July 2015 - Xymon - Xymon mailman web

Splitncv and analysis.cfg
by kothari.raunak＠gmail.com 28 Jul '15

28 Jul '15

Hi All, I have set up a test to monitor the queue depth on several queues on an MQ server and the output on the xymon page looks like so - *Queue Count TSG.DRE.AA.CUST - prd.CustomerQueue : 130 TSG.DRE.AA.ORDE - prd.OrdersQueue : 0 TSG.DRE.AA.PAYM - prd.PaymentsQueue : 0* I've configured xymon to collect the data in seperate RRDs for graphing using splitncv method. The RRDs have names like below - QueueCount,TSG_DRE_AA_CUST_prd_CustomerQueue.rrd The name of the check being performed i.e the column in Xymon is - QueueCount Now, what I want is for the QueueCount column to go red once the queues reach a certain threshold. So in my analysis.cfg file I placed the below entry. HOST=PROD_MQ DS QueueCount SysopPerfCount,QueueCount,TSG_DRE_AA_CUST_prd_CustomerQueue.rrd:lambda >100 COLOR=red "TEXT=Backlogs on MQ" Somehow this never works and the status never changes to red no matter what is the queue count on the queues. The data collection to the RRD and the graphs work fine. Any idea what is going wrong here. Any fundamental thing I am missing before trying to change status of checks based on RRDs using splitncv. Thanks! Regards, Raunak

2 1

FW: RE: Need a support for Xymon setup on Ubuntu 14.04 server
by pbadiger＠enstage.com 27 Jul '15

27 Jul '15

Hi Team, We want to setup Xymon server in Ubuntu 14.04 LTS server OS. Kindly let us know the steps for Server and client configuration. Below are the our requirements : 1)How to configure Server health Monitor(CPU, RAM) 2)How to configure Bandwidth Monitor. 3)How to configure incoming and outgoing traffic Monitor. 4)How to Monitor Services/Applications/Ports. 5)How to Monitor Network devices. 6)How to Monitor URL's. 7)How to Configure alert system(Mail and sms). 8)How to generate Periodic reports. Thanks & Regards, Pradeep B Sr.System Admin-Linux Information Technology Department enStage ……………………………………………………………………………………………. Cell: +91 9845719456; Desk: +91 80 4342 8197 | [ http://www.enstage.com ]( http://www.enstage.com/ ) -----Original Message----- From: "Pradeep Badiger" <pbadiger at enstage.com> Sent: Thursday, July 23, 2015 12:36pm To: xymon at xymon.com, jlaidman at rebel-it.com.au Subject: RE: Need a support for Xymon setup on Ubuntu 14.04 server Hi Team, Kindly update. Thanks & Regards, Pradeep B Sr.System Admin-Linux Information Technology Department enStage …………………………………………………………………………………………….. Cell: +91 9845719456; Desk: +91 80 4342 8197 | [ http://www.enstage.com ]( http://www.enstage.com/ ) -----Original Message----- From: "Pradeep Badiger" <pbadiger at enstage.com> Sent: Wednesday, July 22, 2015 8:06pm To: xymon at xymon.com, jlaidman at rebel-it.com.au Subject: Need a support for Xymon setup on Ubuntu 14.04 server Hi Team, We want to setup Xymon server in Ubuntu 14.04 LTS server OS. Kindly let us know the steps for Server and client configuration. Below are the our requirements : 1)How to configure Server health Monitor(CPU, RAM) 2)How to configure Bandwidth Monitor. 3)How to configure incoming and outgoing traffic Monitor. 4)How to Monitor Services/Applications/Ports. 5)How to Monitor Network devices. 6)How to Monitor URL's. 7)How to Configure alert system(Mail and sms). 8)How to generate Periodic reports. Thanks & Regards, Pradeep B Sr.System Admin-Linux Information Technology Department enStage ……………………………………………………………………………………………. Cell: +91 9845719456; Desk: +91 80 4342 8197 | [ http://www.enstage.com ]( http://www.enstage.com/ ) This message contains confidential information and is intended only for the individual named or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission.

2 3

Monitoring RSA Authentication Manager appliances
by robert.herron＠gmail.com 27 Jul '15

27 Jul '15

Is anyone monitoring RSA Authentication Manager appliances using Xymon? Beyond the xymonnet tests? I'm on the verge of upgrading to AM 8.1. AM is strictly appliance-based now. You can run virtual appliances on vmware or hyper-v or a hardware appliance. In all cases, the appliance runs SUSE LES 11 x86_64. It doesn't have a compiler or related tools so installing the Xymon client won't be a cakewalk. So, I thought I'd check before trailblazing a new path.

