April 2017 - Xymon - Xymon mailman web

Capture and send data To Elasticsearch and Kibana
by francois.outteryck＠soprasteria.com 27 Sep '22

27 Sep '22

Hi Peter, Examples of task.cfg configuration with status and stachg events : [capture_status] ENVFILE /home/xymon/server/etc/xymonserver.cfg NEED xymond CMD xymond_channel --channel=status /home/xymon/server/ext/capture.sh --log=$XYMONSERVERLOGS/xymond_task_capture.log LOGFILE /var/log/xymon/lunch_capture.log [capture_stachg] ENVFILE /home/xymon/server/etc/xymonserver.cfg NEED xymond CMD xymond_channel --channel=stachg /home/xymon/server/ext/capture.sh --log=$XYMONSERVERLOGS/xymond_task_capture_stachg.log LOGFILE /var/log/xymon/lunch_capture_stachg.log Capture.sh script simple made to call a php script : #!/bin/sh /usr/bin/php /var/www/kibana/capture.php $@ </dev/stdin >>/var/log/xymon/xymond_capture_php.log 2>&1 And capture.php make all job : <?php date_default_timezone_set('Europe/Paris'); $TODO=FALSE; $ARRAY_COLLECTOR=array(); $COLLECTOR=null; while (FALSE !== ($line = fgets(STDIN))) if ($line!='') { $tab=reduce_array($line); if (sizeof($tab)==0) continue; if ($line=="@@\n") { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } } else if (substr($tab[0],0,8)=='@@stachg') { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } /* 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 /* @@stachg#seq|timestamp|sender|origin|hostname|testname|expiretime|color|prevcolor|changetime|disabletime|disablemsg|downtimeactive|clienttstamp|modifiers */ $COLLECTOR='stachg'; $metadata=explode('|',$tab[0]); $sender=$metadata[2]; $hostname=$metadata[3]; $metadata=array( 'Collector'=>$COLLECTOR, 'Sender'=>$metadata[2], 'ServerName'=>$metadata[4], 'Type'=>$metadata[5], 'Status'=>$metadata[7], 'PrevStatus'=>$metadata[8], 'LogTime'=>$metadata[1], 'ValidTime'=>$metadata[6], 'LastChange'=>$metadata[9], 'DisableTime'=>$metadata[10], 'DisableMSg'=>$metadata[11], 'Message'=>'' ); $id=$metadata['ServerName'].'_'.$metadata['Type'].'_'.$meta['LastChange']; $ARRAY_COLLECTOR=null; $ARRAY_COLLECTOR=array(); $TODO=TRUE; } else if (substr($tab[0],0,8)=='@@status') { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } /* 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 /* @@status|timestamp|sender|origin|hostname|testname|expiretime|color|testflags|prevcolor|changetime|ackexpiretime|ackmessage|disableexpiretime|disablemessage|clientmsgtstamp|flapping */ $COLLECTOR='status'; $metadata=explode('|',$tab[0]); $sender=$metadata[2]; $hostname=$metadata[3]; $metadata=array( 'Collector'=>$COLLECTOR, 'Sender'=>$metadata[2], 'ServerName'=>$metadata[4], 'Type'=>$metadata[5], 'Status'=>$metadata[7], 'LogTime'=>$metadata[1], 'ValidTime'=>$metadata[6], 'LastChange'=>$metadata[10], 'DisableTime'=>$metadata[13], 'AckTime'=>$metadata[11], 'DisableMSg'=>$metadata[14], 'Message'=>'' ); $id=$metadata['ServerName'].'.'.$metadata['Type']; $ARRAY_COLLECTOR=null; $ARRAY_COLLECTOR=array(); $TODO=TRUE; } else { if (substr($tab[0],0,2)=='@@') { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } } if ($TODO) $ARRAY_COLLECTOR[]=$line; } } function CallAPI($method, $url, $data = false) { $curl = curl_init(); switch ($method) { case "POST": curl_setopt($curl, CURLOPT_POST, 1); if ($data) curl_setopt($curl, CURLOPT_POSTFIELDS, $data); break; case "PUT": curl_setopt($curl, CURLOPT_PUT, 1); break; default: if ($data) $url = sprintf("%s?%s", $url, http_build_query($data)); } curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); $result = curl_exec($curl); curl_close($curl); return $result; } function reduce_array($line) { $tab=explode(' ',$line); $nr=array(); for ($i=0;$i<sizeof($tab);$i++) if (trim($tab[$i])!='') $nr[]=trim($tab[$i]); return $nr; } function SendData($id,$cc,$COLLECTOR=null) { if ($COLLECTOR==null) return; $d=new DateTime(); if ($cc['LastChange']!='') {$d->setTimestamp($cc['LastChange']);$cc['LastChange']=$d->format('c');} else {$cc['LastChange']='NaN';} if ($cc['LogTime']!='') {$d->setTimestamp($cc['LogTime']);$cc['LogTime']=$d->format('c');} else {$cc['LogTime']='NaN';} if ($cc['ValidTime']!='') {$d->setTimestamp($cc['ValidTime']);$cc['ValidTime']=$d->format('c');} else {$cc['ValidTime']='NaN';} if (isset($cc['AckTime'])) { if ($cc['AckTime']!='') {$d->setTimestamp($cc['AckTime']);$cc['AckTime']=$d->format('c');} else {$cc['AckTime']='NaN';} } if ($cc['DisableTime']!='') {$d->setTimestamp($cc['DisableTime']);$cc['DisableTime']=$d->format('c'); } else {$cc['DisableTime']='NaN';} $data = json_encode($cc); $data=str_replace('"NaN"','null',$data); echo $id.'=>'.$data."\n"; $url="http://127.0.0.1:9200/xymon/".$COLLECTOR."/".$id; $res=CallAPI("POST",$url,$data); } ?> De : Peter Welter [mailto:peter.welter at gmail.com] Envoyé : vendredi 23 décembre 2016 14:45 À : OUTTERYCK Francois Cc : xymon at xymon.com Objet : Re: [Xymon] Capture and send data To Elasticsearch and Kibana Hi Francois, Looks good, your sample. I am very interested in your integration efforts. How do you select what is going to be inserted in the ELK stack? All status messages that Xymon receives? And could you provide an example of the xymond_channel block in you task.cfg and the capture.sh? Tasks.cfg probably is something like: [es] ... CMD xymond_channel --channel=status /home/xymon/server/ext/capture.sh ... And the capture.sh contains some curl script to the ELK stack? Regards, Peter 2016-12-14 18:15 GMT+01:00 OUTTERYCK Francois <francois.outteryck at soprasteria.com<mailto:francois.outteryck at soprasteria.com>>: Hello, I just do a small work with Xymon in order to send status data to Elasticsearch. And with Kibana reporting is easy. How it work ? Simple : With capture of status message (xymond_channel --channel=status /home/xymon/server/ext/capture.sh ) script encode status message in json and send as document in elasticSearch. Example of Mapping document status in elasticsearch : "status"=> array( "properties"=>array( "ServerName"=> array("type"=> "string"), "Type"=> array("type"=> "string"), "Status"=> array("type"=> "string"), "LastChange"=> array("type"=> "date","format"=> "strict_date_optional_time"), "LogTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "ValidTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "AckTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "DisableTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "Sender"=> array("type"=> "string"), "DisableMSg"=> array("type"=> "string"), "Message"=> array("type"=> "string") ) ) All is done with a 130 lines script. So simple to integrate in existing environment and so powerfull usage of Xymon/elasticsearch/Kibana For those who don’t know kibana : https://www.elastic.co/products/kibana [cid:image001.png at 01D25EA3.F74489F0] _______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon

2 1

Need help with upgrade from 4.3.17 to 4.3.20
by cleaver＠terabithia.org 17 Jul '18

17 Jul '18

Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config. Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line is taking precedence over the ScriptAlias? Do you see anything in the apache access/error logs that indicates an error? -jc On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote: > Having the same problem after installing 4.3.20 on both Ubuntu server > 14.04 and 15.04. > > Thanks, > > > Manuel A Cortes > > Systems Programmer III > > [IBM_Cert] > > IBM Certified System Administrator AIX 7 > > Information Services > > 321-841-6534 > > Orlandohealth.com > > Facebook.com/orlandohealth > > Youtube.com/orlandohealth > > @orlandohealth on twitter > > > > 1414 Kuhl Avenue.,MP136 > > Orlando, Florida 32806 > > From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Asif Iqbal > Sent: Tuesday, May 19, 2015 12:59 PM > To: J.C. Cleaver > Cc: xymon at xymon.com > Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 > > > > On Tue, May 19, 2015 at 12:40 PM, J.C. Cleaver > <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote: > Hmm. It seems like it's trying to pass along the binary rather than > actually execute it. Can you > > a) validate the permissions on the various .sh files inside the > /xymon-cgi/ directory. (Wondering if there's a case where make install > doesn't set permissions properly), and > > > /var/lib/xymon/cgi-bin$ ls -al > total 6560 > drwxr-xr-x 2 root root 4096 May 19 10:19 . > drwxr-xr-x 16 xymon xymon 4096 May 19 10:19 .. > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 acknowledgements.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 appfeed-critical.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 appfeed.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 certreport.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 columndoc.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 confreport-critical.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 confreport.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 criticalview.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 csvinfo.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 datepage.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 eventlog.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 findhost.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 ghostlist.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 historylog.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 history.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 hostgraphs.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 hostlist.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 nongreen.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 notifications.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 perfdata.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 reportlog.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 report.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 showgraph.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 snapshot.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 svcstatus.sh > -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 topchanges.sh > > > b) verify that the ScriptAlias or ExecCGI options are still present in > apache.conf. > > > grep xymon-cgi /etc/apache2/sites-enabled/xymon-apache.conf > # "/xymon" and "/xymon-cgi" URLs. > ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" > RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh > /xymon-cgi/confreport-critical.sh [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh > [R=permanent,L] > RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh > [R=permanent,L] > > > HTH, > > -jc > > > On Tue, May 19, 2015 7:56 am, Asif Iqbal wrote: >> I am not sure what I need to after the upgrade for the columns to show >> data >> instead of >> something like this >> >> >> ELF ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ ï¿½>ï¿½ ï¿½ï¿½ï¿½ >> @ï¿½ï¿½ï¿½ï¿½ï¿½@ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ Ã >> ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½@ï¿½8ï¿½ ï¿½@ï¿½%ï¿½"ï¿½ ï¿½ï¿½ï¿½ >> ï¿½ï¿½ï¿½@ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½@ï¿½@ï¿½ï¿½ï¿½ï¿½ï¿½@ï¿½@ï¿½ï¿½ï¿½ï¿½ï¿½Ã¸ >> ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½Ã¸ ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ ï¿½ï¿½ï¿½ >> ï¿½ï¿½ï¿½8 ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½8 >> @ï¿½ï¿½ï¿½ï¿½ï¿½8 @ï¿½ï¿½ï¿½ï¿½ï¿½ ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ >> ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ ï¿½ï¿½ï¿½ >> ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½@ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½@ï¿½ï¿½ï¿½ï¿½ï¿½Ã¤Ã¤ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½Ã¤Ã¤ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ >> >> I removed FollowSymLinks from xymon-apache.conf file under /xymon-cgi/ >> and /xymon-seccgi/ and restarted. >> >> I am using ubuntu >> >> -- >> Asif Iqbal >> PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> >> A: Because it messes up the order in which people normally read text. >> Q: Why is top-posting such a bad thing? >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com<mailto:Xymon at xymon.com> >> http://lists.xymon.com/mailman/listinfo/xymon >> > > > > > -- > Asif Iqbal > PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad thing? > > ________________________________ > > This e-mail message and any attached files are confidential and are > intended solely for the use of the addressee(s) named above. If you are > not the intended recipient, any review, use, or distribution of this > e-mail message and any attached files is strictly prohibited. > > This communication may contain material protected by Federal privacy > regulations, attorney-client work product, or other privileges. If you > have received this confidential communication in error, please notify the > sender immediately by reply e-mail message and permanently delete the > original message. To reply to our email administrator directly, send an > email to: postmaster at orlandohealth.com . > > If this e-mail message concerns a contract matter, be advised that no > employee or agent is authorized to conclude any binding agreement on > behalf of Orlando Health by e-mail without express written confirmation by > an officer of the corporation. Any views or opinions presented in this > e-mail are solely those of the author and do not necessarily represent > those of Orlando Health. >

8 25

Recovery notifications not generated when test goes red->yellow->green?
by hobbit＠elyograg.org 13 Dec '17

13 Dec '17

It appears that if a test goes from the red state, to the yellow state, and then to the green state, no recovery notification is sent. If it goes directly from red to green, then we get a notification. Initial notifications are only sent on RED and PURPLE. We have recovery notifications configured for most tests. Xymon server is 4.3.21, built using makerpm.sh and installed with yum on CentOS 6. I do not know whether our previous version (4.3.14) behaved similarly. It was almost an accident that I discovered the problem at all. Is this expected behavior? If it is, can I change it? Thanks, Shawn

4 3

Alert transition yellow -> red with repeat problem
by john.r.rothlisberger＠accenture.com 27 Nov '17

