October 2015 - Xymon - Xymon mailman web

Parenthesis failure in combo.cfg
by john.thurston＠alaska.gov 11 Oct '15

11 Oct '15

I'm pulling what little hair I have over the behavior of combostatus with parenthesis in combo.cfg The man file specifically says, "All operators have EQUAL PRECEDENCE. If you need something evaluated in a specific order, use parentheses to group the expressions..." I need to implement an exclusive-or, so certainly need to ensure the order of operations. But I couldn't make it work, so I started simplifying my expression to find where it broke. The failure conditions are pretty depressing :( This simple expression works as expected foo.x = bar.a && zab.a as does foo.x = bar.a && (zab.a==0) but it fails with a core dump if I simply reverse the terms foo.x = (zab.a==0) && bar.a it also dumps core if I wrap the earlier expression in parens foo.x = (bar.a && (zab.a==0)) it works with extra parens for a simple term foo.x = ((bar.a)) but dumps core there if a more complex expression in the parens foo.x = ((bar.a==0)) I am unable to come up with a way to implement anything useful with these limitations. I do understand that combostatus is kind of a fringe feature, but there are so many business functions it enables that I really want it to work! I'm running 4.3.21 on Solaris 10. Is combostatus working for anyone else? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

2 2

Need help for PID monitoring using Xymon client
by shekar.raaja＠gmail.com 08 Oct '15

08 Oct '15

Hello Xymon Support, Can we do Process ID monitoring using Xymon? If we can, can you please let me know how can we achieve that, Thank you. Thanks and Regards Raja Shekar

2 1

TIME parameter in analysis.cfg
by neilsimmonds1808＠gmail.com 08 Oct '15

08 Oct '15

Hi all, Just wanted to check I have my understanding of the TIME parameter on rules in analysis.cfg correct. If I have the following lines in analysis.cfg DISK /nmon 95 98 TIME=W:0800:1800 DISK /nmon 95 101 then if I'm correct this will give the 95/98 thresholds between 08:00 and 18:00 on weekdays and the 95/101 thresholds at all other times? Clarification of this would really help me with some exclusions I need to set up. Regards, Neil.

2 1

FW: Xymon metrics bug
by Phil.Crooker＠orix.com.au 08 Oct '15

08 Oct '15

Yes, I get the same result. RAM/Swap and Disk reports fail for multiple hosts (that have the xymon client), works for individual hosts. These reports appear if ALL is selected. The other reports (both CPU, ping, network conns) work with multiple and single host selection. ________________________________ From: Xymon <xymon-bounces at xymon.com> on behalf of Galen Johnson <Galen.Johnson at sas.com> Sent: Thursday, 8 October 2015 1:04 PM To: xymon at xymon.com Subject: [Xymon] Xymon metrics bug I don't know if this has been covered before but when I try to use the "Metrics Report" for showing multiple hosts RAM/Swap graphs, I get a broken image...however, when I select "All" then the graph actually displays. I just tested this on xymon.org to see if maybe it was my instance but it exhibits the same behavior (and fails for Disk which I didn't try before). Is this actually working for anyone else? Choosing a single server works just fine. =G=

2 1

Xymon metrics bug
by Galen.Johnson＠sas.com 08 Oct '15

08 Oct '15

I don't know if this has been covered before but when I try to use the "Metrics Report" for showing multiple hosts RAM/Swap graphs, I get a broken image...however, when I select "All" then the graph actually displays. I just tested this on xymon.org to see if maybe it was my instance but it exhibits the same behavior (and fails for Disk which I didn't try before). Is this actually working for anyone else? Choosing a single server works just fine. =G=

1 0

BB Variables to PHP
by john＠executech.com 07 Oct '15

07 Oct '15

I have created a custom PHP page with simple install instructions for servers in our environment. I would like to use the header files but they contain Xymon environment variables that can't be accessed outside the application. Does anyone have a good way to allow my PHP page access to those variables? Thanks, John Tullis

2 1

Should a HTTP 304 response be green or yellow?
by beckert＠phys.ethz.ch 06 Oct '15

06 Oct '15

Hi, one our HTTP checks went yellow today because the Apache being tested responded with a "304 Not Modified" HTTP code, and the check went yellow. "304 Not Modified" is generally a valid HTTP answer which does not indicate a problem but rather a properly working server -- if the client provided the according meta information, namely either the If-Modified-Since or If-None-Match HTTP headers. But xymonnet doesn't seem to send either of them, at least according to a quick grep through the xymon's source code. So I think that if xymonnet receives a 304 reply, there must be something wrong on the server side (broken reverse proxy or similar), hence the yellow state is some kind of justified. What do others think about that topic? Kind regards, Axel Beckert -- Axel Beckert <beckert at phys.ethz.ch> support: +41 44 633 26 68 IT Services Group, HPT H 6 voice: +41 44 633 41 89 Departement of Physics, ETH Zurich CH-8093 Zurich, Switzerland http://nic.phys.ethz.ch/

2 1

Status, NCV and time stamps
by dboldt＠usgs.gov 06 Oct '15

06 Oct '15

I'm in the process of converting Big Brother tests to XYMon and would like to enable RRD/graphics for these tests. Several of these tests present date/time information which is important. As a workaround for one test I have replaced the colon on a HH:MM:DD formatted date with a dot, but it doesn't really look like a time anymore. * Is there a way to have NCV ignore colons (and only use "=")? * Is there a way to have NCV ignore a line (which might contain colons)? * Can I use Data messages in such a way that the corresponding Status message is not parsed? * Might there be some other mechanism entirely? -- -- David Boldt <dboldt at usgs.gov> "Ah, this is obviously some strange usage of the word 'safe' that I wasn't previously aware of." --Douglas Adams (1952 - 2001), Arthur Dent in "The Hitchhikers Guide to the Galaxy"

