May 2011 - Xymon - Xymon mailman web

procs mix windows and unix tests...
by soopal＠ice.go.cr 25 May '11

25 May '11

Besides pertinent comments from a few ones (when I have asked about advice/BP on hobbit-clients.cfg) ... Anybody have a clue about why procs tests show all procs from windows/unixses boxes instead the specific ones.... ---parts of hobbit-clients.cfg CLASS=win32 LOAD 78 98 # Load threholds are in % TIME=*:0635:1825 #alarmas rojas/amarillas en este intervalo (8x5) SVC uvnc_service status=started #UltranVNC encendido SVC TermService status=started #TS encendido PROC winvnc.exe 1 25 # Al menos un proceso de Ultravnc PROC BBWin.exe 1 1 # Solo 1 proceso de monitoreo PORT STATE=LISTENING MIN=0 TRACK=Listen TEXT=Listen LOG eventlog:System %error.* COLOR=clear #No nos interesan los logs LOG eventlog:Security %failure.* COLOR=clear #No nos interesan los logs LOG eventlog:Application %warning.* COLOR=clear #No nos interesan los logs LOG %.* %error -.* COLOR=clear #No nos interesan los logs #DOWNTIME=*:1830:0630 #puede apagarse en ese rango (8x5) debe ir en bb-hosts HOST=hssftp01 (no specs added since the class have all what I need) CLASS=SZCSolSFTP UP 45m TIME=*:0000:2400 #alarmas rojas/amarillas en este intervalo 8x5+/24x7 PROC sshd 1 -1 yellow PROC in.ftpd 1 30 red PROC cron 1 -1 yellow PORT "LOCAL=%([.:]21)$" state=LISTEN TEXT=ftp MEMSWAP 25 55 MEMPHYS 99 101 MEMACT 90 98 LOAD 8 10 CLOCK 95 #DOWNTIME=*:1205:1210 #puede apagarse en ese rango (8x5+/24x7) debe ir en bb-hosts DEFAULT # These are the built-in defaults. UP 1h LOAD 8.0 10.0 DISK * 97 99 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 95 ----parts of bb-hosts file 10.xxx.xxx.xxx hssftp01.hss.dnm.icetel.ice # COMMENT:"FTP Server 01" CLIENT:hssftp01 CLASS:SZCSolSFTP testip prefer multihomed ssh files ports uptime vmstat ftp procs TRENDS:*,ifstat ------Error that I received with procs test enable. (and it’s a unix box) red Mon May 2 13:43:32 CST 2011 - Processes NOT ok sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) httpd (found 12, req. 1 or more) cron (found 1, req. 1 or more) cron (found 1, req. 1 or more) %hobbitd (found 26, req. between 1 and 1) winvnc.exe (found 0, req. between 1 and 25) oracle.exe (found 0, req. between 1 and 1) BBWin.exe (found 0, req. between 1 and 1) winvnc.exe (found 0, req. between 1 and 25) NBConsole.exe (found 0, req. between 1 and 1) BBWin.exe (found 0, req. between 1 and 1) %^nb*.exe (found 0, req. 1 or more) sshd (found 3, req. 1 or more) named (found 1, req. 1 or more) cron (found 1, req. 1 or more) winvnc.exe (found 0, req. between 1 and 25) VisualSVNServer.exe (found 0, req. between 1 and 10) BBWin.exe (found 0, req. between 1 and 1) tnslsnr (found 0, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) %ora_.* (found 0, req. 1 or more) winvnc.exe (found 0, req. between 1 and 25) sqlservr.exe (found 0, req. between 1 and 10) BBWin.exe (found 0, req. between 1 and 1) sshd (found 3, req. 1 or more) %java -jar /opt/dai/dai.jar (found 0, req. between 1 and 1) %java -classpath .:./Frontal* (found 0, req. 1 or more) winvnc.exe (found 0, req. between 1 and 25) BBWin.exe (found 0, req. between 1 and 1) winvnc.exe (found 0, req. between 1 and 25) BBWin.exe (found 0, req. between 1 and 1) sshd (found 3, req. 1 or more) in.ftpd (found 0, req. between 1 and 30) cron (found 1, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) tnslsnr (found 0, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) %ora_.* (found 0, req. 1 or more) Thanks a lot! Este mensaje de correo electrónico, incluidos los archivos adjuntos, es para el uso exclusivo de la persona a la que se ha enviado, y puede contener información que sea confidencial o protegida legalmente. Si usted no es el destinatario, o ha recibido este mensaje por error, no está autorizado a copiar, distribuir, o utilizar de alguna manera este mensaje. Por favor notifique inmediatamente al remitente por correo electrónico y suprimir permanentemente este mensaje y los archivos adjuntos. No se otorga ninguna garantía de que este e-mail esté libre de errores o virus. INSTITUTO COSTARRICENSE DE ELECTRICIDAD

