October 2010 - Xymon - Xymon mailman web

how to configure "disk" alerts to only a specific partition?
by tsztur＠gmail.com 08 Oct '10

08 Oct '10

So we have a few partitions on one of our systems. One particular partition goes up to 99-100% at times which is normal. We do not want to get alerts for this partition. We are only concerned about the others. How can I set xymon/hobbit to ignore certain partitions from being checked and/or alerted on? TIA. tom.

4 3

Problem with disk monitoring
by henrik＠hswn.dk 07 Oct '10

07 Oct '10

In <B08F3F3D67451844A7A8A029FCC71E4C157B1F5EB4 at WIN01.ad.deltamanagement.se> =?iso-8859-1?Q?Johan_Sj=F6berg?= <johan.sjoberg at deltamanagement.se> writes: >I think this is somehow related to oversized status messages. We were havin= >g problems with this on 4.3.0 beta, and we also had a lot of oversized stat= >us messages (ports etc). Since we increased the max message size, we have n= >ot seen the problem with the disk test. I think I've found this bug. It was quite subtle, and there was a greater chance of triggering it when you had an oversize message, but it could also happen without any of them. I'll commit an update for this later tonight, so it will be included in the next (beta) release, which I expect to ship sometime next week. Regards, Henrik

1 0

maxdelay option
by tm＠freedom.com 07 Oct '10

07 Oct '10

Default should always be the last entry. ----- Original Message ----- From: Jerald Sheets <questy at gmail.com> To: xymon at xymon.com <xymon at xymon.com> Sent: Wed Oct 06 12:58:22 2010 Subject: Re: [xymon] maxdelay option At the top of your $SERVER_HOME/etc/hobbt-clients.cfg file, you can have a "default" setting. Here's mine: DEFAULT UP 10m DISK / 95 97 DISK /tmp 95 97 FILE /var/log/messages TRACK=syslog "TEXT=Syslog Size" PORT "LOCAL=%([.:]22)$" state=ESTABLISHED min=0 max=20 color=yellow TRACK=ssh "TEXT=SSH logins" Most any value can be set default across all hosts from here. The documentation is in this file at the top. I think that's what you're asking for. --j On Oct 6, 2010, at 2:52 PM, Nordquist, Daniel wrote: > Hello all, > > I've been trying to find a way to set my uptime reporting option globally but I can't find a way. I know I can do it individually with each monitored servers bbwin.cfg file and setting a maxdelay, but does anyone know of a way to do it globally? I know I can eliminate the column, but we do want to see recent reboots while we don't want to see servers that have been up "too long" on the bb2 page. > > Much appreciated! > Dan > > > This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. > > This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandohealth.com . > > If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Health by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Health. > > To unsubscribe from the xymon list, send an e-mail to > xymon-unsubscribe at xymon.com > > To unsubscribe from the xymon list, send an e-mail to xymon-unsubscribe at xymon.com

3 2

Re: [hobbit] PAGE= directive
by henrik＠hswn.dk 07 Oct '10

07 Oct '10

On Sat, Sep 25, 2010 at 09:49:37AM +0200, Marco Avvisano wrote: > I have this problem, using Page directive in hobbitdboard .. i'm > using hobbit 4.2.0 .. > In the version 4.2.3 is resolved ? No, you have to move to the 4.3.0 beta's for this. Regards, Henrik

2 1

maxdelay option
by Daniel.Nordquist＠orlandohealth.com 06 Oct '10

06 Oct '10

Hello all, I've been trying to find a way to set my uptime reporting option globally but I can't find a way. I know I can do it individually with each monitored servers bbwin.cfg file and setting a maxdelay, but does anyone know of a way to do it globally? I know I can eliminate the column, but we do want to see recent reboots while we don't want to see servers that have been up "too long" on the bb2 page. Much appreciated! Dan This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandohealth.com . If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Health by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Health.

