June 2011 - Xymon - Xymon mailman web

Feature request/suggestions welcome - tracking ACK's
by betsy.schwartz＠gmail.com 04 Jun '11

04 Jun '11

Problem: - a noc person ACK's a yellow for 24 hours and puts information into the ACK about actions taken. When the ACK expires, the information is lost (at least in the GUI) Suggestion: -be able to find whether an alert has been ack'ed previously, see the ACK history, by clicking on the alert -have ACKs show up in history Alternative suggestion -be able to look up ACK's in the event history report I'm trying to train people to ACK instead of signing out but the loss of info is a real problem What are other people doing? thanks Betsy

2 1

FW: Feature request/suggestions welcome - tracking ACK's
by Daniel.Nordquist＠orlandohealth.com 03 Jun '11

03 Jun '11

Forwarding to the list since it was only sent to me... -----Original Message----- From: Riley, Dennis P. [mailto:dennis.riley at timken.com] Sent: Friday, June 03, 2011 10:19 AM To: Nordquist, Daniel Subject: RE: [Xymon] Feature request/suggestions welcome - tracking ACK's What about using webmin and creating custom commands to grep the log? Dennis Riley Dennis.riley at timken.com -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Nordquist, Daniel Sent: Friday, June 03, 2011 10:12 AM To: betsy.schwartz at gmail.com; Asif Iqbal Cc: xymon at xymon.com Subject: Re: [Xymon] Feature request/suggestions welcome - tracking ACK's You could use the "notes" feature of xymon and create a link to the log file for anyone on a web browser to view without giving them access to the server. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Elizabeth Schwartz Sent: Thursday, June 02, 2011 7:59 PM To: Asif Iqbal Cc: xymon at xymon.com Subject: Re: [Xymon] Feature request/suggestions welcome - tracking ACK's Yes, true, but it's not accessible without shell access to the server. The NOC guys have no way to see whether a yellow was previously ACK'ed and if so what was done about it. On Thu, Jun 2, 2011 at 6:30 PM, Asif Iqbal <vadud3 at gmail.com> wrote: > There is a acknowledge log file in xymon thanks, Betsy _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandohealth.com . If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Health by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Health. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon This message and any attachments are intended for the individual or entity named above. If you are not the intended recipient, please do not forward, copy, print, use or disclose this communication to others; also please notify the sender by replying to this message, and then delete it from your system. The Timken Company / The Timken Corporation This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited. This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandohealth.com . If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Health by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Health.

2 1

GROUP and combo testing and alerting
by shea4th＠comcast.net 03 Jun '11

03 Jun '11

Hi all, In April i had asked about multiple procs to one GROUP Can you have multiple procs associated to one GROUP? http://lists.xymon.com/archive/2011-April/031278.html Can that same GROUP be used in a combo test? It doesn't look like it's possible but I'm tossing it out there anyway. Basically 4 Windows servers running software specific to logfile monitoring with 1 of them always in standby mode. One group needs to know when the processes for their application switches and doesn't care for the processes the systems group looks for and vice-versa. Being a regular joe, I don't have access to these servers to write a local test, so that's out. I'm using BBWin_0.12 in central mode. Thanks Greg Shea EMC Corporation

1 0

Feature request/suggestions welcome - tracking ACK's
by vadud3＠gmail.com 03 Jun '11

03 Jun '11

There is a acknowledge log file in xymon On Jun 2, 2011 2:24 PM, "Elizabeth Schwartz" <betsy.schwartz at gmail.com> wrote:

4 3

Rpm .spec file for 4.3.3?
by dan.mcdonald＠austinenergy.com 02 Jun '11

02 Jun '11

I suppose I should go build this myself, but the rpm .spec file in the 4.3.3 tarball doesn¹t successfully build an rpm under Mandriva Enterprise server 5.2: RPM build errors: File not found: /tmp/xymon-root/var/lib/xymon/www/menu/xymonmenu.css File not found: /tmp/xymon-root/etc/xymon/critical.cfg.bak File listed twice: /usr/lib/xymon/client/bin/clientupdate File listed twice: /usr/lib/xymon/client/bin/logfetch File listed twice: /usr/lib/xymon/client/ext -- Daniel J McDonald, CCIE # 2495, CISSP # 78281

