October 2012 - Xymon - Xymon mailman web

ISO documentation on flapping status?
by betsy.schwartz＠gmail.com 05 Feb '13

05 Feb '13

We've got a bunch of servers showing as "flapping". I understand that this is a new feature but haven't found the docs on how to tweak it. Where and how can this be changed? thanks Betsy

3 3

holiday as planned downtime
by Jurgen.Claessens＠cegeka.be 11 Dec '12

11 Dec '12

Hey all, I'm running xymon 4.3.7 and I have been trying to find a way so that the holidays are being showed as what would be the same for the alerting. For me this would mean that if it's a holiday they would show as planned downtime and not show up in the allnongreen window. The alerting itself works without problems, but I cannot find a way for the planned downtime act the same way. Can anyone point me in the right direction? This e-mail and all files transmitted as attachment(s) thereto are confidential and solely intended for the individual to whom or the organization to which they are addressed. If you received this e-mail by mistake, please notify Cegeka's Service Desk at cegeka.support at cegeka.be or call +32 (0)11 240 363. We thank you in advance. Cegeka hereby confirms that this message has been swept by Sophos for the presence of viruses.

2 3

Solaris 10 xymon SMF
by Rolands＠logicaltech.com.au 30 Nov '12

30 Nov '12

Hi, There is a minor issue with the Solaris 10 SMF for xymon by Galen Johnson that I improved a bit. Thanks Galen for the nice work :D At least it works fine for us. When you disable the xymon service it could wait for up to 5 min before disabling it because the iostat and vmstat are running. (300 min) I been trying some different approaches in the manifest but it doesn't really work properly. I had to change the default timeout (30) to 300 to cater for the 300min possible run time of iostat, vmstat. Otherwise it will go into maintenance mode. Today I had a different approach and changed the xymon.sh script instead, that worked really nice. In server/bin/xymon.sh I added these simple lines to the stop function. (works in Solaris 10) "stop") if test -s /usr/local/xymon/logs/xymonlaunch.pid then kill -TERM `cat /usr/local/xymon/logs/xymonlaunch.pid` echo "Xymon stopped" else echo "Xymon is not running" fi rm -f /usr/local/xymon/logs/xymonlaunch.pid # kill off the remaining xymon processes, ie vmstat iostat etc. sleep 2 pkill 'iostat|vmstat' -U xymon ;; Maybe it could help someone else out there. I'm running 4.3.10 - Roland

3 5

Sending client data without client installed
by raylee88＠gmail.com 09 Nov '12

09 Nov '12

Greetings, I have a Cisco ACS appliance that runs a CentOS-based OS. I cannot install the Xymon client on it, but I can ssh to it from our Xymon server and run "show tech-support" to get the output of a long list of commands that include df -k, ps -aux, netstat -an, etc., and save the output to a file. The output has section headers, so it's easy to parse out each of the command outputs that I'm interested in with a Perl script. I was thinking to have the same Perl script look at each of the command outputs and apply some logic to them to determine what color their status should be and then do a ' bb localhost "status hostname.disk COLOR <additional text>" '. Same idea for hostname.procs, hostname.ports, etc. But this would essentially be like rewriting the Xymon client. Since I already have the outputs of df -k, ps -aux, netstat -an, etc., can I just send them to the Xymon server and have it magically know what to do with them to populate the disk, procs, and ports columns? I've already seen the tip at http://www.xymon.com/xymon/help/xymon-tips.html#noinstall , but that doesn't apply to my scenario. I also looked into using devmon, but the MIBs that Cisco ACS supports don't give me the data I'm looking for. Thanks, Ray

4 5

RRD - Aberrant Behavior Detection with Holt-Winters Forecasting
by nicolas＠lienard.name 09 Nov '12

