December 2012 - Xymon - Xymon mailman web

TS - Maintenance Mode for a group of hosts?
by d.tom.schmitt＠L-3com.com 10 Dec '12

10 Dec '12

I have a request to take an entire area of hosts and place setup a maintenance window starting at a certain time and for say 3 hours. Is there a script that I can send it a list and have it place all of the devices in maintenance mode? All corporate servers will require a window of 3 hours at 6pm tonight. Also, is there any option on the HOST line that will not show up (like an actual comment not the COMMENT: entry) that can be used to select them from. e.g. the word 'CORP' in the options like that will normally be ignored by Xymon? I am running Xymon 4.3.0-0.beta2. Also, is there a way to show the COMMENT or DESCRIPTION on the line like it does in the non-green view under this release? Thanks, Tom Schmitt Senior IT Staff Salt Lake City, UT 84116 Phone (801) 594-3030 \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo-- Have A Nice Day ! It is not necessary to change. Survival is not mandatory. -- W. Edwards Deming

4 3

RRD Tool, values with leading zeros
by Michael.Beatty＠sherwin.com 09 Dec '12

09 Dec '12

I have a custom graph that displays a response time in seconds, the value is often under 1 second so it is padded with leading zeros, ie. 0.0123. When there are leading 0's the rrd is written as "NaN". How can I get rrd to grab leading 0's?

2 1

migrate server
by ejacobs＠thomaspublishing.com 08 Dec '12

08 Dec '12

Our current Xymon server is running on a vmware vm. The powers-that-be want it to run on a physical machine. Unfortunately there is no V2P converter. So I've set up a new Linux box. Looking for the best way to migrate from old server to new one -- Eric Jacobs Thomas Publishing Company Infrastructure and operations Information Technology Group Phone: 215-494-7312 Email: ejacobs at thomaspublishing.com

6 9

Xymon security concern raised
by sholmes42＠mac.com 08 Dec '12

08 Dec '12

I have a customer who is concerned that anyone could send data messages to the xymon server with one of his host names and Xymon would accept it as real thus potentially masking an attack. Note that this is in a university environment, so even if data can come only from campus addresses we might not necessarily trust the data. Is there a way to get Xymon to check the IP address on incoming data packets to verify that it is coming from the host it claims to be? Thanks, Steve Holmes Purdue University

12 17

Disabling systems results in xymond error status?
by Mike.Burger＠FreedomMortgage.com 06 Dec '12

06 Dec '12

While looking at an answer for Tom Schmitt, I opted test by disabling "ALL" on a couple of my own systems for a minute. When the scheduled "disable" (i.e. maintenance mode) tasks ran, xymon threw a yellow alarm for xymond with the following: Latest error messages: Ran scheduled task 2 from XXX.XXX.XXX.XXX: disable host1,my-domain,org.* 1 Disabled by: me @ ###.###.###.### Reason: Testing Ran scheduled task 1 from XXX.XXX.XXX.YYY: disable host2,my-domain,org.* 1 Disabled by: me @ ###.###.###.### Reason: Testing I'm trying to figure out: a) Is this the correct behavior? It seems to me that if you put a system (or systems) into maintenance, an error state should not be reported...especially on a scheduled task. b) Why is the error state showing up on the xymon server's xymond indicator? c) This may be more my preference than the majority. When the systems come back from maintenance, if the various monitor statuses haven't changed since the pre-maintenance period, wouldn't it be better to have those status indicators reflect that the actual status is the same as previously indicated (i.e. if disk, memory, msgs, ports, etc all reflected normal for more than 24 hours...dark green if you're using the LED theme, for example...my feeling is that unless there is actually an alarm for those monitors, they should return to the previous state, rather than a state indicating a recent ( < 24hr) change. Thanks. -- Mike Burger AIX Administrator <http://freedomhome.fhmc.local/intranet/main.jsp> Phone (317) 537-3680, Fax (317) 537-4680, Cell (317) 797-2040 E-mail: Mike.Burger at FreedomMortgage.com <mailto:Anthony.House at freedommortgage.com> "Once word leaks out that a pirate's gone soft, people begin to disobey you and then it's nothing but work, work, work, all the time." --Westley/The Dread Pirate Roberts CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure, alteration or distribution is strictly prohibited and may violate state or federal law. If you are not the intended recipient, please contact the sender by reply e-mail, delete this email and destroy all copies of the message.

