September 2011 - Xymon - Xymon mailman web

Timeline History buggy ?
by nicolas＠lienard.name 27 Sep '11

27 Sep '11

Hello Since we migrated to Xymon 4.3.3 from hobbit 4.2.0, there is a weird bug in history. i did a screenshot to show you that on history timeline for 4 weeks, there is small red events for the 25th and 26th of September. But for history timeline for 1 week, we can see all these days in GREEN. SCREENSHOT LINK : http://i55.tinypic.com/33k6vkl.jpg Morever, the log entries show that nothing red events happened in the last 3 days: Fri Sep 23 16:43:06 2011 green 3 days 16:35:25 Fri Sep 23 15:46:45 2011 red 0:56:21 i checked the hist folder: [root at cmsbs-mn01-new:/opt/xymon/data/histlogs/xxxxx-xxx/http ] 13 ls -ltr | tail -rw-rw-r-- 1 xymon xymon 2004 Sep 23 13:45 Fri_Sep_23_13:45:33_2011 -rw-rw-r-- 1 xymon xymon 2292 Sep 23 14:47 Fri_Sep_23_14:47:07_2011 -rw-rw-r-- 1 xymon xymon 2004 Sep 23 14:57 Fri_Sep_23_14:57:39_2011 -rw-rw-r-- 1 xymon xymon 2292 Sep 23 14:57 Fri_Sep_23_14:57:52_2011 -rw-rw-r-- 1 xymon xymon 2107 Sep 23 15:42 Fri_Sep_23_15:42:36_2011 -rw-rw-r-- 1 xymon xymon 2292 Sep 23 15:43 Fri_Sep_23_15:43:18_2011 -rw-rw-r-- 1 xymon xymon 2107 Sep 23 15:44 Fri_Sep_23_15:44:38_2011 -rw-rw-r-- 1 xymon xymon 2292 Sep 23 15:45 Fri_Sep_23_15:45:20_2011 -rw-rw-r-- 1 xymon xymon 2109 Sep 23 15:46 Fri_Sep_23_15:46:45_2011 -rw-rw-r-- 1 xymon xymon 2439 Sep 23 16:43 Fri_Sep_23_16:43:06_2011 [root at cmsbs-mn01-new:/opt/xymon/data/histlogs/xxxxx-xxx/http ] 14 So, i don't understand why i can see the red events on the screenshot. Any clue ? Thanks Nico

1 0

Xymon is not sending e-mail alerts
by arnold.fields＠gmail.com 27 Sep '11

27 Sep '11

Hope someone can help with this issue. We are running Xymon 4.2.3 on a RHEL5 VM. Last week, the VM was migrated from one VMware server to another. When the migration completed, e-mail alerts from Xymon stopped with the exception of 3 servers that are located at a remote office. The agents from all of the local hosts are still able to connect to the Xymon server, but the alerts are not being generated/sent to the admins. I've tested sendmail by sending test messages as the xymon user. client $> telnet xymonserver 1984 works along with snooping the default interface - xymon traffic is traveling between the server and the clients. I've ran the bbcmd debug/test commands, no errors. I've checked bb-hosts, hobbit-clients.cfg and hobbit-alerts.cfg for possible syntax errors, nothing stands out as a problem. I just find it strange that only I'm only receiving e-mail alerts about 3 non-local hosts. I'm seeking any troubleshooting suggestions on what I should try to do next. Thanks!

3 2

Cannot Load Host Data
by lsd4me＠gmail.com 26 Sep '11

26 Sep '11

Hi all, We have a Xymon server running on Fedora 9 with Xymon version 4.3.5 Every 10 minutes, we get a yellow status on xymond stating the following "Cannot Load Host Data" After about 5 minutes this test goes green but it seems that every 10 minutes, something kicks off that results this test to go yellow In checking the log files, i can see that in the xymond.log file, there are entries there 10 minutes apart stating the same error as above but with no additional information Does anybody have any idea as to what this may be or how we can narrow down the possibilities? Thanks!!

2 2

Alert based on ping response time
by novosirj＠umdnj.edu 26 Sep '11

26 Sep '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I see this question has been asked on the list a few times, but I haven't quite gotten the complete answers from any of the old threads... so here goes: I see that I get ping response time with my current setup. I appear to be using fping already, so that recommendation is covered. The trouble is, the data appears to be captured as a graph is being assembled using it. Is there really no way to use this data for alerting as it stands now? It appears as if more than 10ms in my environment represents a problem and that setting it at 10 would probably yield no false alarms, but I can see no way to turn red for any value other than a failed ping/dropped packets. Thanks for any info you can pass along. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk56VNEACgkQmb+gadEcsb7roACff5HzoFnfjHYsyLLf6mc23RbI s30AnA1vn+duYt2S/J9DHIjunS3eFdqq =mssT -----END PGP SIGNATURE-----

3 3

monitoring mysql with xymon
by cors＠corpresa.com 26 Sep '11

26 Sep '11

Hello, is possible monitoring mysql with xymon server? How can I do it?, I add as tag mysql but not work :s Thank you, regards. ________________________________ Corpresa Hosting Tel?fono: 902 001 067 Fax: 931 001 834 E-mail: soporte-plus at corpresa.com http://corpresahosting.com

3 2

4.3.5 compile problems Solaris 10 x86
by rolands＠logicaltech.com.au 26 Sep '11

26 Sep '11

An HTML attachment was scrubbed... URL: <http://lists.xymon.com/pipermail/xymon/attachments/20110920/d0eff615/attach…>

5 12

Xymon is not sending e-mail alerts
by hobbit＠epperson.homelinux.net 25 Sep '11

25 Sep '11

On Sat, September 24, 2011 21:35, Ryan Novosielski wrote: > I still suspect sendmail. I'd check differences between the sendmail > config on the old and new. Also see if there is anything stacked up in > /var/spool/mqueue or clientmqueue and your mail logs (/var/log/syslog by > default on RHEL isn't it?). > /var/log/maillog by default on RHEL 3-5, at least. /var/log/messages for most syslog facilities.

