February 2015 - Xymon - Xymon mailman web

Intermediate cert monitoring
by eliap09＠yahoo.com 26 Feb '15

26 Feb '15

Is there any one monitor intermediate cert with xymon? We had issue on intermidate cert but xymon show green because only check the primary cert. Thanks, Elias

1 0

XymonPowershellClient
by zak.beck＠accenture.com 25 Feb '15

25 Feb '15

Hi Windows mountpoints are on the todo list. Thanks Zak From: Ang, Denver [mailto:Denver.Ang at tamucc.edu] Sent: 19 February 2015 21:23 To: Beck, Zak Subject: XymonPowershellClient Hi Zak, Can you revise the code so that it will show the LUNS in the mountpoints? Denver Ang Systems Administrator II Information Technology Texas A&M University - Corpus Christi (361) 825-2854

2 3

Windows Xymon PS Client 1.98 disk RRD collection issue
by g.stone-tolcher＠its.uq.edu.au 25 Feb '15

25 Feb '15

Hmm, RRD collection for "disk" seems to be broken for me with Xymon PS Client v1.98. Based on my interpretation of the code in xymon/rrd/do_disk.c, see below, I changed the following in xymonclient.ps1 Line 1347 from: $mountpoint, ` to "/FIXED/$mountpoint", ` Now both the "C" and "MountPointTest" as per disk chuck below are collected OK: v1.93: [disk] Filesystem 1K-blocks Used Avail Capacity Mounted Label Summary(Total\Avail GB) C 104753148 41374564 63378584 39% C:\ SYSTEM 99.90\60.44 MountPointTest 104753148 41374564 63378584 39% C:\MountPointTest\ SYSTEM 99.90\60.44 Mod v1.98 [disk] Filesystem 1K-blocks Used Avail Capacity Mounted Label Summary(Total\Avail GB) C 104753148 41304580 63448568 39% /FIXED/C:\ SYSTEM 99.90\60.51 MountPointTest 104753148 41304580 63448568 39% /FIXED/C:\MountPointTest\ SYSTEM 99.90\60.51 It would probably be best to do this quick hack or similar to restore RRD collection/graphs until if/when the "do_disk.c" can be taught about the Xymon PS Client disk output? Cheers, Gavin Stone-Tolcher, IT Support Officer, Network Operations and Incident Response Information Technology Services The University of Queensland Level 4, Prentice Building, St Lucia 4072 T: +61 7 334 66645, M: +61 401 140 838 E: g.stone-tolcher at its.uq.edu.au<mailto:g.stone-tolcher at its.uq.edu.au> W: www.its.uq.edu.au<http://www.its.uq.edu.au> ITS: Service. Team. Accountability. Results. IMPORTANT: This email and any attachments are intended solely for the addressee(s), contain copyright material and are confidential. We do not waive any legal privilege or rights in respect of copyright or confidentiality. Except as intended addressees are otherwise permitted, you do not have permission to use, disclose, reproduce or communicate any part of this email or its attachments. Statements, opinions and information not related to the official business of The University of Queensland are neither given nor endorsed by us. By using this email (including accessing any attachments or links) you agree we are not liable for any loss or damage of any kind arising in connection with any electronic defect, virus or other malicious code we did not intentionally include. Please consider the environment before printing this email. CRICOS Code 00025B From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Gavin Stone-Tolcher Sent: Wednesday, 25 February 2015 11:13 AM To: 'zak.beck at accenture.com'; xymon at xymon.com Subject: Re: [Xymon] Windows Xymon PS Client 1.98 And one final one for the list. If this is the final output of "disk" for the new powershell client, then it would be nice if the Xymon server module xymond/rrd/do_disk.c could be trained to graph the mountpoints in addition to the driveletter. I am running server v4.3.18 and the mountpoint is not being RRD collected or graphed. I should point out that the BBWIN collected mountpoints were also not being graphed either, so it that sense it is the same