September 2011 - Xymon - Xymon mailman web

Poll: How many are using the "dispinclude" and "netinclude" options in hosts.cfg / bb-hosts ?
by henrik＠hswn.dk 29 Sep '11

29 Sep '11

Hi, I have a question for all of you. xymongen and xymonnet currently reads the hosts.cfg file from disk when they generate the webpages or run the network tests. Ever since the "bbgen toolkit" days, these programs have supported an additional type of "include" statement in hosts.cfg / bb-hosts: "dispinclude" works like "include", but is recognized only by xymongen, and "netinclude" does the same for xymonnet. I am considering removing these options, since that would make it very simple to eliminate the need for xymongen and xymonnet to have access to the hosts.cfg file - they can just fetch it from xymond, which both of them need to talk to anyway. But before I rip out this code, I would like to know how many are actually using it. So if you do use either of these commands in your hosts.cfg file, please speak up. Regards, Henrik

4 4

Growl Notifications
by storerr＠nibco.com 29 Sep '11

29 Sep '11

Has anyone implemented Growl notifications for Xymon? If so, can you point me to it? Thanks. Ray ________________________________ CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

3 2

Growl Notifications
by jdustin＠usm.maine.edu 28 Sep '11

28 Sep '11

RSS feeds are already in Xymon (at least they were in Hobbit). Check the docs. I've started to look at Growl,, but not made much progress. Please forgive typos - sent from a mobile device On Sep 28, 2011, at 15:46, "Peter Welter <peter.welter at gmail.com>" <peter.welter at gmail.com> wrote: > Hi Raymond, > > Has anybody already contacted you about Xymon/Growl interaction? > > I'm looking for the same. > > I thought that this or either rss-feeds would be great way to inform the anyone. > > regards, Peter > > > > 2011/7/29 Storer, Raymond <storerr at nibco.com> > Has anyone implemented Growl notifications for Xymon? If so, can you point me to it? > > > > Thanks. > > > > Ray > > > CONFIDENTIALITY NOTICE: This email and any attachments are for the > exclusive and confidential use of the intended recipient. If you are not > the intended recipient, please do not read, distribute or take action in > reliance upon this message. If you have received this in error, please > notify us immediately by return email and promptly delete this message > and its attachments from your computer system. We do not waive > attorney-client or work product privilege by the transmission of this > message. > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > <part.002>

1 0

Multiple Alerts from a single test
by MMulligan＠llbean.com 28 Sep '11

28 Sep '11

I have a question with reguards to alerting and wonder if anyone else has a work around for this. We use MQ to send messages between platforms and have a script ( bb-mqseries from deadcat I believe) that sends an alert to Xymon if the depth of certain queues exceeds thier thresholds. We sometimes have several alerts for different queues at once but if the alert is already red we receive no notification that a new queue is also alerting as it only 1 test and once it turns red or yellow it becomes a manual process to monitor if anything new has alerted.. Does anyone know of a way to cause this to "realert" and go thru the alert process again or to send a new email to the team specified in the alert when a "new" red alert is sent. The only thing I have thought of is to break down the test and send each queue that needs to monitored seperately but with the number of queues that need to be monitored it definately does not feel like a good solution as this could effectively make several screens near unreadable with the amount of test columns that would be displayed. Thanks, Mark Mulligan Operations Analyst

