September 2011 - Xymon - Xymon mailman web

FW: FW: Regular expression
by Neil.Simmonds＠express-gifts.co.uk 13 Dec '11

13 Dec '11

With some assistance from users on here I've finally managed to get this working after starting with LOG %.* %.*error.* COLOR=red. Some careful and staged refinement of the regex got me to this, LOG %application "%Backup Exec System Recovery.{1,50}Error.*" COLOR=red That seems to work fine and gives me the level of granularity for the failures that I wanted. Thanks to all who helped. ________________________________ From: Lerch, Alfred [mailto:alfred_lerch at mentor.com] Sent: 28 September 2011 11:58 To: Neil Simmonds Subject: RE: [Xymon] FW: Regular expression I took me quite a bit of trial and horror to get log ignores to work with BBWin in central mode - and it isn't nice... I had a lot of PowerShell entries to suppress. Basically neither ignoring event types like success, informational etc. nor ignoring by event number seem to work. I finally went for ANALYSIS.CFG CLASS=mywinserver LOG %.* %^critical.* COLOR=red LOG %.* %^error.* COLOR=red LOG %.* %^failure.* COLOR=red LOG %.* %^warning.* COLOR=yellow CLIENT-LOCAL.CFG [mywinserver] eventlog:windows powershell:5120 ignore Engine state is changed from None to Available etc etc etc And make sure you are using the class in your bbwin.cfg on the client. Good luck Alfred From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Neil Simmonds Sent: Freitag, 23. September 2011 15:37 To: xymon at xymon.com Subject: [Xymon] FW: Regular expression Thanks for that Daniel, It's still not working. I've even reduced it down to the following, LOG eventlog:application Error COLOR=red I've also tried LOG eventlog_application Error COLOR=red And LOG application Error COLOR=red All with no success. These entries are all in analysis.cfg on the server and the BBWin agent is running in central mode. I'd really like to get this working if anyone can help? Regards, Neil. ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of McDonald, Dan Sent: 22 September 2011 16:43 To: Xymon Subject: Re: [Xymon] Regular expression On 9/22/11 7:54 AM, "Neil Simmonds" <Neil.Simmonds at express-gifts.co.uk> wrote: > Hi all, > > I¹m trying to monitor a Windows event log for an error, > > I¹ve got BBWin 0.12 installed in central mode and I¹ve successfully got the > eventlogs showing up in messages, > > However if I get an error from Backup Exec similar to this, > > error - 2011/09/22 13:30:00 - Backup Exec System Recovery (100) - Error > EC8F17B7: Cannot create recovery points for job: BACKUP_SCHED_01_30_SAT. Error > E7B70001: Win32/Win64 API DeviceIoControl(IOCTL_VSNAP_VDIFF_STOP) failed. > Error EBAB03F1: The device does not recognize the command. Details: 0xE7B70001 > Source: Backup Exec System Recovery > > Despite the fact that I have this, ³LOG eventlog:Application %(Backup Exec > System Recovery\.+?|Error) COLOR=yellow² in my analysis.cfg file the color > doesn¹t change. Why did you escape the . ? If you remove the \ in front of the ., it might work better. I don't think you need to specify greediness either. In other projects we tend to be very suspicious of unqualified .+ expansions, as they can consume a lot of memory. You might try something like: %(Backup Exec System Recovery.{1,50}Error) That is read as "look for the exact words "Backup Exec System Recovery", followed by the word "Error" no more than 50 characters later..." -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030 Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