situation. I see we have a couple of windows client types handled in that module, DT_NT and DT_BBWIN. Both of these clients are getting on a bit and it appears that the powershell client might be the way to go for the future with Windows platforms, so maybe DT_PS is needed? For reference, an example chunk from client message from my test system is: [disk] Filesystem 1K-blocks Used Avail Capacity Mounted Label Summary(Total\Avail GB) C 104753148 41374564 63378584 39% C:\ SYSTEM 99.90\60.44 MountPointTest 104753148 41374564 63378584 39% C:\MountPointTest\ SYSTEM 99.90\60.44 The module looks to be treating this as BB_NT output as we begin with "Filesystem" like the BB_NT client. I think this is the codethat might be causing an issue: if ( (dsystype == DT_NT) && (*(columns[5])) && (strchr(columns[0], '/')) ) where BBNT client would have something like "/FIXED/C" being evaluated? I attach a previous email to the list where the same issue was seen. In that case modifying the poweshell client to display something like "/FIXED/F:\ORAARCHIVE" for a mountpoint caused the mountpoints to be collected/graphed. If someone could look into this for a future update it would be appreciated, as my windows guys would like to see graphs for their mountpoints. Cheers, Gavin Stone-Tolcher, IT Support Officer, Network Operations and Incident Response Information Technology Services The University of Queensland Level 4, Prentice Building, St Lucia 4072 T: +61 7 334 66645, M: +61 401 140 838 E: g.stone-tolcher at its.uq.edu.au<mailto:g.stone-tolcher at its.uq.edu.au> W: www.its.uq.edu.au<http://www.its.uq.edu.au> ITS: Service. Team. Accountability. Results. IMPORTANT: This email and any attachments are intended solely for the addressee(s), contain copyright material and are confidential. We do not waive any legal privilege or rights in respect of copyright or confidentiality. Except as intended addressees are otherwise permitted, you do not have permission to use, disclose, reproduce or communicate any part of this email or its attachments. Statements, opinions and information not related to the official business of The University of Queensland are neither given nor endorsed by us. By using this email (including accessing any attachments or links) you agree we are not liable for any loss or damage of any kind arising in connection with any electronic defect, virus or other malicious code we did not intentionally include. Please consider the environment before printing this email. CRICOS Code 00025B From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of zak.beck at accenture.com Sent: Tuesday, 24 February 2015 11:07 PM To: xymon at xymon.com Subject: [Xymon] Windows Xymon PS Client 1.98 Hi I've just committed version 1.98 to the project repository - http://sourceforge.net/p/xymon/code/HEAD/tree/sandbox/WinPSClient/. This update has a number of fixes and additions thanks to the suggestions and reaction to the previous patches, thanks to Gavin, Brandon and others for your feedback. List of changes: * Mount points are now shown in the disk section, similar to BBWin. The drive label has been added and the column alignment adjusted to suit drives up to 999TB. * The eventlogswanted directive now supports wildcards in the list of event logs field. So you can now return all event logs like this: eventlogswanted:*:250000 * The eventlogswanted directive also supports an optional fourth field to specify which levels of event should be returned - critical, error, warning, information, verbose. By default, all are returned. Values in the field should be comma-delimited, e.g.: eventlogswanted:*:250000:error,warning,critical * The dirsize directive now works for files as well as directories. Thanks to everyone, I really appreciate your feedback. Regards Zak

