April 2014 - Xymon - Xymon mailman web

question on DURATION and DOWNSECS in alerts
by Carl.Inglis＠rakon.com 08 Apr '14

08 Apr '14

http://www.xymon.com/xymon/help/manpages/man8/xymond_alert.8.html: "--cfid If this option is present, alert messages will include a line with "cfid:N" where N is the linenumber in the alerts.cfg file that caused this message to be sent." So for example, one of my recent alert messages has this as the subject line: "Xymon [41173] lin-sharepnt-01:disk warning (YELLOW) [cfid:161]" Add --cfid to the CMD in the [alerts] section of tasks.cfg Regards, Carl Carl Inglis Systems Administrator Rakon UK Limited Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom Tel: +44 1522 812630 | Fax: +44 1522 812664 | Mob: +44 7786 552915 Carl.Inglis at rakon.com | www.rakon.com -----Original Message----- From: Kevin VerMeer [mailto:KVerMeer at peoplenetonline.com] Sent: 07 April 2014 17:00 To: Carl Inglis Subject: RE: [Xymon] question on DURATION and DOWNSECS in alerts I checked my alerts.cfg and don't think this is the cause, but it's a good theory. How/where is the --cfid option set? Having this set may lead me closer to the issue. And where is the output sent? Much appreciated. -----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Carl Inglis Sent: Monday, April 07, 2014 10:39 AM To: xymon at xymon.com Subject: Re: [Xymon] question on DURATION and DOWNSECS in alerts I had a similar problem and what helped me track it down was the --cfid option to xymond_alert. I found the rule I thought was firing wasn't the rule that was actually firing - it was a catch-all that I'd left in by mistake. Hope that helps. Carl Carl Inglis Systems Administrator Rakon UK Limited Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom Tel: +44 1522 812630 | Fax: +44 1522 812664 | Mob: +44 7786 552915 Carl.Inglis at rakon.com | www.rakon.com THE QUEENS AWARDS FOR ENTERPRISE 2012 Rakon UK Ltd This message together with any attachments contains confidential information and may be subject to privilege. If you are not the intended recipient you may not distribute it in any way, you must notify the sender immediately and delete any copies of the message along with its attachments. Rakon UK Ltd is a limited company registered in England and Wales. Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS Company Registration Number: 5128090. Please be aware that Rakon UK Limited may monitor email traffic data including the date, time, subject line, sender and recipients for the purposes of security and usage monitoring. Automated monitoring systems may also be applied to ascertain whether incoming/outgoing emails are likely to contain viruses, other destructive devices or inappropriate content. -----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Kevin VerMeer Sent: 07 April 2014 16:23 To: J.C. Cleaver Cc: xymon at xymon.com Subject: Re: [Xymon] question on DURATION and DOWNSECS in alerts We are just starting with our Xymon setup, so I pretty much assume any issues are on our/my end. We are running 4.3.13. It does not appear to be waiting 15m before sending. The default is minutes, correct? -----Original Message----- From: J.C. Cleaver [mailto:cleaver at terabithia.org] Sent: Monday, April 07, 2014 10:01 AM To: Kevin VerMeer Cc: xymon at xymon.com Subject: Re: [Xymon] question on DURATION and DOWNSECS in alerts On Mon, April 7, 2014 5:55 am, Kevin VerMeer wrote: > I have a question on what I am seeing in some of the alerts being > generated. > I have a xymon alert script set up for connection events. > The alert.cfg entry is: > HOST=* SERVICE=conn COLOR=red > SCRIPT /usr/local/xymonutil/alertscripts/noconnectivity.sh > DURATION>15 REPEAT=15 RECOVERED > > To me that says the script should only be invoked if connectivity is > down for 15 minutes, repeat every 15 if still down, and one final time > when connectivity is back up. > > Within the script that gets invoked, a message gets creates like this: > MSG="Xymon is reporting no connectivty to $STATION.\n Current time: > $DATE.\n Number of seconds down: $DOWNSECS. \n Time down: $TIMEDOWN. \n" > > And one MSG that is generated is > Xymon is reporting no connectivty to sta10143. > Current time: 04/06/14 18:00:55. > Number of seconds down: 60. > Time down: 00:01:00. > > I would have expected the $DOWNSECS variable to be the total time > down, even including the original 15 minute DURATION. > Is that thinking correct? Or does DOWNSECS only include the time down > after the DURATION kicks in? > Or am I off base on something else? > Kevin, We're doing something similar and - AFAIK - $DOWNSECS is indeed the total duration of the incident (although this may be subject to any flap detection that's enabled). Q's: What version are you running? and Does it actually wait 15m before sending the first message? Regards, -jc _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

