January 2014 - Xymon - Xymon mailman web

Ignore and trigger in client-local.cfg
by johan.karlsson＠deltamanagement.se 29 Jan '14

29 Jan '14

Hi! I'm trying to get ignores and triggers to work in client-local.cfg, but can't get it to work. The background is that we have an important log which is extremely active and we are currently missing entries due to this. Rather than setting a huge value for the amount of bytes to send to Xymon (log:filename:size), I want to apply a ignore/trigger combo instead to filter out the noise before sending the log to Xymon. The man page is not very descriptive of the possibilities, it just states: # "ignore EXPRESSION" # Must follow a "log:..." entry. Lines matching the # regular EXPRESSION are not sent to the Xymon server. # "trigger EXPRESSION" # Must follow a "log:..." entry. Lines matching the # regular EXPRESSION are always sent to the Xymon server. # Use this for extremely critical errors that must be # reported. First, is it at all possible to specify a trigger on things we want to pick up, and discard everything else with a "catch all" ignore expression? The logic is like this (but I need help with the syntax): [host1] log:/var/log/host1.log:102400 trigger this|that|stuff ignore everything Regards, Johan Karlsson

1 0

netstat column and netstat.rrd with german windows
by t.koerfer＠gevasys.de 29 Jan '14

29 Jan '14

Of Course, here is an example of an working english windows netstat page: 2014-Jan-29 08:34:01 [ALBUQUERQUE] win32 ipPacketsReceived=65817490 ipReceivedHeaderErrors=1835 ipReceivedAddressErrors=9547541 ipDatagramsForwarded=0 ipUnknownProtocolsReceived=0 ipReceivedPacketsDiscarded=319190 ipReceivedPacketsDelivered=55957246 ipOutputRequests=28346844 ipRoutingDiscards=0 ipDiscardedOutputPackets=7532 ipOutputPacketNoRoute=0 ipReassemblyRequired=0 ipReassemblySuccessful=0 ipReassemblyFailures=0 ipDatagramsSuccessfullyFragmented=0 ipDatagramsFailingFragmentation=0 ipFragmentsCreated=0 ipv6PacketsReceived=5965227 ipv6ReceivedHeaderErrors=0 ipv6ReceivedAddressErrors=0 ipv6DatagramsForwarded=0 ipv6UnknownProtocolsReceived=0 ipv6ReceivedPacketsDiscarded=249 ipv6ReceivedPacketsDelivered=5965226 ipv6OutputRequests=74141187 ipv6RoutingDiscards=0 ipv6DiscardedOutputPackets=4 ipv6OutputPacketNoRoute=2 ipv6ReassemblyRequired=0 ipv6ReassemblySuccessful=0 ipv6ReassemblyFailures=0 ipv6DatagramsSuccessfullyFragmented=0 ipv6DatagramsFailingFragmentation=0 ipv6FragmentsCreated=0 tcpActiveOpens=81899 tcpPassiveOpens=49180 tcpFailedConnectionAttempts=1260 tcpResetConnections=2886 tcpCurrentConnections=27 tcpSegmentsReceived=55058680 tcpSegmentsSent=35587178 tcpSegmentsRetransmitted=532258 tcpv6ActiveOpens=48 tcpv6PassiveOpens=79 tcpv6FailedConnectionAttempts=0 tcpv6ResetConnections=61 tcpv6CurrentConnections=0 tcpv6SegmentsReceived=5784810 tcpv6SegmentsSent=74123719 tcpv6SegmentsRetransmitted=110 udpDatagramsReceived=890509 udpNoPorts=317287 udpReceiveErrors=358 udpDatagramsSent=107044 udpv6DatagramsReceived=181456 udpv6NoPorts=243 udpv6ReceiveErrors=7 udpv6DatagramsSent=18799 And here is an example of a failing german windows netstat page: 2014-Jan-29 08:35:25 [GANGNAM] win32 EmpfangenePakete=51670686 EmpfangeneVorspannfehler=181 EmpfangeneAdressfehler=9724227 WeitergeleiteteDatagramme=0 EmpfangeneunbekannteProtokolle=0 EmpfangeneverworfenePakete=323091 EmpfangenebermitteltePakete=41627068 Ausgabeanforderungen=7232984 VerworfeneRoutingpakete=0 