February 2012 - Xymon - Xymon mailman web

Ghost client problems
by paveltraian＠yahoo.com 29 Feb '12

29 Feb '12

Hi, Conn, info and trends are green as always. cpu, disk, memory, msgs, ports and procs are purple. Regards, Traian. --- On Mon, 2/27/12, Chris.Morris at rwe.com <Chris.Morris at rwe.com> wrote: From: Chris.Morris at rwe.com <Chris.Morris at rwe.com> Subject: RE: [Xymon] Ghost client problems To: paveltraian at yahoo.com Date: Monday, February 27, 2012, 3:49 PM So - your network tests ( server to client ) are green and current? Server to client comms OK. Your client tests are purple, no ghosts, no logfetch.* files? Client to server comms NOTOK. From: Pavel Traian [mailto:paveltraian at yahoo.com] Sent: 27 February 2012 13:24 To: xymon at xymon.com; Morris, Chris (SS-IS) Subject: RE: [Xymon] Ghost client problems Hi, Do you have anything under Ghost reports on the xymon server? I don't have anything under ghost report. Are the client and server on the same or different hosts? They are running on different hosts. Is the client pointing at the correct address and port for the xymon server Yes it is pointing the correct address and port. How do you know files are missing from ~/client/tmp directory .. what are you expecting to see there? When the client functioned(the test were green in xymon server) correctly i saw two more files there logfetch.clientname.cfg and logfetch.clientname.status. Have you checked the clientlaunch.log and xymonclient.log files for errors in ~/client/logs? I see no errors. Regards, Traian. --- On Mon, 2/27/12, Chris.Morris at rwe.com <Chris.Morris at rwe.com> wrote: From: Chris.Morris at rwe.com <Chris.Morris at rwe.com> Subject: RE: [Xymon] Ghost client problems To: paveltraian at yahoo.com Cc: xymon at xymon.com Date: Monday, February 27, 2012, 2:49 PM Do you have anything under Ghost reports on the xymon server? Are the client and server on the same or different hosts? Is the client pointing at the correct address and port for the xymon server How do you know files are missing from ~/client/tmp directory .. what are you expecting to see there? Have you checked the clientlaunch.log and xymonclient.log files for errors in ~/client/logs? From: Pavel Traian [mailto:paveltraian at yahoo.com] Sent: 27 February 2012 12:05 To: xymon at xymon.com; Morris, Chris (SS-IS) Subject: RE: [Xymon] Ghost client problems Hi, That one i have solved it, but.... Now i have reinstallled the client and i started it using ./runclient.sh --hostname=host start command from xymon user. On the xymon server web page all the tests(disk,cpu etc) appear in violet colour and i see there the last report i had from when it functioned ok. On the client i have issued some commands and you have the output here: [root at otpproxy1 tmp]# ps -ef | grep xymon xymon 3785 1 0 09:44 ? 00:00:00 ./bin/xymonlaunch --config=./etc/clientlaunch.cfg --log=./logs/clientlaunch.log --pidfile=./logs/clientlaunch.otpproxy1.pid xymon 5892 1 0 13:54 ? 00:00:00 sh -c vmstat 300 2 1>./tmp/xymon_vmstat.otpproxy1.5867 2>&1; mv ./tmp/xymon_vmstat.otpproxy1.5867 ./tmp/xymon_vmstat.otpproxy1 xymon 5894 5892 0 13:54 ? 00:00:00 vmstat 300 2 root 5902 5686 0 13:57 pts/0 00:00:00 grep xymon [root at otpproxy1 tmp]# ps -e | grep xymon 3785 ? 00:00:00 xymonlaunch [root at otpproxy1 tmp]# ls -l total 36 -rw-rw-r-- 1 xymon xymon 32690 Feb 27 13:54 msg.otpproxy1.txt -rw-rw-r-- 1 xymon xymon 246 Feb 27 13:54 xymon_vmstat.otpproxy1.5867 [root at otpproxy1 tmp]# As i see there are some files missing from tmp directory. I don't understand why. Can you please give me a hint? Regards, Traian. **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). *****************************************************************************