2 3

Xymon 4.3.17 - Remote Status Display
by cure4all＠gmail.com 07 Apr '14

07 Apr '14

I have 1 xymon server version 4.3.13 and the other is 4.3.17. From the server 4.3.13 I can see the "Remote Status Display" list, but nothing on 4.3.17. There is no error showing in the logs also. Thank you. >From hosts.cfg; summary xymon.All 10.10.10.10 http://xymon.something.com/xymon/ Rey

1 0

question on DURATION and DOWNSECS in alerts
by KVerMeer＠peoplenetonline.com 07 Apr '14

07 Apr '14

I have a question on what I am seeing in some of the alerts being generated. I have a xymon alert script set up for connection events. The alert.cfg entry is: HOST=* SERVICE=conn COLOR=red SCRIPT /usr/local/xymonutil/alertscripts/noconnectivity.sh DURATION>15 REPEAT=15 RECOVERED To me that says the script should only be invoked if connectivity is down for 15 minutes, repeat every 15 if still down, and one final time when connectivity is back up. Within the script that gets invoked, a message gets creates like this: MSG="Xymon is reporting no connectivty to $STATION.\n Current time: $DATE.\n Number of seconds down: $DOWNSECS. \n Time down: $TIMEDOWN. \n" And one MSG that is generated is Xymon is reporting no connectivty to sta10143. Current time: 04/06/14 18:00:55. Number of seconds down: 60. Time down: 00:01:00. I would have expected the $DOWNSECS variable to be the total time down, even including the original 15 minute DURATION. Is that thinking correct? Or does DOWNSECS only include the time down after the DURATION kicks in? Or am I off base on something else? Appreciate any thoughts on this. Thanks. Kevin

3 4

Issues with web menu display
by skadz＠skadz.com 04 Apr '14

04 Apr '14

I've upgraded a couple of my Xymon servers this week (to make sure I was seeing this issue on both) to 4.3.17. Both installed from RPMs I built, which have worked for many years. After this upgrade, I'm seeing some strangeness with the web menus. I dont' see this on the main Xymon page, but when I go to look at details of a test, I see the menu showing up like the attached picture. Both systems are 64bit CentOS 5. I looked at the source and see some stray code: /acknowledge.sh">Acknowledge alert</a><span class="invis"> | </span> (and one or two other times). I looked around and don't seem to see to be able to find anywhere in a text file that I could look to see if I could fix this. Can anyone give me a clue of where I should be looking to figure this out? I've also attached the full html where you can see the stray lines. Thanks! Skadz

2 2

alert script timing issue?
by KVerMeer＠peoplenetonline.com 04 Apr '14

04 Apr '14

I have set up a SCRIPT in alerts.cfg that runs when connectivity to any monitored client goes red. HOST=* SERVICE=conn COLOR=red SCRIPT /usr/local/xymonutil/alertscripts/noconnectivity.sh DURATION>15 REPEAT=15 RECOVERED Inside the script, it does a few things, one of which is to get the NAME associated with the client reporting the issue. It does this by: STATION=`$XYMON $XYMONSERVERHOSTNAME "hostinfo host=$BBHOSTNAME" | $SED -e 's/|/\n/g' | $GREP NAME | $CUT -d: -f2` I have seen instances where connectivity is lost to several clients at the same time, and it appears that this STATION value is getting the same value for different lost connections. For example, if there are 2 clients, with NAME value of STATION1 and STATION2, and connectivity is lost to both clients at the same time, the SCRIPT is run two times, but each run of the script will get STATION2 as the result of the above command. As there anything wrong with my logic? Is there a better/different way to approach this? Any thoughts or suggestions are appreciated. Thanks. Kevin

2 1

test of pultiple ports for same service on same host
by xymon＠elysiria.fr 04 Apr '14

04 Apr '14

Hello! I would like to monitor the same TCP service, on the same host, but running on 2 different ports. In fact, I run an MX server and it should be opened on port 25 (of course), and also on port 587 (for local network authenticated submissions). So I would like to monitor, on the same host, SMTP on port 25 and on port 587. If I write "0.0.0.0 myhost # smtp smtp:587" in "bb-hosts", it does not work and only the last directive ("smtp:587") is taken into account. What should I do? Create a new service in file "bb-services" called maybe "smtp-submission", cloning the "smtp" one and adding the 587 port? Or does somebody have another solution in mind? Thanks. -- Christian

