October 2012 - Xymon - Xymon mailman web

some graphs 5 hours behind
by sholmes42＠mac.com 09 Oct '12

09 Oct '12

We are working on upgrading, but in the mean time I'm trying to keep our Xymon 4.2.3 on an older SPARC running and making sense. So, for some as yet undetermined reason some (but not all) rrd files have started being updated about 5 hours behind. I.e. we can correlate events that we know happened at certain times with the graphs so the clock isn't somehow messed up (besides it looks ok to us in the shell), and when I do an rrdtool dump it is clear that the data is being added from 5 hours ago, or at least the last entry in the 12 hour database is stamped from about 5 hours earlier. It appears to only be affecting the rrd files for the graphs that are only on the trends page. I.e. graphs that appear on the test pages (e.g. memory, cpu, disk) are not affected. The two hobbit_rrd processes are running with 30+ hours and 640 minutes of cpu time according to top. The system has been up for 30 days but Xymon was restarted about 3 weeks ago. The effect of this is the graphs, of course, for the data that is behind looks like it stopped recording 5 hours ago. As we watch it the data appears but there is this gap for the last 5 hours. So the customers are uncomfortable with this. My questions are: What can be done about it? I hesitate to stop and start Xymon for fear of loosing all of that data. What can be the cause? I know the server is slightly overloaded and has been for a few months, but this is really weird. We also have been getting warnings (yellow) from bbtest Whoops ! bb failed to send message - timeout Which results in gaps in the data, but those are usually only a few minutes in duration and are only occasional. Thanks, Steve -- If they give you ruled paper, write the other way. -Juan Ramon Jimenez, poet, Nobel Prize in literature (1881-1958) I prayed for freedom for twenty years, but received no answer until I prayed with my legs. -Frederick Douglass, Former slave, abolitionist, editor, and orator (1817-1895)

3 4

web acks sometimes don't work
by igor.berman＠takadu.com 09 Oct '12

09 Oct '12

Hi, We are experiencing problems with ack-ing failures. Our devops acking problems and sometimes(without clear pattern) the ack isn't working and the alert mail is still sent(we are seeing V in web interface). Sometimes it do work. Xymon version is 4.3.7 Any ideas would be appreciated. Maybe this is a known problem? Thanks in advance, Igor

2 1

how to disable a host via email in xymon
by ray.reuter＠gmail.com 09 Oct '12

09 Oct '12

Does anyone have the syntax to disable a host via email in xymon? I used to do it in Hobbit but can not remember the syntax for the subject line. It used to be something like !RE: host=DISABLE or DISABLE=host or something.

1 0

depends tag limitations (again)
by novosirj＠umdnj.edu 09 Oct '12

09 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Was this ever answered? I see I asked the same question again having missed this question just a month prior. Thanks. On 09/10/2012 01:17 PM, SebA wrote: > Hi Henrik, > > Am I right in thinking that nothing has changed on this front? I > just tried to use depends with a custom test and it did not seem to > have any effect (on Xymon 4.3.7)... > > Dominique Frise wrote: >> Hi, >> >> This is an extract of a previous reply from Henrik > (http://www.hobbitmon.com/hobbiton/2006/10/msg00141.html) >> >> >> ----------- Henrik Stoerner wrote: >>> Charles Jones wrote: >>>> *It would be nice if the depend tag worked for any >>>> column/test type*. I looked at using the "depends" tag, but >>>> it appears that *depends only works for network checks*. >>> >>> Agreed. The dependency checks are currently implemented in the >>> network test tool (bbtest-net), instead of in the hobbitd >>> daemon - that is the reason why they only work for network >>> tests. And that is purely for historical reasons. >>> >>> I expect to move all of the dependency code into hobbitd soon, >>> together with the combination-test handling (the stuff currenly >>> done by bbcombotest), that will eliminate this rather silly >>> restriction. >>> >>> Regards, Henrik >> ----------- >> >> Are the above limitations been removed in the current snapshot? >> If not when is this going to be implemented? >> >> Thanks. >> >> Dominique UNIL - University of Lausanne >> > > Kind regards, > > SebA > - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBt+rIACgkQmb+gadEcsb6t+QCgorL/N8IfP24aXalGwElqJ3KC cZcAoNAd3CeAMZgvI0YC6TK4o1mD5DqA =Ku0F -----END PGP SIGNATURE-----

2 1

File monitor not working in Xymon - using file list generated by wildcard
by Don.Kuhlman＠schawk.com 08 Oct '12