2 1

FW: FW: Regular expression
by Neil.Simmonds＠express-gifts.co.uk 28 Sep '11

28 Sep '11

With some assistance from users on here I've finally managed to get this working after starting with LOG %.* %.*error.* COLOR=red. Some careful and staged refinement of the regex got me to this, LOG %application "%Backup Exec System Recovery.{1,50}Error.*" COLOR=red That seems to work fine and gives me the level of granularity for the failures that I wanted. Thanks to all who helped. ________________________________ From: Lerch, Alfred [mailto:alfred_lerch at mentor.com] Sent: 28 September 2011 11:58 To: Neil Simmonds Subject: RE: [Xymon] FW: Regular expression I took me quite a bit of trial and horror to get log ignores to work with BBWin in central mode - and it isn't nice... I had a lot of PowerShell entries to suppress. Basically neither ignoring event types like success, informational etc. nor ignoring by event number seem to work. I finally went for ANALYSIS.CFG CLASS=mywinserver LOG %.* %^critical.* COLOR=red LOG %.* %^error.* COLOR=red LOG %.* %^failure.* COLOR=red LOG %.* %^warning.* COLOR=yellow CLIENT-LOCAL.CFG [mywinserver] eventlog:windows powershell:5120 ignore Engine state is changed from None to Available etc etc etc And make sure you are using the class in your bbwin.cfg on the client. Good luck Alfred From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Neil Simmonds Sent: Freitag, 23. September 2011 15:37 To: xymon at xymon.com Subject: [Xymon] FW: Regular expression Thanks for that Daniel, It's still not working. I've even reduced it down to the following, LOG eventlog:application Error COLOR=red I've also tried LOG eventlog_application Error COLOR=red And LOG application Error COLOR=red All with no success. These entries are all in analysis.cfg on the server and the BBWin agent is running in central mode. I'd really like to get this working if anyone can help? Regards, Neil. ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of McDonald, Dan Sent: 22 September 2011 16:43 To: Xymon Subject: Re: [Xymon] Regular expression On 9/22/11 7:54 AM, "Neil Simmonds" <Neil.Simmonds at express-gifts.co.uk> wrote: > Hi all, > > I¹m trying to monitor a Windows event log for an error, > > I¹ve got BBWin 0.12 installed in central mode and I¹ve successfully got the > eventlogs showing up in messages, > > However if I get an error from Backup Exec similar to this, > > error - 2011/09/22 13:30:00 - Backup Exec System Recovery (100) - Error > EC8F17B7: Cannot create recovery points for job: BACKUP_SCHED_01_30_SAT. Error > E7B70001: Win32/Win64 API DeviceIoControl(IOCTL_VSNAP_VDIFF_STOP) failed. > Error EBAB03F1: The device does not recognize the command. Details: 0xE7B70001 > Source: Backup Exec System Recovery > > Despite the fact that I have this, ³LOG eventlog:Application %(Backup Exec > System Recovery\.+?|Error) COLOR=yellow² in my analysis.cfg file the color > doesn¹t change. Why did you escape the . ? If you remove the \ in front of the ., it might work better. I don't think you need to specify greediness either. In other projects we tend to be very suspicious of unqualified .+ expansions, as they can consume a lot of memory. You might try something like: %(Backup Exec System Recovery.{1,50}Error) That is read as "look for the exact words "Backup Exec System Recovery", followed by the word "Error" no more than 50 characters later..." -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030 Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

1 0

Feature request for log test
by Johan.Sjoberg＠deltamanagement.se 28 Sep '11

28 Sep '11

Hi. We have a syslog server which receives logs from a number of servers and network devices. Currently we use the log test in Xymon to check for errors in these logs, and it works fine. But it is a little blunt since all log test end up in the same msgs test. It could also be a problem if we get an error in one log file, and need to ack or disable the test. In this case we would not get any alert if there were errors in one of the other logs. It would have been nice if you could add a client definition to a logfile test in analysis.conf, and report each log file as the device which is originates from. Or maybe as a separate syslog test to distinguish it from the msgs test. This way we could also set up individual alerts for the different logged devices. I could, of course, write a client- or serverside script for this, but I always find it difficult to do good log monitoring scripts and it would be nice to be able to use the logic already in Xymon What do you think? Would anyone else be interested in this feature? I also have no idea how much work it would be. /Johan

4 5

Installing on a cluster Node
by Steve.Newton＠PHH.com 28 Sep '11

28 Sep '11

Hello, Can someone tell me how I can install bbwin client on a virtual cluster node? Steve Newton

