March 2013 - Xymon - Xymon mailman web

Phantom trap alerts?
by betsy.schwartz＠gmail.com 14 Mar '13

14 Mar '13

We have one class of device (exadata storage cels) , and one single server out of hundreds, for which we occasionally get bogus trap alerts. We don't use trap alerts at present on *any* devices. What happens is, we get a trap alert, and then after some time passes it turns purple. Someone gets paged and woken up for the purple which is VERY annoying. I drop it on the xymon server side, and it goes away for days or weeks or months. I can set a rule to ignore trap when paging, but why are we getting them? The exadata storage cels do not run a xymon client, they are ping monitored only. The lone server does run the linux client. What could be triggering the trap just for these boxes? Has anyone else ever experienced this?

3 5

xymonproxy SetUp Help Requested
by Nick＠Pettefar.com 13 Mar '13

13 Mar '13

I have an xymon client for a NAS but the NAS is connected via another xymon client and is not reachable from the xymon server. How would I set this up in the xymon server configuration - does it need a hosts.cfg entry and if so, what would it look like? On the client, do I give it the address of the xymon client running xymonproxy or the actual server? Regards, Nick Pettefar

4 5

Collating Messages from various client .
by Venkatesh_S04＠infosys.com 13 Mar '13

13 Mar '13

Hi All , We have a requirement to collate messages from various clients and collate it before displaying the message on to the xymon .The clients run scripts locally via clientlaunch and these scripts send the message to xymon .This will be typically displayed directly however we would like to collate such messages and then display it as single column with multiple rows ! Please let me know in case any body has some pointers . Regards, Venkatesh **************** CAUTION - Disclaimer ***************** This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by e-mail and delete the original message. Further, you are not to copy, disclose, or distribute this e-mail or its contents to any other person and any such actions are unlawful. This e-mail may contain viruses. Infosys has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this e-mail. You should carry out your own virus checks before opening the e-mail or attachment. Infosys reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the Infosys e-mail system. ***INFOSYS******** End of Disclaimer ********INFOSYS***

1 0

Blue displayed on non-green page
by mjones＠mnsi.net 13 Mar '13

13 Mar '13

Is there any way to make it so the blue events don't show in the event list of the non-green page? Mark Jones Operations Managed Network Systems London Desk 519-679-5207 Windsor Desk 519-258-2333 x8417 Cell 519-521-8222

5 5

BBWIN hidden services
by C.Simmons＠criflending.com 13 Mar '13

13 Mar '13

We recently upgraded our Symantec AV server, and started to cut the clients over from SEP client 11.x to SEP client 12.x. In doing so the service name changed after a reboot from "Symantec Antivirus" to "SepMasterClient" The BBWin agent on either 12.x or 13.x does not send the new service name over to the Xymon server properly and therefore is unable to match the service name. We are running all clients in a central mode. This also does not appear to be a 32bit vs 64bit issue as we have noticed the issue persists on the 32bit machines. Has anyone else had this issue with the BBWin agent not sending all windows services properly? Thanks in advance, Clint Simmons This e-mail (and any attachment) is strictly confidential and for use only by intended recipient(s). The opinions therein expressed are those of the author. Its contents, therefore, do not represent any commitment between the company and the recipient(s) and no liability or responsibility is accepted by the company for the above mentioned content. If you are not an intended recipient(s), please notify the author promptly and delete this message.

2 1

Version History, change log
by Michael.Beatty＠sherwin.com 12 Mar '13

12 Mar '13

Where can I find update change logs and release notes? All I can find are the "News" posts on the SourceForge site and they are only current up to 4.3.0. Thank you. -- Michael Beatty Sherwin-Williams IT Analyst/Developer michael.beatty at sherwin.com 216-515-7374

2 1

Internal Server Error when I click on http://10.20.63.250/xymon-cgi/historylog.sh?HOST=bclsw-sciage28&SERVICE=conn&TIMEBUF=Fri_Mar_8_12:30:09_2013
by Jimmy.Larouche＠ca.ebarrette.com 12 Mar '13

