March 2010 - Xymon - Xymon mailman web

Peculiarities with sslcert and downtime (purple status)
by novosirj＠umdnj.edu 29 Mar '10

29 Mar '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hunted around on Google and the mailing list archives about this one, but I'm turning nothing up. I have some downtime statements listed for a few hosts (names and IP's changed to protect probably nothing, but hey): 10.11.12.13 host1.umdnj.edu # "DOWNTIME=ldap,ldaps,sslcert:*:2200:2300:Development/Test Systems Cold Bacukup" 10.11.12.14 host2.umdnj.edu # "DOWNTIME=ldap,ldaps,sslcert:*:2200:2300:Development/Test Systems Cold Bacukup" 0.0.0.0 host3.umdnj.edu # "DOWNTIME=http,sslcert:*:2200:2300:Development/Test Systems Cold Bacukup" 0.0.0.0 host4.umdnj.edu # "DOWNTIME=http,sslcert:*:2200:2300:Development/Test Systems Cold Bacukup" The downtime is picked up fine, and correctly, in the "info" test on the hosts. What's interesting is what happens when the time rolls around with the sslcert test (I'll pick Friday night out of the air, but there's nuance every day): host1: blue at 2201, purple at 2241, blue at 22:44, normal at 2301. host2: purple at 2241, normal at 2244. host3: purple at 2236, normal at 2251. host4: blue at 2201, normal at 2301. All four share the same DOWNTIME definition, aside from the tests involved, so I'm mighty confused. Is there some interplay here that I'm not aware of (either by what triggers an sslcert test, https/ldaps/etc., or by using 0.0.0.0 on some of the hosts, the actual status of the hosts during the DOWNTIME, etc.) that someone might have some hints for teasing out? - -- ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST - NJMS Medical Science Bldg - C630 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkuw3VoACgkQmb+gadEcsb5PswCgkt3bYR+P29PD/DmmTjL1Y9LP gv8AniAu5TYprlp0io8CitTinbu1E46F =u50m -----END PGP SIGNATURE-----

1 0

Loris Serena is out of the office.
by loris.serena＠pncgis.ie 29 Mar '10

29 Mar '10

I will be out of the office starting 29/03/2010 and will not return until 06/04/2010. Please contact itsupport at pncgis.ie with any queries.

1 0

Intermittent graph data when using pulldata/hobbitfetch/msgcache
by waa-hobbitml＠revpol.com 29 Mar '10

29 Mar '10

Since switching to the pulldata method for DMZ hosts, the graphs now have random, intermittent gaps in them. I am seeing this at two networks where I recently switched to this method. (see attached image) Prior to this change the graphs were fine with no gaps. Hobbitfetch is being started with --debug, but there does not appear to be anything that appears to be an error in the hobbitfetch.log file. rrd-status.log shows a LOT of these entries, but they are for ALL servers and this has been going on forever so I don't suspect : 2010-03-01 04:44:01 RRD error updating /usr/local/xymon/data/rrd/hostname.example.com/tcp.ssh.rrd from x.x.x.x: /usr/local/xymon/data/rrd/hostname.example.com/tcp.ssh.rrd: illegal attempt to update using time 1267436641 when last update time is 1267436641 (minimum one second step) Any ideas? This is Xymon v4.3.0-0.beta2 on Client and server -- Bill Arlofski Reverse Polarity, LLC

1 0

Add more information
by rmcgraw＠purdue.edu 29 Mar '10

29 Mar '10

I have been asked to create some web pages that contains information about some of our compute servers. The information on these pages will be a short description of the hosts, with total memory, number cpu, yada yada yada in a format that non-computer people can peruse and understand. I was thinking that a good place to keep this information would be in xymon info pages. I was wondering if there is some .config file where I could enter the data that would do something like this? If not in the info pages some place else. I realize most of the data that I want to enter can be gleaned from other pages. Has anyone done something like this and if so how did you go about it? Thanks Robert _____________________________________________________________________ Robert P. McGraw, Jr. Manager, Computer System EMAIL: rmcgraw at purdue.edu Purdue University ROOM: MATH-807 Department of Mathematics PHONE: (765) 494-6055 150 N. University Street West Lafayette, IN 47907-2067

