October 2012 - Xymon - Xymon mailman web

getting xymon to work with win2008r2 clents in centralmode
by tomas.andersson＠sca.com 02 Oct '12

02 Oct '12

Hi there ! Has anybody got xymon to function properly with windows 2008r2 clients in central mode ?? I get it to function properly using local mode but I want to use central mode usinf the latest BBwin 0.13. When we tried to specify central mode we found that there was some problem for the BBWin to create the logfile to be sent to the xymon server Apparently since the bbwin was installed in the ...Program files (x86) folder and after quoting the Path parameter in the bbwin config file It suddenly started creating a huge 67 MB ! file to send (included all event error and application logs ...). So we then configured the client-local.cfg on the xymon server to try to ignore those. Unfortunately the xymon server did not send the client-local.cfg to the client. Qestions: the file client-local.cfg on the server where you specify what log files should be sent back to the server and what text matching you want the syntax is like: [win32] eventlog:Security:10240 ignore Success eventlog:System:10240 ignore Information eventlog:Application:10240 ignore Information [freebsd] log:/var/log/messages:10240 [netbsd] log:/var/log/messages:10240 ... The OS-name whithin brackets [ ] is this name win32 for windows 2008r2 also or should this "OS-name" (uname on all unixlike machines) be specified to something else like win64 on windows 2008r2 machines or ?? Is there a command that xymon uses to figure out the os type on windows server or how does this function ?? Is it possible to specify [] or [*] as a default entry in the client-local.cfg on the xymon server ??? Best Regards, /Tomas Andersson Unix System Admin/Tech/Dev SCA IT Services Tel. +46 31 7460313 Mob. +46 703 610313 This message may contain confidential, proprietary or legally privileged information and is intended for the addressee's use only. Any usage, disclosure, distribution, print or copying of any part of this message is prohibited unless you are the intended recipient. If you receive this message in error, please delete it from any computer and notify the sender. If you suspect that this message may have been altered, please notify the sender. SCA has taken every reasonable precaution to ensure that this e-mail and any attachments to this e-mail has been scanned for viruses. However, SCA does not accept liability for any damage caused by software viruses brought to you by this mail.

3 2

[SOLVED] Problem with the smtps test (unspecified SSL error)
by novosirj＠umdnj.edu 02 Oct '12

02 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 10/02/2012 02:22 AM, Jeremy Laidman wrote: > On 2 October 2012 13:18, Novosielski, Ryan <novosirj at umdnj.edu > > Agreed. Although that post was from 7 years ago, and a lot has > happened since then. For instance, STARTTLS is supported for > LDAPv3, so perhaps support for SMTP/STARTTLS is nigh. > > At some point, Henrik has to draw a line at the depth of > multi-layer protocols he supports. Perhaps it's time for an > external test script instead. You can then add a bunch of other > email tests such as anti-relay, anti-virus, bogus sender domain, > etc. While that is true (that one must draw the line somewhere), I think STARTTLS is a common enough one-layer-deep protocol that is pretty reasonable to support as it's used by a variety of things. Not worth the amount of effort it sounded like was described in the earlier post, but something to look toward when parts get rewritten I think. Anyways, thanks so much for your pointers. Those couple of tests were sitting broken for quite awhile, and I even had the OpenSSL output (it appeared in the bbd test for my network machine), but for some reason the fact that telnetting to the port and getting readable stuff back very much implied no SSL escaped me earlier. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBql9QACgkQmb+gadEcsb7lugCfSZBZ5yfWco8wqyA/bV2FR0fC nGEAn0uosXIJHh5zRhA4Bf93r1ZBcgro =oynN -----END PGP SIGNATURE-----

1 0

Problem with alerts on a DS value
by greg.shea＠emc.com 02 Oct '12

02 Oct '12

Hi all, Xymon 4.3.7, testing cpu load from vmstat rrd file works great except for the actual alert. I was expecting the string 'CPU Idle load Normal at &V%" HOST=%^hostprd0' to appear in the alert but it doesn't. The Subject line in email shows the correct color (YELLOW), but the body says green. The text string doesn't show up in BBALPHAMSG. Any suggestions? analysis.cfg # Use in RRD dataset from vmstat DS cpu vmstat.rrd:cpu_idl >=10 COLOR=green "TEXT=CPU Idle load Normal at &V%" HOST=%^hostprd0.* DS cpu vmstat.rrd:cpu_idl <10 COLOR=yellow "TEXT=CPU Idle load High at &V%" HOST=%^hostprd0.* DS cpu vmstat.rrd:cpu_idl <=5 COLOR=red "TEXT=CPU Idle load Critical at &V%" HOST=%^hostprd0.* alerts.cfg HOST=%^hostprd0.* MAIL greg.shea at emc.com<mailto:greg.shea at emc.com> REPEAT=30m RECOVERED SERVICE=cpu COLOR=red,yellow email notification -----Original Message----- From: Xymon Admin Dur1 Account [mailto:xymon at emc.com] Sent: Thursday, September 27, 2012 4:45 PM To: shea, greg Subject: Xymon [186647] sabbeaprd02:cpu warning (YELLOW) [cfid:1304] green Thu Sep 27 16:44:30 EDT 2012 up: 12 days, 0 users, 123 procs, load=11.10 System clock is 0 seconds off top - 16:44:32 up 12 days, 8:29, 0 users, load average: 13.66, 11.28, 10.39 Tasks: 121 total, 2 running, 119 sleeping, 0 stopped, 0 zombie Cpu(s): 27.7%us, 1.7%sy, 0.1%ni, 69.1%id, 0.1%wa, 0.2%hi, 1.2%si, 0.0%st Mem: 8175452k total, 7177740k used, 997712k free, 53092k buffers Swap: 4192956k total, 930596k used, 3262360k free, 534092k cached ..snip.. Xymon environment variables RECIPIENT= BBCOLORLEVEL=yellow BBALPHAMSG=sabbeaprd02:cpu yellow [186647] green Thu Sep 27 16:44:30 EDT 2012 up: 12 days, 0 users, 123 procs, load=11.10 System clock is 0 seconds off top - 16:44:32 up 12 days, 8:29, 0 users, load average: 13.66, 11.28, 10.39 Tasks: 121 total, 2 running, 119 sleeping, 0 stopped, 0 zombie Cpu(s): 27.7%us, 1.7%sy, 0.1%ni, 69.1%id, 0.1%wa, 0.2%hi, 1.2%si, 0.0%st Mem: 8175452k total, 7177740k used, 997712k free, 53092k buffers Swap: 4192956k total, 930596k used, 3262360k free, 534092k cached ..snip..

