August 2015 - Xymon - Xymon mailman web

xymon hostdata module going rogue
by john.thurston＠alaska.gov 04 Sep '15

04 Sep '15

On 6/10/2015 9:01 AM, Scot Kreienkamp wrote: > Hi everyone, > > I have a xymon server running 4.3.21 that seems to be accumulating > processes like these: > > hobbit 28430 0.0 0.0 0 0 ? Z 12:50 0:00 > [xymond_hostdata] <defunct> > > hobbit 28435 0.0 0.0 0 0 ? Z 12:50 0:00 > [xymond_hostdata] <defunct> > > hobbit 28440 0.0 0.0 0 0 ? Z 12:50 0:00 > [xymond_hostdata] <defunct> > > hobbit 28444 0.0 0.0 0 0 ? Z 12:50 0:00 > [xymond_hostdata] <defunct> > > hobbit 28449 0.0 0.0 0 0 ? Z 12:50 0:00 > [xymond_hostdata] <defunct> > > hobbit 28452 0.0 0.0 0 0 ? Z 12:50 0:00 > [xymond_hostdata] <defunct> > > It seemed related to drop messages . . . Hey, I think I'm seeing the same thing on Solaris with 4.3.21 I've ended up here after a customer let me know that email alerts were not working as expected. After a few hours of digging around, I decided that the alert daemon was failing to retrieve hostnames and failing miserably. Have other people seen this behavior? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

4 15

devmon cisco 3800 template
by Paul.Root＠CenturyLink.com 02 Sep '15

02 Sep '15

I have some Cisco 3845 routers that we monitor with devmon. Devmon correctly identifies them with the Cisco-3800 template, but we don't get fans, power, cdp, or vpn. We aren't using the VPN on these routers. Could that be an issue? I have the Jan 22, 2011 template for it. Manually doing an snmpwalk shows that the oids are correct. Paul Root Lead Engineer CenturyLink Network Reliability Operations Center 390 Commerce Dr Woodbury, MN 55125 Direct: (651)312-5207 Paul.Root at centurylink.com This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

3 2

purple problems
by wlrutherford＠alaska.edu 01 Sep '15

01 Sep '15

Hey all, This is probably an old issue but I didn't see a way to search the archives. Our xymon server is showing purple indicators for two of our custom scripts but only on a handful of systems. I've found differences in file location, file ownership, UID, GID, etc.. but so far none of that seems to be the problem. The custom script checks raids. Strangely, all of the stagnant hosts show the same three disks entries from mid-July no matter how many disks they really have. Unfortunately I don't know what may've happened in July; that was before I started working here. I suspect the xymon-client software was copied from a live system, including the old status reports, but in so doing something wasn't re-configured correctly for the new systems. Even stranger, at my urging the Lead SA undisabled the purple notifications. I was expecting the page to go purple but it remains green even though the page isn't updating. At the bottom of the incorrect raid report page there is a link to "client data". If I follow the link I get a full report *including the correct,* *current raid information*! I think this means that the client is capturing the correct data and sending it to the server, the server is actually receiving the report, but after that the raid report isn't being handled correctly. Other systems display as expected. So far I haven't found anywhere on the server that the purple systems are configured or handled differently. I doubt we're the first to experience this problem. Does this sound familiar? Thanks in advance for any hints you can provide for where to look next. WLR

4 6

Metrix report output with csv
by eliap09＠yahoo.com 31 Aug '15

31 Aug '15

Hello, I needed to generate metrix report on csv format but there is no csv option like availability report. Is there any one got some work around or script to generate metrix report on csv. Thanks in advance. Eli Sent from my Verizon Wireless 4G LTE DROID

1 0

analysis of process state with xymon client
by john.thurston＠alaska.gov 31 Aug '15

31 Aug '15

Since my clients still use the "old school" BB software, I'm not very good with analysis.cfg and Xymon clients. But I don't see any way to have a xymon client trigger on a process state other than "running". Is there a way, for example, to have this client change state if a child of a particular process is found in "defunct" state. I can certainly do it with a few lines of shell-script, but I'd rather to use the existing client capabilities if present. -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

2 1

host with multiple addresses, not all active or known in advance
by rlhamil2＠gmail.com 31 Aug '15

31 Aug '15

I have a home network, and a laptop. At home, the laptop has (whether statically or via DHCP) a fixed non-routable private IP address. On the road, once I get my router's IPv6 support working, it may have an IPv6 address with probably a variable /64 prefix. I know about "dialup", useful for a device where it's normal if it's not connected all the time. But how can I best make the multiple IP address situation work for a single Xymon entry, esp. given that I may have no control of the IPv6 prefix. I do have "Back To My Mac" tunneling...but the xymon server is not a Mac (actually, it's a domain running Solaris on a Sun T5240), although if I could set up something that was forwarding-only on a Mac desktop client, that might let me set up the laptop to report to that Mac via the tunnel. Not sure what my prospects are setting up an inbound tunnel using a D-Link router (evidently with the help of one of the clients, since the full tunnel setup is beyond the D-Liink's capability. Pretty sure it can set up an outbound tunnel, not so sure what it can do for an inbound one, even with suitable inbound NAT entry and support from one of the client systems). Right now, my Mac doesn't appear on my Xymon at all. I'd like it to appear, and might even add a "location" column with client-side process, so it's whereabouts can be tracked independently of Apple's facilities to find a missing mobile device. I think I know how to do the latter, save that the sample code I have for using a Mac's "Location Services" does not convert decimal coordinates to human-readable degrees, minutes, seconds, nor to nearest placename + azimuth/range offset.

