June 2015 - Xymon - Xymon mailman web

Duplicate hosts
by rltexas1＠gmail.com 04 Jun '15

04 Jun '15

I have my xymon hosts set up by DC. But now I need to set up a page my server admin. Most of my testing is done from the xymon sever using ext scripts since I don't have clients installed. Is there a way to specify a page hosts by admin and subpage. With hosts under it without repeating the tests that were ran higher up in the hosts file ? Thanks

2 1

ssh ext issue.
by rltexas1＠gmail.com 04 Jun '15

04 Jun '15

I have an ext test that runs daily. Since I not allows to install clients I ssh over get what I need test and report on the results. The problem is that when servers come offline I get false Positive. Is there a way I can leverage xmonnnet to test for ssh connectivity before I run the ext or as part of the ext (ping is blocked ). How can I use xymonnet-again to run yellow tests again sooner ? Thanks

2 2

AIX pre-compiled binaries
by abs＠shadymint.com 04 Jun '15

04 Jun '15

Hi, Does anyone have recent AIX binaries they could share please? I have tried Razors Edge and this site which I found in the archives :- http://www.docum.org/drupal/category/docs/hobbit but the newest I can find is hobbit 4.2. Thanks -- Andy

1 0

Help needed on Graphs
by jsaharan＠outlook.com 04 Jun '15

04 Jun '15

Hi, I need some help on graph issues. I am using the latest version 4.3.21 . I can see all the data on xymon status page and see few links for graph as well.. but if I click on anyone of them. I get an error: "Unknown graph requested" Please let me know if you need any infomration to troubleshoot this. I have already added this line to cgioptions.cfg CGI_SVC_OPTS="--env=/opt/monitor/xymon/server/etc/xymonserver.cfg --no-svcid --history=top --multigraphs=disk,inode,qtree,quotas,snapshot,TblSpace,if_load" Thanks & Regards Jasbir Saharan

2 1

Problems with acking
by dave＠collegenet.com 03 Jun '15

03 Jun '15

My coworkers (and I) have been frustrated with the amount of clutter there is on the bb-ack.sh page, so I wrote one of my own. It works, mostly, but falls short of our needs in one way. We'd like to pre-ack before the first page comes through. Our version only lists tests that have cookies defined in the output of hobbitdboard (see the bb manpage). It uses that cookie to submit acks to bb-ack.sh. When there have been no notifications yet, it doesn't work. This is horrible when we're already getting flooded with tests due to a switch failure or something. This is running on Debian wheezy (7.8) using the stock 4.3.0~beta2.dfsg-9 Debian package from the distro. Any ideas? Dave Fogarty -- Senior System Administrator CollegeNET.com

3 4

Alternate log monitor?
by larry＠fni-stl.com 03 Jun '15

03 Jun '15

-----Original Message----- From: Andy Smith [mailto:abs at shadymint.com] Sent: Wednesday, June 03, 2015 1:48 PM To: Larry Bonham Cc: xymon at xymon.com Subject: Re: [Xymon] Alternate log monitor? Larry Bonham wrote: > Has anyone successfully integrated a different log monitor into xymon? > The internal msgs monitor works fine for /var/log/messages or any other > system log where a similar notification is used for each system (in our > case the systems group). > > > > But I have a need to monitor multiple Apache logs on various systems > where a different user group would be notified if any yellow or red > alerts were created. I don't see a way to do that and have > /var/log/messages alerts going somewhere else for the same system. > > > > Running 4.3.18 on RHEL 6.6 > > > > swatch maybe? Everything I'm finding is either too simplistic or way > overkill for what I need. The lighter the footprint the better. > > > > Thanks. > > ========================================================= > > Larry D. Bonham Hi, like you, we found the internal msgs tool is perfectly adequate in terms of functionality, but does not lend itself well to notifying different groups unless you are relying on email notification, in which case you can define a GROUP rule in alert.cfg/analysis.cfg. In our place, we do not use email, instead, we have a 24x7 operations team viewing the critical page, managing the incidents in real time, so we needed different column names to be able to identify the requirements in critical.cfg. I wrote this simple script to direct a given log analysis to a given column name, it may work for you :- https://wiki.xymonton.org/doku.php/monitors:msgs When we have need for more sophisticated log monitoring and we use SEC (http://simple-evcorr.sourceforge.net/) which is extremely powerful, we employ just a fraction of its potential. We have a perl module that goes with SEC so that SEC delivers status messages to Xymon in exactly the same way as the internal msgs tool. -- Andy --------------------------------------------------------------------------------------------------------------------------------- Andy, I appreciate the response. I should have mentioned I already tried your msgs.sh add on. Only problem is the original output stays in MSGS as well as getting copied to the alternate test name. We don't want the normal alerts going out to MSGS owners. Just to the owners of the alternate test name. Unless I missed something in setting it up, I wasn't able to do that. I could do special notification on the alternate test but could not differentiate those in the normal test. Please let me know if I'm misunderstanding something there (e.g. possible GROUP usage). Wouldn't be the first time. I have used SEC in the past with snmp trap translation. That is one of those overkill solutions I mentioned. I'm sure it would work but I wanted to keep the solution as simple as possible for support purposes down the road. I was really hoping to accomplish this all within xymon itself if possible. Thanks for your suggestions. Larry ________________________________ CONFIDENTIALITY NOTICE: This electronic mail message is intended exclusively for recipient to which it is addressed. The contents of this message and any attachments may contain confidential and privileged information. Any unauthorized review, use, print, storage, copy, disclosure or distribution is strictly prohibited. If you have received this message in error, please advise the sender immediately by replying to the message's sender and delete all copies of this message and its attachments without disclosing the contents to anyone, or using the contents for any purpose.