2 1

Windows Xymon PS Client 1.98
by zak.beck＠accenture.com 25 Feb '15

25 Feb '15

Hi I've just committed version 1.98 to the project repository - http://sourceforge.net/p/xymon/code/HEAD/tree/sandbox/WinPSClient/. This update has a number of fixes and additions thanks to the suggestions and reaction to the previous patches, thanks to Gavin, Brandon and others for your feedback. List of changes: * Mount points are now shown in the disk section, similar to BBWin. The drive label has been added and the column alignment adjusted to suit drives up to 999TB. * The eventlogswanted directive now supports wildcards in the list of event logs field. So you can now return all event logs like this: eventlogswanted:*:250000 * The eventlogswanted directive also supports an optional fourth field to specify which levels of event should be returned - critical, error, warning, information, verbose. By default, all are returned. Values in the field should be comma-delimited, e.g.: eventlogswanted:*:250000:error,warning,critical * The dirsize directive now works for files as well as directories. Thanks to everyone, I really appreciate your feedback. Regards Zak

3 5

FreeBSD pkgaudit xymon script
by feld＠feld.me 25 Feb '15

25 Feb '15

I hacked together a script to collect pkgaudit data with Xymon and potentially alert when one of your servers has vulnerable packages installed. It can also optionally run pkgaudit against all of your jails on the server in case you don't want to have a separate xymon-client in each jail. The jails can be filtered out with grep and by default ignore jails with "poudriere" in the name or path as those are short lived and would be false positives. I'm considering having it be installed by default with the net-mgmt/xymon-client port and I'm also unsure if I should enable it by default. The data output is simple and could probably be improved, but it seems to serve the purpose well enough. I've also thrown it on github so if anyone cares enough to tweak and tune it I'll certainly be interested in your changes. https://github.com/feld/xymon-ext-scripts/ Cheers!

3 3

auto tcp trace on http failures
by troy＠athabascau.ca 25 Feb '15

25 Feb '15

Is there anyway to immediately do a TCP trace when an HTTP service goes down and include that data in the status page? cheers, Troy -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ---

2 1

Fw: Invalid XML
by jason.jones＠codelsoftware.com 24 Feb '15

24 Feb '15

Sorry just realised the list wasn't cc'd on this. Kind Regards, Jason. Jason Jones Senior Analyst/Developer Phone: +44 (0)1656 667009 E-mail: jason.jones at codelsoftware.com Hi jc, As requested: ># cat -A ServerStatus.txt <ServerStatus>^M$ ^I<ServerName>[hostname]</ServerName>^M$ ^I<Type>http</Type>^M$ ^I<Status>red</Status>^M$ ^I<TestFlags></TestFlags>^I^M$ ^I<LastChange>Fri Feb 13 17:08:14 2015</LastChange>^I^M$ ^I<LogTime>Fri Feb 13 17:11:14 2015</LogTime>^M$ ^I<ValidTime>Fri Feb 13 17:41:14 2015</ValidTime>^M$ ^I<AckTime>N/A</AckTime>^M$ ^I<DisableTime>N/A</DisableTime>^M$ ^I<Sender>10.1.1.200</Sender> <Cookie>148280</Cookie>^M$ ^I<MessageSummary>^M$ ^I^I<![CDATA[status+30 [hostname].http red Fri Feb 13 17:11:14 2015: M-^@^C]]>^M$ ^I</MessageSummary>^M$ The HTTP server is running IBM HTTP Server (basically apache modded slightly) so I guess there may be something unexpected in the return, though at the time of this status the server was off so should not have produced anything special. Kind Regards, Jason. Jason Jones Senior Analyst/Developer Phone: +44 (0)1656 667009 E-mail: jason.jones at codelsoftware.com From: "J.C. Cleaver" <cleaver at terabithia.org> To: "Jason Jones" <jason.jones at codelsoftware.com> Cc: xymon at xymon.com Date: 18/02/2015 15:31 Subject: Re: [Xymon] Invalid XML On Wed, February 18, 2015 2:15 am, Jason Jones wrote: > Hi Everyone, > > Just thought we'd flag this - on some tests when the status is red the XML > being returned has an invalid character. > > I've tried (unsuccessfully) checking for release notes to see if this has > been addressed previously but couldn't find anything (apologies in advance > if it has been fixed previously). > > See the XML below - the issue is on the CDATA line just after the â‚¬ > symbol > > <ServerStatus> > <ServerName>[hostname]</ServerName> > <Type>http</Type> > <Status>red</Status> > <TestFlags></TestFlags> > <LastChange>Fri Feb 13 17:08:14 2015</LastChange> > <LogTime>Fri Feb 13 17:11:14 2015</LogTime> > <ValidTime>Fri Feb 13 17:41:14 2015</ValidTime> > <AckTime>N/A</AckTime> > <DisableTime>N/A</DisableTime> > <Sender>10.1.1.200</Sender> <Cookie>148280</Cookie> > <MessageSummary> > <![CDATA[status+30 [hostname].http red Fri Feb 13 17:11:14 > 2015: â‚¬]]> > </MessageSummary> > </ServerStatus> > > We are currently running 4.3.18. If you need any more information please > let