12 Mar '13

Hi, I use Xymon 4.3.10 on Ubuntu 12.04 LTS (Precise Pangolin) When I click on Internal Server Error when I click on http://10.20.63.250/xymon-cgi/historylog.sh?HOST=bclsw-sciage28&SERVICE=con… I receive this message on my browser Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, webmaster at localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. ________________________________ Apache/2.2.22 (Ubuntu) Server at 10.20.63.250 Port 80 But when click on this link http://10.20.63.250/xymon-cgi/history.sh?HISTFILE=bclsw-sciage28.conn&ENTRI… Xymon work fine. How I can do to fix this? Nano /var/log/apache2/error.log [Tue Mar 12 14:09:33 2013] [error] [client 172.20.150.61] Premature end of script headers: historylog.sh, referer: http: //10.20.63.250/xymon-cgi/history.sh?HISTFILE=bclsw-sciage28.conn&ENTRIES=50&IP=172.20.4.88&DISPLAYNAME=bclsw-sciage28 [Tue Mar 12 14:09:33 2013] [error] [client 172.20.150.61] File does not exist: /usr/lib/xymon/server/www/favicon.ico [Tue Mar 12 15:05:13 2013] [error] [client 172.20.150.61] Premature end of script headers: historylog.sh, referer: http: //10.20.63.250/xymon-cgi/history.sh?HISTFILE=bclsw-sciage28.conn&ENTRIES=50&IP=172.20.4.88&DISPLAYNAME=bclsw-sciage28 [Tue Mar 12 15:05:13 2013] [error] [client 172.20.150.61] File does not exist: /usr/lib/xymon/server/www/favicon.ico Here's how I installed Xymon sudo apt-get install apache2 rrdtool librrd-dev libpcre3-dev libssl-dev ldap-utils libldap2-dev fping sudo apt-get install slapd ldap-utils slap password xymon # Enable mod_rewrite in Apache cd /etc/apache2/mods-enabled/ sudo ln -s ../mods-available/rewrite.load sudo /etc/init.d/apache2 reload cd wget http://sourceforge.net/projects/xymon/files/latest/xymon-4.3.10.tar.gz tar zxf xymon-4.3.10.tar.gz cd xymon-4.3.10 ./build/makedeb.sh 4.3.10 mv debbuild/*.deb ../ cd .. dpkg -i xymon*deb Thank you for your help! Jimmy Larouche Technicien réseautique

1 0

How to remove "purple" data
by FRamaekers＠ailife.com 11 Mar '13

11 Mar '13

I use to have this information, but have lost it somehow. I have one server which stopped having a service (telnet). I removed it from /etc/hobbit/etc-hosts and cycled hobbit. It now shows up in purple. What is the command to remove this entry from being displayed at all. TIA, Frank M. Ramaekers Jr. | Systems Programmer | Information Technology | American Income Life Insurance Company | 254-761-6649 _____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct at ailife.com.

3 4

Log Problem
by Nick＠Pettefar.com 08 Mar '13

08 Mar '13

Hi, we have some (wacko) log entries that are not being displayed properly. Log entry: ####<08-Mar-2013 14:46:48 o'clock GMT> <Info> <Common> <aaxsvr1> <MVNE_GG_C2_S2> <Thread-310448 14:46:48,569> <<anonymous>> <BEA1-35D44D85743B95E400F1> <> <1362754008777> <BEA-000628> <Created "1" resources for pool "PROD_GG_ConductorDB", out of which "1" are available and "0" are unavailable.> is being displayed as: ####<08-Mar-2013 14:46:48 o'clock GMT> <> <> <1362754008777> Is there a way of encapsulating the (weird) contents or should I tell the application people to send clearer/cleaner logs? Regards, Nick Pettefar

2 3

XyMon client binaries default security is bad
by a.chervonets＠cominder.eu 08 Mar '13

08 Mar '13

upgraded XyMon (clinet) to 4.3.10 (the same was at least in 4.3.5) and notices all files in bin can read and execute privileges to everyone: ls -l client/bin/ total 1840 -rwxr-xr-x 1 xymon monitor 161079 Feb 28 21:08 clientupdate -rwxr-xr-x 1 xymon monitor 200250 Feb 28 21:08 logfetch -rwxr-xr-x 1 xymon monitor 151256 Feb 28 21:08 msgcache -rwxr-xr-x 1 xymon monitor 153905 Feb 28 21:08 orcaxymon -rwxr-xr-x 1 xymon monitor 156173 Feb 28 21:08 xymon -rwxr-xr-x 1 xymon monitor 133445 Feb 28 21:08 xymoncfg .... I suppose it depends on umask setting during installation, but I would be more happy if installation process setup more secured configuration regardless of default settings. At least: -rwxr-x---

10 19