October 2016 - Xymon - Xymon mailman web

Need help with upgrade from 4.3.17 to 4.3.20
by vadud3＠gmail.com 17 Jul '18

17 Jul '18

I am not sure what I need to after the upgrade for the columns to show data instead of something like this ELF �� >� �� @��@�� Þ ��@�8� �@�%�"� �� @��@�@��@�@��ø ��ø �� 8 ��8 @��8 @�� @��@��ää��ää�� I removed FollowSymLinks from xymon-apache.conf file under /xymon-cgi/ and /xymon-seccgi/ and restarted. I am using ubuntu -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

9 29

Recovery notifications not generated when test goes red->yellow->green?
by hobbit＠elyograg.org 13 Dec '17

13 Dec '17

It appears that if a test goes from the red state, to the yellow state, and then to the green state, no recovery notification is sent. If it goes directly from red to green, then we get a notification. Initial notifications are only sent on RED and PURPLE. We have recovery notifications configured for most tests. Xymon server is 4.3.21, built using makerpm.sh and installed with yum on CentOS 6. I do not know whether our previous version (4.3.14) behaved similarly. It was almost an accident that I discovered the problem at all. Is this expected behavior? If it is, can I change it? Thanks, Shawn

4 3

CLASS not working as expected
by steve＠opendium.com 11 Dec '17

11 Dec '17

Under Xymon 4.3.25, I'm trying to use the class attribute to group hosts together by what monitoring and alerting they need. So for each host I have a hosts.cfg line like: 192.0.2.1 somehost.example.com # CLASS:Foo trace ssh Then in analysis.cfg I have: CLASS=Foo PROC this PROC that And alerts.cfg has: CLASS=Foo SCRIPT=blah However, the tests in analysis.cfg are not being applied. If I replace CLASS=Foo with HOST=somehost.example.com they work as expected. Also, CLASS=linux seems to work, which implies that the CLASS: directive in the hosts.cfg is being ignored. As far as I can tell, the messages on xymon's "client" channel don't contain the class name that was specified in hosts.cfg, so xymond_client is using the class that the client sent instead. Other channels, such as "status" do include the class name that was specified in hosts.cfg. Am I misunderstanding how the class is supposed to be used, or is this a bug? -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direct contacts: Instant messager: xmpp:steve at opendium.com Email: steve at opendium.com Phone: sip:steve at opendium.com Sales / enquiries contacts: Email: sales at opendium.com Phone: +44-1792-824568 / sip:sales at opendium.com Support contacts: Email: support at opendium.com Phone: +44-1792-825748 / sip:support at opendium.com

7 9

DNS failures causing "runtime longer than time limit"
by jlaidman＠rebel-it.com.au 11 Sep '17

11 Sep '17

Hi I'm running Xymon v4.3.10 on Linux, and I'm quite sure it's compiled with c-ares support. I have 12 new DNS servers that were added to Xymon about one month ago. All of my server entries in hosts.cfg have "testip". The tasks.cfg runs xymonet with "--dns-timeout=3". The hosts entries look like so: 10.10.10.1 dnshost1.example.com # testip dns=NS:example.com,SOA: example.com About a week ago, connectivity to all of these servers failed, and at the same time, the xymonnet run time jumped from less than 15 seconds to about 330 seconds, so about 315 seconds extra. The xymonnet page says 295 seconds is taken up by DNS tests. If the increase in time taken is about 315 and is entirely due to the 12 servers failing, then each failed server is adding about 26 seconds to the total run time. I don't think this should be happening like this. With two DNS checks per server, the DNS checks should be taking 6 seconds each to time-out, not 26. If I run xymonnet with "--timing --no-update" and specify only one hostname, I can view the results and the timing. This shows that the ping check gets reported after about 3 seconds, and then the DNS tests are executed and take 26 seconds total. My naiive assumption was that when a server failed a ping (and didn't have "noclear" defined in hosts.cfg) then the network checks would be skipped. On re-reading the man page for hosts.cfg, it dawned on me that a failed ping simply suppresses failed test /results/, but doesn't stop the tests from being run. So the real problem is that the "--dns-timeout=3" is not being taken into consideration by xymonnet. If I run xymonnet with "--debug" it tells me: 1900 2015-06-03 12:02:20 ares_search: tlookup='example.com', class=1, type=2 1900 2015-06-03 12:02:20 ares_search: tlookup='example.com', class=1, type=6 1900 2015-06-03 12:02:20 Processing 0 DNS lookups with ARES 1900 2015-06-03 12:02:46 Finished ARES queue after loop 423 This is peculiar. Why would it say "processing 0 DNS lookups" when there are two lookups to test? Could this be because xymonnet hasn't actually been built with ARES support and I didn't know it? Is there a good way to tell? If I add "--no-ares" I get the same results perhaps suggesting a lack of ARES support. On the other hand, if I add "timeout:3" and "attempts:1" into resolv.conf, I also get the same results. If I run "nm /path/to/xymonnet | grep gethostby" it returns "ares_gethostbyname". Just for fun, I compiled Xymon v4.3.21 and ran the xymonnet binary from there, with no change in behaviour. I also tried removing the "--dns-timeout" option so that it defaults to 30 seconds, but still no change - 26 seconds for two DNS tests. So, I'm not really sure what the problem is, but xymonnet certainly isn't behaving as I would expect. Cheers Jeremy

