June 2012 - Xymon - Xymon mailman web

Any alternatives to devmon?
by Paul.Root＠CenturyLink.com 09 Jul '12

09 Jul '12

Does anyone have an alternative to devmon? It's really old, doesn't seem to be being developed and the parsing of exemptions is flaky at best. Paul Root - Engineer III Managed Services Systems - CenturyLink This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

3 3

BBWin or XymonPSClient
by colin.coe＠gmail.com 05 Jul '12

05 Jul '12

Hi all Should I be using BBWin or the PowerShell client on my Windows nodes (mix of Windows XP, 7, 2008R2)? Thanks CC -- RHCE#805007969328369

4 4

iostat monitoring? script available?
by tsztur＠gmail.com 02 Jul '12

02 Jul '12

Does xymon have built in iostat monitoring? I can't seem to find any up to date information online on implementing iostat monitoring for clients. If I need to use a script, are there instructions on how to set this up for iostat specifically? tia!

2 1

SSH test checks too often for a device
by jlaidman＠rebel-it.com.au 28 Jun '12

28 Jun '12

Hiya I have a few devices on which I do an ssh check. These devices have some sort of self-defence mechanism and they throttle connecting to the sshd process if they get failed connections (with no login) at too high a rate. Unfortunately, twice every 5 minutes (I have two Xymon servers) is sometimes a bit too often, and once they start to fail, I'm guessing that xymonnet-again.sh starts to hammer them every minute. The devices are appliances such that I cannot configure this behaviour. I know there's a funky NET:location hack that can be used to adjust the frequency of the net tests for nominated hosts, but I see no way to limit the effect to only the ssh test, and so all tests will be slowed down. Can anyone think of a better way to do this than the NET:location hack? I only want to slow down the ssh tests. Cheers Jeremy

2 3

hobbit/xymon clients
by sflanagan＠xand.com 28 Jun '12

28 Jun '12

I have both xymon and hobbit clients and I would like to upgrade the clients all to the same version of xymon. the ultimate goal is to upgrade to xymon from hobbit. Because I have a mix of clients I need to know what is running where. Is there a way that I can tell what hosts are running what version of client short of logging onto each host and looking? Perhaps a report? I know that there is a ghost client report. Is there a utility that I am missing that will give me this information? I have been searching and cannot find a way of doing this from the hobbit server itself. Thanks, Flan

3 3

xymond_alert --test
by daniel.beruben＠adsdata.ca 28 Jun '12

28 Jun '12

Hello list, I have the new version Xymon Version 4.3.7, I have a strange error … i'm not able to send the mail alert … I found no information about this error ! ( code 5 ) #./xymond_alert --test w10 disk 2012-06-27 16:34:58 Whoops ! Failed to send message (Connection failed) 2012-06-27 16:34:58 -> Could not connect to Xymon daemon at 10.10.3.153:1984 (Connection refused) 2012-06-27 16:34:58 -> Recipient '10.10.3.153', timeout 15 2012-06-27 16:34:58 -> 1st line: 'config hosts.cfg' 2012-06-27 16:34:58 Cannot load hosts.cfg from xymond, code 5 2012-06-27 16:34:58 Failed to load from xymond, reverting to file-load 00012367 2012-06-27 16:34:58 send_alert w10:disk state Paging 00012367 2012-06-27 16:34:58 Matching host:service:dgroup:page 'w10:disk:NONE:Unix/UNIX_ADSDATA' against rule line 119 00012367 2012-06-27 16:34:58 Failed 'HOST=dc0 SERVICE=cpu,disk' (hostname not in include list) 00012367 2012-06-27 16:34:58 Matching host:service:dgroup:page 'w10:disk:NONE:Unix/UNIX_ADSDATA' against rule line 122 00012367 2012-06-27 16:34:58 *** Match with 'HOST=w10 SERVICE=cpu,disk' *** 00012367 2012-06-27 16:34:58 Matching host:service:dgroup:page 'w10.adsdata.ca:disk:NONE:Unix/UNIX_ADSDATA' against rule line 122 00012367 2012-06-27 16:34:58 *** Match with 'HOST=w10 SERVICE=cpu,disk' *** 00012367 2012-06-27 16:34:58 Mail alert with command '/var/mail/root "Xymon [12345] w10:disk CRITICAL (RED)" monitoring at adsdata.ca' If a tried manually it's working ! echo ' test' | mail -s "Xymon [12345] w10:cpu CRITICAL (RED)" monitoring at adsdata.ca There is my hosts.cfg ------ 10.10.3.81 monitoring # bbd http://monitoring/ # / Hypervision Page title Production include /usr/local/xymon/server/etc/os/unix/unix

