October 2014 - Xymon - Xymon mailman web

UP parameter in analysis.cfg
by neilsimmonds1808＠gmail.com 14 Oct '14

14 Oct '14

In my analysis.cfg file (actually in file in an include directory) I have the following entry for 4 hosts, UP 10m -1 red However, it's not turning red and is flagging yellow with the following message, Machine has been up more than 0 days 0 days 21 hours 16 minutes 55 seconds My understanding of the UP check was that the -1 means it will never flag on the toolonglimit. The only thing I can think of as to why this might be happening is that at the very end of my analysis.cfg file I have some defaults which include UP 10m I thought the machine specific entry should take precedence? (The include line for the host specific rules is before the defaults) Regards, Neil.

2 1

list of enabled clients
by KVerMeer＠peoplenetonline.com 14 Oct '14

14 Oct '14

My hosts.cfg file has more than 100 clients, of which several may have alerts disabled at any given time. I would guess there is a xymon command to determine if a particular client is enabled/disabled, or to get a list of all enabled/disabled clients. I have tried to check the man pages, but must not be looking in the right spot. What I'd really like is a way to determine all currently enabled clients. Thanks, Kevin VerMeer [cid:image001.jpg at 01CFE776.832C9D10] 4400 Baker Road, Minnetonka, MN 55343 TOLL FREE 888-346-3486 x 520 | FAX 952-908-6131 www.peoplenetonline.com<http://www.peoplenetonline.com/> PeopleNet is the leading provider of fleet mobility systems to the transportation industry, including truckload, LTL, private, and energy service fleets.

2 2

UP parameter in analyis.cfg
by Neil.Simmonds＠express-gifts.co.uk 14 Oct '14

14 Oct '14

In my analysis.cfg file (actually in file in an include directory) I have the following entry for 4 hosts, UP 10m -1 red However, it's not turning red and is flagging yellow with the following message, Machine has been up more than 0 days 0 days 21 hours 16 minutes 55 seconds My understanding of the UP check was that the -1 means it will never flag on the toolonglimit. The only thing I can think of as to why this might be happening is that at the very end of my analysis.cfg file I have some defaults which include UP 10m I thought the machine specific entry should take precedence? (The include line for the host specific rules is before the defaults) Regards, Neil. Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Conduct Authority NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

1 0

File Monitoring BBWin Clients
by abs＠shadymint.com 13 Oct '14

13 Oct '14

Hi, I am trying to alert when a log on a windows client is not being updated regularly. I have this being returned in the Client Data :- [logfile:D:\XXXX\Logs\YYYY\latest-D.log] type:0x00020 (file) mode:777 (not implemented) linkcount:1 owner:0 (not implemented) group:0 (not implemented) size:4978660 atime:1413190800 (2014/10/13-09:00:00) ctime:1413190800 (2014/10/13-09:00:00) mtime:1413193801 (2014/10/13-09:50:01) and when I put (FILE "%.*latest-D.log" YELLOW mtime<900) in analysis.cfg, Xymon shows the file to be 138 years old :- File was modified 4294963716 seconds ago - should be <900 This is Xymon 4.3.13 and BBWin 0.13 but I see references to very old files as long ago as 2009 (http://sourceforge.net/p/bbwin/discussion/460874/thread/b65f157b/) so I guess this issue has been around for a long time. My first thought is that when compared to Client Data from a Unix client, there is no clock:1412960833 (2014/10/10-17:07:13) line, but in check_file() in xymond/client_config.c, this appears to be covered:- if (clock == 0) clock = getcurrenttime(NULL); ctimedif = clock - ctime; atimedif = clock - atime; mtimedif = clock - mtime; where clock is unsigned int, should that be time_t ? -- Andy

2 1

xymonnet sending status to Xymon 4.3.0~beta2
by xymonliste＠netcologne.de 13 Oct '14

13 Oct '14

Hi, I am trying to send status messages from xymonnet (4.3.17) to another Xymon server still running 4.3.0~beta2. Status messages are transferred via network, no errors are reported in the logfiles. However the status isn't updated on the receiving Xymon server. Sending messages from bbtest-net (4.3.0~beta2) to the receiving server mentioned above works fine. Did the protocol changed between those versions or do you have any other ideas why it isn't working? Best regards Thomas

2 2

Dropping an entire Host from Xymon
by Pierre.Lalonde＠ca.ebarrette.com 10 Oct '14

10 Oct '14

I know that the command to get rid of an host in Xymon is... ~/server/bin/xymon 127.0.0.1 "drop HOSTNAME" But i dont seem able to do it or adapt it for my Xymon. I get this error message : -bash: /home/it/server/bin/xymon: No such file or directory I made a ls of the home/it directory and got libpng-1.5.2 libxml2-2.6.32 openssl-1.0.0d pango-1.17.5 pcre-8.02 rrdtool-1.4.3 web xymon-4.3.3.tar.gz xymon-4.3.4.tar.gz libpng-1.5.2.tar.gz libxml2-2.6.32.tar.gz openssl-1.0.0d.tar.gz pango-1.17.5.tar.gz pcre-8.02.tar.gz rrdtool_1.4.3.orig.tar.gz xymon-4.3.3 xymon-4.3.4 So no server directory.... What i want to do is to remove the history for an host so i can reload it.... It seem to stay purple all the time even if i have restart the BBwin service... reinstall the client... rebooted my Xymon server... Thank you Pierre Lalonde Technicien réseautique Barrette-Chapais Ltée C.P. 248, KM 346 Route 113, Chapais, Qc, CA, G0W 1H0 D: 418.745.2545 F: 418.745.3518 www.batiparbarrette.com<http://www.batiparbarrette.com> [Description : Logo Barrette]

5 4

how to configure xymon server receiving summary info from another xymon server?
by rlhamil2＠gmail.com 09 Oct '14

09 Oct '14

Let's say server a has in its hosts.cfg summary a.All 12.34.56.78 https://a.foo.com/xymon/ How will server b (12.34.56.78) have to be set up to display that overall status? Am I correct in thinking that would that appear as a line with one dot if that's the only summary from "a" being sent to it?

