September 2016 - Xymon - Xymon mailman web

In the year 2036...
by rcohen55＠gmail.com 28 Sep '16

28 Sep '16

Hi Someone with uncontrolled fingers changed the date on one of our HPs to 2036. since than, all xymon builtin alerts gone purple (all new stats are from the past :( ) is there a way of removing those 2036 entries without deleting all history? thanks _rony

2 1

Xymon 4.4 Alpha
by spah＠syntec.co.uk 28 Sep '16

28 Sep '16

Hi list, Xymon 4.4 Alpha was released at the beginning of April, virtually 6 months ago (although I do not think it was ever announced, except via the subversion commits and changes - that is all I can find). It was great to watch so many commits coming in leading up to that and Xymon really seemed to have good momentum. But it seems to have been losing it since then. Has anyone been using or testing this version? Have you got any bug reports, or has it all been working fine for you? If so, any messages saying so may encourage others to try it and help progression towards a stable release. If you didn't know about it, and want to try it, I think that would be great! (Browse here: https://sourceforge.net/p/xymon/code/HEAD/tree/branches/4.x-master/ or checkout of subversion with this command: svn co https://svn.code.sf.net/p/xymon/code/branches/4.x-master/ xymon-4.4-alpha) BTW, a 4.4-alpha folder was created on SourceForge on 1st April (and I do not think it was an April Fool's joke!), but no file is visible there. Kind regards, SebA

2 1

Possible Memory Leak (?!) in Version Xymon 4.3.27-1.el6.terabithia
by peter.welter＠gmail.com 28 Sep '16

28 Sep '16

Hi J.C., First of all: Thanks for your work for Xymon! Second: I have a question about the repository from terabithia. I want to install an Development, Test Accept, Production environment with the use of this repository. I installed first and are working on the next phase. Over time however, I see that my Xymon-server seems to eat all the memory available and starts swapping until all memory is consumed?!? This is for Development only and there are no really any tests. A very small host.cfg. So, why is over time, Xymon this hungry for memory? Tue Sep 20 17:29:46 CEST 2016 - Memory CRITICAL Memory Used Total Percentage green Real/Physical 7737M 7872M 98% yellow Actual/Virtual 7539M 7872M 95% red Swap/Page 3886M 4095M 94% After a Xymon restart, all the swap is freed? I'm using Red Hat Enterprise Linux Server release 6.8 (Santiago) Any suggestions what to do next? Thanks in advance for any help! Peter

3 6

Xymon WinPSclient central config examples
by spah＠syntec.co.uk 23 Sep '16

23 Sep '16

For example this does not work: PROC "SVC:TermService C:\Windows\System32\svchost.exe -k termsvcs" 1 1 red "TEXT=Terminal Services" But it is found in the procs output... I have determined that much simpler SVC checks do work though, so thanks Dave. In client-local.cfg, should this work: [host=SQL-CLU-N[12]] as an alternative to: [SQL-CLU-N1] and repeating everything in: [SQL-CLU-N2] What should I do if I want to match the latest log file like this (on WinPSclient) log:C:\Temp\myServiceLog15-09-16.6.log:10240 where the date is the date the service was last restarted and the number before the .log is incremented when the log file is rotated, which is at least once per day? What kind of wildcards can I use, and can I put commands in backticks? And if I can use backticks, should they be in PowerShell? Kind regards, Sebastian _____ From: Dave Sent: 16 September 2016 19:42 To: SebA Subject: Re: [Xymon] Xymon WinPSclient central config examples SebA, I don't think there needs to be anything special in the client-local.cfg for parsing PROCS (and PORTS). Here's a few of my rules: SVC %^Netbackup.Client.Service$ SVC XymonPSClient PORT "LOCAL=%(0:445)$" state=LISTENING TEXT=smb PORT "LOCAL=%(0:3389)$ state=LISTENING TEXT=rdp Note, I had to use the periods in the "Netbackup Client Service" because of the spaces in the service name. I added the PORTS for additional ref in parsing the data. Dave On Thu, Sep 15, 2016 at 9:03 AM, SebA <spah at syntec.co.uk> wrote: Hi, does anyone have any examples of monitoring logs and procs using Xymon WinPSclient that they can share with me? client-local.cfg and analysis.cfg Or tell me why this does not match anything when, excluding the %^ and $, this is what is displayed in the procs listing (names changed): PROC "%^SVC:WindowsServiceName C:\Services\MyLongServerName.exe$" 1 1 red "TEXT=My Service" This is returning red when the service is running - 0 instances found. Kind regards, SebA _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/ <http://lists.xymon.com/mailman/listinfo/xymon> mailman/listinfo/xymon

