February 2014 - Xymon - Xymon mailman web

client-local.cfg and xymon-4.3.15
by dominique.frise＠unil.ch 06 Feb '14

06 Feb '14

I don't agree. The regexp support should not brake previous configuration. BTW, the new man-page has not changed regarding the section name : ... FILE FORMAT The file is divided into sections, delimited by "[name]" lines. A section name can be either an operating system identifier - linux, solaris, hp-ux, aix, freebsd, openbsd, netbsd, darwin - or a hostname. When deciding which section to send to a client, Xymon will first look for a section named after the hostname of the client; if such a section does not exist, it will look for a section named by the operating system of the client. So you can configure special configurations for individual hosts, and have a default configuration for all other hosts of a certain type. It will often be practical to use regular expressions for host- names. To do this you must use [host=<expression>] where <expression> is a Perl-compatible regular expression. The same kind of matching can be done on operating system or host class, using [os=<expresssion>] [class=<expression>] Apart from the section delimiter, the file format is free-form, or rather it is defined by the tools that make use of the config- uration. ... Dominique On 02/05/2014 06:22 PM, Galen Johnson wrote: > If I'm not mistaken, the fix to allow regex in client-local.cfg also > will append all matches as a single entity. If it has several similar > entries, it will munge them together. Check out the new > client-local.cfg man page. You might be able to change monk entry to > [host=monk] and see if that returns what you expect. > > > On Wed, Feb 5, 2014 at 10:51 AM, Dominique Frise > <dominique.frise at unil.ch <mailto:dominique.frise at unil.ch>> wrote: > > Hi, > > We updated our xymon-server from version 4.3.11 to 4.3.15. > The client-local.cfg does not seem to be handled the way it was. > > Example : > > [linux] > log:/var/log/messages:10240 > ignore MARK > trigger Error|error|ERROR > > [monk] > log:/var/log/messages:102400 > ignore mDNSPlatformSendUDP\sgot\__serror\s22 > ignore read_data > log:/var/log/logwatch:10240 > > > Which mean that we want to overwrite default linux settings for > "monk" client. > > But there is the resulting content of logfetch.monk.cfg on the client : > > [xymon at monk tmp]$ cat logfetch.monk.cfg > log:/var/log/messages:10240 > ignore MARK > trigger Error|error|ERROR > log:/var/log/messages:102400 > ignore mDNSPlatformSendUDP\sgot\__serror\s22 > ignore read_data > log:/var/log/logwatch:10240 > > > The default settings are there too !? > Did we missed a patch/advice for this ? > > Thanks, > > Dominique > _________________________________________________ > Xymon mailing list > Xymon at xymon.com <mailto:Xymon at xymon.com> > http://lists.xymon.com/__mailman/listinfo/xymon > <http://lists.xymon.com/mailman/listinfo/xymon> > >

1 0

xymonnet crashing after upgrade to 4.3.15
by Johan.Sjoberg＠deltamanagement.se 06 Feb '14

06 Feb '14

Hi. Updated our server from 4.3.13 to 4.3.15 today, and after that xymonnet has crashed a few times. Is it possible to enable some debug log or something to find out what happens? The error in the xymonnet test is: "red - Program crashed Fatal signal caught!" /Johan

4 9

Proper method to upgrade
by sys1002＠yahoo.com 06 Feb '14

06 Feb '14

I have Xymon 4.3.11 installed and would like to move to 4.3.15, but I do not see any upgrade doc. What is the proper method to do an upgrade from source ? Do I uninstall the previous and install the new version? Should I just install the new over the old version, using the same config options ? Best practices would be appreciated, since this is a Production environment. Centos 5.4 64 bit. Thanks ! Michael

5 6

client-local.cfg and xymon-4.3.15
by dominique.frise＠unil.ch 05 Feb '14

05 Feb '14

Hi, We updated our xymon-server from version 4.3.11 to 4.3.15. The client-local.cfg does not seem to be handled the way it was. Example : [linux] log:/var/log/messages:10240 ignore MARK trigger Error|error|ERROR [monk] log:/var/log/messages:102400 ignore mDNSPlatformSendUDP\sgot\serror\s22 ignore read_data log:/var/log/logwatch:10240 Which mean that we want to overwrite default linux settings for "monk" client. But there is the resulting content of logfetch.monk.cfg on the client : [xymon at monk tmp]$ cat logfetch.monk.cfg log:/var/log/messages:10240 ignore MARK trigger Error|error|ERROR log:/var/log/messages:102400 ignore mDNSPlatformSendUDP\sgot\serror\s22 ignore read_data log:/var/log/logwatch:10240 The default settings are there too !? Did we missed a patch/advice for this ? Thanks, Dominique