08 Oct '12

Hi folks. I've been trying to figure this out for a while and would appreciate any help. I'm trying to monitor for a sql backup by watching for a set of files that are created every morning at 00:05 AM by a cron job on a server. There are several files created each night the sql dump runs. It creates them as filename_backup__yyyymmdd.sql So each day there are new file names created (never the same name) I want to alert if the file doesn't get created each day with the new name. I have configured the client-local.cfg file as follows: [MYSQLSERVER01] # dir:`find /Volumes/MySQL_Backups/ -name '*.sql' -mtime 0 2>/dev/null` # file:/Volumes/MySQL_Backups/mysql_backup_20121004.sql file:`find /Volumes/MySQL_Backups/ -name '*.sql' -mtime 0 2>/dev/null` Analysis.cfg is as follows: HOST=MYSQLSERVER01 FILE %^.sql COLOR=red mtime<600 # FILE /Volumes/MySQL_Backups/mysql_backup_20121004.sql red mtime<600 # FILE /Volumes/MySQL_Backups/mysql_backup_20121004.sql COLOR=red mtime<600 # FILE /Volumes/MySQL_Backups/mysql_backup_20121004.sql red mtime>86400 # FILE /Volumes/MySQL_Backups/mysql_backup_20121004.sql red mtime<86400 # FILE /Volumes/MySQL_Backups/mysql_backup_20121004.sql red mtime>600 # FILE /Volumes/MySQL_Backups/mysql_backup_20121004.sql mtime>86400 noexist Xymon generates this msg when I use the full filename – eg mysqlbackup20121004.sql in analysis.cfg It doesn't work when I try to use a wildcard name (which I need because the filename will change each day) - eg FILE %^.sql Example alert is below using full real filename: Thu Oct 4 16:02:11 CDT 2012 - Files NOT ok [red] /Volumes/MySQL_Backups/mysql_backup_20121004.sql<http://srmxymon.ambrosi.com/xymon-cgi/svcstatus.sh?CLIENT=MYSQLSERVER01&SEC…> File was modified 57134 seconds ago - should be <600 [green] /Volumes/MySQL_Backups/herbalife_backup_20121004.sql<http://srmxymon.ambrosi.com/xymon-cgi/svcstatus.sh?CLIENT=MYSQLSERVER01&SEC…> Example below using %^.sql: Thu Oct 4 16:10:15 CDT 2012 - Files ok [green] /Volumes/MySQL_Backups/mysql_backup_20121004.sql<http://srmxymon.ambrosi.com/xymon-cgi/svcstatus.sh?CLIENT=MYSQLSERVER01&SEC…> [green] /Volumes/MySQL_Backups/herbalife_backup_20121004.sql<http://srmxymon.ambrosi.com/xymon-cgi/svcstatus.sh?CLIENT=MYSQLSERVER01&SEC…> Thanks Don K

5 13

how debug logfetch
by martin.flemming＠desy.de 08 Oct '12

08 Oct '12

Hi ! I've got an problem with one host to get the md5sum of a file which is distributed also on several other machines, where the file-md5-check runs without any problem .... bad machine: Evrythin seems to be ok bird037] /usr/lib/hobbit/client # cat tmp/logfetch.bird037.cfg file:/usr/local/etc/post_install:md5 file:/etc/krb5.keytab:md5 but: [bird037] /usr/lib/hobbit/client # bin/logfetch tmp/logfetch.bird037.cfg tmp/logfetch.bird037.status [file:/etc/krb5.keytab] type:100000 (file) mode:600 (-rw-------) linkcount:1 owner:0 (root) group:0 (root) size:428 clock:1349535747 (2012/10/06-17:02:27) atime:1349535719 (2012/10/06-17:01:59) ctime:1322576461 (2011/11/29-15:21:01) mtime:1281428590 (2010/08/10-10:23:10) md5:346b7a4901fe2eaa270c76bd40d33aa4 [file:/usr/local/etc/post_install] type:100000 (file) mode:555 (-r-xr-xr-x) linkcount:1 owner:2002 (finnern) group:1000 (it) size:19981 clock:1349535747 (2012/10/06-17:02:27) atime:1349533938 (2012/10/06-16:32:18) ctime:1346664822 (2012/09/03-11:33:42) mtime:1325599284 (2012/01/03-15:01:24) but in reality i've got no md5sum for this file and consequentially an alert-mail :-( Got anybody an hint how to debug/solve this error ? thanks & cheers Martin

2 2

Solaris 10 sparc xymon 4.3.10 issue ?
by goebel＠emunix.emich.edu 08 Oct '12

08 Oct '12

Hi, I installed xymon 4.3.10 last week and since then I have noticed that something has been appending data to the end of /usr/bin/logger every 5 minutes. Since this wasn't happening before I suspect xymon. 164.76.2.44 - - [08/Oct/201 2:11:26:03 -0400] "GET / HTTP/1.1" 302 209. This is the IP address of my xymon server. Any suggestions as what I might need to tweak? Thanks, Matt -- Matthew Goebel : goebel at emunix.emich.edu : Unix Jockey @ EMU : Hail Eris Neo-Student, Net Lurker, Donut consumer, and procrastinating medher... "Always with the negative waves, Moriarty" - Oddball "Comfort the troubled, and trouble the comfortable." - Dietrich Bonhoeffer

3 4

is combotest bugged in xymon 4.3.10 ?
by olivier＠audry.fr 08 Oct '12

08 Oct '12

hello on xymon 4.3.0 this config work : hosts.cfg : 127.0.0.1 test1 # telnet 127.0.0.1 test2 # telnet 0.0.0.0 test # combo.cfg : test.test = test1.telnet + test2.telnet > 1 on xymon >= 4.3.7 this is not working. test1.telnet and test2.telnet got clear status so the main status is green and not red. Any idee ? thx for your help oau

1 0

Check DNS Question
by johe.stephan＠ymail.com 07 Oct '12

07 Oct '12

Hi there, i have a problem with checking dns on my nameservers. Maybe i didnt get it right I have some nameservers running and would like to check there availability via xymon, so i added a line like xxx.xxx.xxx.xxx ns1.my.domnain # dns=a:www.my.domain to the bb-hosts file. I thought this should work. But while adding a new server, which actualy does not have any dns server running, not even installed, the check turned green. So to me it seems that it does not check the host. Any idea? Kind regards Jörg

2 1

Ack Examples
by ray.reuter＠gmail.com 06 Oct '12

06 Oct '12

I have a quick question, is it possible to form an email to acknowledge an alert without receiving the email first? In hobbit we were able to compose a message to disable a server and all of the checks for a certain time period. I can not seem to get the subject line correct for it to disable a server, does anyone have an example they could share?

1 0