2 1

alert frequency
by snowolfex＠yahoo.com 28 Aug '15

28 Aug '15

I would say a definite no to queuing. It sends directly from the client to the server, and not through a central email server. Basically I tail the maillog (on the client). I get on the client machine and send an alert. I see nothing in the maillog. While tailing the maillog on the client to see the outgoing message, I have a seperate terminal open to the client. I can manually send an email to an outside address. So this tells me it is NOT the mail (outgoing) queuing messages. It almost seems as xymon had a back-off throttling mechanism. The first couple of times I sent alerts they were about 7 mins apart. After that, it seemed to go to ten minutes. After I sent this email to the list it seemed to have climbed to fifteen minutes. Thanks everyone for any help in tracking this down! I'm trying to custom craft my email alert for an alarm and it can get aggravating to make a couple of line changes, then have to wait ten minutes to see the results. :P I was hoping there was some config option I missed or didn't understand in alerts or xymonclient.cfg that you could set to tell it: "I don't care if you just sent an alert, send another one" - at least for debugging and development. From: Jeremy Laidman <jcraftlaidman at rebel-it.com.au> To: Keith Dowell <snowolfex at yahoo.com> Cc: Xymon Mailing List <xymon at xymon.com> Sent: Thursday, August 27, 2015 9:41 PM Subject: Re: [Xymon] xymon alert frequency Keith, I don't use email alerts, but I'd be surprised if this was the case. As far as I know, there's no facility within Xymon to queue up messages like this. Is it possible that your mail system is queuing messages?

1 0

New to Xymon
by slamb＠tyreman.co.uk 28 Aug '15

28 Aug '15

I've installed xymon on fedora 22 using the terabithia.repo. The installation completed without errors. Do I need to take further steps to get it working ? I can't seem to bring up a xymon webpage.

4 7

xymon alert frequency
by jlaidman＠rebel-it.com.au 28 Aug '15

28 Aug '15

Keith, I don't use email alerts, but I'd be surprised if this was the case. As far as I know, there's no facility within Xymon to queue up messages like this. Is it possible that your mail system is queuing messages? On 28 August 2015 at 05:36, Keith Dowell via Xymon <xymon at xymon.com> wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: Keith Dowell <snowolfex at yahoo.com> > To: Xymon Mailing List <xymon at xymon.com> > Cc: > Date: Thu, 27 Aug 2015 19:29:25 +0000 (UTC) > Subject: xymon alert frequency > Testing a script - and it seems that the email alerts only come out once > every ten minutes. Am I seeing this wrong? Is there somewhere to adjust > this? > > >

1 0

"msgs" alerts, sending 10240 bytes and line-buffering
by earle＠isolar.DynDNS.ORG 28 Aug '15

28 Aug '15

> On Aug 25, 2015, at 21:05 PM, Adam Goryachev wrote: > > On 25/08/15 20:35, Greg Earle wrote: >>> On Aug 25, 2015, at 1:13 PM, Jeremy Laidman wrote: >>> >>> You might be right that the message is being clipped. If so, you should >>> see Xymon log messages to that effect. >>> >> Thanks Jeremy, where in the logs exactly? Do I grep for "clipped"? :-) >> >>> Perhaps add the IGNORE clause to the client-local.cfg message instead. >>> This will cause the messages to be dropped at the client side. Not only >>> can you forget about these messages on the Xymon server, but also you're >>> less likely to have a clipped message. Like so: >>> >>> [sunos] >>> log:/var/adm/messages:10240 >>> ignore refused connect from itsecurity-scanner.my.do.main >>> >> Excellent idea - hadn't thought of th... wait, hang on. The only place I >> have a "client-local.cfg" file is on my *server*, not on any of my clients. > > Ummm, actually this file is only supposed to exist on the server, and > when the client connects to report the status, it will also download a > copy of it's (section) of the file and apply that for future status updates. > > Note: I forget the details, but it can take 15 minutes (3 cycles) before > you will see the changes applied/working. Thanks for clarifying that, Adam. I removed the client-side "client-local.cfg" file and made the suggested changes on the server-side. The incidents of "clipped" messages file text causing red alert triggers have lessened, but I'm not sure they've stopped entirely. Do I need to restart all of my Solaris clients to pick up this (server-side) change? (viz. "it will also download a copy of it's (section) of the file and apply that for future status updates") - Greg

3 2