2 3

Page or swap Rate
by kenschweiker＠gmail.com 04 Nov '16

04 Nov '16

Can I display my servers page swap rates in Xymon? As something like the sar command ; sar -W -f Thanks

2 1

No Client data
by vadud3＠gmail.com 04 Nov '16

04 Nov '16

Hi All, I am not seeing any clientdata. I am running xymon-client-4.3.10-1.x86_64 on CentOS 6.8 Hostname is right and nothing in Ghost clients Log shows 2016-10-27 17:46:26 xymonlaunch starting 2016-10-27 17:46:26 Loading tasklist configuration from /usr/lib/xymon/client/etc/clientlaunch.cfg 2016-10-27 17:46:32 Task client terminated, status 1 2016-10-27 17:51:33 Task client terminated, status 1 -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

2 1

Fwd: Bug#828611: xymon: Fails to build from source with OpenSSL 1.1.0
by abe＠debian.org 31 Oct '16

31 Oct '16

Hi, this has been reported in Debian at https://bugs.debian.org/828611 ----- Forwarded message from Kurt Roeckx <kurt at roeckx.be> ----- Date: Sun, 26 Jun 2016 12:24:54 +0200 From: Kurt Roeckx <kurt at roeckx.be> To: submit at bugs.debian.org Subject: Bug#828611: xymon: FTBFS with openssl 1.1.0 Reply-To: Kurt Roeckx <kurt at roeckx.be>, 828611 at bugs.debian.org Source: xymon Version: 4.3.27-1 Severity: important Control: block 827061 by -1 Hi, OpenSSL 1.1.0 is about to released. During a rebuild of all packages using OpenSSL this package fail to build. A log of that build can be found at: https://breakpoint.cc/openssl-1.1-rebuild-2016-05-29/Attempted/xymon_4.3.27… On https://wiki.openssl.org/index.php/1.1_API_Changes you can see various of the reasons why it might fail. There are also updated man pages at https://www.openssl.org/docs/manmaster/ that should contain useful information. There is a libssl-dev package available in experimental that contains a recent snapshot, I suggest you try building against that to see if everything works. If you have problems making things work, feel free to contact us. Kurt ----- End forwarded message ----- Regards, Axel -- ,''`. | Axel Beckert <abe at debian.org>, http://people.debian.org/~abe/ : :' : | Debian Developer, ftp.ch.debian.org Admin `. `' | 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5 `- | 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE

2 2

bogus critical test (?)
by Galen.Johnson＠sas.com 28 Oct '16

28 Oct '16

Hey, This is about to drive me nuts. I have 1 http test out of hundreds that has been going red with a DNS error since the DDoS that hit last week (coincidence?). However, when I look at the history of the test it shows a solid green bar. What could I possibly be missing to make this go away? thanks =G=

1 0

Page level conn status Purple, test level status Green
by dboldt＠usgs.gov 27 Oct '16

27 Oct '16

On the Display page we have a server where the conn test is persistently Purple, but if one clicks on the status, the detailed Status page shows Green. The DNS configuration may be causing issues: % dig +noall +answer natwebvaii01.er.usgs.gov natwebvaii01.er.usgs.gov. 43200 IN CNAME igsaaahigsvaii1.er.usgs.gov. igsaaahigsvaii1.er.usgs.gov. 300 IN A 130.11.9.89 % dig +noall +answer -x 130.11.9.96 96.9.11.130.in-addr.arpa. 43200 IN PTR natwebvaii04.er.usgs.gov. Hoped to be able to address this with hosts.cfg entry: 130.11.9.89 natwebvaii01.er.usgs.gov # CLIENT:igsaaahigsvaii1.er.usgs.gov alas no. I'm not clear enough on how the status that is seen for an individual test is propagated up to a page view to know where to look when there is a conflict. -- -- David Boldt <dboldt at usgs.gov> "A complex system that works is invariably found to have evolved from a simple system that works." --John Gaule

3 4

Configure per-host filesystem threshold
by chris.seip＠hpe.com 27 Oct '16

27 Oct '16

I'm new to Xymon, have set up my first client monitoring config, and haven't gotten per-host filesystem thresholds to work for that host yet. In /etc/xymon/analysis.cfg, I've got these lines: HOST=my.hosts.fqdn DISK /disk/data 96 98 But my 95% filesystem-full condition continues to come up as a red alert. I've played with a few different syntaxes, wildcards, and other config files. This looks to me like the right way to do it... Feels like I'm overlooking something really basic here. Thanks, - Chris [Running Xymon 4.3.25 on Ubuntu 16.04.1. New to Xymon; used to use Big Brother years ago.]

5 9