us know. > > Kind Regards, > Jason. > > Jason Jones > Senior Analyst/Developer > > Interesting. Can you tell us if the errant XML occurs on all xymondx queries coming back, or just 'http' results? And all http results, or just this particular one? The text where the corruption is should be the post-HTTP Status response code text, if a connection was possible, or a string with certain types of connection issues (eg, 'No route to host'), if not. It's possible something is getting through corrupted. Is it a standard http server on the other end? Also, can you pipe this through "cat -A"? Regards, -jc ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ Codel Software Ltd Unit 1C Charnwood Park Bridgend CF31 3PL +44 (0)1656 750 858 +44 (0)1656 648 649 info at codelsoftware.com http://www.codelsoftware.com Follow Us: @codel_software at activabsence Linkedin http://www.activabsence.co.uk Registered in Wales No. 5838660 DELIVERING QUALITY: At Codel Software we are committed to delivering quality software, services and client interactions. We have demonstrated this through quality audits and customer satisfaction. Codel Software is an ISO 9001:2008 certified company. CONFIDENTIALITY NOTICE: This message is confidential and for the use only of the intended recipient. If you receive the message in error you are not entitled to disseminate, copy or use the contents in any way. In such circumstances please forward the message back to the sender. WARNING :While Codel Software takes steps to prevent computer viruses from being transmitted via electronic mail attachments we cannot guarantee that attachments do not contain computer virus code. You are therefore strongly advised to undertake anti virus checks prior to accessing the attachment to this electronic mail. Codel Software grants no warranties regarding performance use or quality of any attachment and undertakes no liability for loss or damage howsoever caused. If you do not want to receive similar communications by e-mail from Codel Software, please reply to this e-mail with 'remove' in the subject line. Help the environment –please don't print this email unless you really need to! Codel Software Ltd Unit 1C Charnwood Park Bridgend CF31 3PL +44 (0)1656 750 858 +44 (0)1656 648 649 info at codelsoftware.com http://www.codelsoftware.com Follow Us: @codel_software at activabsence Linkedin http://www.activabsence.co.uk Registered in Wales No. 5838660 DELIVERING QUALITY: At Codel Software we are committed to delivering quality software, services and client interactions. We have demonstrated this through quality audits and customer satisfaction. Codel Software is an ISO 9001:2008 certified company. CONFIDENTIALITY NOTICE: This message is confidential and for the use only of the intended recipient. If you receive the message in error you are not entitled to disseminate, copy or use the contents in any way. In such circumstances please forward the message back to the sender. WARNING :While Codel Software takes steps to prevent computer viruses from being transmitted via electronic mail attachments we cannot guarantee that attachments do not contain computer virus code. You are therefore strongly advised to undertake anti virus checks prior to accessing the attachment to this electronic mail. Codel Software grants no warranties regarding performance use or quality of any attachment and undertakes no liability for loss or damage howsoever caused. If you do not want to receive similar communications by e-mail from Codel Software, please reply to this e-mail with 'remove' in the subject line. Help the environment –please don't print this email unless you really need to! ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________

1 0

BBALPHAMSG Size Truncated
by sgb＠pics.com 24 Feb '15

24 Feb '15

Is there a location to set the max size of BBALPHAMSG? Since upgrading from 4.21 to 4.3.18, email alerts with large $BBALPHAMSG are getting truncated If I output $BBALPHAMSG to a text file named al1.txt and then examine it: Linux word count (wc) shows newline, word, and byte counts wc al1.txt 55 247 4075 al1.txt Thanks Steve

2 1

Xymon 4.3.18 Receiving all status message only from 127.0.0.1 ?!
by maik＠vegasystems.com 24 Feb '15

24 Feb '15

We have installed Xymon 4.3.18 and I noticed we are receiving all status messages from 127.0.0.1 and not from the client IP?! Why is that? For sure all our clients sending data over their own IP. Maik

2 1

Change event list table layout
by s.fornasiere＠gmail.com 24 Feb '15

24 Feb '15

Hi, I'm changing the layout of Xymon (html ,css and icons) to a better looking and polished experience. I cannot find where is generated the table of events report, I would like to change it's default blue/black color... it's possible that it's coded under some cgi? Thank you. -- Simone Fornasiere

2 1