January 2013 - Xymon - Xymon mailman web

henrik.hswn.dk down?
by SKreien＠la-z-boy.com 14 Jan '13

14 Jan '13

Henrik, Is your server down? I haven't been able to get to http://henrik.hswn.dk at all for the last few hours. If anyone has a copy of the Oracle monitoring script setup that was at http://henrik.hswn.dk/xymon-oracle.html I would appreciate if you could send a copy to me privately. Thanks! Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Incorporated 1284 N. Telegraph Rd. | Monroe, MI 48162 | scot.kreienkamp at la-z-boy.com<mailto:scot.kreienkamp at la-z-boy.com> | www.la-z-boy.com<http://www.la-z-boy.com/> This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

4 5

APT Check from Hobbit-Plugins Package - Purple Status
by denicoloj＠gmail.com 14 Jan '13

14 Jan '13

Xymon Users & Admins, I recently installed an apt check on my clients that I received from this hobbit-plugins package: https://code.launchpad.net/ubuntu/+source/hobbit-plugins Steps for Installation: 1. Copy over client-ext/apt script to client/ext/apt 2. Gave xymon user rights to execute the apt script 3. Copy over perl/Hobbit.pm to /etc/perl/Hobbit.pm 4. Copy and pasted the lines found in clientlaunch.d/apt.cfg to the end of client/etc/clientlaunch.cfg and modified the paths(ENVFILE & LOGFILE) to fit my client's environment The problem: I set this up last week on friday jan 11th. At that time I ran the client/ext/apt script as xymon user and it gave the report as expected. However, after the weekend the last report was the same one on the 11th so I am receiving a purple status for inactivity of the report. The clients are not automatically sending the apt check report to the server. Anything I missed in the installation or something I have to do server side? Any response appreciated Thanks, * * *Joseph De Nicolo* *Secure Database Administrator * *Center for Complex Network Research <http://www.barabasilab.com>* *Northeastern University*

2 6

syntax for analysis/alerts
by Ejones＠egov.com 14 Jan '13

14 Jan '13

No, but I copied an example that was in analysis.cfg for cdrom that had that syntax. From: sholmes42 at gmail.com [mailto:sholmes42 at gmail.com] On Behalf Of Steve Holmes Sent: Monday, January 14, 2013 9:37 AM To: Jones, Elizabeth Cc: Xymon at xymon.com Subject: Re: [Xymon] syntax for analysis/alerts There are slashes in your server names? Steve On Mon, Jan 14, 2013 at 10:19 AM, Jones, Elizabeth <Ejones at egov.com<mailto:Ejones at egov.com>> wrote: I'm trying to get alerts working for a group of servers that have *soldb* in the server name but I can't seem to figure out the right syntax. Can anyone give me a hand with a *whatever* syntax? What I have at the moment is LOAD 70 100 HOST=%^/soldb*/ , and it isn't working. ---------- Elizabeth Jones Unix Administrator - NIC, Inc. 25501 West Valley Parkway, Suite 300, Olathe, KS 66061 email: ejones at egov.com<mailto:ejones at egov.com> _______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon -- If they give you ruled paper, write the other way. -Juan Ramon Jimenez, poet, Nobel Prize in literature (1881-1958) I prayed for freedom for twenty years, but received no answer until I prayed with my legs. -Frederick Douglass, Former slave, abolitionist, editor, and orator (1817-1895)

