by pmeech＠gmail.com 19 Oct '10

19 Oct '10

Hi All, I've been working on a VS backup solution which I have implemented using proftpd with mySQL, ftpmail (perl script) and quotas on Debian. Essentially whenever a client uploads data, ftpmail reads the transfer log from a fifo, and I've edited the perl script to send status messages through to Xymon. The solution is provided as only being used for backups and the client software sends in its own logs to our Xymon server. This is a differential backup and the client software handles the deletion of aged backup files. All is working robustly on this front and in Xymon I collect the following data for graphing: usage : 83.09 allowance : 100.00 These figures are currently sent in MB (I need to write a percentile calculation), but only once every 24 hours. This all falls over when it comes to trying to graph the data in Xymon as it is not a constant feed of data every 300 seconds like other tests. From the rrdtool documentation it seems like the data I am presenting is unsuitable for graphing in the normal method. I've tried just about every data type and I only get a line drawn when data is received (else the graph drops out on every step without data). I realise I could run a client test on the VS that runs du on each chrooted FTP folder every 5 minutes, but this seems like an unnecessary load when the data changes with the 24 hour frequency and it scales horribly. Also throwing out ~100 status messages for ~100 different clients every few minutes to one server (say if I was to only run the test every 24 hours and repeat the data sent every 5 minutes) may be a little unreliable. Possibly changing the xymon client on the VS to a server and running everything locally would be the way to go; but still load wise this isn't great when compared to the methodology of only sending data on upload - though functional I guess. Is there a way of providing a custom step in rrdtool for a single test from Xymon? Has anyone got any other ideas of how I might graph this? Am I missing something obvious? Cheers, Phil

2 1

HTML e-mails to this list are silently dropped?
by jmartin23＠csc.com 18 Oct '10

18 Oct '10

Return Receipt Your [xymon] HTML e-mails to this list are silently dropped? document: was jmartin23 at csc.com received by: at: 10/18/2010 08:13:56 AM GDT

1 0

test... ignore if this reaches the list
by jmartin23＠csc.com 18 Oct '10

18 Oct '10

Return Receipt Your [xymon] test... ignore if this reaches the list document: was jmartin23 at csc.com received by: at: 10/18/2010 08:13:11 AM GDT

