November 2013 - Xymon - Xymon mailman web

Step missing to get XymonPSClient working?
by JasonRP＠techheads.com 12 Nov '13

12 Nov '13

Hi there, I used to run big brother, like 12 – 15 years ago, and now I’m trying to setup Xymon. I’ve got the server side working (at least for pings, telnet checks, etc.), but I can’t seem to get XymonPSClient to work. I’ve downloaded the files from SF, installed the service and it’s running, but it doesn’t seem to be sending any data to my Xymon server. I can verify connectivity with XymonSend from the Windows host, but I don’t see any client logs, nor do I see any added checks on the web page. Am I supposed to create a local config file on the Windows host? Or do I add something to hosts.cfg on the server? The README file wasn’t super explanatory and I can’t seem to find any other instructions. Do these exist and I just missed them? Thanks, Jason --- Jason Richards Pagh

2 3

not receiving alerts
by kspringer＠innovateteam.com 12 Nov '13

12 Nov '13

I've attached a screen shot of the 'info' page of the host that's red. Strangely enough the notifications.log file suddenly has some data in it now that I stripped some options out of the alerts.cfg file. Here's some of the notifications.log data. I X'd out the IP that was showing. Sat Nov 9 11:50:47 2013 VM-Firewall.ssh (x.x.x.x) support at innovateteam.com[2] 1384026647 722 Sat Nov 9 12:12:48 2013 VM-Firewall.ssh (x.x.x.x) support at innovateteam.com[2] 1384027968 722 Sat Nov 9 12:20:57 2013 VM-Firewall.ssh (x.x.x.x) support at innovateteam.com[2] 1384028457 722 Sat Nov 9 12:35:59 2013 VM-Firewall.ssh (x.x.x.x) support at innovateteam.com[2] 1384029359 722 Sat Nov 9 14:31:55 2013 VM-Firewall.ssh (x.x.x.x) support at innovateteam.com[2] 1384036315 722 Thank you. ------------------------------------------------ *Kris Springer* *=======================* On Sat, Nov 9, 2013 at 1:02 PM, Henrik Størner <henrik at hswn.dk> wrote: > On 09-11-2013 19:49, Kris Springer wrote: > >> Here's my new alerts.cfg file. It didn't change anything though. I'm >> still not receiving alerts. To force a trouble situation I've got a >> line in my hosts file that's checking for ssh on a machine that has it >> turned off so it will cause a red alert. >> >> HOST=* >> MAIL support at innovateteam.com <mailto:support at innovateteam.com> >> COLOR=red RECOVERED NOTICE >> > > First, check the "info" status column for that host: The alert must be > shown there, or your configuration is not being picked up. > > Second, check the notifications.log logfile to see if the alerts are being > sent. If they are, then you need to look into the mail logs. > > Third, try running xymond_alert with the "--test HOSTNAME SERVICE" option > to see what rules get picked up; see the man-page. > > > Regards, > Henrik > >

4 13

Do you guys know Scrutinizer?
by maik＠vegasystems.com 11 Nov '13

11 Nov '13

Hi, we recently found Scrutinizer <http://www.plixer.com/Scrutinizer-Netflow-Sflow/scrutinizer-flow-analyzer.h…>and wondering if same features would be possible with Xymon, too. Maybe someone has experience with using it? Thanks Maik

2 1

Changing bbd hostname in hosts.cfg
by kspringer＠innovateteam.com 11 Nov '13

11 Nov '13

When I change the default hostname of the BBDISPLAY server in my hosts.cfg it no longer shows the cpu, disk, uptime, etc stuff on the webpage. I don't want to use the default hostname because it's a long string created by AWS. What do I need to modify in the configs to make the system stuff show back up on the webpage? Thank you. ------------------------------------------------ *Kris Springer* *=======================*

2 1

Win32 Svcs bug in Xymon
by malcolm.hunter＠gmx.com 10 Nov '13

10 Nov '13

Henrik, I think we've identified a bug in Xymon SVCS. It's not reporting the correct status when a service should be in stopped state. Please see the previous thread regarding this. It's not a bbwin issue as it only affects clients running central mode. Thanks Malcolm Sent with AquaMail for Android http://www.aqua-mail.com

