March 2012 - Xymon - Xymon mailman web

Upgrading from 4.3.5 to 4.3.7 - need additional patches?
by Carl.Melgaard＠STAB.RM.DK 08 Mar '12

08 Mar '12

Hi, To get the most "patched" current version, should I get the stable 4.3.7 or the current trunk from SF? And is there any additional patches I need apply? Regards, Carl Melgaard

2 2

Using '.default.' in hosts.cfg
by john.horne＠plymouth.ac.uk 08 Mar '12

08 Mar '12

Hello, Using Xymon 4.3.7 I want to add a '.default.' entry to my hosts.cfg file, but am unsure of its syntax. The man page for hosts.cfg says '...you can define a host name ".default." and put...'. so does that mean: .default. noclear or 127.0.0.1 .default. noclear What do I enter as the IP address, or can it be anything or can it be left out completely? The man page is not clear on this, so perhaps a full example would help? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

2 2

troubleshooting missing alert
by indymichaelb＠gmail.com 08 Mar '12

08 Mar '12

Had an event last night that caused a test to go red for 20 minutes, but no email was sent. All other events before and after sent alerts as expected Verified via the info dot that xymon believes it should alert for this event. There is nothing in the maillog for this event, it appears xymon did not send anything. Where else can I look to troubleshoot? In case you want to see for yourself from bb-hosts {code} page SLA SLA Checks 0.0.0.0 <url redacted> # noconn cont;https://<url redacted>/;experience {code} from hobbit-alerts.cfg (will have to trust me that there are no matching exceptions above this entry in the file) {code} PAGE=SLA DURATION>1 IGNORE SERVICE=sslcert MAIL <address redacted> RECOVERED REPEAT=365d COLOR=yellow,purple MAIL <address redacted> RECOVERED REPEAT=30m COLOR=red {code} from the info dot {code} Alerting:ServiceRecipient1st DelayStop afterRepeatTime of DayColorscontent<address redacted>(R)1m-52w 1d-purple,yellow<address redacted> (R)1m-30m-red {code}

3 3

No Webpages on RHEL5
by cchinta＠zetainteractive.com 08 Mar '12

08 Mar '12

Hi, I have installed Xymon 4.3.7 successfully on RHEL5. I can see that the processes are up and running...However, webpages do not generate. All I can see is the default directory structure when I visit http://MY_SERVER/xymon/ ------------ $ ps -aef |grep xymon xymon 6002 1 0 16:17 ? 00:00:00 /home/xymon/server/bin/xymonlaunch --config=/home/xymon/server/etc/tasks.cfg --env=/home/xymon/server/etc/xymonserver.cfg --log=/var/log/xymon/xymonlaunch.log --pidfile=/var/log/xymon/xymonlaunch.pid xymon 6003 6002 0 16:17 ? 00:00:00 xymond --pidfile=/var/log/xymon/xymond.pid --restart=/home/xymon/server/tmp/xymond.chk --checkpoint-file=/home/xymon/server/tmp/xymond.chk --checkpoint-interval=600 --log=/var/log/xymon/xymond.log --admin-senders=127.0.0.1 69.174.85.5 --store-clientlogs=!msgs xymon 6071 6002 0 16:17 ? 00:00:00 xymond_channel --channel=stachg --log=/var/log/xymon/history.log xymond_history --pidfile=/var/log/xymon/xymond_history.pid xymon 6072 6002 0 16:17 ? 00:00:00 xymond_channel --channel=page --log=/var/log/xymon/alert.log xymond_alert --checkpoint-file=/home/xymon/server/tmp/alert.chk --checkpoint-interval=600 xymon 6073 6002 0 16:17 ? 00:00:00 xymond_channel --channel=client --log=/var/log/xymon/clientdata.log xymond_client xymon 6074 6002 0 16:17 ? 00:00:00 xymond_channel --channel=status --log=/var/log/xymon/rrd-status.log xymond_rrd --rrddir=/home/xymon/data/rrd xymon 6075 6002 0 16:17 ? 00:00:00 xymond_channel --channel=data --log=/var/log/xymon/rrd-data.log xymond_rrd --rrddir=/home/xymon/data/rrd xymon 6076 6002 0 16:17 ? 00:00:00 xymond_channel --channel=clichg --log=/var/log/xymon/hostdata.log xymond_hostdata xymon 6081 6071 0 16:17 ? 00:00:00 xymond_history --pidfile=/var/log/xymon/xymond_history.pid xymon 6082 6074 0 16:17 ? 00:00:00 xymond_rrd --rrddir=/home/xymon/data/rrd xymon 6083 6002 0 16:17 ? 00:00:00 /bin/sh /home/xymon/client/bin/xymonclient.sh xymon 6090 6083 0 16:17 ? 00:00:00 /bin/sh /home/xymon/client/bin/xymonclient-linux.sh xymon 6164 6072 0 16:17 ? 00:00:00 xymond_alert --checkpoint-file=/home/xymon/server/tmp/alert.chk --checkpoint-interval=600 xymon 6166 6090 0 16:17 ? 00:00:00 sh -c vmstat 300 2 1>/home/xymon/client/tmp/xymon_vmstat.EQ-BL-TINKER.6090 2>&1; mv /home/xymon/client/tmp/xymon_vmstat.EQ-BL-TINKER.6090 /home/xymon/client/tmp/xymon_vmstat.EQ-BL-TINKER ------------ Tried restarting via xymon.sh .. but it did not work :-( Help! Regards, Chaitu

