March 2016 - Xymon - Xymon mailman web

Need help with upgrade from 4.3.17 to 4.3.20
by vadud3＠gmail.com 17 Jul '18

17 Jul '18

I am not sure what I need to after the upgrade for the columns to show data instead of something like this ELF �� >� �� @��@�� Þ ��@�8� �@�%�"� �� @��@�@��@�@��ø ��ø �� 8 ��8 @��8 @�� @��@��ää��ää�� I removed FollowSymLinks from xymon-apache.conf file under /xymon-cgi/ and /xymon-seccgi/ and restarted. I am using ubuntu -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

9 29

Recovery notifications not generated when test goes red->yellow->green?
by hobbit＠elyograg.org 13 Dec '17

13 Dec '17

It appears that if a test goes from the red state, to the yellow state, and then to the green state, no recovery notification is sent. If it goes directly from red to green, then we get a notification. Initial notifications are only sent on RED and PURPLE. We have recovery notifications configured for most tests. Xymon server is 4.3.21, built using makerpm.sh and installed with yum on CentOS 6. I do not know whether our previous version (4.3.14) behaved similarly. It was almost an accident that I discovered the problem at all. Is this expected behavior? If it is, can I change it? Thanks, Shawn

4 3

CLASS not working as expected
by steve＠opendium.com 11 Dec '17

11 Dec '17

Under Xymon 4.3.25, I'm trying to use the class attribute to group hosts together by what monitoring and alerting they need. So for each host I have a hosts.cfg line like: 192.0.2.1 somehost.example.com # CLASS:Foo trace ssh Then in analysis.cfg I have: CLASS=Foo PROC this PROC that And alerts.cfg has: CLASS=Foo SCRIPT=blah However, the tests in analysis.cfg are not being applied. If I replace CLASS=Foo with HOST=somehost.example.com they work as expected. Also, CLASS=linux seems to work, which implies that the CLASS: directive in the hosts.cfg is being ignored. As far as I can tell, the messages on xymon's "client" channel don't contain the class name that was specified in hosts.cfg, so xymond_client is using the class that the client sent instead. Other channels, such as "status" do include the class name that was specified in hosts.cfg. Am I misunderstanding how the class is supposed to be used, or is this a bug? -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direct contacts: Instant messager: xmpp:steve at opendium.com Email: steve at opendium.com Phone: sip:steve at opendium.com Sales / enquiries contacts: Email: sales at opendium.com Phone: +44-1792-824568 / sip:sales at opendium.com Support contacts: Email: support at opendium.com Phone: +44-1792-825748 / sip:support at opendium.com

7 9

DNS failures causing "runtime longer than time limit"
by jlaidman＠rebel-it.com.au 11 Sep '17

11 Sep '17

Hi I'm running Xymon v4.3.10 on Linux, and I'm quite sure it's compiled with c-ares support. I have 12 new DNS servers that were added to Xymon about one month ago. All of my server entries in hosts.cfg have "testip". The tasks.cfg runs xymonet with "--dns-timeout=3". The hosts entries look like so: 10.10.10.1 dnshost1.example.com # testip dns=NS:example.com,SOA: example.com About a week ago, connectivity to all of these servers failed, and at the same time, the xymonnet run time jumped from less than 15 seconds to about 330 seconds, so about 315 seconds extra. The xymonnet page says 295 seconds is taken up by DNS tests. If the increase in time taken is about 315 and is entirely due to the 12 servers failing, then each failed server is adding about 26 seconds to the total run time. I don't think this should be happening like this. With two DNS checks per server, the DNS checks should be taking 6 seconds each to time-out, not 26. If I run xymonnet with "--timing --no-update" and specify only one hostname, I can view the results and the timing. This shows that the ping check gets reported after about 3 seconds, and then the DNS tests are executed and take 26 seconds total. My naiive assumption was that when a server failed a ping (and didn't have "noclear" defined in hosts.cfg) then the network checks would be skipped. On re-reading the man page for hosts.cfg, it dawned on me that a failed ping simply suppresses failed test /results/, but doesn't stop the tests from being run. So the real problem is that the "--dns-timeout=3" is not being taken into consideration by xymonnet. If I run xymonnet with "--debug" it tells me: 1900 2015-06-03 12:02:20 ares_search: tlookup='example.com', class=1, type=2 1900 2015-06-03 12:02:20 ares_search: tlookup='example.com', class=1, type=6 1900 2015-06-03 12:02:20 Processing 0 DNS lookups with ARES 1900 2015-06-03 12:02:46 Finished ARES queue after loop 423 This is peculiar. Why would it say "processing 0 DNS lookups" when there are two lookups to test? Could this be because xymonnet hasn't actually been built with ARES support and I didn't know it? Is there a good way to tell? If I add "--no-ares" I get the same results perhaps suggesting a lack of ARES support. On the other hand, if I add "timeout:3" and "attempts:1" into resolv.conf, I also get the same results. If I run "nm /path/to/xymonnet | grep gethostby" it returns "ares_gethostbyname". Just for fun, I compiled Xymon v4.3.21 and ran the xymonnet binary from there, with no change in behaviour. I also tried removing the "--dns-timeout" option so that it defaults to 30 seconds, but still no change - 26 seconds for two DNS tests. So, I'm not really sure what the problem is, but xymonnet certainly isn't behaving as I would expect. Cheers Jeremy

