February 2012 - Xymon - Xymon mailman web

Dashes preferred
by dewelker＠gmail.com 29 Feb '12

29 Feb '12

In preparation of a client sending data to a Xymon server, a hosts.cfg file was set up as follows: page page Page 0.0.0.0 server1 # noconn 0.0.0.0 server1.a # noconn 0.0.0.0 server1.b # noconn subpage subpage Subpage [HOSTIP] [HOST] Having received no data from the client yet, I would expect to see these 3 servers on the Page, instead all I see is a Page with a link to a Subpage which correctly displays my server. Is there a way (some configuration setting or option) to have the servers show up on the Page with dashes (-) for the column names until I actually receive data? Thanks, D

3 3

Dashes preferred
by dewelker＠gmail.com 29 Feb '12

29 Feb '12

Yes, Larry, that's what I'm finding. What I was hoping is that someone would know of a way (either via a configuration item, variable setting, or whatever) to get these to display regardless - like they use to in older versions. For example, if I have a client by itself several pages down in a hierarchy (for proper segregation) and it doesn't show up initially, there's no way to know when or if it starts reporting - short of it eventually showing up on the "bad page" (which might be days later), unless I continually check for it manually. And what if it is due to a firewall, but I forgot I put it there (this is supposed to handle thousands of servers, I'm told)? I might never remember to follow up on getting the firewall fixed! Does anyone know of a possible setting/solution, other than what was already suggested? Thanks, D On Tue, Feb 28, 2012 at 9:28 AM, Larry Barber <lebarber at gmail.com> wrote: > I find that the dashes are display if the new server is part of a "group" > that includes other servers that are already displaying test results. > Otherwise the new server will not show up until there is a positive test > result to post. Xymon needs someway to know _what_ tests to display. > > Thanks, > Larry Barber > > On Tue, Feb 28, 2012 at 6:52 AM, David Welker <dewelker at gmail.com> wrote: > >> Ryan, >> >> Thanks for the reply. Granted I didn't add much detail because this is >> in "preparation" of adding clients, so this is just the Xymon display >> server (a default install) I'm dealing with. It's a very basic config >> using RH5 or RH6 (happens on both) and the latest(?) version of Xymon - >> 4.3.7. I used to play with an older version (back when it was named >> "Hobbit") that did display the dashes, which is why I'm asking - to see if >> this is just a new setting and/or a bug - and I've tried to make it as >> simple as possible for anyone to replicate. >> >> Thanks, >> D >> >> On Mon, Feb 27, 2012 at 2:02 PM, Ryan Novosielski <novosirj at umdnj.edu>wrote: >> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> You don't say how your setup is done (mine for example is split between >>> display and network test machines), but mine DOES work that way -- as >>> long as the host is in the bb-hosts file (I'm still running 4.2.3) on >>> the machine generating the web page, it will be there with -'s. >>> >>> On 02/27/2012 01:47 PM, David Welker wrote: >>> > In preparation of a client sending data to a Xymon server, a hosts.cfg >>> > file was set up as follows: >>> > >>> > page page Page >>> > 0.0.0.0 server1 # noconn >>> > 0.0.0.0 server1.a # noconn >>> > 0.0.0.0 server1.b # noconn >>> > subpage subpage Subpage >>> > [HOSTIP] [HOST] >>> > >>> > Having received no data from the client yet, I would expect to see >>> these >>> > 3 servers on the Page, instead all I see is a Page with a link to a >>> > Subpage which correctly displays my server. Is there a way (some >>> > configuration setting or option) to have the servers show up on the >>> Page >>> > with dashes (-) for the column names until I actually receive data? >>> >>> - -- >>> - ---- _ _ _ _ ___ _ _ _ >>> |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer >>> |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) >>> \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark >>> -----BEGIN PGP SIGNATURE----- >>> Version: GnuPG v1.4.10 (GNU/Linux) >>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ >>> >>> iEYEARECAAYFAk9L0z0ACgkQmb+gadEcsb713QCg3aR18OlYN9Or+xtxx+FYssTQ >>> 9KIAoIQPWUvkn0JxGUZk68SBCrvEQqJ9 >>> =gaOe >>> -----END PGP SIGNATURE----- >>> >> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> >

