September 2014 - Xymon - Xymon mailman web

Different Timeouts for different tests?
by tawilcox＠fs.fed.us 29 Sep '14

29 Sep '14

We have hosts that we want to have a short timeout for the tests. However, this doesn't work well with http tests because many web sites take longer to reply. We set the timeout to 1 second. We have started to get red statuses for http tests where the web site is working just fine, but a little slow. Is there any way to use separate timeouts for different tests? Also, the status of these sites is Red on the Main page or the AllNonGreen page, but if we drill down and look at the test for that host, it shows as green. I am interpreting this as the timeout causes the test to be given a status of red, but the site eventually responds, so the status for the host is green. This is a little confusing. Ted This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately.

2 1

MSGS logs
by scuba.blake＠gmail.com 29 Sep '14

29 Sep '14

Greetings Xymon community, A few questions about xymon reading log files. 1. Can multiple log files be read or is it limited to one file? (my cfg below) client-local.cfg [aquila.linux] log:/var/log/application/catalina.out:10240 trigger OutOfMemoryError log:/var/log/application2/catalina.out:10240 trigger OutOfMemoryError log:/var/log/application3/catlaina.out:10240 trigger OutOfMemoryError 2. Any reason a symbolic link to a log file would not work but a direct link works other than file permissions? 3. I have one host which is failing to send desired logs, based on the client data what is the correct host to use? Client_data [collector:] client aquila.linux linux [date] Mon Sep 29 13:39:49 MDT 2014 [uname] Linux aquila 3.2.0-60-generic x86_64 4. Other than the jmxstat method any other options to monitor tomcat servers? Thanks for the help

1 0

Question
by panacea.hpalacios＠yobelscm.biz 29 Sep '14

29 Sep '14

I dont need monitoring the partition P: in the xymon, help me please Saludos, Hatemm O. Palacios Saman Tecnología de la Información - UN Servicios Yobel SCM Av. San Genaro 150 Urb. Molitalia. Los Olivos Tel. 613 3600 anx. 3186 | Fax. 536 9997 www.yobelscm.biz Este mensaje y la informaci�n que contiene est�n dirigidos exclusivamente a sus destinatarios. Contiene informaci�n producida por Yobel SCM que es confidencial no susceptible de ser distribuida. Si usted no es el destinatario no puede examinar, usar, copiar o distribuir este mensaje o la informaci�n que �l contiene. Si lo recibe por error, por favor reenv�elo a la persona que se lo envi� y elim�nelo. Gracias. This message and its information are exclusively addressed to its recipients. The information contained here is produced by Yobel SCM and is confidential nonsusceptible to be distributed. If you are not the intended recipient, you may not disclose, use, copy or distribute this message or its information. If you receive this by mistake, please forward this e-mail to the sender and delete it. Thank you.

2 1

FYI: CVE-2014-6271 - bash vulnerability
by cleaver＠terabithia.org 29 Sep '14

29 Sep '14

This is an important one to patch your systems on, if you haven't already. The xymon CGI interface runs via shell wrappers around the actual C cgi code (to set the environment properly), which means this would be an avenue for attack. Alternatively, using /bin/dash or some other shell besides bash (often /bin/sh on Linux distros) is another work around. (This is the default on the Terabithia RPMS for EL6.) More info: http://seclists.org/oss-sec/2014/q3/650 https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environme… https://access.redhat.com/articles/1200223 Regards, -jc

9 14

Another question on alerts.cfg
by christian.becker＠rhein-zeitung.net 29 Sep '14

29 Sep '14

Hello there, please, can somebody explain the difference of example 1) and example 2) of putting a "DURATION" statement either in the "HOST=" line or in the "other" lines of alerts.cfg? Is there really a difference of the meaning of DURATION in example 1) and 2) ???? Example as one can see on the demo site at www.xymon.com: 1) HOST=home.scheel.dk SERVICE=http DURATION>10m REPEAT=6h MAIL henrik at scheel.dk 2) HOST=home.hswn.dk SERVICE=conn MAIL henrik.storner at gmail.com REPEAT=30m DURATION>10m The only difference that's visible for me could be, that in example 2) i would be able to configure a kind of escalation steps like you can read in my section below; i. e. recipient test-1 get's an alert after 10 minutes, recipient test-2 get's an alert after 20 minutes ..... ??? HOST=TESTHOST SERVICE=conn MAIL=test-1 at something.com<mailto:MAIL=test-1 at something.com> DURATION>10m MAIL=test-2 at something.com<mailto:MAIL=test-2 at something.com> DURATION>20m Hope that's not a stupid thing ;-) Christian Becker IT-Services Christian.Becker at rhein-zeitung.net<mailto:Christian.Becker at rhein-zeitung.net> _________________________________ Mittelrhein-Verlag GmbH August-Horch-Straße 28 D-56070 Koblenz Verleger und Geschäftsführer: Walterpeter Twer Reg.-Gericht Koblenz HRB 121 Finanzamt Koblenz Str.Nr. 22 65 10 285 2 www.rhein-zeitung.de<http://www.rhein-zeitung.de/>