1 0

not receiving alerts
by kspringer＠innovateteam.com 09 Nov '13

09 Nov '13

Here's my new alerts.cfg file. It didn't change anything though. I'm still not receiving alerts. To force a trouble situation I've got a line in my hosts file that's checking for ssh on a machine that has it turned off so it will cause a red alert. HOST=* MAIL support at innovateteam.com COLOR=red RECOVERED NOTICE Thank you. ------------------------------------------------ *Kris Springer* *=======================* On Sat, Nov 9, 2013 at 6:26 AM, Carl Inglis <Carl.Inglis at rakon.com> wrote: > Try having the HOST entry on one line, and the other entries on another > line: > > > > HOST=* > > MAIL support at innovateteam.com RECOVERED NOTICE > > > > (I don’t know if your color keyword is valid with the commas) > > > > The documentation says that the first line is the host line, the other > lines are one per recipient. So you could have: > > > > HOST=* > > MAIL first-line-support at example.com COLOR=yellow > DURATION>10m NOTICE RECOVERED > > MAIL second-line-support at example.com COLOR=yellow > DURATION>1h NOTICE RECOVERED > > MAIL support-manager at example.com COLOR=yellow DURATION>5h > NOTICE RECOVERED > > MAIL second-line-support at example.com COLOR=red NOTICE > RECOVERED > > MAIL support-manager at example.com COLOR=red DURATION>120m > NOTICE RECOVERED > > > > Hope that helps. > > > Carl > > > > *From:* Kris Springer [mailto:kspringer at innovateteam.com] > *Sent:* 09 November 2013 08:54 > *To:* Carl Inglis > *Cc:* xymon at xymon.com > *Subject:* Re: [Xymon] not receiving alerts > > > > Here's my alerts.cfg > > > > HOST=* > > COLOR=red,yellow > > MAIL support at innovateteam.com > > RECOVERED > > NOTICE > > > Thank you. > > ------------------------------------------------ > > *Kris Springer* > > *=======================* > > >