2 1

html_mail.pl help
by david.baldwin＠ausport.gov.au 25 May '11

25 May '11

Joe, > I got your name from the html_mail.pl script. I recently updated to > xymon 4.3.2 and tried to go live in production. > > On all alerts it seems to send out alerts to this one email address. > it seems to send out to all that are intended to receive the emails > but the one email has only two hosts that it monitors and gets alerts > from. now it gets emails on the entire environment. > I can't follow what the problem is. The script gets called from the alerts.cfg file via the SCRIPT keyword. The hosts it applies to will be determined by the alerts.cfg file rules. The recipient for e-mails is specified by the RCPT environment variable when the script is called. Without the old and new config to compare, I can't help any further. > I see a lot of references to BB, has this script been updated? > The environment variable names have not changed that I know of, but I haven't used it with 4.3.x myself yet. > # Version Author Details > # ------- ------ ------- > # 1.0 Martin Ward Initial version. See code for details. > # 1.1 David Baldwin Clean up, remove hard-coded paths. > # 1.2 David Baldwin format message as alternative parts > for plaintext and HTML views > > thanks for your help I've CCed to the xymon list which is a better place to get general help. David. -- David Baldwin - IT Unit Australian Sports Commission www.ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au Leverrier Street Bruce ACT 2617 ------------------------------------------------------------------------------------- Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender. -------------------------------------------------------------------------------------

1 0

upgrading from xymon 4.2.3 to 4.3.3
by Daniel.Nordquist＠orlandohealth.com 24 May '11

24 May '11

I was looking over the documentation and I had a quick question. The version of Xymon I'm using still uses the old file names from BB. Does the "Upgrading from Big Brother to Xymon" document apply to the version of Xymon I'm using? Any differences I should be aware of? Thanks, Dan ________________________________ This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandohealth.com . If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Health by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Health.

2 4

Devmon on Xymon 4.3.2 - if_load and temp issue for all devmon hosts
by willowbrookmagic＠hotmail.com 24 May '11

24 May '11

I hope someone can help me. I set up a test server and installed xymon 4.3.2 and i didn't feel confident with upgrading so i moved all my content and custom configruations into the new test xymon 4.3.2 i got everything looking good on the test server and moved it over to production. i changed my httpd.conf devmon.cfg (BBHOST= /xymon/server/etc/host.cfg)and copied over the /data directory to the never version and started xymon and devmon. i got everything working but having issues with specific devmon graphs. cpu memory and tcp are graphing but no if_load or temp for any host using devmon is graphing. all other graphing is working. This is the last thing from holding me up from moving this into production. Nick

2 1

Poling interval at specific time.
by jayantak007＠gmail.com 23 May '11

23 May '11

Hi All, I want to make poling interval at specific time. (i) In the KPI(client side custom script), I want to configure poling interval 15 minutes in business hours(from 8:00 AM to 8:00 PM). Rest of the time KPI(client side custom script) should not execute. (ii) In the KPI(client side custom script), I want to execute script specific time (like 10:00 am, 5:00 pm, 9:00 pm etc.). Kindly help me for the same. With Thanks & Regards, Jayanta.

5 9

xymon4.3.2 and vmware
by jkokino＠gmail.com 23 May '11

23 May '11

Hi I think it would be great that Henrik or someone else puts up a blank virtual machine with snmp support preconfigured of the latest stable Xymon e.g. xymon4.3.2 and vmware. It can be CentOS, Fedora or anyother Linux based OS. This will help to make Xymon available to the general public and much easier to work with. I know there is Debian one available. Its too old 4.2.0. The troubling part is upgrading/updating Xymon to the latest, also risky for non-advanced users. For Henrik or others is a piece of cake. Henrik you can do it on a regular basis if you find this worth. Just my 2c Thanks