1 0

xymonproxy messages getting truncated
by keenha＠gmail.com 06 Dec '12

06 Dec '12

I'm have several xymonproxy servers (over the other side of the world) which send data to my main xymon server. The trouble is that the data received by the xymon server is sometimes getting truncated, and thus it reports false red alerts - usually with procs. The xymon server itself does NOT report that it's getting truncated messages, and nor does the xymonproxy. I suspect that the network connection between the proxy and the main server is being dropped and some of the data is being lost, but the failed data is not being resent. Has anyone got any ideas what can be done about this please? I'm getting fed up with alerts saying that my servers are running no procs at all when they blatantly are :). Cheers, Heather

3 3

one of the dependent router conn fail but ping success
by vadud3＠gmail.com 05 Dec '12

05 Dec '12

$ xymoncmd xymonnet --no-update --debug --ping --trace --checkresponse --timeout=30 --concurrency=50 shows conn/ping failure for 192.168.65.254 status+30 192,168,65,254.conn red  Tue Dec 4 14:40:30 2012 conn NOT ok Service conn on 192.168.65.254 is not OK : Host does not respond to ping System unreachable for 774 poll periods (232704 seconds) &red 192.168.65.254 is unreachable But success with just 192.168.65.254 as the host $ xymoncmd xymonnet --no-update --debug --ping --trace --checkresponse --timeout=30 --concurrency=50 192.168.65.254 11079 2012-12-04 15:02:14 Adding to combo msg: status+30 192,168,65,254.conn green  Tue Dec 4 15:02:14 2012 conn ok 11079 2012-12-04 15:02:14 Flushing combo message combo status+30 216,111,65,254.conn green  Tue Dec 4 15:02:14 2012 conn ok Service conn on 192.168.65.254 is OK (up) &green 192.168.65.254 is alive (51.2 ms) $ fping 192.168.65.254 192.168.65.254 is alive What gives? -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

1 2

Graph generation suppression
by mjones＠mnsi.net 05 Dec '12

05 Dec '12

We have some switches with 175 plus ports and we would like to not display the graphs for them all on one page. We have created a way to link to them individually but they still all show up on the main page. Any ideas how I can do this? Mark Jones Operations Managed Network Systems London Desk 519-679-5207 Windsor Desk 519-258-2333 x8417 Cell 519-521-8222

1 0

findhost.c / cgi behaviour
by cami＠hack.co.za 05 Dec '12

05 Dec '12

Hi, This is mainly an issue i ran into when having duplicate names for locations, which allows us to keep locations looking consistent with one another, eg: hosts.cfg: .. page CPT CPT subparent CPT monitoring monitoring subparent monitoring xymon xymon group-compress <h3><i>xymon</i></h3> 64.71.152.161 cpt.hack.co.za page JHB JHB subparent JHB monitoring monitoring subparent monitoring xymon xymon group-compress <h3><i>xymon</i></h3> 64.71.152.162 jhb.hack.co.za .. Xymon will display that type of thing as you would expect it to when looking at the menus. The issue comes when trying to use findhost to see on which page " jhb.hack.co.za" exists. What currently happens is that findhost finds a match, but the match would be "CPT/monitoring/xymon" instead of "JHB/monitoring/xymon". Regards, Cami

1 0

Can't get data: distinguishing between icons
by David.Mills＠ngc.com 05 Dec '12

05 Dec '12

All - Could someone please spell out for me the differences between the different icon displays indicating there's a problem getting data for a particular host / test? No icon: (dash displayed in the given column) Purple: Clear: Thanks! david ~~~~~~~~~~~~~~~~~~~ David Mills Systems Administrator Northrop Grumman 512-595-1238 david.mills at ngc.com

3 3