January 2014 - Xymon - Xymon mailman web

Documentation mismatch between hosts.cfg.5.html and xymonnet.1.htm ?
by john.thurston＠alaska.gov 22 Jan '14

22 Jan '14

I spent a few minutes chasing my tail on this. It looks like the documentation has a minor discrepancy in option names for xymonnet. In hosts.cfg.5.html, ssldays=WARNDAYS:ALARMDAYS says it overrides the values taken from "--sslwarndays" and "--sslalarmdays" options for the xymonnet(1) tool. xymonnet.1.html, however, says the options for SSL certificate tests are named: --sslwarn and --sslalarm I think my testing indicates these are the correct names. If this is the case, can we have you strike the 'days' from the ends of those two options in hosts.cfg.5.html page? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

2 1

some homemade Plugin for XYMON
by francois.outteryck＠steria.com 22 Jan '14

22 Jan '14

Hello every one, I'm new with xymon mailing list, in fact this is my first message. I'm work with Xymon since some years (and before hobbit, and before bb) and I've develop some plugin that could be useful. Extract of some of them : xymond_mysql => daemon that put statchg message in Mysql database, useful for further analysis. xymongen_xml => like xymongen by generate xml file instead of html, useful for javascript interact. Adding all analysis.cfg parameter in Mysql Database and make Web interface to manipulate data. ð Load of database make by xymond_client Xymon Backend for Nagvis (I know ..). => It permit creation of graphical map well known by nagios user. And some other thing that put to xymon a pretty look, and a great value. I decide now to share and discuss about my stuff with goal to make xymon better. Question : can I put screenshot in mail ? PS: Sorry for my English, I'm a french guy. This email and any attachments may contain confidential information and intellectual property (including copyright material). It is only for the use of the addressee(s) in accordance with any instructions contained within it. If you are not the addressee, you are prohibited from copying, forwarding, disclosing, saving or otherwise using it in any way. If you receive this email in error, please immediately advise the sender and delete it. Steria may monitor the content of emails within its network to ensure compliance with its policies and procedures. Emails are susceptible to alteration and their integrity (including origin) cannot be assured. Steria shall not be liable for any modification to a message, or for messages falsely sent.

2 1

Install xymon on RHEL 6.5
by mfunk＠trinityitsolutions.com 21 Jan '14

21 Jan '14

I can’t seem to get xymon installed on my RHEL 6.5 Desktop. I have pcre 8.32 installed in /opt/pcre-8.32 I ran command: ./configure —server —preinclude /opt/pcre-8.32 —prelib /opt/pcre-8.32 the error: Checking for PCRE Compiling with PCRE Library works OK /usr/bin/ld: cannot find -lpcre collect2: ld returned 1 exit status make: *** [test-link] Error 1 ERROR: Cannot link with PCRE Library. Missing PCRE include- or Library-files. These are REQUIRED for xymond PCRE can be found at http://www.pcre.org/ If you have PCRE installed, use the “—pre include DIR” and “—prelib DIR” options to configure to specify where that are Any help would be appreciated Mark

3 2

Bug Report in acknowledge.c
by john.thurston＠alaska.gov 21 Jan '14

21 Jan '14

It looks to me like we are missing a closing HTML ">" on line 332 of acknowledge.c > fprintf(stdout, "<center><font size=\"+1\"><b>No active alerts</b></font></center\n"); shouldn't that be </center>\n ? This came to light when I made changes to the std_footer and those changes did not render correctly on acknowledge.sh when there were no alerts. I first noticed this in 4.3.12, but it is still present in 4.3.13. -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

2 1

alert config feature request
by solitaryr＠gmail.com 20 Jan '14

20 Jan '14

Hey, I think this may have gotten lost in a separate thread. Reading the man page for alerts.cfg, there are a few keywords that you can use to configure alerts...in the hosts.cfg man page you can add a tag for CLASS that is only for logs... CLASS:Classname Force the host to belong to a specific class. Class-names are used when configuring log-file monitoring (they can be used as references in *client-local.cfg <http://xymon.com/xymon/help/manpages/man5/client-local.cfg.5.html>(5)* and *analysis.cfg <http://xymon.com/xymon/help/manpages/man5/analysis.cfg.5.html>(5)* to group log file checks). Normally, class-names are controlled on the client by starting the Xymon client with the "--class=Classname" option. If you specify it in the hosts.cfg file on the Xymon server, it overrides any class name that the client reports. It would be handy to allow alerts.cfg to trigger on this as well. Not sure what this would entail but would be very useful. thx =G=