27 Nov '17

This problem contributed to an outage last night - something is wrong. Last night we had a disk that was in the warning state - warning email sent. That disk then went into an alert state and an alert email was triggered (right away as the DURATION value took into account the time it was yellow) and then again 15 minutes later as designed. THEN - another disk on that server went yellow. It did NOT trigger any emails (as expected we should continue to focus on the alerts) but it somehow interfered with the REPEAT time of the alerts and those STOPPED. There is a bug somewhere. Thanks, John Upcoming PTO: _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office _____________________________________________________________________ From: Rothlisberger, John R. Sent: Tuesday, April 11, 2017 7:49 AM To: 'xymon >> xymon at xymon.com' <xymon at xymon.com> Subject: Alert transition yellow -> red with repeat problem This is a problem I have seen for a long long time and have actually brought it up on the list before. Xymon 4.3.21 Ubuntu 14.04LTS The problem I have (in this instance) a warning which is to be repeated daily suddenly goes red and triggers a single alert but doesn't repeat again until the repeat time of the warning has passed. >From the notification.log: Tue Mar 28 05:31:28 2017 ServerA.disk (IP) disk_warn 1490697082 100 <- warning sets a repeat time of 1 day Tue Mar 28 05:53:32 2017 ServerA.disk (IP) disk_alert 1490698405 100 <- minutes later it goes red (red repeat time is 15 minutes but no further alerts are generated) Next alert comes out 1 day after the above warning: Wed Mar 29 05:31:31 2017 ServerA.disk (IP) disk_alert 1490783486 100 <- 1 day after previous warning. This should have been repeated every 15 minutes. Wed Mar 29 05:46:40 2017 ServerA.disk (IP) disk_alert 1490784394 100 <- now, the repeat time is 15 minutes ... <- and continues every 15 minutes. This alert went a full 24 hours with only a single notification. :( I have seen this before (not always) where the repeat time in a warning overrides a follow up alert until the warning repeat time has expired. Alert rules: SCRIPT /home/xymon/server/ext/pg/exwarn_SCRIPT disk_warn DURATION>30 REPEAT=1d COLOR=yellow SERVICE=disk FORMAT=TEXT UNMATCHED SCRIPT /home/xymon/server/ext/pg/exalert_SCRIPT disk_alert DURATION>20 REPEAT=15 COLOR=red SERVICE=disk FORMAT=TEXT UNMATCHED Ideas/thoughts? Thanks, John Upcoming PTO: 4/3 _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office _____________________________________________________________________ ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com

3 5

CLASS not working as expected
by steve＠opendium.com 07 Nov '17

07 Nov '17

Under Xymon 4.3.25, I'm trying to use the class attribute to group hosts together by what monitoring and alerting they need. So for each host I have a hosts.cfg line like: 192.0.2.1 somehost.example.com # CLASS:Foo trace ssh Then in analysis.cfg I have: CLASS=Foo PROC this PROC that And alerts.cfg has: CLASS=Foo SCRIPT=blah However, the tests in analysis.cfg are not being applied. If I replace CLASS=Foo with HOST=somehost.example.com they work as expected. Also, CLASS=linux seems to work, which implies that the CLASS: directive in the hosts.cfg is being ignored. As far as I can tell, the messages on xymon's "client" channel don't contain the class name that was specified in hosts.cfg, so xymond_client is using the class that the client sent instead. Other channels, such as "status" do include the class name that was specified in hosts.cfg. Am I misunderstanding how the class is supposed to be used, or is this a bug? -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direct contacts: Instant messager: xmpp:steve at opendium.com Email: steve at opendium.com Phone: sip:steve at opendium.com Sales / enquiries contacts: Email: sales at opendium.com Phone: +44-1792-824568 / sip:sales at opendium.com Support contacts: Email: support at opendium.com Phone: +44-1792-825748 / sip:support at opendium.com

6 7

DNS failures causing "runtime longer than time limit"
by jlaidman＠rebel-it.com.au 11 Sep '17

