July 2014 - Xymon - Xymon mailman web

CPU USAGE DISPLAY (CPU Statistics)
by feld＠feld.me 06 Aug '14

06 Aug '14

On Jul 23, 2014, at 10:51, Schwab, Jos <Jos.Schwab at newellco.com> wrote: > Hello everyone, > I am pretty new to the Linux world. Getting to the point quickly; xymon apparently uses the top display for the CPU display. When I see a CPU alert from xymon I’d like to see the current time interval’s CPU stats (The third line of top display - %us, %sy, %ni, etc) rather than the averages of those stats since the last reboot of the machine. This is an old ‘complaint’ in bugzilla which was closed in 2007 as ‘not a bug’. I couldn’t find any work-arounds or customizing tips out there to change the display in xymon. What changes can a person make to see the current time interval (any top display other than the first one) statistics for the cpu display in xymon? What about changes in the monitored OS? Any suggestions are appreciated! Thanks. > I think I know what you are asking for, but to be sure can you define what you mean by "current time interval" ? Thanks!

4 9

best (or any) way to remember disabled tests on the main page?
by ohemming＠gmail.com 06 Aug '14

06 Aug '14

I'm not really sure how to explain this but hopefully it will make sense Let's say the main Xymon page is divided up as follows: prod --> 8 servers devel --> 8 servers One of the 'prod' servers has a known issue causing it to go red, so we disable the test and it switches to blue. Is there any way to reflect this on the main page (which has now, of course, gone back to green)? Ideally, I'd like to see the name of the server group ("prod" in the example) change to blue from white on the main view to remind me there's an ignored test. But I don't want the "main view" colour to change from green Possible? Easy? Thanks

3 4

Problem with conn test
by S.Pelzetter＠wvs-basa.de 06 Aug '14

06 Aug '14

Hello, I have expanded the number of clients to test with xymon putting some internet-vpn-router of our company. Now I have the problem, that the conn tests very often failing on some hosts, generating a lot of alert e-mails. But if I use a terminal on the xymon server and ping the clients "manually" there is no timeout. I wonder why xymon is detecting a timeout for this hosts. The xymon server is a vmware virtual machine with ubuntu 12.04 LTS server on an esx 5.0.0 latest patches. This morning I've update xymon from 4.3.10 to 4.3.17 and updated the vmware-tools on that machine, but the problem still remains. What happend to that? Thanks. -- This email was Anti Virus checked by Astaro Security Gateway. http://www.sophos.com

2 1

dynamic logfile name
by r.oliver＠web.de 06 Aug '14

06 Aug '14

Hello! I have an application that creates everyday a new logfile and I want to monitor it. The manpage for client-local.cfg says: The file:FILENAME line defines the filename of the file to monitor. As with the "log:" entries, a filename enclosed in backticks means a command which will generate the filenames dynamically. My question is: From what version on does xymon support this feature? I'm currently running 4.2.3. And can someone give me an example for the syntax with backticks? Thanks in advance! Oliver P.S. I hope that this time my message does not count as reply to any previous message.

3 5

Bug in xymond_alerts?
by scoile＠mcclatchyinteractive.com 31 Jul '14

31 Jul '14

In *alerts.cfg*: SERVICE=ports MAIL=[REDACTED] COLOR=red *DURATION<12m* REPEAT=20m UNMATCHED Output of *xymond_alert --dump-config*: 609 SERVICE=ports MAIL [REDACTED] FORMAT=TEXT REPEAT=20 COLOR=red *DURATION<11* UNMATCHED Durations are inconsistent. Bug? Xymon 4.3.12 -- *Steve Coile*Senior Network and Systems Engineer, McClatchy Interactive <http://www.mcclatchyinteractive.com/> Office: 919-861-1247 | Mobile: 919-622-5369 | Fax: 919-861-1300

1 0

help/xymon-alerts.html doesn't mention GROUP
by scoile＠mcclatchyinteractive.com 31 Jul '14

31 Jul '14

The help/xymon-alerts.html help page doesn't mention the GROUP rule keyword, but it is mentioned in the comments in alerts.cfg, and is in the manual page. -- *Steve Coile *Senior Network and Systems Engineer, McClatchy Interactive <http://www.mcclatchyinteractive.com/> Office: 919-861-1247 | Mobile: 919-622-5369 | Fax: 919-861-1300

