December 2012 - Xymon - Xymon mailman web

http problem
by lebarber＠gmail.com 14 Dec '12

14 Dec '12

After upgrading my proxies so they have on online failover and virtual ip, I'm having an issue with 3 of my website tests (out of hundreds of tests). When I but xymonnet into debug mode I see the following in the xymonnet log file: ------------------------------------------------------ URL : https://whatever:4900/em/upload HTTP status : 0 HTTP headers ^U^C^A HTTP output (NULL) I don't think it is network equipment, the above site is on the same subnet as the proxy. The command I use to run xymonnet is: [bbnet-midr] ENVFILE /opt/xymon/server/etc/xymonserver.cfg CMD XYMONDPORT=1984 XYMONNETWORK=MIDR xymonnet --report --ping --checkresponse --concurrency=128 --timeout=15 --sslwarn=90 --sslalarm=30 --source-ip=w.x.y.z LOGFILE $BBSERVERLOGS/xymon-net-midr.log INTERVAL 2m Where w.x.y.z is the virtual ip for the xymon proxy. Any ideas about what is going on here? Thanks, Larry Barber

1 0

fping question
by lebarber＠gmail.com 14 Dec '12

14 Dec '12

Does anybody know if there is any way to instruct fping to use a specific interface, something like 'ping -I' does? Thanks, Larry Barber

1 0

DAT attachments?
by ejacobs＠thomaspublishing.com 14 Dec '12

14 Dec '12

Recently noved our Xymon server from a vm running CentOS 5.8 to physical server running CentOS 6.3. Most things work correctly but I'm seeing some of the email alerts having .dat attachments. Anyone know why, and how to fix this? -- Eric Jacobs Thomas Publishing Company Infrastructure and operations Information Technology Group Phone: 215-494-7312 Email: ejacobs at thomaspublishing.com

6 6

Xymon Digest, Vol 23, Issue 13
by s.watkins＠nhm.ac.uk 14 Dec '12

14 Dec '12

> Message: 1 > Date: Thu, 13 Dec 2012 14:58:06 +0000 > From: K?rfer, Thomas <t.koerfer at gevasys.de> > To: 'Claessens Jurgen' <Jurgen.Claessens at cegeka.be>, > "'xymon at xymon.com'" <xymon at xymon.com> > Subject: Re: [Xymon] multiple content checks in one column > Message-ID: > <6CFF4C170D04D1449B04463D52476E0E794E46 at exchange2010.gevas > ys.intern> > Content-Type: text/plain; charset="iso-8859-1" > > The combo test is not realy what I need. > My problem is, that there are round about 20 content tests on one service > and up to 5 services on one host, what results in an output of 100 columns for > tests of this one host. > The host page looks realy strange with a host of hundreds of columns. > > That's why I would like to combine the service based content tests to one > group / column with an output like a multiple http test - if this is possible. > > b.r. > TK Sorry if I haven't picked up on all the details here, I haven't had the time to keep track of what's happening on list all that closely. The interactives dept here have a requirement to check multiple independent local web resources but they want it all to be under one test, with one set of warnings. They want the actual webpages/resources to be tested rather than a blanket "is the webserver up?" type test. The end result is a script that picks up the list of URLs to test and then runs a HTTP::Request (from the Perl module) to determine whether the actual URI is valid and available. It collates all the individual results into an array and as each result comes in, it is checked to see if it is an alert state or not. If it is an alert state, then a status global is set to 'RED'. This output is collected together and wrapped up in HTML. The first line of output gives the status global which is what the server picks up on to determine whether the test is red/green. At the end of the tests, the script then calls the server/bin/bb binary with the details of the Xymon server and dumps the prettified test output to the server. This is held on the server and included in the test's page on Hobbit. The following is the format/output section of the script (forgive the kludgeyness of it, it's meant to be more functional than pretty): ------- @TestResults = (); $MainResult='GREEN'; # Go through the list of URLs, one at a time, putting the chosen URL into $wpage foreach $wpage (@pages) { ... put the various webserver/remote system tests and checks in here # If the result is a '200 OK' or a '302 Found' then the webpage is 'present' if (($results =~ /200/) || ($results =~ /302/)) { $Outline="&green $wpage Success\r\n"; push(@TestResults,$Outline); } # If result != [200|302] then unhappy webpage! :( else { $Outline="&red $wpage Fail[$results]\r\n"; push(@TestResults,$Outline); $MainResult='RED'; } } # At this point we have an array @TestResults containing all the results of # the webpage checks. We now need to pass that info up to the xymon system # Get the current date/time $testdate=`date`; chomp($testdate); # Now format the report line that goes back to the xymon system. $LineOut="'status webcheck.webcheck $MainResult $testdate - webcheck $MainResult\n\n"; # Add the results of the webpage tests foreach $Line1 (@TestResults) { $LineOut = $LineOut . $Line1."\n"; } # Now make up the commandline and execute it $Args=("/usr/local/hobbit/server/bin/bb $XymonServerIPAddr "."$LineOut"); system($Args); ------- It's not elegant but it is functional. It's installed on and is driven by the xymon server which causes the results pages to properly map into each other. So basically you're running your own tests, collecting and formatting the output of which the first line is the important "status handshake" with the Xymon server and then using Xymon's own utilities (server/bin/bb) to transfer that output back to the server. By doing this I currently have about 40 individual webpages and resources being checked but only one status (webcheck.webcheck) and one Xymon page gets changed. Apologies if I've not understood your request correctly. You're welcome to use part or all of the code above in your own projects if you choose. Regards, Steff Watkins ----- Steff Watkins Natural History Museum, Cromwell Road, London,SW75BD Systems programmer Email: s.watkins at nhm.ac.uk Systems Team Phone: +44 (0)20 7942 6000 opt 2 ======== "Many were increasingly of the opinion that they'd all made a big mistake in coming down from the trees in the first place. And some said that even the trees had been a bad move, and that no one should ever have left the oceans." - HHGTTG

