March 2010 - Xymon - Xymon mailman web

hobbitfetch crashing
by waa-hobbitml＠revpol.com 25 Mar '10

25 Mar '10

I am moving from having DMZ clients sending reports into the Xymon server on internal LAN to the "pulldata" method using hobbitfetch on the Xymon server and msgcache on the DMS system(s). Everything seems to be working. That is, data from the clients is being logged, graphed and monitored and alerted on. So far so good. BUT... I saw hobbitfetch crashing and hobbitfetch column going red when using version 4.2.2 of Xymon, so I upgraded to 4.3.0-0.beta2 and am seeing the same symptoms. I can not see anything odd in the hobbitfetch.log file (with --debug enabled). There is a core file in ~xymon/server/tmp/core dated 18:40 today - I am assuming it s a core from hobbitfetch - but the hobbitfetch log for that time frame show only the following: --[snip]-- 2010-03-25 18:40:27 Queuing request 21 to 192.168.253.1:1984 for zimbra.xxxxxx.com: 'pullclient 1 ' 2010-03-25 18:40:27 Sent 14 bytes to 192.168.253.1:1984 (req 21) 2010-03-25 18:40:27 Done reading data from 192.168.253.1:1984 (req 21) 2010-03-25 18:40:27 Doing cleanup 2010-03-25 18:40:27 Next poll of zimbra.xxxxxx.com in 55 seconds 2010-03-25 18:40:27 Request completed: req 21, peer 192.168.253.1:1984, action was 2, type was 0 2010-03-25 18:40:32 Queuing request 22 to 192.168.253.2:1984 for helpdesk.xxxxxxx.com: 'pullclient 1 dir:/var/www/localhost/htdocs/admin/storage/mail/fail ' 2010-03-25 18:40:32 Sent 68 bytes to 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Got 1448 bytes of data from 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Got 1448 bytes of data from 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Got 1448 bytes of data from 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Got 1448 bytes of data from 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Got 1448 bytes of data from 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Got 1448 bytes of data from 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Got 8192 bytes of data from 192.168.253.2:1984 (req 22) 2010-03-25 18:40:32 Opening file /usr/local/xymon/server/etc/bb-hosts 2010-03-25 18:40:32 Queuing request 1 to 192.168.253.2:1984 for helpdesk.xxxxxxx.com: 'pullclient 1 ' 2010-03-25 18:40:32 Queuing request 2 to 192.168.253.1:1984 for zimbra.xxxxxxxx.com: 'pullclient 1 ' 2010-03-25 18:40:32 Sent 13 bytes to 192.168.253.2:1984 (req 1) 2010-03-25 18:40:32 Sent 13 bytes to 192.168.253.1:1984 (req 2) 2010-03-25 18:40:32 Done reading data from 192.168.253.2:1984 (req 1) 2010-03-25 18:40:32 Doing cleanup 2010-03-25 18:40:32 Next poll of helpdesk.xxxxx.com in 44 seconds 2010-03-25 18:40:32 Request completed: req 1, peer 192.168.253.2:1984, action was 2, type was 0 2010-03-25 18:40:32 Done reading data from 192.168.253.1:1984 (req 2) 2010-03-25 18:40:32 Doing cleanup 2010-03-25 18:40:32 Next poll of zimbra.xxxxx.com in 55 seconds 2010-03-25 18:40:32 Request completed: req 2, peer 192.168.253.1:1984, action was 2, type was 0 --[snip]-- In hobbitlaunch.cfg on the server I have enabled the hobbitfetch task: [hobbitfetch] # waa - 20100321 - Need to pull data from DMZ clients # DISABLED ENVFILE /usr/local/xymon/server/etc/hobbitserver.cfg CMD $BBHOME/bin/hobbitfetch --debug --server=xymonIPaddress \ --no-daemon --pidfile=$BBSERVERLOGS/hobbitfetch.pid LOGFILE $BBSERVERLOGS/hobbitfetch.log I have enabled the the msgcache task on the clients in the ~hobbit/client/etc/clientlaunch.cfg file: [msgcache] # waa 20100321 # DISABLED ENVFILE $HOBBITCLIENTHOME/etc/hobbitclient.cfg CMD $HOBBITCLIENTHOME/bin/msgcache --no-daemon \ --pidfile=$HOBBITCLIENTHOME/logs/msgcache.pid LOGFILE $HOBBITCLIENTHOME/logs/msgcache.log And on the clients I have also modified the BBDISP to point to 127.0.0.1 instead of the actual Xymon server. Firewall now allows connections OUT from Xymon server to DMZ clients, and disallows DMZ clients to send in Xymon reports. Any thoughts on this would be appreciated! -- Bill Arlofski Reverse Polarity, LLC http://www.revpol.com/