3 4

buffer overflow detected in xymongen (4.3.21)
by beckert＠phys.ethz.ch 06 Oct '15

06 Oct '15

Hi, On Tue, Sep 29, 2015 at 10:40:32AM -0700, Japheth Cleaver wrote: > Would you be able to do a full BT on one of those core dumps? Today it finally crashed again after I deployed the debug packages. (It's seldom that I'm so happy to see a core dump. ;-) Here's the most recent backtrace: Reading symbols from /usr/lib/xymon/server/bin/xymongen...done. Reading symbols from /usr/lib/debug/.build-id/c8/bc967d123c1a308a9973d19da8c2357af16a6d.debug...done. [New LWP 154856] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `xymongen --recentgifs --subpagecolumns=2 --wml --rss --nongreen-ignorecolumns=l'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f29044aa107 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt #0 0x00007f29044aa107 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007f29044ab4e8 in __GI_abort () at abort.c:89 #2 0x00007f29044e8204 in __libc_message (do_abort=do_abort at entry=2, fmt=fmt at entry=0x7f29045d8a2b "*** %s ***: %s terminated\n") at ../sysdeps/posix/libc_fatal.c:175 #3 0x00007f290456b4c7 in __GI___fortify_fail (msg=msg at entry=0x7f29045d89c2 "buffer overflow detected") at fortify_fail.c:31 #4 0x00007f29045696e0 in __GI___chk_fail () at chk_fail.c:28 #5 0x000000000040d526 in strcpy (__src=<optimized out>, __dest=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/string3.h:104 #6 generate_wml_statuscard (host=<optimized out>, entry=<optimized out>) at wmlgen.c:150 #7 do_wml_cards (webdir=0x7f29045d0200 <_itoa_lower_digits> "0123456789abcdefghijklmnopqrstuvwxyz") at wmlgen.c:296 #8 0x0000000000403b72 in main (argc=4404274, argv=0x25ce8) at xymongen.c:678 (gdb) And here's the oldest one: Reading symbols from /usr/lib/xymon/server/bin/xymongen...done. Reading symbols from /usr/lib/debug/.build-id/c8/bc967d123c1a308a9973d19da8c2357af16a6d.debug...done. [New LWP 122254] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `xymongen --recentgifs --subpagecolumns=2 --wml --rss --nongreen-ignorecolumns=l'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f12adf18107 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt #0 0x00007f12adf18107 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007f12adf194e8 in __GI_abort () at abort.c:89 #2 0x00007f12adf56204 in __libc_message (do_abort=do_abort at entry=2, fmt=fmt at entry=0x7f12ae046a2b "*** %s ***: %s terminated\n") at ../sysdeps/posix/libc_fatal.c:175 #3 0x00007f12adfd94c7 in __GI___fortify_fail (msg=msg at entry=0x7f12ae0469c2 "buffer overflow detected") at fortify_fail.c:31 #4 0x00007f12adfd76e0 in __GI___chk_fail () at chk_fail.c:28 #5 0x000000000040d526 in strcpy (__src=<optimized out>, __dest=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/string3.h:104 #6 generate_wml_statuscard (host=<optimized out>, entry=<optimized out>) at wmlgen.c:150 #7 do_wml_cards (webdir=0x7f12ae03e200 <_itoa_lower_digits> "0123456789abcdefghijklmnopqrstuvwxyz") at wmlgen.c:296 #8 0x0000000000403b72 in main (argc=4404274, argv=0x1dd8e) at xymongen.c:678 (gdb) They look more or less identical to me. It's indeed in the WML generation code, should be this line here: https://sources.debian.net/src/xymon/4.3.21-1/xymongen/wmlgen.c/#L150 HTH Kind regards, Axel Beckert -- Axel Beckert <beckert at phys.ethz.ch> support: +41 44 633 26 68 IT Services Group, HPT H 6 voice: +41 44 633 41 89 Departement of Physics, ETH Zurich CH-8093 Zurich, Switzerland http://nic.phys.ethz.ch/

2 4

HTTP test -- 404 results in yellow status?
by hobbit＠elyograg.org 05 Oct '15

05 Oct '15

Below is the text of the status page for the HTTP test on one of my hosts, copied out of a browser window. Note that the specific test line shows "red" (the X icon) ... but this test as a whole is showing a yellow status, and therefore we did not receive an alarm notification. This is monitoring a production website and we were notified of the problem by the customer, not our own monitoring. This makes us look unprofessional. Why would a 404 response code not result in a red status, especially when the inner test is marked red in the text? The Xymon server is version 4.3.21, built as an RPM from unmodified source. I do have "delayred=http:10" on the hosts.cfg line. Could this be a case where the customer notified us before the delayred period expired? Thanks, Shawn =================================== Mon Oct 5 10:29:12 2015: Not Found red http://spark.REDACTED.com:8080/ - Not Found HTTP/1.1 404 Not Found Server: Apache-Coyote/1.1 Content-Length: 0 Date: Mon, 05 Oct 2015 16:28:24 GMT Connection: close Seconds: 0.01

3 2