2 3

Core dump when using SCRIPT keyword
by miker＠readq.com 20 Jan '14

20 Jan '14

Hi - I've got a little problem wih Xymon 4.3.12 xymond_alert dumping core when trying to use the SCRIPT keyword in alerts.cfg. We're trying to create a script that will contain some custom logic for whether to send alerts based on specific processes or not: we have a situation where we need to disable process checking for one particular process on certain hosts at a certain time of day but want the other process checks to continue and can't find any way of doing this with the standard arguments so we figured we'd have to pass along the checking to a custom script. However when I try to set up the alert, I get a coredump, and the script does not run. My alerts.cfg statement is: HOST=%^rqstp.* SERVICE=procs SCRIPT /home/bb/RQTimedProcAlerts.sh rqit at readq.com DURATION>1m REPEAT=10 RECOVERED COLOR=red TIME=W:0801:1830 I have also tried to eliminate some of those other keywords and gone to the simple: SCRIPT /home/bb/RQTimedProcAlerts.sh rqit at readq.com COLOR=red But I still experience the coredump. Here is a backtrace: [bb at bongo server]$ gdb bin/xymond_alert core.19031 GNU gdb (GDB) CentOS (7.0.1-45.el5.centos) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /home/bb/server/bin/xymond_alert...done. [New Thread 19031] warning: .dynamic section for "/lib/libpthread.so.0" is not at the expected address warning: difference appears to be caused by prelink, adjusting expectations warning: .dynamic section for "/usr/lib/libgssapi_krb5.so.2" is not at the expected address warning: difference appears to be caused by prelink, adjusting expectations warning: .dynamic section for "/lib/libdl.so.2" is not at the expected address warning: difference appears to be caused by prelink, adjusting expectations Reading symbols from /lib/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libssl.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libssl.so.6 Reading symbols from /lib/libcrypto.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypto.so.6 Reading symbols from /lib/libpcre.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libpcre.so.0 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/lib/libgssapi_krb5.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgssapi_krb5.so.2 Reading symbols from /usr/lib/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libkrb5.so.3 Reading symbols from /lib/libcom_err.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libcom_err.so.2 Reading symbols from /usr/lib/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libk5crypto.so.3 Reading symbols from /lib/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libz.so.1 Reading symbols from /usr/lib/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libkrb5support.so.0 Reading symbols from /lib/libkeyutils.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libkeyutils.so.1 Reading symbols from /lib/libselinux.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libselinux.so.1 Reading symbols from /lib/libsepol.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libsepol.so.1 Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `xymond_alert --checkpoint-file=/home/bb/server/tmp/alert.chk --checkpoint-inter'. Program terminated with signal 6, Aborted. #0 0x00dba402 in __kernel_vsyscall () (gdb) bt #0 0x00dba402 in __kernel_vsyscall () #1 0x00605e30 in raise () from /lib/libc.so.6 #2 0x00607741 in abort () from /lib/libc.so.6 #3 0x0063e8cb in __libc_message () from /lib/libc.so.6 #4 0x00648f11 in _int_realloc () from /lib/libc.so.6 #5 0x0064aea6 in realloc () from /lib/libc.so.6 #6 0x006088e5 in __add_to_environ () from /lib/libc.so.6 #7 0x00608657 in putenv () from /lib/libc.so.6 #8 0x0804eb49 in send_alert (alert=0x9ab9d68, logfd=0x9ab8250) at do_alert.c:627 #9 0x0804b62d in main (argc=Cannot access memory at address 0x4a57 ) at xymond_alert.c:890 (gdb) -- Michael Russo, ReadQ Systems Inc. 1 Whitehall Street, 16th Floor, NY NY 10004

3 7

Missing trends graph
by Wim.Nelis＠nlr.nl 20 Jan '14

20 Jan '14

Hello, recently I wrote: > Yesterday I've added a custom (server side) script to extract and show > some statistics of a Windows DNS server, which uses "trends" message to > inform Xymon version 4.3.13. Everything seems to work, only the graph > with the statistics is not shown in test "trends". > > The RRD file is build and if in the URL of an arbitrary graph in > "trends" the service is replaced by the name of the new test, which is > wdnsstats, the expected graph is displayed. The name of the test is > mentioned in both TEST2RRD and GRAPHS in file xymonserver.cfg, and a > "TRENDS:*,wdnsstats" tag is specified for the host. > > Strangely enough, there is another custom test (showing the DNS > statistics of a BIND server) which works in the same way, which is > configured in the same way and whose graph is shown in in test > "trends". > > What can be done to get the new custom graph to show up in "trends"? I found the answer to my question. It turns out that the name of the RRD with the "wdnsstats" data should be "wdnsstats.rrd". After changing the names of the RRDs, their content is shown in the "trends" test. Regards, Wim Nelis. ****************************************************************************************************************** The NLR disclaimer is valid for NLR e-mail messages. This message is only meant for providing information. Nothing in this e-mail message amounts to a contractual or legal commitment on the part of the sender. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. Sender accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. ******************************************************************************************************************