1 0

Icone purple hobbitd_client
by debian＠robertain.com 25 Mar '10

25 Mar '10

Hi , I have a problem with hobbit. line of server or daemon running hobbitd I have a purple icon that appears on hobbitd_client and I do not know how it is. How to no longer show up? Thank Best Regards, Mickael

2 2

Xymon 4.3.0-0.beta2 problem - distorted data
by hvillemoes＠csc.com 25 Mar '10

25 Mar '10

Hi We have a problem with distorted data after upgrading to Xymon 4.3.0-0.beta2. The data from HPUX is received correctly at the server, but is shown as in error. Data in hostdata is correct, while data in histlogs is distorted. The problem is highly transient, e.g. 3 times per week. Our server is running CentOS release 5.2 (Final) - Linux fulda.scandihealth.com 2.6.18-92.1.18.el5PAE #1 SMP Wed Nov 12 10:02:30 EST 2008 i686 athlon i386 GNU/Linux Please see filedumps below. Can you provide a fix or workaround or otherwise guide us to avoiding these false alarms.. Best regards HARALD VILLEMOES CSC ScandiHealth | +45 36147236 | +45 29236962 | hvillemoes at csc.com | www.csc.dk [root at fulda ceres]# ls -la 1269499546 -rw-rw-r-- 1 hobbit hobbit 41873 Mar 25 07:45 1269499546 [root at fulda ceres]# pwd /hobbit/data/hostdata/ceres [root at fulda ceres]# head -30 1269499546 client ceres.hp-ux hp-ux [date] Thu Mar 25 07:45:33 MET 2010 [uname] HP-UX ceres B.11.00 A 9000/800 138981577 two-user license [uptime] 7:45am up 935 days, 17:14, 0 users, load average: 0.23, 0.18, 0.15 [who] [df]] Filesystem 1024-blocks Used Available Capacity Mounted on. /dev/vg01/lvol9 61908 1617 60291 3% /usr/SAG/rsp /dev/vg01/lvol6 99259 38147 61112 39% /appl /dev/vg01/lvol5 3032126 1238051 1794075 41% /export /dev/vg01/lvol4 616384 31327 585057 6% /home/editrade /dev/vg01/lvol7 124232 2660 121572 3% /home/mms/tmp /dev/vg01/lvol3 1010120 375392 634728 38% /home/mms /dev/vg00/lvol4 1222476 1044716 177760 86% /home /dev/vg01/lvol2 61584 1191 60393 2% /mmswork1 /dev/vg00/lvol7 870539 411565 458974 48% /opt /dev/vg01/test 8085494 4921377 3164117 61% /test /dev/vg00/lvol5 246682 70162 176520 29% /tmp /dev/vg01/lvol1 497161 85698 411463 18% /usr/SAG /dev/vg00/lvol8 1209193 914194 294999 76% /usr /dev/vg00/lvol6 2027244 934114 1093130 47% /var /dev/vg00/lvol1 75359 35165 40194 47% /stand /dev/vg00/lvol3 135982 25256 110726 19% / [mount] / on /dev/vg00/lvol3 log on Sat Sep 1 15:31:47 2007% /stand on /dev/vg00/lvol1 defaults on Sat Sep 1 15:31:48 2007 /var on /dev/vg00/lvol6 delaylog on Sat Sep 1 15:32:00 2007 [root at fulda ceres]# [root at fulda disk]# pwd /hobbit/data/histlogs/ceres/disk [root at fulda disk]# ls -la Thu_Mar_25_07:45:46_2010 -rw-rw-r-- 1 hobbit hobbit 2324 Mar 25 07:45 Thu_Mar_25_07:45:46_2010 [root at fulda disk]# cat Thu_Mar_25_07:45:46_2010 red Thu Mar]25 07:45:33 MET 2010 - Filesystems NOT ok &red 3% /usr/SAG/rsp (60291% used) has reached the PANIC level (95%) &red 39% /appl (61112% used) has reached the PANIC level (95%) &red 41% /export (1794075% used) has reached the PANIC level (95%)%) &red 6% /home/editrade (585057% used) has reached the PANIC level (95%) &red 3% /home/mms/tmp (121572% used) has reached the PANIC level (95%)) &red 38% /home/mms (634728% used) has reached the PANIC level (95%) &red 86% /home (177760% used) has reached the PANIC level (95%) &red 2% /mmswork1 (60393% used) has reached the PANIC level (95%)%) &red 48% /opt (458974% used) has reached the PANIC level (95%) &red 61% /test (3164117% used) has reached the PANIC level (95%))%) &red 29% /tmp (176520% used) has reached the PANIC level (95%)%))%) &red 18% /usr/SAG (411463% used) has reached the PANIC level (95%)) &red 76% /usr (294999% used) has reached the PANIC level (95%) &red 47% /var (1093130% used) has reached the PANIC level (95%) &red 47% /stand (40194% used) has reached the PANIC level (95%) &red 19% / (110726% used) has reached the PANIC level (95%) Filesystem 10 4-bl]cks Used Available Capacity Mounted on /dev/vg01/lvol9 61908 1617 60291 3% /usr/SAG/rsp)) /dev/vg01/lvol6 99259 38147 61112 39% /appl /dev/vg01/lvol5 3032126 1238051 1794075 41% /export /dev/vg01/lvol4 616384 31327 585057 6% /home/editrade%)) /dev/vg01/lvol7 124232 2660 121572 3% /home/mms/tmp /dev/vg01/lvol3 1010120 375392 634728 38% /home/mms /dev/vg00/lvol4 1222476 1044716 177760 86% /home /dev/vg01/lvol2 61584 1191 60393 2% /mmswork1 /dev/vg00/lvol7 870539 411565 458974 48% /opt /dev/vg01/test 8085494 4921377 3164117 61% /test /dev/vg00/lvol5 246682 70162 176520 29% /tmp /dev/vg01/lvol1 497161 85698 411463 18% /usr/SAG /dev/vg00/lvol8 1209193 914194 294999 76% /usr /dev/vg00/lvol6 2027244 934114 1093130 47% /var /dev/vg00/lvol1 75359 35165 40194 47% /stand /dev/vg00/lvol3 135982 25256 110726 19% / Status unchanged in 0.00 minutes Message received from 195.50.45.230 Client data ID 1269499546. [root at fulda disk]# CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Consulting Group A/S • Registered Office: Retortvej 8, 1780 Copenhagen V, Denmark • Registered in Denmark No: 26031362

