April 2012 - Xymon - Xymon mailman web

local mode client
by gendalia＠iastate.edu 02 Feb '15

02 Feb '15

One of my co-workers has installed xymon 4.3.7, and wants to use local mode for configuration. The display server is not receiving anything from his machine if things run normally, but when run by hand, xymon can send data from his server (Solaris) to the display server. I enabled xymond_client --debug in xymonclient.sh: if test "$LOCALMODE" = "yes"; then echo "@@" >> $MSGTMPFILE $XYMONHOME/bin/xymond_client --debug --local --config=$XYMONHOME/etc/localclient .cfg <$MSGTMPFILE And now I'm getting this: + ../bin/xymond_client --debug --local --config=../etc/localclient.cfg 11655 2012-02-14 16:20:29 Want msg 1, startpos 0, fillpos 0, endpos -1, usedbytes=0, bufleft=528383 11655 2012-02-14 16:20:29 Got 161874 bytes 11655 2012-02-14 16:20:29 ../bin/xymond_client: Got message 1 @client#1|0|127.0.0.1|neptune.lib.iastate.edu|sunos 11655 2012-02-14 16:20:29 startpos 161874, fillpos 161874, endpos -1 11655 2012-02-14 16:20:29 Opening file ../etc/localclient.cfg 11655 2012-02-14 16:20:29 Compiling regex ^/zones.*/ 11655 2012-02-14 16:20:29 Client report from host neptune.lib.iastate.edu 11655 2012-02-14 16:20:29 neptune.lib.iastate.edu: Duplicate client message at time 0, seq 1, lastseq 0 11655 2012-02-14 16:20:29 Want msg 2, startpos 161874, fillpos 161874, endpos -1, usedbytes=0, bufleft=366509 11655 2012-02-14 16:20:29 get_xymond_message: Returning NULL due to EOF + rm -f ../tmp/msg.neptune.lib.iastate.edu.txt I'm not sure where to go from here. Does local mode still work for most people? -Tracy

2 2

The Big Brother / Xymon summit
by henrik＠hswn.dk 25 Sep '14

25 Sep '14

Hi, Sean McGuire - the inventor of Big Brother - and myself managed to get together at "Sparkys Roadside Barbecue" in Miami last month. We had a very nice evening discussing Big Brother, Xymon, the foibles of our various corporate overlords, and generally covering a wide range of topics. In other words, I had a great evening - and I think Sean did too. Thanks to the Xymon users who donated "beer money" for the event, although Sean insisted to save those for another occasion. So if you've ever wondered what Sean or myself really look like, here's a couple of photos. It's Sean in the "barbecue-colored" shirt (his words, not mine). Regards, Henrik

7 9

canceling acknowledgements
by lebarber＠gmail.com 12 Mar '14

12 Mar '14

Is there some way to cancel an 'ack' after it has been issued? Thanks, Larry Barber

4 5

how integrate xymonpdf into new xymon-menue
by martin.flemming＠desy.de 14 Jul '13

14 Jul '13

Hi ! I need an hint how to integrate the xymonpdf http://www.trantor.org/xymonton/doku.php/reports:xymonpdf or other entries into the new xymon-menue .. ... > * Edit '$BBHOME/server/www/menu/menu_items.js' and add two lines in > 'Reports' section like those ones (I put my scripts into $BBHOME/server/www/pdf) : > > ['Analysis PDF', '/xymon/pdf/analysis.php'], > ['Reports PDF', '/xymon/pdf/pdf.php'] didn't work ... because the menue_items.js is missing :-) i've added an entry in xymonmenu.cfg <a class="inner" href="$BBSERVERWWWURL/pdf/pdf.php">PDF Report</a> but without success :-( thanks & cheers Martin