1 0

BBD
by panacea.hpalacios＠yobelscm.biz 26 Sep '14

26 Sep '14

[image: Imágenes integradas 1] Please Help with the BBD , when I click in BBD the result is Thu Sep 25 07:46:01 2014 bbd ok Service bbd on pescm33.yobelscm.biz is OK (up) Seconds: 0.00 I need wich the BBD is green. Saludos, Hatemm O. Palacios Saman Tecnología de la Información - UN Servicios Yobel SCM Av. San Genaro 150 Urb. Molitalia. Los Olivos Tel. 613 3600 anx. 3186 | Fax. 536 9997 www.yobelscm.biz Este mensaje y la informaci�n que contiene est�n dirigidos exclusivamente a sus destinatarios. Contiene informaci�n producida por Yobel SCM que es confidencial no susceptible de ser distribuida. Si usted no es el destinatario no puede examinar, usar, copiar o distribuir este mensaje o la informaci�n que �l contiene. Si lo recibe por error, por favor reenv�elo a la persona que se lo envi� y elim�nelo. Gracias. This message and its information are exclusively addressed to its recipients. The information contained here is produced by Yobel SCM and is confidential nonsusceptible to be distributed. If you are not the intended recipient, you may not disclose, use, copy or distribute this message or its information. If you receive this by mistake, please forward this e-mail to the sender and delete it. Thank you.

2 2

Help
by panacea.hpalacios＠yobelscm.biz 26 Sep '14

26 Sep '14

Please any send me the file tasks.cfg and xymoncliente.cfg the rute is : /etc/xymon/xymon-client Saludos, Hatemm O. Palacios Saman Tecnología de la Información - UN Servicios Yobel SCM Av. San Genaro 150 Urb. Molitalia. Los Olivos Tel. 613 3600 anx. 3186 | Fax. 536 9997 www.yobelscm.biz Este mensaje y la informaci�n que contiene est�n dirigidos exclusivamente a sus destinatarios. Contiene informaci�n producida por Yobel SCM que es confidencial no susceptible de ser distribuida. Si usted no es el destinatario no puede examinar, usar, copiar o distribuir este mensaje o la informaci�n que �l contiene. Si lo recibe por error, por favor reenv�elo a la persona que se lo envi� y elim�nelo. Gracias. This message and its information are exclusively addressed to its recipients. The information contained here is produced by Yobel SCM and is confidential nonsusceptible to be distributed. If you are not the intended recipient, you may not disclose, use, copy or distribute this message or its information. If you receive this by mistake, please forward this e-mail to the sender and delete it. Thank you.

1 0

Xymon timeout question, tasks.cfg
by tawilcox＠fs.fed.us 26 Sep '14

26 Sep '14

I have a question about the timeout for Xymonnet in tasks.cfg. The instructions say that the command line for changing the timeout is "-timeout=N". Can "N" be a decimal? We would like to set the timeout to be less than 1 second. I would like to put in something like "-Timeout=.3". Will that work? Ted This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately.