1 0

Web header corruption with cgi calls using xymonmenu.cfg and xymonpage - a workaround
by Mark.Deiss＠xerox.com 20 Jan '14

20 Jan '14

Maybe this has been fixed in Xymon releases 4.3.11+. This is dealing with custom cgi's being placed into cgi-bin/cgi-secure that are calling the xymonpage procedure. Problem is being experienced in 4.3.11. When installing/modifying a custom module, running into corrupt web content with the upper menu installed through the xymonmenu.cfg/XYMONBODYHEADER mechanism via xymonpage. One variables is not being defined (XYMONSERVERSECURECGIURL) and de-referencing of another (XYMONSERVERWWWWURL) during execution. The latter condition is kinky; I tried tracing through xymonpage.c/headfoot.c but ended up getting lost. Until the XYMONSERVESECURECGIURL is ~~encountered in the xymonmenu.cfg, the XYMONSERVERWWWURL is being resolved. Anyways, the problem can be demonstrated below by just setting the XYMONHOME variable and trying the three functions. Functions try1 and try2 are setting xymon environment using either sourcing of configuration file or through the xymoncmd. Results of both show the variables being undefined in the web page generation. If you look at the whole web page generation, there is also something weird with bad ~~duplication after the Help block from the xymonmenu.cfg (at least on my site). Oof... One work around is to explicitly import the xymonserver.cfg content using the "--env" option with the xymonpage call. Function try3 (and try4) works - the variables all get defined. Note: still may need to set up xymon environment for the first portion feeding into the xymonpage pipeline either by sourcing or via the xymoncmd. Looking through the mail archive, noticed others reporting something similar with the custom notes editor package. This work around may help them too. #!/bin/sh export XYMONHOME=<your path>/xymon/server function try1 { # 1) bad iteration, source in everything at parent level - this results in erratic variable # expansion in results, cannot find value for XYMONSERVERSECURECGIURL and XYMONSERVERWWWURL # initially defined but lost on first incidence of XYMONSERVERSECURECGIURL (undefined) . ${XYMONHOME}/etc/xymonserver.cfg echo hello | \ ${XYMONHOME}/bin/xymonpage } function try2 { # 2) bad iteration, source in using xymoncmd - same erratic results exec ${XYMONHOME}/bin/xymoncmd --env=${XYMONHOME}/etc/xymonserver.cfg echo hello | \ ${XYMONHOME}/bin/xymonpage } function try3 { # 3) works, source in everything at parent level - to set up environment for initial # execution (the "echo hello" portion) then also re-introduce environment in # xymonpage using "--env" setting, xymonpage is not reliably picking up runtime # inherittance otherwise exec ${XYMONHOME}/bin/xymoncmd --env=${XYMONHOME}/etc/xymonserver.cfg echo hello | \ ${XYMONHOME}/bin/xymonpage --env=${XYMONHOME}/etc/xymonserver.cfg } function try4 { # 4) works . ${XYMONHOME}/etc/xymonserver.cfg echo hello | \ ${XYMONHOME}/bin/xymonpage --env=${XYMONHOME}/etc/xymonserver.cfg } # run test runs and filter out everything but blown variables - # XYMONSERVERSECURECGIURL and XYMONSERVERWWWURL try1 2>&1 | grep -i xymonserver | head -10 #try2 2>&1 | grep -i xymonserver | head -10 #try3 2>&1 | grep -i xymonserver #try4 2>&1 | grep -i xymonserver

2 1

File check question
by Galen.Johnson＠sas.com 20 Jan '14

20 Jan '14

Hey, I have a question about file tests. The man pages say FILE filename [color] [things to check] [TRACK] I have a test defined as FILE /tmp/ldap2pw.lck red NOEXIST MTIME>900 How does the "[things to check]" actually parse? Is it an "and" or an "or"? In other words, would that read "the file exists AND hasn't been modified for more than 15 minutes" or "the file exists OR hasn't been modified for more than 15 minutes". I'm assuming "and"...actually I need it to be "and" in this case. Or do I have to explicitly say something like "NOEXIST and MTIME>900"? I can't find anything about that. thx =G=

5 5

host grepping
by Galen.Johnson＠sas.com 19 Jan '14

19 Jan '14

Hey, I have to be missing something obvious...is there a command, like xymongrep, that will grep the host file and honor the include? Yes, I could script it but it would be nice if it was avalable...or if xymon grep could search for more than the test but the host or modifiers (like CLIENT: or NAME:). Or am I just an idiot and missing something obvious. thx =G=

4 6