February 2010 - Xymon - Xymon mailman web

TS - blackberry small web page for ACK
by d.tom.schmitt＠L-3com.com 09 Feb '10

09 Feb '10

I have an urgent requirement to be able to create a small web page for display on the blackberry. OK SOLUTION (if I can get it to work): I tried to use bb-ack.cgi but the documentation is not straight forward. I see that it has "Ack" as a hidden value for ACTION. FORM METHOD=GET and ACTION="&SCRIPT_NAME" What does script name get set to on a correct run? BETTER SOLUTION: I can create a simple small web page and pass the link to the blackberry to the person on-call. But I need to have a command line equivalent to the bb-ack.cgi to ACK the outage and supply the following variables. Same items on the bb-ack.cgi man page: bb-ack.cgi ACTION=action NUMBER=acknum DELAY=validity MESSAGE=text I have not found the correct command. I can DISABLE/ENABLE the device easily from 'bb' but I need to make an easy way to acknowledge the event from a smart phone (blackberry). Thanks, Tom Schmitt Senior IT Staff - R&D Salt Lake City, UT 84116 Phone (801) 594-3030 Cell (801) 231-7230 eFax (413) 480-6873 D.Tom.Schmitt at L-3Com.com \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo--

2 2

use of HAVE_STDINT_H in lib/sha2.c in xymon-4.3.0-beta2
by spz＠serpens.de 09 Feb '10

09 Feb '10

Hi, lib/sha2.c has: #ifdef HAVE_STDINT_H #include <stdint.h> #else typedef unsigned char uint8_t; typedef unsigned int uint32_t; typedef unsigned long long uint64_t; #endif while there is no previous attempt to detect and set HAVE_STDINT_H anywhere, which means the else part will fire, and cause: sha2.c:59: error: conflicting types for '__uint64_t' /usr/include/machine/int_types.h:54: error: previous declaration of '__uint64_t' was here due to string.h already pulling in a conflicting definition on NetBSD. The following: --- build/Makefile.NetBSD.orig 2010-02-08 23:58:57.000000000 +0000 +++ build/Makefile.NetBSD @@ -10,7 +10,8 @@ NETLIBS = CC= gcc PKGDIR?=/usr/pkg CFLAGS = -g -O2 -Wall -Wno-unused -D_REENTRANT $(LFSDEF) $(OSDEF) \ - -I${PKGDIR}/include -L${PKGDIR}/lib, -Wl,--rpath=${PKGDIR}/lib + -I${PKGDIR}/include -L${PKGDIR}/lib, -Wl,--rpath=${PKGDIR}/lib \ + -DHAVE_STDINT_H RPATH = "-Wl,--rpath," # Compile flags for debugging takes care of that. (Not elegantly, but duh :) Other OSes might need similar measures too. regards, spz -- spz at serpens.de (S.P.Zeidler)

1 0

typo in client/netbsd-meminfo.c in xymon-4.3.0-beta2
by spz＠serpens.de 08 Feb '10

08 Feb '10

Hi, it's int64_t not int64: --- client/netbsd-meminfo.c.orig 2009-02-12 13:09:34.000000000 +0000 +++ client/netbsd-meminfo.c @@ -22,7 +22,7 @@ static char rcsid[] = "$Id: netbsd-memin int main(int argc, char *argv[]) { int hw_physmem[] = { CTL_HW, HW_PHYSMEM64 }; - int64 physmem; + int64_t physmem; int hw_pagesize[] = { CTL_HW, HW_PAGESIZE }; int pagesize; best regards, spz -- spz at serpens.de (S.P.Zeidler)

1 0

Need Help Configuring BBWin on DMZ
by wiskbroom＠hotmail.com 08 Feb '10

08 Feb '10

Hello; I am trying to get BBWin installed on a box within a DMZ, my intention is to set this up so that the server pulls the data from the client. My BBWin.cfg has this: <setting name="bbdisplay" value="127.0.0.1:1984" />   <setting name="usepager" value="false" /> <setting name="bbpager" value="127.0.0.1" /> <setting name="pagerlevels" value="red yellow" /> -- I've tried various settings to the above, none allow me to telnet to localhost onto port 1984. There is no firewall, yet, preventing me from doing so. The windows agent has been started. Somewhat related, although not yet at this step, are my servers settings, please see below. My bb-hosts file will contain: 192.168.1.10 my-hostname # nconn hobbitfetch pulldata The host is not-pingable, but I do allow outbound port 1984 to it. The only other changes I am adding are to hobbitlaunch.cfg on my server: [hobbitfetch] # DISABLED <-- Comment it ENVFILE /hobbit/server/etc/hobbitserver.cfg CMD $BBHOME/bin/hobbitfetch --server=172.10.1.10 --no-daemon --pidfile=$BBSERVERLOGS/hobbitfetch.pid <-- replace the IP by your Hobbit server one LOGFILE $BBSERVERLOGS/hobbitfetch.log FYI: My Xymon servers IP is 172.10.1.10 Thank you, .vadim