1 0

Configuring Devmon for the first time
by jmartin23＠csc.com 02 Jun '11

02 Jun '11

I agree it's a bit off-topic, but just to answer the question: The "x" prefix for testing variables (more commonly the upper case "X", because that's the example in the man page :-) is common practice to avoid the test getting confused by unexpected values in the variable, In particular, the test tends to throw the comparison out if the variable should start with a "-". Prefixing the variable would convert this to "X-", which is correctly processed by the test comparison. For example: VAR="-value" [ "$VAR" == "something" ] will fail, trying to process "-value" as a qualifier. [ "X$VAR" == "Xsomething" ] will correctly find an inequality Cheers, John JOHN MARTIN From: Ryan Novosielski <novosirj at umdnj.edu> To: xymon at xymon.com Date: 31/05/2011 08:22 Subject: Re: [Xymon] Configuring Devmon for the first time -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The X is a trick that deals with empty variables, and I suppose keeps some interpreters from complaining about doing a test on a blank variable. I've seen this done frequently enough to know that people do it, but I agree, it looks a little odd and I'm not sure I'd write a program that way myself. This is off topic, but I'd love to know if anyone has any comments on that particular thing. Shortcut to avoid needing to check for empty variables I guess? On 05/31/2011 12:57 AM, Josh Luthman wrote: > That probably makes more sense then to use Lynx, good idea. > > What's with the "x" in the variable? > > Would you mind telling me what values you used for date? > > Josh Luthman > Office: 937-552-2340 > Direct: 937-552-2343 > 1100 Wayne St > Suite 1337 > Troy, OH 45373 > > > On Tue, May 31, 2011 at 12:53 AM, David Baldwin > <david.baldwin at ausport.gov.au <mailto:david.baldwin at ausport.gov.au>> wrote: > > On 31/05/11 11:24 AM, kconnell at ryerson.ca > <mailto:kconnell at ryerson.ca> wrote: > > I've had issues with devmon not updating the bb-display and > everything going purple. > > I've had this issue since day one (which is over two years now). > > > > I created a "devmon watchdog" script that's runs every 5 min using > lynx (txt base html browser) which checks if the status of devmon > (shows as dm test) on bb-monitor. If its purple then I kill the > devmon process and start it up again....band-aid solution, but it > does the trick. > > > > I no script expert, but can share the bash script if you want/need. > > > Here's mine (replace xymonserver with your hostname): > > #!/bin/sh > COL=`bb xymonserver "hobbitdboard xymonserver.dm > <http://xymonserver.dm> fields=color"` > if [ "x$COL" == "xpurple" ] ; then > (date "+%x %X restarting purple devmon" > /etc/init.d/devmon restart) | tee /var/log/devmon-restart.log | mail > -s "Restarting devmon" xymonadmin > fi - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3kiUMACgkQmb+gadEcsb5yCwCg2I2+K79zvEHjbvpVrPyEf3vg XTgAoIdr0SfWmctf+B41YHb1y6XMXJz7 =o/i3 -----END PGP SIGNATURE----- [attachment "novosirj.vcf" deleted by John P Martin/GIS/CSC] _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

