July 2014 - Xymon - Xymon mailman web

NOTICE alerts sent only for DISABLE?
by scoile＠mcclatchyinteractive.com 31 Jul '14

31 Jul '14

The documentation (in-file comments and man page) indicates the NOTICE keyword in an alerts.cfg rule will produce an alert "if the message is a 'notify' message (typically sent when a status is enabled or disabled)." notifications.log shows the e-mail going out when a monitor is disabled, but not when enabled, either through a manual enable or through a disable timeout. Is this expected/intended behavior? How do I get alerts for both disable and enable? Xymon 4.3.12 -- *Steve Coile*Senior Network and Systems Engineer, McClatchy Interactive <http://www.mcclatchyinteractive.com/> Office: 919-861-1247 | Mobile: 919-622-5369 | Fax: 919-861-1300

1 0

RECOVERED and NOTICE in alerts.cfg
by scoile＠mcclatchyinteractive.com 31 Jul '14

31 Jul '14

In alerts.cfg, are RECOVERED and NOTICE rules, or recipients? If I include either on a rule line, xymon_alert --dump-config doesn't show them, but if I include them on a recipient line, it does. The documentation (in-file comments, man page) says they're rules, but they don't appear to work on rule lines (that don't also include a recipient). Is this expected/intended behavior? If so, can someone help me understand why? Xymon 4.3.12 -- *Steve Coile*Senior Network and Systems Engineer, McClatchy Interactive <http://www.mcclatchyinteractive.com/> Office: 919-861-1247 | Mobile: 919-622-5369 | Fax: 919-861-1300

1 0

xymon-rclient.sh
by kspringer＠innovateteam.com 31 Jul '14

31 Jul '14

I'm trying to get rclient working and I'm not understanding the SSH requirements. The whole point of this is to not need to configure the client, so what am I supposed to do with SSH keys? I can SSH into the client with user:pass but how do I do that with this script? It wants me to create SSH keys? Anyone have a clue for me? I'd rather just use the user:pass Signature - Kris Thank you. ------------------------------------------------ Kris Springer

4 12

enadis page only showing the last scheduled disable
by larry＠fni-stl.com 31 Jul '14

31 Jul '14

I saw where this was reported but I couldn't find any follow-up mention of a fix or cause. Just updated from xymon 4.3.12 to 4.3.17 on a RHEL 6.5 system. Now when I use the enadis page in the Scheduled Actions section it is only showing the last system that has a scheduled disable. Instead of the full list of pending disables. Thanks. Larry ________________________________ CONFIDENTIALITY NOTICE: This electronic mail message is intended exclusively for recipient to which it is addressed. The contents of this message and any attachments may contain confidential and privileged information. Any unauthorized review, use, print, storage, copy, disclosure or distribution is strictly prohibited. If you have received this message in error, please advise the sender immediately by replying to the message's sender and delete all copies of this message and its attachments without disclosing the contents to anyone, or using the contents for any purpose.

1 2

CPU USAGE DISPLAY (CPU Statistics)
by feld＠feld.me 31 Jul '14

31 Jul '14

On Jul 23, 2014, at 10:51, Schwab, Jos <Jos.Schwab at newellco.com> wrote: > Hello everyone, > I am pretty new to the Linux world. Getting to the point quickly; xymon apparently uses the top display for the CPU display. When I see a CPU alert from xymon I’d like to see the current time interval’s CPU stats (The third line of top display - %us, %sy, %ni, etc) rather than the averages of those stats since the last reboot of the machine. This is an old ‘complaint’ in bugzilla which was closed in 2007 as ‘not a bug’. I couldn’t find any work-arounds or customizing tips out there to change the display in xymon. What changes can a person make to see the current time interval (any top display other than the first one) statistics for the cpu display in xymon? What about changes in the monitored OS? Any suggestions are appreciated! Thanks. > I think I know what you are asking for, but to be sure can you define what you mean by "current time interval" ? Thanks!