2 1

Client data?
by lebarber＠gmail.com 07 Mar '12

07 Mar '12

Resending to "xymon at xymon.com". That "reply" does not respond to the list is kind of broken. Thanks, Larry Barber On Wed, Mar 7, 2012 at 4:10 PM, Larry Barber <lebarber at gmail.com> wrote: > The "client data" is a copy of the information that the client sends the > Xymon server. Most of it will be displayed in the various client test > display pages for the host, so there is little point in trying to hide it. > Security by obscurity never works. Also, it can be very handy to have this > data available. > > Thanks, > Larry Barber > > > On Wed, Mar 7, 2012 at 2:36 PM, John Horne <john.horne at plymouth.ac.uk>wrote: > >> Hello, >> >> Using Xymon 4.3.7 I see that most (possibly all) of the services being >> monitored for a host contain a link in the web page saying 'Client data >> available'. >> >> By clicking on the link I can see that it shows some info about the >> host, but my question is why? What is this link for? >> >> As far as I can tell there is no way to disable the link from appearing. >> Is that correct? It may be that we would prefer not having the link >> present, so preventing users from seeing info about the host itself. >> >> >> >> Thanks, >> >> John. >> >> -- >> John Horne, Plymouth University, UK >> Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> > >

1 0

Client data?
by john.horne＠plymouth.ac.uk 07 Mar '12

07 Mar '12

On Wed, 2012-03-07 at 13:43 -0800, cleaver at terabithia.org wrote: > On Wed, March 7, 2012 12:36 pm, John Horne wrote: > > Hello, > > > > Using Xymon 4.3.7 I see that most (possibly all) of the services being > > monitored for a host contain a link in the web page saying 'Client data > > available'. > > > > By clicking on the link I can see that it shows some info about the > > host, but my question is why? What is this link for? > > > > As far as I can tell there is no way to disable the link from appearing. > > Is that correct? It may be that we would prefer not having the link > > present, so preventing users from seeing info about the host itself. > > > > It really shines when the [hostdata] task is enabled (by default), > Okay, not sure what this is but I'll take a look tomorrow (haven't looked at 'tasks' at all yet). > Need to see what process was running when disk use rose above 95%? You > can. > Ah, okay. Yes I can see that would be useful. > I don't think there's a specific way to prevent the client report link > from being visible, short of patching. > Yes, I can see that it only requires commenting out one line (in htmllog.c I think), but obviously would rather not unless required. I'll take a closer look tomorrow at the info displayed and see if maybe we're being a bit too paranoid? :-) Thanks, John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001

1 0

Client data?
by john.horne＠plymouth.ac.uk 07 Mar '12

07 Mar '12

Hello, Using Xymon 4.3.7 I see that most (possibly all) of the services being monitored for a host contain a link in the web page saying 'Client data available'. By clicking on the link I can see that it shows some info about the host, but my question is why? What is this link for? As far as I can tell there is no way to disable the link from appearing. Is that correct? It may be that we would prefer not having the link present, so preventing users from seeing info about the host itself. Thanks, John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001

2 1

Critical System Acknowledgement
by jawood＠employers.com 07 Mar '12

07 Mar '12

Has anyone gotten the critical systems acknowledge to work when the systems are on a subpage? 10.10.10.10 SERVER1 # noping ssh 10.10.10.11 SERVER2 # http://SERVER2/page.html page prd Production group-compress <H3><I>Production</I></H3> title <H2><I>Infrastructure</I></H2> subpage update Update Servers group-compress <H3><I>Production</I></H3> title <H2><I>Update Servers</I></H2> 10.10.10.12 yum01 # 10.10.10.13 yum02 # With this configuration, I can acknowledge anything on SERVER1 and SERVER2 but nothing yum01 and yum02 on the critical systems page. --------------------------------------------------------------------- ********************************************************************************************* Notice: This e-mail, including any attachment(s), is confidential and intended solely for the above named individual(s). It constitutes non-public information and may contain information subject to certain legal privileges. If you are the intended recipient, your use of any confidential or personal information may be restricted by federal and state privacy laws. Any use of this communication by others is strictly prohibited and may be unlawful. If you have received this e-mail in error, please notify me immediately by replying to sender and delete this e-mail and any attachment(s). Thank you. ********************************************************************************************* ---------------------------------------------------------------------