5 9

Problem with NOTICE rule in alerts.cfg
by waa-hobbitml＠revpol.com 24 May '13

24 May '13

I noticed that the xymon_alerts docs show there is a NOTICE keyword which is described as: NOTICE Rule matches if the message is a "notify" message. This type of message is sent when a host or test is disabled or enabled. I wanted to be alerted via a custom SMS script of any test as soon as it is enabled or disabled. So in the alerts.cfg file I had initially set up a line that I thought would trigger whenever a test was enabled or disabled like so: HOST=* SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS NOTICE As I was testing enabling and disabling, it appeared that I had gotten the syntax correct and I was off to the next thing. However, when a normal test went yellow, I received two SMS alerts for it. My logs shows that the CFID environment variable was showing that my new alert listed above was triggering the SMS as well as the PAGE=%firewalls/* alert that was supposed to trigger it. I then tried NOTICE SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS as well as NOTICE=* SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS and finally HOST=* NOTICE SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS But it seems that ANY status change including normal green, yellow, red, purple triggers this alert as well as any other correctly matching alert. I did some additional testing with all three above configurations using: xymond_alert --test fw.example.com testname And each of them showed (in order): *** Match with 'HOST=*' *** *** Match with 'SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS NOTICE' *** *** Match with 'NOTICE' *** *** Match with 'SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS' *** *** Match with 'NOTICE=*' *** *** Match with 'SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS' *** *** Match with 'HOST=* NOTICE' *** *** Match with 'SCRIPT $xymon-sms-alert $waaphone TIME=$smsalerthours FORMAT=SMS' *** Would love to get this working correctly and appreciate any help! -- Bill Arlofski Reverse Polarity, LLC http://www.revpol.com/

2 2

xymon e-mail alerts show up as attachments instead of e-mail
by icepickjazz＠gmail.com 29 Mar '13

29 Mar '13

Not a wild thought. Yes you are correct. I was getting ready to post my findings. We recently moved our xymon server from fedora core 3 to SLES 11. Fedora used mail and SLES 11 mail is linked to mailx. The windows clients are sending carriage returns in the status ^M (carriage return). The problem occured on SuSe server but not on redhat server, because mailx expects input text to be in Unix format, with lines separated by *newline*(^J, \n) characters only. Non-Unix text files that use *carriage return* (^M, \r) characters in addition will be treated as binary data. Hence the reason we get notifications that show up as attachments. Also explains why AIX servers don't have the problem and the windows servers do. Thanks On Mon, Sep 19, 2011 at 9:36 PM, Scott Pfister <icepickjazz at gmail.com>wrote: > Not a wild thought. Yes you are correct. I was getting ready to post my > findings. We recently moved our xymon server from fedora core 3 to SLES > 11. Fedora used mail and SLES 11 mail is linked to mailx. The windows > clients are sending carriage returns in the status ^M (carriage return). > The problem occured on SuSe server but not on redhat server, because mailx > expects input text to be in Unix format, with lines separated by *newline*(^J, \n) characters only. Non-Unix text files that use > *carriage return* (^M, \r) characters in addition will be treated as > binary data. Hence the reason we get notifications that show up as > attachments. Also explains why AIX servers don't have the problem and the > windows servers do. > > Thanks > > > On Mon, Sep 19, 2011 at 8:08 PM, Ralph Mitchell <ralphmitchell at gmail.com>wrote: > >> Wild thought - could the Windows reports be turned into attachments in >> your email server and/or client because the line-ends are <cr><lf> instead >> of just <lf> ?? >> >> Ralph Mitchell >> >> >> On Mon, Sep 19, 2011 at 6:06 PM, Scott Pfister <icepickjazz at gmail.com>wrote: >> >>> Good day, >>> >>> We are running xymon 4.2.3 and are experiencing some particularities with >>> e-mail alerts showing up as attachments like att00001.bin instead of the >>> normal message. The problem is sporadic. For example windows server throws >>> CPU alter. E-mail sent shows up as an attachment in the recipient e-mail. >>> AIX servers throw cpu alerts don't experience this problem. Client >>> shouldn't matter. Any tips for troubleshooting this issue? If we open the >>> attachment in the editor it shows what should be in the body of the email. >>> Hobbit server is running postfix. >>> >>> red Mon Sep 19 15:07:50 EDT 2011 [indyctx8.companyname.com] up: 10:12, 1 >>> users, 224 procs, load=100%, PhysicalMem: 3072MB(74%) >>> >>> >>> >>> Memory Statistics >>> Total Physical memory: 3220598784 bytes (3.00GB) >>> Available Physical memory: 850558976 bytes (812.00MB) >>> Total PageFile size: 4294967295 bytes (4.00GB) >>> Available PageFile size: 4294967295 bytes (4.00GB) >>> Total Virtual memory size: 2147352576 bytes (2.00GB) >>> Available Virtual memory size: 2106589184 bytes (1.96GB) >>> >>> Most active processes >>> 96.23% oexplore (0x26a4 [9892]) >>> 00.60% svchost (0xbf0 [3056]) >>> 00.32% lsass (0x23c [572]) >>> 00.26% oexplore (0x29c8 [10696]) >>> 00.25% oexplore (0x255c [9564]) >>> 00.21% Smc (0x3c4 [964]) >>> 00.20% SmcGui (0x3230 [12848]) >>> 00.19% oexplore (0x20dc [8412]) >>> 00.16% oexplore (0x14d0 [5328]) >>> 00.13% XTE (0xfc4 [4036]) >>> >>> See >>> http://hobbit.companyname.docm/hobbit-cgi/bb-hostsvc.sh?HOST=indyctx8&SERVI… >>> >>> >>> thanks, >>> >>> Scott >>> >>> >>> >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >>> >>> >> >