1 0

NOTICE alerts sent only for DISABLE?
by scoile＠mcclatchyinteractive.com 31 Jul '14

31 Jul '14

The documentation (in-file comments and man page) indicates the NOTICE keyword in an alerts.cfg rule will produce an alert "if the message is a 'notify' message (typically sent when a status is enabled or disabled)." notifications.log shows the e-mail going out when a monitor is disabled, but not when enabled, either through a manual enable or through a disable timeout. Is this expected/intended behavior? How do I get alerts for both disable and enable? Xymon 4.3.12 -- *Steve Coile*Senior Network and Systems Engineer, McClatchy Interactive <http://www.mcclatchyinteractive.com/> Office: 919-861-1247 | Mobile: 919-622-5369 | Fax: 919-861-1300

1 0

RECOVERED and NOTICE in alerts.cfg
by scoile＠mcclatchyinteractive.com 31 Jul '14

31 Jul '14

In alerts.cfg, are RECOVERED and NOTICE rules, or recipients? If I include either on a rule line, xymon_alert --dump-config doesn't show them, but if I include them on a recipient line, it does. The documentation (in-file comments, man page) says they're rules, but they don't appear to work on rule lines (that don't also include a recipient). Is this expected/intended behavior? If so, can someone help me understand why? Xymon 4.3.12 -- *Steve Coile*Senior Network and Systems Engineer, McClatchy Interactive <http://www.mcclatchyinteractive.com/> Office: 919-861-1247 | Mobile: 919-622-5369 | Fax: 919-861-1300

1 0

TCP Wrappers for xymond
by jlaidman＠rebel-it.com.au 31 Jul '14

31 Jul '14

Hiya I'm planning on deploying a Xymon server on the Internet, and would like to lock it down as much as possible. I'll be creating iptables rules to limit access to port 1984. However, I'd really like to have a fallback protection mechanism, in case (or for when) the iptables rules are not being applied, or are misconfigured. It seems to me that the use of libwrap (TCP wrappers) would suit me nicely, so that I could add hosts into /etc/hosts.allow as required. I will already be using this for other services such as ssh. However, there doesn't appear to be a simple way for xymond to use libwrap. From what I understand, there are two ways to achieve TCP wrapper support: one way is to compile the daemon to dynamically link to the libwrap library; the other is to run the daemon from inetd/xinetd. Neither of these seem to be available for xymond. Can anyone suggest a simple way to do this? Would it be easy to recompile xymond with libwrap support? In the back of my mind, I seem to recall that the libwrap library re-implements all of the socket calls from libc, and so maybe all that's required is to have "-lwrap" before "-lc" in a Makefile somewhere. One idea that came to mind is to have xymond listen only on 127.0.0.1 only, and have xinetd listening on 0.0.0.0, which then connects any incoming socket to 127.0.0.1 (using the "redirect" config options). But this is a bit too message for my liking, because I don't want my operations staff confused by the extra complexity. Also, I suspect this will provide a reduction in throughput when compared to xymond listening directly, not only due to the extra connection overhead, but also perhaps limiting xymond's ability to do any clever things like pre-forking. Also the extra logging might cause a backlog. Or maybe I'm worrying about nothing, and this is a perfectly elegant solution. The best I could hope for, would be explicit support for compiling it in, perhaps with "--with-libwrap" and "--without-libwrap" options for configure. Cheers Jeremy

3 3

Xymongrep in 4.3.17 does not load local hosts.cfg
by wk.fdmdb＠gmail.com 29 Jul '14