1 0

double LOG alert
by martin.flemming＠desy.de 29 Feb '12

29 Feb '12

Hi ! I've got two alert mails for the same logentry within 30 minutes :-( I know that becomes with the default of "the LOG check clears itself after 30m" didn't it ? Is it possible to eliminate this without hacking the sourcecode ? Thanks & Cheers Martin ______________________________________________________ FRIST ALERT : ---------- Forwarded message ---------- Date: Wed, 8 Feb 2012 10:16:37 +0100 (CET) From: Xymon user <xymon-patrol at desy.de> To: xymon-patrol at desy.de, oracle-admins at desy.de Subject: [xymon-patrol] Xymon [652105] oracle1:msgs CRITICAL (RED) [cfid:128] red System logs at Wed Feb 8 10:16:28 CET 2012 &red Critical entries in <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> &red Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) &red Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or &red Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it. <pre> </pre> <pre> </pre> Full log <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it. SECOND ALERT : Date: Wed, 8 Feb 2012 10:46:45 +0100 (CET) From: Xymon user <xymon-patrol at desy.de> To: xymon-patrol at desy.de, oracle-admins at desy.de Subject: [xymon-patrol] Xymon [652105] oracle1:msgs CRITICAL (RED) [cfid:128] red System logs at Wed Feb 8 10:46:32 CET 2012 &red Critical entries in <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> &red Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) &red Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use &red Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or &red Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it. <pre> </pre> <pre> </pre> Full log <a href="/xymon-cgi/svcstatus.sh?CLIENT=oracle1&SECTION=msgs:/var/log/messages">/var/log/messages</a> Feb 8 10:14:25 oracle1 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team Feb 8 10:14:25 oracle1 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) Feb 8 10:14:25 oracle1 kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use Feb 8 10:14:25 oracle1 kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or Feb 8 10:14:25 oracle1 kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it.

1 1

debbuging DOWNTIME
by sjcarr＠gmail.com 29 Feb '12

29 Feb '12

The format for DOWNTIME is the following: DOWNTIME=day:starttime:endtime[,day:starttime:endtime] DOWNTIME=columns:day:starttime:endtime:cause[,columns:day:starttime:endtime:cause]So search for lines which don't match those formats. The error would seem to suggest that instead of one of the attributes it got the word maintenance so you could search for "=maintenance" or ":maintenance" to see where the value is. If you have dynamically generated your config file from a CMDB then the template you have used for the line has gone wrong somewhere, I'd suggest debugging that code to find out why it has corrupted an entry. Steve On 28 February 2012 19:06, Gore, David W (David) <david.gore at verizon.com>wrote: > Either hosts.cfg or alerts.cfg or both. Config file names may be > different depending on your version of Xymon. > > ~David > > Ps. Try grepping for 'downtime', grep -i downtime > > -----Original Message----- > From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf > Of Olivier AUDRY > Sent: Tuesday, February 28, 2012 09:26 > To: xymon at xymon.com > Subject: [Xymon] debbuging DOWNTIME > > hello > > how can I know witch host config line is wrong when I got this in the logs > ? > > Latest error messages: > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Invalid timespec - expected 4 digits, got: 'maintenance' > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > > thx for your help > > oau > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

