February 2011 - Xymon - Xymon mailman web

Suggestion: make config or make init targets
by spa＠syntec.co.uk 04 Mar '11

04 Mar '11

Hi, It would be nice if there was a way to install particularly the init script automatically. For example, on Redhat, one has to (copied and pasted from another page - I did something similar for the version I got from subversion, where I was just compiling and installing the client): # cp -p /usr/local/src/xymon-4.2.3/rpm/hobbit-init.d /etc/rc.d/init.d/xymon # chown root:root /etc/rc.d/init.d/xymon # chmod 755 /etc/rc.d/init.d/xymon # chkconfig xymon on One has to also edit /etc/rc.d/init.d/xymon change the DAEMON to point to one's actual path (which the configure script already has). The above steps need to be done for xymon-client too. Then you need to copy /path/to/source/xymon-client.default to /etc/default/xymon-client. You need to edit it and add the Xymon server IP address, which again, you already entered in the configure script... There are several steps here which could be automated, and it would make installing the client on machines quicker and less error prone, and many of us have to do this on many machines. I suggest the above could be accomplished with a "make config" or "make init" target from the source directory, logged in as root. If you are using e.g. Debian instead of Redhat, this would be automatically detected and the debian init scripts would be installed instead. Unfortunately, I'm no shell script wizz and can't really do this myself. Kind regards, Sebastian A

4 10

BBWin False positive - data on two lines
by willowbrookmagic＠hotmail.com 03 Mar '11

03 Mar '11

Hello everyone! We are using BBWin_0.12 we have been recieving some false positives as it pertains to data showing up a second line. This may have to do with the unexpected CR\LF we have seen this with disk and also svcs here are some examples: Disk Error: Filesystem 1K-blocks Used Avail Capacity Mounted Summary(Total\Avail) C 71644780 35248592 36396188 49% /FIXED/C 68.33gb\34.72gb E 430023744 42237568 387786176 9% /FIXED/E 410.10gb\369.84gb F 114334528 15872192 98462336 13% /FIXED/F 109.38gb\93.92gb G ] 114334528 537728 113796800 0% /FIXED/G 109.38gb\108.53gb I 57167232 2588352 54578880 4% /FIXED/I 54.53gb\52.51gb and SVCS Error: Cisco_CallManager automatic started Cisco CallManager Cisco_CTIManager automatic started Cisco CTIManager Cisco_CTL_Provider automatic started Cisco CTL Provider Cisco_DCD_Controller_Service automatic started Cisco DCD Controller Service Cisco_Extended_Functions automatic started Cisco Extended Functions Cisco_IP_Voice_Media_Streaming_App automatic started Cisco IP Voice Media Streaming App Cisco_Messaging_Interface automatic starte] Cisco Messaging Interface Cisco_MOH_Audio_T ansl]tor automatic started Cisco MOH Audio Translator Cisco_RIS_Data_Collector automatic started Cisco RIS Data Collector Cisco_Serviceability_Reporter automatic started Cisco Serviceability Reporter Cisco_Telephony_Call_Dispatcher automatic started Cisco Telephony Call Dispatcher Cisco_Tftp automatic started Cisco Tftp CiscoTomcat automatic started Cisco Tomcat Any help with this would be greatly appreciated!

2 4

.default. host and CLASS and NOPROP tags
by brian＠majeska.com 03 Mar '11

03 Mar '11

I'd like to use the CLASS and NOPROP tags in the .default. hosts entry, it doesn't seem to be working for me. Can anyone confirm if they have this working for them? or if I've made an obvious mistake? 0.0.0.0 .default. # CLASS:group1 NOPROPRED=disk 1.2.3.4 server1.example.com # The man page says both of these tags should work, and I've gotten others to work like TRENDS and HIDEHTTP, just running into issues with CLASS and NOPROP* I'm running Xymon: 4.3 RC1 though I tested the same settings on 4.2.x and it doesn't work there either. Thanks -- Brian Majeska

2 1

need help with 2 IPs for same host name
by cathy.smith＠pnl.gov 03 Mar '11

03 Mar '11

Folks Is there a way to list 2 different IP addresses for the same host name in the bb-hosts configuration file? We run Hobbit on a RedHat 4 box. Thanks. Cathy --- Cathy L. Smith IT Engineer Pacific Northwest National Laboratory Operated by Battelle for the U.S. Department of Energy Phone: 509.375.2687 Fax: 509.375.2330 Email: cathy.smith at pnl.gov

3 2

multiple graphs on one page
by joe.acquisto＠gmail.com 01 Mar '11

01 Mar '11

I've been digging for a while and cannot find how I can put two graphs on one page. Kind of like the trends page. While I see the --multigraph option, I am not certain this is what I want. Nor can I see how I could associate multiple graphs with a single page. Thanks.