8 10

Xymonton down
by Galen.Johnson＠sas.com 27 Mar '10

27 Mar '10

Xymonton is currently experiencing technical difficulties...ie, the server doesn't want to restart. I'll send an update once it is working again. =G=

2 1

PCRE Assistance
by novosirj＠umdnj.edu 26 Mar '10

26 Mar '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm feeling rather dopey at not being able to figure this out, but bear with me. I'm trying to define a regex that will match, among other things, a line that begins with: netmon- and any number of characters that follow it, and then ends with my domain name. The two I need it to match right now are: "netmon-int.umdnj.edu" and "netmon-ext.umdnj.edu" but there may be others going forward. Here is my example: %(bbdisplay|xymon|katahdin|^netmon-*).umdnj.edu I was suspicious of the ^, so I tried removing it -- no change. So far I've tried this list of things: %(bbdisplay|xymon|katahdin|netmon-*).umdnj.edu %(bbdisplay|xymon|katahdin|^netmon\-*).umdnj.edu %(bbdisplay|xymon|katahdin|netmon\-*).umdnj.edu ...maybe one or two others. When I try either of the two hostnames I'm trying to match with pcretest, I get "No match". Can anyone point me in the right direction? It's surely something simple. - -- ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST - NJMS Medical Science Bldg - C630 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkutFmsACgkQmb+gadEcsb5ljQCfeHH215LC1dLo3guwlJkPzp4H 6MIAnRILcRuLfvoAsNY5/5uBLNM+QkEH =eMzo -----END PGP SIGNATURE-----