1 0

Possible bug - bogus pages occasionally on "UNMATCHED"
by betsy.schwartz＠gmail.com 14 Dec '12

14 Dec '12

I think I'm getting bogus, occasional pages from an UNMATCHED rule that should not be matching. (xymon 4.3.10) I set up a default UNMATCHED rule as the last rule in alerts.cfg: (just recently added the DURATION) HOST=* SERVICE=* SCRIPT /usr/local/scripts/mailunmatched betsy UNMATCHED DURATION>10 FORMAT=TEXT However, painfully, I am getting pages *occasionally* and incorrectly. They all seem to be coming from this rule set: HOST=* EXHOST=%($NOPAGE|$VIP) SERVICE=$TECHOPS_TESTS include techops.escalation.cfg where techops.escalation.cfg is MAIL techopsmail repeat=8h COLOR=yellow FORMAT=TEXT MAIL techopsmail repeat=5m COLOR=red FORMAT=TEXT MAIL alert1 REPEAT=10 COLOR=red FORMAT=SMS MAIL alert2 DURATION>20 REPEAT=10 COLOR=red FORMAT=SMS MAIL alert3 DURATION>40 REPEAT=10 COLOR=red FORMAT=SMS MAIL alert4 DURATION>60 REPEAT=10 COLOR=red FORMAT=SMS MAIL alert5 DURATION>80 REPEAT=10 COLOR=red FORMAT=SMS It's only happening *occasionally*. When I test the rules, ie /usr/local/xymon/server/bin/xymond_alert --test bm1-08.example.com disk --color=yellow they don't hit the unmatched rule. For example, today, bm1-08 which hits the above rules has had a busy disk day: Thu Dec 13 20:22:25 2012 bm1-08.example.com disk green From -> To yellow Thu Dec 13 15:50:00 2012 bm1-08.example.com disk yellow From -> To green Thu Dec 13 13:48:54 2012 bm1-08.example.com disk green From -> To yellow Thu Dec 13 13:28:44 2012 bm1-08.example.com disk yellow From -> To green Thu Dec 13 13:13:45 2012 bm1-08.example.com disk red From -> To yellow Thu Dec 13 12:58:45 2012 bm1-08.example.com disk yellow From -> To red Thu Dec 13 12:48:44 2012 bm1-08.example.com disk green From -> To yellow Thu Dec 13 10:28:11 2012 bm1-08.example.com disk yellow From -> To green Thu Dec 13 10:18:06 2012 bm1-08.example.com disk green From -> To yellow Thu Dec 13 09:57:54 2012 bm1-08.example.com disk yellow From -> To green Thu Dec 13 09:42:46 2012 bm1-08.example.com disk green From -> To yellow Thu Dec 13 08:22:12 2012 bm1-08.example.com disk yellow From -> To green Thu Dec 13 07:36:56 2012 bm1-08.example.com disk green From -> To yellow Thu Dec 13 05:41:37 2012 bm1-08.example.com disk yellow From -> To green Thu Dec 13 05:21:35 2012 bm1-08.example.com disk green From -> To yellow and I was paged, erroneously, **ONCE** Thu Dec 13 05:22:36 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[252] 1355394156 100 Thu Dec 13 07:37:23 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[252] 1355402243 100 Thu Dec 13 09:42:46 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[252] 1355409766 100 Thu Dec 13 10:18:35 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[252] 1355411915 100 Thu Dec 13 12:48:44 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[252] 1355420924 100 Thu Dec 13 12:58:45 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[253] 1355421525 100 Thu Dec 13 12:58:45 2012 bm1-08.example.com.disk (10.101.251.108) alert1[254] 1355421525 100 Thu Dec 13 13:03:45 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[253] 1355421825 100 Thu Dec 13 13:48:55 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[252] 1355424534 100 Thu Dec 13 20:22:25 2012 bm1-08.example.com.disk (10.101.251.108) techopsmail[252] 1355448145 100 Thu Dec 13 20:32:32 2012 bm1-08.example.com.disk (10.101.251.108) betsy 1355448752 100 This feels like a bug. Anyone else experiencing anything like this? Or am I doing something wrong?