2 1

Xymon Digest, Vol 8, Issue 20
by alevin＠gmail.com 28 Sep '11

28 Sep '11

Yanni, All directives for xymon related apache directories ( including cgi-* ) are already included in xymon-apache.conf, so you need just to make sure that the file itself is included into main apache config ( httpd.conf ) if you placed xymonpasswd into /etc/httpd/ folder - you need to edit xymon-apache.conf file and modify location of the file. Also - if not using groups for apache authentication - remove or comment corresponding lines from xymon-apache.conf. When done - check syntax of the config ( apachectl -t ) and restart apache ( apachectl restart ) using root account. Under user xymon - start server ( in your case "/opt/xymon/server/xymon.sh start" ) if everything is OK - you should be able to see something at http://YOURWEBHOST/xymon/ If something is not working - check log files ( apache or xymon ) --- Alex On Tue, Sep 27, 2011 at 9:13 AM, Yanni <y.goudetsidis at mail.cryst.bbk.ac.uk> wrote: > Hi Alex > > > > Please allow me to mention what I have done so far. > > > > All xymon related directores (cgi-bin, cgi-secure, client, data, server, > webpages, xymon-cgi, xymon-seccgi) are inside > > /opt/xymon. > > > > After searching about configuring apache online, I found out that in order > for Apache to execute CGI scripts > > I need to edit the "access.conf" file by adding a section like this: > > > > <Directory /opt/xymon/cgi-bin> > Options ExecCGI > AddHandler cgi-script .cgi .pl > </Directory> > > > > I did that. Next I read that I should create a special location called alias > to the actual CGI directory and then edit my "httpd.conf" file and add the > line below: > > 'ScriptAlias /cgi-bin/ /opt/xymon/cgi-bin/' > > > > I've done that as well. > > > > Next I followed your instructions on the link you send me. > > I run: > > 'htpasswd -c /etc/httpd/xymonpasswd admin' and entered password. > > > > I finally found "xymon-apache.conf" and copied it to /etc/httpd/conf.d/ > > > > but I am a bit confused about the 'sed' command. > > > > Is the directory at the end stops at 'httpd'? > > > > Many thanks > > Yanni > > > > On September 27, 2011 at 12:17 AM Alex Levin <alevin at gmail.com> wrote: > >> Yanni, >> >> You need to include xymon-apache.conf file in your httpd.conf, it's >> location depends on the system you are using and on how the Apache >> server was installed ( from repository or compiled ) >> but before - make sure that xymonpasswd ( and probably >> xymongroups ) files are created. ( read the config file :) ) >> >> Actually - it is a good idea to understand syntax of Apache config >> files ( at least check directives used in xymon config on >> http://httpd.apache.org/docs/2.2/ ) ... >> >> Also, I have some notes on installing xymon in AWS ( amazon ) cloud >> that could be useful for you - >> http://www.abristech.net/2011/09/xymon-monitoring-from-cloud.html as >> well >> >> >> -- >> Alex >> >> >> >> On Mon, Sep 26, 2011 at 4:02 AM, Yanni >> <y.goudetsidis at mail.cryst.bbk.ac.uk> wrote: >> > Hi everyone >> > >> > >> > >> > I am junior sysadmin at a college and after a few failed attempts I >> > successfully installed Xymon. No errors appeared after running 'make' >> > and >> > 'make install'. >> > >> > >> > >> > At the moment I am trying to configure my web server(Apache/2.2.3 ) >> > (which >> > is located on the same machine as xymon) and I am following the >> > instructions >> > on the "installing Xymon" link >> > (http://www.xymon.com/xymon/help/install.html) but I can not really >> > understand what changes I have to make. It says on the link that I have >> > to >> > make the necessary additions to the apache configuration in >> > ~/server/etc/xymon-apache.conf. What lines do I have to add/change and >> > where >> > can I find this file? >> > >> > >> > >> > As you can understand my apache knowledge is limited, I only installed >> > it so >> > I can run Xymon. Could someone please help me? >> > >> > >> > >> > Many thanks >> > >> > Yanni >> > >> > >> >

1 0

custom graph not showing up
by kkelly＠lifetouch.com 27 Sep '11

27 Sep '11

I am having trouble with my custom graph showing up. Here are parts of my configuration: Hobbitserver.cfg TEST2RRD="...,test=ncv" NCV_test="data01:GAUGE,flash01:GAUGE,redo01:GAUGE" Hobbitgraph.cfg [test] TITLE test YAXIS % Used DEF:data=test.rrd:data01:AVERAGE DEF:flash=test.rrd:flash01:AVERAGE DEF:redo=test.rrd:redo01:AVERAGE LINE2:data01#FF0000:data01 LINE2:flash01#00CCCC:flash01 LINE2:redo01#00FF00:redo01 COMMENT:\n GPRINT:data:LAST:data01\: %5.1lf%s (cur) GPRINT:data:MAX: \: %5.1lf%s (max) GPRINT:data:MIN: \: %5.1lf%s (min) GPRINT:data:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:flash:LAST:flash01\: %5.1lf%s (cur) GPRINT:flash:MAX: \: %5.1lf%s (max) GPRINT:flash:MIN: \: %5.1lf%s (min) GPRINT:flash:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:redo:LAST:redo01\: %5.1lf%s (cur) GPRINT:redo:MAX: \: %5.1lf%s (max) GPRINT:redo:MIN: \: %5.1lf%s (min) GPRINT:redo:AVERAGE: \: %5.1lf%s (avg)\n Part of the rrd dump <rrd> <version> 0003 </version> <step> 300 </step>  <lastupdate> 1317145277 </lastupdate>  <ds> <name> data01 </name> <type> GAUGE </type> <minimal_heartbeat> 600 </minimal_heartbeat> <min> NaN </min> <max> NaN </max>  <last_ds> 56 </last_ds> <value> 4.3120000000e+03 </value> <unknown_sec> 0 </unknown_sec> </ds> <ds> <name> flash01 </name> <type> GAUGE </type> <minimal_heartbeat> 600 </minimal_heartbeat> <min> NaN </min> <max> NaN </max>  <last_ds> 4 </last_ds> <value> 3.0800000000e+02 </value> <unknown_sec> 0 </unknown_sec> </ds> <ds> <name> redo01 </name> <type> GAUGE </type> <minimal_heartbeat> 600 </minimal_heartbeat> <min> NaN </min> <max> NaN </max>  <last_ds> 1 </last_ds> <value> 7.7000000000e+01 </value> <unknown_sec> 0 </unknown_sec> </ds> The script send the following to xymon data01 : 56 flash01 : 4 redo01 : 1 Can someone tell me what I am missing/ Thanks Kevin ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email _____________________________________________________________________