4 4

Premature end of script headers: bb-histlog.sh
by vadud3＠gmail.com 26 Mar '10

26 Mar '10

I am getting the following error when I was trying to access the port history of the client cer1cc-012.clientcare.example.net Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, systems at qwestip.net and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.7d DAV/2 Server at apa-xymon-01.ip.example.net Port 80 [Fri Mar 26 19:43:11 2010] [error] [client 208.47.0.94] Premature end of script headers: bb-histlog.sh, referer: http://apa-xymon-01.ip.example.net/hobbit-cgi/bb-hist.sh?HISTFILE=cer1cc-01… (root)@apa-xymon-01:/etc/apache2# REQUEST_METHOD=GET SCRIPT_NAME=bb-histlog.sh QUERY_STRING="HOST=cer1cc-012.clientcare.example.net&SERVICE=ports&TIMEBUF=Wed_Mar_24_13:03:57_2010" ~hobbit/cgi-bin/bb-histlog.sh Content-type: text/html Segmentation Fault (core dumped) (root)@apa-xymon-01:/etc/apache2# ls core httpd-std.conf httpd.conf.20100326 magic ssl.conf highperformance-std.conf httpd.conf httpd.conf.orig mime.types ssl.crt highperformance.conf httpd.conf-example httpd.conf.small ssl-std.conf ssl.key (root)@apa-xymon-01:/etc/apache2# file core core: ELF 32-bit LSB core file 80386 Version 1, from 'hobbitsvc.cgi' (root)@apa-xymon-01:/etc/apache2# gdb GNU gdb 6.6 Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-pc-solaris2.8". (gdb) quit (root)@apa-xymon-01:/etc/apache2# gdb ~hobbit/server/bin/hobbitsvc.cgi core GNU gdb 6.6 Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-pc-solaris2.8"... Reading symbols from /lib/libpcre.so.0...done. Loaded symbols for /lib/libpcre.so.0 Reading symbols from /lib/libresolv.so.2...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /lib/libsocket.so.1...done. Loaded symbols for /lib/libsocket.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/librt.so.1...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libc.so.1...done. Loaded symbols for /lib/libc.so.1 Reading symbols from /lib/libaio.so.1...done. Loaded symbols for /lib/libaio.so.1 Reading symbols from /lib/libmd.so.1...done. Loaded symbols for /lib/libmd.so.1 Reading symbols from /lib/ld.so.1...done. Loaded symbols for /lib/ld.so.1 Core was generated by `/home/hobbit/server/bin/hobbitsvc.cgi --env=/home/hobbit/server/etc/hobbitserve'. Program terminated with signal 11, Segmentation fault. #0 0xfed64fa1 in realfree () from /lib/libc.so.1 (gdb) bt #0 0xfed64fa1 in realfree () from /lib/libc.so.1 #1 0xfed655bf in cleanfree () from /lib/libc.so.1 #2 0xfed64adb in _malloc_unlocked () from /lib/libc.so.1 #3 0xfed64a04 in malloc () from /lib/libc.so.1 #4 0x08065762 in xmalloc (size=12) at memory.c:119 #5 0x08059748 in expand_env (s=0x8071c75 "4.2.3") at environ.c:296 #6 0x08059ce7 in xgetenv (name=0x8072aca "HOBBITDREL") at environ.c:165 #7 0x0805cd62 in headfoot (output=0x8087590, template=0x8072cc9 "histlog", pagepath=0x8072c2a "", head_or_foot=0x8072c23 "header", bgcolor=0) at headfoot.c:1114 #8 0x0805e0af in generate_html_log (hostname=0x808eb10 "cer1cc-012.clientcare.example.net", displayname=0x808eb10 "cer1cc-012.clientcare.example.net", service=0x80881f8 "ports", ip=0x8092718 "10.240.66.212", color=0, sender=0x80a64b8 "10.240.66.212", flags=0x80714c9 "", logtime=0, timesincechange=0x8047b80 "0.00 minutes", firstline=0x808a650 "green Wed Mar 24 13:03:55 GMT 2010 - Ports OK", restofmsg=0x80a70be "&green ssh (found 1, req. 1 or more)\n\nActive Internet connections (servers and established)\nProto Recv-Q Send-Q Local Address", ' ' <repeats 11 times>, "Foreign Address State \ntcp 0 0 0.0.0.0:"..., acktime=0, ackmsg=0x0, acklist=0x0, disabletime=0, dismsg=0x0, is_history=1, wantserviceid=0, htmlfmt=0, hobbitd=0, multigraphs=0x806d548 ",disk,inode,qtree,quotas,snapshot,TblSpace,if_load,", linktoclient=0x80885a8 "bb-histlog.sh?CLIENT=cer1cc-012.clientcare.example.net&amp8TIMEBUF=1269435836", nkprio=0x0, nkttgroup=0x0, nkttextra=0x0, output=0x8087590) at htmllog.c:150 #9 0x0805475a in do_request () at hobbitsvc.c:421 #10 0x08055037 in main (argc=1296651320, argv=0x8047c84) at hobbitsvc.c:518 (gdb) I noticed it says --env=/home/hobbit/server/etc/hobbitserve instead of hobbitserver.cfg -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

