February 2013 - Xymon - Xymon mailman web

Proxy Priority?
by sean.clark＠twcable.com 07 Feb '13

07 Feb '13

I have a setup like this: +------------------------+ +----------------------+ | xymon:1985 | | | |------------------------| | Downstream client | | xymonproxy:1984 | <-----+| | +------------------------+ +----------------------+ + | | | +-----> proxy sends to localhost:1985, and upstream host1 1984, upstream host2 1984 [this is repeated across several sites] The issue is, when downstream client looks to get it's config – in some sites, it gets the local-client from xymon:1985 host, but in others, it gets it from upstream hostX:1984 The xymondproxy in the tasks.cfg is identical in each place (--server localhost:1985, host1:1984, host2:1984) -- so I am confused as to why some get localhost, and some do not — the local-client is different in each place – and I'D prefer some setting I am missing (?) so that it always gets the local-client from the xymon:1985 instance. ________________________________ This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.

2 3

Alert on Log Entry
by Nick＠Pettefar.com 07 Feb '13

07 Feb '13

Hi, is it possible to configure the alerts.cfg file to send an e-mail if a server's particular log has a certain entry? I have HOST=server-abc-ge1 MAIL NOC at blah.com SERVICE=log COLOR=red Can I put something like SERVICE=log:Fail.log="Big-Failure" Regards, Nick Pettefar - Xymon Rookie

3 5

Xymon client on private network - proxy solution?
by denicoloj＠gmail.com 07 Feb '13

07 Feb '13

Xymon users & admins, I have a few servers(LDAP, QNAP/NFS, etc..) that are located on a private network but can be reached via ssh by tunneling through various other servers which are connected to the internet. I need to figure out how to have these private network clients send xymon reports to my xymon server located on the outside. I will try and map out the situation so you guys can have a better visual idea with fictional IPs. 2 Main subnets are controlled by me 120.15.130.x 120.15.131.x Server A : Main XYMON Server - 120.15.131.1 Server B : Current working Xymon Client - 120.15.131.2 & 192.168.1.2 (2nd NIC connected to a switch which is not connected to any other outside network) Server C : NFS Server - 192.168.1.3 - I need an xymon client installed on here and to be able to communicate(push reports) to the main xymon server by going through Server B(proxy). As you can see the NFS server is not accessible from the main two subnets (120.15.130/131), only accessible from a server connected to the switch. Connecting the xymon server to the private switch is not an option. Is there anyway I can have Server B proxy the report from Server C to Server A. Server B is already running tinyproxy, can I use this or do I have to use a special xymonproxy extension? I would like to avoid having a 2nd full xymon server, I would just like one of my current xymon clients to act as a proxy or relay server. Appreciate any help. Thanks, * * *Joseph De Nicolo* *Secure Database Administrator * *Center for Complex Network Research <http://www.barabasilab.com>* *Northeastern University*

3 3

rdp unexpected response
by dhaycurrie＠leisurefitness.com 06 Feb '13

06 Feb '13

I had to rebuild my xymon server. I had it running well for years, but it needed a nice upgrade and I did this a couple of months ago. However a lot of the custom configuration I don't remember and I can't find in google. A lot of my rdp checks are getting Unexpected service response. I think most likely is because they have NLA (Network Level Authentication) selected. Is there a way to check without changing that setting? Most of my servers do not require access to other users so I don't want to lower the setting. Maybe the setting needs to be updated? David Hay-Currie IT Manager Leisure Fitness Equipment LLC 231 Executive Dr. Suite 15 Newark, DE 19702 Phone: (302) 224-5018 [cid:image002.png at 01CE03CE.132967B0]<http://www.leisurefitness.com/?referrer=dhaycurrie>

2 1

Alternative to conn test - check for any incoming data from client?
by jhillen＠draads.nl 06 Feb '13

06 Feb '13

Hi there, Quite a few of the clients I've setup to be monitored, are behind a firewall which does not allow a response to ping. As such, I can not use the conn test, a function which I do believe is rather important. As an alternative, I would like to have a (possibly periodic) check, to see whether any data is incoming from these clients, as an alternative to the connection test.. afterall, incoming data = working connection, at least between the client at the Xymon server. Might any one have any recommendations or perhaps a sample on how to accomplish such a feat? Kind regards, Joost Hillen. System Administrator Draads bv.

3 4

TS - hobbitd_client RED
by d.tom.schmitt＠L-3com.com 06 Feb '13

06 Feb '13

I am continuing to have a problem on my production system: CentOS with Xymon 4.3.0-0.beta2 I am getting the hobbitd_client ICON and the message says: - Program crashed - Fatal signal caught! Does anyone have an idea where to look to correct this problem? I cannot find anything in the 'Client data' link. I have 2 servers: monitorp and monitor2. Monitor2 watches monitor2 and begins alerting if monitorp does not answer a ping. I also did the following thinking that I might have a corrupted client program. - I copies the /home/xymon/client/bin directory from monitor2 -> monitorp - I restarted the client on monitorp - Still have the same problem You cannot DISABLE the ICON. You can drop the ICON but it comes right back from the client on the primary Xymon server. Thanks, Tom Schmitt Senior IT Staff - R&D L-3 Communication Systems West 640 North 2200 West P.O. Box 16850 Salt Lake City, UT 84116 Phone (801) 594-3030 Cell (801) 231-7230 eFax (470) 201-6644 \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo-- Have A Nice Day ! It is not necessary to change. Survival is not mandatory. -- W. Edwards Deming