1 0

multiple content checks in one column
by t.koerfer＠gevasys.de 14 Dec '12

14 Dec '12

Is it possible to get multiple content checks in one column? Background: - I have a IIS-Webserver with some DOT.NET WebServices - Each WebService has multiple test I want to check Example: cont=Service1;http://webserver/Service1/test1;true cont=Service1;http://webserver/Service1/test2;true cont=Service1;http://webserver/Service1/test3;true cont=Service2;http://webserver/Service2/test1;true cont=Service2;http://webserver/Service2/test2;true cont=Service2;http://webserver/Service2/test3;true If I only define the content checks, I got 6 columns but I want a combination for each Service (like in the HTTP test). My example above does not work because only one test was shown on the side... Any Suggestions? Google finds the same problem since 2006 but there seems to be no solution?!? b.r. TK

3 3

Xymon HTTP 404 not found - Please help
by ashwingrwl＠gmail.com 13 Dec '12

13 Dec '12

Hi, We installed xymon on Linux box. And when we launch the url http://servername/xymon we are getting message " HTTP 404 not found". When we run http://servername/ it is working but http://servername/xymon is not working. Could someone please help what could be the issue and how we need to fix it. Thanks for your time and help. Best Regards, Ashwin.

2 1

Simple Network Tests not displaying
by Michael.Beatty＠sherwin.com 13 Dec '12

13 Dec '12

I'm not getting any data about my clients on any simple network tests, such as, ssh, telnet, etc. The only column that is showing up that is listed in the hosts.cfg man page is "bbd" I'm using the default protocols.cfg and tasks.cfg. xymonnet.log file is small, doesn't have any data in it since June. The xymonnet column for my server is showing data and statistics. Any help would be appreciated. -- Michael Beatty

2 3

Xymon 4.3.10 and "multi-source status" errors
by novosirj＠umdnj.edu 13 Dec '12

13 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12/11/2012 03:22 PM, cleaver at terabithia.org wrote: >> My xymond test is often yellow, and near as I can tell, the >> reason is often that I have so-called "multi-source statuses." >> However, the "second" source is the Xymon server, and this >> appears to happen most often when tests are disabled (as the blue >> status comes from the Xymon server). Should I be ignoring this? >> Is there a misconfiguration somewhere that has this server not >> properly identifying messages from itself? >> >> Thanks for your help. >> > > Not sure entirely what you're referring to here... Can you provide > sample output from the different tests? If you click on the "xymond" dot, I get the following much of the way down the page (you can see this on yours too, but it will be blank most likely): Multi-source statuses www-test.umdnj.edu:conn reported by 10.32.5.120 and 130.219.XXX.XXX www-test.umdnj.edu:cpu reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:disk reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:files reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:fma reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:ftp reported by 10.32.5.120 and 130.219.XXX.XXX www-test.umdnj.edu:memory reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:msgs reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:ports reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:procs reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:raid reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:telnet reported by 10.32.5.120 and 130.219.XXX.XXX www-test.umdnj.edu:temp reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:vmio reported by 10.32.5.120 and 10.32.5.106 www-test.umdnj.edu:zfs reported by 10.32.5.120 and 10.32.5.106 ...(the former is the Xymon server) and I just figured out the specific case that causes it. If you disable the server with "$XYMONHOME/server/bin/xymon $XYMONDISP 'disable host.domain.com* 5m Testing' etc. instead of using the GUI, you will see this. It appears that doing it via the GUI does not result in this happening. Bug of feature? - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDHmSAACgkQmb+gadEcsb70uACfYDsOaneBZ3I7sB9ZfPq/+xn/ DNMAnRYLXKtHBWcIBpQ9IGM56o4Nu3/w =emGB -----END PGP SIGNATURE-----

2 2

Alerts based on rrd graphs
by kc6ovd＠gmail.com 13 Dec '12

13 Dec '12

Anyone doing any alerting on graphed rrd data? Just looking for some sample of what you might be doing. -Kevin

2 1