3 2

Acknowledgement Issues
by novosirj＠umdnj.edu 12 Jan '13

12 Jan '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Running Xymon 4.3.10 right now on Solaris. I got paged last night and acknowledged the page because I realized it was not that important (slowly growing FS'). So the relevant part of the alert is the following: red Fri Jan 11 22:26:14 EST 2013 - Filesystems NOT ok &yellow /u02 (97% used) has reached the WARNING level (97%) &red /u01 (98% used) has reached the PANIC level (98%) ...here is the relevant section of the alert report: Fri Jan 11 22:36:24 2013 snaefell.umdnj.edu disk novosirj-pager at localhost Fri Jan 11 22:26:30 2013 snaefell.umdnj.edu disk novosirj at umdnj.edu Fri Jan 11 21:36:08 2013 snaefell.umdnj.edu disk novosirj at umdnj.edu Fri Jan 11 21:21:04 2013 snaefell.umdnj.edu disk novosirj at umdnj.edu Fri Jan 11 20:10:46 2013 snaefell.umdnj.edu disk novosirj at umdnj.edu ...and here is the relevant section of the acknowledgement log: 1357953403 62385 9999 62385 np_filename_not_used snaefell.umdnj.edu.disk red ----- Original Message -----\nAcked by: "Novosielski, Ryan" novosirj at umdnj.edu 1357957369 329622 999 329622 np_filename_not_used snaefell.umdnj.edu.disk red ----- Original Message -----\nAcked by: "Novosielski, Ryan" novosirj at umdnj.edu 1357958334 560657 999 560657 np_filename_not_used snaefell.umdnj.edu.disk red ----- Original Message -----\nAcked by: "Novosielski, Ryan" novosirj at umdnj.edu I acknowledged at 20:16, 21:22, and 21:38. As you can see, the acknowledgement was for "999" which I'm pretty sure used to mean minutes. Any idea what's been happening here? - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDxmycACgkQmb+gadEcsb5thgCgrkfpZgLFhu+quXFjYGyTsKHM azkAn3ip4TmTtUSAApLj98DnDBaXc0g7 =MbZw -----END PGP SIGNATURE-----

1 1

What determines displayed columns?
by David.Mills＠ngc.com 11 Jan '13

11 Jan '13

All - Besides adding specific tags for services / tests in hosts.cfg, what determines which service columns appear on web page for a particular client? I.e. I have some clients in my environment which do not have any tags in hosts.cfg, but display several "tests". I see part of the puzzle: the client runs (in my case): ~/xymon/client_sunos-5.10/bin/xymonclient-sunos.sh, which generates the following columns of data date uname uptime who df mount prtconf memory swap swaplist ifconfig route netstat ports ifstat ps top I also see there's a file called ~/xymon/client/etc/clientlaunch.cfg, which is like the server-side "tasks.cfg" in concept / syntax. However, what determines which of these stanzas applies for which-host? Thanks! david ~~~~~~~~~~~~~~~~~~~ David Mills Systems Administrator Northrop Grumman 512-595-1238 david.mills at ngc.com<mailto:david.mills at ngc.com>

3 5

What are these old *.tmp.<pid> files?
by David.Mills＠ngc.com 11 Jan '13

11 Jan '13

All - Hi! In poking around in my client tmp directory, I see lots of files like this: -rw-r--r-- 1 hobbit monitor 10K Jun 6 2012 /home/hobbit/tmp/dwbu005.prtdiag.tmp.5719 -rw-r--r-- 1 hobbit monitor 5.3K Jun 6 2012 /home/hobbit/tmp/dwbu002.prtdiag.tmp.24625 -rw-r--r-- 1 hobbit monitor 5.3K Jun 6 2012 /home/hobbit/tmp/dwbu002.prtdiag.tmp.4496 -rw-r--r-- 1 hobbit monitor 10K Jun 6 2012 /home/hobbit/tmp/dwbu005.prtdiag.tmp.27931 -rw-r--r-- 1 hobbit monitor 5.3K Jun 4 2012 /home/hobbit/tmp/dwbu007.prtdiag.tmp.4316 -rw-r--r-- 1 hobbit monitor 5.3K Jun 1 2012 /home/hobbit/tmp/dwbu007.prtdiag.tmp.21618 -rw-r--r-- 1 hobbit monitor 10K May 31 2012 /home/hobbit/tmp/dwbu005.prtdiag.tmp.9044 I also see a sprinkling of files like this: -rw-r--r-- 1 hobbit monitor 951 Nov 13 15:47 /home/hobbit/tmp/dwbu001.iostat.vmstat.log.13964 -rw-r--r-- 1 hobbit monitor 34 Nov 13 15:47 /home/hobbit/tmp/dwbu002.sar.tmp -rw-r--r-- 1 hobbit monitor 34 Nov 13 15:47 /home/hobbit/tmp/dwbu001.sar.tmp -rw-r--r-- 1 hobbit monitor 0 Nov 13 15:47 /home/hobbit/tmp/dwbu001.iostat.vmstat.error.13964 -rw-r--r-- 1 hobbit monitor 0 Nov 13 15:47 /home/hobbit/tmp/dwbu001.iostat -rw-r--r-- 1 hobbit monitor 13 Nov 13 15:47 /home/hobbit/tmp/dwbu001.tm.tmp.dwbu001 -rw-r--r-- 1 hobbit monitor 13 Nov 13 15:46 /home/hobbit/tmp/dwbu002.tm.tmp.dwbu002 Obviously these are temporary client data files, but the question is why didn't they get removed? What mechanism does Xymon have for cleaning up these kinds of files? Thanks! david ~~~~~~~~~~~~~~~~~~~ David Mills Systems Administrator Northrop Grumman 512-595-1238 david.mills at ngc.com

