June 2012 - Xymon - Xymon mailman web

xymond_alert --test
by daniel.beruben＠adsdata.ca 28 Jun '12

28 Jun '12

Hello list, I have the new version Xymon Version 4.3.7, I have a strange error … i'm not able to send the mail alert … I found no information about this error ! ( code 5 ) #./xymond_alert --test w10 disk 2012-06-27 16:34:58 Whoops ! Failed to send message (Connection failed) 2012-06-27 16:34:58 -> Could not connect to Xymon daemon at 10.10.3.153:1984 (Connection refused) 2012-06-27 16:34:58 -> Recipient '10.10.3.153', timeout 15 2012-06-27 16:34:58 -> 1st line: 'config hosts.cfg' 2012-06-27 16:34:58 Cannot load hosts.cfg from xymond, code 5 2012-06-27 16:34:58 Failed to load from xymond, reverting to file-load 00012367 2012-06-27 16:34:58 send_alert w10:disk state Paging 00012367 2012-06-27 16:34:58 Matching host:service:dgroup:page 'w10:disk:NONE:Unix/UNIX_ADSDATA' against rule line 119 00012367 2012-06-27 16:34:58 Failed 'HOST=dc0 SERVICE=cpu,disk' (hostname not in include list) 00012367 2012-06-27 16:34:58 Matching host:service:dgroup:page 'w10:disk:NONE:Unix/UNIX_ADSDATA' against rule line 122 00012367 2012-06-27 16:34:58 *** Match with 'HOST=w10 SERVICE=cpu,disk' *** 00012367 2012-06-27 16:34:58 Matching host:service:dgroup:page 'w10.adsdata.ca:disk:NONE:Unix/UNIX_ADSDATA' against rule line 122 00012367 2012-06-27 16:34:58 *** Match with 'HOST=w10 SERVICE=cpu,disk' *** 00012367 2012-06-27 16:34:58 Mail alert with command '/var/mail/root "Xymon [12345] w10:disk CRITICAL (RED)" monitoring at adsdata.ca' If a tried manually it's working ! echo ' test' | mail -s "Xymon [12345] w10:cpu CRITICAL (RED)" monitoring at adsdata.ca There is my hosts.cfg ------ 10.10.3.81 monitoring # bbd http://monitoring/ # / Hypervision Page title Production include /usr/local/xymon/server/etc/os/unix/unix

2 2

Triggering on total memory?
by mark+xymon＠carnildo.com 28 Jun '12

28 Jun '12

One of my servers has a quirk where it will occasionally fail to detect two-thirds of its RAM on startup. Is it possible to set things up to send an alert if *total* RAM is below a certain amount? -- Mark Wagner

3 2

Include user ID in PROC search string
by Martin.Ward＠colt.net 28 Jun '12

28 Jun '12

Hi all, I have been trying to persuade Xymon to search for a process and alert on its non-existence, a simple task using the analysis.cfg file like so: HOST=host1 PROC "amd64/java" 1 1 red Whilst this has worked previously the developers have now introduced a dependency that the process should only be run by a specific user (i.e. not root). I thought I could get away with: PROC "%javauser.*amd64/java" 1 1 red in the expectation that Xymon is testing against the whole of the output from ps(1) and in this case would only match Java processes run by the javauser user, but sadly this is not the case, I cannot persuade Xymon to match against the process name AND the user who is running it. Am I missing something/doing something wrong or is this the way Xymon works? |\/| -- [Description: Colt @ 20 email sig]<http://youtu.be/jmmcILTf88I> Martin Ward Manager, Technical Services Service Operations DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net<http://www.colt.net/> Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK. Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt

4 3

xymond core dumping, not restarting correctly
by sean.clark＠twcable.com 28 Jun '12