3 2

off-list Re: Help
by panacea.hpalacios＠yobelscm.biz 26 Sep '14

26 Sep '14

Please help me Saludos, Hatemm O. Palacios Saman Tecnología de la Información - UN Servicios Yobel SCM Av. San Genaro 150 Urb. Molitalia. Los Olivos Tel. 613 3600 anx. 3186 | Fax. 536 9997 www.yobelscm.biz 2014-09-26 11:42 GMT-05:00 Hatemm Omar Palacios Saman < panacea.hpalacios at yobelscm.biz>: > > [root at pescm33 ~]# ps -fu xymon > UID PID PPID C STIME TTY TIME CMD > xymon 6571 1 0 11:00 ? 00:00:00 /usr/sbin/xymonlaunch > --log=/var > xymon 6573 6571 0 11:00 ? 00:00:02 xymond > --restart=/var/lib/xymon/ > xymon 6579 6571 0 11:00 ? 00:00:00 xymond_channel > --channel=status > xymon 6581 6571 0 11:00 ? 00:00:00 xymond_channel > --channel=clichg > xymon 6584 6579 0 11:00 ? 00:00:00 xymond_rrd > --rrddir=/var/lib/xym > xymon 6587 6581 0 11:00 ? 00:00:00 xymond_hostdata > xymon 6595 6571 0 11:00 ? 00:00:00 xymond_channel > --channel=stachg > xymon 6596 6571 0 11:00 ? 00:00:00 xymond_channel > --channel=page xy > xymon 6597 6571 0 11:00 ? 00:00:00 xymond_channel > --channel=client > xymon 6598 6595 0 11:00 ? 00:00:00 xymond_history > xymon 6599 6597 0 11:00 ? 00:00:00 xymond_client > xymon 6600 6571 0 11:00 ? 00:00:00 xymond_channel > --channel=data xy > xymon 6601 6596 0 11:00 ? 00:00:00 xymond_alert > --checkpoint-file=/ > xymon 6602 6600 0 11:00 ? 00:00:00 xymond_rrd > --rrddir=/var/lib/xym > xymon 8391 6601 0 11:41 ? 00:00:00 [xymond_alert] <defunct> > [root at pescm33 ~]# > > > > > Saludos, > > Hatemm O. Palacios Saman > Tecnología de la Información - UN Servicios > Yobel SCM > Av. San Genaro 150 Urb. Molitalia. Los Olivos > Tel. 613 3600 anx. 3186 | Fax. 536 9997 > www.yobelscm.biz > > 2014-09-26 11:34 GMT-05:00 John Thurston <john.thurston at alaska.gov>: > > On 9/26/2014 8:26 AM, Hatemm Omar Palacios Saman wrote: >> >>> Ok i run ps -fu xymon and this is: >>> >>> Imágenes integradas 1 >>> >> >> Please, when you contribute command output, copy and paste the text into >> your mail message. A screen shot of a console is illegible and not >> searchable in the archives. >> -- >> Do things because you should, not just because you can. >> >> John Thurston 907-465-8591 >> John.Thurston at alaska.gov >> Enterprise Technology Services >> Department of Administration >> State of Alaska >> > > Este mensaje y la informaci�n que contiene est�n dirigidos exclusivamente a sus destinatarios. Contiene informaci�n producida por Yobel SCM que es confidencial no susceptible de ser distribuida. Si usted no es el destinatario no puede examinar, usar, copiar o distribuir este mensaje o la informaci�n que �l contiene. Si lo recibe por error, por favor reenv�elo a la persona que se lo envi� y elim�nelo. Gracias. This message and its information are exclusively addressed to its recipients. The information contained here is produced by Yobel SCM and is confidential nonsusceptible to be distributed. If you are not the intended recipient, you may not disclose, use, copy or distribute this message or its information. If you receive this by mistake, please forward this e-mail to the sender and delete it. Thank you.