2 1

Configuring Devmon for the first time
by bgmilne＠staff.telkomsa.net 01 Jun '11

01 Jun '11

On Tuesday, 31 May 2011 03:24:05 kconnell at ryerson.ca wrote: > I've had issues with devmon not updating the bb-display and everything > going purple. Firstly, I don't think this is Josh's problem, as he didn't have a devmon process, whereas this behaviour is typically that devmon hangs (but the process is still running). If you have different behaviour to the I discuss below, please log a new tracker item. The 'hang' issue is covered in this tracker item: http://sourceforge.net/tracker/?func=detail&aid=2897345&group_id=160720&ati… (Unfortunately, it was logged anonymously, and I have had no feedback on improvements in devmon svn for this issue, either via the tracker, or the mails on the mailing list) Discussion of the issue also occurred on the devmon-support mailing list: http://sourceforge.net/mailarchive/forum.php?thread_name=201102021424.30555… support The status has not changed, my failure logs still die at: [11-05-05 at 15:54:02] DEBUG: Printing single combo message size 13390 [11-05-05 at 15:54:02] DEBUG: Finished printing single combo message [11-05-05 at 15:55:42] Fork 3 timed out waiting for data from parent: Timeout at /usr/share/devmon/modules/dm_snmp.pm line 516, <$__ANONIO__> line 30203. The printing code is wrapped in an eval'd alarm subroutine which should return within 10 seconds, and log that the printing had completed or that it had timed out. Instead, the fork has noticed that it hasn't seen anything from the 'master' process within the poll period for some time 40s later. The question is, what should be done in this case? Should the forks attempt to kill the master devmon process? Anyway, I would be grateful if someone could reproduce this on a different platform. I currently see this on RHEL5 x86_64 with perl-5.8.8-27.el5. Other environments have been green since 25 Jan ( since they were upgraded to rev 214: http://devmon.svn.sourceforge.net/viewvc/devmon?view=revision&revision=214) > I created a "devmon watchdog" script that's runs every 5 min using lynx > (txt base html browser) which checks if the status of devmon (shows as dm > test) on bb-monitor. If its purple then I kill the devmon process and > start it up again....band-aid solution, but it does the trick. > > I no script expert, but can share the bash script if you want/need. Here is mine, but I am *not* going to add it to svn and the next release unless I have had some feedback on the changes to prevent this occurring at all, preferable with the failure logs the script keeps. I run mine from hobbitlaunch.cfg (the problematic box is still running 4.2.2 for now): [devmon] ENVFILE /usr/lib64/hobbit/server/etc/hobbitserver.cfg CMD /usr/local/bin/restart-devmon-if-purple INTERVAL 1m LOGFILE /var/log/hobbit/devmon-restart.log I have a sudo rule in place to allow the hobbit user to call 'sudo /etc/init.d/devmon stop' #!/bin/bash if [ "$BB" == "" ] then echo "This script must be run under a Hobbit or Xymon environment" >&2 echo "e.g. by: bbcmd $0" >&2 exit 1 fi if [ "$BBDISPLAYS" != "" ] then BBDISP=${BBDISPLAYS#,*} fi COLOR=$($BB $BBDISP "hobbitdboard host=$HOSTNAME test=dm" | cut -d'|' -f3) if [ "`id -u`" -eq 0 ] then DEVMON="/etc/init.d/devmon" PKILL="pkill" else DEVMON="sudo /etc/init.d/devmon" PKILL="sudo pkill" fi if [ "$COLOR" == "purple" ] then LOGSAVE=/var/log/devmon/failures/devmon-failure-`date +%Y-%m-%d-%H:%M: %S`.log echo "Devmon is purple, saving last 200 lines of log to $LOGSAVE" tail -n200 /var/log/devmon/devmon.log > $LOGSAVE $DEVMON stop NUM=$(pgrep -u devmon|wc -l) if [ "$NUM" -ne 0 ] then echo "Devmon failed to stop cleanly, terminating manually" $PKILL -u devmon sleep 5 fi NUM=$(pgrep -u devmon|wc -l) if [ "$NUM" -ne 0 ] then echo "Devmon failed to terminate cleanly, killing manually" $PKILL -9 -u devmon fi $DEVMON start else [ "$DEBUG" == 1 ] && echo "Devmon isn't purple, it is $COLOR" fi Regards, Buchan