11 Sep '17

Hi I'm running Xymon v4.3.10 on Linux, and I'm quite sure it's compiled with c-ares support. I have 12 new DNS servers that were added to Xymon about one month ago. All of my server entries in hosts.cfg have "testip". The tasks.cfg runs xymonet with "--dns-timeout=3". The hosts entries look like so: 10.10.10.1 dnshost1.example.com # testip dns=NS:example.com,SOA: example.com About a week ago, connectivity to all of these servers failed, and at the same time, the xymonnet run time jumped from less than 15 seconds to about 330 seconds, so about 315 seconds extra. The xymonnet page says 295 seconds is taken up by DNS tests. If the increase in time taken is about 315 and is entirely due to the 12 servers failing, then each failed server is adding about 26 seconds to the total run time. I don't think this should be happening like this. With two DNS checks per server, the DNS checks should be taking 6 seconds each to time-out, not 26. If I run xymonnet with "--timing --no-update" and specify only one hostname, I can view the results and the timing. This shows that the ping check gets reported after about 3 seconds, and then the DNS tests are executed and take 26 seconds total. My naiive assumption was that when a server failed a ping (and didn't have "noclear" defined in hosts.cfg) then the network checks would be skipped. On re-reading the man page for hosts.cfg, it dawned on me that a failed ping simply suppresses failed test /results/, but doesn't stop the tests from being run. So the real problem is that the "--dns-timeout=3" is not being taken into consideration by xymonnet. If I run xymonnet with "--debug" it tells me: 1900 2015-06-03 12:02:20 ares_search: tlookup='example.com', class=1, type=2 1900 2015-06-03 12:02:20 ares_search: tlookup='example.com', class=1, type=6 1900 2015-06-03 12:02:20 Processing 0 DNS lookups with ARES 1900 2015-06-03 12:02:46 Finished ARES queue after loop 423 This is peculiar. Why would it say "processing 0 DNS lookups" when there are two lookups to test? Could this be because xymonnet hasn't actually been built with ARES support and I didn't know it? Is there a good way to tell? If I add "--no-ares" I get the same results perhaps suggesting a lack of ARES support. On the other hand, if I add "timeout:3" and "attempts:1" into resolv.conf, I also get the same results. If I run "nm /path/to/xymonnet | grep gethostby" it returns "ares_gethostbyname". Just for fun, I compiled Xymon v4.3.21 and ran the xymonnet binary from there, with no change in behaviour. I also tried removing the "--dns-timeout" option so that it defaults to 30 seconds, but still no change - 26 seconds for two DNS tests. So, I'm not really sure what the problem is, but xymonnet certainly isn't behaving as I would expect. Cheers Jeremy

2 3

Xymon PS Client broken after 1703 Update
by slbeardall＠gmail.com 28 Apr '17

28 Apr '17

Xymon PS Client broken after 1703 Update. The service starts up in a paused state. Any ideas? I have version 2.19