1 0

Help
by bb4＠richter-it.net 26 Sep '14

26 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Can you please run a ps -fu xymon (or whatever user your XYmon user is) and post the output as well as your hosts.cfg. On 26.09.2014 18:08, Hatemm Omar Palacios Saman wrote: > Ok I erase the letter Disabled. But my server is purple. > > and in the service , i see the xymonlaunch is running. > > [image: Imágenes integradas 1] > > > > Saludos, > > Hatemm O. Palacios Saman > Tecnología de la Información - UN Servicios > Yobel SCM > Av. San Genaro 150 Urb. Molitalia. Los Olivos > Tel. 613 3600 anx. 3186 | Fax. 536 9997 > www.yobelscm.biz > > 2014-09-26 10:54 GMT-05:00 Torsten Richter <bb4 at richter-it.net>: > > Well either there is some service saying xymonclient when you issue the > command service --status-all or you could start it by hand as the XYmon > user (probably xymon) or you could remove the line with the word > DISABLED from your tasks.cfg and XYmon will take care of the client part > itself. > > On 26.09.2014 17:45, Hatemm Omar Palacios Saman wrote: >>>> Yes [xymonclient] is Disabled. >>>> >>>> But how do I do restart the service?...I have Centos 5. >>>> >>>> >>>> >>>> Saludos, >>>> >>>> Hatemm O. Palacios Saman >>>> Tecnología de la Información - UN Servicios >>>> Yobel SCM >>>> Av. San Genaro 150 Urb. Molitalia. Los Olivos >>>> Tel. 613 3600 anx. 3186 | Fax. 536 9997 >>>> www.yobelscm.biz >>>> >>>> 2014-09-26 10:28 GMT-05:00 Torsten Richter <bb4 at richter-it.net>: >>>> >>>> Hi Hatemm, >>>> >>>> it looks like the client part of the server is not running. >>>> Normally the client on the server is maintained by the server in > tasks.cfg. >>>> Take a look if there is a section which starts with [xymonclient] in >>>> server/etc/tasks.cfg >>>> and if you'll find the keyword "DISABLED" on the next line. >>>> If that's the case someone disabled the client part and you'll have to >>>> start/stop it manually by going into the client directory and call >>>> ./runclient.sh start. >>>> But first you might want to take a look at your log files if there is >>>> something suspicious in there. >>>> Normally the are located under /var/log/xymon for the server and in >>>> clients/logs for the client. >>>> >>>> Regards >>>> Torsten >>>> >>>> On 26.09.2014 17:00, Hatemm Omar Palacios Saman wrote: >>>>>>> Hi, >>>>>>> >>>>>>> My name is Hatemm from Peru, >>>>>>> >>>>>>> I need help with Xymon, the monitoring is OK with my other servers, > but >>>> my >>>>>>> Xymon server is purple and I dont now why. >>>>>>> >>>>>>> Please any recomendation. >>>>>>> >>>>>>> Regards. >>>>>>> >>>>>>> [image: Imágenes integradas 1] >>>>>>> >>>>>>> >>>>>>> Saludos, >>>>>>> >>>>>>> Hatemm O. Palacios Saman >>>>>>> Tecnología de la Información - UN Servicios >>>>>>> Yobel SCM >>>>>>> Av. San Genaro 150 Urb. Molitalia. Los Olivos >>>>>>> Tel. 613 3600 anx. 3186 | Fax. 536 9997 >>>>>>> www.yobelscm.biz >>>>>>> >>>>>>> >>>>>>> Este mensaje y la informaci�n que contiene est�n dirigidos >>>>>>> exclusivamente a sus destinatarios. Contiene informaci�n >>>>>>> producida por Yobel SCM que es confidencial no susceptible >>>>>>> de ser distribuida. Si usted no es el destinatario no puede >>>>>>> examinar, usar, copiar o distribuir este mensaje o la informaci�n >>>>>>> que �l contiene. Si lo recibe por error, por favor reenv�elo a la >>>>>>> persona que se lo envi� y elim�nelo. Gracias. >>>>>>> >>>>>>> >>>>>>> This message and its information are exclusively addressed to its >>>>>>> recipients. The information contained here is produced by Yobel >>>>>>> SCM and is confidential nonsusceptible to be distributed. If you >>>>>>> are not the intended recipient, you may not disclose, use, copy or >>>>>>> distribute this message or its information. If you receive this by >>>>>>> mistake, please forward this e-mail to the sender and delete it. >>>>>>> Thank you. >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Xymon mailing list >>>>>>> Xymon at xymon.com >>>>>>> http://lists.xymon.com/mailman/listinfo/xymon >>>>>>> >>>> >>>>> _______________________________________________ >>>>> Xymon mailing list >>>>> Xymon at xymon.com >>>>> http://lists.xymon.com/mailman/listinfo/xymon >>>>> >>>> >>>> >>>> Este mensaje y la informaci�n que contiene est�n dirigidos >>>> exclusivamente a sus destinatarios. Contiene informaci�n >>>> producida por Yobel SCM que es confidencial no susceptible >>>> de ser distribuida. Si usted no es el destinatario no puede >>>> examinar, usar, copiar o distribuir este mensaje o la informaci�n >>>> que �l contiene. Si lo recibe por error, por favor reenv�elo a la >>>> persona que se lo envi� y elim�nelo. Gracias. >>>> >>>> >>>> This message and its information are exclusively addressed to its >>>> recipients. The information contained here is produced by Yobel >>>> SCM and is confidential nonsusceptible to be distributed. If you >>>> are not the intended recipient, you may not disclose, use, copy or >>>> distribute this message or its information. If you receive this by >>>> mistake, please forward this e-mail to the sender and delete it. >>>> Thank you. >>>> >>>> > >> > > > Este mensaje y la informaci�n que contiene est�n dirigidos > exclusivamente a sus destinatarios. Contiene informaci�n > producida por Yobel SCM que es confidencial no susceptible > de ser distribuida. Si usted no es el destinatario no puede > examinar, usar, copiar o distribuir este mensaje o la informaci�n > que �l contiene. Si lo recibe por error, por favor reenv�elo a la > persona que se lo envi� y elim�nelo. Gracias. > > > This message and its information are exclusively addressed to its > recipients. The information contained here is produced by Yobel > SCM and is confidential nonsusceptible to be distributed. If you > are not the intended recipient, you may not disclose, use, copy or > distribute this message or its information. If you receive this by > mistake, please forward this e-mail to the sender and delete it. > Thank you. > > - -- +---------------------------------------------------------+ | E-mail : bb4 [at] richter-it.net | | | | Homepage: http://www.richter-it.net/ | +---------------------------------------------------------+ Download my public key from: http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iEYEARECAAYFAlQlkeMACgkQ7DlmxomQk6z45wCcDZKpX53CS9asl9C6gq/eWhX0 A1AAoLwLuoeGZaQYeyR6x1Prfd7gf8kI =GaXr -----END PGP SIGNATURE-----

2 1