December 2012 - Xymon - Xymon mailman web

Ignore pattern help
by Paul.Root＠CenturyLink.com 12 Dec '12

12 Dec '12

I have this line in the analsys.cfg file: LOG /opt/netcool/omnibus/log/MNS_NFMS_GW.log Error: COLOR=red IGNORE="%Writer|Reader|SQL" And when this line shows up: 12/11/12 06:37:07: Error: E-NGOBJSE-102-140: [ngobjserv]: ObjectServerA: No results have been returned in response to the cache details select SQL command. (0:No error) We get paged. I've changed the ignore pattern to "%Writer|%Reader|%SQL". This is a new error, that isn't an error for us. Will that change work, or does anyone have a better pattern? Thanks, Paul.

3 3

Setting up alerts based on specific messages and ignoring the others
by MatthewHarris＠air-watch.com 11 Dec '12

11 Dec '12

Hey Guys, is there any way using XYMON to set up specific alerts based on windows message ID's and hardware logs, I have been tasked with setting up monitoring the windows server hardware logs, and only alert on those, and have the rest of the messages show up as green. My boss is only interested in the hardware failures at the moment, we have nagios already set up, but I used hobbit in the past and was spoiled, so I want to set it up here, and hopefully replace nagios with xymon. To do that I need to find a way to alert on a few small things to give them a taste of xymon before I can get them to bite. I need to be able to set up an alert for a cluster failover, be able to alert on a hardware failure, and be able to alert on a cert expiration date. If you guys can help me out with some or all of those things, we'll be able to get nagios out and get xymon in. V/R Matt Matthew Harris Datacenter Ops O | +1 404.902.xxxx C | +1 404.xxx.xxxx F | +1 404.902.xxxx MatthewHarris at air-watch.com<mailto:MatthewHarris at air-watch.com> www.air-watch.com<http://www.air-watch.com/> [Description: Description: Description: cid:3420106421_29290231] This communication is confidential and is intended to be privileged pursuant to applicable law. If you are not a designated recipient of this message, please do not read, copy, use or disclose this message or its attachments. Notify the sender by replying to this message and delete or destroy all copies of this message and attachments in all media. Thank you.

2 1

Completely turning off collection of data
by Michael.Beatty＠sherwin.com 11 Dec '12

11 Dec '12

Is there a way to completely turn off the collection of a particular monitor on a client so that it doesn't send the data? It looks like the client gathers all the information all the time, sends it to the server, and the server determines which data to display. If I'm trying to save bandwidth, can I tell the client to not gather procs data (which on my system is about 15k per message) and just not send it? -- Michael Beatty

2 1

Yellow n Red alerts
by novosirj＠umdnj.edu 11 Dec '12

11 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please keep replies on the list. Every time that error appears, there should be an error in the Apache log unless you have a strange Apache configuration. Are you certain you're looking at the correct Apache log directory? On 12/11/2012 01:20 PM, Mahesh Y wrote: > Hi Ryan, > > Thanks for your reply..host file was updated Nov 30 2011..Apache > logs are present for that time..I could not find any errors from > recent logs. > > Regards, Mahesh. > > > On Tue, Dec 11, 2012 at 2:14 AM, Novosielski, Ryan > <novosirj at umdnj.edu <mailto:novosirj at umdnj.edu>> wrote: > > On 12/10/2012 03:41 PM, Mahesh Y wrote: >> Hi All, > >> I could not see the history of red and yellow alerts ,I am able >> to view green. > >> When I click on red/yellow alerts..it throws below error.Please >> help to sort this issue.Tried removing and and re-installing >> hobbit rpm but no luck. > >> Internal Server Error The server encountered an internal error >> or misconfiguration and was unable to complete your request. >> Please contact the server administrator, you at yourhost.com > <mailto:you at yourhost.com> >> <mailto:you at yourhost.com <mailto:you at yourhost.com>> and inform > them of the time the error >> occurred, and anything you might have done that may have caused >> the error. > >> More information about this error may be available in the server >> error log. > > You need to look in your server error log, like it says. By > "server" it means the Apache server. > > > - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDHejcACgkQmb+gadEcsb6migCfeX6NaYBQu6SslIIHkZdr3Ntq FY0An3tTfx6vADoddy2d+o+u8CiucnX9 =oqkz -----END PGP SIGNATURE-----

1 0

Troubleshooting
by Nick＠Pettefar.com 11 Dec '12

11 Dec '12

We are not getting alerts for the word "error" appearing in /var/adm/messages. How would we go about troubleshooting this? Regards, Nick

4 3

bbwin .13 cpu utilization always shows as high
by MatthewHarris＠air-watch.com 11 Dec '12

11 Dec '12

I have just set up a new xymon server, and all the windows clients are showing the cpu utilization as high when they are at 5%, do you know of any fix for this, btw xymon is great, I really like it, just gotta try and work through a couple bugs to get it into prod. Thanks in advance!!! Matthew Harris Datacenter Ops O | +1 404.902.xxxx C | +1 404.xxx.xxxx F | +1 404.902.xxxx MatthewHarris at air-watch.com<mailto:MatthewHarris at air-watch.com> www.air-watch.com<http://www.air-watch.com/> [Description: Description: Description: cid:3420106421_29290231] This communication is confidential and is intended to be privileged pursuant to applicable law. If you are not a designated recipient of this message, please do not read, copy, use or disclose this message or its attachments. Notify the sender by replying to this message and delete or destroy all copies of this message and attachments in all media. Thank you.

