February 2014 - Xymon - Xymon mailman web

Running Custon script on xymon server
by ddschwit＠usgs.gov 04 Feb '14

04 Feb '14

Hi all, I have six computers that I monitor with xymon. On of these computers is acting as the xymon server. The other five are running the client installation. I have custom monitoring scripts that I want to run on all the computers. I put the scripts in xymon/client/ext and modified clientlaunch.cfg on the five client computers and the script runs and the data is sent to the server. The question is, where do I put the custom scripts in the server installation? I tried putting it in client/ext on the server box, but it is not running. Thanks, -- *Dan Schwitalla* U.S. Geological Survey

2 1

Windows log monitoring
by Neil.Simmonds＠express-gifts.co.uk 04 Feb '14

04 Feb '14

Hi all, I want to monitor some windows logs that are named with a date/time stamp using BBWin in central mode. I've tried putting a command in backticks in client-local.cfg ( log:` dir /B D:\Transact\Transact\Server\Logs\*.tr1`:10240 ) but although that command works perfectly in a windows command prompt, I don't get anything monitored. If I hard code the name of the file all works as expected. At the moment I suspect that what I want to do is not possible but I thought I'd check with the mailing list before I go looking in to external scripts to do this. Cheers, Neil. Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

3 3

xymon File has MD5 hash (No MD5 data) - should be
by ciprian.parfon＠gmail.com 04 Feb '14

04 Feb '14

Hello I came to you again, with hope that someone bumped into this problem and could give me some help. I have configured XYmon to check some files with MD5 but it doesn't work as expected. My Xymon server is 4.3.10. On the server I edited 'client-local.cfg' like so [dev] file:/etc/passwd:4736b427730af4ae0d5e11c098be4ff6 file:/etc/shadow:aadf4e9f14a8cceab31d635f9ea5fdb8 Also, I have in analisys.cfg the following entry: HOST=%dev* FILE /etc/passwd MD5=4736b427730af4ae0d5e11c098be4ff6 COLOR=red FILE /etc/shadow MD5=aadf4e9f14a8cceab31d635f9ea5fdb8 COLOR=red On the client: # cat tmp/logfetch.dev.cfg file:/etc/passwd:4736b427730af4ae0d5e11c098be4ff6 file:/etc/shadow:aadf4e9f14a8cceab31d635f9ea5fdb8 The client has all the rights to run 'md5sum' and I also disabled selinux. Any thoughts ? -- Ciprian Parfon System & Network Engineer +40 721879113 ciprian.parfon at gmail.com

2 4

Possible Bug in xymon-client startup script
by ddschwit＠usgs.gov 03 Feb '14

03 Feb '14

Hi all, Scientific Linux 5.x and 6.x xymon 4.3.13 When you establish a different host name in the file /etc/default/xymon-client than the hostname derived by uname -n, the stop and restart commands do not work. If you set CLIENTHOSTNAME in /etc/default/xymon-client to something other than `uname -n`, when the client starts, it creates a file in the form of clientlaunch."CLIENTHOSTNAME".pid The /etc/init.d/xymon-client (rpm/xymon-client.init) script uses a variable called $DMNOPTS that contains configuration items to form the command line options for xymon. This script uses $DMNOPTS in the call to "runclient.sh start". It does not use $DMNOPTS in the call to "runclient.sh stop". This makes the stop process use `uname -n` to look for the pid file. It does not exist and the client does not get stopped. Fix: Change the following line in rpm/xymon-client.init from: su -c "$DAEMON stop" - xymon to: su -c "$DAEMON $DMNOPTS stop" - xymon It needs to be changed in the call to stop and restart the service. Regards, -- *Dan Schwitalla* U.S. Geological Survey