09 Nov '12

Hello When devices are too overloaded; we got lot of gap in the graph and it is not very nice. To avoid that, i would like to implement the abberrant behavior detection provided by RRDTOOL. Following http://oss.oetiker.ch/rrdtool/doc/rrdcreate.en.html, i defined a new RRA in ~xymon/server/etc/rrddefinitions.cfg [test_rrd] RRA:AVERAGE:0.5:1:576 RRA:AVERAGE:0.5:6:576 RRA:AVERAGE:0.5:24:576 RRA:AVERAGE:0.5:288:576 # RRA:HWPREDICT:<array length>:<alpha>:<beta>:<period> # enable RRAs for aberrant detection, 1 day seasonal store for 5 day RRA:HWPREDICT:1440:0.1:0.0035:288 <------ new entry i got a simple test script running every 5 mn: sh-3.00$ cat test_rrd.sh #!/bin/sh HOSTNAME="test_device" value=42 $BB $BBDISP "status+200d $HOSTNAME.test_rrd green `date` test: $value" i got ncv conf in xymonserver.cfg, the graph is working fine with this basic definition: [test_rrd] TITLE test RRD YAXIS value DEF:a=test_rrd.rrd:test:AVERAGE LINE2:a#00CC00:test value GPRINT:a:LAST: \: %5.1lf (cur) GPRINT:a:MAX: \: %5.1lf (max) GPRINT:a:MIN: \: %3.1lf (min) GPRINT:a:AVERAGE: \: %5.1lf (avg)\n now, if i add the def: DEF:b=test_rrd.rrd:test:HWPREDICT the graph is not showing anymore [even if i didn t use the new DEF on a LINE] :( if i dump the rrd i can see the RRA : sh-3.00$ rrdtool dump /opt/xymon/data/rrd/test_device/test_rrd.rrd |grep HW <cf> HWPREDICT </cf> any idea is welcome. Thanks. regards Nico

2 1

Different displays for "disabled" tests
by David.Mills＠ngc.com 09 Nov '12

09 Nov '12

All - I have a situation where I have two Xymon servers (both 4.3.3 / Solaris 10) working off the same NFS-shared data. The only differences between the configs that I know about are the lines in xymonserver.cfg detailing the host names, and IP addresses. However, for any given host with disabled tests, one server displays columns for that host which have been disabled as blue, but the other server completely omits the columns for that host which are disabled! In case I'm not being clear, if I have server "XYMON_1" showing columns "xymond" and "iostat2" for host "racecar" as disabled, my other server ("XYMON_2") will simply show all columns except "xymond" and "iostat2" for host "racecar". The column headers won't appear for that host at all. What causes this "dual" behavior? Thanks! david ~~~~~~~~~~~~~~~~~~~ David Mills Systems Administrator Northrop Grumman 512-595-1238 david.mills at ngc.com

2 1

Non-green page listing not complete?
by David.Mills＠ngc.com 01 Nov '12

01 Nov '12

Hi! I need a hand here: when I run xymon <server> xymondboard" /usr/bin/awk -F\| '$3 !~ /green/ {print $1, $2, $3}' I get a huge list of non-green hosts. Even filtering out "clear", "blue" and "purple", I get well over 140 hosts listed. However, the current number of hosts on our "Non-green" report page is only around 20! Can anyone help me start tracking down the discrepancy? Thanks! david ~~~~~~~~~~~~~~~~~~~ David Mills Systems Administrator Northrop Grumman 512-595-1238 david.mills at ngc.com

3 5

hobbitd_alert tunning
by benjamin.boudoir＠eeple.fr 31 Oct '12

31 Oct '12

Hi, I'm using Xymon 4.3.0 and I a stange feeling about the hobbitd_alert module. I have some custom tests with a rapid interval (1m) and I realized that I don't always recieve a mail when a column became ALERTCOLOR for a minute. Is mail send only if a column is ALERTCOLOR at a T time ? If I'm right, is there any way to change the way this work ? -- Benjamin Boudoir meltyNetwork / Eeple