3 6

[hobbit] Re: Alerts - HOSTS matching regular expressions.
by mmoldvan＠csc.com 07 Feb '10

07 Feb '10

A few very useful ways I recently found to test the regular expressions with xymon are the pcretest and hobbitd_client command. -bash-3.2$ pcretest PCRE version 6.6 06-Feb-2006 re> /^asd$/ data> asdf No match data> asd 0: asd [root at zenls01h ~]# su - xymon -bash-3.2$ ./server/bin/bbcmd hobbitd_client --test 2010-02-06 19:39:42 Using default environment file /usr/lib64/xymon/server/etc/hobbitserver.cfg Hostname (.=end, ?=dump, !=reload) []: >From there you can try out the host name that's not matching up as well as the test. Hope that helps in your troubleshooting; helped me remove some entries in the hobbit-clients and hobbit-alerts that were causing issues. Good luck, Matt. Unix System Administrator Computer Science Corporation General Dynamics Land Systems 38500 Mound Rd. Sterling Heights, MI. 48310 Desk: (586) 825-8294 Oracle IM: moldvanm This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. From: Kii NODA <kii.noda at gmail.com> To: hobbit at hswn.dk Date: 01/28/2010 04:58 PM Subject: [hobbit] Re: Alerts - HOSTS matching regular expressions. Hi everyone, After doing some testing I can say we've elegantly solved the problem caused by "HOST=%^asd$" matching both hosts named "asd" and "asdf" despite the "$" at the end. We've added a "STOP" rule at the end of the "special" rules that only alert CTO & CEO of Junkyard. The problem still remains, however. The new, most elegant ruleset thus far, follows: --- cut here --- HOST=junkyard-starbox-v_trash MAIL=cto at junkyard.tld STOP HOST=junkyard-starbox-x_dustbin MAIL=ceo at junkyard.tld STOP HOST=* MAIL=stars at sysadmins.tld REPEAT=60 RECOVERED NOTICE COLOR=purple,yellow MAIL=stars at sysadmins.tld REPEAT=10 RECOVERED NOTICE COLOR=red MAIL=cto at sysadmins.tld DURATION>60 REPEAT=60 RECOVERED NOTICE COLOR=purple,yellow MAIL=cto at sysadmins.tld DURATION>30 REPEAT=60 RECOVERED NOTICE COLOR=red --- and here --- On Thu, Jan 28, 2010 at 10:45 PM, Kii NODA <kii.noda at gmail.com> wrote: Hi everyone, As you may have already been aware by now, we're here to stay. :) Here's one interesting problem (and maybe simple) for you: We've seen that "HOST=%^asd$" matches both hosts named "asd" and "asdf", not respecting the "$" at the end. Can you guys please confirm that regex matching for "HOST=" does not care about the "$" sign? For those that need some expanded case-study (all others can now stop), here's the story behind: we are managing various servers of ours and our customers. Due to the fact that we do not control DNS entries for all these machines we have come up with a naming scheme like this: --- cut here --- junkyard-starbox # clientID=junkyard, starbox=actual machine junkyard-starbox-v_trash # v_trash=vserver named trash running on starbox junkyard-starbox-v_trashcan # v_trashcan=vserver named trashcan running on starbox junkyard-starbox-x_dustbin # x_dustbin=xen server running on starbox --- and here --- We need to send these "special" alerts: * ONLY cto at junkyard.tld for events on junkyard-starbox-v_trash * ONLY ceo at junkyard.tld for events on junkyard-starbox-x_dustbin Also, we need to send these alerts for all other hosts & events: * stars at sysadmins.tld for purple, yellow & red w/ REPEAT=60 * cto at sysadmins.tld for red w/ DURATION>30 and REPEAT=60 * cto at sysadmins.tld for yellow&purple w/ DURATION>60 and REPEAT=60 Exercising our brain muscles we came up with these: --- cut here --- #alert CTO for v_trash HOST=junkyard-starbox-v_trash MAIL=cto at junkyard.tld #alert CEO for x_dustbin HOST=junkyard-starbox-x_dustbin MAIL=ceo at junkyard.tld #stop alerting for the private boxes above HOST=* IGNORE HOST=%^junkyard-starbox-(v_trash|x_dustbin)$ HOST=* COLOR=purple,yellow MAIL=stars at sysadmins.tld REPEAT=60 RECOVERED NOTICE MAIL=cto at sysadmins.tld DURATION>60 REPEAT=60 RECOVERED NOTICE HOST=* COLOR=red MAIL=stars at sysadmins.tld REPEAT=10 RECOVERED NOTICE MAIL=cto at sysadmins.tld DURATION>30 REPEAT=60 RECOVERED NOTICE --- and here --- However, even with the "$" at the end of our regex we are no longer receiving any alerts for v_trashcan because the regex wrongly matches on the "IGNORE HOST=" line. We could use 2 lines to match each host on its own line but that's not the point of this exercise. So, can anyone confirm our finding? -- kN -- kN