2 1

Problem with the smtps test (unspecified SSL error)
by novosirj＠umdnj.edu 02 Oct '12

02 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Xymon 4.2.3 here still. For some reason, smtps doesn't test properly. I see the notes that smtps doesn't have a defined port. So, I started off trying smtps:587:s in bb-hosts. That didn't work. Then I tried adding the port to bb-services (normally that service has no port listed). Nothing seems to change the response I get -- a yellow test result with this phrase: Service smtps on mail.umdnj.edu is not OK : Unexpected service response ...and this in bb-network.log: 2012-09-27 16:22:39 Unspecified SSL error in SSL_connect to submission (19202/tcp) on host 10.32.15.162: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol I don't know why there should be any problem here. Any idea what I might do to dig deeper? The OpenSSL version I'm using is 0.9.8p and works for everything else just fine. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBktyAACgkQmb+gadEcsb7LCwCeIy6e5kYi0PpcConGsdoytezj 7Z0An1e5Xp3IqHhmOJtG784uK/PFnkkw =JKRn -----END PGP SIGNATURE-----

2 2

HP-UX client
by ray.reuter＠gmail.com 02 Oct '12

02 Oct '12

Does anyone have a good client install for monitoring HP-UX or OpenVMS? The HP-UX is my main concern and also I would have almost no idea of how to do the install of the client so any major help would be appreciated. Thanks as always.

5 8

Looking for Xymon clients for Solaris
by d.tom.schmitt＠L-3com.com 01 Oct '12

01 Oct '12

I am looking to now tackle the Solaris systems, does anyone have either a HowTo or a compiled Solaris client for Sparc and x86? I am running 4.3.0-0.beta2 Xymon server and have the compiled client running on multiple CentOS systems. The Xymon server is on a CentOS server. Is there a good tutorial/HowTo that shows how to just compile a client or do you take the entire portion of the source tree and do a 'make' and 'make install', etc. ? I do not want to download the entire Xymon system and compile it unless I have to. A little guidance would be greatly appreciated J Solaris 11 (Sparc, X86) Solaris 10 (Sparc, X86) Solaris 9 (Sparc) Solaris 8 (Sparc) Thanks, Tom Schmitt Senior IT Staff - R&D L-3 Communication Systems West 640 North 2200 West P.O. Box 16850 Salt Lake City, UT 84116 Phone (801) 594-3030 Cell (801) 231-7230 eFax (470) 201-6644 \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo-- Have A Nice Day ! It is not necessary to change. Survival is not mandatory. -- W. Edwards Deming

4 3

State of DEPENDS/ROUTE
by novosirj＠umdnj.edu 01 Oct '12

01 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, - From the Xymon 4.3.10 manual: - --- depends=(testA:host1/test1,host2/test2),(testB:host3/test3),[...] This tag allows you to define dependencies between tests. If "testA" for the current host depends on "test1" for host "host1" and test "test2" for "host2", this can be defined with depends=(testA:host1/test1,host2/test2) When deciding the color to report for testA, if either host1/test1 failed or host2/test2 failed, if testA has failed also then the color of testA will be "clear" instead of red or yellow. Since all tests are actually run before the dependencies are evaluated, you can use any host/test in the dependency - regardless of the actual sequence that the hosts are listed, or the tests run. It is also valid to use tests from the same host that the dependency is for. E.g. 1.2.3.4 foo # http://foo/ webmin depends=(webmin:foo/http) is valid; if both the http and the webmin tests fail, then webmin will be reported as clear. Note: The "depends" tag is evaluated by xymonnet while running the network tests. It can therefore only refer to other network tests that are handled by the same server - there is currently no way to use the e.g. the status of locally run tests (disk, cpu, msgs) or network tests from other servers in a dependency definition. Such dependencies are silently ignored. - --- Is there any chance we might see a change in this feature? I currently am finding that most of the dependencies I'd want are actually based on local tests... as in if I know a service is not running on a host, I don't need to get paged about the service also being unreachable. It would seem to me (not knowing the internals of Xymon) that the display server has all of the information to make this work, but I guess it's more of a coding effort than an impossibility? - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBpwiQACgkQmb+gadEcsb4glgCgimHlNfW65rFtIpvLsxrrmfRj V4YAnjImJr+cjYMb4e5iiAQFCztqn0ef =edaF -----END PGP SIGNATURE-----

1 0