March 2015 - Xymon - Xymon mailman web

SSL Certs on servers with multiple virtualhosts
by troy＠athabascau.ca 26 Mar '15

26 Mar '15

I know this is an old thread but I am still interested in this functionality. Does the latest Xymon support this? cheers, Troy ----- Original Message ----- From: "John D. Alexander" <JAlexander at feeneywireless.com> To: xymon at xymon.com Sent: Friday, August 9, 2013 3:03:55 PM GMT -07:00 US/Canada Mountain Subject: Re: [Xymon] SSL Certs on servers with multiple virtualhosts Henrik, Have you been able to make any progress on the multiple ssl VirtualHost issue? If need be, I can let apply the patch on a system that is reachable from outside and give you access (https) if I can get your IP address. Thanks much John Alexander -----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Henrik Størner Sent: Wednesday, August 07, 2013 2:23 PM To: xymon at xymon.com Subject: Re: [Xymon] SSL Certs on servers with multiple virtualhosts On 07-08-2013 19:56, John D. Alexander wrote: > The website is private. I've already rolled back the code but I can > reapply the patch and take screen shots if need be. > > Judging from the fact that Xymon was saying that the certificates > expired about 42 years ago, a couple of the programmers here indicate > that it's not picking up data from the certificate properly and > interpreting that as the epoch and counting forward from there for > expiration date. Xymon uses the OpenSSL library routines to handle the SSL details, so I would be rather surprised if some kind of bogus certificate data got through all the way to the Xymon code - the openssl library is supposed to discard such invalid data and report an error. More likely it is some kind of integer overflow. 15500 days before now is suspiciously close to Jan 1st 1970 (start of Unix epoch). But it surprises me a bit, since I setup a test site here with two vhosts and different certificates, and the new code worked fine here - got the right certificate for each of the two hosts. What version of OpenSSL are you running on the server where Xymon is compiled ? You can check by running "xymonnet --version". I'll probably send you (directly, not via the list) a test-version of Xymon that logs some more debugging data for this - sometime later this week. Regards, Henrik _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ---

2 1

svcstatus.sh
by cleaver＠terabithia.org 26 Mar '15

26 Mar '15

On Thu, March 26, 2015 1:28 am, Ales Krek wrote: > Hi.I can't get svcstatus.sh on the web browser. The only option i get when > i click on conn icon of som monitored device in to download svcstatus.sh. > Can some one please tell me what I'm missing or doing wrong. I would be > wary glad if some one could send me an example of the configuration. > > I'm wary new to xymon. Manny Thanks to all of you guy. > Ales Krek.Â > It sounds like ".sh" files might not be being recognized as a CGI script by your web server. Depending on your version, you may need a line something like this: AddHandler cgi-script .sh ...in your apache config. Alternatively, you might want to compare the xymon-apache.conf file that came with the package with the version that you have installed and look for any discrepancies. HTH, -jc

1 0

Bbwin and Xymon
by franck＠servignat.net 26 Mar '15

26 Mar '15

Hie, IT seems that Xymon cant read informations on Network HD. And the sale pb with Vmware server WE have windows server as clients and WE use BBwin. Is this a known issue by some of you ? Thank's franck servignat 06 51 55 70 40

1 0

svcstatus.sh
by aleskrek＠yahoo.com 26 Mar '15

26 Mar '15

Hi.I can't get svcstatus.sh on the web browser. The only option i get when i click on conn icon of som monitored device in to download svcstatus.sh. Can some one please tell me what I'm missing or doing wrong. I would be wary glad if some one could send me an example of the configuration. I'm wary new to xymon. Manny Thanks to all of you guy. Ales Krek.

1 0

Xymon 4.3.19-rc1 available
by cleaver＠terabithia.org 25 Mar '15

25 Mar '15

Hello all! A pre-release (RC1) candidate of Xymon 4.3.19 has been posted to SourceForge and should be slowly making its way through the mirror system now! You can pick it up at: https://sourceforge.net/projects/xymon/files/Xymon/4.3.19-rc1/ There are a fair number of bug fixes in it, so I'd definitely appreciate as many people as possible taking it for a spin. WinPS Client processing should be better supported, and a number of issues with logfetch have been fixed (particularly in unusual filtration and regex situations). Please see the RELEASENOTES and Changelog for a full list. New features include additional "xymondboard" filters, EXTIME= rule support, compiler/building fixes, more efficient operation while running in --debug mode. If you notice any (new) bugs, or if I missed any patches or current issues, let me know! If no major problems pop up, I'm shooting to release 4.3.19 final some time this weekend. Regards, -jc