VerworfeneAusgabepakete=27 AusgabepaketeohneRouting=0 Reassemblierungerforderlich=0 Reassemblierungerfolgreich=0 Reassemblierungerfolglos=0 ErfolgreicheDatagrammfragmentierung=0 ErfolgloseDatagrammfragmentierung=0 ErzeugteFragmente=0 EmpfangenePakete=186529 EmpfangeneVorspannfehler=0 EmpfangeneAdressfehler=0 WeitergeleiteteDatagramme=0 EmpfangeneunbekannteProtokolle=0 EmpfangeneverworfenePakete=125 EmpfangenebermitteltePakete=187004 Ausgabeanforderungen=23684 VerworfeneRoutingpakete=0 VerworfeneAusgabepakete=2 AusgabepaketeohneRouting=2 Reassemblierungerforderlich=0 Reassemblierungerfolgreich=0 Reassemblierungerfolglos=0 ErfolgreicheDatagrammfragmentierung=0 ErfolgloseDatagrammfragmentierung=0 ErzeugteFragmente=0 Aktivge"ffnet=3713 Passivge"ffnet=47 ErfolgloseVerbindungsversuche=17 ZurckgesetzteVerbindungen=635 AktuelleVerbindungen=5 EmpfangeneSegmente=40802713 GesendeteSegmente=7320026 ErneutbertrageneSegmente=16999 Aktivge"ffnet=230 Passivge"ffnet=348 ErfolgloseVerbindungsversuche=0 ZurckgesetzteVerbindungen=2 AktuelleVerbindungen=0 EmpfangeneSegmente=8823 GesendeteSegmente=8467 ErneutbertrageneSegmente=0 EmpfangeneDatagramme=819860 KeineAnschlsse=323089 Empfangsfehler=3 GesendeteDatagramme=4924 EmpfangeneDatagramme=184690 KeineAnschlsse=125 Empfangsfehler=2 GesendeteDatagramme=19489 b.r. T.K. Von: Jeremy Laidman [mailto:jlaidman at rebel-it.com.au] Gesendet: Mittwoch, 29. Januar 2014 07:31 An: Körfer, Thomas Cc: xymon at xymon.com<mailto:xymon at xymon.com> Betreff: Re: [Xymon] netstat column and netstat.rrd with german windows On 29 January 2014 02:55, Körfer, Thomas <t.koerfer at gevasys.de<mailto:t.koerfer at gevasys.de>> wrote: I think the test expects the english words for the counters. Is it possible to add multi language support? Can you show examples of the [netstat] section from both English and German windows? The code specifically looks for strings like "udpReceiveErrors" and "tcpActiveOpens". If the client data doesn't show these, then it's not going to work. The strings are hard-coded in xymond/rrd/do_netstat.c in a struct variable called "netstat_win32_markers". I would think that it's a big job to make Xymon multi-lingual with regards to input from clients. There are several places where Xymon expects certain strings in client data (not just for netstat), and for each one, there would need to be a block of strings for an array (literally) of languages. To support this, the data structures would need to be redefined. I suspect that many UNIX systems present netstat output in English, and that's what Xymon expects. I think work-arounds for language-dependent strings on the client are probably best addressed on the client. To do so probably means that the client must change the way it collects the data, so that instead of simply using the strings provided by the "netstat -s" output, it might need to get the data by the row number. Another option might be to tweak the client's Windows installation, so that the German language file cannot be found (perhaps temporarily) for the netstat command, so that it falls back to EN-US. To do so, I think you can just rename (or change permissions on) %SYSTEMROOT%\System32\de-de\netstat.exe.mui. It might be that if %SYSTEMROOT% is changed to something else, during the execution of the netstat command (eg in a batch file), then netstat will run correctly, but not find the .mui language file, and similarly fall-back to EN-US. Cheers Jeremy

