November 2014 - Xymon - Xymon mailman web

duration of MSG red status
by nskyrca＠syr.edu 07 Nov '14

07 Nov '14

Hello, I think this has been asked before, but it was a long time ago and I wondered if something changed since then. How long will the status of MSGS stay red? We just setup monitoring recently and it seems like it stays red for about 30 minutes. Is that normal? Is this configurable? We are running Xymon server 4.2.3. Thanks, Nicole

5 10

Bug Fix memstat.ksh on Solaris 11.2
by everett.vernon＠gmail.com 06 Nov '14

06 Nov '14

Hi all I have updated this script on Xymonton. https://wiki.xymonton.org/doku.php/monitors:memstat Couple of "bugs" came up. Firstly, Solaris 11 no longer supports setUID for root owned scripts. You now need to use sudo, which, thankfully, is installed by default. Then came a real interesting one when we upgrades to Solaris 11.2 The memstat script uses echo "::memstat" | mdb -k to collect the memory usage snapshot. Except, in Solaris 11.2, there are a few new values. The most interesting is, ZFS File Data has been split into ZFS File Data and ZFS Metadata, which is great, except that graphing sees both as haivng the NCV same index. So I had to make a change for that. Then there's a real odd-ball. Another entry appears, called Guest. I have never seen it ahve any other value besides 0, but it's there nonetheless. And every so often, I also get an entry "In temporary use". I kid you not! And it messes up the graphs. The changes should make it all work nicely on Solaris 10, 11, and 11.2 And it should work with setUID and sudo. Take your pick. Regards Vernon -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

1 0

devmon mysterious behaviour
by christian.becker＠rhein-zeitung.net 06 Nov '14

06 Nov '14

Hello folks, we are running a Xymon 4.3.11 environment that persists of a server running Red Hat Enterprise Linux 6.1 64 Bit. This setup also includes devmon (0.3.1-beta1). In this environment, devmon works like a charm. Now we are in the situation to go away from Red Hat Enterprise Linux and go ahead to Ubuntu 14.0.4.1 LTS 64 Bit. This is an internal decision. On this new environment I have set up Xymon 4.3.17, including devmon, which is the same release as in our "old" environment. But here, I have mysterious problem, for which I cannot find an explanation: In the "old" environment, there is a Cisco 6506, that is "asked" by devmon. For any reason, in this environment devmon doesn't get any data out of this Cisco device. It says "Missing repeater data for primary OID #######" (the "#######" is just an example....). The mysterious thing now is, that in the "new" environment, devmon (some times...) extracts data out of this Cisco device, but -and this is the most confusing thing- every now and then it is changing from "purple" to "clear" (again saying "Missing repeater data for primary OID ####### ".), and on any time it changes back to "green" containing current data. The devmon logfile doesn't seem to contain any hint on this situation. I have really no idea why this could happen. Does anybody of you have an idea about this behavior? Greetings Christian Christian Becker IT-Services Christian.Becker at rhein-zeitung.net<mailto:Christian.Becker at rhein-zeitung.net> _________________________________ Mittelrhein-Verlag GmbH August-Horch-Straße 28 D-56070 Koblenz Verleger und Geschäftsführer: Walterpeter Twer Reg.-Gericht Koblenz HRB 121 Finanzamt Koblenz Str.Nr. 22 65 10 285 2 www.rhein-zeitung.de<http://www.rhein-zeitung.de/>

4 4

You don't have permission.
by Andreb＠paym8.co.za 05 Nov '14

05 Nov '14

Hi Guys, Trying to access Xymon from another Pc with Chrome and the following error shows. You don't have permission to access /xymon/xymon.html on this server. I did get this also previously and got passed it, but for the life of me I can't remember what I did. I have changed the dir permissions and also I have added "require all granted" to the httpd conf and such. Any advice Regards

3 2

Email and website notifications wrong IPs
by tres.finocchiaro＠gmail.com 04 Nov '14