3 4

Multiple graphs for one test
by xymon＠asitshouldbe.com 26 Apr '17

26 Apr '17

Adding the --multigraphs=jboss option to the cgioptions.cfg did not fix the problem. I downloaded the latest version of Xymon and looked through the release notes. It says: "Which RRD graphs are displayed on a status page can now be customized on a per-test basis through the use of environment variables. For example, GRAPHS_cpu="la,vmstat1" will cause an additional graph to be shown on cpu tests. (Submitted by Werner Maier)" That feature was added as part of version 4.3.20. I have 4.3.17. So, the fix to my problem is to upgrade. Thanks to everyone who offered suggestions. Ron Galen Johnson <Galen.Johnson at sas.com> wrote .. > If that fixes the problem, I'd be curious to understand why. That is not in my > configs and I'm running 4.3.28 (terabithia). I'm fairly certain it worked on 4.3.17 > (non-terabithia) but I won't swear to it in court. > > =G= > > ________________________________________ > From: Scot Kreienkamp <Scot.Kreienkamp at la-z-boy.com> > Sent: Wednesday, April 26, 2017 10:52 AM > To: xymon at asitshouldbe.com; Galen Johnson > Cc: xymon at xymon.com > Subject: RE: [Xymon] Multiple graphs for one test > > I believe what you're looking for is in cgioptions.cfg. Here's the relevant line > from mine: > > # svcstatus.cgi options for a normal (current) status display > CGI_SVC_OPTS="--env=$XYMONENV --no-svcid --history=top --multigraphs=jboss,JMSQueue,cpustat" > > > > > Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate > One La-Z-Boy Drive | Monroe, Michigan 48162 | Office: 734-384-6403 | | Mobile: > 7349151444 | Email: Scot.Kreienkamp at la-z-boy.com > -----Original Message----- > From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of xymon at asitshouldbe.com > Sent: Wednesday, April 26, 2017 10:37 AM > To: Galen Johnson <Galen.Johnson at sas.com> > Cc: xymon at xymon.com > Subject: Re: [Xymon] Multiple graphs for one test > > Thanks for the information. I think I followed what you said, but I seem to be > missing something along the way. > > I have this as part of the TEST2RRD definition in the xymonserver.cfg file: > > jboss=ncv > > I also have this in the xymonserver.cfg file: > > SPLITNCV_jboss="*:GAUGE" > GRAPHS_jboss="jboss,jboss1" > > Xymon is creating the jboss,*.rrd files as expected. > > In the graphs.cfg file, I have two graphs defined as shown below. The first one > graphs two data points and the second one graphs three. > > Xymon only displays the graph named "jboss". If I flip the names of the two graph > definitions ([jboss] becomes [jboss1] and [jboss1] becomes [jboss]), Xymon still > only shows one graph, but now it shows the one with three data points instead of > two. (Whichever one defined as [jboss] is the one displayed.) > > If I view the graph in my browser, I'm able to manually change the "service=ncv:jboss" > in the URL to "service=ncv:jboss1" and see the other graph. > > So the data collection is working, the graph definitions are OK, and the graphs > are being generated. The only thing left is to get both graphs to display on the > same page at the same time. > > In case it matters, this is Xymon 4.3.17 running on Fedora 20. > > [jboss] > TITLE JBoss Threads > YAXIS Threads > DEF:Peakthreads=jboss,Peak_threads.rrd:lambda:AVERAGE > DEF:Livethreads=jboss,Live_threads.rrd:lambda:AVERAGE > LINE2:Peakthreads#00CCCC:Peak threads > LINE2:Livethreads#CC00CC:Live threads > COMMENT:\n > GPRINT:Peakthreads:LAST:Peak threads \: %5.1lf%s (cur) > GPRINT:Peakthreads:MAX: \: %5.1lf%s (max) > GPRINT:Peakthreads:MIN: \: %5.1lf%s (min) > GPRINT:Peakthreads:AVERAGE: \: %5.1lf%s (avg)\n > GPRINT:Livethreads:LAST:Peak threads \: %5.1lf%s (cur) > GPRINT:Livethreads:MAX: \: %5.1lf%s (max) > GPRINT:Livethreads:MIN: \: %5.1lf%s (min) > GPRINT:Livethreads:AVERAGE: \: %5.1lf%s (avg)\n > > [jboss1] > TITLE JBoss PermGen > YAXIS Bytes > DEF:PermGenComm=jboss,Perm_Gen_Comm.rrd:lambda:AVERAGE > DEF:PermGenMax=jboss,Perm_Gen_Max.rrd:lambda:AVERAGE > DEF:PermGenUsed=jboss,Perm_Gen_Used.rrd:lambda:AVERAGE > LINE2:PermGenComm#00CCCC:Peak threads > LINE2:PermGenMax#AA00CC:Max threads > LINE2:PermGenUsed#CC00CC:Used threads > COMMENT:\n > GPRINT:PermGenComm:LAST:PermGen committed \: %5.1lf%s (cur) > GPRINT:PermGenComm:MAX: \: %5.1lf%s (max) > GPRINT:PermGenComm:MIN: \: %5.1lf%s (min) > GPRINT:PermGenComm:AVERAGE: \: %5.1lf%s (avg)\n > GPRINT:PermGenMax:LAST:PermGen max \: %5.1lf%s (cur) > GPRINT:PermGenMax:MAX: \: %5.1lf%s (max) > GPRINT:PermGenMax:MIN: \: %5.1lf%s (min) > GPRINT:PermGenMax:AVERAGE: \: %5.1lf%s (avg)\n > GPRINT:PermGenUsed:LAST:PermGen used \: %5.1lf%s (cur) > GPRINT:PermGenUsed:MAX: \: %5.1lf%s (max) > GPRINT:PermGenUsed:MIN: \: %5.1lf%s (min) > GPRINT:PermGenUsed:AVERAGE: \: %5.1lf%s (avg)\n > > > > Galen Johnson <Galen.Johnson at sas.com> wrote .. > > Add a line in xymonserver.cfg named GRAPHS_testname="graph1, graph2, ..." > > > > TL;DR > > > > I believe you just need to add a "GRAPHS" line that describes which graphs you > > want to show (you should already have them defined in your graphs.cfg file. > I > > actually use the terabithia rpms which leverages the include files under the > .d > > folders. This is not special for that build but saves me having to remember > to > > set it up. For example, I have a test named ssdbbasic...I have a file graphs.d/ssdbbasic.cfg > > that contains my graph definitions and a file xymonserver.cfg.d/ssdbbasic with > > the following : > > > > GRAPHS_ssdbbasic="ssdbbasic,ssdbbasic1" > > > > TEST2RRD+=",ssdbbasic=ncv" > > > > SPLITNCV_ssdbbasic="*:GAUGE" > > > > You can even split out your rrd definitions if you need (to make them manageable) > > > > =G= > > > > ________________________________________ > > From: Xymon <xymon-bounces at xymon.com> on behalf of xymon at asitshouldbe.com <xymon at asitshouldbe.com> > > Sent: Monday, April 24, 2017 5:32 PM > > To: xymon at xymon.com > > Subject: [Xymon] Multiple graphs for one test > > > > I have a custom test (mytest) that returns multiple pieces of information. The > > information is showing up on Xymon as expected. I'd like to be able to graph > each > > piece of information separately, but on the same page. Is that possible? > > > > For a simplified example, mytest returns these two pieces of information: > > > > threads > > connections > > > > I'm using SPLITNCV to store the results in separate rrd files. That's working. > > > > I'm currently graphing the threads data. I want to graph the connections information > > on the same mytest page, but in a separate graph. > > > > In other words, I want to have multiple graphs using different rrd data files > appear > > on the same Xymon test page. > > > > Is this possible? Does anyone have a quick sample from graphs.cfg and xymonserver.cfg > > that can point me in the right direction? > > > > Again, this is a simplified example. The actual test is returning 27 different > > pieces of information. Some of those are related to each other, some are related > > to other things. They're all related to the same application, which is why I'd > > like them to all appear on the same page. Each graph will likely have 2-4 different > > lines. > > > > Thanks. > > > > Ron > > > > > > This message is intended only for the individual or entity to which it is addressed. > It may contain privileged, confidential information which is exempt from disclosure > under applicable laws. If you are not the intended recipient, you are strictly > prohibited from disseminating or distributing this information (other than to the > intended recipient) or copying this information. If you have received this communication > in error, please notify us immediately by e-mail or by telephone at the above number. > Thank you. >