1 0

Auto Acknowledge alert
by Russell.Blumenthal＠stonybrookmedicine.edu 08 Oct '14

08 Oct '14

Is there a way to get a link that when clicked it will auto acknowledge an alert (after the login) with a preset message/time? What I would like to do, ideally, is have a script that emails out the information but also includes a link so that anyone that gets the email can acknowledge the alert just by clicking it. Thanks

3 3

Xymon pull client data setup
by thomas.eckert＠IT-Eckert.de 08 Oct '14

08 Oct '14

Depending on the extent of the security requirements 'ssh-tunnel' may be an alternative. In a nutshell it provides a convenient way to manage an ssh tunnel to clients (opening port 1984 there). Upstream: https://wiki.xymonton.org/doku.php/addons:ssh_tunnel?s[]=ssh&s[]=tunnel Bashified-version with a few tweaks: http://www.it-eckert.com/software/patches/ssh-tunnel/ More background info on usage (incl. combining 1 tunnel with xymonproxy to provide a "hub" for a bunch of EC2 instances): http://www.it-eckert.com/blog/2014/remote-site-monitoring-with-ssh-tunnel/ http://www.it-eckert.com/blog/2014/combine-ssh-tunnel-with-xymonproxy/ Thomas Am 08.10.2014 02:22 schrieb Galen Johnson <solitaryr at gmail.com>: > > also, did you add "pulldata" to the clients in your xymon hosts file. > > On Tue, Oct 7, 2014 at 2:27 PM, Galen Johnson <Galen.Johnson at sas.com> wrote: >> >> I have this working for all my EC2 servers (same issue with security and opening firewall ports back inside). Do you have port open and verified the msgcache service is running on the clients? Also, check the xymon server logs...that's where I found the most helpful info. >> >> >> =G= >> >> >> ________________________________ >> From: Xymon <xymon-bounces at xymon.com> on behalf of Blake <scuba.blake at gmail.com> >> Sent: Tuesday, October 7, 2014 2:17 PM >> To: xymon at xymon.com >> Subject: [Xymon] Xymon pull client data setup >> >> After getting the "piss off" response from security in regards to monitoring systems in the DMZ I need to configure about two dozen systems for pull vs the standard push. >> >> While I have gone through the documentation I am still having a few issues and needed some help. >> >> *Server Changes >> =>updated server/etc/tasks.cfg >> >> [xymonfetch] >> ENABLED >> ENVFILE /app/xymon/server/etc/xymonserver.cfg >> CMD $XYMONHOME/bin/xymonfetch --server=10.1.1.73 --no-daemon --pidfile=$XYMONSERVERLOGS/xymonfetch.pid --interval=60 --log-interval=600 --debug >> LOGFILE $XYMONSERVERLOGS/xymonfetch.log >> >> *Client Changes >> =>updated server/etc/clientlaunch.cfg >> >> [msgcache] >> ENABLED >> ENVFILE $XYMONCLIENTHOME/etc/xymonclient.cfg >> CMD $XYMONCLIENTHOME/bin/msgcache --no-daemon --pidfile=$XYMONCLIENTLOGS/msgcache.pid --debug --logfile=$XYMONCLIENTLOGS/msgcachedaemon.log --max-age=1200 >> LOGFILE $XYMONCLIENTLOGS/msgcache.log >> >> # The main client task >> [client] >> ENVFILE $XYMONCLIENTHOME/etc/xymonclient.cfg >> CMD $XYMONCLIENTHOME/bin/xymonclient.sh >> LOGFILE $XYMONCLIENTLOGS/xymonclient.log >> INTERVAL 5m >> >> =>updated server/etc/xymonclient.cfg >> XYMSRV="127.0.0.1" >> >> Any help to get this working is greatly appreciated. >> >> Thanks >> Blake >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >

2 2

Xymon pull client data setup
by scuba.blake＠gmail.com 08 Oct '14

08 Oct '14

After getting the "piss off" response from security in regards to monitoring systems in the DMZ I need to configure about two dozen systems for pull vs the standard push. While I have gone through the documentation I am still having a few issues and needed some help. *Server Changes =>updated server/etc/tasks.cfg [xymonfetch] ENABLED ENVFILE /app/xymon/server/etc/xymonserver.cfg CMD $XYMONHOME/bin/xymonfetch --server=10.1.1.73 --no-daemon --pidfile=$XYMONSERVERLOGS/xymonfetch.pid --interval=60 --log-interval=600 --debug LOGFILE $XYMONSERVERLOGS/xymonfetch.log *Client Changes =>updated server/etc/clientlaunch.cfg [msgcache] ENABLED ENVFILE $XYMONCLIENTHOME/etc/xymonclient.cfg CMD $XYMONCLIENTHOME/bin/msgcache --no-daemon --pidfile=$XYMONCLIENTLOGS/msgcache.pid --debug --logfile=$XYMONCLIENTLOGS/msgcachedaemon.log --max-age=1200 LOGFILE $XYMONCLIENTLOGS/msgcache.log # The main client task [client] ENVFILE $XYMONCLIENTHOME/etc/xymonclient.cfg CMD $XYMONCLIENTHOME/bin/xymonclient.sh LOGFILE $XYMONCLIENTLOGS/xymonclient.log INTERVAL 5m =>updated server/etc/xymonclient.cfg XYMSRV="127.0.0.1" Any help to get this working is greatly appreciated. Thanks Blake

3 2