February 2015 - Xymon - Xymon mailman web

Blocking unwanted agents reporting
by eliap09＠yahoo.com 19 Feb '15

19 Feb '15

Thanks much that helpful. I wish I can block by host name. :) Torsten Richter <bb4 at richter-it.net> wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >Hi Eli, > >take a look at the manpage of xymond. >There are several command line options for this binary which control who >can send status messages, maintenance commands or admin commands to the >server. >In your case you might want to add something like > --status-senders=IP/MASK >to tasks.cfg into the [xymond] block to allow status updates only from >IP/MASK. > >HTH >Torsten > >On 19.02.2015 16:57, Eli via Xymon wrote: >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> > >- -- >+---------------------------------------------------------+ >| E-mail : bb4 [at] richter-it.net | >| | >| Homepage: http://www.richter-it.net/ | >+---------------------------------------------------------+ >Download my public key from: >http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.10 (MingW32) > >iEYEARECAAYFAlTmCtsACgkQ7DlmxomQk6xWEgCePYNSNc3IPASBFcJqvZaXD5yn >3yMAoLNWKvC7ps7gINSvpVwLR06HQKHp >=jH6r >-----END PGP SIGNATURE----- >_______________________________________________ >Xymon mailing list >Xymon at xymon.com >http://lists.xymon.com/mailman/listinfo/xymon

1 0

Blocking unwanted agents reporting
by everett.vernon＠gmail.com 19 Feb '15

19 Feb '15

iptables? On 19 February 2015 at 23:57, Eli via Xymon <xymon at xymon.com> wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: Eli <eliap09 at yahoo.com> > To: xymon at xymon.com > Cc: > Date: Thu, 19 Feb 2015 08:51:02 -0700 > Subject: Blocking unwanted agents reporting > Hello, > > Is there a way I can block agents reporting to xymon server. I have 1000 > hosts reports to our sever some of them I don't want them them to report > but the agents on all machine and hard to track the owner to disable the > agent. So I am thinking if there us way can block you can do as exhost for > alert. > > Thanks > Eli > > -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

1 0

Blocking unwanted agents reporting
by bb4＠richter-it.net 19 Feb '15

19 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Eli, take a look at the manpage of xymond. There are several command line options for this binary which control who can send status messages, maintenance commands or admin commands to the server. In your case you might want to add something like --status-senders=IP/MASK to tasks.cfg into the [xymond] block to allow status updates only from IP/MASK. HTH Torsten On 19.02.2015 16:57, Eli via Xymon wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > - -- +---------------------------------------------------------+ | E-mail : bb4 [at] richter-it.net | | | | Homepage: http://www.richter-it.net/ | +---------------------------------------------------------+ Download my public key from: http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iEYEARECAAYFAlTmCtsACgkQ7DlmxomQk6xWEgCePYNSNc3IPASBFcJqvZaXD5yn 3yMAoLNWKvC7ps7gINSvpVwLR06HQKHp =jH6r -----END PGP SIGNATURE-----

1 0

Blocking unwanted agents reporting
by eliap09＠yahoo.com 19 Feb '15

19 Feb '15

Hello, Is there a way I can block agents reporting to xymon server. I have 1000 hosts reports to our sever some of them I don't want them them to report but the agents on all machine and hard to track the owner to disable the agent. So I am thinking if there us way can block you can do as exhost for alert. Thanks Eli

1 0

Hellow
by aleskrek＠yahoo.com 19 Feb '15

19 Feb '15

i'm new to xymon and i don't realy know how to start. do u have any user guide or something? thet would realy help me. i was reading thet article http://www.xymon.com/archive/2005/08/msg00183.html but i don't get it....help. And another think Apache server. I dont hva a server. is it possible to have server (Apache) on computer witch i will be usig or not? I'm using ubuntu Ubuntu 12.04. LTS and when i try to type ak at ubuntu:/usr$ cd /usr/ports/devel/gmake; make; make install i get that... bash: cd: /usr/ports/devel/gmake: No such file or directory make: *** No targets specified and no makefile found. Stop. make: *** No rule to make target `install'. Stop. as u see i don't know much about it. but i want to learn whit your help. Tnx!

