December 2016 - Xymon - Xymon mailman web

Capture and send data To Elasticsearch and Kibana
by francois.outteryck＠soprasteria.com 23 Dec '16

23 Dec '16

Hello, I just do a small work with Xymon in order to send status data to Elasticsearch. And with Kibana reporting is easy. How it work ? Simple : With capture of status message (xymond_channel --channel=status /home/xymon/server/ext/capture.sh ) script encode status message in json and send as document in elasticSearch. Example of Mapping document status in elasticsearch : "status"=> array( "properties"=>array( "ServerName"=> array("type"=> "string"), "Type"=> array("type"=> "string"), "Status"=> array("type"=> "string"), "LastChange"=> array("type"=> "date","format"=> "strict_date_optional_time"), "LogTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "ValidTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "AckTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "DisableTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "Sender"=> array("type"=> "string"), "DisableMSg"=> array("type"=> "string"), "Message"=> array("type"=> "string") ) ) All is done with a 130 lines script. So simple to integrate in existing environment and so powerfull usage of Xymon/elasticsearch/Kibana For those who don't know kibana : https://www.elastic.co/products/kibana [cid:image001.png at 01D25634.E37CF0F0]

2 1

restrict access to Xymon not working as expected
by Alessandro.Tinivelli＠faacgroup.com 21 Dec '16

21 Dec '16

Hallo everyone, sorry if the question has already been asked, but i could not find any answer in google: my brand new xymon installation (Xymon 4.3.27-1.el7.terabithia) on Centos7 has the liens below in apache config file: I have created the /etc/xymon/xymonpasswd file , but the access is still free with no pass request. Is there something I did not understand? Should this file located somewhere else? Thank you in advance Alessandro ---- # Password file where users with access to these scripts are kept. # Although expected in $XYMONHOME/etc/ by the useradm and chpasswd # scripts, files here can be read with the "config" message type, # which allows status-privileged clients to read arbitrary regular files # from the directory. # # This file should be owned and readable only by the apache server user, # and ideally merely a symlink to a location outside of $XYMONHOME/etc/ # # Create it with: # htpasswd -c /etc/xymon/xymonpasswd USERNAME # chown apache:apache /etc/xymon/xymonpasswd # chmod 640 /etc/xymon/xymonpasswd # Add more users / change passwords with: "htpasswd /etc/xymon/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /etc/xymon/xymonpasswd AuthGroupFile /etc/xymon/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user

3 2

testing apache 2.4.25 website?
by goebel＠emunix.emich.edu 21 Dec '16

21 Dec '16

Hello, Upgraded a website last night from apache 2.4.23 to 2.4.25 and now xymon is reporting "HTTP/1.1 400 Bad Request" for the same url that was working with apache 2.4.23? Thought I would check and see if anyone else has noticed any similar issues, if they have upgraded any apache instances since 2.4.25 came out? Thanks, Matt -- Matthew Goebel : goebel at emunix.emich.edu : Unix Jockey @ EMU : Hail Eris Neo-Student, Net Lurker, Donut consumer, and procrastinating medher... "Always with the negative waves, Moriarty" - Oddball "Comfort the troubled, and trouble the comfortable." - Dietrich Bonhoeffer

1 0

color of the alarm
by cedric.briner＠unige.ch 19 Dec '16

19 Dec '16

Hi, I've written some scripts that check the health of webservers using observatory.mozilla.org. Curently, the script reads the configuration of xymon, discovers if the node serves webpage and if so check their health. As I'm testing about a hundred nodes and as a majority of them will raise an alarm, my "all non-green view" will become all red. I'm looking for a color, that do not pollute the "all non-green view", that are different from green and that allow us to see the output of the test within xymon. Any idea ? Thanks in advance. cED -- Cédric BRINER, Ing. EPFL & HES DiSTIC ☎: +41 (0)22/37.97183

2 2

Completely exclude a host from MEMSWAP check
by Brad.Radjoo＠mtn.com 18 Dec '16

18 Dec '16

G'Day, Is there perhaps a way to completely exclude a host from MEMSWAP check ? Please advise ? Kind Regards, - - - - Bradley "This email is confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this message from your system. Please do not copy it or use it for any purpose, or disclose its contents to any other person as to do so could be a breach of confidentiality. Thank you for your co-operation. " "The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. "