04 Nov '14

We had this issue and it was caused by invalid settings in our DNS server. Xymon seems to attempt a DNS resolution prior to using the hard-coded IP address, which was tremendously confusing for us, but identified a problem were were unaware of. -Tres - Tres.Finocchiaro at gmail.com On Tue, Nov 4, 2014 at 11:13 AM, Neal, Jonathan W via Xymon <xymon at xymon.com > wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: "Neal, Jonathan W" <wes.neal at verizon.com> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Date: Tue, 4 Nov 2014 11:12:50 -0500 > Subject: Email and website notifications wrong IPs > > Emails for some of my systems on the new Xymon server are going out with > bad IPs in them. > > > > The system is correct in hosts.cfg and it seems it is monitoring the > correct host, but when it alerts on it, Xymon puts the wrong IP in the > email and it also puts the wrong IP on the webpage. If I grep for that > incorrect IP, it doesn’t exist in $xymon/server/etc anywhere. > > > > From notifications log I see this: > > Tue Nov 4 15:21:34 2014 DTAMMI-DYN2.conn (XXX.XXX.25.228) EMAIL ADDRESS > > > > But the email it sends out says this: > > System unreachable for 4014 poll periods (1211916 seconds) > > > > &red XXX.XXX.19.160 is unreachable > > > > If I look at the Xymon webpage for it also has this address listed: > > > > XXX.XXX.19.160 is unreachable > > > > Any idea what might be causing this? > > > > Wes Neal > > > >

3 3

Email and website notifications wrong IPs
by wes.neal＠verizon.com 04 Nov '14

04 Nov '14

Emails for some of my systems on the new Xymon server are going out with bad IPs in them. The system is correct in hosts.cfg and it seems it is monitoring the correct host, but when it alerts on it, Xymon puts the wrong IP in the email and it also puts the wrong IP on the webpage. If I grep for that incorrect IP, it doesn't exist in $xymon/server/etc anywhere. >From notifications log I see this: Tue Nov 4 15:21:34 2014 DTAMMI-DYN2.conn (XXX.XXX.25.228) EMAIL ADDRESS But the email it sends out says this: System unreachable for 4014 poll periods (1211916 seconds) &red XXX.XXX.19.160 is unreachable If I look at the Xymon webpage for it also has this address listed: XXX.XXX.19.160 is unreachable Any idea what might be causing this? Wes Neal

1 0

How to handle SSL Cert Clients with same hostname reporting to xymon
by paul＠shadowsoft.com 03 Nov '14

03 Nov '14

Folks, I have a Godaddy cert that is suppose to work on multiple servers BUT they must have the same hostname. If I put the same hostname on the servers the Cert works but xymon is not happy. Is there a way to collect data from 3 different ips that have the same hostname and they report separately? Paul Jordan

2 1

Status propagation
by SKreien＠la-z-boy.com 03 Nov '14

03 Nov '14

Hi Everyone, Wondering if this is possible... I have a series of pages, like so: Xymon.html-->subpage Service1.html -->subpage Pilot Xymon.html-->subpage Service1.html -->subpage UAT Xymon.html-->subpage Service1.html -->subpage Prod Etc... I am currently using the NOPROP tags to keep them from propagating upward, but the problem I have with that tag is that I still want the entire page to change color for hosts on that page. But I don't want the status changes propagating to higher views. What I'd like is for a host on subpage Pilot to be able to turn the Pilot page red including the status on Service1.html, but the status view on the top level Xymon.html page for Service1.html is still green. It makes things stand out a bit more on the actual page without giving false impressions on the top level page. Any ideas if that's possible? Thanks! Scot Kreienkamp This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

1 0

alert for non 200 status from log monitoring
by deepakdeore2004＠gmail.com 01 Nov '14

01 Nov '14

Hi, I want to trigger alert if there is non 200 status in below tomcat access logs. I have enabled logs monitoring in client-local.cfg, eg. below log has non-200 status in 3rd field from last. 10.10.10.10 - - [31/Oct/2013:15:45:56 +0000] GET /some/long/url HTTP/1.0 404 2531 161 How can i define that pattern in analysis.cfg, i can define for 404 as below but would like to alert for all non 200. LOG %/path/to/log_file/access\.[0-9]*-[0-9]*-[0-9]*\.log " 404 " COLOR=red Thanks, Deepak

2 1