4 4

debbuging DOWNTIME
by olivier＠zimbra.minas.fr 29 Feb '12

29 Feb '12

hello how can I know witch host config line is wrong when I got this in the logs ? Latest error messages: Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Invalid timespec - expected 4 digits, got: 'maintenance' Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 thx for your help oau

2 1

graphs customising
by oliver＠mrmail.com 29 Feb '12

29 Feb '12

Hi all, I have been trying to modify the default look of the graphs generated by xymon without any success. I have tried to play with hobbitgraphs.cfg, changed few things but it sill does not want to generate better looking graphs. I have seen many nice graphs generated by RRD but can't make it work with xymon. Do anyone knows about any decent tutorial somewhere online? Many thanks. Oliver

1 0

Dashes preferred
by dewelker＠gmail.com 29 Feb '12

29 Feb '12

In preparation of a client sending data to a Xymon server, a hosts.cfg file was set up as follows: page page Page 0.0.0.0 server1 # noconn 0.0.0.0 server1.a # noconn 0.0.0.0 server1.b # noconn subpage subpage Subpage [HOSTIP] [HOST] Having received no data from the client yet, I would expect to see these 3 servers on the Page, instead all I see is a Page with a link to a Subpage which correctly displays my server. Is there a way (some configuration setting or option) to have the servers show up on the Page with dashes (-) for the column names until I actually receive data? Thanks, D

3 3

Dashes preferred
by dewelker＠gmail.com 29 Feb '12

29 Feb '12

Yes, Larry, that's what I'm finding. What I was hoping is that someone would know of a way (either via a configuration item, variable setting, or whatever) to get these to display regardless - like they use to in older versions. For example, if I have a client by itself several pages down in a hierarchy (for proper segregation) and it doesn't show up initially, there's no way to know when or if it starts reporting - short of it eventually showing up on the "bad page" (which might be days later), unless I continually check for it manually. And what if it is due to a firewall, but I forgot I put it there (this is supposed to handle thousands of servers, I'm told)? I might never remember to follow up on getting the firewall fixed! Does anyone know of a possible setting/solution, other than what was already suggested? Thanks, D On Tue, Feb 28, 2012 at 9:28 AM, Larry Barber <lebarber at gmail.com> wrote: > I find that the dashes are display if the new server is part of a "group" > that includes other servers that are already displaying test results. > Otherwise the new server will not show up until there is a positive test > result to post. Xymon needs someway to know _what_ tests to display. > > Thanks, > Larry Barber > > On Tue, Feb 28, 2012 at 6:52 AM, David Welker <dewelker at gmail.com> wrote: > >> Ryan, >> >> Thanks for the reply. Granted I didn't add much detail because this is >> in "preparation" of adding clients, so this is just the Xymon display >> server (a default install) I'm dealing with. It's a very basic config >> using RH5 or RH6 (happens on both) and the latest(?) version of Xymon - >> 4.3.7. I used to play with an older version (back when it was named >> "Hobbit") that did display the dashes, which is why I'm asking - to see if >> this is just a new setting and/or a bug - and I've tried to make it as >> simple as possible for anyone to replicate. >> >> Thanks, >> D >> >> On Mon, Feb 27, 2012 at 2:02 PM, Ryan Novosielski <novosirj at umdnj.edu>wrote: >> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> You don't say how your setup is done (mine for example is split between >>> display and network test machines), but mine DOES work that way -- as >>> long as the host is in the bb-hosts file (I'm still running 4.2.3) on >>> the machine generating the web page, it will be there with -'s. >>> >>> On 02/27/2012 01:47 PM, David Welker wrote: >>> > In preparation of a client sending data to a Xymon server, a hosts.cfg >>> > file was set up as follows: >>> > >>> > page page Page >>> > 0.0.0.0 server1 # noconn >>> > 0.0.0.0 server1.a # noconn >>> > 0.0.0.0 server1.b # noconn >>> > subpage subpage Subpage >>> > [HOSTIP] [HOST] >>> > >>> > Having received no data from the client yet, I would expect to see >>> these >>> > 3 servers on the Page, instead all I see is a Page with a link to a >>> > Subpage which correctly displays my server. Is there a way (some >>> > configuration setting or option) to have the servers show up on the >>> Page >>> > with dashes (-) for the column names until I actually receive data? >>> >>> - -- >>> - ---- _ _ _ _ ___ _ _ _ >>> |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer >>> |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) >>> \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark >>> -----BEGIN PGP SIGNATURE----- >>> Version: GnuPG v1.4.10 (GNU/Linux) >>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ >>> >>> iEYEARECAAYFAk9L0z0ACgkQmb+gadEcsb713QCg3aR18OlYN9Or+xtxx+FYssTQ >>> 9KIAoIQPWUvkn0JxGUZk68SBCrvEQqJ9 >>> =gaOe >>> -----END PGP SIGNATURE----- >>> >> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> >