5 9

Xymon 4.3.2 http flapping with SSL error
by pmeech＠gmail.com 23 May '11

23 May '11

Hi All, I seem to have a bit of a problem with a large amount of devices reporting http flapping. I am monitoring in hosts.cfg https://[ip_address]:444. The SSL column always remains green, but the http column flaps with the status message: https://[ip_address]:444/ - SSL error Seconds: 5.08 Is there anyway the time that the http test awaits a response for can be increased, or is there any other way to prevent the flapping/red status? I have 90 such devices that consume a lot of RAM and the CPU regularly goes up to 90%+ (I collect SNMP stats via devmon so the flapping here can be controlled with thresholds). I presume this is why the http response can be slow, though it would normally return in 8s. Hence the question, can the http reponse time to Xymon be increased? Cheers, Phil

2 3

Hobbitd crashing
by betsy.schwartz＠gmail.com 22 May '11

22 May '11

I was playing around with hobbit-clients.cfg file trying to create a LOG rule to ignore this alert: May 21 00:54:21 redirect1-bo3.dl2.example.com monit[2029]: [ID 111343 daemon.error] 'gmond-sample.xml' timestamp test failed for /usr/local/Ganglia/logs/gmond-sample.xml I **think the rule that put it into conniptions was HOST=%redirect.*bo3.dl2.example.com LOG /var/adm/messages COLOR=yellow IGNORE=%(repeated|gmond|monit|puppetd) Also, I am experiencing something I've seen a few other times this week - a service that is not reporting, that was signed out, stays blue even when signed back in. I can't get rid of the xymond_client blue. Where is blue status stored? (it does not appear as blue on the enable/disable page but I have a blue dot on the host page and a blue report when I drill in) [xymon at netmon2 server]$ gdb bin/hobbitd_client tmp/core.24453 GNU gdb (GDB) Red Hat Enterprise Linux (7.0.1-23.el5_5.2) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /u1/xymon/server/bin/hobbitd_client...done. Reading symbols from /lib64/libpcre.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpcre.so.0 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Core was generated by `hobbitd_client'. Program terminated with signal 6, Aborted. #0 0x0000003833430265 in raise () from /lib64/libc.so.6 (gdb) bt #0 0x0000003833430265 in raise () from /lib64/libc.so.6 #1 0x0000003833431d10 in abort () from /lib64/libc.so.6 #2 0x0000000000427133 in sigsegv_handler (signum=<value optimized out>) at sig.c:57 #3 <signal handler called> #4 0x00000000004179f6 in scan_log (hinfo=0x1679440, classname=0x2b9863ae507e "sunos", logname=0x2b9863aee44b "/var/adm/messages", logdata=0x2b9863aee45e "May 21 00:57:25 redirect2-bo3.dl2.e-dialog.com last message repeated 36 times\nMay 21 00:57:35 redirect2-bo3.dl2.example.com monit[10418]: [ID 111343 daemon.error] 'gmond-sample.xml' timestamp test fa"..., section=<value optimized out>, summarybuf=0x1683a80) at client_config.c:2491 #5 0x0000000000408d0a in msgs_report ( hostname=0x2b9863ae5059 "redirect2-bo3.dl2.example.com", clientclass=0x2b9863ae507e "sunos", os=<value optimized out>, hinfo=0x1679440, fromline=0x7fff00bf2c50 "\nStatus message received from 10.200.32.51\n", timestr=0x2b9863ae50be "Sat May 21 01:11:24 EDT 2011", msgsstr=0x0) at xymond_client.c:1221 #6 0x000000000040fd6a in handle_solaris_client ( hostname=0x2b9863ae5059 "redirect2-bo3.dl2.example.com", clienttype=0x2b9863ae507e "sunos", os=OS_SOLARIS, hinfo=0x1679440, sender=<value optimized out>, timestamp=<value optimized out>, clientdata=0x2b9863ae5085 "client redirect2-bo3,dl2,example,com.sunos sunos\n[date") at client/solaris.c:69 #7 0x0000000000411e5f in main (argc=<value optimized out>, argv=0x7fff00bf3368) at xymond_client.c:2199

2 8

Logn Poling Interval icon color goes into "purple".
by jayantak007＠gmail.com 22 May '11

22 May '11

Hi All, I configured KPIs in client side. My poling Interval is 120 minutes. In "clientlaunch.cfg" file I had given “INTERVAL 120m”. But every 30 minutes KPI color got changed into “purple” color even there is no status change in the same KPI. Kindly let me know how I can resolve the problem. With Regards, Jayanta.

2 2

xymon 4.3.3 svcstatus
by icepickjazz＠gmail.com 22 May '11

22 May '11

I copied the svcstatus.c file from the 4.3.2 distro to the 4.3.3 and recompiled and resinstalled. svcstats works fine now. Need to figure out why 4.3.3 svcstatus.c is doesn't work.

1 0