1 0

core dump
by stef.coene＠docum.org 29 Jan '14

29 Jan '14

Hi, I have installed the client but I moved it to an other directory. I tried to set XYMONHOME to this new directory, but this causes xymonlaunch to crash with a buffer overvlow. The rest of the commands are running fine. This is the code from ./common/xymonlaunch.c: /* Find config */ if (!config) { if (stat("/etc/tasks.cfg", &st) != -1) config = strdup("/etc/tasks.cfg"); else if (stat("/etc/xymon/tasks.cfg", &st) != -1) config = strdup("/etc/xymon/tasks.cfg"); else if (stat("/etc/xymon-client/clientlaunch.cfg", &st) != -1) config = strdup("/etc/xymon-client/clientlaunch.cfg"); else if (xgetenv("XYMONHOME")) { char *pf = NULL; sprintf(pf, "%s/etc/tasks.cfg", xgetenv("XYMONHOME")); if (pf && stat(pf, &st) != -1) config = strdup(pf); } if (config) dbgprintf("Using config file: %s\n", config); } I fixed it like this (line 546). I also added an extra if statement so the script also tries to use clientlaunch.cfg: /* Find config */ if (!config) { if (stat("/etc/tasks.cfg", &st) != -1) config = strdup("/etc/tasks.cfg"); else if (stat("/etc/xymon/tasks.cfg", &st) != -1) config = strdup("/etc/xymon/tasks.cfg"); else if (stat("/etc/xymon-client/clientlaunch.cfg", &st) != -1) config = strdup("/etc/xymon-client/clientlaunch.cfg"); else if (xgetenv("XYMONHOME")) { char pf[1024] ; sprintf(pf, "%s/etc/tasks.cfg", xgetenv("XYMONHOME")); if (pf && stat(pf, &st) != -1) { config = strdup(pf); } else { sprintf(pf, "%s/etc/clientlaunch.cfg", xgetenv("XYMONHOME")); config = strdup(pf); } } I also have a problem with this line from file common/xymoncmd.c: sprintf(envfn, "%s/etc/xymonserver.cfg", xgetenv("XYMONHOME")); I want to run xymoncmd without setting XYMONHOME. So it has to use XYMONHOME from compile time, but that's not working. In the Makefile I set XYMONHOME to a directory but during the compile, /client is added. Stef

4 16

--nongreen-colors=red,purple
by Mark.Falzon＠fujixerox.com 29 Jan '14

29 Jan '14

Xymon version: 4.3.5 Hi there, wondering if you can help me please. We generate an only RED or PURPLE page through the xymongen --nongreen-colors=red,purple option. The page generates fine however when a server that has a purple test alongside of a yellow test xymongen seems to drop the server from the generated list. The server will still be part of "Current non-green systems" with its Purple and Yellow tests Thanks all Mark Falzon *********************************************************************************** This e-mail, including any attachments to it, may contain confidential and/or personal information. If you have received this e-mail in error, you must not copy, distribute, or disclose it, use or take any action based on the information contained within it. Please notify the sender immediately by return e-mail of the error and then delete the original e-mail. The information contained within this e-mail may be solely the opinion of the sender and may not necessarily reflect the position, beliefs or opinions of the organisation on any issue. This email has been swept for the presence of computer viruses known to the organisation's anti-virus systems. ***********************************************************************************

1 0

netstat column and netstat.rrd with german windows
by t.koerfer＠gevasys.de 29 Jan '14

29 Jan '14

Hi, some time ago I started to wonder why some of my windows clients generate some netstat charts (netstat.rrd) and some not. Today I found out, that for all english windows systems the charts are fine, but for the german windows systems there is only a placeholder appearing on the netstat page. The netstat.rrd file is also missing for german windows systems. I think the test expects the english words for the counters. Is it possible to add multi language support? 90% of my hosts are german and it seems this issue is not the only language based one. b.r. T.K.