2 1

sort hosts in group
by vadud3＠gmail.com 06 Oct '10

06 Oct '10

It would be nice if the hosts within the group can be displayed in alphanumerically sorted. bbgen has a option to sort the test names using `--sort-group-only-items'. Would be nice if there is a switch for hosts as well. So no matter how you entered the hosts in bb-hosts file, the display will always show them in sorted. -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

5 6

Odd Avail numbers in Disk report
by Munsch＠phillycarshare.org 06 Oct '10

06 Oct '10

Hello, The Summary under disk keeps reporting a strange result. What’s especially odd is some days it’s correct, and some days it does something like this: Filesystem 1K-blocks Used Avail Capacity Mounted Summary(Total\Avail) C 12586924 8292776 4294148 65% /FIXED/C 12.03gb\4.97gb The erroneous Avail isn’t always the same number, either. And sometimes it’s correct. I’m worried this is more indicative of something wrong with the partition itself, rather than Xymon. Has anyone seen this before? The monitored system is a Windows Server 2003 box (with bbwin running), and the only similar thread I could find was from May, about Solaris. Unlike that one, this only seems to be affecting the one partition on the box: the D partition, which is on the same array, is reported correctly always, as is the E: drive, which is a different array. I’m confuzzled. ------------------------ Rob Munsch IT Administrator PhillyCarShare 215-495-1040 x131 www.phillycarshare.org Our Vision: A Philadelphia in which non-profit car sharing exceeds the convenience, flexibility, and affordability of car ownership.

1 0

Ignoring strings in event logs
by colin.coe＠gmail.com 06 Oct '10

06 Oct '10

Hi all I have the following in my hobbit-clients.cfg on the Xymon server --- CLASS=win32 LOAD 80 90 # Load threholds are in % PORT "LOCAL=%([.:]20000)$" TEXT=RemotelyAnywhere LOG %.* %error -.* COLOR=yellow LOG eventlog:Security %failure.* COLOR=yellow LOG eventlog:Application %warning.* COLOR=yellow IGNORE="%(Warning: IIS log failed to write entry|Many client computers have not reported back|Unsuccessful logon attempt from IP address .* Secure (SSL) Connection).*" LOG eventlog:System %error.* COLOR=yellow --- I'm finding that I'm still getting warnings coming up from the WSUS server regarding the clients that have not checked. Could someone advise what I'm doing wrong here? Thanks CC -- RHCE#805007969328369

4 10

sslcert test problem
by doctor＠makelofine.org 05 Oct '10

05 Oct '10

Hi guys ! I discovered a strange trouble on my xymon. I'm running server and clients version 4.2.3. My server is monitored by xymon and host several services with SSL. So, xymon do test the ssl certificates using integrate sslcert test. All is OK. The strange part is that another host, a simple client -let's call him "client", is SSL monitored too, but when I check the SSL certificates that are reported, they are the ones hosted on the xymon server. So, i have false positives when sslcert reports something wrong on the server, and I don't get monitoring for the SLL certificates on the client... The 2 hosts are linux debian, and all other tests are OK (i tried to stop services on client, and the alert is OK, i tried to stop services on server, and the alert is OK too) and independants from each other. They are not on the same subnet, there names aren't similar, and I didn't register aliases or anything like this. I tried to "bb drop client sslcert" and "bb drop server sslcert", but nothing changed, after getting new statuses, the sslcert on client just reports SSL certificates on server :/ Anyone has an idea ?

1 0

Multiple regex on PAGE line of hobbit-alerts.cfg?
by cade.robinson＠gmail.com 05 Oct '10

05 Oct '10

Is it possible to use multiple regex on a PAGE= line of hobbit-alerts.cfg? EG bb-hosts page prodlinux Linux Servers ... subpage criticalprodlinux Critical Prod Linux Servers ... subpage noncriticalprodlinux Non-Critical Prod Linux Servers ... page prodwin Windows Servers ... subpage criticalprodwin Critical Prod Windows Servers ... subpage noncriticalprodwin Non-Critical Prod Windows Servers ... So what I have is my "prod" servers and then a subpage of critical ones that I want to get sms text pages on and then non-critical prod servers that I don't really need a page at 3am on. In my hobbit-alerts.cfg I want an email if any prodlinux or prodwin goes yellow and a page if the critical ones go red So in hobbit-alerts something like this: PAGE=%prodlinux/.*,%prodwin/.*,someotherpage ... COLOR=yellow ... PAGE=prodlinux/criticalprodlinux,prodwin/criticalprodwin,someotherpage ... COLOR=red ... The red part works but the yellow doesn't. Presumably because I am trying to do two regex in the PAGE line? Thanks Cade

2 2