2 2

Alternate log monitor?
by larry＠fni-stl.com 03 Jun '15

03 Jun '15

Has anyone successfully integrated a different log monitor into xymon? The internal msgs monitor works fine for /var/log/messages or any other system log where a similar notification is used for each system (in our case the systems group). But I have a need to monitor multiple Apache logs on various systems where a different user group would be notified if any yellow or red alerts were created. I don't see a way to do that and have /var/log/messages alerts going somewhere else for the same system. Running 4.3.18 on RHEL 6.6 swatch maybe? Everything I'm finding is either too simplistic or way overkill for what I need. The lighter the footprint the better. Thanks. ========================================================= Larry D. Bonham Financial Network Inc. 10401-F Baur Olivette, MO 63132 (314) 400-9412 voice (314) 997-5647 fax ========================================================= ________________________________ CONFIDENTIALITY NOTICE: This electronic mail message is intended exclusively for recipient to which it is addressed. The contents of this message and any attachments may contain confidential and privileged information. Any unauthorized review, use, print, storage, copy, disclosure or distribution is strictly prohibited. If you have received this message in error, please advise the sender immediately by replying to the message's sender and delete all copies of this message and its attachments without disclosing the contents to anyone, or using the contents for any purpose.

2 1

Xymon notification.log shows alerts been genereate but not send on mail or sms ( mail and sms service are working fin)
by jje＠fynbus.dk 02 Jun '15

02 Jun '15

Hello We are running a Centos 5.11 final with Xymon 4.3.21. The problem we have is that SMS and mail alerts are not getting forward when generated. We have investigated logs in the location: /var/log/xymon/ Alerts are been generate and registered in: notifications.log Ex. : (server name and mail addresses has been changed in below example) Mon Jun 1 09:08:04 2015 servername.domain.local.disk (10.2.64.95) xx at xx.dk[262] 1433142484 100 Mon Jun 1 09:08:04 2015 servername.domain.local.disk (10.2.64.95) xx at xx.dk[263] 1433142484 100 Mon Jun 1 09:19:19 2015 servername.domain.local.msgs (10.2.64.71) xx at xx.dk[262] 1433143159 400 We can see in the log: /var/log/xymon/alerts.log an error we have not seen before: Bad address Bad address Bad address Bad address Bad address - anyone seen this before? So we went through the /home/xymon/server/etc/hosts.cfg & alerts.cfg, looking for any syntax error, bad mail addresses :) and did also out comment most of the lines in hosts.cfg file but still getting this error and no mail alerts are send from the server? I looked in the Xymon man pages for making a dump trace and debug with ./xymoncmd xymond_alerts but is not giving me any clues where this is going wrong? Postfix mail server, sendmail and SMS service are working fin on the box. Any input would be appreciated. Thank in advance /Jesper Jensen

4 4

PowerShell client reports high cpu load
by Russell.Blumenthal＠stonybrookmedicine.edu 01 Jun '15

01 Jun '15

Hey folks, Has anything experienced the PowerShell client falsely reporting a high CPU load? The server was showing a high load at 8.02%, and just before that the test was red and critical for an 11% load. Do I need to tweak anything for the client to not report a high CPU when it really isn't high? I am using version 2.02 and the client reports to both a 4.3.17 server and 4.3.21 server. [cid:image001.png at 01D09C76.496A4680] Thanks This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and destroy all copies of the original.

2 2