1 0

Multiple graphs for one test
by xymon＠asitshouldbe.com 26 Apr '17

26 Apr '17

Thanks for the information. I think I followed what you said, but I seem to be missing something along the way. I have this as part of the TEST2RRD definition in the xymonserver.cfg file: jboss=ncv I also have this in the xymonserver.cfg file: SPLITNCV_jboss="*:GAUGE" GRAPHS_jboss="jboss,jboss1" Xymon is creating the jboss,*.rrd files as expected. In the graphs.cfg file, I have two graphs defined as shown below. The first one graphs two data points and the second one graphs three. Xymon only displays the graph named "jboss". If I flip the names of the two graph definitions ([jboss] becomes [jboss1] and [jboss1] becomes [jboss]), Xymon still only shows one graph, but now it shows the one with three data points instead of two. (Whichever one defined as [jboss] is the one displayed.) If I view the graph in my browser, I'm able to manually change the "service=ncv:jboss" in the URL to "service=ncv:jboss1" and see the other graph. So the data collection is working, the graph definitions are OK, and the graphs are being generated. The only thing left is to get both graphs to display on the same page at the same time. In case it matters, this is Xymon 4.3.17 running on Fedora 20. [jboss] TITLE JBoss Threads YAXIS Threads DEF:Peakthreads=jboss,Peak_threads.rrd:lambda:AVERAGE DEF:Livethreads=jboss,Live_threads.rrd:lambda:AVERAGE LINE2:Peakthreads#00CCCC:Peak threads LINE2:Livethreads#CC00CC:Live threads COMMENT:\n GPRINT:Peakthreads:LAST:Peak threads \: %5.1lf%s (cur) GPRINT:Peakthreads:MAX: \: %5.1lf%s (max) GPRINT:Peakthreads:MIN: \: %5.1lf%s (min) GPRINT:Peakthreads:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:Livethreads:LAST:Peak threads \: %5.1lf%s (cur) GPRINT:Livethreads:MAX: \: %5.1lf%s (max) GPRINT:Livethreads:MIN: \: %5.1lf%s (min) GPRINT:Livethreads:AVERAGE: \: %5.1lf%s (avg)\n [jboss1] TITLE JBoss PermGen YAXIS Bytes DEF:PermGenComm=jboss,Perm_Gen_Comm.rrd:lambda:AVERAGE DEF:PermGenMax=jboss,Perm_Gen_Max.rrd:lambda:AVERAGE DEF:PermGenUsed=jboss,Perm_Gen_Used.rrd:lambda:AVERAGE LINE2:PermGenComm#00CCCC:Peak threads LINE2:PermGenMax#AA00CC:Max threads LINE2:PermGenUsed#CC00CC:Used threads COMMENT:\n GPRINT:PermGenComm:LAST:PermGen committed \: %5.1lf%s (cur) GPRINT:PermGenComm:MAX: \: %5.1lf%s (max) GPRINT:PermGenComm:MIN: \: %5.1lf%s (min) GPRINT:PermGenComm:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:PermGenMax:LAST:PermGen max \: %5.1lf%s (cur) GPRINT:PermGenMax:MAX: \: %5.1lf%s (max) GPRINT:PermGenMax:MIN: \: %5.1lf%s (min) GPRINT:PermGenMax:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:PermGenUsed:LAST:PermGen used \: %5.1lf%s (cur) GPRINT:PermGenUsed:MAX: \: %5.1lf%s (max) GPRINT:PermGenUsed:MIN: \: %5.1lf%s (min) GPRINT:PermGenUsed:AVERAGE: \: %5.1lf%s (avg)\n Galen Johnson <Galen.Johnson at sas.com> wrote .. > Add a line in xymonserver.cfg named GRAPHS_testname="graph1, graph2, ..." > > TL;DR > > I believe you just need to add a "GRAPHS" line that describes which graphs you > want to show (you should already have them defined in your graphs.cfg file. I > actually use the terabithia rpms which leverages the include files under the .d > folders. This is not special for that build but saves me having to remember to > set it up. For example, I have a test named ssdbbasic...I have a file graphs.d/ssdbbasic.cfg > that contains my graph definitions and a file xymonserver.cfg.d/ssdbbasic with > the following : > > GRAPHS_ssdbbasic="ssdbbasic,ssdbbasic1" > > TEST2RRD+=",ssdbbasic=ncv" > > SPLITNCV_ssdbbasic="*:GAUGE" > > You can even split out your rrd definitions if you need (to make them manageable) > > =G= > > ________________________________________ > From: Xymon <xymon-bounces at xymon.com> on behalf of xymon at asitshouldbe.com <xymon at asitshouldbe.com> > Sent: Monday, April 24, 2017 5:32 PM > To: xymon at xymon.com > Subject: [Xymon] Multiple graphs for one test > > I have a custom test (mytest) that returns multiple pieces of information. The > information is showing up on Xymon as expected. I'd like to be able to graph each > piece of information separately, but on the same page. Is that possible? > > For a simplified example, mytest returns these two pieces of information: > > threads > connections > > I'm using SPLITNCV to store the results in separate rrd files. That's working. > > I'm currently graphing the threads data. I want to graph the connections information > on the same mytest page, but in a separate graph. > > In other words, I want to have multiple graphs using different rrd data files appear > on the same Xymon test page. > > Is this possible? Does anyone have a quick sample from graphs.cfg and xymonserver.cfg > that can point me in the right direction? > > Again, this is a simplified example. The actual test is returning 27 different > pieces of information. Some of those are related to each other, some are related > to other things. They're all related to the same application, which is why I'd > like them to all appear on the same page. Each graph will likely have 2-4 different > lines. > > Thanks. > > Ron > >