2 1

xymon 4.3.5 errors
by tdiehl＠rogueind.com 06 Dec '11

06 Dec '11

Hi, I just upgraded from 4.3.4 to 4.3.5 and I am getting errors that I do not understand. I would appreciate it if someone could tell me what to look at to correct the errors in the following log snippets: ==> xymonlaunch.log <== 2011-09-20 16:06:59 xymonlaunch starting 2011-09-20 16:06:59 Loading tasklist configuration from /usr/lib/xymon/server/etc/tasks.cfg 2011-09-20 16:06:59 Loading hostnames 2011-09-20 16:06:59 Cannot load host data 2011-09-20 16:06:59 Loading saved state 2011-09-20 16:06:59 Setting up network listener on 0.0.0.0:1984 2011-09-20 16:06:59 Setting up signal handlers 2011-09-20 16:06:59 Setting up xymond channels 2011-09-20 16:06:59 Setting up logfiles ==> xymongen.log <== 2011-09-20 16:07:04 xymond status-board not available, code 0 2011-09-20 16:07:04 Failed to load current Xymon status, aborting page-update ==> history.log <== 2011-09-20 16:07:51 Peer not up, flushing message queue ==> rrd-status.log <== 2011-09-20 16:07:51 Peer not up, flushing message queue ==> xymond.log <== 2011-09-20 16:07:51 Whoops ! Failed to send message (timeout) 2011-09-20 16:07:51 -> 2011-09-20 16:07:51 -> Recipient '192.168.0.2', timeout 15 2011-09-20 16:07:51 -> 1st line: 'config hosts.cfg' 2011-09-20 16:07:51 Cannot load hosts.cfg from xymond, code 7 2011-09-20 16:07:51 Failed to load from xymond, reverting to file-load I am using the exact same hosts.cfg as I used with 4.3.4. selinux is in permissive and the permissions on hosts.cfg are as follows. (bugs pts10) # ll /etc/xymon/hosts.cfg -rw-r--r-- 1 root root 4255 Aug 30 04:57 /etc/xymon/hosts.cfg (bugs pts10) # In addition, restarting xymon clears all of the acks and disabled hosts. I can reset them without problem but I do not understand why they are getting deleted. If it matters the system is a Centos 5 i386 box. Regards, -- Tom Diehl tdiehl at rogueind.com Spamtrap address mtd123 at rogueind.com

3 3

secondary/slave dns server monitoring
by naveen＠lastninja.net 14 Nov '11

14 Nov '11

Hi, When specifying dns tests in the hosts.cfg file, does xymon perform a dns/dig lookup to the server IP address, or is it a lookup using the resolver of the server hosting xymon? I want to construct some tests to ensure that DNS is active/resolving for a secondary/slave DNS servers without requiring the server to run the agent. Thanks. -- Naveen Nathan To understand the human mind, understand self-deception. - Anon

2 1

customize the email body alerts for xymon
by Alan.FORD＠stanwell.com 03 Nov '11

03 Nov '11

I have written an email script which displays as html (of course you have to have a html enabled email client). It checks for individual services and displays a fixed message, could also add checks for specific hosts to. Here is a sample (not sure if html will display properly thru here) Xymon Alert (red) : files utnfrc01.stanwell.com Files on server testserver.stanwell.com have not been updated recently testserver.stanwell.com:files red [124238] red Files status at Tue May 17 04:05:58 EST 2011 [red]/stanwell/data/mms/loader/Reports/STANWELL_P5MIN_201105170410_20110517040540.zip</xymon-cgi/bb-hostsvc.sh?CLIENT=utnfrc01.stanwell.com&SECTION=file:/stanwell/data/mms/loader/Reports/STANWELL_P5MIN_201105170410_20110517040540.zip> File is missing File is missing [yellow]/stanwell/data/scada/sps/incoming/unit2/MTBIN.DAT</xymon-cgi/bb-hostsvc.sh?CLIENT=utnfrc01.stanwell.com&SECTION=file:/stanwell/data/scada/sps/incoming/unit2/MTBIN.DAT> File is missing [green]/stanwell/data/mms/batcher/Holding</xymon-cgi/bb-hostsvc.sh?CLIENT=utnfrc01.stanwell.com&SECTION=file:/stanwell/data/mms/batcher/Holding> From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Vernon Everett Sent: Monday, 16 May 2011 9:21 PM To: sonal kumar Cc: Xymon mailinglist Subject: Re: [Xymon] customize the email body alerts for xymon Use the script option in the alerts file. At a previous client, we had a very specific problem we were monitoring for. Instead of Xymon sending a standard alert email, I needed a set of detailed instructions sent out, indicating how to resolve the issue. I then created a script to send the custom email, instead. It worked so well, the client asked me to use the technique for a number of other problem areas. Most popular use was to send instructions to helpdesk, explaining who to log the call to, and the severity level. Regards Vernon ________________________________________________________________________________ This email (including all attachments) may contain personal information and is intended solely for the named addressee. It is confidential and may be subject to legal or other professional privilege and any confidentiality or privilege is not waived or lost because this email has been sent to you by mistake. This email is also subject to copyright. No part of it should be reproduced, adapted or communicated without the written consent of the copyright owner. Any personal Information in this email must be handled in accordance with the Privacy Act 1988 (Cth). If you have received it in error, please let Stanwell Corporation Limited know by reply email, delete it from your system and destroy any copies. Stanwell is not responsible for any changes made to a document other than those made by Stanwell. Stanwell accepts no liability for any damage caused by this email or its attachments due to viruses, interference, interception, corruption or unauthorised access. If you have any doubts about the authenticity of an email purportedly sent by us, please contact us immediately. If this is a commercial electronic message within the meaning of the Spam Act 2003 (Cth), you may indicate that you do not wish to receive any further commercial electronic messages from Stanwell by emailing mailto:privacy at stanwell.com... ________________________________________________________________________________

