August 2013 - Xymon - Xymon mailman web

Is MAPE still in development?
by mburger＠bubbanfriends.org 26 Aug '13

26 Aug '13

Has anyone heard anything, lately, of the MAPE project? The web site for the project seems to have been taken down, the host no longer exists, the IP gone. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 On Sunday, September 8, I'll be participating in the Spokes of Hope ride, to raise money for cancer awareness and make a difference in the lives of cancer victims and their families/friends. If you'd care to donate, please click: http://ow.ly/nIdrC Thank you.

4 4

analysis.cfg log message issue
by Phil.Crooker＠orix.com.au 26 Aug '13

26 Aug '13

I'm running xymon 4.3.10 and have a problem with a log event not being handled correctly. It is unclear whether this is a bbwin client issue or in xymond (perhaps both). The event: In the windows eventlog: Cmdlet failed. Cmdlet GetUserPhoto, parameters {Identity=username at domain}. As sent to xymond by the bbwin client: error - 2013/08/26 11:19:57 - MSExchange CmdletLogs (6) - Cmdlet failed. Cmdlet %1, parameters %2. I've setup the following rule to 'downgrade' this basically meaningless windows event, with the catchall rule under it for the (remaining) errors that I do want to monitor: LOG %.* %Cmdlet.failed..Cmdlet COLOR=yellow LOG %.* %^error COLOR=red This entry still comes in as a red error: red Critical entries in eventlog_msexchange management yellow error - 2013/08/26 11:19:57 - MSExchange CmdletLogs (6) - Cmdlet failed. Cmdlet %1, parameters %2. yellow error - 2013/08/26 11:17:26 - MSExchange CmdletLogs (6) - Cmdlet failed. Cmdlet %1, parameters %2. red error - 2013/08/26 11:19:57 - MSExchange CmdletLogs (6) - Cmdlet failed. Cmdlet %1, parameters %2. red error - 2013/08/26 11:17:26 - MSExchange CmdletLogs (6) - Cmdlet failed. Cmdlet %1, parameters %2. Looking at the windows event viewer, there is only one event for each of these times, so it is somehow being duplicated. Capturing the traffic shows it is not duplicated 'on the wire'. Using the xymon xymondlog command shows it is duplicated. If I remove the Cmdlet rule from analysis.cfg, it is not duplicated. This doesn't happen to all messages but to some, I haven't worked out what the commonality is -- perhaps the message string itself is affecting the parsing.... The only way I've been able to stop this is to IGNORE the entry which I don't really want to entirely. Can anyone help, please? Thanks, Phil

2 1

XyMon client version
by A.Chervonets＠cominder.eu 26 Aug '13

26 Aug '13

Some time ago somebody asked how to check XyMon client version. Now I need to make revision what installed in our "Zoo" and plan xymon clients upgrade. Version can be easy detected at client side like with cmd: echo `hostname`:`./xymon 2>&1 | grep "version"` out: realhostname:Xymon version 4.3.5 so we just need to loop through all hosts and execute such call. But this is quite inconvenient (most target hosts will not have passwordless ssh connection setup). May be XyMon developers can implement new metric test "xymonver" which, depending on settings will show in web UI: a) just version of xymon client installed b) red, yellow or green depending on how old version is instaled compared with * xymon server version * or maximum version detected in all target servers If this is too complex, may be add client version to "info" repost like this is done for OS? Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ mobile: +371 26517848

2 1

Disk graph showing rubbish data
by wilbert.jeuken＠xperi.nl 25 Aug '13

25 Aug '13

Hello all, On a couple of occasions, I've seen the disk graph showing rubbish data. The status area will neatly list all disks and the data like free space and capacity. The graph however, will show a good line for some disks and no line at all for others. In the key below the graph, the missing disks/lines will be mentioned with bogus data. For instance, it will show "/11.9]" or "/3053]7292" for the drive letter (client is a Windows machine) and "-nan" for the values behind it. This also seems to resolve itself in due time. Is there anything I can do to avoid this strange behavior? Met vriendelijke groeten / kind regards, [cid:image002.png at 01CE2619.F4737BD0] Wilbert Jeuken Xperi B.V. | De Gruyterfabriek, Kantoor 7238-7240 | Veemarktkade 8 | 5222 AE 's-Hertogenbosch M. +31 (0)6 1000 1682 | T. +31 (0)73 7440 113 | F. +31 (0)73 8440 113 | E. wilbert.jeuken at xperi.nl<mailto:wilbert.jeuken at xperi.nl> disclaimer<http://www.xperi.nl/Disclaimer.html> | Join us in the Cloud: www.xperi.nl<http://www.xperi.nl/> | twitter<http://twitter.com/#!/Xperi_info> | facebook<http://www.facebook.com/pages/Xperi/126814167400869?sk=info> | linkedin<http://www.linkedin.com/company/2293856?goback=.fps_PBCK_*1_*1_*1_*1_*1_*1_…>