28 Jun '12

I've had xymond core dump on me twice now since updating to 4.3.7 It's dumping with: #3 0x080632b3 in sigsegv_handler (signum=11) at sig.c:57 #4 <signal handler called> #5 0x006a46f9 in strcasecmp () from /lib/libc.so.6 #6 0x08067215 in binsearch (mytree=0x9509038, key=0x322e3432 <Address 0x322e3432 out of bounds>) at tree.c:47 #7 0x080673e8 in xtreeDelete (treehandle=0x9509038, key=0x322e3432 <Address 0x322e3432 out of bounds>) at tree.c:253 #8 0x0804c652 in clear_cookie (log=0x233ced58) at xymond.c:1163 #9 0x0804c704 in find_cookie (cookie=0xbfc30c02 "546260") at xymond.c:1183 And #3 0x080632b3 in sigsegv_handler (signum=11) at sig.c:57 #4 <signal handler called> #5 0x006a46f9 in strcasecmp () from /lib/libc.so.6 #6 0x08067215 in binsearch (mytree=0x8773038, key=0x10 <Address 0x10 out of bounds>) at tree.c:47 #7 0x080673e8 in xtreeDelete (treehandle=0x8773038, key=0x10 <Address 0x10 out of bounds>) at tree.c:253 #8 0x0804c652 in clear_cookie (log=0x1ca5cbe8) at xymond.c:1163 #9 0x0804c704 in find_cookie (cookie=0xbf905e72 "97097") at xymond.c:1183 I've tried it on two machines, to rule out any weird hardware/RAM issues, and it still happens – and when it crashes, a stale xymond stays, preventing it from auto restarting and binding to port 1984, making me have to go in, kill everything, remove the .chk file (as it has that out of bounds status message still in the chk file) Makes for an irritating time – they were different host/test combinations causing the crash Any ideas on what to do next? Is it just something like max_msg that is causing an Out of Bounds crash? -- Sean Clark Sr. Engineer, Software ATG Network Operations & Planning Integrated Regional OSS<http://www.twcable.com/DepartmentOverview/AdvancedTechnologyGroup/ATG/NOP/O…> sean.clark at twcable.com <mailto:sean.clark at twcable.com> devaudio<aim://devaudio> <mailto:sean.clark at twcable.com> Cell: (315) 415-2816 ________________________________ This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.

2 3

upgrade to new server
by poppy.ben＠marshfieldclinic.org 28 Jun '12

28 Jun '12

I see that upgrade steps are pretty well documented for moving from BB to xymon, and even upgrading from hobbit 4.2 to 4.3x on the same server. I am looking at upgrading both my server and my install of xymon to a new server (this is for my remaining monitoring server in another network location). So I wanted to be sure I am reading this correctly. I am moving from Centos 5 to Centos 6. Moving from Hobbit 4.2 to Xymon 4.3.7 (plus dnstimeout.patch). I will copy manually the bb-hosts contents to hosts.cfg. The rest of the configs are pretty standard default installation stuff, and I will modify as needed those config files. What I'm most concerned with is the historical data. I see that the build/upgrade430.sh script basically renames files, but nothing to do with stuff in data/hist, data/histlogs, and rrd files. Am I going to be ok with simply rsyncing those files over to the new server? Is there anything else I should be thinking about before making this move? Thanks, -Ben ______________________________________________________________________ The contents of this message may contain private, protected and/or privileged information. If you received this message in error, you should destroy the e-mail message and any attachments or copies, and you are prohibited from retaining, distributing, disclosing or using any information contained within. Please contact the sender and advise of the erroneous delivery by return e-mail or telephone. Thank you for your cooperation.

5 10

Critical Systems view.
by Neil.Simmonds＠express-gifts.co.uk 27 Jun '12

27 Jun '12

We're looking at starting to use the critical systems view instead of the all non-green view for our operators. Ideally we'd like to just see Red and Purple on the critical systems page but I can't see any way to do this. I'm currently developing an external script that will check for purples using "xymon xymonserver "xymondboard" | grep purple" and report them to a column called "purple" on the Xymon server. This will allow us to use the Red Only option on the critical systems view and still have some visibility of purples, however if I could set the critical systems page to show both it would be much better. Has anyone done this or have any idea how to do it. Regards, Neil Simmonds Operation Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

1 0

[Bbwin-help] Custom reporting columns with BBWin--possible?
by malcolm.hunter＠gmx.com 27 Jun '12

27 Jun '12

Hi Alex, ----- Original Message ----- From: Alex Hoffer Sent: 06/27/12 01:41 AM To: bbwin-help at lists.sourceforge.net Subject: [Bbwin-help] Custom reporting columns with BBWin--possible? Hi, Does anyone know if it is possible in BBWin to report results under other columns, rather than just the default pre-programmed ones--and if it is possible, how to do it? For example, I have a set of msgs rules in my BBWin config file that look for specific event IDs appearing in the event viewer. Currently, whenever any of these events occurs, I get a red status in the msgs column on the Xymon server. I want to break these down in the reporting display so that I have separate columns for each of the event IDs, rather than just having the results for all of them lumped under the single msgs test. I myself am a total BBWin/Xymon newbie, but I have talked with the Xymon experts in our org and they say this is easy to do with the Unix Xymon client but aren't sure whether BBWin can support this. You need to write a custom script to interrogate the event logs then use the externals agent to send the results to the server. The msgs column will still display all event log messages (unless you add ignore rules). For an example of using externals, have a look at the fsmon.vbs script. Malcolm -- BBWin Development - The Windows client for Big Brother and Xymon http://bbwin.sourceforge.net http://xymon.sourceforge.net

1 0

Reports
by Steve.Newton＠PHH.com 26 Jun '12

26 Jun '12

Hello, Wondering if I could get a little help? I'm trying to obtain data for a report (cpu, memory, and disk weekly averages). Has anyone written a script for this? Thanks Steve Newton ________________________________ Please consider the environment before printing this email NOTICE: This communication and any attachments may contain non-public, confidential and/or proprietary information for disclosure to and use by the intended recipient only. If you have received this communication in error, please delete or destroy it and all copies and attachments immediately, and notify the sender. If you are not the intended recipient, be advised that any review, distribution or printing of this communication is prohibited. An error in transmission is not intended to waive confidentiality or privilege. We reserve the right, to the extent permitted under applicable law, to monitor electronic communications.