3 2

Display Host IP on Hover
by oakesbz＠gmail.com 23 Jul '15

23 Jul '15

For some reason this used to work and now it doesn't. I have HOSTPOPUP="CDI" in my xymonserver.cfg but none of my ip's are displaying when I hover over a host. Adding a COMMENT next to my host just displays it in parenthesis next to my host name. How can I get this working? Thanks.

1 1

BUG 'New' style interface names not recognised
by estassen＠gmail.com 21 Jul '15

21 Jul '15

On Centos 7, Xymon does not recognise interface names like p3p1, etc. This is the interface naming according to the 'Consistent Device Naming' standard ( http://linux.dell.com/files/whitepapers/consistent_network_device_naming_in… ) A simple fix would be to change the regex on line 22, do_ifstat.c from: "^([a-z]+[0123456789.:]*|lo:?)\\s", to "^([a-z0-9]+(_[0-9]+)?:*|lo:?)\\s", Regards, Eddie

2 1

NCV Bug-Fix / Feature Request
by everett.vernon＠gmail.com 20 Jul '15

20 Jul '15

Hi all Not sure if this is a bug or a feature request. Split_NCV is doing exactly what it says on the tin, so it's not really a bug. But, it makes things not work right, so it looks like a bug. Maybe I should call it an annoyance? Once again, I bashed heads with the amazingly useful Split_NCV feature of taking your data points and converting them to rrds graphs. Don't get me wrong, this is probably one of the coolest things in Xymon, because you can have an undefined number of data sets, and add more dynamically. However, it looks at your status output, and anything of that looks like a *description:value* it sticks into an associated rrd file. Including *Sun Jul 19 08:46:06 WST 2015* Which happens to be the first line of my test status, and is generally used as the first line of any test. So I switched to using status messages for display and data messages for graphing, which makes logical sense. And it still grabs the date and makes an rrd file of it. Which is wrong, and annoying. My request is that this be fixed. And I can think of a bunch of really simple ways to fix it, and bunch of more interesting ways. Some of the simpler ones I can think of are 1. Include metadata tag in your status. A simple #NoNCV which gets removed server-side for display, and the status doesn't get parsed by the NCV module. This means only the data messages will get parsed by the NCV module. (This will preserve backward compatibility) 2. Include metadata tags to indicate where the NCV data starts and stops in a status message. A #StartNC and #StopNCV or #NCV #/NCV. Of course there's nothing stopping us from using HTML like tags either. <NoNCV> or <NCV> and </NCV> pick a format. (Depending on how it's implemented, this might break backward compatibility) 3. Change/Add a server config tag. Instead of simply Split_NCV, we have Split_NCV that works like it does now. And a Split_NCVD tag, that will only parse the data messages. (This will preserve backward compatibility) There are many ways to achieve the result I am looking for, but please, we need to fix this. It's been an annoyance for way too long. Regards Vernon -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

3 2

CPU trend graph NaN - log shows RRD Error Updating , unknown DS name 'mem_swpd'
by betsy.schwartz＠gmail.com 20 Jul '15

20 Jul '15

I'm seeing a few RHEL6 servers with blank CPU trend graphs . the rrd files just contain NaN, sample line: /usr/bin/rrdtool dump /usr/local/xymon/data/rrd/ ext-dns1.example.com/vmstat.rrd  <row><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v><v> NaN </v></row> rrd-data.log has errors of the form /rrd-data.log:2015-07-18 14:08:42.443123 RRD error updating /usr/local/xymon/data/rrd/ ext-dns1.example.com/vmstat.rrd from 10.100.5.42: unknown DS name 'mem_swpd' So,why do only a few of my servers have this error? What do I need to do to make the CPU trends graphs work? Do I add mem_swpd in xymonservers.cfg and hobbitgraph.cfg and graphs.cfg, and can I do that without breaking the other hundreds of servers? Does anyone have the correct invocation for this? Thank you! (I am also assuming I'll have to blow away the old rrd file to get this to work...?)