1 0

Xymon Powershell Windows client
by lukas.kohl＠ergodirekt.de 19 Feb '15

19 Feb '15

Hello Zak, one more thing ;-) Sometimes the msgs state switches to clear, because there are no new Logs. You won't get this Problem with the Linux client, because it sends at least the monitored files. It can be fixed, by adding an else Statement: if ($logentries -ne $null) { .... else { $payload += "[msgs:eventlog_$l]" + [environment]::newline } In addition to that, you allways know, which logs are monitored. Kind regards, Lukas

2 2

Xymon Powershell Windows client
by lukas.kohl＠ergodirekt.de 19 Feb '15

19 Feb '15

Hello Zak, today I recognized, that the msgs were sent broken: --- Full log eventlog_Security - 02/18/2015 13:54:50 - Microsoft-Windows-Security-Auditing - - 02/18/2015 13:54:50 - Microsoft-Windows-Security-Auditing - Full log eventlog_Application - 02/18/2015 13:54:51 - SceCli - --- I managed to track the issue down to my CurrentCulture setting ($Host or Get-Culture), which was de-DE at my Server. When I changed it to en-US, everything seems to be correct again: --- Full log eventlog_Application Information - 02/18/2015 16:04:57 - nssm - Started C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy RemoteSigned -NoLogo -NonInteractive -NoProfile -WindowStyle Hidden -File "C:\Program Files\xymonps\xymonclient.ps1" for service XymonPSClient in C:\Windows\System32\WindowsPowerShell\v1.0. Information - 02/18/2015 16:04:56 - nssm - Service XymonPSClient received START control, which will be handled. Information - 02/18/2015 16:04:55 - nssm - Killing PID 5100 in process tree of PID 5100 because service XymonPSClient is stopping. Information - 02/18/2015 16:04:55 - nssm - Killing process tree of process 5100 for service XymonPSClient with exit code 0 Information - 02/18/2015 16:04:54 - nssm - Killing process C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe because service XymonPSClient is stopping. Information - 02/18/2015 16:04:54 - nssm - Service XymonPSClient received STOP control, which will be handled. Information - 02/18/2015 15:31:58 - Microsoft-Windows-Security-SPP - The Software Protection service has stopped. --- The Problem is, that the commands [string]$entry.LevelDisplayName and [string]$entry.Message just return empty lines, when CurrentCulture is set to anything different than en-US --> http://powershell.com/cs/forums/p/14969/29273.aspx The behaviour can be fixed, when surrounding the Get-WinEvent with a different Culture (http://poshcode.org/2226) function Set-Culture([System.Globalization.CultureInfo] $culture) { [System.Threading.Thread]::CurrentThread.CurrentUICulture = $culture [System.Threading.Thread]::CurrentThread.CurrentCulture = $culture } $oldCulture = [System.Threading.Thread]::CurrentThread.CurrentUICulture trap { Set-Culture $oldCulture } Set-Culture en-US $logentries = @(Get-WinEvent -ErrorAction:SilentlyContinue -FilterXML $logFilterXML ` -MaxEvents $script:XymonSettings.MaxEvents) Set-Culture $oldCulture Aftwerwards, I can set the culture back to stock. Kind regards, Lukas

2 2

multiple graphs on same custom script
by Sheel.Shah＠rd.com 17 Feb '15

17 Feb '15

Hello, I have a custom script that generates several pieces of data, which are being collected perfectly in their respective RRD files. The issue I have is that the different data that is collected are drastically different in scale to each other, to the point where if I put them on the same graphs.cfg configuration, the lesser numbers on the graph stay stagnant at the bottom of the scale. With that said, is there a way to have multiple graphs for the same column on the xymon homepage? Is it as simple as having two definitions with the same heading (as shown below)? Thank you, Sheel [graphname] TITLE YAXIS DEF LINE1: GPRINT GPRINT GPRINT GPRINT [graphname] TITLE YAXIS DEF LINE1: GPRINT GPRINT GPRINT GPRINT