4 4

increasing the timeout value
by bb4＠richter-it.net 04 Apr '14

04 Apr '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi fellows, we have some servers at a customers location that we have to monitor. Unfortunately the network connection is not very fast and so I am seeing a lot of timeout messages in xymonclient.log on these machines. Is it possible to increase the value of 15 seconds with a config file entry or do I have to change it in the source code and recompile or is it not possible at all? TIA Torsten - -- +---------------------------------------------------------+ | E-mail : bb4 [at] richter-it.net | | | | Homepage: http://www.richter-it.net/ | +---------------------------------------------------------+ Download my public key from: http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iEYEARECAAYFAlM9ftcACgkQ7DlmxomQk6yrVwCg3hY/4z4rCNCf62ThvzZIGDsz pXQAn2d44QSxxQAk+FTjq9Lx1s7U7Lw9 =8rwf -----END PGP SIGNATURE-----

2 1

Question about the data message format and rrd
by klaas.eenkhoorn＠vtspn.nl 04 Apr '14

04 Apr '14

Dear All, What format must a data message have to get rrd data from a test into a graphic ? I have been testing this functionality but have not been succesfull so far. The test i have made counts the total number of users on the system according to there first three characters of there username. Like: abc : 20 def : 15 ghi : 0 So far i've used the ncv option to generate a statistical graphic over time but now i would like to use the data message format. I've constructed the following data message: [statistics.rrd] DS:abc:GAUGE:600:0:U 20 DS:def:GAUGE:600:0:U 15 DS:ghi:GAUGE:600:0:U 0 >From the client the message will be send with: "data application.vmware.local.trends `cat /tmp/message`" Result: Sometimes the file statistics.rrd in ~/data/rrd/application.vmware.local gets an update sometimes not. And if it gets filled or created the value will be empty. This is determent by using 'rrdtool dump statistics.rrd' The version is xymon 4.3.12. What do i do wrong ? Met vriendelijke groet, Klaas D. Eenkhoorn ------------------------- Disclaimer ---------------------------- De informatie verzonden met dit e-mailbericht (en bijlagen) is uitsluitend bestemd voor de geadresseerde(n) en zij die van de geadresseerde(n) toestemming kregen dit bericht te lezen. Kennisneming door anderen is niet toegestaan. De informatie in dit e-mailbericht (en bijlagen) kan vertrouwelijk van aard zijn en binnen het bereik van een geheimhoudingsplicht en/of een verschoningsrecht vallen. Indien dit e-mailbericht niet voor u bestemd is, wordt u verzocht de afzender daarover onmiddellijk te informeren en het e-mailbericht (en bijlagen) te vernietigen. -----------------------------------------------------------------

2 1

Suggestions for tablet solution for Xymon monitoring
by jlaidman＠rebel-it.com.au 04 Apr '14

04 Apr '14

Thanks Paul. On 1 April 2014 00:14, Root, Paul T <Paul.Root at centurylink.com> wrote: > The Xymon app for android is XymonQV. It works very well. It just gives > you an overview. You can see what is alarm, but you don't get details or > graphs. > > > In my case, my Xymon server is well within my firewall. But with just a > few key shell scripts externally facing web servers, I get what I need. > > > > There isn't anything for IOS. You just use the web browser. And with a > tablet, you would probably just want to use the web browser and not bother > with XymonQV. > > > > I have an iPad and an android phone. Personally, I like Android better. > That's just personal. I'm also an old school Unix person. Can't stand PCs, > etc. Just full disclosure. > > > > iPads have better, easier VPN setups, especially for Cisco VPNs. But > 'VpnCilla' on android works very well. There is ssh clients available for > both. VNC for both. There are VMware clients available for both but my > require a (free) appliance to get connectivity. > > > > So for a single purpose to make the decision of what to get. The biggest > concern is a VPN, I'd say. > > > > Get the high resolution screens, on either. At least Android 4.1. > > > > *From:* Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Jeremy > Laidman > *Sent:* Sunday, March 30, 2014 8:07 PM > *To:* xymon at xymon.com > *Subject:* [Xymon] Suggestions for tablet solution for Xymon monitoring > > > > Hi > > > > If you had a budget to buy some tables for support staff, what would be > your "solution". I know of (but have no experience with) an Android Xymon > app. I've found nothing for IOS. But perhaps it shouldn't matter what the > device is, as long as it has a reasonable screen size and a browser, and > probably SIM slot for GSM/LTE data. > > > > Cheers > > Jeremy > > >