3 5

TCP Wrappers for xymond
by jlaidman＠rebel-it.com.au 31 Jul '14

31 Jul '14

Hiya I'm planning on deploying a Xymon server on the Internet, and would like to lock it down as much as possible. I'll be creating iptables rules to limit access to port 1984. However, I'd really like to have a fallback protection mechanism, in case (or for when) the iptables rules are not being applied, or are misconfigured. It seems to me that the use of libwrap (TCP wrappers) would suit me nicely, so that I could add hosts into /etc/hosts.allow as required. I will already be using this for other services such as ssh. However, there doesn't appear to be a simple way for xymond to use libwrap. From what I understand, there are two ways to achieve TCP wrapper support: one way is to compile the daemon to dynamically link to the libwrap library; the other is to run the daemon from inetd/xinetd. Neither of these seem to be available for xymond. Can anyone suggest a simple way to do this? Would it be easy to recompile xymond with libwrap support? In the back of my mind, I seem to recall that the libwrap library re-implements all of the socket calls from libc, and so maybe all that's required is to have "-lwrap" before "-lc" in a Makefile somewhere. One idea that came to mind is to have xymond listen only on 127.0.0.1 only, and have xinetd listening on 0.0.0.0, which then connects any incoming socket to 127.0.0.1 (using the "redirect" config options). But this is a bit too message for my liking, because I don't want my operations staff confused by the extra complexity. Also, I suspect this will provide a reduction in throughput when compared to xymond listening directly, not only due to the extra connection overhead, but also perhaps limiting xymond's ability to do any clever things like pre-forking. Also the extra logging might cause a backlog. Or maybe I'm worrying about nothing, and this is a perfectly elegant solution. The best I could hope for, would be explicit support for compiling it in, perhaps with "--with-libwrap" and "--without-libwrap" options for configure. Cheers Jeremy

3 3

best (or any) way to remember disabled tests on the main page?
by ohemming＠gmail.com 30 Jul '14

30 Jul '14

I'm not really sure how to explain this but hopefully it will make sense Let's say the main Xymon page is divided up as follows: prod --> 8 servers devel --> 8 servers One of the 'prod' servers has a known issue causing it to go red, so we disable the test and it switches to blue. Is there any way to reflect this on the main page (which has now, of course, gone back to green)? Ideally, I'd like to see the name of the server group ("prod" in the example) change to blue from white on the main view to remind me there's an ignored test. But I don't want the "main view" colour to change from green Possible? Easy? Thanks

2 3

dynamic logfile name
by r.oliver＠web.de 30 Jul '14

30 Jul '14

Hello! I have an application that creates everyday a new logfile and I want to monitor it. The manpage for client-local.cfg says: The file:FILENAME line defines the filename of the file to monitor. As with the "log:" entries, a filename enclosed in backticks means a command which will generate the filenames dynamically. My question is: From what version on does xymon support this feature? I'm currently running 4.2.3. And can someone give me an example for the syntax with backticks? Thanks in advance! Oliver P.S. I hope that this time my message does not count as reply to any previous message.

2 4

Xymongrep in 4.3.17 does not load local hosts.cfg
by wk.fdmdb＠gmail.com 29 Jul '14