1 0

service cupsd
by martin.flemming＠desy.de 06 Feb '10

06 Feb '10

Hi ! I've got an yellow alarm, if i check our cups-server with the integrate cupsd-test >Service cupsd on cups-server1 is not OK : Unexpected service response > > >HTTP/0.9 400 Bad Request >Date: Fri, 05 Feb 2010 15:45:39 GMT >Server: CUPS/1.3 >Upgrade: TLS/1.0,HTTP/1.1 >Content-Type: text/html; charset=utf-8 >Content-Length: 344 .. what's wrong or how can i debug this test ? thanks & cheers Martin

1 1

purple status for one server and hobbitfetch?
by cade.robinson＠gmail.com 05 Feb '10

05 Feb '10

I have one server that keeps coming up purple and I can't get rid of it. The ping it working and it is alerting when it goes red but it just stays purple all the time. When I look at the conn page it shows: Status message received from hobbitd rather than Status message received from 172.16.225.176 Also as a test someone setup hobbit on this machine at one time to see how hobbit worked without screwing up the current real hobbit server. Since then the machine in question had hobbit server removed and is now just a client. I have tried to drop the conn column and also the whole server and also removed all files with the server name in hist and histlogs. It still comes back purple and is the only one. I can't find any file in server/etc that has its name or IP. Any thoughts on why? Also we have clients in a DMZ we want monitored and are using hobbitfetch for that. Once I fixed the core dumping of hobbitfetch and it is staying up the status is still purple. Anyone know how to get that not purple? Is it not reporting a status to something? I was trying to figure out how status of the daemons was determined and haven't found it yet but my guess is that hobbitfetch isn't reporting something it should. Thanks Cade

2 4

[hobbit] Unable to create Availablity Report spreadsheet.
by wiskbroom＠hotmail.com 05 Feb '10

