May 2015 - Xymon - Xymon mailman web

Email alerting for content check
by mburger＠bubbanfriends.org 07 May '15

07 May '15

Good afternoon, all. I'm running Xymon 4.3.19 and I've implemented content checking for specific URLs in my setup, but the actual process to alert, on screen, when the content does not match does work. The issue that I'm having is that Xymon isn't sending out the email alerts for that content check. So, my hosts file entry looks like this: page dorado Dorado xxx.xxx.xxx.xxx hostname.company.com # NAME:"Dorado Price Engine 1" NOCOLUMNS:conn,disk,files,cpu,memory,msgs,ports,procs,inode cont=content;https://some.url.to.check/subdir;"Sorry,[[:space:]]I[[:space:]]don't[[:space:]]speak[[:space:]]via[[:space:]]HTTP[[:space:]]GET" yyy.yyy.yyy.yyy hostname2.company.com # NAME:"Dorado Price Engine 2" NOCOLUMNS:conn,disk,files,cpu,memory,msgs,ports,procs,inode cont=content;https://another.url.to.check/subdir;"Sorry,[[:space:]]I[[:space:]]don't[[:space:]]speak[[:space:]]via[[:space:]]HTTP[[:space:]]GET" This works...I get column "content" and it goes red if the site does not return the text "Sorry, I don't speak via HTTP GET". My alerts.cfg looks like this: PAGE=%(dorado) MAIL list,of,recipients REPEAT=3 SERVICE=http,cont,content RECOVERED The xymonnet section of my tasks.cfg looks like this: [xymonnet] ENVFILE /apps/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD xymonnet --report --ping --checkresponse --content=content,ptcls1,ptcls2,ptcls3,ptcls4 LOGFILE $XYMONSERVERLOGS/xymonnet.log INTERVAL 1m I've also tried this in my tasks.cfg: [xymonnet] ENVFILE /apps/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD xymonnet --report --ping --checkresponse --content=content --content=ptcls1 --content=ptcls2 --content=ptcls3 --content=ptcls4 LOGFILE $XYMONSERVERLOGS/xymonnet.log INTERVAL 1m I'm at a loss...how do I make Xymon send out alerts on the actual content checks...what the heck am I doing wrong? -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1

1 1

Segmentation Fault (core dumped) with xymond_alert
by john.thurston＠alaska.gov 07 May '15

07 May '15

I bumped into this again today. I was working up some new alert conditions and tested them with: > xymondmd xymond_alert --config=foo.cfg --test foo.bar.com msgs --color=red It works as expected if foo.bar.com is defined, but if that host _isn't_ defined in the hosts.cfg, xymond_alert core dumps. For 4/3/17 on Solaris, the stack of the dump looks like: > fee12d10 strlen (37c93, ffbf50b4, 96164, 0, 0, 0) + 50 > fee81924 vfprintf (50190, 37c68, ffbf50a8, 0, a0ba4, fee81424) + ec > 0001a554 traceprintf (37c68, af7e8, 96160, 0, 50190, 4b800) + 84 > 0001c2fc criteriamatch (7, 55030, 0, 0, 0, 4bc00) + e4 > 0001e8b4 next_recipient (aff30, ffbf51a8, 0, 0, 4bc24, 4bc28) + 90 > 00017054 send_alert (aff30, 501b0, 0, ffbf51a8, 4bc00, ffff7fe4) + 17c > 00034550 main (0, 0, 0, 0, 501b0, aff30) + 1368 > 00014940 _start (0, 0, 0, 0, 0, 0) + 5c Granted that in production xymond_alert will probably not be fed an undefined host, but it would be nicer if it handled the condition a little more elegantly. -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

2 3

Missing events on server's history page?
by betsy.schwartz＠gmail.com 07 May '15

07 May '15

Running xymon 4.3.17 , on linux, wondering if anyone's seen anything like this? for example our "edapps2-cf2" just alerted on cpu. The non-green view shows these most recent event Wed Apr 22 09:33:25 2015 edapps2-cf2.example.com cpu (yellow->green) Wed Apr 22 09:28:24 2015 edapps2-cf2.example.com cpu (red->yellow) Wed Apr 22 09:18:22 2015 edapps2-cf2.example.com cpu (yellow->red) Wed Apr 22 09:08:19 2015 edapps2-cf2.example.com cpu (green->yellow) When we go to the host page then cpu dot,and look at the full history we don't see them All log entries Date Status Duration Mon Apr 13 17:00:44 2015 8 days 16:40:47 (green) Mon Apr 13 16:45:41 2015 0:15:03 (yellow) Tue Mar 24 19:11:14 2015 19 days 21:34:27 (green) When we look at Reports/Event log they show up Wed Apr 22 09:43:45 2015 edapps2-cf2.example.com http green >From -> To yellow Wed Apr 22 09:33:25 2015 edapps2-cf2.example.com cpu yellow >From -> To green Wed Apr 22 09:28:24 2015 edapps2-cf2.example.com cpu red From -> To yellow Wed Apr 22 09:18:22 2015 edapps2-cf2.example.com cpu yellow >From -> To red Wed Apr 22 09:08:19 2015 edapps2-cf2.example.com cpu green From -> To yellow why aren't they on the host/cpu history page? thanks for any clues/explanation. We do see other events with shorter duration on that history page

