April 2015 - Xymon - Xymon mailman web

Xymon and ITIL
by abs＠shadymint.com 02 Apr '15

02 Apr '15

Hi, Just been asked by an architect whether it is valid to say that Xymon is aligned with ITIL operations? Has anyone else been asked anything similar? I dont know enough about ITIL to even begin to know how to answer this, can anyone help? Thanks -- Andy

2 1

uptime report / grep cpu days
by thomas.eckert＠it-eckert.de 02 Apr '15

02 Apr '15

Hi Gab, it’s a bit late but I did not see any reply to your post. I wrote a bit on the “fetch status from xymon via cli”-topic published today that should cover your use-case: http://www.it-eckert.com/blog/2015/query-xymon-from-cli/ <http://www.it-eckert.com/blog/2015/query-xymon-from-cli/> For the (missing) `uptime`-status column for *nix xymon-clients: starting with v4.3.18 it is possible to have a separate `uptime`-column for *nix-clients too, more details here: http://www.it-eckert.com/blog/2015/separate-uptime-status-for-all-xymon-cli… <http://www.it-eckert.com/blog/2015/separate-uptime-status-for-all-xymon-cli…> HTH Thomas > On 09 Feb 2015, at 15:03, Dito <dito74 at gmail.com> wrote: > > hi guys, > I've been using XYMon for a while now, I've been running the old free BB 1.08 for a long time, I also purchased the Quest version for a year, but they kept making no improvements. > > My QA and DEV people didn't want to migrate too fast, and since I'm running a bunch of old Windows clients (1.08d for windows 2000, 4.30 and up for 2003 and over), when I chose to migrate my server to XYMon (because it was fully backwards compatible), they put an hold on migrating the agents to BBWin, so I migrated to XYMon and I have a bunch of mixed agents now (some I've migrated, some I didn't). > > Now old agents don't have "uptime" test, new BBWin do, so now to my question.... > > My problem is that XYMon by default doesn't write the logs (only hist and histlogs) and when I needed to run an uptime report of the servers, I used to grep the cpu logs for "days" and I would get all the servers in line with days next to it. > I don't care if I need to run 2 reports, one for new and one for old agents, but I am still having the problem that I am not too sure how to do it now. > > Is there an uptime script or report that someone already have configured so I can deploy it? > > Thank you, > > Gab > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon

1 0

Migrating from BBWin to Xymon PS Client
by BDale＠kitchengroup.com.au 02 Apr '15

02 Apr '15

It looks like you can also ignore against eventids in the analysis.cfg Not very good at regex but something like this might work and then you can match on the anything: LOG eventlog_Application %^warning.* COLOR=yellow "IGNORE=%(\[1111\])|(\[2222\])|(\[1\] - test)" I could be wrong but I think the analysis.cfg is the best place to do this if you want to be able to match on some combo of the provider / eventid / message etc if you do it in alerts.cfg you will still be changing the colour of the msgs test which you might not want. Powershell skills aren't great either... but I think in the powershell client this is where the ignore rules are evaluated in the XymonMsgs Function 1522 if ($entry.ProviderName -match $filter -or $entry.Message -match $filter) You might be able to change it to something like: $fullevent=[string]$level + " - " + [string]$entry.TimeCreated + " - " + "[$($entry.Id)] - " + [string]$entry.ProviderName + " - " + [string]$entry.Message if ($fullevent -match $filter) so you then you are matching against the entire message you see in the msgs column using client-local.cfg, syntax is probably wrong and I don't know what else it would break but you get the idea. Regards, Brandon From: zak.beck at accenture.com [mailto:zak.beck at accenture.com] Sent: Monday, 30 March 2015 6:51 PM To: Brandon Dale; Timothy_Persoon at axi.be; xymon at xymon.com Subject: RE: [Xymon] Migrating from BBWin to Xymon PS Client Hi The fields in the event log message from the PS client are as follows: <level> - <date / time> - [<eventid>] - <provider> - <message> Warning - 03/30/2015 14:11:25 - [1] - test - This is a test message. In the example given, 'test' is the provider. Ignore rules should match against provider or message. You cannot currently ignore against event ids - I believe you could use them in alert.cfg though. If you want to only receive warning or error 'level' messages, you can limit using the eventlogswanted: eventlogswanted:LIST_OF_EVENT_LOGS:MAX_SIZE:REQUIRED_LEVELS REQUIRED_LEVELS is an optional list of the levels you want to report, e.g.: eventlogswanted:*:250000:error,warning Zak From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Brandon Dale Sent: 30 March 2015 04:37 To: Timothy Persoon; xymon at xymon.com<mailto:xymon at xymon.com> Subject: Re: [Xymon] Migrating from BBWin to Xymon PS Client I think this will work: LOG eventlog_System %^error.* COLOR=red LOG eventlog_System %^warning.* COLOR=yellow LOG eventlog_Application %^error.* COLOR=red LOG eventlog_Application %^warning.* COLOR=yellow LOG eventlog_Security %^failure.* COLOR=red The Ignore rules for the eventid's I'm not sure about, in the past with bbwin I have always had to ignore based on the message detail. If someone knows how to do this I would also like to know. In the latest powershell client this is the type of data that you get for events, the eventid is 1 in the below example. Warning - 03/30/2015 14:11:25 - [1] - test - This is a test message. However I haven't had any success using an ignore rule to match anything other than the "This is a test message" part of the message. Regards, Brandon From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Timothy Persoon Sent: Tuesday, 24 March 2015 7:55 PM To: xymon at xymon.com<mailto:xymon at xymon.com> Subject: [Xymon] Migrating from BBWin to Xymon PS Client Hi, I'm migrating from BBWin to the newest Xymon PS Client. However, there are some settings in the BBWin.cfg file that I can't seem to migrate to the analysis.cfg file. In BBWin there are several message checks: <msgs> <setting name="alwaysgreen" value="false" /> <ignore logfile="Application" eventid="1000" /> <ignore logfile="Application" eventid="16385" /> <ignore logfile="Application" eventid="8198" /> <ignore logfile="Application" eventid="489" /> <ignore logfile="System" eventid="6038" /> <setting name="delay" value="1h" /> <match logfile="System" type="error" alarmcolor="red" /> <match logfile="System" type="warning" alarmcolor="yellow" /> <match logfile="Application" type="error" alarmcolor="red" /> <match logfile="Application" type="warning" alarmcolor="yellow" /> <match logfile="Security" type="fail" /> </msgs> but how do I migrate those to analysis.cfg? There seem to be two options: 1) LOG eventlog_application %^warning COLOR=red 2) LOG eventlog:Application %warning COLOR=red Is there a difference between these two notations and is it even possible to migrate the settings of BBWin.cfg to the analysis.cfg? Kind regards, Timothy ________________________________ [cid:image001.gif at 01D06D33.F738D140]

1 0

Content-type: text/html Invalid request
by cleaver＠terabithia.org 01 Apr '15

01 Apr '15

On Wed, April 1, 2015 3:27 am, Ales Krek wrote: > Hi. > When i click any sub page, lets say Report tab and select Top Changes for > example. I get "Content-type: text/html Invalid request" messagee all over > the browser screen. > > Any ideas? :) > Â > Ales, It sounds like there continue to be unusual issues with the Apache configuration there. Can you provide a few lines of the web server log file? For me, whether it's the top page, a sub page, or a hostsvc page, the topchanges.sh call seems to come back as expected. Regards, -jc