05 Feb '10

Have you resolved this yet? Looks like your perms for rep are not set properly: drwxrwx--x 8 xymon www 4096 Jan 28 18:10 /cvsrx/home/xymon/server/www/rep/ Try running chmod 777 /cvsrx/home/xymon/server/www/rep/ and retry gen'ing a report. If this works, then you need to make sure that the group perms are setup to allow the apache owner permission to rw, then you can re-chmod back to 775, better than 771, what you have. .vadim > > Hi all… > > > > > > > > I’m having a problem generating a ‘spreadsheet’ > availability report (Reports | Availability Report ) with the Xymon 4.3.0-0.beta2 > server and could use some help/suggestions as to where to look next. > These reports were working as late as two weeks ago; I can’t think of > anything that I’ve changed in the environment that should affect the > report generation. > > > > > > > > bbgen for Hobbit version 4.3.0-0.beta2 > > Statistics: > > Hosts : 3015 > > > > > > > > > > > > All other reports appear to be working fine. > If I select the ‘Generate Report’ button, my report gets created and > displays and the files are created in the www/rep/ directory > > > > > > > > When selecting ‘Generate Spreadsheet’, > the result is: > > > Generating report for the period: Jan 27 2010 - Jan 27 2010 > (nongr) > > > > --bbrep-7740-126471984 Content-type: text/html > Could not generate report. > > Check that the /home/xymon/server/www/rep/ directory has permissions > '-rwxrwxr-x' (775) > > and that is is set to group 8 > > > > > > > > I have checked the ownership and permissions of the > directory tree and all seems ok... > > > > # ls –l /home > > > > lrwxrwxrwx 1 root root 11 Jul 22 2008 /home > -> /cvsrx/home/ > > > > # l -d /cvsrx > > > > lrwxrwxrwx 1 root root 15 Jan 19 10:23 /cvsrx -> > /data/cvsrx_dev/ > > > > # l -d /cvsrx/home/ > > > > drwxr-xr-x 32 root root 4096 Dec 7 11:25 > /cvsrx/home// > > > > # l -d /cvsrx/home > > > > drwxr-xr-x 32 root root 4096 Dec 7 11:25 > /cvsrx/home/ > > > > # l -d /cvsrx/home/xymon/ > > > > drwxr-xr-x 11 xymon hobbit 4096 Jan 8 14:36 > /cvsrx/home/xymon// > > > > # l -d /cvsrx/home/xymon/server/ > > > > drwxr-xr-x 9 xymon hobbit 4096 Dec 7 11:40 > /cvsrx/home/xymon/server// > > > > # l -d /cvsrx/home/xymon/server/www/ > > > > drwxr-x--- 16 xymon www 4096 Jan 28 18:12 > /cvsrx/home/xymon/server/www// > > > > # l -d /cvsrx/home/xymon/server/www/rep/ > > > > drwxrwx--x 8 xymon www 4096 Jan 28 18:10 > /cvsrx/home/xymon/server/www/rep// > > > > > > > > > > > > # l /cvsrx/home/xymon/server/www/rep/ > > > > total 28 > > > > drwxr-xr-x 7 wwwrun www 4096 Jan 28 18:01 > 6916-1264719548/ > > > > drwxr-xr-x 7 wwwrun www 4096 Jan 28 18:03 > 7703-1264719824/ > > > > -rw-r--r-- 1 wwwrun www 2109 Jan 28 18:04 > avail-s09trbrxs-memory-1264719841-7737.txt > > > > > > > > > > > > I added ‘--debug’ to bb-rep.cgi: > > > > exec /home/xymon/server/bin/bb-rep.cgi $CGI_REP_OPTS > $BBGENREPOPTS --debug>/tmp/bbrep.debug 2>&1 > > > > > > > > and got a large output file. At the very end > of the file, it appears that the program simply stopped as the the output in the > debug log just stops: > > > > > > > > > > > > > Host: s09996rxs, ip: 172.19.227.11, name: s09996rxs, color: 4, old: 0, anywaps: > 0, wapcolor: -1, pretitle: '(NULL)', noprop-y: (NULL), noprop-r: (NULL), > noprop-p: (NULL), noprop-ack: (NULL), waps > > > > > Test: OfflineDB, alert 0, propagate 1, state 4, age: , oldage: 0 > > > > > Test: nfs, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > Test: mysql, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > Test: cpu, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > Test: disk, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > Test: procs, alert 0, propagate 1, state 4, age: , oldage: 0 > > > > > Test: ports, alert 0, propagate 1, state 4, age: , oldage: 0 > > > > > Test: msgs, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > Test: files, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > Test: memory, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > Test: conn, alert 0, propagate 1, state 0, age: , oldage: 0 > > > > > > > > > > > > > Host s09996rxs is the last host listed in my > bb-hosts file. > > > > > > > > Any suggestions? > > > > > > > >

2 1

Nesting PAGE= into Macro Possible in hobbit-alerts.cfg?
by wiskbroom＠hotmail.com 05 Feb '10

05 Feb '10

Hello; I am trying to define a group of hosts for alerting purposes and am unable to see successful results when I run bbcmd hobbitd_alert --test CLIENT-HOSTNAME cpu CLIENT-HOSTNAME does appear as being a member of the same page/subpage I've declared in my alerts file. Here is what ~bbcmd hobbitd_alert --test CLIENT-HOSTNAME cpu gives me: 00006992 2010-02-05 10:17:09 send_alert CLIENT-HOSTNAME:cpu state Paging 00006992 2010-02-05 10:17:09 Matching host:service:page 'CLIENT-HOSTNAME:cpu:myservers/mywinboxes/mywintelsqlservers' against rule line 194 00006992 2010-02-05 10:17:09 Failed 'HOST=$WINDOWSHOSTS' (hostname not in include list) My hobbit-alerts.cfg has this: $WINDOWSHOSTS=PAGE=myservers/mywinboxes/mywintelsqlservers Is this syntax right? Am I allowed to declare a PAGE within a MACRO like this? Any suggestions into how best to define what I've declared as either a page, and.or subpage, in my bb-hosts would be greatly appreciated. Thank you in advance, .vadim

1 0

hobbitfetch core dump fix
by cade.robinson＠gmail.com 05 Feb '10

05 Feb '10

I was having issues with hobbitfetch core dumping. I finally figured out the issue. In the "grabdata" function there is: int n; char buf[8192]; /* Read data from a peer connection (client or server) */ n = read(conn->sockfd, buf, sizeof(buf)); ... else if (n > 0) { ... buf[n] = '\0'; ... If 8192 bytes are read then "n" is 8192. There is no element 8192 in buf. buf is 0-8191.

1 0