2 1

Configuring Devmon for the first time
by bgmilne＠staff.telkomsa.net 01 Jun '11

01 Jun '11

On Tuesday, 31 May 2011 03:24:05 kconnell at ryerson.ca wrote: > I've had issues with devmon not updating the bb-display and everything > going purple. I've had this issue since day one (which is over two years > now). > > I created a "devmon watchdog" script that's runs every 5 min using lynx > (txt base html browser) which checks if the status of devmon (shows as dm > test) on bb-monitor. If its purple then I kill the devmon process and > start it up again....band-aid solution, but it does the trick. > > I no script expert, but can share the bash script if you want/need. I have made a lot of changes to the version in svn, and they have resolved the majority of the problems I have had with devmon. There has been one additional problem in one environment, but I can't pinpoint it as a bug in devmon (it looks like a bug in perl). However, though I have asked on the devmon mailing list for others to test, I have had *no* other feedback on the changes made since January. I am reluctant to release it as 0.3.1 final without any other feedback. Regards, Buchan

1 0

Windows PS client svcs data missing
by SKreien＠la-z-boy.com 01 Jun '11

01 Jun '11

Raymond, I'm trying to implement the code you sent… or at least trying to muddle through it. I've never attempted anything in powershell until now. I have two questions that I'm hoping you can help with… I can't find any way to get the startup setting, IE whether it's automatic, manual, etc. Also, I'm struggling trying to line up the columns in the output. Any clues you can give me on both would be appreciated. Scot Kreienkamp Senior Systems Engineer skreien at la-z-boy.com From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Storer, Raymond Sent: Monday, May 16, 2011 10:38 AM To: David Baldwin Cc: xymon at xymon.com Subject: Re: [Xymon] Windows PS client svcs data missing David, you can also use the “Load” method instead as follows: [Reflection.Assembly]::Load(‘System.ServiceProcess, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a’) Ray From: David Baldwin [mailto:David.Baldwin at ausport.gov.au] Sent: Monday, May 16, 2011 12:39 AM To: 'Scot Kreienkamp'; Storer, Raymond Cc: xymon at xymon.com Subject: RE: [Xymon] Windows PS client svcs data missing Ray, Thanks for the code. I’m a bit wary of using something with such a version specific path though – is that seriously a “standard” interface to a .Net DLL that can be expected to have some degree of persistence? I’m offsite this week, will try to take a look next week. Thanks, David. From: Scot Kreienkamp [mailto:SKreien at la-z-boy.com] Sent: Saturday, 14 May 2011 5:54 AM To: Storer, Raymond; David Baldwin Cc: xymon at xymon.com Subject: RE: [Xymon] Windows PS client svcs data missing Thank you Raymond… If I knew how to implement it I would. Hopefully David or Henrik can find the time to experiment with it. I'm seeing all kinds of problems with the PS client…. If this keeps up I'll have to remove it. It pegged one of my servers at 100% for over an hour, stuck on the WMI yesterday. Scot Kreienkamp Senior Systems Engineer skreien at la-z-boy.com From: Storer, Raymond [mailto:storerr at nibco.com] Sent: Friday, May 13, 2011 12:58 PM To: David Baldwin; Scot Kreienkamp Cc: xymon at xymon.com Subject: RE: [Xymon] Windows PS client svcs data missing Opps… I missed the “.” in the [Reflection.Assembly]. Also, you can pipe it to out-null to avoid any unwanted output. So: [Reflection.Assembly]::LoadFile(‘C:\WINDOWS\Microsoft.Net\Framework\v2.0.50727\System.ServiceProcess.dll’) | out-null Ray From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Storer, Raymond Sent: Friday, May 13, 2011 11:40 AM To: David Baldwin; Scot Kreienkamp Cc: xymon at xymon.com Subject: Re: [Xymon] Windows PS client svcs data missing Scot and David, if you’d prefer to implement a .net pure call for services you can try the following: # your path to the file may very [ReflectionAssembly]::LoadFile(‘C:\WINDOWS\Microsoft.Net\Framework\v2.0.50727\System.ServiceProcess.dll’) #get all the services installed on the local machine $serviceController = [System.ServiceProcess.ServiceController]::GetServices() foreach ($svc in $serviceController) { # should indicate: Stopped, Running, or Paused … others??? write-host $svc.Status # the service name write-host $svc.Name # the service display name write-host $svc.DisplayName } Ray [snip] ________________________________ CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message. This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

1 0