3 2

hobbitgraph.cfg >> FNPATTERN
by work＠infomaniak.ch 25 Mar '10

25 Mar '10

Hello the list, after some hard time trying to know which RE is used for FNPATTERN in the hobbit/etc/hobbitgraph.cfg. I've finally found that it use the lib pcre. in the source. God bless the source code. So could you change the hobbitgraph.cfg comments to add specific info about this. why not changing this: ----%<----%<----%<----%<----%<----%<----%<----%<----%<----%<----%< # For graphs that use multiple RRD files as input, you specify a filename # pattern in the FNPATTERN statement, and optionally a pattern of files # to exclude from the graph with EXFNPATTERN (see "[tcp]" for an example). # When FNPATTERN is used, you can use "@RRDFN@" in the RRDtool definitions # to pick up each filename. "@RRDIDX@" is an index (starting at 0) for each # file in the set. "@RRDPARAM@" contains the first word extracted from the # pattern of files (see e.g. "[memory]" how this is used). "@COLOR@" picks # a new color for each graph automatically. ----%<----%<----%<----%<----%<----%<----%<----%<----%<----%<----%< to this: ----%<----%<----%<----%<----%<----%<----%<----%<----%<----%<----%< # For graphs that use multiple RRD files as input, you specify a filename # pattern in the FNPATTERN[1] statement, and optionally a pattern of files # to exclude from the graph with EXFNPATTERN (see "[tcp]" for an example). # When FNPATTERN is used, you can use "@RRDFN@" in the RRDtool definitions # to pick up each filename. "@RRDIDX@" is an index (starting at 0) for each # file in the set. "@RRDPARAM@" contains the first word extracted from the # pattern of files (see e.g. "[memory]" how this is used). "@COLOR@" picks # a new color for each graph automatically. # # [1]FNPATTERN is following the Perl Compatible Regular Expression Library # (pcre), more info on : http://www.pcre.org # http://perldoc.perl.org/perlre.html ----%<----%<----%<----%<----%<----%<----%<----%<----%<----%<----%<

1 0

HP PA-RISC Hardware monitoring ?
by tj_yang＠hotmail.com 25 Mar '10

25 Mar '10

Anyone know is there a module (bb or hb) to monitor HP hardware ? May be better question is what is the similar command for ipmitool or prtdiage in HP-UX ? T.J. Yang _________________________________________________________________ Capture your memories in an online journal! http://www.reallivemoms.com?ocid=TXT_TAGHM&loc=us

3 3

[hobbit] Removing no longer available services from display
by s.seitz＠netz-haut.de 25 Mar '10