3 4

Program crashed Fatal signal caught!
by gguerrav＠gmail.com 07 May '15

07 May '15

When I add this line to the hosts.cfg file a Iget a Fatal singnal caught 6 3.0.0.22 socaire.aguasantofagasta.cl # ftp Tihs is debug log gdb bin/xymonnet tmp/core.3845 GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-64.el7 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /home/xymon/server/bin/xymonnet...done. [New LWP 3845] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `xymonnet --report --ping --checkresponse --debug --no-ares'. Program terminated with signal 6, Aborted. #0 0x00007f6c7ddce5d7 in raise () from /lib64/libc.so.6 Missing separate debuginfos, use: debuginfo-install cyrus-sasl-lib-2.1.26-17.el7.x86_64 glibc-2.17-78.el7.x86_64 nspr-4.10.6-3.el7.x86_64 nss-3.16.2.3-5.el7.x86_64 nss-softokn-freebl-3.16.2.3-9.el7.x86_64 nss-util-3.16.2.3-2.el7.x86_64 openldap-2.4.39-6.el7.x86_64 pcre-8.32-14.el7.x86_64 sssd-client-1.12.2-58.el7_1.6.x86_64 zlib-1.2.7-13.el7.x86_64 (gdb) bt #0 0x00007f6c7ddce5d7 in raise () from /lib64/libc.so.6 #1 0x00007f6c7ddcfcc8 in abort () from /lib64/libc.so.6 #2 0x00000000004240a3 in sigsegv_handler (signum=<optimized out>) at sig.c:57 #3 <signal handler called> #4 0x000000000040a2e0 in add_tcp_test (ip=0x1c1fc08 "3.0.0.22", port=port at entry=21, service=<optimized out>, service at entry=0x7fffbf562070 "ftp", sslopt=sslopt at entry=0x0, srcip=srcip at entry=0x0, tspec=tspec at entry=0x0, silent=silent at entry=0, reqmsg=reqmsg at entry=0x0, priv=priv at entry=0x0, datacallback=datacallback at entry=0x0, finalcallback=finalcallback at entry=0x0) at contest.c:197 #5 0x0000000000403a19 in main (argc=6, argv=0x7fffbf563188) at xymonnet.c:2329

2 1

wrong memory report with free command from procps-ng
by Dominique.Frise＠unil.ch 07 May '15

07 May '15

Hi, Using Xymon 4.3.19, we noticed that all our RHEL 7 systems are reporting wrong values. These systems now use free from procps-ng 3.3.10 whose output has changed. -- free output on RHEL 5/6 --- [bb at prdexp ~]$ free total used free shared buffers cached Mem: 65916528 63391732 2524796 1376104 1484472 47773272 -/+ buffers/cache: 14133988 51782540 Swap: 16777212 180816 16596396 --- free output on RHEL 7 --- [bb at hns ~]$ free total used free shared buff/cache available Mem: 8011888 318844 3365516 98788 4327528 7275020 Swap: 8388604 0 8388604 The "-/+ buffers/cache:" has disappeared, the "used" is now calculated as total - free - buffers - cache, and there is an "available" column which is an "Estimation of how much memory is available for starting new applications, without swapping". The man page details all that. Dominique University of Lausanne

2 4

change alert email text?
by lts1809＠yahoo.com 07 May '15

07 May '15

I'm wondering if there is a quick answer on how to change the email alert text that Xymon generates. Specifically it is required that I remove the IP address from the email. Example: --- red Fri Apr 3 17:54:18 2015 conn NOT ok Service conn on 4ai1gub4x9 is not OK : Host does not respond to ping System unreachable for 223 poll periods (7274 seconds) &red 10.0.0.10 is unreachable --- would become: --- red Fri Apr 3 17:54:18 2015 conn NOT ok Service conn on 4ai1gub4x9 is not OK : Host does not respond to ping System unreachable for 223 poll periods (7274 seconds) &red 4ai1gub4x9 is unreachable --- I can list the IPs in the hosts.cfg (will have to actually, since no DNS server is available), but before I'll be allowed to submit Xymon to our security office for testing/approval to be added to our network management has tasked me with removing the IPs from the emails.