2 3

EXTIME still valid ?
by rltexas1＠gmail.com 22 Jun '16

22 Jun '16

Is the EXTIME option still valid in the alerts.cfg I am having problems testing the following EXTIME=1:1140:1240 Should be exclude Monday's 11:40 to 12:40. Will test EXTIME=M:1140:1240 But if it's M for Monday what would Sunday be ? Thanks

4 4

Depends tag working configuration
by rower.master＠gmail.com 05 Apr '16

05 Apr '16

Hi All, I´m trying to make the "depends=" hosts.cfg tag to work on Xymon version 4.3.24. Reading some old threads here, it became not clear to me if this configuration tag currently works or not. Has someone here have the depends tag working? I know I can use the route tag, but my intention it´s to use another network protocol and not ICMP for the dependency. Thanks & Regards, Mario

4 12

Monitoring file size on Windows with PowerShell client
by colin.coe＠gmail.com 02 Apr '16

02 Apr '16

Hi all I'm trying to monitor a couple of files on a bunch of Windows clients. /etc/xymon/analysis.cfg HOST=%winclnt.* FILE C:\users\user.domain\Documents\Timing.log SIZE>500M yellow FILE C:\users\user.domain\Documents\Timing.log SIZE>1G red FILE C:\users\user.domain\Documents\Trace.log SIZE>500M yellow FILE C:\users\user.domain\Documents\Trace.log SIZE>1G red /etc/xymon/client-local.cfg file:C:\users\user.domain\Documents\Timing.log SIZE>1G red file:C:\users\user.domain\Documents\Trace.log SIZE>500M yellow Looking at the man page for client-local.cfg, its colon (:) delimited. How do I specify the file path for Windows clients? Thanks CC

2 2

Splitting acks in one page
by tomas.wachtarczyk＠gmail.com 01 Apr '16

01 Apr '16

Hello, Is it possible to multi-acknowledge problems from one page ? Example /usr 95% /application/whatever 100% Usr will go to unix admins /application will go to application team. I understand GROUP on DISK in analysis.cfg, but it does not seem to be right thing for me. Because it will be 2 different incidents. Can i acknowledge disk.usr with comment "some incident number" and disk.application with "different incident number" when both are under disk page ? Thank you for hint, W.

1 1

Patch for including directories in hosts.cfg
by Paul.Root＠CenturyLink.com 31 Mar '16

31 Mar '16

Hi, I just reorganized my xymon hosts.cfg to use directories to better organize my machines. I completely forgot devmon -readbbhosts. So I made a quick change to dm_config.pm to pick up *.cfg files in directories. *** dm_config.pm Tue Mar 29 10:35:58 2016 --- /usr/local/devmon/modules/dm_config.pm Fri Jan 23 09:41:27 2009 *************** *** 1267,1274 **** next FILEREAD; } - # print "working on $bbfile\n"; - # Now interate through our file and suck out the juicy bits FILELINE: while ( my $line= <BBFILE> ) { chomp $line; --- 1267,1272 ---- *************** *** 1287,1311 **** push @bbfiles, $file; } - # Check for directory includes - if($line =~ /^\s*(?:disp|net)?directory\s+(.+)$/i) { - my $directory = $1; - # Tack on our etc dir if this isn't an absolute path - $directory = "$etcdir/$directory" if $directory !~ /^\//; - # print "reading $directory\n"; - - # Add the file to our read array - opendir (DIR, $directory) || warn "Cannot open $directory\n"; - my $file; - while ($file = readdir (DIR)) { - # I name all config files with a .cfg - if (grep (/\.cfg/, $file)) { - push @bbfiles, $directory . '/' . $file; - } - } - close (DIR); - } - # Else see if this line matches the ip/host bb-hosts format elsif($line =~ /^\s*(\d+\.\d+\.\d+\.\d+)\s+(\S+)(.*)$/i) { my ($ip, $host, $bbopts) = ($1, $2, $3); --- 1285,1290 ---- Devmon version 0.3.1-beta1. Paul Root Lead Engineer CenturyLink Network Reliability Operations Center 390 Commerce Dr Woodbury, MN 55125 Direct: (651)312-5207 Paul.Root at centurylink.com This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

3 2

Columndoc.csv does not show any description on the main page
by sascha.radovanovic＠thyssenkrupp.com 30 Mar '16

30 Mar '16

Hi, Problem solved. Br, sascha This e-mail (including any attachments) may contain confidential and/or privileged information. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail.

1 0