1 0

not receiving alerts
by kspringer＠innovateteam.com 09 Nov '13

09 Nov '13

Ok, my new alerts.cfg HOST=* MAIL support at innovateteam.com COLOR=red RECOVERED NOTICE Still no good. Any other ideas? Thank you. ------------------------------------------------ *Kris Springer* *=======================* On Sat, Nov 9, 2013 at 6:26 AM, Carl Inglis <Carl.Inglis at rakon.com> wrote: > Try having the HOST entry on one line, and the other entries on another > line: > > > > HOST=* > > MAIL support at innovateteam.com RECOVERED NOTICE > > > > (I don’t know if your color keyword is valid with the commas) > > > > The documentation says that the first line is the host line, the other > lines are one per recipient. So you could have: > > > > HOST=* > > MAIL first-line-support at example.com COLOR=yellow > DURATION>10m NOTICE RECOVERED > > MAIL second-line-support at example.com COLOR=yellow > DURATION>1h NOTICE RECOVERED > > MAIL support-manager at example.com COLOR=yellow DURATION>5h > NOTICE RECOVERED > > MAIL second-line-support at example.com COLOR=red NOTICE > RECOVERED > > MAIL support-manager at example.com COLOR=red DURATION>120m > NOTICE RECOVERED > > > > Hope that helps. > > > Carl > > > > *From:* Kris Springer [mailto:kspringer at innovateteam.com] > *Sent:* 09 November 2013 08:54 > *To:* Carl Inglis > *Cc:* xymon at xymon.com > *Subject:* Re: [Xymon] not receiving alerts > > > > Here's my alerts.cfg > > > > HOST=* > > COLOR=red,yellow > > MAIL support at innovateteam.com > > RECOVERED > > NOTICE > > > Thank you. > > ------------------------------------------------ > > *Kris Springer* > > *=======================* > > > > > > On Fri, Nov 8, 2013 at 11:32 PM, Carl Inglis <Carl.Inglis at rakon.com> > wrote: > > Have you tried sending email as the xymon user rather than as root? > > > > *From:* Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Kris > Springer > *Sent:* 09 November 2013 07:30 > *To:* Japheth Cleaver > *Cc:* xymon at xymon.com > *Subject:* Re: [Xymon] not receiving alerts > > > > Thanks for the ideas. But the notifications.log is completely empty. The > MAIL lines in xymonserver.cfg match what you suggested. The permissions > issue was worth looking into. When I send a test message I'm always sudo > root. I've made the xymon user part of the 'root' group, but that didn't > help any. I noticed there's a 'mail' group. I thought maybe adding the > xymon user to the 'mail' group may have affected something, but it didn't > either. Any more ideas? > > > Thank you. > > ------------------------------------------------ > > *Kris Springer* > > *=======================* > > > > > > On Fri, Nov 8, 2013 at 5:26 PM, Japheth Cleaver <cleaver at terabithia.org> > wrote: > > You should see something in in /var/log/xymon/notifications.log whenever > xymond_alert thinks it's sending (e.g.) an email off: > > > Fri Nov 8 14:16:33 2013 monitor.example.net.procs (192.168.2.5) > cleaver at terabithia.org[170] 1383948993 300 > > > If you see that, then your config logic is probably OK. Double check your > 'mail' lines in xymonserver.cfg: > > > MAILC="mail" # Command used to send an e-mail with no subject > MAIL="$MAILC -s" # Command used to send an e-mail with a subject > > > If you can send an email by hand, and those binaries are in normal spots, > perhaps there's a permissions problem? Weird PATH issues? SELinux? > > > HTH, > -jc > > > > On Fri, November 8, 2013 3:14 pm, Kris Springer wrote: > > I'm still trying to find a solution to this. I haven't been able to > focus > > on this for a while. My alerts are still not sending out. I assumed > that > > maybe Amazon AWS was blocking them for some reason, but I filled out all > > the forms and supposedly have no blocking going on. The logs on Xymon > > don't show me anything that jump out as the problem. I am able to send > > test messages using sendmail from the command line with not trouble at > all > > to email addresses hosted at Google and Godaddy. I've checked spam and > > junk folders but the alerts just aren't getting there. HELP! Any > > suggestion will be attempted, but please don't just make general > > suggestions like "check the logs" without specifying what exactly I'm > > supposed to be checking. > > > > Thank you. > > ------------------------------------------------ > > *Kris Springer* > > > > > > > > On Sat, Oct 19, 2013 at 3:46 PM, Root, Paul T > > <Paul.Root at centurylink.com>wrote: > > > >> Use: /usr/lib64/xymon/server/bin/xymond_alert --test $* --duration=500 > >> |grep -v Failed > >> To test what alerts do. > >> > >> Look at ~xymon/server/logs/notifications.log (or where ever you have it. > >> I > >> have /var/log/xymon) to see what it actually did. > >> > >> > > > Carl Inglis > * Systems Administrator* > > *Rakon UK Limited* > Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom > Tel: +44 1522 812630 | Fax: +44 1522 812664 | Mob: +44 7786 552915 > Carl.Inglis at rakon.com | www.rakon.com > > > [image: The Queens Awards for Enterprise 2012] > > > [image: Rakon Logo] > > > This message together with any attachments contains confidential > information and may be > subject to privilege. If you are not the intended recipient you may not > distribute it in any > way, you must notify the sender immediately and delete any copies of the > message along > with its attachments. > > > *Rakon UK Ltd is a limited company registered in England and Wales. * > > > > > > > > > * Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS Company > Registration Number: 5128090. Please be aware that Rakon UK Limited may > monitor email traffic data including the date, time, subject line, sender > and recipients for the purposes of security and usage monitoring. Automated > monitoring systems may also be applied to ascertain whether > incoming/outgoing emails are likely to contain viruses, other destructive > devices or inappropriate content. * > > > Carl Inglis > * Systems Administrator* > > *Rakon UK Limited* > Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom > Tel: +44 1522 812630 | Fax: +44 1522 812664 | Mob: +44 7786 552915 > Carl.Inglis at rakon.com | www.rakon.com > > [image: Rakon Logo] > -----Original Message----- > >> From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Mike Burger > >> Sent: Saturday, October 19, 2013 11:26 AM > >> To: Kris Springer > >> Cc: xymon at xymon.com > >> Subject: Re: [Xymon] not receiving alerts > >> > >> You mentioned looking at logs...the Xymon logs, or /var/log/maillog? > >> > >> I'm curious as to what the maillog shows for the events/times in > >> question. > >> -- > >> Mike Burger > >> http://www.bubbanfriends.org > >> > >> "It's always suicide-mission this, save-the-planet that. No one ever > >> just > >> stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > >> > >> > >> > I'm not receiving alerts on red and yellow's. I set up my server a > >> > while ago and received many alerts during setup and even after. But > >> > about a week ago I stopped receiving the emails. They're not going to > >> > spam, and I am able to send emails via command line from the Xymon > >> > server with no trouble. > >> > I've looked in the logs and am not seeing anything. Xymon is running > >> > on an Ubuntu v13 box hosted on AWS. Ideas? > >> > > >> > Thank you. > >> > ------------------------------------------------ > >> > *Kris Springer* > >> > > >> > * > >> > * > >> > _______________________________________________ > >> > Xymon mailing list > >> > Xymon at xymon.com > >> > http://lists.xymon.com/mailman/listinfo/xymon > >> > > >> > >> _______________________________________________ > >> Xymon mailing list > >> Xymon at xymon.com > >> http://lists.xymon.com/mailman/listinfo/xymon > >> > > _______________________________________________ > > Xymon mailing list > > Xymon at xymon.com > > http://lists.xymon.com/mailman/listinfo/xymon > > > > > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > >

1 0

not receiving alerts
by kspringer＠innovateteam.com 09 Nov '13

09 Nov '13

I'm still trying to find a solution to this. I haven't been able to focus on this for a while. My alerts are still not sending out. I assumed that maybe Amazon AWS was blocking them for some reason, but I filled out all the forms and supposedly have no blocking going on. The logs on Xymon don't show me anything that jump out as the problem. I am able to send test messages using sendmail from the command line with not trouble at all to email addresses hosted at Google and Godaddy. I've checked spam and junk folders but the alerts just aren't getting there. HELP! Any suggestion will be attempted, but please don't just make general suggestions like "check the logs" without specifying what exactly I'm supposed to be checking. Thank you. ------------------------------------------------ *Kris Springer* On Sat, Oct 19, 2013 at 3:46 PM, Root, Paul T <Paul.Root at centurylink.com>wrote: > Use: /usr/lib64/xymon/server/bin/xymond_alert --test $* --duration=500 > |grep -v Failed > To test what alerts do. > > Look at ~xymon/server/logs/notifications.log (or where ever you have it. I > have /var/log/xymon) to see what it actually did. > > -----Original Message----- > From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Mike Burger > Sent: Saturday, October 19, 2013 11:26 AM > To: Kris Springer > Cc: xymon at xymon.com > Subject: Re: [Xymon] not receiving alerts > > You mentioned looking at logs...the Xymon logs, or /var/log/maillog? > > I'm curious as to what the maillog shows for the events/times in question. > -- > Mike Burger > http://www.bubbanfriends.org > > "It's always suicide-mission this, save-the-planet that. No one ever just > stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > > > > I'm not receiving alerts on red and yellow's. I set up my server a > > while ago and received many alerts during setup and even after. But > > about a week ago I stopped receiving the emails. They're not going to > > spam, and I am able to send emails via command line from the Xymon > > server with no trouble. > > I've looked in the logs and am not seeing anything. Xymon is running > > on an Ubuntu v13 box hosted on AWS. Ideas? > > > > Thank you. > > ------------------------------------------------ > > *Kris Springer* > > > > * > > * > > _______________________________________________ > > Xymon mailing list > > Xymon at xymon.com > > http://lists.xymon.com/mailman/listinfo/xymon > > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

3 5

questions on MAGMA
by Paul.Root＠CenturyLink.com 08 Nov '13

08 Nov '13

So I got around to magma on my devel server yesterday. I guess I missed a step. It overwrote my hosts.cfg and analysis.cfg files. Is there a way to read in what I already have? Paul Root - Senior Engineer Managed Services Systems - CenturyLink

2 1

Xymon NetApp.pl Fails to load CPU Data
by jamison＠newasterisk.com 08 Nov '13

08 Nov '13

I've been running netapp.pl for the last couple of months, but all of the sudden I've had nothing but trouble with the CPU test. At first, it was failing to retrieve CPU data and turning yellow with no real explanation that I could find for why it was failing. Now, I've added the data tag to the bbcpucolumn in netapp.ini and it's staying purple. This would make sense if it was actually failing to return the data, however, it appears that it is in fact retrieving it correctly. I get these two log entries when I grep for cpu: Wed Nov 6 11:05:06 2013:DEBUG: TEST=cpu, TYPE=data, EVENT=cpu, SENDTYPE=2, TESTLIVE=Server Default, SUMREPTIME=0 Wed Nov 6 11:05:06 2013:DEBUG: BBDISPLAY: $XYMONSERVER, hostname: $FILERNAME, type: data, event: cpu, time: 00:00:01, color=green Now, to my untrained eyes it appears that it's trying to send a green status to Xymon, which is further backed up by having no holes in my RRD graph. I would really appreciate any suggestions for how to proceed as I am at a loss. Jamison Maxwell jamison at newasterisk.com<mailto:jamison at newasterisk.com>

2 4