2 2

rrd logs and graphs
by everett.vernon＠gmail.com 25 Mar '15

25 Mar '15

Hi all Patched and reinstalled. But it didn't go quite as well as expected. Lots of shit broke. Then I remembered it overwrites most of the config files. Which will do that. There were a few minutes of panic there, until I remembered it makes backups of everything. :-) Copied the backup configs back, and it started to look good again. Whew! And, it looks like we have debug data. Now to catch it when it goes wrong. Regards Vernon On 25 March 2015 at 13:07, Jeremy Laidman <jlaidman at rebel-it.com.au> wrote: > On 25 March 2015 at 15:54, Vernon Everett <everett.vernon at gmail.com> > wrote: > >> Ah! >> There are two patches for this. >> Yours, and JC's. >> I have been trying to apply JC's >> Attempting yours fails too. :-( >> > > Mine would possibly fail if JC's has already been applied, and vice versa. > > Both patches do a similar thing, just at different places in the code > execution path. Mine catches the null pointer and avoids calling > binview(), whereas JC's catches the null pointer inside binview(). I > suspect JC's patch will end up going into a future release of Xymon, so I'd > probably go with his. > > J > > -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

1 0

Bug in handling of Windows services
by Neil.Simmonds＠express-gifts.co.uk 25 Mar '15

25 Mar '15

I believe there is a bug in the way Xymon handles Windows service data. I've always used BBWin agents and had the issue when a Service is in a stopped state that Xymon actually reports, Service is started/automatic - want started/automatic This is with the analysis.cfg line of SVC Service status=started startup=automatic I'm currently testing the WinPSClient and have found that I also get the same erroneous message with that. This suggests to me the Xymon is icorrectly handling the data from the client. I'm on version 4.3.4 of Xymon Server. I had a look through the release notes for all versions since 4.3.4 and couldn't find any mention of it so I suspect it is still an issue. Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