2 1

Acknowledging an alert
by Paul.Root＠CenturyLink.com 17 Jul '15

17 Jul '15

Hi, I'm working on a script that works with a company internal callout (paging) system. The system requires a confirmation of a page when an engineer receives it. In the event of a recovery of the alert, the script sees that the message is a recovery, and sends an automatic confirmation. However, in the event of an acknowledgement in xymon, we just get another pageout. So there are two things to acknowledge. Is there a way in the script to know that the page out is an acknowledgement? I just noticed ACKCODE is an environment variable that is set. Does an acknowledge page have a particular code? I'll go try to see what it sends. Thanks, Paul. Paul Root Lead Engineer CenturyLink Network Reliability Operations Center 390 Commerce Dr Woodbury, MN 55125 Direct: (651)312-5207 Paul.Root at centurylink.com This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

1 1

Turning Hostname into Hyperlink Changes Graph Titles
by oakesbz＠gmail.com 17 Jul '15

17 Jul '15

Hi all, I’m using the below to turn my hostnames into hyperlinks to login to each server (which works great): 10.10.10.10 Hostname # NAME:"<a href=ssh://root at 10.10.10.10>Displayed Hostname</a>" Problem is, it now uses this ugly html string as the hostname in the title of my graphs. So it displays "<a href=ssh://root… > Disk Utilization”, etc. as the title… which is obviously not pretty. Any thoughts on how to fix this? By the way, it also changes the displayed hostname in several other places which I managed to fix by changing the variable &XYMWEBHOST to &XMH_HOSTNAME in several of the $xymon/server/web/*_header files… Thank you!

3 3

gaps in gaps after server upgrade to Xymon 4.3.18
by nskyrca＠syr.edu 17 Jul '15

17 Jul '15

Hello, I recently upgraded my xymon servers (primary and failover) from Xymon 4.2.3 to 4.3.18. After the upgrade, we noticed gaps in such as CPU Utilization, TCP/IP Statistics, and Block IO, but only for clients that are running the xymon 4.2.3 client, not for those running the Big Brother client. I built a new 4.3.18 client but we still see gaps. We are running the old vmstat-bf.sh and netstat-bf.sh extension scripts in the xymon client. I turned on debugging for rrdstatus and rrddata on our failover server, and saw errors such as the ones below during the times when there was a gap. Does anyone have ideas on how to troubleshoot and fix this? Why was the xymon client working ok with xymon server 4.2.3 and not 4.3.18? from rrdstatus.log 12793 2015-07-15 14:24:20 xymond_rrd: Got message 73002 @@status#73002/its-splun k-log1.syr.edu|1436984660.571622|128.230.1.66||its-splunk-log1.syr.edu|netstat|1 436986460|green||green|1435596907|0||0||1436984369|linux|NSM/UNIX/Misc24x7|0| 12793 2015-07-15 14:24:20 startpos 770321, fillpos 770321, endpos -1 12793 2015-07-15 14:24:20 Flushing '/its-splunk-log1.syr.edu/netstat.rrd' with 4 updates pending, template 'udpInDatagrams:udpOutDatagrams:udpInErrors:tcpActive Opens:tcpPassiveOpens:tcpAttemptFails:tcpEstabResets:tcpCurrEstab:tcpOutDataByte s:tcpInInorderBytes:tcpInUnorderBytes:tcpRetransBytes:tcpOutDataPackets:tcpInIno rderPackets:tcpInUnorderPackets:tcpRetransPackets' 12793 2015-07-15 14:24:20 RRD error updating /usr/local/xymon/xymon-current/data /rrd/its-splunk-log1.syr.edu/netstat.rrd from 128.230.1.66: /usr/local/xymon/xym on-current/data/rrd/its-splunk-log1.syr.edu/netstat.rrd: illegal attempt to upda te using time 1436983760 when last update time is 1436983769 (minimum one second step) 12793 2015-07-15 14:24:20 Flush, but xymonmsg is empty from rrddata.log 12806 2015-07-15 16:27:30 Flushing '/its-splunk-log1.syr.edu/netstat.rrd' with 4 updates pending, template 'udpInDatagrams:udpOutDatagrams:udpInErrors:tcpActive Opens:tcpPassiveOpens:tcpAttemptFails:tcpEstabResets:tcpCurrEstab:tcpOutDataByte s:tcpInInorderBytes:tcpInUnorderBytes:tcpRetransBytes:tcpOutDataPackets:tcpInIno rderPackets:tcpInUnorderPackets:tcpRetransPackets' 12806 2015-07-15 16:27:30 Flushing cache '/its-splunk-log1.syr.edu/vmstat.rrd' 12806 2015-07-15 16:27:30 Flushing '/its-splunk-log1.syr.edu/vmstat.rrd' with 10 updates pending, template 'cpu_r:cpu_b:cpu_w:mem_swpd:mem_free:mem_buff:mem_cac h:mem_si:mem_so:dsk_bi:dsk_bo:cpu_int:cpu_csw:cpu_usr:cpu_sys:cpu_idl:cpu_wait' 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon 12806 2015-07-15 16:27:30 Want msg 38335, startpos 431139, fillpos 431139, endpo s -1, usedbytes=0, bufleft=3767260 12806 2015-07-15 16:27:30 Got 1121 bytes Thanks ! Nicole

1 0