3 2

4.3.15 is available
by henrik＠hswn.dk 03 Feb '14

03 Feb '14

Den 03-02-2014 22:45, Gé Janssen skrev: > Is it possible to test the 5.0 setup? I thought I saw a message that it > was downloadeble was, but I can't find a message. It is available in the "trunk" section on Sourceforge: http://sourceforge.net/p/xymon/code/HEAD/tree/trunk/ Click on the "Download snapshot" button, or use Subversion (svn) to check it out of the source-code system. Regards, Henrik

1 0

headercheck tag?
by Galen.Johnson＠sas.com 03 Feb '14

03 Feb '14

Hey. The 4.3.14 announcement mentioned a new headercheck tag was added...however, I can't find any doc on how to use it. I've grepped the entire source for "headercheck" in 4.3.15 and it comes back empty. I suspect this may be related to my xymonnet core dumps. =G=

2 4

netstat column and netstat.rrd with german windows
by t.koerfer＠gevasys.de 03 Feb '14

03 Feb '14

I use bbwin as client: http://bbwin.sourceforge.net/ b.r. T.K. Von: Jeremy Laidman [mailto:jlaidman at rebel-it.com.au] Gesendet: Donnerstag, 30. Januar 2014 02:26 An: Körfer, Thomas Cc: xymon at xymon.com Betreff: Re: [Xymon] netstat column and netstat.rrd with german windows On 29 January 2014 18:50, Körfer, Thomas <t.koerfer at gevasys.de<mailto:t.koerfer at gevasys.de>> wrote: Of Course, here is an example of an working english windows netstat page: Thanks for the screenshots. Interesting. What client do you use? J

3 2

problems in xymonnet
by marco.avvisano＠regione.toscana.it 03 Feb '14

03 Feb '14

Hi all, Today, I do not know why, xymonnet began to no longer work. (4.3.13) This is the error message: 2014-02-03 11:41:55 Timeout waiting for data from child, killing it 2014-02-03 11:41:55 Timeout waiting for data from child, killing it 2014-02-03 11:41:55 Child process terminated with signal 15 All my network test are purple. I have no problem to ping or telnet my monitored hosts This is my task.cfg : CMD xymonnet --report --ping --checkresponse --trace --test-untagged --timeout=10 --bb-proxy-syntax Any suggestions? thanks Marco

2 2

Ignore and trigger in client-local.cfg
by johan.karlsson＠deltamanagement.se 03 Feb '14

03 Feb '14

Hi! I'm trying to get ignores and triggers to work in client-local.cfg, but can't get it to work. The background is that we have an important log which is extremely active and we are currently missing entries due to this. Rather than setting a huge value for the amount of bytes to send to Xymon (log:filename:size), I want to apply a ignore/trigger combo instead to filter out the noise before sending the log to Xymon. The man page is not very descriptive of the possibilities, it just states: # "ignore EXPRESSION" # Must follow a "log:..." entry. Lines matching the # regular EXPRESSION are not sent to the Xymon server. # "trigger EXPRESSION" # Must follow a "log:..." entry. Lines matching the # regular EXPRESSION are always sent to the Xymon server. # Use this for extremely critical errors that must be # reported. First, is it at all possible to specify a trigger on things we want to pick up, and discard everything else with a "catch all" ignore expression? The logic is like this (but I need help with the syntax): [host1] log:/var/log/host1.log:102400 trigger this|that|stuff ignore everything Regards, Johan Karlsson

2 2

Additional Client messages
by abs＠shadymint.com 03 Feb '14

03 Feb '14

Hi, I have a number of hosts where I need to check the ps listing every minute and alert when something is wrong, but I dont want or need to run the rest of the client agent tests more frequently than the standard 5 minute interval. I thought the answer was to create a client extension to send another ps listing as a client message with a unique Collector ID and run this as frequently as required When I do this, I find on the server that the client data does indeed get updated every minute but the extra ps listing (which I put in a section called '[ps]') is not apparently processed against analysis.cfg. I know I can do this all on the client with a status message but I wanted to keep the configuration central and re-use the PROCS settings in analysis.cfg. Anyone any thoughts how to do this? -- Andy

3 3