5 7

dnsreg script question
by john＠executech.com 24 Mar '15

24 Mar '15

Apologies for resurrecting an old thread. I added the sleep to the command because I'm running bbcmd on a few hundred domains. The script failed to run and I'm not sure why. My other issue is that there are a few domains that I want to run individually instead of it running the script on all the domains. Is there a way to kick off a test for a single host? I tried using "bbcmd hobbitd_alert --test domain.com dnsreg" but that only told me what alert rules applied to this but didn't update anything. Is there some command where I can tell a specific domain to do a fresh dnsreg? John Tullis ________________________________ Ok let me tweak it around. What does this line do anyhow? I keep seeing that pop up and then the error about command being not found thanks "status+90000 $DOMAIN.dnsreg $COLOR `date` From: Dugan, Darin D [EIT] [mailto:dddugan at iastate.edu<http://lists.xymon.com/mailman/listinfo/xymon>] Sent: Friday, September 21, 2012 10:50 AM To: Russell Blumenthal; xymon at xymon.com<http://lists.xymon.com/mailman/listinfo/xymon> Subject: RE: dnsreg script question Rereading your message, it seems perhaps $XYMON or $XYMDISP are not populated. Are you running this under xymoncmd to set the environment? I run from cron daily with: /home/xymon/server/bin/xymoncmd --env=/home/xymon/server/etc/xymonserver.cfg /home/xymon/server/ext/dnsreg A few other differences in my script: 1. I'm using $XYMSRV instead of $XYMDISP. Hmm...I don't have a $XYMDISP anywhere, maybe $BBDISP wasn't updated to $XYMSRV properly? 2. Added a "sleep 60" command before "done". Whois seems to get angry with me if I query a bunch of domains in quick succession. 3. Had to modify the sed commands for EXPIRESTRING: EXPIRESTRING="`whois $DOMAIN | egrep -i "Expires.*:|Expiration.*:|Renewal.*:" | head -n 1 | cut -d: -f2 | sed -e's/^\s*//' | sed -e's/\s.*//'`" Cheers. From: Russell Blumenthal [mailto:rblumenthal at telmar.com<http://lists.xymon.com/mailman/listinfo/xymon>] Sent: Friday, September 21, 2012 8:09 AM To: Dugan, Darin D [EIT]; xymon at xymon.com<http://lists.xymon.com/mailman/listinfo/xymon> Subject: RE: dnsreg script question I installed 'whois' and I am able to do a manual query 'whois domain.com'. but unable to run the script manually to test it. From: Dugan, Darin D [EIT] [mailto:dddugan at iastate.edu<http://lists.xymon.com/mailman/listinfo/xymon>] Sent: Friday, September 21, 2012 9:05 AM To: Russell Blumenthal; xymon at xymon.com<http://lists.xymon.com/mailman/listinfo/xymon> Subject: RE: dnsreg script question I'm guessing you don't have 'whois' available or in the path. From: xymon-bounces at xymon.com<http://lists.xymon.com/mailman/listinfo/xymon> [mailto:xymon-bounces at xymon.com<http://lists.xymon.com/mailman/listinfo/xymon>] On Behalf Of Russell Blumenthal Sent: Thursday, September 20, 2012 4:30 PM To: xymon at xymon.com<http://lists.xymon.com/mailman/listinfo/xymon> Subject: [Xymon] dnsreg script question I am having an issue trying to get the dnsreg script working. I install it and all and when I go to test it I get this (I took out my domain). Any help would be appreciated. Thanks ./dnsreg.sh: line 31: status+90000 mydomain.com.dnsreg red Thu Sep 20 17:27:42 EDT 2012 Domain mydomain.com expires on : command not found The script looks like this: #!/bin/sh # Check DNS registrations in whois and warn when they are about to expire. # # NOTE: Requires a "whois" command that knows what servers to query. # Requires GNU date. # Should run only once a day. NOW=`date "+%s"` WARNTIME=`expr $NOW + 864000` # 10 days ALARMTIME=`expr $NOW + 432000` # 5 day /home/xymon/server/bin/xymongrep dnsreg | while read L do set $L DOMAIN=$2 EXPIRESTRING="`whois $DOMAIN | egrep -i "Expires.*:|Expiration.*:|Renewal.*:" | head -n 1 | cut -d: -f2 | sed -e's/^[ ]*//'`" EXPIRES=`date --date="$EXPIRESTRING" "+%s"` if test $EXPIRES -le $ALARMTIME then COLOR=red elif test $EXPIRES -le $WARNTIME then COLOR=yellow else COLOR=green fi $XYMON $XYMDISP "status+90000 $DOMAIN.dnsreg $COLOR `date` Domain $DOMAIN expires on $EXPIRESTRING " done

2 1

Migrating from BBWin to Xymon PS Client
by timothy_persoon＠hotmail.com 24 Mar '15

24 Mar '15

Hi, I'm migrating from BBWin to the newest Xymon PS Client. However, there are some settings in the BBWin.cfg file that I can't seem to migrate to the analysis.cfg file. In BBWin there are several message checks: <msgs> <setting name="alwaysgreen" value="false" /> <ignore logfile="Application" eventid="1000" /> <ignore logfile="Application" eventid="16385" /> <ignore logfile="Application" eventid="8198" /> <ignore logfile="Application" eventid="489" /> <ignore logfile="System" eventid="6038" /> <setting name="delay" value="1h" /> <match logfile="System" type="error" alarmcolor="red" /> <match logfile="System" type="warning" alarmcolor="yellow" /> <match logfile="Application" type="error" alarmcolor="red" /> <match logfile="Application" type="warning" alarmcolor="yellow" /> <match logfile="Security" type="fail" /> </msgs> but how do I migrate those to analysis.cfg? There seem to be two options: 1) LOG eventlog_application %^warning COLOR=red 2) LOG eventlog:Application %warning COLOR=red Is there a difference between these two notations and is it even possible to migrate the settings of BBWin.cfg to the analysis.cfg? Kind regards, Timothy

1 0

Windows Powershell client v2.01
by zak.beck＠accenture.com 24 Mar '15

24 Mar '15

I have today committed v2.01. Changes: * event logs now include the event id, in square brackets * added clientclass to xymonclient_config.xml to allow overriding the default class of 'powershell' The XymonPSClient.doc file has been updated. Event log records now contain the event id just after the date, in square brackets to make it easier to pick out in a regex. For example, in this case the event id is 9724: Information - 03/24/2015 08:38:32 - [9724] - MSSQLSERVER - The activated proc.... Secondly, a new configuration item 'clientclass' has been added to xymonclient_config.xml to allow setting the class reported back to the server. By default, this is 'powershell'. Zak

1 0