5 6

SNMP destination (eg. not DevMon)
by novosirj＠umdnj.edu 01 Mar '11

01 Mar '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Is anyone aware of any direction I might look for supporting RECEIVING SNMP traps from devices (not querying them via SNMP)? I have a device that can set an SNMP destination, but I don't believe has support for being queried by SNMP (if it does, it is a slightly moot point as it is not on a network that can be accessed easily remotely). Happy to just hear the name of a script or software if you know of one. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk0wt54ACgkQmb+gadEcsb4GKgCeJX00n1JUtslrCVwiLhSLNP2G h/oAn2cyFCiL4mkPyANKA8L3QOCc74Xb =eM/D -----END PGP SIGNATURE-----

6 11

false alert
by stef.coene＠docum.org 28 Feb '11

28 Feb '11

Hi, This night, one of the http checks was red for 30 seconds: Date Status Duration Fri Feb 25 03:02:55 2011 blue 0:01:18 Mon Feb 28 00:18:02 2011 green 2:44:04 Mon Feb 28 00:17:32 2011 red 0:00:30 However, from the notifications.log: Mon Feb 28 00:31:11 2011 servern.http (0.0.0.0) FORMAT=TEXT 1298849440 600 Relevant part of the hobbit-alerts.cfg: HOST=* SCRIPT my_script.pl FORMAT=TEXT RECOVERED REPEAT=1440 DURATION>10 This is on a Xymon 4.2.3 server. I also don't see a recover message from this alert in notifications.log. Is this a bug? Stef ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________

2 1

too many graph-links for SPLITNCV ?!
by martin.flemming＠desy.de 25 Feb '11

25 Feb '11

Hi ! I've got a mysterious problem, because i've got too many graph-links (dead links) on the trend-page for my SPLITNCV-Graphs .. please let me explain :-) I'm running ./xymongen --version xymongen version 4.3.0-0.20110120.rc1 If i run this test as only one rrd as NCV_afss, everything looks fine wit the graphs ... but i want to change this test to SPLITNC, because i want compare different graphs with different hosts .. For the SPLITNCV i get these rrd's afss,allocs.rrd afss,call_structs.rrd afss,calls_waiting.rrd afss,client_connections.rrd afss,free_calls.rrd afss,packet_allocation_failures.rrd afss,peer_structs.rrd afss,read_abort.rrd afss,read_ackall.rrd afss,read_ack.rrd afss,read_busy.rrd afss,read_challenge.rrd afss,read_data.rrd afss,read_dup.rrd afss,read_response.rrd afss,read_spurious.rrd afss,sent_abort.rrd afss,sent_ackall.rrd afss,sent_ack.rrd afss,sent_busy.rrd afss,sent_challenge.rrd afss,sent_data.rrd afss,sent_resent.rrd afss,sent_response.rrd afss,server_connections.rrd afss,threads_idle.rrd So my SPLITNCV-configuration looks like in xymonserver.cfg TEST2RRD="...,afss=ncv" GRAPHS="...,afss::1" SPLITNCV_afss="*:GAUGE" and my graph-definitions looks like e.g.: [afss4] FNPATTERN afss,server_connections(.*).rrd TITLE Server Connections YAXIS Server Connections DEF:p at RRDIDX@=@RRDFN@:lambda:AVERAGE LINE2:p at RRDIDX@#@COLOR@:@RRDPARAM@ GPRINT:p at RRDIDX@:LAST: \: %5.1lf (cur) GPRINT:p at RRDIDX@:MAX: \: %5.1lf (max) GPRINT:p at RRDIDX@:MIN: \: %5.1lf (min) GPRINT:p at RRDIDX@:AVERAGE: \: %5.1lf (avg)\n so if i look at the trend-page, i can see one graph for e.g. afss4, afss5 or afss6 and addional 6 further dead links for afss4 .. How can i "disable" theses dead and needless graph-links in the trend-page ? And one more question, how can i show only/specially e.g. afss3 and afss4 graphs on the hole afss-cloumn, currently i see only the link under the values of the test "xymongraph ncv:afss" Thanks & Cheers Martin