3 2

Xymon Powershell Windows client
by lukas.kohl＠ergodirekt.de 16 Feb '15

16 Feb '15

Hello Zak, please correct me if I am wrong, but I don't see a proper way to set these settings local: HOST=example-host UP 10m LOAD 80 100 PROC java 10 -1 PORT LOCAL=%[.:]2000[0-9]$ MIN=5 MAX=10 STATE=LISTENING TRACK=ports SVC XymonPSClient status=started startup=automatic In contrast, here is a snippet of localclient.cfg, which is shipped with the Linux client (http://sourceforge.net/p/xymon/code/HEAD/tree/branches/4.3.17/client/localc…) # localclient.cfg - configuration file for a LOCAL Xymon client. # # By default, Xymon clients send raw data to the Xymon server, # which in turn converts the data into status messages. # In that case, THIS FILE IS NOT USED and you should IGNORE it. # # If you want to configure clients locally (on the server that the # client runs one), you do it here. You MUST also change the # clientlaunch.cfg file and add the "--local" option to the # command launching xymonclient.sh # # The file defines a series of rules: # UP : Changes the "cpu" status when the system has rebooted recently, # or when it has been running for too long. # LOAD : Changes the "cpu" status according to the system load. # CLOCK : Changes the "cpu" status if the client system clock is # not synchronized with the clock of the Xymon server. # DISK : Changes the "disk" status, depending on the amount of space # used of filesystems. # MEMPHYS: Changes the "memory" status, based on the percentage of real # memory used. # MEMACT : Changes the "memory" status, based on the percentage of "actual" # memory used. Note: Not all systems report an "actual" value. # MEMSWAP: Changes the "memory" status, based on the percentage of swap # space used. # PROC : Changes the "procs" status according to which processes were found # in the "ps" listing from the client. # LOG : Changes the "msgs" status according to entries in text-based logfiles. # Note: The "client-local.cfg" file controls which logfiles the client will report. # FILE : Changes the "files" status according to meta-data for files. # Note: The "client-local.cfg" file controls which files the client will report. # DIR : Changes the "files" status according to the size of a directory. # Note: The "client-local.cfg" file controls which directories the client will report. # PORT : Changes the "ports" status according to which tcp ports were found # in the "netstat" listing from the client. # DEFAULT: Set the default values that apply if no other rules match. ... Kind regards, Lukas -----Original Message----- Hi Lukas If you just want to use local config files and ignore any config returned by the Xymon server, your xymonclient_config.xml will need to look like the following: <XymonSettings>  <servers>xymonserver.domain.com</servers>  <clientconfigfile>c:\program files\xymon\clientconfig.cfg</clientconfigfile>  <clientremotecfgexec>0</clientremotecfgexec> </XymonSettings> You then setup the local config in the location specified as normal. The directives you can use are listed in http://sourceforge.net/p/xymon/code/HEAD/tree/sandbox/WinPSClient/XymonPSCli ent.doc. I use a similar setup for testing new features. Thanks Zak -----Original Message----- From: lukas.kohl at ergodirekt.de [mailto:lukas.kohl at ergodirekt.de] Sent: 16 February 2015 09:08 To: Beck, Zak Cc: xymon at xymon.com Subject: [Xymon] Xymon Powershell Windows client Hello Zak, thank you a lot for your good work. The Script works pretty well, until now everything went exactly as it should. Our Xymon server is on Version 4.3.17, but our Windows Clients are still using the old BBwin Binary. So they are configured local. Is there any chance to have a localclient.cfg, which can be used by your Powershell Script, like we have on the Linux Clients ? Otherwise a migration to the new Client would be very painfull for us. Kind regards, Lukas Kohl

2 1

Powershell Windows client performance
by lukas.kohl＠ergodirekt.de 16 Feb '15

16 Feb '15

Hello Olivier, at the moment I am running the new Powershell client on an host, which has very little load (win 2008 r2). I can see a cut, since the moment I switched the clients. So I am pretty sure, that the new client performs much better. Kind regards, Lukas -----Original Message----- hello Guys any information about the overhead diff between the powershell agent and the bbwin one ? Someone in my teams seems to think that the binary one got less overhead. thx oau_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

1 0