3 3

Storing / retrieving metadata and the 'data' message type
by zak.beck＠accenture.com 26 Apr '17

26 Apr '17

Hi I want to save some information about a client in Xymon and retrieve it later, without using a status column. In my case this is non-numeric data for certain servers only, the version string from SQL Server. It appears I can send this to Xymon using a 'data' message (http://xymon.sourceforge.net/xymon/help/manpages/man1/xymon.1.html) data HOSTNAME.DATANAME<newline><additional text> The "data" message allows tools to send data about a host, without it appearing as a column on the Xymon webpages. This is used, for example, to report statistics about a host, e.g. vmstat data, which does not in itself represent something that has a red, yellow or green identity. It is used by RRD bottom-feeder modules, among others. In Xymon, data messages are by default processed only by the xymond_rrd<http://xymon.sourceforge.net/xymon/help/manpages/man8/xymond_rrd.8.html>(8) module. If you want to handle data-messages using an external application, you may want to enable the xymond_filestore<http://xymon.sourceforge.net/xymon/help/manpages/man8/xymond_filestore.8.ht…>(8) module for data-messages, to store data-messages in a format compatible with how the Big Brother daemon does. My question is, how do I retrieve this data at a later date? I've sent some data messages with this format: data hostname.sqlversion Microsoft SQL Server 2008 R2 (SP3) - 10.50.6220.0 (X64) Mar 19 2015 12:32:14 Copyright (c) Microsoft Corporation Enterprise Edition (64-bit) on Windows NT 6.1 <X64> (Build 7601: Service Pack 1) (Hypervisor) I thought I might be able to get it back like this: xymon <serverIP> 'query hostname.sqlversion' --response or this: xymon <serverIP> 'xymondlog hostname.sqlversion' --response The above do work with 'status' messages (e.g. cpu), but not 'data'. The man page quoted above suggests I need something to 'process' the message? Do I have to enable filestore and then write a query script to read the files? Zak ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com

1 0