2 1

Alert exclusions and Boolean processing
by dboldt＠usgs.gov 22 Sep '16

22 Sep '16

I have a display group where I would like to ignore alerts for a specific test on a specific host. It appears that the following definition DISPLAYGROUP=%My\sGroup EXHOST=myhostname EXSERVICE=mytest COLOR=red excludes all of the tests run on "myhostname" as well as all of the "mytest" tests run on the other hosts in that group. How do I arrange for these test exclusions to be logical ANDs? -- -- David Boldt <dboldt at usgs.gov> "It has been said that democracy is the worst form of government except all the others that have been tried." --Sir Winston Churchill (1874 - 1965)

2 2

Installing RetDS for bind statistics graphing
by josh＠imaginenetworksllc.com 22 Sep '16

22 Sep '16

https://wiki.xymonton.org/doku.php/monitors:retds Has anyone installed this recently? I went through the instructions but I think my first snag is the lack of SSH to grab the named.stats file. Watching tcpdump on the client I get no 22/tcp traffic from the Xymon server. My host entry (IP host and user changed): 192.168.1.100 foobar.imaginenetworksllc.com # dns RNAMED:"cmd(ssh -T username@%{H} 2>/dev/null),statsfile(named.stats)" TRENDS:*,bindstats I do have an SSH trust but it's not getting that far, Xymon isn't attempting to SSH at all. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

4 5

"Min. duration shown" in history
by aristide＠free-it.ch 22 Sep '16

22 Sep '16

Hi When looking at the history of a check result, there is a "Min. duration shown" field with a time period. Is it possible to see the a "maximal duration" of a failed test in history and how ? My goal is to find out for how long tests failed for a specific host or check. May be this could be found somewhere in log or data files, but I didn't find out where. Thanks and regards Yann Lehmann

1 0

Name instead of IP in hosts.cfg
by schritte＠ub.uni-frankfurt.de 22 Sep '16

22 Sep '16

Hi, in the man-page I read: "The format of an entry in the hosts.cfg file is as follows: IP-address hostname # tag1 tag2 ..." is there a way to use "hostname hostname # ..." instead? Reason is monitoring a service where the IP often changes. Thanks for help, Rolf -- Mit freundlichen Gruessen Rolf Schrittenlocher Lokales Bibliothekssystem Frankfurt Senckenberganlage 31, 60054 Frankfurt Tel: (49) 69 - 798 28908 LBS: lbs at ub.uni-frankfurt.de Persoenlich: schritte at ub.uni-frankfurt.de

3 2

alerts config query
by mburger＠bubbanfriends.org 21 Sep '16

21 Sep '16

On 2016-09-21 5:55 am, Ian Diddams via Xymon wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon Hello, Ian. Looks like it's doing exactly what you told it to do...it's not emailing you for purple or red alarms between 7 and 9. This is occurring because you were specific about the level of alarms for which you wanted it to be silent when you included the purple,red in your config. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1

1 0

alerts config query
by didds3＠yahoo.co.uk 21 Sep '16

21 Sep '16

hobbit version 4.2.3 I have an alert HOST=* TIME=w:0800:1830 COLOR=red,purple EXSERVICE=msgs,maint,sql_results,sql_results_1,sql_results_2,who,uptimeMAIL monitor at domain Amongst other things coinfigured there is a "svcs" check we use for windows servers ie checking services that are running This works great. Except we have a service on a windows server "SERVER_A" that is deliberately shut down for two hours every day and this of course sends alerts that are redundant/immaterial. So to get arond this I then configured HOST=* TIME=w:0800:1830 COLOR=red,purple EXSERVICE=msgs,maint,sql_results,sql_results_1,sql_results_2,who,uptime EXSERVICE=svcs EXHOST=SERVER_A TIME=w:0700:0900MAIL monitor at domain That is successful - i.e. the svcs email alert is not sent between 0700-0900. However, a bizarre side effect of this is that now YELLOW alerts for "msgs" alerts are now sent between 0800 and 0900 ! I have removed the "EXSERVICE=svcs EXHOST=SERVER_A TIME=w:0700:0900" to test the outcome, and as expected the svcs emails return, and the msgs one stop, so it must be this alert config that is the issue here. I'm at a bit of a loss here because 1) this msgs alert is actually yellow, which is not included in the first line anyway2) msgs are expressly excluded in the first line also. So clearly this config is working as a sort of "first line unless the seocnd line exists". ? Has anyone any suggestions as to how to configure this correctly so that the svcs alerts are not acted upon between 0700-0900 [in fact I can of course just mnake this 0800-0900 as the rule only works after 0800 anyway etc ], but msgs are not suddenly alerted upon? cheers ian

1 0