April 2016 - Xymon - Xymon mailman web

False red alerts
by mpannucc＠ycp.edu 14 Apr '16

14 Apr '16

Hello, For the past two days, our xymon environment has been falsely reporting red for SSH and HTTP. It does seem to be random(happened one day at 10pm and two days later at 2:30am). It happens to every server all at the same time. Then a couple minutes later everything goes back to green. I've checked through some logs with no success. I'm not exactly sure if I'm looking in the correct places to find the answer. Any help/suggestions would be great! Thanks Matt __________________ -- This information is intended solely for the use of the individual to whom it is addressed. Any review, disclosure, copying, distribution or use of this e-mail communication by others is strictly prohibited. If you are not the intended recipient, please notify us immediately by returning this message to the sender and delete all copies.

2 1

Content checks clear should be red
by Scot.Kreienkamp＠la-z-boy.com 13 Apr '16

13 Apr '16

Hi everyone, When content checks fail due to the HTTP failure of a host I'd like the content check to go red as well as the HTTP check. Is there any way to make that happen? Thanks! Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy> [cid:lzbVertical_hres.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

1 0

getting thresholds
by bb4＠richter-it.net 13 Apr '16

13 Apr '16

An HTML attachment was scrubbed... URL: <http://lists.xymon.com/pipermail/xymon/attachments/20160411/0f72bdae/attach…>

2 2

issue with standard graphs
by bferrell＠baywinds.org 12 Apr '16

12 Apr '16

I have xymon 4.3.26 installed and I'm seeing this messages in my logs: Bug - duplicate RRD data with same timestamp 1449091405, different data The result seems to be "choppy" graphs... Not a HUGE deal but irritating. Could it be a problem with rrdtool? 1.3.8?

2 1

Changing interval of tests
by jborissr＠gmail.com 11 Apr '16

11 Apr '16

I have searched for changing the interval time between tests. I have a system I need to monitor and they want to have it checked for connectivity every minute. I only need it for that host. I can't find anywhere in the documentation which states how oftent the tests are run or how you change the interval. -- John J. Boris, Sr.

3 3

Disk space test ignored
by Scot.Kreienkamp＠la-z-boy.com 08 Apr '16

08 Apr '16

Hi everyone, I recently upgraded from 4.3.21 to the Terabithia RPM's for 4.3.27. I copied this config file verbatim (except for server name) from my old server to my new server: HOST=innocent.in.hq PORT "LOCAL=%([.:]80)$" MIN=1 TRACK=WWW "TEXT=80-WWW" PORT "LOCAL=%([.:]55000)$" MIN=0 color=red TRACK=RPC_Clients "TEXT=55000-RPC Client Access Sessions" SVC MSExchangeADTopology status=started SVC MSExchangeIS status=started SVC MSExchangeMailboxAssistants status=started SVC MSExchangeRPC status=started SVC MSExchangeSA status=started DISK J 15728640U 10485760U DISK L 15728640U 10485760U DISK M 15728640U 10485760U DISK N 15728640U 10485760U DISK S 15728640U 10485760U DISK T 15728640U 10485760U DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE However, the disk tests are now alerting on 95% full disk instead of on 10 gigs remaining space: M (95% used) has reached the PANIC level (95%) To further troubleshoot I commented out all the disk lines and added this entry: DISK * 15728640U 10485760U That didn't make any difference, the disk is still alerting for 95% full. It is parsing and applying the configuration because the port and SVC information is showing up in the web, so I can't understand why the disk test isn't working. This is a key feature for us as we have many servers with multi-terabyte drives, so alerting at percentages doesn't work nearly as well. The client has not been touched, only the server. Anyone have any ideas? Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy> [cid:lzbVertical_hres.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

3 10

how to write custom script for Xymon
by sirbakash＠gmail.com 08 Apr '16

08 Apr '16

Hello, I will appreaciate it if someone can tell me how to write custom scripts to monitor Linux process through Xymon (i.e) zombie processes, database processes. -Balash

3 2

xymon master-slave server
by cleaver＠terabithia.org 08 Apr '16

08 Apr '16

On Tue, April 5, 2016 10:59 am, eli wrote: > I am planning to build secondary xymon server as backup, is there good > method to sync between them and not both of them not to send alert same > time. if any one implement already I would like to hear feedback. > thanks,Eli There are a few different strategies one can use here, all depending on what kind of internal SLA you're expecting, how much bandwidth you're able to use, and whether you need identical systems or not. The simplest solution (but most bandwidth intensive) is to run the two servers as stacks in parallel and simply not alert on the secondary one. You can use Linux-HA or any of the more advanced cluster software to determine up/down status between the two boxes and take over when the other isn't reachable. You can configure your clients to send reports to both xymon servers at the same time ($XYMONSERVERS) and you've in effect got two complete systems. (xymond_distribute can be used to pass disable/enable messages over). The drawback is a) double the bandwidth use, and b) losing your acknowledgements and alert suppression when the failover occurs. Alternatively, you can keep the second server on a cold standby, regularly getting rsync's from the primary one of the checkpoint files for both xymond and xymond_alert. This has the advantage of the secondary system not being in use when it doesn't need to be. When failover happens, you start up xymond on the slave, it reads from the last checkpoint you'd gotten (I'd advise increasing frequency to something like every few mins, depending on your needs) and starts from there. The drawback there is that you don't have graphing/history at all, and you're missing the last few minutes of changes. If you have heavy network bw available to you, things like DRBD can be used to perform a complete synchronization of *saved* data between the servers. Henrik had proposed a Xymon Swarm concept at http://lists.xymon.com/pipermail/xymon/2015-November/042684.html , which may also help you evaluate your site's needs. Really, there are lots of different ways to conceptualize "high availability" for your monitoring system... I'd advise to keep things as simple as possible so as to eliminate failure points. In our case, we've had two live stacks running in parallel that (mostly) submit into a ticket system, which can de-dupe incoming host+svc alerts automatically, which mostly defines the problem out of existence. The things directly emailed to us were of lower frequency, so we were fine with duplicate emails at first. When that got to be too annoying, we left xymond_alert enabled on the second system but used Linux-HA to simply disable Postfix when it wasn't master. When a failover occurred, the startup script was modified to clear out the local outbound queue before starting the service up. Xymon thus never had to care about whether it was primary/secondary at all. Hope that helps a little bit. Regards, -jc

2 1

TCPtest open connection issue
by Phil.Crooker＠orix.com.au 08 Apr '16

08 Apr '16

I'm having a problem with a spurious error reported by xymonnet on upgrading to 4.3.27: Error output: TCPtest error 1 seen on open connection for zo.cvs TCPtest error 1 seen on open connection for °|.squid TCPtest error 1 seen on open connection for v.squid TCPtest error 1 seen on open connection for s.squid If I substitute an earlier version of xymonnet (4.3.21), the error disappears. I put the 4.3.27 version back in, restart, and the errors return. There is nothing wrong with the hostname and these tests are not producing any 'real' errors. I am testing for a squid service on 5 hosts and cvs on one. This has been reported in the dev forum, but has no published resolution: https://sourceforge.net/p/xymon/mailman/message/34900464 Has anyone else seen this issue? thanks, Phil<mailto:FirstName.LastName at orix.com.au>

2 3

Xymon alert emails....SSH...SQL databases
by sirbakash＠gmail.com 07 Apr '16

07 Apr '16

Hi I'll like to know if Xymon keep a copy of the generated alert messages on the server and where? Also, I'll like to know if I need to create SSH key for Xymon user on the server and the client server. And is there a custom script to monitor SQL databases? Thanks, Bakes

3 2