3 2

Disabling all emails from all tests.
by solitaryr＠gmail.com 07 May '15

07 May '15

Just disable the alerts. Tests will continue to send to the server, you just won't be notified. On Apr 28, 2015 12:56 PM, "usa ims via Xymon" <xymon at xymon.com> wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: usa ims <usaims at yahoo.com> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Date: Tue, 28 Apr 2015 16:56:00 +0000 (UTC) > Subject: Disabling all emails from all tests. > Hi, I'm running xymon 4.3.7 > > I want to write a script to disable all emails from all tests but to > continue reporting to the display server. > > What is the most efficient way of doing this? > > Thanks in advance. > > usaims > >

2 1

Xymon custom graphs
by Srikrishna.Karatalapu＠vudu.com 06 May '15

06 May '15

Hi, I have recently successfully installed xymon server in our dev environment. I am working on migrating data from the hobbit sever to xymon server. I have been able successfully restore the historical data. But I still see the custom graphs on hobbit are not working on the xymon server. * I have renamed the hobbit graphs to graphs.cfg . * I am using an identical test2rrd.cfg as the hobbit server. Are there any other configuration changes that need to be made as part of the data migration so the I can see the custom graphs. Any help is appreciated. Thanks Krishna

1 0

Fw: Need some assistance with graphs, please.
by Galen.Johnson＠sas.com 06 May '15

06 May '15

Missed the list... =G= ________________________________________ From: Galen Johnson Sent: Wednesday, May 6, 2015 7:31 PM To: Vernon Everett; Keith Dowell Subject: Re: [Xymon] Need some assistance with graphs, please. I know I'm late to the party but one thing I haven't seen is whether these are NCV graphs and if they are defined as such in the server config file. Or if they are custom graphs using the data channel. Also, are your tests running every 5 minutes or do you have a custom time (this bit me)? I actually set mine up to be split_ncv but I can't see that being an issue here (necessarily). Could you post (have you posted) what you have defined for GRAPHS (note, I found a tidbit somewhere that said to add "ncv" to definition), TEST2RRD and your ncv definition. =G= ________________________________________ From: Xymon <xymon-bounces at xymon.com> on behalf of Keith Dowell via Xymon <xymon at xymon.com> Sent: Wednesday, May 6, 2015 7:25 PM To: Vernon Everett Cc: xymon at xymon.com Subject: Re: [Xymon] Need some assistance with graphs, please. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

1 0

Need some assistance with graphs, please.
by everett.vernon＠gmail.com 06 May '15

06 May '15

Hi Keith Your internal field name is memused. Is that correct for all the rrd files? This is the field name as defined in the rrd file. Check how the rrd file is created, or use rrdtool dump with some creative grep to confirm the field names. Do you get a graph without the EXFNPATTERN keyword? (A long shot, but might be worth checking) If you know the rrd files in advance, and you know the number of them, and it will not change, then why not define them manually. It's a little more of a pain up front, but it might save you a lot of grief. Check [users], [vmstat*] or [netstat*] in graphs.cfg for examples. Regards Vernon On 6 May 2015 at 00:38, Keith Dowell via Xymon <xymon at xymon.com> wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: Keith Dowell <snowolfex at yahoo.com> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Date: Tue, 5 May 2015 16:38:40 +0000 (UTC) > Subject: Need some assistance with graphs, please. > I have three rrds: ProcMBIM.rrd, ProcSA.rrd, and ProcOI.rrd > > The definition I have in graphs.cfg is > > FNPATTERN ^Proc(.+).rrd NOTE: also tried (.*) - no > difference > EXFNPATTERN ^ProcMem(.*).rrd NOTE: for one specific rrd created i don't > want > TITLE Process Memory Usage > YAXIS Total Memory Usage > DEF:p at RRDIDX@=@RRDFN@:memused:AVERAGE > LINE2:p at RRDIDX@#@COLOR@:@RRDPARAM@ > -b 1024 > -X0 > GPRINT:p at RRDIDX@:LAST: \: %5.1lf (cur) > GPRINT:p at RRDIDX@:MAX: \: %5.1lf (max) > GPRINT:p at RRDIDX@:MIN: \: %5.1lf (min) > GPRINT:p at RRDIDX@:AVERAGE: \: %5.1lf (avg) > > > I get a graph in trends, but ONLY for MBIM. SA and OI not shown. > > I get NO graph on the page itself. > > So any help appreciated - I imagine I must be missing something to cause > these two issues. > > -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

2 3