1 1

DNS test - test of server or resolution?
by john.horne＠plymouth.ac.uk 07 Mar '12

07 Mar '12

Hello, I have just started to look at Xymon (4.3.7), and currently have the server monitoring itself. I'm a bit confused with the DNS test. What is it trying to test: 1) that the local host has a running name server (e.g. bind, unbind etc)? 2) that the local server can perform DNS resolution using any name server? 3) that the local host has a running name server and that it can perform resolution using it? As far as I can tell the answer is '3'. I have no name server on the local host (hence getting a red icon), but do have DNS resolution. Is there a way to configure the DNS test to just check on resolution, and leave the 'procs' test to check if 'named' is running or not? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

2 1

files external wth server side processing?
by SKreien＠la-z-boy.com 06 Mar '12

06 Mar '12

David, The only difference I could find after a few hours of trying different things is that your "dir:" entry is lower case. Apparently BBWin will only accept that line if it is lower case, when I tried that with mine it started working. Also I noticed a typo in a few other lines in my analysis.cfg that were causing errors, so thank for sending your config. That helped immensely. Scot Kreienkamp skreien at la-z-boy.com From: David Baldwin [mailto:david.baldwin at ausport.gov.au] Sent: Monday, March 05, 2012 6:08 PM To: Scot Kreienkamp Cc: xymon at xymon.com Subject: Re: [Xymon] files external wth server side processing? Scot, Hey everyone… Since the BBWin client does not do files checking, But it does... Following works for me: client-local.cfg [win32] dir:C:\Windows\Temp log:c:\WINDOWS\WindowsUpdate.log:20480 clients.cfg CLASS=win32 DIR C:\Windows\Temp yellow SIZE<200000 TRACK=C-Windows-Temp DIR C:\Windows\Temp red SIZE<500000 LOAD 90 97 # Load thresholds are in % PORT LOCAL=%(\*|::|0.0.0.0):135 STATE=%LISTEN "TEXT=epmap listener" PORT LOCAL=%.*:135 STATE=ESTABLISHED MIN=0 TRACK=epmap "TEXT=epmap connection" PORT REMOTE=%[.:]389 STATE=%ESTABLISHED MIN=0 TRACK=LDAPc "TEXT=LDAP client connection" PORT LOCAL=%(\*|::|0.0.0.0):445$ STATE=%LISTEN "TEXT=NTDS listener" PORT LOCAL=%.*:445$ MIN=0 STATE=%ESTABLISHED TRACK=NTDS "TEXT=NTDS connection" PORT LOCAL=%(\*|::|0.0.0.0):3389 STATE=%LISTEN "TEXT=RDP listener" PORT LOCAL=%[.:]3389 STATE=%ESTABLISHED MIN=0 TRACK=RDP "TEXT=RDP connection" PROC System 1 -1 SVC "%[Ee]ventlog" startup=automatic status=started SVC "Schedule" startup=%.* status=started COLOR=yellow SVC "SNMP" startup=automatic status=started SVC "%(?i)Winmgmt" startup=%.* status=started COLOR=yellow SVC "W32Time" startup=%.* status=started LOG "%.*WindowsUpdate.log" "%FATAL" COLOR=red LOG "%.*WindowsUpdate.log" "%WARNING" COLOR=yellow IGNORE="%Cached cookie has expired or new PID is available" if I make an external that submits files and directory information the same as the client would, would the Xymon server process it server side? Or would I need to do a full client side check? It would be nice to be able to have BBWin run a script that included extra sections in the client report. You can kind of get away with having alternating multiple client reports with different info, preferably mutually exclusive sections - the client channel listener converts various sections into status reports - if a section is missing then it just doesn't generate any update. The "Client data" link will be a bit random depending on what is the most recently received report. David. IE, I send in a message like so: client TEST01.bbwin win32 [dir:D:\test] 14888 D:\test Will that be processed in the server side channels? I'm trying to avoid doing a full client side check so I can make this as generic as possible for use with BBWin in central mode. Thanks! Scot Kreienkamp skreien at la-z-boy.com<mailto:skreien at la-z-boy.com> -- David Baldwin - Senior Systems Administrator (Datacentres + Networks) Information and Communication Technology Services Australian Sports Commission http://ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au<mailto:david.baldwin at ausport.gov.au> Leverrier Street Bruce ACT 2617 ________________________________ Keep up to date with what's happening in Australian sport visit www.ausport.gov.au<http://www.ausport.gov.au> This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender. ________________________________ This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

1 0