25 Mar '10

Thanks for your response, This works, the services are now completely removed. Regards, Stephan > -----Original Message----- > From: Thangappandi, Arun (Ge Capital, consultant) > [mailto:arun.thangappandi at ge.com] > Sent: Monday, March 22, 2010 10:07 AM > To: hobbit at hswn.dk > Subject: RE: [hobbit] Removing no longer available services from > display > > Here you go, > Execute the below command from the hobbit server...command will be > found in binary folder. > ./bb 127.0.0.1 "drop clientservername(eg:server01) > servicemname(eg:ssh)" > > Regards, > -Arun > -----Original Message----- > From: netz-haut - stephan seitz [mailto:s.seitz at netz-haut.de] > Sent: Monday, March 22, 2010 2:27 PM > To: hobbit at hswn.dk > Subject: [hobbit] Removing no longer available services from display > > Hi there, > > I've recently firewalled some services on some machines, now I'm trying > to remove such services from xymon display. > The services are currently displayed purple. > Is there any documented way to remove single services from display? > > I've already cleaned up bb-hosts. > > Thank's for any suggestion! > > > Mit freundlichen Gruessen > > -- > Stephan Seitz > Senior System Administrator > > *netz-haut* e.K. > multimediale kommunikation > > zweierweg 22 > 97074 würzburg > > fon: +49 931 2876247 > fax: +49 931 2876248 > > web: http://www.netz-haut.de/ > > registergericht: amtsgericht würzburg, hra 5054 > > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > >

2 1

Sorry... I had to vent
by questy＠gmail.com 24 Mar '10

24 Mar '10

Does anyone at all RTFM any more? We have wikis, docs, a several-year mailing list archive, three wonderful software and addon repositories. Still, we have questions that are in the man pages on the freaking Xymon menu and even in their own separate page on the Xymon help menu in the installation itself. This group exists to help when you've reached a level of proficiency, and thing that aren't clearly spelled out in the docs are not working as expected, or there are little "gotchas" that you might need help with that we've all been through. True, I'm the first person to grump at someone when they don't receive a newcomer in a friendly manner, but coming on here and asking questions that are clearly laid out in the docs is just plain lazy. I wouldn't even let my teenagers get away with that. Guys, if you have questions there is no one more ready than I to help you trudge through a problem. But when you don't so much as get into the docs and ferret out the basic functionality of the software, you really make it hard to even want to help you. On your Xymon install: just mouse over the "Help" menu, and all your basic answers will be there. If you get into a hairy spot, bring it here and we can ll puzzle over it together. (sorry... I had three separate people ask precisely the kind of question that showed they didn't want to do the basic footwork necessary to make their app work, and expected suppor to just do it all for them. They wouldn't even read the manual it took me weeks to put together and post on the company intranet.) I actually heard the words today "I don't want to read that book" (22 pages, mind you) "I just want you to make it work." It's a statistical package... you actually have to know basic statistics. They don't. UGH! Sorry again. A real RTFM moment for me. --j

13 25

[hobbit] Sorry... I had to vent
by hobbit＠epperson.homelinux.net 24 Mar '10

24 Mar '10

On Tue, March 23, 2010 22:10, Josh Luthman wrote: > Are you from Richmond Indiana? > No, the real one. Virginia. :^)

2 1

RRDTool and creating graphs.
by kevin＠shadowsoft.com 24 Mar '10

24 Mar '10

Which files are necessary for the rrdtool to produce graphs in xymon?

3 2

Can't get DOWNTIME= to work
by novosirj＠umdnj.edu 23 Mar '10

23 Mar '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm using Xymon 4.2.3. Unfortunately, the examples in the documentation don't actually cover the most complicated case, where you define columns, have more than one time period, and define a reason for the downtime. Here's what I have: "DOWNTIME=http:*:0530:0535:BANRECT Scheduled Instance Restart,*:2030:2035:WFWSAPP Scheduled Instance Restart" Looks good to me, according to these rules: DOWNTIME=[columns:]day:starttime:endtime:cause[,day:starttime:endtime:cause] Can someone tell me what I'm doing wrong? I get this error in the "hobbitd" test on my display machine: Invalid timespec - expected 4 digits, got: 'WFWSAPP Scheduled I' Any help would be most appreciated. Looks like there might be a mistake in the manual (or is there a typo there that I don't see?). - -- ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST - NJMS Medical Science Bldg - C630 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkuoSAgACgkQmb+gadEcsb5zoQCghXsWBEPQJI4Yq/sbry0m1YIS W3IAoMwBQkW4IoKVuArmRmirapWBsyql =Xo07 -----END PGP SIGNATURE-----

3 4