1 0

No RRD file created
by sholmes42＠mac.com 28 Feb '12

28 Feb '12

Running Xymon 4.2.3. I've followed the instructions for creating a custom graph and double checked everything several times. I've looked in the archives and, while there are a few threads there on this, I was not able to find anything helpful. I have a script that is successfully doing a test on several hosts and displays a page with output like: Thu Feb 9 11:42:26 EST 2012 Percent of cpu time in wait state is OK cpuwait : 0 The test column is 'wait'. I have in hobbitserver.cfg: TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tcp,dig=tcc p,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sendmail,mailq,nmaii lq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,files,procs=proo cesses,ports,clock,lines,myconns=ncv,temp=ncv,diskstat-reads=ncv,diskstat-writess =ncv,diskstat-kreads=ncv,diskstat-kwrites=ncv,diskstat-wait=ncv,diskstat-actv=ncc v,diskstat-svct=ncv,diskstat-wsvc=ncv,diskstat-pw=ncv,diskstat-pb=ncv,diskstat-rr rqm=ncv,diskstat-wrqm=ncv,diskstat-r=ncv,diskstat-w=ncv,diskstat-rsec=ncv,diskstt at-wsec=ncv,diskstat-avgrq-sz=ncv,diskstat-avgqu-sz=ncv,diskstat-await=ncv,diskss tat-svctm=ncv,diskstat-util=ncv,wait=ncv" NCV_wait="cpuwait:GAUGE" GRAPHS="la,disk,inode,qtree,files,processes,memory,users,vmstat,iostat,tcp.http,, tcp,ncv,netstat,ifstat,mrtg::1,ports,temperature,ntpstat,apache,bind,sendmail,maa ilq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,clock,lines,myconns,, temp,diskstat-reads::7,diskstat-writes::7,diskstat-kreads::7,diskstat-kwrites::77 ,diskstat-wait::7,diskstat-actv::7,diskstat-svct::7,diskstat-wsvc::7,diskstat-pww ::7,diskstat-pb::7,diskstat-rrqm::7,diskstat-wrqm::7,diskstat-r::7,diskstat-w::77 ,diskstat-rsec::7,diskstat-wsec::7,diskstat-avgrq-sz::7,diskstat-avgqu-sz::7,diss kstat-await::7,diskstat-svctm::7,diskstat-util::7,wait " And I've stopped and restarted Xymon multiple times. At this point the instructions say to make sure the wait.rrd file is being created. But it isn't. What am I missing? Thanks, Steve Holmes

2 3

debbuging DOWNTIME
by olivier＠audry.fr 28 Feb '12

28 Feb '12

hello how can I know witch host config line is wrong when I got this in the logs ? Latest error messages: Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Invalid timespec - expected 4 digits, got: 'maintenance' Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 Invalid timespec - expected 4 digits, got: 'maintenance' Bad timespec (missing colon or wrong weekdays): 0 Bad timespec (missing colon or wrong weekdays): 0 thx for your help oau

3 2

debbuging DOWNTIME
by olivier＠audry.fr 28 Feb '12

28 Feb '12

hello unfortunately xymoncfg | grep maintenance | wc -l 2401 and everything is in one file because the config come from our cmdb. oau ----- Mail original ----- De: "Paul Root" <Paul.Root at CenturyLink.com> À: "Olivier AUDRY" <olivier at audry.fr>, xymon at xymon.com Envoyé: Mardi 28 Février 2012 15:33:42 Objet: RE: [Xymon] debbuging DOWNTIME Well, I would start by finding out what config file you have the word 'maintenance' in. Paul Root - Senior Engineer Managed Services Systems - CenturyLink > -----Original Message----- > From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On > Behalf Of Olivier AUDRY > Sent: Tuesday, February 28, 2012 8:26 AM > To: xymon at xymon.com > Subject: [Xymon] debbuging DOWNTIME > > hello > > how can I know witch host config line is wrong when I got this in the > logs ? > > Latest error messages: > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Invalid timespec - expected 4 digits, got: 'maintenance' > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > Invalid timespec - expected 4 digits, got: 'maintenance' > Bad timespec (missing colon or wrong weekdays): 0 > Bad timespec (missing colon or wrong weekdays): 0 > > thx for your help > > oau > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

1 0

Ghost client problems
by paveltraian＠yahoo.com 28 Feb '12

28 Feb '12

Hi, I have installed a xymon client on a CentOS 6 x64 server. Everything looks good except the fact that even the Xymon server receives data and its' page is OK(the client is there diplayed with its' short name) i have the same client displayed in Ghost Clients(this time with its' FQDN). I have checked on the client and i have too many files in xymon/client/tmp folder. It looks something like this: -rw-rw-r-- 1 xymon xymon 41 Feb 22 13:17 logfetch.otpproxy1.cfg -rw-rw-r-- 1 xymon xymon 41 Feb 22 13:17 logfetch.otpproxy1.status -rw-r--r-- 1 root root 35787 Feb 22 13:17 msg.otpproxy1.temenosgroup.com.txt -rw-rw-r-- 1 xymon xymon 37183 Feb 22 13:17 msg.otpproxy1.txt -rw-rw-r-- 1 xymon xymon 246 Feb 22 13:17 xymon_vmstat.otpproxy1.2637 -rw-rw-r-- 1 xymon xymon 246 Feb 22 13:14 xymon_vmstat.otpproxy1.temenosgroup.com.2597 -rw-r--r-- 1 root root 246 Feb 22 13:17 xymon_vmstat.otpproxy1.temenosgroup.com.2681 It seems like the client is started al least twice.... How can I set it right? Regards, Traian.