1 0

Ack not working properly Xymon 4.3.0.0 beta2 - upgrade?
by rectifier＠gmail.com 05 Feb '14

05 Feb '14

Hello, Acks are not working for me, typically when Ack'ing 2 of the same things in a short space of time. But also randomly, Acking stops working. I have the 'cookie not found, dropping ack' appearing in hobbitd.log but I am not sure if this is a result of the Ack module 'crashing' or a direct cause. I did see some older messages about this and mention of a fix but I combed through all the release notes for all versions and patches since 4.3.0 beta 3 until now. Note I am using an older version of Xymon, 4.3.0.0 beta2 and I was wondering if upgrading would fix this. I have never upgraded Xymon before and I am not sure if it's an easy task or not. My fix has been to restart hobbit.sh but this is removing some acks so it's no longer an option as we have now moved into intensive Ack usage. thanks

3 4

4.3.15 is available
by henrik＠hswn.dk 05 Feb '14

05 Feb '14

Hi, version 4.3.15 landed at Sourceforge a few moments ago. It should fix the unfortunate mishaps in xymond_alert that popped up with the .13 and .14 releases. Besides this, it also adds - by popular demand - support for regular expressions to match hosts in client-local.cfg. Please see the client-local.cfg man-page for more details. And now I think it is time to switch back to focusing on the 5.0 code. Regards, Henrik

4 8

Yellow on 90% Free Swap Space
by mumubash＠gmail.com 04 Feb '14

04 Feb '14

Hello gents, I was wondering if any of you could help me understand how come, even though xymon shows 90%free swap for some host, I get the Yellow alert. I don't have any specific settings for that host only and the DEFAULTS are also fine. How could I make that Yellow warning fixed ? Cheers. Ray

3 3

Xymon procs alert email
by eliap09＠yahoo.com 04 Feb '14

04 Feb '14

I am set to monitor tomcat process, and I got alert email when it is down the problem is the email do not contain any message other than with subject line "procs critical (red) " so it hard to tell what process is down. Interesting thing is I can get full message when httpd down. I have setup the same way tough. Any idea?

2 1

Setting win svcs for monitoring using Display names
by juha.vuori＠pp2.inet.fi 04 Feb '14

04 Feb '14

On 01/31/2014 11:19 PM, Mark Mulligan wrote: > You can add a text string at the end of the SVC statement > > SVC Symantec_AntiVirus startup=automatic status=started "TEXT=Symantec_Endpoint_Protection" > > It will display the text for the SVC so they are more human readable > > Mark Mulligan > > Associate Operations Engineer – Splunk and Xymon Admin > Thank you Mark, That is a bit better.. however, for SVC test HOST=SRV123 SVC D070AF2E-E343-40B9-9F23-45B8572309F4 startup=automatic status=started without TEXT=, e.g. in alert emails for SRV123/svcs, the problem is described as &red D070AF2E-E343-40B9-9F23-45B8572309F4: No matching service - want started/manual but with "TEXT=ServiceA" added to the SVC definition, the description reads &red ServiceA I'd like to give the description "No matching service - want started/manual" to the poor operators getting these alert messages, so some kind of embedding would be needed. Where might this parsing be coded? I could look at the code. This is for 4.3.13, I'll upgrade to the latest level and see if this has been changed somehow.. Br, Juha Vuori

1 0

WinPSClient
by Neil.Simmonds＠express-gifts.co.uk 04 Feb '14

04 Feb '14

Hi, I'm trying out WinPSClient and am having some issues, I've installed as stated in the read me and my config looks like this, XymonPSClient config: servers : 172.28.20.142 clientbbwinmembug : 1 clientconfigfile : C:\Xymon\xymonconfig clientlogfile : C:\Xymon\xymonclient maxlogage : 60 loopinterval : 300 clientname : %COMPUTERNAME% clientremotecfgexec : 0 Settable Params and values: clientbbwinmembug=1 clientconfigfile=C:\Xymon\xymonconfig. clientfqdn=1 clientlogfile=C:\Xymon\xymonclient.log clientlower=1 clientname=%COMPUTERNAME% clientremotecfgexec=0 loopinterval=300 maxlogage=60 reportevt=1 servers=172.28.20.142 slowscanrate=72 wanteddisks=3 wantedlogs=Application System Security I've started the service but I'm not seeing any data on the server. Any idea where I might have gone wrong? Server is running Windows Server 2008 R2 32bit and I've set powershell executionpolicy to unrestricted. Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

2 2