29 Jul '14

Hi, I compiled xymon 4.3.17 on Suse 11 distribution successfuly and the server is running. But when I call xymongrep I get the following: xymon at n1000 > xymongrep test 2014-07-29 09:24:01 Cannot load /opt/xymon/default/server/etc/hosts.cfg, or file is empty Xymon is installed in /opt/xymon/default/. The file exists and has the necessery permissions: -rw-rw-r-- 1 xymon users 1308 2014-07-18 14:45 /opt/xymon/default/server/etc/hosts.cfg The hosts.cfg is also not empty and worked with Xymon 4.2.3. With strace I don't see that xymongrep even tries to open the file: execve("/home/xymon/bin/xymongrep", ["xymongrep", "test"], [/* 53 vars */]) = 0 brk(0) = 0x620000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f5d000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/tls/x86_64/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/tls/x86_64", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/tls/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/tls", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/x86_64/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/x86_64", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=46795, ...}) = 0 mmap(NULL, 46795, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffdf0f51000 close(3) = 0 open("/lib64/librt.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\"\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=47241, ...}) = 0 mmap(NULL, 2132976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf0b37000 fadvise64(3, 0, 2132976, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf0b3f000, 2093056, PROT_NONE) = 0 mmap(0x7ffdf0d3e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7ffdf0d3e000 close(3) = 0 open("/opt/xymon/default/instantclient_11_2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\354\1\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1661568, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f50000 mmap(NULL, 3528808, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf07d9000 fadvise64(3, 0, 3528808, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf092e000, 2093056, PROT_NONE) = 0 mmap(0x7ffdf0b2d000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x154000) = 0x7ffdf0b2d000 mmap(0x7ffdf0b32000, 18536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0b32000 close(3) = 0 open("/opt/xymon/default/instantclient_11_2/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib64/libpthread.so.0", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 at Z\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=135690, ...}) = 0 mmap(NULL, 2212736, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf05bc000 fadvise64(3, 0, 2212736, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf05d3000, 2097152, PROT_NONE) = 0 mmap(0x7ffdf07d3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7ffdf07d3000 mmap(0x7ffdf07d5000, 13184, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffdf07d5000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4f000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4e000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4d000 arch_prctl(ARCH_SET_FS, 0x7ffdf0f4e700) = 0 mprotect(0x7ffdf07d3000, 4096, PROT_READ) = 0 mprotect(0x7ffdf0b2d000, 16384, PROT_READ) = 0 mprotect(0x7ffdf0d3e000, 4096, PROT_READ) = 0 mprotect(0x61a000, 4096, PROT_READ) = 0 mprotect(0x7ffdf0f5e000, 4096, PROT_READ) = 0 munmap(0x7ffdf0f51000, 46795) = 0 set_tid_address(0x7ffdf0f4e9d0) = 12224 set_robust_list(0x7ffdf0f4e9e0, 0x18) = 0 futex(0x7fff9b78584c, FUTEX_WAKE_PRIVATE, 1) = 0 futex(0x7fff9b78584c, 0x189 /* FUTEX_??? */, 1, NULL, 7ffdf0f4e700) = -1 EAGAIN (Resource temporarily unavailable) rt_sigaction(SIGRTMIN, {0x7ffdf05c18b0, [], SA_RESTORER|SA_SIGINFO, 0x7ffdf05cb6a0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x7ffdf05c1940, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7ffdf05cb6a0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 brk(0) = 0x620000 brk(0x641000) = 0x641000 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(1984), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) select(4, [3], [3], NULL, {15, 0}) = 1 (out [3], left {14, 999998}) getsockopt(3, SOL_SOCKET, SO_ERROR, [72058139498774528], [4]) = 0 write(3, "config hosts.cfg", 16) = 16 shutdown(3, 1 /* send */) = 0 select(4, [3], [], NULL, {15, 0}) = 1 (in [3], left {14, 999998}) recvfrom(3, "", 32767, 0, NULL, NULL) = 0 shutdown(3, 0 /* receive */) = -1 ENOTCONN (Transport endpoint is not connected) shutdown(3, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(3) = 0 open("/etc/localtime", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 fstat(3, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f5c000 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 2309 lseek(3, -1467, SEEK_CUR) = 842 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\t\0\0\0\t\0\0\0\0"..., 4096) = 1467 close(3) = 0 munmap(0x7ffdf0f5c000, 4096) = 0 write(2, "2014-07-29 09:28:47 ", 202014-07-29 09:28:47 ) = 20 write(2, "Cannot load /opt/xymon/default/s"..., 70Cannot load /opt/xymon/default/server/etc/hosts.cfg, or file is empty ) = 70 exit_group(3) = ? Actually, instead of opening the file it is trying to get it via network: socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(1984), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) select(4, [3], [3], NULL, {15, 0}) = 1 (out [3], left {14, 999998}) getsockopt(3, SOL_SOCKET, SO_ERROR, [72058139498774528], [4]) = 0 write(3, "config hosts.cfg", 16) = 16 Which does not work as the port is not 1984 but 1988. But why does it try to make network connection and doesn't open the local file. And even then it writes to stdout that it tries to open the file locally but it doesn't. Thanks in advance for your help. WK

2 1