2 3

Xymon Digest, Vol 8, Issue 20
by y.goudetsidis＠mail.cryst.bbk.ac.uk 18 Oct '11

18 Oct '11

Hi everyone I am junior sysadmin at a college and after a few failed attempts I successfully installed Xymon. No errors appeared after running 'make' and 'make install'. At the moment I am trying to configure my web server(Apache/2.2.3 ) (which is located on the same machine as xymon) and I am following the instructions on the "installing Xymon" link (http://www.xymon.com/xymon/help/install.html) but I can not really understand what changes I have to make. It says on the link that I have to make the necessary additions to the apache configuration in ~/server/etc/xymon-apache.conf. What lines do I have to add/change and where can I find this file? As you can understand my apache knowledge is limited, I only installed it so I can run Xymon. Could someone please help me? Many thanks Yanni On September 26, 2011 at 12:00 PM xymon-request at xymon.com wrote: > Send Xymon mailing list submissions to > xymon at xymon.com > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.xymon.com/mailman/listinfo/xymon > or, via email, send a message with subject or body 'help' to > xymon-request at xymon.com > > You can reach the person managing the list at > xymon-owner at xymon.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Xymon digest..." > > > Today's Topics: > > 1. Re: Alert based on ping response time (Vernon Everett) > 2. Re: 4.3.5 compile problems Solaris 10 x86 (Roland Soderstrom) > 3. Re: monitoring mysql with xymon (Jeremy Laidman) > 4. Re: Alert based on ping response time (Jeremy Laidman) > 5. Re: Cannot Load Host Data (Raul GN) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 26 Sep 2011 11:14:21 +0800 > From: Vernon Everett <everett.vernon at gmail.com> > To: Ryan Novosielski <novosirj at umdnj.edu> > Cc: "xymon at xymon.com" <xymon at xymon.com> > Subject: Re: [Xymon] Alert based on ping response time > Message-ID: > <CAGo4kcYbTbL9B4Xuo-bmuF3Vo4WboFN37JLnxz5QmqJ7Jk=VMg at mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > This is relatively easy to do in a script, but you would end up with a new > test. > Incorportating the time into the existing conn test is probably a task for > the likes of Henrik et al. > > Regards > Vernon > > > > On 23 September 2011 22:59, Ryan Novosielski <novosirj at umdnj.edu> wrote: > > > Anyone have any experience with this at all? > > > > On 09/21/11, *Ryan Novosielski * <novosirj at umdnj.edu> wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > I see this question has been asked on the list a few times, but I > > haven't quite gotten the complete answers from any of the old threads... > > so here goes: > > > > I see that I get ping response time with my current setup. I appear to > > be using fping already, so that recommendation is covered. The trouble > > is, the data appears to be captured as a graph is being assembled using > > it. Is there really no way to use this data for alerting as it stands > > now? It appears as if more than 10ms in my environment represents a > > problem and that setting it at 10 would probably yield no false alarms, > > but I can see no way to turn red for any value other than a failed > > ping/dropped packets. > > > > Thanks for any info you can pass along. > > - -- > > - ---- _ _ _ _ ___ _ _ _ > > |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer > > |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) > > \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.4.10 (GNU/Linux) > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > > > iEYEARECAAYFAk56VNEACgkQmb+gadEcsb7roACff5HzoFnfjHYsyLLf6mc23RbI > > s30AnA1vn+duYt2S/J9DHIjunS3eFdqq > > =mssT > > -----END PGP SIGNATURE----- > > > > ------------------------------ > > > > _______________________________________________ > > Xymon mailing list > > Xymon at xymon.com > > http://lists.xymon.com/mailman/listinfo/xymon > > > > > > -- > > ---- _ _ _ _ ___ _ _ _ > > |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer > > |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) > > \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark > > > > _______________________________________________ > > Xymon mailing list > > Xymon at xymon.com > > http://lists.xymon.com/mailman/listinfo/xymon > > > > >

