February 2013 - Xymon - Xymon mailman web

[Bug] Using NAME tag and trends
by olivier＠audry.fr 27 Feb '13

27 Feb '13

hello when we use NAME tag in hosts.cfg to override host name the show last in trends is not working because the forms takes the NAME tag and not the real hostname. oau

1 1

weird problem.
by Neil.Simmonds＠express-gifts.co.uk 27 Feb '13

27 Feb '13

Hi all, I've got a strange problem that I'm trying to diagnose and would appreciate any help you can give. We have 2 new servers that have recently been set up that are Aix servers running the hobbit client. We have 62 other Aix server with the same client running absolutely fine. The problem is that the client data is getting cut off mid stream. It's always in the ps output. I've checked the MAX settings and there all ok, in fact we have other clients that are sending data files larger than these that are working fine. I've checked the data on the client and it's complete but if I look in /xymon/data/hostdata on the server the data seems to be almost always getting truncated to 69518 bytes. Occasionally a full message (approx 93k) gets through. There are no messages regarding truncated data in the server logs and the only message I can find on the client is the following, 2013-02-26 08:41:21 Write error while sending message to bbd at xymonserver:1984 2013-02-26 08:41:21 Whoops ! bb failed to send message - write error I've googled this extensively and can't find anything that seems relevant to our problem. Regards, Neil Simmonds Senior Operations Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

4 3

Purple status in subpage not shown in main view?
by christian.becker＠rhein-zeitung.net 27 Feb '13

27 Feb '13

Hello out there, i do not know exactly whether there is a problem in our Xymon config or if our Xymon system has a failure. We have a main view that contains a page called "Windows". In this "Windows" view there is a subpage called "Exchange-Server". Now we had the situation that the BBWin has failed on a server that is placed in this view "Exchange-Server" which is a subpage of the "Windows" view from the main view. The problem was that the purple status was not shown on the main view, but when changing to the "Windows" view, we recognized the purple status of the subpage "Exchange-Server". At this time I cannot say if the purple status was shown in the nongreen view. But: shouldn't it have shown this purple status on the main view also? I think I can remember that I've seen a purple icon on the main view in the past, but I cannot remember if this has been in a "first level" sub-view from the main view or a "second level" sub-view (a subpage of a subpage...). Can anyone tell me what's wrong here - or did I understand something wrong? The affected server doesn't have a noprop-statement in the hosts.cfg. Our Xymon is 4.3.10 running on RHEL 6.1 64 Bit. Regards CHRISTIAN BECKER System Engineer CSC August-Horch-Strasse 28, 56070 Koblenz, Germany Global Outsourcing Services Central Region | www.csc.com ________________________________ CSC * This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose * CSC Deutschland Services GmbH * Registered Office: Abraham-Lincoln-Park 1, 65189 Wiesbaden, Germany * Board of Directors: Gerhard Fercho (Chairman),Thomas Nebe, Peter Schmidt * Registered in Germany: HRB 7574, Wiesbaden

2 1

Using status and data together for graphs
by everett.vernon＠gmail.com 26 Feb '13

26 Feb '13

Hi all I am trying to confirm something, which isn't clear in the documentation. (Or maybe it is, but I am just not seeing it) Status messages from a client to the server, generate a status page. We can also send data messages, which generate no pages, but can be used to fill graphs on the trends page. The information on the status page can also be used to create graphs, and the graphs will appear on the status page, and the trends (if defined correctly.) However, is it possible to combine both. I want to send a "status" message, for test FOO, with information on it, but no graph data. However, I do want to graph some information for FOO, but don't want the graph data to appear on the page alongside the status information. Can I send a data message for FOO, with graphing data, and have the graph appear on the FOO status page. If this is possible, how do we configure this? Regards Vernon -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

3 3

Testing Client-local.cfg
by Michael.Beatty＠sherwin.com 25 Feb '13

25 Feb '13

Has anyone come up with a good solution for testing entries made in client-local.cfg? I'm trying to debug an issue I'm having, and waiting 5-10 minutes between reports is taking much more time than I'd like. Is there something I can simply kick off to run the config and then someplace to look at the data?