1 2

[xymon] About Windows PS Client
by doctor＠makelofine.org 25 Feb '11

25 Feb '11

Le 24/02/2011 20:46, Shea, Graeme A a écrit : > Are you using a 64 bit or a 32 bit copy of Windows? WOW6432Node should only exist on Windows 64 bit though some programs write the registry entries anyway. > > The HKLM/Software/Wow6432Node can be a trap but should not be hidden, if you are running 64 bit then are you using a 32 version of RegEdit? If you use a 32 bit program to address the registry then the program sees this key instead of HKLM/Software and does not see a separate Wow6432Node at all. You can see this if you go the windows\SysWOW64 directory and run regedt32 (the 32 bit version). WOW stands for Windows On Windows as in running Windows 32 bit on Windows 64 bit. > > This is much the same as in the file system. 32 bit programs see \Windows\SysWOW64 as \Windows\System32. All the 32 bit utilities are in \Windows\SysWOW64 and for compatibility reasons the 64 bit ones are in \Windows\System32. > > Regards > Graeme > > -----Original Message----- > From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of dOCtoR MADneSS > Sent: Friday, 25 February 2011 2:40 AM > To: xymon at xymon.com > Subject: Re: [Xymon] [xymon] About Windows PS Client > > Le 24/02/2011 06:05, David Baldwin a écrit : >> On 23/02/11 10:10 PM, dOCtoR MADneSS wrote: >>> Le 25/01/2011 01:28, David Baldwin a écrit : >>>> On 25/01/11 8:05 AM, dOCtoR MADneSs wrote: >>>>> Le 24/01/2011 07:10, David Baldwin a écrit : >>>>>> On 24/01/11 3:55 AM, dOCtoR MADneSs wrote: >>>>>>> Hi, >>>>>>> >>>>>>> I found this Xymon client : >>>>>>> http://xymon.svn.sourceforge.net/viewvc/xymon/sandbox/WinPSClient/ >>>>>>> I tried to install it the way I found logical. >>>>>>> >>>>>>> 1st : I fought with Windows 7 Home Premium to allow execution on >>>>>>> PowerShell scripts. I finally edited registry and allow it manually. >>>>>>> 2nd : As administrator, I ran "powershell", then tried to install the >>>>>>> service this way : >>>>>>> .\xymonclient.ps1 install >>>>>>> >>>>>>> But I got many errors about adding service and modifying registry (all >>>>>>> errors are related to permission denial). >>>>>>> >>>>>>> Can D Baldwin, or anyone else informed about powershell and Xymon client >>>>>>> installation, help me ? >>>>>>> >>>>>> You'd need to have Administrator access to install I'm pretty sure. >>>>>> >>>>>> Please send me the errors and I'll see what I can do. I can probably >>>>>> find a Windows 7 box to test on. >>>>>> >>>>>> Thanks, David. >>>>>> >>>>> Hi, >>>>> >>>>> Can you give me informations about XymonPSClient.exe ? >>>> XymonPSClient.exe is just a renamed copy of ABC_SRVANY.EXE which is just >>>> the service runner that spawns the powershell process to run the script >>>> - it is xymonclient.ps1 that is the actual client code. >>>>> Where logs and temporary files are stored ? >>>> %TEMP%\xymonclient.log - contains date stamp and a copy of the last >>>> client report - written out as a debugging aid, the script doesn't >>>> actually need any temporary files >>>> %TEMP%\xymonconfig.cfg - contains the config returned from the server >>>> after each report is sent (i.e client-local.cfg section). >>>> >>>> Note that value of %TEMP% - or in PS $env:TEMP - will depend on whether >>>> you are running the service as specific user or just as a local service, >>>> and on the version of Windows you are using. >>>> >>>> David. >>>> >>> Hi, >>> >>> I finally installed XymonPSClient in following the readme. The logfile >>> is generated in c:\windows\temp. But I can't see anything sent to xymon >>> server. The following command : >>> xymonsend "ping" "xymonserver" >>> reports me the xymon version running on server. But nothing else. The >>> windows client is defined in bb-hosts file. All I can see is "conn", >>> "info" and "trends". >>> >>> Any idea ? I'm new to windows 7 (home premium), and don't understand >>> everything about how it works (or how it doesn't) >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >> In the file xymonclient.log the section at the top has the config values >> - most of these can be overridden in the registry as per README >> >> Two values to check: >> clientname is the name that is being reported to the server in the >> client report - it needs to match an entry in hosts.cfg/bb-hosts >> (probably exact case match) - check "Ghost Clients" report. >> servers is the address or list of addresses the client should be >> reporting to. >> >> The fact that you can "ping" the xymon server means you're pretty close >> to it working. >> >> David. >> > Thank you for your support .It seems that HKLM/Software/Wow6432Node is > an hidden registry key, as I can't see it, nor create it with that name > (error tells me that another key has the same name). In log file, > everything was OK, but nothing was sent to Xymon servers. I set it > manually with ".\xymonclient.ps1 set servers "1.2.3.4 2.3.4.5"". And > it's OK ! I can see reports on the xymon servers. I had to change a few > things in xymonclient.ps1 file, to get "usual" format for disk space > (used/total instead of total\used). Everything is OK now ! > Is there any docs on using/creating plugins for your windows client ? > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > Important - This email and any attachments may be confidential. If received in error, please contact us and delete all copies. Before opening or using attachments check them for viruses and defects. Regardless of any loss, damage or consequence, whether caused by the negligence of the sender or not, resulting directly or indirectly from the use of any attached files our liability is limited to resupplying any affected attachments. Any representations or opinions expressed are those of the individual sender, and not necessarily those of the Department of Education and Early Childhood Development. I'm sure my windows is 64bits. And I start registry editor with "regedit" command from powershell with admins rights. And in c:\windows I can't see any Wow64 directory. I remember you that I use windows 7 home premium (don't know if it's important).