3 3

[xymon]problems setting to 'derive'
by diffusion＠bulot-fr.com 11 Jan '13

11 Jan '13

Hello, I'm using 2 test using same data to compare the difference between gauge & derive (derive is the best choice, because data that is continuously increasing in value between 00:00 and 23:59 When graph using Gauge, values are correct : field03a: 5 field03b: 17 field03c: 14 field04a: 3 field04b: 12 field04c: 15 Total: 66 => same values in graph But when i switch to derive, values in graphs look like field03a: 6m field03b: 4m field03c: 5.8m field04a: 4m field04b: 2m field04c: 2m Total: 0 Maybe i'm understing correctly 'derive' or there another things goes wrong ? Graph Definition [LogMsg] TITLE Nb 'Erreurs Sérieuses' par svi YAXIS Qtt -l 0 DEF:field03a=LogMsg.rrd:field03a:AVERAGE DEF:field04a=LogMsg.rrd:field04a:AVERAGE DEF:field03b=LogMsg.rrd:field03b:AVERAGE DEF:field04b=LogMsg.rrd:field04b:AVERAGE DEF:field03c=LogMsg.rrd:field03c:AVERAGE DEF:field04c=LogMsg.rrd:field04c:AVERAGE DEF:Total=LogMsg.rrd:Total:AVERAGE LINE1:Total#1AEAEC:Total LINE2:field03a#18D859:svi03a LINE2:field04a#1D8A42:svi04a LINE2:field03b#D50038:svi03b LINE2:field04b#81112E:svi04b LINE2:field03c#182DD8:svi03c LINE2:field04c#171F63:svi04c\n GPRINT:Total:LAST: Stats de Total \: cur=%5.0lf GPRINT:Total:MIN: min=%5.0lf GPRINT:Total:MAX: max=%5.0lf GPRINT:Total:AVERAGE: moyenne=%5.0lf\n Ncv def : NCV_LogMsg="field03a:DERIVE,field03b:DERIVE,field03c:DERIVE,field04a:DERIVE,field04b:DERIVE,field04c:DERIVE,Total:DERIVE,*:NONE" Someone have an idea ?

3 2

experience with BMC Patrol
by lebarber＠gmail.com 11 Jan '13

11 Jan '13

My organization is trying to replace Xymon with BMC Patrol (I suspect its politics more than any dissatisfaction with Xymon). I don't have any experience with this product, but if it is like other BMC products that I'm familiar with calling it a piece of junk would be giving it too much credit. Does anybody here have any experience with this product. What are it's strong points? Weak points? Thanks, Larry Barber

4 3

xymon rename oldhost newhost not working
by tsztur＠gmail.com 10 Jan '13

10 Jan '13

So I am running this command: /home/xymon/server/bin/xymon 127.0.0.1 "rename prod-hostold prod-hostnew" I press enter and nothing comes up just the prompt. I check to see old rrd data, history data -- nothing. When checking history of a previous event I get "Historical status log not available" for the rrd graphs, I have to manually copy the files in data/rrd/<old host> to <new host> . there must be an easier way of doing this! tom.

2 1

Xymon with Bacula
by waa-hobbitml＠revpol.com 10 Jan '13

10 Jan '13

On 01/10/13 15:06, Joseph De Nicolo wrote: > the xymoncmd did the trick, I have to make sure that I don't have to do that > manually every time though. (bringing this response back to the list) Running it manually like that will run the script once. After (default) of 20 minutes that test will turn purple indicating that your Xymon server has not seen an update for that test in a while. If your bacula test turns purple, you will need to re-investigate your settings on the client. There should be a xymon_bacula_check.log log and a clientlaunch.log on the bacula server in ~xymon/client/logs Check to see if anything obvious shows up in those logs. -- Bill Arlofski Reverse Polarity, LLC

2 2