2 1

Log AND
by Nick＠Pettefar.com 24 Feb '13

24 Feb '13

Is it possible to use an AND expression with the LOG keyword? We want to look for WORD1 AND WORD2 in a log file entry before sending out an alert. Something like WORD1&&Word2 or maybe WORD1*WORD2 or ...? Regards, Nick Pettefar

2 1

Client hostname on server
by novosirj＠umdnj.edu 22 Feb '13

22 Feb '13

Hi, I run 4.3.10 and the client name for my server has always been the same as the server name (xymon). This is not the hostname of the machine. The server machine is also listed elsewhere in hosts.cfg with just the network tests under its actual hostname. I've decided it would be better to have the client tests (cpu, disk, etc.) under the host's real name as well and keep the xymon stuff under the xymon name. Originally I had the actual hostname in hosts.cfg in a CLIENT: tag. I've since removed that next to the host name xymon and moved it to the real host name. However, even after a restart, nothing has changed -- all client tests are still kept up to date under hostname xymon. The client is launched by the server in tasks.cfg as per usual. Any idea why this is happening? Thanks.

3 5

Xymon 4.3.10 compile issue
by wes.neal＠verizon.com 22 Feb '13

22 Feb '13

Solaris 8 install here. Had a few other small things that I had to fix, but I can't figure this one out. Can anyone tell me what it is bombing on this? In file included from ares__close_sockets.c:17: ares_setup.h:185:1: warning: "AF_INET6" redefined In file included from ./ares_build.h:96, from ares_setup.h:83, from ares__close_sockets.c:17: /usr/include/sys/socket.h:184:1: warning: this is the location of the previous definition In file included from ares_private.h:108, from ares__close_sockets.c:25: ares_writev.h:27: error: redefinition of `struct iovec' make[3]: *** [ares__close_sockets.lo] Error 1 make[3]: Leaving directory `/export/home/bb/xymon-4.3.10/xymonnet/c-ares' make[2]: *** [all] Error 2 make[2]: Leaving directory `/export/home/bb/xymon-4.3.10/xymonnet/c-ares' make[1]: *** [c-ares/.libs/libcares.a] Error 2 make[1]: Leaving directory `/export/home/bb/xymon-4.3.10/xymonnet' make: *** [xymonnet-build] Error 2 Thanks Wes

3 3

Services false positive
by MatthewHarris＠air-watch.com 21 Feb '13

21 Feb '13

It doesn't look like the testip tag worked, these are windows hosts with the bbwin 0.13 agent on them. From: sholmes42 at gmail.com [mailto:sholmes42 at gmail.com] On Behalf Of Steve Holmes Sent: Thursday, February 21, 2013 9:56 AM To: Matthew Harris Cc: xymon at xymon.com Subject: Re: [Xymon] Services false positive On Thu, Feb 21, 2013 at 9:18 AM, MatthewHarris at air-watch.com<mailto:MatthewHarris at air-watch.com> <MatthewHarris at air-watch.com<mailto:MatthewHarris at air-watch.com>> wrote: Hey Everyone, I think I found a bug in xymon, I am monitoring a few hundred servers and I found that servers with similar names but different purposes are trying to report the same services. For instance, XXXXXXXXXXX486 and XXXXXXXXXXX487 is duplicating the service checks for XXXXXXXXXXX48. Is there any way that anyone knows of to get xymon to look at the entire machine name instead of just the first 12 characters of it? _______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon Are the servers in question Solaris zones on the same global zone? If so, many of the checks will be duplicated. This may also happen with other virtual environments, but I've only seen it for Solaris zones. In particular our ESX environment does not have this problem. Steve -- If they give you ruled paper, write the other way. -Juan Ramon Jimenez, poet, Nobel Prize in literature (1881-1958) I prayed for freedom for twenty years, but received no answer until I prayed with my legs. -Frederick Douglass, Former slave, abolitionist, editor, and orator (1817-1895)

3 4

RRD Graphing Issue
by tlewick＠apsaranetworks.com 21 Feb '13

21 Feb '13

One of my graphs of data that I am getting from devmon, just stopped graphing. I have other graphs for the same device for devmon, and its still graphing, and the xymon graphs for tests like CONN is still working. And I verified the data is still coming back, and nothing has changed via graph definitions or in xymonserver.cfg. Its like xymon just decided to stop graphing for this test. I've even removed the rrd file for one of the hosts in question, and a new RRD file is being generated, but when I click on the graph in the browser, it still shows the old data. Also, the graph update time is updating, and the current value is within the upper/lower bounds of the graph, just no line being displayed anymore. Anyone have any ideas how to go about resolving/troubleshooting this? I am running xymon 4.3.8 and devmon 0.3.1-beta1

2 1