3 3

performance alerts
by troy＠athabascau.ca 24 Feb '11

24 Feb '11

Yes, I was hoping to use the built-in TCP tests and their TCP Connection times. Any idea on how to do that? Troy ----- Original Message ----- From: "Ryan Novosielski" <novosirj at umdnj.edu> To: xymon at xymon.com Sent: Thursday, January 13, 2011 12:03:52 PM GMT -07:00 US/Canada Mountain Subject: Re: [xymon] performance alerts -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Are you sure that's necessary? I think that might be configurable built-in with the TCP tests. On 01/13/2011 01:59 PM, Root, Paul wrote: > write a script to ping, parse the output. Use bb (or xymon) to send the > test results, red if more than 100ms, green otherwise. Maybe a yellow in > there. > > > Paul Root > Lead Internet Systems Eng > Network Services > > > > ------------------------------------------------------------------------ > *From:* Troy Adams [ mailto:troy at athabascau.ca ] > *Sent:* Thursday , January 13, 2011 12:50 PM > *To:* xymon at xymon.com > *Subject:* [xymon] performance alerts > > I'm trying to figure out how to get "bad performance" alerts. > > Here is my bb-hosts entry: > > 192.168.10.121 mbox1 # imaps > > I want to get an alert when the response time goes above 100 ms. > > Any thougths? > > > Troy > > > Troy Adams > Athabasca University > > > ------------------------------------------------------------------------ > This communication is the property of Qwest and may contain confidential or > privileged information. Unauthorized use of this communication is strictly > prohibited and may be unlawful. If you have received this communication > in error, please immediately notify the sender by reply e-mail and destroy > all copies of the communication and any attachments. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| | novosirj at umdnj.edu - 973/ 972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk0vTJgACgkQmb+gadEcsb5mJACcCJNxRoE3wSnKXuIFlAP7ZhZh TRIAnjBhqPUg8Ys/zzftK81Z4c9kkIEl =yvKe -----END PGP SIGNATURE----- To unsubscribe from the xymon list, send an e-mail to xymon-unsubscribe at xymon.com __ This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ---

3 9