1 0

'xymond' in tasks.cfg?
by David.Mills＠hhsc.state.tx.us 15 Dec '16

15 Dec '16

All - In the process of trying to debug a problem, I've run across two questions about how xymond functions on servers... 1) I started adding in the '--debug' flag to xymond in the .../etc/tasks.cfg file ([xymond] stanza), only to notice that after restarting Xymon, 'xymond' did not have any of the new args, including '--debug'! I know from the documentation that xymonlaunch starts up xymond, but why isn't it using the params in the tasks.cfg? Where is it getting its parameter list from then? 2) In this posting from years gone-by, Henrik said: (from: http://lists.xymon.com/archive/2008-April/018734.html) All of the daemon programs (hobbitd, the various hobbitd_channel handlers etc.) support sending a SIGUSR2 signal to toggle debugging on/off. Henrik === And yet, when I try to turn on debugging on 'xymond', I see nothing in the xymond.log file... (This *is* where the debugging output should manifest, right?) TIA! david ~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~ David Mills Systems Administrator Northrop Grumman (512) 595-1238 (mobile)

2 2

Scheduled disable bug?
by Jurgen.Claessens＠cegeka.com 15 Dec '16

15 Dec '16

Hi, I have stumbled upon a small issue with scheduling a disable from the command line. When I run the command: xymon ‘schedule 1483228800 disable testserver.* 10 some reason’ The command and schedule work ok and it shows fine when checked from the command line, but when checking from the GUI, all the info except the date and time are missing. [cid:image009.png at 01D2570E.672E9370] Does any have a solution for this? Is this a bug or am I missing something when entering the command? I have tried with single, double quotes. Tried entering the command to be executed between quotes, backticks, escaping the quotes. But it never shows the info. Met vriendelijke groeten / Meilleures salutations / Best regards Jurgen Claessens Support Engineer [cid:image010.jpg at 01D2570E.672E9370] E Jurgen.Claessens at cegeka.be<mailto:Jurgen.Claessens at cegeka.be> [cid:image011.jpg at 01D2570E.672E9370] [cid:image012.jpg at 01D2570E.672E9370] CEGEKA Universiteitslaan 9 B-3500 Hasselt, Belgium WWW.CEGEKA.COM<http://www.cegeka.com> [LinkedIn]<https://www.linkedin.com/company/cegeka> [Twitter]<https://twitter.com/cegeka> [Facebook]<https://www.facebook.com/Cegeka/> [Youtube]<https://www.youtube.com/user/2010Cegeka> [cid:image017.jpg at 01D2570E.672E9370]<http://www.cegeka.com/be/nl/emailsignature>

1 0

Parsing problems with client reports
by Scot.Kreienkamp＠la-z-boy.com 15 Dec '16

15 Dec '16

Hello list, Has anyone been working on the problem where reports from clients are getting confused on the server? I am getting multiple false alerts daily now where it will turn back to green at the next test, and when I go to look at the test in xymon it's because it's only got partial information. In multiple instances now I've been able to see the report from another client, in part or in full, in one clients page. In the most recent incident last week I could see the beginning client line from another windows client report halfway down in the ports test for a Linux client. All the false reports are really damaging the trust we place in Xymon to monitor our systems, and people are starting to just delete the warning emails without looking at them because we get so many false reports now. Thanks Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy> [cid:lzbVertical_hres.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

2 5

Discarding Powershell client CPU negative values
by Scot.Kreienkamp＠la-z-boy.com 15 Dec '16

15 Dec '16

Hi list, I have a powershell client that is occasionally reporting negative values for CPU usage. Since that's not possible I wanted to pass along this easy modification for load average in the graphs.cfg for any clients that want to get rid of the negative values on their graphs. This doesn't remove them from the RRD, just discards values below 0 and above 1000 when generating the graph. Load cannot be negative so this may be something to include in the base configuration. Here's a diff: 36,37c36 < CDEF:la_min0=avg,100,/ < CDEF:la=la_min0,0,1000,LIMIT --- > CDEF:la=avg,100,/ And here's what my graphs.cfg looks like now: [la] TITLE CPU Load YAXIS Load DEF:avg=la.rrd:la:AVERAGE CDEF:la_min0=avg,100,/ CDEF:la=la_min0,0,1000,LIMIT AREA:la#00CC00:CPU Load Average -u 1.0 GPRINT:la:LAST: \: %5.1lf (cur) GPRINT:la:MAX: \: %5.1lf (max) GPRINT:la:MIN: \: %5.1lf (min) GPRINT:la:AVERAGE: \: %5.1lf (avg)\n Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy> [cid:lzbVertical_hres.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

2 2

does alert "recover" if you blue and already alerted test
by bakgat8＠hotmail.com 14 Dec '16

14 Dec '16

If I have a conn that is red - and I have gotten the alert. Then somebody sets the host to blue - will the conn send a recovered alert? Same senario except the test is comething like disk - not conn that runs from the Xymon server (not the client) - same question - will I get a recover alert ? Version 4.3.10: subversion 23

2 1