3 4

holiday as planned downtime
by Jurgen.Claessens＠cegeka.be 11 Dec '12

11 Dec '12

Hey all, I'm running xymon 4.3.7 and I have been trying to find a way so that the holidays are being showed as what would be the same for the alerting. For me this would mean that if it's a holiday they would show as planned downtime and not show up in the allnongreen window. The alerting itself works without problems, but I cannot find a way for the planned downtime act the same way. Can anyone point me in the right direction? This e-mail and all files transmitted as attachment(s) thereto are confidential and solely intended for the individual to whom or the organization to which they are addressed. If you received this e-mail by mistake, please notify Cegeka's Service Desk at cegeka.support at cegeka.be or call +32 (0)11 240 363. We thank you in advance. Cegeka hereby confirms that this message has been swept by Sophos for the presence of viruses.

2 3

A couple of migration questions
by novosirj＠umdnj.edu 10 Dec '12

10 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Going to upgrade from 4.2.3 to 4.3.10 next week and I want to answer just a quick couple of questions (I'll outline my setups briefly so you can warn me if you see a caveat). I have one server running two Solaris zones, one with a somewhat internal view of our network, one with a somewhat external view -- both have a xymonnet and xymonnetagain running. I also have another server running xymongen, clientdata, alert, etc. that hosts what I'd have formerly called the BBDISPLAY. What is going to be happening is I'm moving the latter pieces on the "display" server to a different server and upgrading to 4.3.10. At the same time, I'm going to upgrade the xymonnet machines to 4.3.10 and point them at the new server. I've really already done all of this, but on an alternate port for the two xymonnet machines. I plan to change back to the standard port when I go live with it, and to copy any data to the new live machine that has changed in the interim. My questions are: 1) Do the xymonnet machines listen on the Xymon port? They seem to, but I can't see any reason why they should. If they didn't, I'd configure the xymonnet machines to use the standard port 1984 to give me less to do when going live. 2) When I am ready to switch over to the new "display" server which is the one that has all of the history data and RRD files and all of that, do I just need to sync the hostdata directory to be sure that the historical information is not lost, or are there other things as well (as well as are there things in hostdata I should NOT copy over)? The RRD files from the old host work on the new host, and I currently have a running copy of 4.3.10 that was created from upgrading a copy of the 4.2.3 software on the original machine. 3) I see that xymonproxy cannot share a machine with xymond as they both use the same port. I assume depending on the answer to question 1, it can share a machine with xymonnet, right? 4) A couple of events (including the recent hurricane we had over here) have raised the need for a second Xymon server in cases where a campus will be unavailable for some time. Is using xymonproxy to distribute this information the way to go in a master/slave situation? Defining multiple XYMSRV's? Something else? Thanks for any insights anyone is willing to give. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDA+LcACgkQmb+gadEcsb4A+QCeLAANykvfRHvM3SaQUtSGveKR 6iAAn22wknww/9f00y2D51vjhBmXfPbR =Xiu3 -----END PGP SIGNATURE-----

4 8

Yellow n Red alerts
by maheshy04＠gmail.com 10 Dec '12

10 Dec '12

Hi All, I could not see the history of red and yellow alerts ,I am able to view green. When I click on red/yellow alerts..it throws below error.Please help to sort this issue.Tried removing and and re-installing hobbit rpm but no luck. Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, you at yourhost.com and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. -------------------------------------------------------------------------------- Apache/1.3.41 Server at 127.0.0.1 Port 80 Regards, Mahesh

2 1

MAPÉ - Monitoring App Page Extension
by cami＠hack.co.za 10 Dec '12

10 Dec '12

Howdy All, We're working on a new (animated) front-end for Xymon which allows you to have different views into your environment. It's called "MAPÉ" (pronounced: MAP-EE). The project was started because the default "Main View" / "Non-green" view is quite outdated and such a great monitoring system needs a new face. We would love to get some feedback on the current screenshots and the roadmap (preferably on the mailing list). Instead of subjecting everyone to screenshots, you can take a look at it: http://mape.hack.co.za The first milestone has been reached with a dynamic / animated tree and will be up for download once we got a bit of discussion going around where we should be headed. Regards, Cami

9 27