2 1

Windows 2012 Msgs
by dschroeter＠corpcomp.com 23 Aug '13

23 Aug '13

I'm getting "error : can't get eventlog file path" on my Windows 2012 servers for some of the event logs. What I found is that the ones that work have a "file" expandable string value that points to the actual log file. The ones with the error are missing that. Research led me to MS stating it is optional and that if it doesn't exist it defaults to a specific place. http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).a… Unfortunately it is different for 2012 and 2000/2003. So first, is this a BBWin client issue or a Xymon issue? I have a feeling it is the client. Is there any way to get it to look in the default location? Thanks Dave

1 0

is depends broken?
by troy＠athabascau.ca 22 Aug '13

22 Aug '13

Galen, I should have also stated that google was up for the entire period (no flapping). Josh, I take it, you mean replace my previous configuration where it said: depends=(http: google.com/http ) and make it: route:google.com so it ends up as: XXX.XXX.XXX.XXX www # trace http://www route:google.com I tried that and when I block both hosts google/icmp,http and www:http with iptables they both show red, I was expecting www:http to show clear to get the same functionality as "depends". Any thoughts? cheers, Troy ----- Original Message ----- From: "Josh Luthman" <josh at imaginenetworksllc.com> To: "Galen Johnson" <Galen.Johnson at sas.com> Cc: xymon at xymon.com, "Troy Adams" <troy at athabascau.ca> Sent: Monday, August 19, 2013 8:56:57 PM GMT -07:00 US/Canada Mountain Subject: Re: [Xymon] is depends broken? Use route: other.host.com Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Aug 19, 2013 10:31 PM, "Galen Johnson" < Galen.Johnson at sas.com > wrote: #2 sounds a lot like "flapping". Does "depends" honor flapping or would a flapping server still show red? Or am I not understanding the situation? =G= From: Xymon [ xymon-bounces at xymon.com ] on behalf of Troy Adams [ troy at athabascau.ca ] Sent: Monday, August 19, 2013 5:34 PM To: xymon Subject: [Xymon] is depends broken? I have the following in my 'hosts.cfg': 209.85.225.105 google.com # http://www.google.com XXX.XXX.XXX.XXX www # trace http://www depends=(http: google.com/http ) Yesterday, the web server (www) was down for 55 minutes. The Xymon record shows that: 1. google.com/http was green for that whole period 2. www/http bounced between red and clear for the whole period (with a bounce frequency of 5 minutes) 3. My other Xymon server (configured without "depends") shows a solid 55 minute outage (red for 55 minutes). This behavior is not what I expect from reading the man page. I tried to reproduce this problem with "depends" on my test Xymon server and was able to confirm the same behavior. Is there a workaround to this problem with my Xymon 4.3.10 server? cheers, Troy This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