1 0

double LOG alert
by martin.flemming＠desy.de 29 Feb '12

29 Feb '12

Hi ! I've got two alert mails for the same logentry within 30 minutes :-( I know that becomes with the default of "the LOG check clears itself after 30m" didn't it ? Is it possible to eliminate this without hacking the sourcecode ? Thanks & Cheers Martin ______________________________________________________ FRIST ALERT : ---------- Forwarded message ---------- Date: Wed, 8 Feb 2012 10:16:37 +0100 (CET) From: Xymon user <xymon-patrol at desy.de> To: xymon-patrol at desy.de, oracle-admins at desy.de Subject: [xymon-patrol] Xymon [652105] oracle1:msgs CRITICAL (RED) [cfid:128] red System logs at Wed Feb 8 10:16:28 CET 2012 &red Critical entries in <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> &red Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) &red Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or &red Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it. <pre> </pre> <pre> </pre> Full log <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it. SECOND ALERT : Date: Wed, 8 Feb 2012 10:46:45 +0100 (CET) From: Xymon user <xymon-patrol at desy.de> To: xymon-patrol at desy.de, oracle-admins at desy.de Subject: [xymon-patrol] Xymon [652105] oracle1:msgs CRITICAL (RED) [cfid:128] red System logs at Wed Feb 8 10:46:32 CET 2012 &red Critical entries in <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> &red Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) &red Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or &red Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it. <pre> </pre> <pre> </pre> Full log <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it.

1 1

debbuging DOWNTIME
by sjcarr＠gmail.com 29 Feb '12

29 Feb '12

The format for DOWNTIME is the following: DOWNTIME=day:starttime:endtime[,day:starttime:endtime] DOWNTIME=columns:day:starttime:endtime:cause[,columns:day:starttime:endtime:cause]So search for lines which don't match those formats. The error would seem to suggest that instead of one of the attributes it got the word maintenance so you could search for "=maintenance" or ":maintenance" to see where the value is. If you have dynamically generated your config file from a CMDB then the template you have used for the line has gone wrong somewhere, I'd suggest debugging that code to find out why it has corrupted an entry. Steve On 28 February 2012 19:06, Gore, David W (David) <david.gore at verizon.com>wrote: > Either hosts.cfg or alerts.cfg or both. Config file names may be > different depending on your version of Xymon. > > ~David > > Ps. Try grepping for 'downtime', grep -i downtime > > -----Original Message----- > From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf > Of Olivier AUDRY > Sent: Tuesday, February 28, 2012 09:26 > To: xymon at xymon.com > Subject: [Xymon] debbuging DOWNTIME > > hello > > how can I know witch host config line is wrong when I got this in the logs > ? > > Latest error messages: > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Invalid timespec - expected 4 digits, got: 'maintenance' > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > > thx for your help > > oau > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