2 2

Xymon Digest, Vol 8, Issue 20
by y.goudetsidis＠mail.cryst.bbk.ac.uk 27 Sep '11

27 Sep '11

Hi everyone I am junior sysadmin at a college and after a few failed attempts I successfully installed Xymon. No errors appeared after running 'make' and 'make install'. At the moment I am trying to configure my web server(Apache/2.2.3 ) (which is located on the same machine as xymon) and I am following the instructions on the "installing Xymon" link (http://www.xymon.com/xymon/help/install.html) but I can not really understand what changes I have to make. It says on the link that I have to make the necessary additions to the apache configuration in ~/server/etc/xymon-apache.conf. What lines do I have to add/change and where can I find this file? As you can understand my apache knowledge is limited, I only installed it so I can run Xymon. Could someone please help me? Many thanks Yanni On September 26, 2011 at 12:00 PM xymon-request at xymon.com wrote: > Send Xymon mailing list submissions to > xymon at xymon.com > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.xymon.com/mailman/listinfo/xymon > or, via email, send a message with subject or body 'help' to > xymon-request at xymon.com > > You can reach the person managing the list at > xymon-owner at xymon.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Xymon digest..." > > > Today's Topics: > > 1. Re: Alert based on ping response time (Vernon Everett) > 2. Re: 4.3.5 compile problems Solaris 10 x86 (Roland Soderstrom) > 3. Re: monitoring mysql with xymon (Jeremy Laidman) > 4. Re: Alert based on ping response time (Jeremy Laidman) > 5. Re: Cannot Load Host Data (Raul GN) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 26 Sep 2011 11:14:21 +0800 > From: Vernon Everett <everett.vernon at gmail.com> > To: Ryan Novosielski <novosirj at umdnj.edu> > Cc: "xymon at xymon.com" <xymon at xymon.com> > Subject: Re: [Xymon] Alert based on ping response time > Message-ID: > <CAGo4kcYbTbL9B4Xuo-bmuF3Vo4WboFN37JLnxz5QmqJ7Jk=VMg at mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > This is relatively easy to do in a script, but you would end up with a new > test. > Incorportating the time into the existing conn test is probably a task for > the likes of Henrik et al. > > Regards > Vernon > > > > On 23 September 2011 22:59, Ryan Novosielski <novosirj at umdnj.edu> wrote: > > > Anyone have any experience with this at all? > > > > On 09/21/11, *Ryan Novosielski * <novosirj at umdnj.edu> wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > I see this question has been asked on the list a few times, but I > > haven't quite gotten the complete answers from any of the old threads... > > so here goes: > > > > I see that I get ping response time with my current setup. I appear to > > be using fping already, so that recommendation is covered. The trouble > > is, the data appears to be captured as a graph is being assembled using > > it. Is there really no way to use this data for alerting as it stands > > now? It appears as if more than 10ms in my environment represents a > > problem and that setting it at 10 would probably yield no false alarms, > > but I can see no way to turn red for any value other than a failed > > ping/dropped packets. > > > > Thanks for any info you can pass along. > > - -- > > - ---- _ _ _ _ ___ _ _ _ > > |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer > > |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) > > \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.4.10 (GNU/Linux) > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > > > iEYEARECAAYFAk56VNEACgkQmb+gadEcsb7roACff5HzoFnfjHYsyLLf6mc23RbI > > s30AnA1vn+duYt2S/J9DHIjunS3eFdqq > > =mssT > > -----END PGP SIGNATURE----- > > > > ------------------------------ > > > > _______________________________________________ > > Xymon mailing list > > Xymon at xymon.com > > http://lists.xymon.com/mailman/listinfo/xymon > > > > > > -- > > ---- _ _ _ _ ___ _ _ _ > > |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer > > |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) > > \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark > > > > _______________________________________________ > > Xymon mailing list > > Xymon at xymon.com > > http://lists.xymon.com/mailman/listinfo/xymon > > > > >

3 3