March 2014 - Xymon - Xymon mailman web

maint-senders question
by colin.coe＠gmail.com 13 Mar '14

13 Mar '14

Hi all Just wondering if xymond can be configured so that specific nodes listed in maint-senders are only allowed to disable tests for specific clients, not all clients. For example, if client1 is listed in maint-senders, can it be configured to only be allowed to disable tests for client 2, not itself or client3? Thanks CC -- RHCE#805007969328369

1 0

How to reply to an email?
by brad.morris＠depi.vic.gov.au 13 Mar '14

13 Mar '14

Hi there, I have posted a question and via the daily Digest I got the answer I was after but I have no idea how to respond to that? Cheers, Brad. Notice: This email and any attachments may contain information that is personal, confidential, legally privileged and/or copyright. No part of it should be reproduced, adapted or communicated without the prior written consent of the copyright owner. It is the responsibility of the recipient to check for and remove viruses. If you have received this email in error, please notify the sender by return email, delete it from your system and destroy any copies. You are not authorised to use, communicate or rely on the information contained in this email. Please consider the environment before printing this email.

1 0

"procs" monitoring
by sidiney＠redix.com.br 13 Mar '14

13 Mar '14

Hello Mike, Thanks for reply, in your case change valeus solved the problem? I'll change and test. 2014-03-13 17:00 GMT-03:00 Mike Burger <mburger at bubbanfriends.org>: > > Hello, > > > > Thanks for the reply. I checked the folder "tmp" and the msg file. > > <hostname> Has 72K, and all files from tmp folder add 100K, I believe > that > > this is not the problem. > > > > What parameter that you changed in xymonclient-os.sh? In my case is > linux. > > About MAXDATA parameter, which is the default value? Therefore found no > > parameter in this xymonserver.cfg > > > I was running into a situation where my messages, data and/or status was > incomplete. > > I set the following, to compensate: > > MAXLINE="32768" > MAXMSG_CLIENT=1536 # clientdata messages (default=512k) > MAXMSG_STATUS=1536 # general "status" messages (default=256k) > MAXMSG_DATA=1536 # "data" messages, if enabled > (default=256k) > > I strongly recommend increasing your values as mentioned by Torsten. > > -- > Mike Burger > http://www.bubbanfriends.org > > "It's always suicide-mission this, save-the-planet that. No one ever just > stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > >

2 1

"procs" monitoring
by sidiney＠redix.com.br 13 Mar '14

13 Mar '14

Hi all, I have a problem and i'm unable to resolve . Under " PROCS " , sometimes the Xymon just not sending the message completely , as follows: Problem situation : Accuse as if they were not running , and the list of processes does not come entirely. Wed Mar 12 09:46:48 EDT 2014 - Processes NOT ok green udevd (found 3 , req . 1 or more) green sshd (found 1 , req . 1 or more) green master ( found 1 , req . 1 or more) green crond (found 1 , req . 1 or more) red clamd (found 0 , req . 1 or more) green amavisd (found 3 , req . 1 or more) red xinetd (found 0 , req . 1 or more) red slapd (found 0 , req . 1 or more) green rsyslogd (found 1 , req . 1 or more) green ntpd (found 1 , req . 1 or more) USER PID PPID PRI STARTED S % CPU % MEM TIME RSZ VSZ CMD Oct 03 1 0 root S 19 0.0 00:00:07 0.0 1396 19352 / sbin / init Postfix 08:34:26 453 21763 S 19 0.0 00:00:00 0.0 5376 98228 smtpd -n [ 127.0.0.1 ] : 10025 - t inet - u-o content_filter = -o = -o local_recipient_maps virtual_mailbox_maps = virtual_alias_maps = -o it relay_recipient_maps smtpd_restriction_classes = it = it = in - the smtpd_delay_reject smtpd_client_restrictions = permit_mynetworks , reject it smtpd_data_restrictions smtpd_end_of_data_restrictions = it = it = it smtpd_helo_restrictions smtpd_milters smtpd_sender_restrictions = it = it = in - the smtpd_reject_unlisted_sender smtpd_relay_restrictions = - the smtpd_recipient_restrictions = permit_mynetworks , reject- the mynetworks_style = host mynetworks = 127.0.0.0 -o / 8 , [ :: 1 ] / 128 = yes it strict_rfc821_envelopes it smtpd_error_sleep_time = 0 it smtpd_soft_error_limit = 1001 = 1000 it smtpd_hard_error_limit it smtpd_client_connection_count_limit = 0 = 0 it smtpd_client_connection_rate_limit it receive_override_options = no_header_body_checks , no_unknown_recipient_checks , no_address_mappings it local_header_rewrite_clients = it = syslog_name postfix / amavisd Postfix 09:39:49 553 21763 S 19 0.0 00:00:00 0.0 3300 51276 smtp- t unix - u Oct 03 558 1 root S 23 0.0 00:00:00 0.0 316 10908 / sbin / udevd - d Oct 03 988 558 root S 21 0.0 00:00:00 0.0 336 10904 / sbin / udevd - d 03 Oct 1430 1 root S 19 0.0 0.0 3344 185132 01:57:04 / usr / sbin / vmtoolsd 03 Oct 1547 1 root S 19 0.0 02:30:58 0.0 6068 256212 / sbin / rsyslogd -i / var / run / c - syslogd.pid 5 03 Oct 1595 1 root S 19 0.0 00:01:35 0.0 1288 452264 automount - pid - file / var / run / autofs.pid 03 Oct 1616 1 root S 19 0.0 00:00:07 0.0 616 66252 / usr / sbin / sshd Ntp 03 Oct 1632 1 S 19 0.0 00:00:12 0.0 1132 25936 ntpd - u ntp : ntp - p / var / run / ntpd.pid - g 03 Oct 1687 1 root S 19 0.0 00:03:08 0.0 784 117280 crond Postfix 09:07:23 1731 21763 S 19 0.0 00:00:00 0.0 6240 100456 465 smtpd -n - t inet - u - stress = -o content_filter = scan : [ 127.0.0.1 ] : 10030 -o = yes smtpd_tls_wrappermode it smtpd_sasl_auth_enable = yes it smtpd_client_restrictions = it = smtpd_data_restrictions it smtpd_helo_restrictions = it = smtpd_recipient_restrictions = permit_sasl_authenticated smtpd_relay_restrictions it , reject it syslog_name = postfix / smtps it milter_macro_daemon_name = ORIGINATING 03 Oct 1749 1 root S 19 0.0 00:00:01 0.0 544 100924 rhnsd Zimbra Mar 1761 30637 07 S 19 0.1 00:07:51 0.1 26904 784316 / opt / zimbra / opendkim / sbin / opendkim -x / opt / zimbra / conf / opendkim.conf - u zimbra 03 Oct 1793 1 root S 19 0.0 0.0 492 103888 00:00:00 / usr / bin / rhsmcertd Zimbra Mar 1 3534 10 S 19 0.0 00:00:19 0.6 100476 217852 / opt / zimbra / amavisd / sbin / amavisd ( master) 03 Oct 4469 1 root S 19 0.0 00:00:00 0.0 464 4060 / sbin / mingetty / dev/tty1 03 Oct 4499 1 root S 19 0.0 00:00:00 0.0 464 4060 / sbin / mingetty / dev/tty2 03 Oct 4504 1 root S 19 0.0 00:00:00 0.0 464 4060 / sbin / mingetty / dev/tty3 03 Oct 4509 1 root S 19 0.0 00:00:00 0.0 464 4060 / sbin / mingetty / dev/tty4 Oct 03 4515 558 root S 21 0.0 00:00:00 0.0 328 10904 / sbin / udevd - d 03 Oct 4546 1 root S 19 0.0 00:00:00 0.0 464 4060 / sbin / mingetty / dev/tty5 03 Oct 4560 1 root S 19 0.0 00:00:00 0.0 464 4060 / sbin / mingetty / dev/tty6 Has anyone experienced this and know how to treat?

3 3

Exclude Windows service Monitor for host
by brad.morris＠depi.vic.gov.au 13 Mar '14

13 Mar '14

Hi all, We have xymon running and have the following in the analysis.cfg CLASS=win32 SVC VMTools startup=automatic status=started The problem is we have about 10 servers that are physical of over 200 servers so of course we now get warnings from xymon is reporting the service VMTools as RED. How can I configure the system to exclude the physical servers from reporting the VMTools service is not running when it is not even installed on the physical servers? Thanks, Brad. Notice: This email and any attachments may contain information that is personal, confidential, legally privileged and/or copyright. No part of it should be reproduced, adapted or communicated without the prior written consent of the copyright owner. It is the responsibility of the recipient to check for and remove viruses. If you have received this email in error, please notify the sender by return email, delete it from your system and destroy any copies. You are not authorised to use, communicate or rely on the information contained in this email. Please consider the environment before printing this email.