1 0

No RRD file created
by sholmes42＠mac.com 28 Feb '12

28 Feb '12

Running Xymon 4.2.3. I've followed the instructions for creating a custom graph and double checked everything several times. I've looked in the archives and, while there are a few threads there on this, I was not able to find anything helpful. I have a script that is successfully doing a test on several hosts and displays a page with output like: Thu Feb 9 11:42:26 EST 2012 Percent of cpu time in wait state is OK cpuwait : 0 The test column is 'wait'. I have in hobbitserver.cfg: TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tcp,dig=tcc p,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sendmail,mailq,nmaii lq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,files,procs=proo cesses,ports,clock,lines,myconns=ncv,temp=ncv,diskstat-reads=ncv,diskstat-writess =ncv,diskstat-kreads=ncv,diskstat-kwrites=ncv,diskstat-wait=ncv,diskstat-actv=ncc v,diskstat-svct=ncv,diskstat-wsvc=ncv,diskstat-pw=ncv,diskstat-pb=ncv,diskstat-rr rqm=ncv,diskstat-wrqm=ncv,diskstat-r=ncv,diskstat-w=ncv,diskstat-rsec=ncv,diskstt at-wsec=ncv,diskstat-avgrq-sz=ncv,diskstat-avgqu-sz=ncv,diskstat-await=ncv,diskss tat-svctm=ncv,diskstat-util=ncv,wait=ncv" NCV_wait="cpuwait:GAUGE" GRAPHS="la,disk,inode,qtree,files,processes,memory,users,vmstat,iostat,tcp.http,, tcp,ncv,netstat,ifstat,mrtg::1,ports,temperature,ntpstat,apache,bind,sendmail,maa ilq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,clock,lines,myconns,, temp,diskstat-reads::7,diskstat-writes::7,diskstat-kreads::7,diskstat-kwrites::77 ,diskstat-wait::7,diskstat-actv::7,diskstat-svct::7,diskstat-wsvc::7,diskstat-pww ::7,diskstat-pb::7,diskstat-rrqm::7,diskstat-wrqm::7,diskstat-r::7,diskstat-w::77 ,diskstat-rsec::7,diskstat-wsec::7,diskstat-avgrq-sz::7,diskstat-avgqu-sz::7,diss kstat-await::7,diskstat-svctm::7,diskstat-util::7,wait " And I've stopped and restarted Xymon multiple times. At this point the instructions say to make sure the wait.rrd file is being created. But it isn't. What am I missing? Thanks, Steve Holmes

2 3

debbuging DOWNTIME
by olivier＠audry.fr 28 Feb '12

28 Feb '12

hello how can I know witch host config line is wrong when I got this in the logs ? Latest error messages: Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Invalid timespec - expected 4 digits, got: 'maintenance' Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 thx for your help oau

3 3

Ghost client problems
by paveltraian＠yahoo.com 28 Feb '12

28 Feb '12

Hi, I have installed a xymon client on a CentOS 6 x64 server. Everything looks good except the fact that even the Xymon server receives data and its' page is OK(the client is there diplayed with its' short name) i have the same client displayed in Ghost Clients(this time with its' FQDN). I have checked on the client and i have too many files in xymon/client/tmp folder. It looks something like this: -rw-rw-r-- 1 xymon xymon 41 Feb 22 13:17 logfetch.otpproxy1.cfg -rw-rw-r-- 1 xymon xymon 41 Feb 22 13:17 logfetch.otpproxy1.status -rw-r--r-- 1 root root 35787 Feb 22 13:17 msg.otpproxy1.temenosgroup.com.txt -rw-rw-r-- 1 xymon xymon 37183 Feb 22 13:17 msg.otpproxy1.txt -rw-rw-r-- 1 xymon xymon 246 Feb 22 13:17 xymon_vmstat.otpproxy1.2637 -rw-rw-r-- 1 xymon xymon 246 Feb 22 13:14 xymon_vmstat.otpproxy1.temenosgroup.com.2597 -rw-r--r-- 1 root root 246 Feb 22 13:17 xymon_vmstat.otpproxy1.temenosgroup.com.2681 It seems like the client is started al least twice.... How can I set it right? Regards, Traian.

5 20