5 20

Xymon SQL Server dbcheck error
by Venkatesh_S04＠infosys.com 28 Feb '12

28 Feb '12

I have been getting the following message when trying to monitor SQL Server Regards, Venky Mon Feb 27 16:40:15 2012 OpenClient message: LAYER = (0) ORIGIN = (0) SEVERITY = (78) NUMBER = (44) Server , database Message String: Server name not found in configuration files. OpenClient message: LAYER = (0) ORIGIN = (0) SEVERITY = (78) NUMBER = (45) Server , database Message String: Unknown host machine name. dbcheck.pl version 1.09 - column ChkConn lifetime 60, tested in ~ 00:00:10 (max 00:00:20) The following are the contents of the configurationfiles Hosts.cfg group Operating system 10.66.106.319 dossf_syb # bbd http://dossf_syb/ 10.66.106.91 infy-x08vcanbsp group SQL Server 10.66.106.91 SQLDB # noconn dbcheck NS:win-xp DBCheck.ini # Sql server definition using the default password defined in default section [SQLDB] dbtype = SQLServer hostname = SQLDB port = 1041 username = uid password = Kolaveri Ftds.conf # A typical Sybase server [SQLDB] host = 10.66.106.91 port = 1041 tds version = 7.0 **************** CAUTION - Disclaimer ***************** This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by e-mail and delete the original message. Further, you are not to copy, disclose, or distribute this e-mail or its contents to any other person and any such actions are unlawful. This e-mail may contain viruses. Infosys has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this e-mail. You should carry out your own virus checks before opening the e-mail or attachment. Infosys reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the Infosys e-mail system. ***INFOSYS******** End of Disclaimer ********INFOSYS***

2 4

xymondboard acklist data not available
by jawood＠employers.com 27 Feb '12

27 Feb '12

I've discovered what may be a bug in the xymondboard program. The difference between RHEL5 & RHEL6 is just the way I have my hosts.cfg. If the host is in the main hosts.cfg, I can use the below script to acknowledgment an alert. If I use an "include hosts/filename" in my hosts.cfg, I am unable to acknowledge the alert. Thanks, James From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of James Wood Sent: Wednesday, February 22, 2012 2:54 PM To: xymon at xymon.com Subject: [Xymon] xymondboard acklist data not available I'm having a problem getting acknowledged alerts on the critical view from Xymon. We're migrating from Solaris 10 and RHEL 5.7 to a single RHEL 6.2 server. All servers are running Xymon version 4.3.7 compiled and installed from source. I'm running into a problem with xymondboard. If I run this command on the Solaris server or the RHEL 6.2 server it doesn't return any acklist data, but it works on RHEL 5.7. ./bin/xymon localhost "xymondboard fields=hostname,testname,acklist host=HOSTNAME" RHEL5: localhost|conn|1329871681:1329958081:1:jawood:test\n RHEL6: localhost|conn| We use these results to populate the data for a custom view. I need to figure out what's different between the versions of Redhat. Thanks, James --------------------------------------------------------------------- ********************************************************************************************* Notice: This e-mail, including any attachment(s), is confidential and intended solely for the above named individual(s). It constitutes non-public information and may contain information subject to certain legal privileges. If you are the intended recipient, your use of any confidential or personal information may be restricted by federal and state privacy laws. Any use of this communication by others is strictly prohibited and may be unlawful. If you have received this e-mail in error, please notify me immediately by replying to sender and delete this e-mail and any attachment(s). Thank you. ********************************************************************************************* --------------------------------------------------------------------- --------------------------------------------------------------------- ********************************************************************************************* Notice: This e-mail, including any attachment(s), is confidential and intended solely for the above named individual(s). It constitutes non-public information and may contain information subject to certain legal privileges. If you are the intended recipient, your use of any confidential or personal information may be restricted by federal and state privacy laws. Any use of this communication by others is strictly prohibited and may be unlawful. If you have received this e-mail in error, please notify me immediately by replying to sender and delete this e-mail and any attachment(s). Thank you. ********************************************************************************************* ---------------------------------------------------------------------

1 0