1 0

FW: List broken?
by bschwartz＠e-dialog.com 31 Oct '12

31 Oct '12

Email to the list from gmail is bouncing after two days Email to hendrik at xymon.com<mailto:hendrik at xymon.com> is bouncing immediately Anyone else having trouble? I see list traffic is very light From: Betsy Schwartz Sent: Thursday, October 25, 2012 8:49 AM To: 'hendrik at xymon.com' Subject: List broken? I'm in a really heavy period of xymon development (pushed by boss who comes from nagios-land) and my messages to the list are bouncing back after a couple days. Notice traffic is very light, maybe it's not just me! I hate to use my work address on public lists... This is an automatically generated Delivery Status Notification THIS IS A WARNING MESSAGE ONLY. YOU DO NOT NEED TO RESEND YOUR MESSAGE. Delivery to the following recipient has been delayed: xymon at xymon.com<mailto:xymon at xymon.com> Message will be retried for 2 more day(s) Technical details of temporary failure: Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 451 451 4.7.1 Service unavailable - try again later (state 17). ----- Original message ----- DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com<http://gmail.com>; s=20120113; h=mime-version:reply-to:date:message-id:subject:from:to:content-type; bh=fq9T2uqAW4TBLXCIfpcWxYFLK9TygpB6Hr+0oPlhZSg=; b=X01I9J66DO68nL9JTDcjrQwkkoS9pRCry5t5ADASzUV7FplrNuCESEYjegsK+Q7WSH BKumdRJqnoYjdZleb0gbQS2v/RwP32FzWJrVJXoimXNFV2kt01KI+tTbyw0mD7p81RIr rNf3pHmHjt7k84RPdX/ES9Y/ILN4+Xxg2HyotKhDqOu8FxP2suiHBNSw4cUAH90Hz/sQ TOrA2wtkYEgvhB6uh0883qNXOmzevsHrKnR/BGzEBe3mJrxlPDeppkJkWP6cQGlrSz+B z6zFPaAPkfrbldRrNeYGVN5xwW50DaKdsq3WYJfOLegDrc6D/0vAEoKaPKBxeUldfnM6 4LNA== MIME-Version: 1.0 Received: by 10.50.169.100 with SMTP id ad4mr1175720igc.50.1351050047178; Tue, 23 Oct 2012 20:40:47 -0700 (PDT) Received: by 10.50.56.203 with HTTP; Tue, 23 Oct 2012 20:40:47 -0700 (PDT) Reply-To: betsy.schwartz at gmail.com<mailto:betsy.schwartz at gmail.com> Date: Tue, 23 Oct 2012 23:40:47 -0400 Message-ID: <CAAVLHR1odzuL0QqJ0-L=TwhAk9kcRit9xidEWX2TsHsdZGo67A at mail.gmail.com<mailto:TwhAk9kcRit9xidEWX2TsHsdZGo67A at mail.gmail.com>> Subject: Keeping alerts.cfg organized? From: Betsy Schwartz <betsy.schwartz at gmail.com<mailto:betsy.schwartz at gmail.com>> To: xymon at xymon.com<mailto:xymon at xymon.com> Content-Type: text/plain; charset=ISO-8859-1 ________________________________ The information contained in this electronic mail transmission is intended only for the use of the individual or entity named in this transmission. If you are not the intended recipient of this transmission, you are hereby notified that any disclosure, copying or distribution of the contents of this transmission is strictly prohibited and that you should delete the contents of this transmission from your system immediately. Any comments or statements contained in this transmission do not necessarily reflect the views or position of GSI Commerce, Inc. or its subsidiaries and/or affiliates.

8 10

Database Monitoring
by Venkatesh_S04＠infosys.com 31 Oct '12

31 Oct '12

Hi All , We have implemented db monitoring using dbcheck.pl for our Oracle and SQL Server databases which requires the database user id and password to be stored in dbcheck.ini (its config file) .However the security team has raised concerns about this and proposed that we instead go for a agent based model like say leverage the BBWIN agent for windows to perform the database monitoring as well . Can you please let me know if this is possible to implement .If yes ,please provide some details /sample scripts for implementation . Thank You, Regards, Venky **************** CAUTION - Disclaimer ***************** This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by e-mail and delete the original message. Further, you are not to copy, disclose, or distribute this e-mail or its contents to any other person and any such actions are unlawful. This e-mail may contain viruses. Infosys has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this e-mail. You should carry out your own virus checks before opening the e-mail or attachment. Infosys reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the Infosys e-mail system. ***INFOSYS******** End of Disclaimer ********INFOSYS***

2 2