2 1

Possible bug with --nongreen-colors=red,purple
by Mark.Falzon＠fujixerox.com 29 Jan '14

29 Jan '14

Xymon version: 4.3.5 Hi there, wondering if you can help me please. We generate an only RED or PURPLE page through the xymongen --nongreen-colors=red,purple option. The page generates fine however when a server that has a purple test alongside of a yellow test xymongen seems to drop the server from the generated list. Just wondering if this is a known problem. Regards Mark Falzon *********************************************************************************** This e-mail, including any attachments to it, may contain confidential and/or personal information. If you have received this e-mail in error, you must not copy, distribute, or disclose it, use or take any action based on the information contained within it. Please notify the sender immediately by return e-mail of the error and then delete the original e-mail. The information contained within this e-mail may be solely the opinion of the sender and may not necessarily reflect the position, beliefs or opinions of the organisation on any issue. This email has been swept for the presence of computer viruses known to the organisation's anti-virus systems. ***********************************************************************************

1 0

Email alerts with attachments - known solution not working
by hobbit＠elyograg.org 28 Jan '14

28 Jan '14

Barely relevant background info: I managed to wipe out my xymon server. I had a backup of my config information that's over six months old, so I haven't had to rebuild from scratch. I also upgraded from 4.3.10 to 4.3.12 when I rebuilt it. I had run into alerts coming through as attachments before, but now there seems to be an extra dimension to it. Before I was able to fix it with the following change in xymonserver.cfg: MAILC="/usr/bin/tr -d '\\015' | mail" Now that isn't working for all of my alerts. With some investigation, I have been able to determine that additional control characters are now being sent from clients. I've had to extend my MAILC variable to eliminate additional characters: MAILC="/usr/bin/tr -d '\\001\\004\\015' | mail" Does anyone know if there might be additional characters I'll need to eliminate before it gets sent to mail/mailx? Is there any way to have Xymon do this so that no special config is needed? Thanks, Shawn

3 2

client-local.cfg
by Galen.Johnson＠sas.com 28 Jan '14

28 Jan '14

Hey, I have a couple of questions regarding the client-local.cfg file. 1) can it handle reg-ex for hostnames like other cfg files? For example, [%(myhost1|myhost2).*] 2) According to the man page for client-local.cfg, "When clients connect to the Xymon server to send in their client data, they will receive part of this file back from the Xymon server." What if you are using xymonfetch? Would I need to create a local client-local.cfg file within the .../xymon/client/etc folder? thx =G=

5 6

Acknowledge purple?
by john.thurston＠alaska.gov 28 Jan '14

28 Jan '14

Having recently moved from Big Brother to Xymon, one of the features I find most valuable is 'acknowledge'. It lets someone say 'yeah, I know the host has a problem' while leaving an indication of the condition on the web interface. What I don't understand, though, is why we are not able to 'acknowledge' purple events. It seems desirable and I can't see how it would cause confusion. I've looked in acknowledge.c, and it appears that is is explicitly querying for 'color=red,yellow'. Is there a business case to exclude purple from the option to 'ack'? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

4 6

[off-topic] Anyone knows about GIS systems? Mapserver, Geowebcache?
by henrik＠hswn.dk 28 Jan '14

28 Jan '14

Hi, this is blatantly off-topic for Xymon, but hey ... it is my mailing list :-) I am curious if anyone has experience with a couple of GIS (Geographical Information Systems) tools: MapServer - www.mapserver.org - and GeoWebCache - www.geowebcache.org. In particular what kind of hardware they need. MapServer apparently is a CGI program that generates map images, and that sounds a bit heavy to me; GeoWebCache is a cache for map images and I recon that needs a fair chunk of disk storage. Any replies directly to henrik at hswn.dk, please - note that you'll have to edit the "To" field. Regards, Henrik

1 0