1 0

Bring conn back
by jewel.brueggeman-makda＠washburn.edu 23 Sep '11

23 Sep '11

I have two questions. I removed the conn service via te bb script: ./bb 127.0.0.1. "drop servername conn" How do I get this back and undo what I did? Second question is I am getting reports under http that the "Server timeout" but the site is up and running. I thought a redirect might be the problem but it is working with others which have a redirect. Any ideas where to look? Jewl --

1 0

Question regarding extending alerts to the mobile devices
by Dan.Inbar＠onsettechnology.com 23 Sep '11

23 Sep '11

Hi, We developed a virtual Pager application that runs on smartphones. Many of our joint customers are looking to get alerts as pagers to their mobile devices and we look to explore joint opportunities for a complete alerting solution. Below additional information. What would be the best way to connect? Can you pls direct me to the appropriate person I should speak with? thanks! Dan Inbar (781) 547-5581 OnPage by Onset Technology www.onpage.com <http://www.onpage.com/> <http://bit.ly/OnPageTwitter> <http://on.fb.me/OnpageFacebook> <http://linkd.in/OnPageLinkedIn> <http://bit.ly/OnPageBlog> <http://bit.ly/OnPageAppStore> <http://bit.ly/OnPageAppWorld> -- Get Critical Alerts on Your Smartphone. If you're looking for reliable On-Call alerting for your support team, then OnPage(tm) delivers. System admin jobs and tech support can be 24/7. OnPage priority messaging keeps you connected so you can respond. OnPage is a smartphone pager application that works on iPhone(r), iPad(r), iPhone Touch(r) or BlackBerry(r) devices. It consolidates functions so you need just one device for everything; voice, email, and priority alerts and messaging. 7 Good Reasons to Try OnPage: * Consolidates Devices - lets you pitch your pager * Continuous custom alerting - acts like a real pager * Guaranteed Lower Cost than traditional pagers * Global Coverage - get messages via cellular and/or WiFi * Reliable Hosted Service - zero IT infrastructure * Know when a Page has been Delivered, Read and Replied * FREE app download with a FREE 30 day trial Dan Inbar (781) 547-5581 OnPage by Onset Technology www.onpage.com <http://www.onpage.com/> <http://bit.ly/OnPageTwitter> <http://on.fb.me/OnpageFacebook> <http://linkd.in/OnPageLinkedIn> <http://bit.ly/OnPageBlog> <http://bit.ly/OnPageAppStore> <http://bit.ly/OnPageAppWorld>

3 2

FW: Regular expression
by Neil.Simmonds＠express-gifts.co.uk 23 Sep '11

23 Sep '11

Thanks for that Daniel, It's still not working. I've even reduced it down to the following, LOG eventlog:application Error COLOR=red I've also tried LOG eventlog_application Error COLOR=red And LOG application Error COLOR=red All with no success. These entries are all in analysis.cfg on the server and the BBWin agent is running in central mode. I'd really like to get this working if anyone can help? Regards, Neil. ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of McDonald, Dan Sent: 22 September 2011 16:43 To: Xymon Subject: Re: [Xymon] Regular expression On 9/22/11 7:54 AM, "Neil Simmonds" <Neil.Simmonds at express-gifts.co.uk> wrote: > Hi all, > > I¹m trying to monitor a Windows event log for an error, > > I¹ve got BBWin 0.12 installed in central mode and I¹ve successfully got the > eventlogs showing up in messages, > > However if I get an error from Backup Exec similar to this, > > error - 2011/09/22 13:30:00 - Backup Exec System Recovery (100) - Error > EC8F17B7: Cannot create recovery points for job: BACKUP_SCHED_01_30_SAT. Error > E7B70001: Win32/Win64 API DeviceIoControl(IOCTL_VSNAP_VDIFF_STOP) failed. > Error EBAB03F1: The device does not recognize the command. Details: 0xE7B70001 > Source: Backup Exec System Recovery > > Despite the fact that I have this, ³LOG eventlog:Application %(Backup Exec > System Recovery\.+?|Error) COLOR=yellow² in my analysis.cfg file the color > doesn¹t change. Why did you escape the . ? If you remove the \ in front of the ., it might work better. I don't think you need to specify greediness either. In other projects we tend to be very suspicious of unqualified .+ expansions, as they can consume a lot of memory. You might try something like: %(Backup Exec System Recovery.{1,50}Error) That is read as "look for the exact words "Backup Exec System Recovery", followed by the word "Error" no more than 50 characters later..." -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

2 1