1 0

web configuration of xymon
by john.thurston＠alaska.gov 01 Apr '15

01 Apr '15

On 3/27/2015 8:02 AM, Tracy Di Marco White wrote: > Hi all, > > We've been adding a lot of servers and services to our xymon monitoring > deployment, and it's become somewhat more complex to manage changes to > monitored hosts/services, as well as what's critical when, and what > alerts are needed when. I'd like to deploy a web interface, with access > controls of course, where people can change what systems are monitored, > and what services on those systems are monitored, as well as what alerts > they get when. Because there is so much flexibility in xymon, this can > get fairly complex, and I want to add an error checking web interface to > people's ability to change these settings. > > Does anyone already have something like this? I think you may be looking for "MAGMA" which was a work in progress by Squidworks back in 2012. http://lists.xymon.com/pipermail/xymon/2012-October/035876.html > MAGMA is an add-on web GUI for managing Host, Groups and Alarms on a XYmon 4.3 or newer system. > How does it work? > --------------------------- > It stores all alarm and host/group configs in the SQL database and rewrites the Host.cfg, Analysis.cfg and > Alarms.cfg files causing the XYmon system to update its tests and pages based on the changes in these > files. It will overwrite the files each time a host is added or edited making the process of updating > automatic. To get the full benefit of MAGMA you should place all hosts in "central" mode, although this is > not required, without it your management is somewhat restrictive (external test management only). In > Central mode you get full management features for all tests. The site was live a couple of months ago, but I don't get anything from it now. I don't know if that is because the site is down, or because my workplace is blocking it. You could check the Wayback Machine at www.archive.org, but I can't because my workplace blocks that. You could also check the cached content in google, but I can't because my workplace also blocks that. I looked briefly at MAGMA but pulled the plug on it in short order. It seemed silly to me to take an application with a lot of config files of varying complexity, and front it with another application (with its own authentication and authorization) reliant on PHP and mySQL. It was increasing the complexity and difficulty of support and recovery, while not really meeting a business need of ours. In our installation, we have 1,223 hosts which are subject to only 'ping' tests. These hosts are managed by scripts fed from our DNS, and require no day-to-day intervention from humans. (The last time a human touched those files was in April, 2013.) We have about 650 hosts defined with clients. The hosts.cfg is handled day-to-day by by four admins by means of a script which implements simple file-semaphore locking and date-stamp versions. It is simple, and meets our current needs. If we outgrow this, we will probably go to nested .cfg files with 'include' statements. Doing that would let us limit the potential damage from a bad edit without having to deploy more complex admin tools. The management of alerts.cfg is really handled by a single person. The rules and options available have turned out to be too complex to delegate. An application or system owner will come to me and I'll help nail down what their business needs are and determine if they are providing Xymon enough information that an alert can be written to meet that need. Our clients are all handled in "local mode". We do not support "central mode". It is the responsibility of the client-node admins to configure their client software to meet their business needs. The Xymon admins to not have privileges to configure or run code on most of the hosts reporting to Xymon. -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

1 0

ps output cut
by gbegin＠csc.com 01 Apr '15

01 Apr '15

Hello, On machines having a long ps output, the output arrived cut in the XYMON server, provoking false alert on the check of the presence of processes. How to solve that ? Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN Global Service Support Solutions - Tools Support CACEIS and APERAM accounts CSC Computer Sciences Luxembourg S.A. 12D Impasse Drosbach L-1882 Luxembourg Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | gbegin at csc.com | www.csc.com CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664