1 1

Mysql Graphing
by amaral8011＠googlemail.com 26 Mar '10

26 Mar '10

Hi I have used a mysql script from xymonton to collect data into xymon, i get the data in xymon OK but the problem is the graphs right now. The graphs come up in the page but is not plotting, the problem is some where between hobbitserver.cfg and hobbitgraph.cfg I am asking for help while i carry on looking for the answer (maybe i'm missing something in the configuration) please note that the rrd file is created in the data folder I get the data in xymon example: *Fri Mar 26 14:54:26 2010 MySQL Server OK* *threads: 1 questions: 990691 slow queries: 0 opens: 7128 flush tables: 1 open tables: 64 queries per second avg: 0.402 maxcon: 100 Server version: 5.0.77 Source distribution Uptime: 28 days 12 hours 19 min 1 sec Server reports timestamp of 2010-03-26 14:54:26 * and have added the following in hobbitserver.cfg in TEST2RRD i added mysql=ncv and then added the following line NCV_mysql="threads:GAUGE,questions:GAUGE,slow queries:GAUGE,opens:GAUGE,flush tables:GAUGE,open tables:GAUGE,queries per second avg:GAUGE" also in hobbitgraph.cfg i added the following (i only have the first 2 instances of data for testing purposes) *[mysql]* * TITLE mysql info* * YAXIS #* * DEF:threads=mysql.rrd:threads:AVERAGE * * DEF:questions=mysql.rrd:questions:AVERAGE* * LINE1:threads#00CCCC:threads* * LINE2:questions#FF0000:questions* * COMMENT:\n* * GPRINT:threads:LAST:Threads \: %5.1lf (cur)* * GPRINT:threads:MAX: \: %5.1lf (max)* * GPRINT:threads:MIN: \: %5.1lf (min)* * GPRINT:threads:AVERAGE: \: %5.1lf (avg)\n* * GPRINT:questions:LAST:Questions\: %5.1lf%s (cur)* * GPRINT:questions:MAX: \: %5.1lf%s (max)* * GPRINT:questions:MIN: \: %5.1lf%s (min)* * GPRINT:questions:AVERAGE: \: %5.1lf%s (avg)\n * Regards Nelson Amaral -- Kind regards Nelson Amaral

2 2

MS SQL Monitoring on Windows 2003 64-bit
by am.srini＠gmail.com 26 Mar '10

26 Mar '10

Hi Every one, Does any successfully got MS SQL on Windows 2003 64-bit? Please help as soon as possible as I am in the verge of tight deadline to deliver for the client. Detailed steps would be very very very helpful. Thank, AM

7 8

Help with ignoring certain syslog messages.
by jasoneh＠bigstring.com 26 Mar '10

26 Mar '10

I'm trying to turn the messages test red when "NOTICE" is in a syslog message, but not when "Charged or "Backup initiated" is also present in the message.  The config I'm using does ignore the "Backup initiated" messages, but not the "Charged" ones.  Can someone give me some hints on how to can handle this situation? Here is the message I'm trying to ignore: "Mar 17 02:05:58 sycamore SUNWscsdMonitor[979]: [ID 218055 daemon.error] [SUNWscsd 0x030B1D0E:0x00000000 Informational] <rctrl0000> Standard General Event, NOTICE: Controller BBU Fully Charged !.[info: 5E-00E6E83FE] (Secondary, Wed Mar 17 06:10:12 2010) {Unique ID#: 09ecee}" In hobbit-clients.cfg I have this:  LOG %.* NOTICE COLOR=red "IGNORE=%(Charged|Backup initiated)" When I run "hobbitd_client --test" to test the config, it shows that message would report as green. # hobbitd_client --testHostname (.=end, ?=dump, !=reload) []: sycamore.example.comHosttype []: SunOSTest (cpu, mem, disk, proc, log, port): loglog filename: /var/adm/messagesTo read log data from a file, enter '@FILENAME' at the promptlog line: Mar 17 02:05:58 sycamore SUNWscsdMonitor[979]: [ID 218055 daemon.error] [SUNWscsd 0x030B1D0E:0x00000000 Informational] <rctrl0000> Standard General Event, NOTICE: Controller BBU Fully Charged !.[info: 5E-00E6E83FE] (Secondary, Wed Mar 17 06:10:12 2010)     log line: Log status is green Hostname (.=end, ?=dump, !=reload) [sycamore.example.com]: Test (cpu, mem, disk, proc, log, port): loglog filename: /var/adm/messagesTo read log data from a file, enter '@FILENAME' at the promptlog line: Mar 10 22:36:17 sycamore vmtape: [ID 428768 kern.notice] Backup initiated: Compression(none)Encryption(none)log line: Log status is green Hostname (.=end, ?=dump, !=reload) [sycamore.example.com]: Test (cpu, mem, disk, proc, log, port): loglog filename: /var/adm/messagesTo read log data from a file, enter '@FILENAME' at the promptlog line: NOTICE: testing noticelog line: Log status is red &red NOTICE: testing notice Thanks, Jason <img src="http://www.bigstring.com/refer.php?img=68" width="1" height="1">Start making money with PeopleString!

2 1