29 Jul '14

Hi, I compiled xymon 4.3.17 on Suse 11 distribution successfuly and the server is running. But when I call xymongrep I get the following: xymon at n1000 > xymongrep test 2014-07-29 09:24:01 Cannot load /opt/xymon/default/server/etc/hosts.cfg, or file is empty Xymon is installed in /opt/xymon/default/. The file exists and has the necessery permissions: -rw-rw-r-- 1 xymon users 1308 2014-07-18 14:45 /opt/xymon/default/server/etc/hosts.cfg The hosts.cfg is also not empty and worked with Xymon 4.2.3. With strace I don't see that xymongrep even tries to open the file: execve("/home/xymon/bin/xymongrep", ["xymongrep", "test"], [/* 53 vars */]) = 0 brk(0) = 0x620000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f5d000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/tls/x86_64/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/tls/x86_64", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/tls/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/tls", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/x86_64/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/x86_64", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=46795, ...}) = 0 mmap(NULL, 46795, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffdf0f51000 close(3) = 0 open("/lib64/librt.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\"\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=47241, ...}) = 0 mmap(NULL, 2132976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf0b37000 fadvise64(3, 0, 2132976, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf0b3f000, 2093056, PROT_NONE) = 0 mmap(0x7ffdf0d3e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7ffdf0d3e000 close(3) = 0 open("/opt/xymon/default/instantclient_11_2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\354\1\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1661568, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f50000 mmap(NULL, 3528808, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf07d9000 fadvise64(3, 0, 3528808, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf092e000, 2093056, PROT_NONE) = 0 mmap(0x7ffdf0b2d000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x154000) = 0x7ffdf0b2d000 mmap(0x7ffdf0b32000, 18536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0b32000 close(3) = 0 open("/opt/xymon/default/instantclient_11_2/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib64/libpthread.so.0", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 at Z\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=135690, ...}) = 0 mmap(NULL, 2212736, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf05bc000 fadvise64(3, 0, 2212736, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf05d3000, 2097152, PROT_NONE) = 0 mmap(0x7ffdf07d3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7ffdf07d3000 mmap(0x7ffdf07d5000, 13184, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffdf07d5000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4f000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4e000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4d000 arch_prctl(ARCH_SET_FS, 0x7ffdf0f4e700) = 0 mprotect(0x7ffdf07d3000, 4096, PROT_READ) = 0 mprotect(0x7ffdf0b2d000, 16384, PROT_READ) = 0 mprotect(0x7ffdf0d3e000, 4096, PROT_READ) = 0 mprotect(0x61a000, 4096, PROT_READ) = 0 mprotect(0x7ffdf0f5e000, 4096, PROT_READ) = 0 munmap(0x7ffdf0f51000, 46795) = 0 set_tid_address(0x7ffdf0f4e9d0) = 12224 set_robust_list(0x7ffdf0f4e9e0, 0x18) = 0 futex(0x7fff9b78584c, FUTEX_WAKE_PRIVATE, 1) = 0 futex(0x7fff9b78584c, 0x189 /* FUTEX_??? */, 1, NULL, 7ffdf0f4e700) = -1 EAGAIN (Resource temporarily unavailable) rt_sigaction(SIGRTMIN, {0x7ffdf05c18b0, [], SA_RESTORER|SA_SIGINFO, 0x7ffdf05cb6a0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x7ffdf05c1940, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7ffdf05cb6a0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 brk(0) = 0x620000 brk(0x641000) = 0x641000 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(1984), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) select(4, [3], [3], NULL, {15, 0}) = 1 (out [3], left {14, 999998}) getsockopt(3, SOL_SOCKET, SO_ERROR, [72058139498774528], [4]) = 0 write(3, "config hosts.cfg", 16) = 16 shutdown(3, 1 /* send */) = 0 select(4, [3], [], NULL, {15, 0}) = 1 (in [3], left {14, 999998}) recvfrom(3, "", 32767, 0, NULL, NULL) = 0 shutdown(3, 0 /* receive */) = -1 ENOTCONN (Transport endpoint is not connected) shutdown(3, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(3) = 0 open("/etc/localtime", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 fstat(3, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f5c000 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 2309 lseek(3, -1467, SEEK_CUR) = 842 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\t\0\0\0\t\0\0\0\0"..., 4096) = 1467 close(3) = 0 munmap(0x7ffdf0f5c000, 4096) = 0 write(2, "2014-07-29 09:28:47 ", 202014-07-29 09:28:47 ) = 20 write(2, "Cannot load /opt/xymon/default/s"..., 70Cannot load /opt/xymon/default/server/etc/hosts.cfg, or file is empty ) = 70 exit_group(3) = ? Actually, instead of opening the file it is trying to get it via network: socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(1984), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) select(4, [3], [3], NULL, {15, 0}) = 1 (out [3], left {14, 999998}) getsockopt(3, SOL_SOCKET, SO_ERROR, [72058139498774528], [4]) = 0 write(3, "config hosts.cfg", 16) = 16 Which does not work as the port is not 1984 but 1988. But why does it try to make network connection and doesn't open the local file. And even then it writes to stdout that it tries to open the file locally but it doesn't. Thanks in advance for your help. WK

2 1

how to ext script with bbwin ?
by bakgat8＠hotmail.com 28 Jul '14

28 Jul '14

I don't usually do windows. I have installed bbwin from here http://jmac-software.blogspot.com/2012/03/xymon-windows-client-set-up-guide… I found below post via google ... but there is still large gaps in my understanding. What format do you write a report in the bbwin tmp directory? Can I specify a column name ? Hi Ryan, I didn't understand why you use bbwincmd. You could use the externals agent to run your program every 5 minutes and your agent would just has to write a report in the bbwin tmp directory. Then, BBWin would take care to read the file and send the status to the hobbit server. That would be much easier for you. Don't you think ? Etienne. Can somebody give me more info or point me to any docs online? Thanks Bakkies

4 6