1 0

Showgraph.sh do not works !
by hubert.riera＠herakles.com 04 Apr '14

04 Apr '14

Bonjour , I have find my misstake :) On my PATH i have on /usr/local/ an old rrdtools/includ and lib than the /usr/include .. lib and during the make xymon find it in first so when i move the old rrdtool and remake he works nice i was find it with strace ... Regards Hubert Riera De : RIERA Hubert (HERAKLES) Envoyé : jeudi 3 avril 2014 15:27 À : 'xymon at xymon.com' Objet : TR: Showgraph.sh do not works ! Bonjour, Know i have some data , and the rrd works with data inside 2h of data ( testing with rrdtools dump ) so when i try to see it with the xymon-cgi/showgraph.sh i have this message on my web interface : "I don't understand ': 03-Apr-2014 14:15:09' in command: 'COMMENT:Updated: 03-Apr-2014 14:15:09'." is the result of this url : http://xymon/xymon-cgi/showgraph.sh?host=serveur1&color=green&service=tcp%3… regards i have doing a mode debug and i have this : QUERY_STRING="host=server1&service=tcp:conn&graph_width=576&graph_height=120&disp=server1&nostale&color=green&graph_start=1396357817&graph_end=1396530617&graph=custom&action=selzoom" REQUEST_METHOD=GET SCRIPT_NAME=showgraph.sh export REQUEST_METHOD SCRIPT_NAME QUERY_STRING . /home/Xymon/server/etc/cgioptions.cfg exec /home/Xymon/server/bin/showgraph.cgi $CGI_SHOWGRAPH_OPTS --debug --save=/tmp/toto.pgn ./zub.sh 2473 2014-04-03 15:17:08 Opening file /home/Xymon/server/etc/graphs.cfg 2473 2014-04-03 15:17:08 rrdgraph 2473 2014-04-03 15:17:08 /dev/null 2473 2014-04-03 15:17:08 --title 2473 2014-04-03 15:17:08 server1 TCP Connection Times 01/Apr/2014 - 03/Apr/2014 2473 2014-04-03 15:17:08 -w576 2473 2014-04-03 15:17:08 -h120 2473 2014-04-03 15:17:08 -v 2473 2014-04-03 15:17:08 Seconds 2473 2014-04-03 15:17:08 -a 2473 2014-04-03 15:17:08 PNG 2473 2014-04-03 15:17:08 -s 1396357817 2473 2014-04-03 15:17:08 -e 1396530617 2473 2014-04-03 15:17:08 DEF:p0=tcp.conn.rrd:sec:AVERAGE 2473 2014-04-03 15:17:08 LINE2:p0#0000FF:conn 2473 2014-04-03 15:17:08 GPRINT:p0:LAST: \: %5.1lf%s (cur) 2473 2014-04-03 15:17:08 GPRINT:p0:MAX: \: %5.1lf%s (max) 2473 2014-04-03 15:17:08 GPRINT:p0:MIN: \: %5.1lf%s (min) 2473 2014-04-03 15:17:08 GPRINT:p0:AVERAGE: \: %5.1lf%s (avg)\n 2473 2014-04-03 15:17:08 COMMENT:Updated: 03-Apr-2014 15:17:08 Content-type: text/html <html><head><title>Invalid request</title></head> <body>I don't understand ': 03-Apr-2014 15:17:08' in command: 'COMMENT:Updated: 03-Apr-2014 15:17:08'.</body></html> Regards à+ Hubert Riera # " Ce courriel et les documents qui lui sont joints peuvent contenir des informations confidentielles, être soumis aux règlementations relatives au contrôle des exportations ou ayant un caractère privé. S'ils ne vous sont pas destinés, nous vous signalons qu'il est strictement interdit de les divulguer, de les reproduire ou d'en utiliser de quelque manière que ce soit le contenu. Toute exportation ou réexportation non autorisée est interdite Si ce message vous a été transmis par erreur, merci d'en informer l'expéditeur et de supprimer immédiatement de votre système informatique ce courriel ainsi que tous les documents qui y sont attachés." ****** " This e-mail and any attached documents may contain confidential or proprietary information and may be subject to export control laws and regulations. If you are not the intended recipient, you are notified that any dissemination, copying of this e-mail and any attachments thereto or use of their contents by any means whatsoever is strictly prohibited. Unauthorized export or re-export is prohibited. If you have received this e-mail in error, please advise the sender immediately and delete this e-mail and all attached documents from your computer system." #

1 0