2 2

Triggering on total memory?
by mark+xymon＠carnildo.com 28 Jun '12

28 Jun '12

One of my servers has a quirk where it will occasionally fail to detect two-thirds of its RAM on startup. Is it possible to set things up to send an alert if *total* RAM is below a certain amount? -- Mark Wagner

3 2

Include user ID in PROC search string
by Martin.Ward＠colt.net 28 Jun '12

28 Jun '12

Hi all, I have been trying to persuade Xymon to search for a process and alert on its non-existence, a simple task using the analysis.cfg file like so: HOST=host1 PROC "amd64/java" 1 1 red Whilst this has worked previously the developers have now introduced a dependency that the process should only be run by a specific user (i.e. not root). I thought I could get away with: PROC "%javauser.*amd64/java" 1 1 red in the expectation that Xymon is testing against the whole of the output from ps(1) and in this case would only match Java processes run by the javauser user, but sadly this is not the case, I cannot persuade Xymon to match against the process name AND the user who is running it. Am I missing something/doing something wrong or is this the way Xymon works? |\/| -- [Description: Colt @ 20 email sig]<http://youtu.be/jmmcILTf88I> Martin Ward Manager, Technical Services Service Operations DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net<http://www.colt.net/> Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK. Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt

4 3

xymond core dumping, not restarting correctly
by sean.clark＠twcable.com 28 Jun '12

28 Jun '12

I've had xymond core dump on me twice now since updating to 4.3.7 It's dumping with: #3 0x080632b3 in sigsegv_handler (signum=11) at sig.c:57 #4 <signal handler called> #5 0x006a46f9 in strcasecmp () from /lib/libc.so.6 #6 0x08067215 in binsearch (mytree=0x9509038, key=0x322e3432 <Address 0x322e3432 out of bounds>) at tree.c:47 #7 0x080673e8 in xtreeDelete (treehandle=0x9509038, key=0x322e3432 <Address 0x322e3432 out of bounds>) at tree.c:253 #8 0x0804c652 in clear_cookie (log=0x233ced58) at xymond.c:1163 #9 0x0804c704 in find_cookie (cookie=0xbfc30c02 "546260") at xymond.c:1183 And #3 0x080632b3 in sigsegv_handler (signum=11) at sig.c:57 #4 <signal handler called> #5 0x006a46f9 in strcasecmp () from /lib/libc.so.6 #6 0x08067215 in binsearch (mytree=0x8773038, key=0x10 <Address 0x10 out of bounds>) at tree.c:47 #7 0x080673e8 in xtreeDelete (treehandle=0x8773038, key=0x10 <Address 0x10 out of bounds>) at tree.c:253 #8 0x0804c652 in clear_cookie (log=0x1ca5cbe8) at xymond.c:1163 #9 0x0804c704 in find_cookie (cookie=0xbf905e72 "97097") at xymond.c:1183 I've tried it on two machines, to rule out any weird hardware/RAM issues, and it still happens – and when it crashes, a stale xymond stays, preventing it from auto restarting and binding to port 1984, making me have to go in, kill everything, remove the .chk file (as it has that out of bounds status message still in the chk file) Makes for an irritating time – they were different host/test combinations causing the crash Any ideas on what to do next? Is it just something like max_msg that is causing an Out of Bounds crash? -- Sean Clark Sr. Engineer, Software ATG Network Operations & Planning Integrated Regional OSS<http://www.twcable.com/DepartmentOverview/AdvancedTechnologyGroup/ATG/NOP/O…> sean.clark at twcable.com <mailto:sean.clark at twcable.com> devaudio<aim://devaudio> <mailto:sean.clark at twcable.com> Cell: (315) 415-2816 ________________________________ This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.

2 3

Critical Systems view.
by Neil.Simmonds＠express-gifts.co.uk 27 Jun '12

27 Jun '12

We're looking at starting to use the critical systems view instead of the all non-green view for our operators. Ideally we'd like to just see Red and Purple on the critical systems page but I can't see any way to do this. I'm currently developing an external script that will check for purples using "xymon xymonserver "xymondboard" | grep purple" and report them to a column called "purple" on the Xymon server. This will allow us to use the Red Only option on the critical systems view and still have some visibility of purples, however if I could set the critical systems page to show both it would be much better. Has anyone done this or have any idea how to do it. Regards, Neil Simmonds Operation Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

1 0