1 0

Weather map with Xymon & Devmon
by KK1051＠att.com 26 Jun '12

26 Jun '12

I am working on adding weather map to my Xymon server. Anyone want to share their notes and configs? I tried to go to the link that Buchan had but the link is not working. Kevin H. King Implementations Senior-Advanced Technical Support, AT&T Network Operations AT&T 404-444-0410 "You can not please everyone everyday, But everyday please everyone you can" -me

1 0

Xymon and BBWin: issue with special german characters in MS Windows service names
by christian.becker＠rhein-zeitung.net 26 Jun '12

26 Jun '12

Hi Torsten, thank you for your information. I think, since my Windows servers are running the BBWin client in local mode, the “mechanism” doesn’t use the analsys.cfg (?). Regards Christian CHRISTIAN BECKER System Engineer CSC August-Horch-Strasse 28, 56070 Koblenz, Germany Global Outsourcing Services Central Region | cbecker4 at csc.com | www.csc.com Von: bb4 at richter-it.net [mailto:bb4 at richter-it.net] Gesendet: Dienstag, 26. Juni 2012 11:45 An: Becker Christian Betreff: Re: [Xymon] Xymon and BBWin: issue with special german characters in MS Windows service names Hi Christian, I had a similar problem monitoring ports on a Windows server with german Windows. There I had to escape the special characters since a netstat did not show "LISTEN" but "ABHÖREN". Unfortunately I do not remember what exactly I did but in my analysis.cfg there is now something like this: LOCAL=%[.:]135$ STATE=ABH<99>REN .... So it looks I replaced the 'Ö' with hex 99. I think it was something like unicode but I am not sure. Sorry that I could not be more helpful but I hope I pushed you a little bit in the right direction. Regards Torsten Becker Christian <christian.becker at rhein-zeitung.net> hat am 26. Juni 2012 um 09:55 geschrieben: Hello all, I have a Xymon server running Xymon 4.3.7 on RHEL 6.1. This setup is working fine. Then I have a couple of Windows servers running BBWin 01.2 in local mode with update feature enabled. This is also running fine. During the deeper configuration phase I recognized that I have an issue with the special german characters. I found this when I wanted to include services from one of our MS Exchange servers: we have servers running a german MS Windows Server 2008 R2 Enterprise SP1, together with a german MS Exchange 2010. One of the services is the “MSExchangeMailSubmission”, but this is “just” the service name. I think in Xymon (or better: in BBWin) one has to include the display name of the service one wants to monitor (?). The thing is, that the display name of this specific service is “Microsoft Exchange-Mailübergabe”. That’s it. The special german character “ü” screws up the setup in that way, that this particular service won’t get displayed in my setup. That’s not only a problem with our Exchange servers, but for my understanding it is a problem in the “playing together” between the Xymon and the BBWin setup, or better: it is a problem with the german MS Windows setup. To troubleshoot this thing I changed the locale of my Xymon server from “en_US.utf8” to “LANG=de_DE.UTF-8”, and after that to “LANG=de_DE.iso885915 at euro”, but without any success. I could monitor these specific services as processes, but this is not what I want. Do I need to change something else in my setup. i.e. in my webserver? Any help would be appreciated… Christian CHRISTIAN BECKER System Engineer CSC August-Horch-Strasse 28, 56070 Koblenz, Germany Global Outsourcing Services Central Region | cbecker4 at csc.com | www.csc.com ________________________________ CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Deutschland Services GmbH • Registered Office: Abraham-Lincoln-Park 1, 65189 Wiesbaden, Germany • Board of Directors: Gerhard Fercho (Chairman),Thomas Nebe, Peter Schmidt • Registered in Germany: HRB 7574, Wiesbaden ________________________________ CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Deutschland Services GmbH • Registered Office: Abraham-Lincoln-Park 1, 65189 Wiesbaden, Germany • Board of Directors: Gerhard Fercho (Chairman),Thomas Nebe, Peter Schmidt • Registered in Germany: HRB 7574, Wiesbaden

1 0