1 0

help setting up SNMP traps to Xymon
by nskyrca＠syr.edu 18 Oct '10

18 Oct '10

Hello, I'm running Xymon 4.2.3 on RHEL 5.4 and I'm trying to setup Xymon to receive SNMP traps from our Oracle database servers. We are also running Oracle Enterprise Manager on another server (we call it the "grid") that monitors the Oracle database servers too, but our DBA's want to use Xymon to alert them of Oracle problems instead of the grid server so they don't get alerts from two different places. The DBA's manage OEM(therefore I'm not familiar with it), and have configured it to recieve SNMP traps and send them to Xymon. I configured the Xymon server to receive traps using the documentation at http://cerebro.victoriacollege.edu/hobbit-trap.html. We do receive traps, but there are two problems: 1- The trap status diamond does not change color when it gets a trap or when the trap clears. My understanding is that this is set in the Oracle MIBS that are translated to the /etc/snmp/snmptt.conf.oracle file. I'm not sure how to change the file to get it to give different alerts. If I change the word "NORMAL" in the following line to "SEVERE" the trap status will go red, but will not return to green when the trap clears. Any suggestions on how to fix this? EVENT oraEM4Alert .1.3.6.1.4.1.111.15.2.0.1 "Status Events" Normal 2- The traps status changes for the grid server instead of the database server with the problem. Drilling down into the "trap" status, you will see an error for the database server though. The snmptrapd.log and snmptt.log files (examples below) show the traps coming from the grid server. Does anyone know how to get the traps to appear under the database server name rather than the grid server? Example snmptrapd.log entry (host name changed): 2010-10-14 19:04:49 grid-server [xxx.xxx.xxx.xxx] (via UDP: [xxx.xxx.xxx.xxx]:51617) TRAP, SNMP v1, community public .1.3.6.1.4.1.111.15.2 Enterprise Specific Trap (1) Uptime: 0:06:31.00 .1.3.6.1.4.1.111.15.1.1.1.2.1 = STRING: "DB00157.world" .1.3.6.1.4.1.111.15.1.1.1.3.1 = STRING: "Database Instance" .1.3.6.1.4.1.111.15.1.1.1.4.1 = STRING: "database-server " .1.3.6.1.4.1.111.15.1.1.1.5.1 = STRING: "Status".1.3.6.1.4.1.111.15.1.1.1.6.1 = "" .1.3.6.1.4.1.111.15.1.1.1.7.1 = "" .1.3.6.1.4.1.111.15.1.1.1.8.1 = STRING: "Oct 14, 2010 7:04:00 PM EDT" .1.3.6.1.4.1.111.15.1.1.1.9.1 = STRING: "Critical" .1.3.6.1.4.1.111.15.1.1.1.10.1 = STRING: "Failed to connect to database instance: ORA-01033: ORACLE initialization or shutdown in progress (DBD ERROR: OCISessionBegin)." .1.3.6.1.4.1.111.15.1.1.1.11.1 = STRING: "Test SNMP database-server DB Down " .1.3.6.1.4.1.111.15.1.1.1.12.1 = STRING: "SYSMAN" .1.3.6.1.4.1.111.15.1.1.1.13.1 = STRING: "0" .1.3.6.1.4.1.111.15.1.1.1.14.1 = "" .1.3.6.1.4.1.111.15.1.1.1.15.1 = STRING: "923A730174F36B87E040E6801417642D" .1.3.6.1.4.1.111.15.1.1.1.16.1 = STRING: "0" .1.3.6.1.4.1.111.15.1.1.1.17.1 = "" .1.3.6.1.4.1.111.15.1.1.1.18.1 = STRING: "0" .1.3.6.1.4.1.111.15.1.1.1.19.1 = "" .1.3.6.1.4.1.111.15.1.1.1.20.1 = STRING: "1" .1.3.6.1.4.1.111.15.1.1.1.21.1 = STRING: "923A421065A8A060E040E68015173993" Example snmptt.log entry: Oct 14 19:04:52 xymon-server snmptt[0]: .1.3.6.1.4.1.111.15.2.0.1 SEVERE "Status Events" grid-server - The variables included in the oraEM4Alert trap. DB00157.world Database Instance database-server Status Oct 14, 2010 7:04:00 PM EDT Critical Failed to connect to database instance: ORA-01033: ORACLE initialization or shutdown in progress (DBD ERROR: OCISessionBegin). Test SNMP database-server DB Down SYSMAN 0 923A730174F36B87E040E6801417642D 0 0 1 923A421065A8A060E040E68015173993 Thanks in advance for any help. I'm sorry for the lengthy question. Nicole Beck

7 10

lib/url.c patch for '/http' malformed url?
by viorel＠athabascau.ca 16 Oct '10

16 Oct '10

As discussed at http://www.xymon.com/archive/2006/07/msg00515.html: > On Mon, Jul 31, 2006 at 06:50:19PM +0200, Nicolas wrote: > > It doesn t like the "%3a" strings. > > Apparently not. OK, so this will require a code change. For a > quick fix, you can edit the lib/url.c file in your Hobbit source. > Around line 560-570 or so you'll see these lines: > > if (poststart) getescapestring(poststart, &bburl->postdata, NULL); > if (expstart) getescapestring(expstart, &bburl->expdata, NULL); > > p = strstr(urlstart, "/http"); <--- find this line > if (p) { > proxystart = urlstart; > urlstart = (p+1); > *p = '\0'; > } > > parse_url(urlstart, bburl->desturl); > > Replace the line I've marked with > > p = NULL; > > That will simply disable the proxy url function, and your original URL > should work as intended. > > > Regards, > Henrik > Hi Henrik, Obviously it's not the ":" and I wish I would've searched the mailing list earlier ;) # /usr/libexec/hobbit/server/bin/bbtest-net 2010-10-08 14:31:38 Malformed URL - no 'scheme:' in 'http-proxy-tcp' 2010-10-08 14:31:38 Invalid URL for http test - ignored: cont=postgresql;http://my.athabascau.ca/http-proxy-tcp;0 Changed that to: cont=postgresql;http://my.athabascau.ca/tohack;0 and it works well. Do you have any plans to release an update? Thanks, Viorel

7 11

corrupted ps output report?
by waa-hobbitml＠revpol.com 15 Oct '10

15 Oct '10

I just noticed a PROCS report go red and then green on one of the servers I monitor. Since the server is an LDAP server, one of the proc tests we monitor for is simply: PROC /usr/lib/openldap/slapd The procs report page showed: (red) /usr/lib/openldap/slapd (found 0, req. 1 or more) The ps output below it it looks to be corrupted partway through. The format and line wrapping clearly does not look correct. I attached an image rather than pasting here since it would surely add additional wrapping, confusing matters even more. I guess I am wondering if anyone has seen such a thing and what might have caused it, and obviously how to address it. Thanks -- Bill Arlofski Reverse Polarity, LLC

3 4