1 0

How to compile client
by ricardo＠lxti.com.br 22 Aug '13

22 Aug '13

Hi, I need help compiling the client. I have compiled the server and it's working fine. Now I need to compile the client but it doesn't compile. The first error (which I can't remember) I have corrected compiling the server before the client. Now I get the following error: make[1]: Entering directory `/usr/src/xymon-4.3.12/xymond' make[1]: *** No rule to make target `../lib/xymonclient.a', needed by `../client/xymond_client'. Stop. make[1]: Leaving directory `/usr/src/xymon-4.3.12/xymond' make: *** [xymond-client] Error 2 So I tried to change the file ./xymond/Makefile to the following: ../client/xymond_client: $(CLIENTOBJS) ../lib/libxymonclient.a $(CC) -o $@ $(RPATHOPT) $(CLIENTOBJS) ../lib/libxymonclient.a $(PCRELIBS) $(NETLIBS) $(LIBRTDEF) And now: make[1]: Entering directory `/usr/src/xymon-4.3.12/xymond' gcc -o ../client/xymond_client -Wl,--rpath, xymond_client.o xymond_worker.o xymond_buffer.o client_config.o ../lib/libxymonclient.a -L -lpcre xymond_client.o: In function `want_msgtype': /usr/src/xymon-4.3.12/xymond/xymond_client.c:257: undefined reference to `xmh_item' xymond_client.o: In function `unix_cpu_report': /usr/src/xymon-4.3.12/xymond/xymond_client.c:482: undefined reference to `init_status' /usr/src/xymon-4.3.12/xymond/xymond_client.c:490: undefined reference to `addtostatus' /usr/src/xymon-4.3.12/xymond/xymond_client.c:496: undefined reference to `addtostatus' /usr/src/xymon-4.3.12/xymond/xymond_client.c:497: undefined reference to `addtostatus' /usr/src/xymon-4.3.12/xymond/xymond_client.c:501: undefined reference to `finish_status' /usr/src/xymon-4.3.12/xymond/xymond_client.c:492: undefined reference to `addtostrstatus' /usr/src/xymon-4.3.12/xymond/xymond_client.c:493: undefined reference to `addtostatus' /usr/src/xymon-4.3.12/xymond/xymond_client.c:500: undefined reference to `addtostatus' Any help would be much appreciated. Thanks in advance. -- Ricardo Alberto Schutz Consultor LXTI - www.lxti.com.br Tel. Comercial: +55 (47) 3385-4345 Celular: +55 (47) 8802-3881

3 3

No LSB modules are available
by Galen.Johnson＠sas.com 22 Aug '13

22 Aug '13

Hey, I was looking at my logs and noticed this message. No LSB modules are available. While googling, I came across this thread from last september: http://lists.xymon.com/pipermail/xymon/2012-September/035481.html Any chance we can get this done? While the message appears to be harmless, I hate seeing anything un-useful in my logs. Note, this is on a Ubuntu system. =G=

2 1

xymonfetch
by Galen.Johnson＠sas.com 22 Aug '13

22 Aug '13

Hey, I need to set up some clients to use xymonfetch and the man page isn't exactly clear. --server=XYMON.SERVER.IP Defines the IP address of the Xymon server where the collected client messages are forwarded to. By default, messages are sent to the loopback address 127.0.0.1, i.e. to a Xymon server running on the same host as xymonfetch. This implies that I need to have a server instance running...or am I misunderstanding what it's saying? Has anyone done this and could provide a some guidance? thx =G=

3 7

Custom tests showing warnings
by David.Hurst＠t-systems.co.za 21 Aug '13

21 Aug '13

Hi, Does anyone know if it is possible to show the warning exclamation mark on a custom test should one of the tests enter the warning stage? Basically, I want to show something similar to the existing "disk" test when it reaches the warning stage : Wed Aug 21 08:22:36 SAST 2013 - Filesystems NOT ok ! /aaa (91% used) has reached the WARNING level (90%) Filesystem kbytes used avail capacity Mounted on / 15482443 13208128 2119491 87% /Etc ...etc In my custom test, I have several queues monitored, and would like to highlight them with the exclamation mark in the event of a warning Regards Dave Disclaimer: This message and/or attachment(s) may contain privileged, confidential and/or personal information. If you are not the intended recipient you may not disclose or distribute any of the information contained within this message. In such case you must destroy this message and inform the sender of the error. T-Systems does not accept liability for any errors, omissions, information and viruses contained in the transmission of this message. Any opinions, conclusions and other information contained within this message not related to T-Systems' official business is deemed to be that of the individual only and is not endorsed by T-Systems. This message and/or attachment(s) may contain privileged or confidential information. If you are not the intended recipient you may not disclose or distribute any of the information contained within this message. In such case you must destroy this message and inform the sender of the error. T-Systems does not accept liability for any errors, omissions, information and viruses contained in the transmission of this message. Any opinions, conclusions and other information contained within this message not related to T-Systems' official business is deemed to be that of the individual only and is not endorsed by T-Systems. T-Systems - Business Flexibility

2 1