2 1

Can't clear ghost clients - RESOLVED
by kspringer＠innovateteam.com 12 Mar '14

12 Mar '14

I still monitor the ghost machines. I've just given them different names. I just checked each host and the name defined in it's xymon client host file matches the current server host file. I seem to have been able to fix the issues. For each one I just added the CLIENT: option into the server hosts.cfg file. CLIENT:Buzzard The xymon server seems to want the real hostname of each machine instead of the name I'm defining in the client config file. So, I guess a workaround is to use the CLIENT: option. I've had to use that also for some special hosts that I have custom scripts running on. If I didn't add the CLIENT: option the data would not post to the server webpage. Thank you. ------------------------------------------------ Kris Springer ======================= From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Adam Goryachev Sent: Tuesday, March 11, 2014 9:57 PM To: xymon at xymon.com Subject: Re: [Xymon] Can't clear ghost clients On 12/03/14 15:04, Kris Springer wrote: I've got 6 ghost clients listed on my server webpage. I have a clean hosts.cfg file that definitely does not contain any of the names in the ghost list. The ghost names are from many months ago when I first setup the server. I've since change the names. I've attempted to clear the ghosts using the following commands but it doesn't clear anything. Buzzard is one of the hostnames in question. #cd /usr/lib/xymon/server/bin #xymon 127.0.0.1 "drop Buzzard" Anyone have a clue as to how to clear old ghosts and/or where to find the pesky files that are causing it? ghosts are there *because* you do not have them in your config file. They are "generated" by clients reporting status with that name. You should be able to determine where these reports are coming from based on the names and/or source information on the ghost report. If the client stops reporting, it will be removed from the ghost report after 5 minutes (I assume this is actually the timeout value of the status which is usually 5 minutes). Worst case, you can firewall port 1984 to block the incoming status reports, or use tcpdump to determine where they are coming from. Hope this is useful/helpful. Regards, Adam -- Adam Goryachev Website Managers www.websitemanagers.com.au

2 1

[FOUND_PHI_RECORD]grep error in alert script
by KVerMeer＠peoplenetonline.com 12 Mar '14

12 Mar '14

In putting together an alert script, a fairly simple grep command is used, which on occasion has given the following error. /bin/grep: (standard input): Resource temporarily unavailable Seems like this is at least partially related to several alerts coming at the same time. Has anyone seen this error before, and figured out a way to address? Thanks.

1 0

canceling acknowledgements
by lebarber＠gmail.com 12 Mar '14

12 Mar '14

Is there some way to cancel an 'ack' after it has been issued? Thanks, Larry Barber

4 5

Can't clear ghost clients
by kspringer＠innovateteam.com 12 Mar '14

12 Mar '14

I've got 6 ghost clients listed on my server webpage. I have a clean hosts.cfg file that definitely does not contain any of the names in the ghost list. The ghost names are from many months ago when I first setup the server. I've since change the names. I've attempted to clear the ghosts using the following commands but it doesn't clear anything. Buzzard is one of the hostnames in question. #cd /usr/lib/xymon/server/bin #xymon 127.0.0.1 "drop Buzzard" Anyone have a clue as to how to clear old ghosts and/or where to find the pesky files that are causing it? Thank you. ------------------------------------------------ Kris Springer

5 6

Support for ZFS?
by novosirj＠ca.rutgers.edu 12 Mar '14

12 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/11/2014 08:19 PM, Mark Felder wrote: > On Mar 11, 2014, at 18:49, Novosielski, Ryan > <novosirj at ca.rutgers.edu> wrote: > >> Didn't you see the other e-mail? Scott Brian says it does. > > Whoops, my apologies. It does seem to graph it strangely on > FreeBSD; I wasn't aware this was expected behavior. I was hoping > it would do a better job of being able to determine the true amount > of free space. None needed; I'm curious, is it handled differently on FreeBSD than Solaris? Solaris shows the total field for all of the FS in the same pool as the same value. So for example, pool1/fs1, pool1/fs2, etc. all have the same "total" space and the usage is a percentage of that total space. A different pool would have a different same value for the total size. You can change that, though, by assigning ZFS quotas; it sets a size cap for an FS, so the usage will be a percent of the capped size. - -- ____*Note: UMDNJ is now Rutgers-Biomedical and Health Sciences* || \\UTGERS |---------------------*O*--------------------- ||_// Biomedical | Ryan Novosielski - Sr. Systems Programmer || \\ and Health | novosirj at rutgers.edu - 973/972.0922 (2x0922) || \\ Sciences | OIT/EI-Academic Svcs. - ADMC 450, Newark `' -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlMfu1wACgkQmb+gadEcsb78ogCfcLg4f5VTPlCyQn0QQvOe8z1F Nm8Anj7fQp83+XzodWIt2ftfOqUdUuL4 =Zv19 -----END PGP SIGNATURE-----

1 0