3 4

Xymon Digest, Vol 50, Issue 27
by traxler＠lsu.edu 01 Apr '15

01 Apr '15

Another option is to move forward with the database idea and simply rewrite the config files for xymon on changes. If it got out of sync, you would simply rebuild all the config files form the database. This approach gives you the best of both worlds: 1) You get database config backend 2) xymon remains simple and easy for others If/when the database backend becomes available, you can cut over to that instead of generating text files. -- Isaac Traxler AIX,Linux Admin Louisiana State University, LONI traxler at lsu.edu High Performance Computing 225-578-1923 Storage & Infrastructure On Mon, 30 Mar 2015, Jeremy Laidman wrote: > Date: Mon, 30 Mar 2015 06:25:38 > From: Jeremy Laidman <jlaidman at rebel-it.com.au> > To: Andrey Chervonets <A.Chervonets at cominder.eu> > Cc: "xymon at xymon.com" <xymon at xymon.com> > Subject: Re: [Xymon] Xymon Digest, Vol 50, Issue 27 > > There was some discussion a while back about abstracting access to the config files so that they could > be (optionally) implemented in database tables. I don't know how far this progressed, but it sure would > make it easier to edit the configurations from a web interface. > J > > On 30 March 2015 at 20:37, Andrey Chervonets <A.Chervonets at cominder.eu> wrote: > Hello, Tracy > > I was going to make this too, but for some reasons it is not implemented yet. > So if You will make this good - it would be very nice for many admins. > > > Best regards, > > Andrey Chervonets > ---------------------- > > > "Xymon" <xymon-bounces at xymon.com> wrote on 28.03.2015 13:00:01: > > > Message: 2 > > Date: Fri, 27 Mar 2015 11:02:57 -0500 > > From: Tracy Di Marco White <gendalia at iastate.edu> > > Message-ID: > > <CAFAt0ET2na9abY+1MxS-Odr4tMa0ki6t2KRn8-p0cRaLNCXRig at mail.gmail.com> > > Content-Type: text/plain; charset="utf-8" > > > > Hi all, > > > > We've been adding a lot of servers and services to our xymon monitoring > > deployment, and it's become somewhat more complex to manage changes to > > monitored hosts/services, as well as what's critical when, and what alerts > > are needed when. I'd like to deploy a web interface, with access controls > > of course, where people can change what systems are monitored, and what > > services on those systems are monitored, as well as what alerts they get > > when. Because there is so much flexibility in xymon, this can get fairly > > complex, and I want to add an error checking web interface to people's > > ability to change these settings. > > > > Does anyone already have something like this? > > > > -Tracy > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > >

1 0

Content-type: text/html Invalid request
by aleskrek＠yahoo.com 01 Apr '15

01 Apr '15

Hi. When i click any sub page, lets say Report tab and select Top Changes for example. I get "Content-type: text/html Invalid request" messagee all over the browser screen. Any ideas? :)

1 0

mounted NFS volumes not included in disk utilization graphs
by jlaidman＠rebel-it.com.au 01 Apr '15

01 Apr '15

On 1 April 2015 at 06:46, Paul Grondahl <paul at arrowtel.net> wrote: > Using CentOS 6.4 > > The last line in the df output shows the NFS mount. > > [df] > Filesystem 1024-blocks Used Available Capacity Mounted on > /dev/vda2 19766140 6449876 12312184 35% / > /dev/vda1 99150 25418 68612 28% /boot > > It's the [df] section of the client data that is used to record disk usage, not the [mount] section. For the Linux client script (xymonclient-linux.sh) the command is "df -Pl" where the "-l" means "local file systems". The script also looks for "nodev" devices and builds an exclude list of filesystem times to remove from the output of "df". This is intended to remove pseudo filesystems such as proc and tmpfs, but also removes NFS-mounted filesystems. There are various manipulations that you need to make in order for the "df" command to show the extra filesystems you want. But in my opinion, the easiest way to accomplish this is to simply add an extra "df" command into the [df] part of the script, showing the extra filesystems you want. Such as: echo "[df]" EXCLUDES=`cat /proc/filesystems | grep nodev | awk '{print $2}' | xargs echo | sed -e 's! ! -x !g'` { df -Pl -x iso9660 -x $EXCLUDES; df -P -t nfs | tail +2; } | sed -e '/^[^ ][^ ]*$/{ N s/[ ]*\n[ ]*/ / }' The bit I added was "df -P -t nfs | tail +2" (along with the {braces} to make it look to awk like a single df command). Give this a go and let me know if it works for you. HTH Cheers Jeremy

1 0