3 2

ISO documentation on flapping status?
by betsy.schwartz＠gmail.com 05 Feb '13

05 Feb '13

We've got a bunch of servers showing as "flapping". I understand that this is a new feature but haven't found the docs on how to tweak it. Where and how can this be changed? thanks Betsy

3 3

holiday as planned downtime
by Jurgen.Claessens＠cegeka.be 11 Dec '12

11 Dec '12

Hey all, I'm running xymon 4.3.7 and I have been trying to find a way so that the holidays are being showed as what would be the same for the alerting. For me this would mean that if it's a holiday they would show as planned downtime and not show up in the allnongreen window. The alerting itself works without problems, but I cannot find a way for the planned downtime act the same way. Can anyone point me in the right direction? This e-mail and all files transmitted as attachment(s) thereto are confidential and solely intended for the individual to whom or the organization to which they are addressed. If you received this e-mail by mistake, please notify Cegeka's Service Desk at cegeka.support at cegeka.be or call +32 (0)11 240 363. We thank you in advance. Cegeka hereby confirms that this message has been swept by Sophos for the presence of viruses.

2 3

diskstat.sh/RRD oddity
by sholmes42＠mac.com 18 Oct '12

18 Oct '12

This is just a comment on an oddity with respect to diskstat.sh and RRD. We make pretty heavy use of the diskstat.sh script, which I believe I downloaded from xymonton. When I installed it I used the standard clientlaunch.cfg stanza for the configuration and everything worked great. I was called to task today because we have been having some disk io issues on the RHEL VMs and someone was looking at the trend graphs for some servers to see if there was anything they could learn and they noticed that beginning at about 4pm local time on Monday the graphs for the number of sectors written per second on a couple of file systems on several VMs jumped from the 10 to 20 range to the 300 to 340 range and stayed there. The graph for number of disk writes per second had a corresponding jump up to about 40 or 50 from close to zero. In analyzing the data I discovered that the file system that was displaying this behavior is the same file system to which the diskstat.sh script is writing its temp files. It appears that for some reason, starting at 4pm on Monday the 5 minute test interval and the 5 minute average for RRD got in sync and all it was seeing was the data point that corresponded to its own writing activity and RRD was using it for the entire 5 minute average (of course, that's what RRD does). I 'fixed' it by changing the test interval to something less than 5 minutes. I tried 2, 3, and 4 minutes and they all had the effect of reducing the data in the plot back to the expected level, i.e. to the level it was before 4pm on Monday. The mystery remains why it suddenly started seeing and using its own disk activity at the same time on several different servers. Steve Holmes ITaP/Purdue University -- If they give you ruled paper, write the other way. -Juan Ramon Jimenez, poet, Nobel Prize in literature (1881-1958) I prayed for freedom for twenty years, but received no answer until I prayed with my legs. -Frederick Douglass, Former slave, abolitionist, editor, and orator (1817-1895)

5 10

Event History
by kconnell＠ryerson.ca 04 Oct '12

04 Oct '12

I built a new Xymon server this week with v4.3.7 and all looks good. Can I copy event history from my current Xymon/Hobbit v4.2.2 server to the new ? I did try copying files/directories over from /xymon/data/<hist>&<histlogs>, but that didn't seem to work... Ken Connell Intermediate Network Engineer Computer & Communication Services Ryerson University 350 Victoria St RM AB50 Toronto, Ont M5B 2K3 416-979-5000 x6709

3 2