2 1

Strange Client Behavior
by denicoloj＠gmail.com 06 Feb '13

06 Feb '13

Xymon users, Once upon a time I had a xymon client called "hostname". In all the xymon server config files(hosts.cfg, analysis.cfg, alerts.cfg) the client was written as "hostname" in the configs when setting its properties and behavior(alerts, warnings, ect..). Now I wish to change the way "hostname" appears on the xymon webpage to "hostname.example.org". Bear in mind this "hostname" has a xymon client install so I can receive all standard and custom reports & scripts. After changing all the server config files, keeping them constant but now replaced every instance of "hostname" to "hostname.example.org" the reports are not showing up on the webpage. I can still see icons and reports for conn, ssh, http, info.. but NOT the ones that are required by a client install(disk, cpu, memory, procs, ports, etc...) all those reports disappeared after the name change. XYmon server and client service restarts didn't help. I also hard rebooted the xymon server and that didn't help either. If I were to change " hostname.example.org" back to "hostname", all the reports and tests will show up again! I'm confused because I changed the names of another server and it was fine. So am I missing something stupid? Anybody have any ideas or experience this before? Appreciate all the responses, Thanks, * * *Joseph De Nicolo* *Secure Database Administrator * *Center for Complex Network Research <http://www.barabasilab.com>* *Northeastern University*

4 5

Remove Column/Test
by mburger＠bubbanfriends.org 06 Feb '13

06 Feb '13

The hosts.cfg file: xxx.xxx.xxx.xxx hostname # disk,files,http,cpu,memory,msgs,procs http://wiki.fhmc.local/ NOCOLUMNS:inode,ports Note that in this case, I've removed "ports" from the list of tests, and added "ports" to the "NOCOLUMNS" field, along with inode. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > In which file? > > Do you have an example please? > > Regards, > > Nick Pettefar > > > On 5 February 2013 17:17, Mike Burger <mburger at bubbanfriends.org> wrote: >> You can place it at the end of your HOST line. >> -- >> Mike Burger >> http://www.bubbanfriends.org >> >> "It's always suicide-mission this, save-the-planet that. No one ever >> just >> stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 >> >> >>> Hi, we do not check for any ports, how do we remove the Ports column >>> please? In the documentation >>> (https://en.wikibooks.org/wiki/System_Monitoring_with_Xymon) it says: >>> >>> I don't want to display column foo in my display. How do I do that ? >>> A. Add the entry NOCOLUMNS:foo,bar to hide column foo and bar. >>> >>> but it doesn't say where and it also mentions (in other answers) bb >>> files that don't exist so I guess it is out of date. (Is there an >>> uptodate version of this document t cover the latest Xymon?) >>> >>> Regards, >>> >>> Nick Pettefar >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >>> >> >

3 2

Xymonlaunch pid file location error
by xserv4real＠hotmail.com 06 Feb '13

06 Feb '13

Hello Hobbit Devels I have been working on getting Xymon to work on Raspberry Pi, but ran into some trouble with xymonlaunch. And reloading the config file. It seems that the xymonlaunch does not correctly read tasks.cfg for the XYMONSERVERLOGS env variable, because trying to change the directory from default to another, I wanted to update configuration. Using “sudo service xymon reload” which starts the reload script, but gives the error: ----[info] Reloading xymond config.cat: /var/run/xymon/xymond.pid: No such file or directory/etc/init.d/xymon: 91: kill: Usage: kill [-s sigspec | -signum | -sigspec] [pid | job]... orkill -l [exitstatus]---- Which made me look into xymonlaunch and found it uses pidfile “--pidfile=/var/run/xymon/xymonlaunch.pid” and this is not what is used by the ENV variable or anything I can find, but it is however in the xymon.init ? shouldn’t this change from the tasks.cfg file? Also made the gdb trace, but I am not sure this the relative to the problem. ---------Reading symbols from /usr/lib/xymon/server/bin/xymond...(no debugging symbols found)...done.[New LWP 3996][Thread debugging using libthread_db enabled]Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".Core was generated by `xymond --pidfile=/var/log/xymon/xymond.pid --restart=/usr/lib/xymon/server/tmp/'.Program terminated with signal 6, Aborted.#0 0xb6c12bfc in raise () from /lib/arm-linux-gnueabihf/libc.so.6(gdb) bt#0 0xb6c12bfc in raise () from /lib/arm-linux-gnueabihf/libc.so.6#1 0xb6c1697c in abort () from /lib/arm-linux-gnueabihf/libc.so.6#2 0x00009304 in ?? ()#3 0x00009304 in ?? ()Backtrace stopped: previous frame identical to this frame (corrupt stack?)(gdb) quit--------- Kind regards Mark

1 0

BBWin hanging on Server 2008R2 SP1
by david.baldwin＠ausport.gov.au 06 Feb '13

06 Feb '13

I have noticed a few of my monitored servers running BBWin having BBWin.exe wedging recently - so all the client tests go purple. Maybe triggered by a recent Windows update? The process cannot be killed, so the service cannot restart without rebooting the server. Has anyone else noticed this? Some are running 0.12 and others 0.13. All central mode. We have also recently deployed SCEP AV so possibly some interaction there? Recent versions of SCEP also make the MsMpSvc service (Microsoft Antimalware Service) "invisible" to BBWin so it does not get reported in the svcs section. Any suggestions appreciated! Thanks, David. -- David Baldwin - Senior Systems Administrator (Datacentres + Networks) Information and Communication Technology Services Australian Sports Commission http://ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au Leverrier Street Bruce ACT 2617 ------------------------------------------------------------------------------------- Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender. -------------------------------------------------------------------------------------

1 0