5 13

bb-roracle.ksh
by robert.herron＠gmail.com 13 Oct '11

13 Oct '11

Here is my bb-roracle.ksh v2.20 that I modified to work with HP-UX's KSH88 (/bin/ksh) shell. Robert Herron robert.herron at gmail.com On Fri, Sep 10, 2010 at 9:14 AM, <xymon-digest-help at xymon.com> wrote: > > From: Vernon Everett <everett.vernon at gmail.com> > To: xymon at xymon.com > Date: Fri, 10 Sep 2010 21:14:34 +0800 > Subject: Re: [xymon] bb-roracle.ksh > See attached. > I don't recall what version of ksh I was using for this one, but I do recall it worked on the Sol8 and Sol10 default ksh. > (The default version doesn't support most of the string manipulation commands, which makes me think it's the older version) > > It did require two additional config files. > One, defined the tests to perform, and the other defined your list of databases. > Then you also had to make sure your tnsnames was available. > Instead of trying to set the path, I used to symbolically link it into the ~/client/etc/ directory. > > Give it a whirl, and see how you go. > Sorry I can't be more specific, but it's been some time since I last did database monitoring. > > Regards > Vernon > > > On Fri, Sep 10, 2010 at 8:48 PM, Gore, David W <david.gore at verizonbusiness.com> wrote: >> >> Has anybody ported this script to ksh93? I made some changes to get it half running but perhaps someone has done a more thorough and complete job who knows the differences between the older and newer Korn shells? >> >> >> >> ~David Gore >> >> >

3 3

integrate media wiki with xymon.
by cors＠corpresa.com 07 Oct '11

07 Oct '11

Hello, I would like to know, how might integrate mediawiki with xymon?, for the hostname that appear in the website, have a link to other site. Thank you, regards. ________________________________ Corpresa Hosting Tel?fono: 902 001 067 Fax: 931 001 834 E-mail: soporte-plus at corpresa.com http://corpresahosting.com

2 1

Re-add a dropped test
by wesley.knox＠siemens.com 05 Oct '11

05 Oct '11

So I removed a test from bb host and the columns would not disappear. At this point I did the bb drop command and they went away. Now I want to add them back and when I add them back into the bb host file they won't appear. Is there a cmd to Un-drop a test or a file I can edit which lists drop tests?

4 4

Remove one line of multiple from a test's graph
by Munsch＠phillycarshare.org 30 Sep '11

30 Sep '11

Your answer was a lot simpler than my presentation of the question :) Thanks! ________________________________ From: Larry Barber [mailto:lebarber at gmail.com] Sent: Friday, September 30, 2011 2:58 PM To: Rob Munsch Subject: Re: [Xymon] Remove one line of multiple from a test's graph Find the rrd file associated with the graph you want dropped and delete. It should be under $XYMONHOME/data/rrd/hostname/site.com.rrd . Thanks, Larry Barber On Fri, Sep 30, 2011 at 12:57 PM, Rob Munsch <Munsch at phillycarshare.org> wrote: Hello, I don't want to drop a test, but I'd like to remove an error from the graph of that test (which is also graphing the data I *do* want, hence needing to not drop it). I have: i.p.add.ress hostname # http://www.site.com But on the graph I have both www.site.com and site.com graphed... except site.com shows as NaN across the board, and www.site.com is doing what it should be. I'm not sure why. Site works with either, but I only need to graph one anyway... Thanks, Rob ------------------------ Rob Munsch IT Administrator PhillyCarShare 215-495-1040 x131 <tel:215-495-1040%20x131> www.phillycarshare.org <http://www.phillycarshare.org/> Our Vision: A Philadelphia in which car sharing exceeds the convenience, flexibility, and affordability of car ownership. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

1 0

Remove one line of multiple from a test's graph
by Munsch＠phillycarshare.org 30 Sep '11

30 Sep '11

Hello, I don't want to drop a test, but I'd like to remove an error from the graph of that test (which is also graphing the data I *do* want, hence needing to not drop it). I have: i.p.add.ress hostname # http://www.site.com But on the graph I have both www.site.com and site.com graphed... except site.com shows as NaN across the board, and www.site.com is doing what it should be. I'm not sure why. Site works with either, but I only need to graph one anyway... Thanks, Rob ------------------------ Rob Munsch IT Administrator PhillyCarShare 215-495-1040 x131 www.phillycarshare.org <http://www.phillycarshare.org/> Our Vision: A Philadelphia in which car sharing exceeds the convenience, flexibility, and affordability of car ownership.

1 0