April 2018 - Xymon - Xymon mailman web

[External] Memory leak in Windows Virtual Disk service caused by Xymon Windows Powershell client
by zak.beck＠accenture.com 26 Apr '18

26 Apr '18

Hi Seb Thanks for confirming, that’s good news – I was fearing it may be the core disk utilisation functions which would be a much larger headache! > Is the XymonDiskPart information used for anything? I mean, can it be used for anything without writing plug-ins? The [diskpart] section is used in one of our datacentres where they use clustering and the information is used primarily for reporting. So no, it is not used for anything by default. I think the best solution here is for me to add a setting in xymonclient_config.xml allowing you to turn off the diskpart function for specific servers. You can then remove your comment and continue to use future updates. Zak From: SebA [mailto:spah at syntec.co.uk] Sent: Friday, 30 March 2018 14:04 To: Beck, Zak <zak.beck at accenture.com> Cc: Xymon Mailing List <xymon at xymon.com> Subject: Re: [External] Memory leak in Windows Virtual Disk service caused by Xymon Windows Powershell client Hi Zak, Thanks for your swift reply and sorry for my own delay! It's good to know you have such extensive use of the PS client without this issue. I think you are probably right. These issue has only appeared on servers using Windows Cluster Failover, where various iSCSI disks are clustered. For the record, my workaround of disabling the Virtual Disk Service caused no bad effects on the server, but it does prevent diskpart from running. I set the service back to Manual, and it started as soon as I ran diskpart from an elevated Command Prompt. Exiting diskpart causes the VDS service and proces to stop. When the Virtual Disk Service was set to manual, and started just by me running diskpart.exe, the client output has: [diskpart] diskpart:::Clustered Unknown When the service is disabled, the output is just an empty section: [diskpart] When VDS is started by me restarting the XymonPSclient service and it being on manual, the output is e.g.: [diskpart] diskpart:Disk 0:278 GB:Not Clustered diskpart:Disk 1:1024 MB:Clustered Active diskpart:Disk 2:25 GB:Clustered Active diskpart:Disk 3:500 GB:Clustered Active diskpart:Disk 4:300 GB:Clustered Inactive diskpart:Disk 5:1024 MB:Clustered Inactive diskpart:Disk 6:500 GB:Clustered Inactive diskpart:Disk 7:200 GB:Clustered Inactive diskpart:Disk 8:1024 MB:Clustered Inactive diskpart:Disk 9:1024 MB:Clustered Inactive diskpart:Disk 10:200 GB:Clustered Inactive diskpart:Disk 11:200 GB:Clustered Inactive diskpart:Disk 12:500 GB:Clustered Active diskpart:Disk 13:5120 MB:Clustered Active diskpart:Disk 14:500 GB:Clustered Inactive Compared with VDS running because of me running diskpart and running: “list disk” For each disk returned, “select disk {n}” and then “detail disk” for each disk (which does not leak memory) vds.exe uses about an extra MB of RAM when running due to the PS client. I have also now commented out the line you suggest (' $script:diskpartData = XymonDiskPart ') and now when I restart the XymonPSclient service with VDS set to Manual it does not get restarted and left running (or restarted at all). So this looks like a better workaround than just disabling the service, but I will need to continue to monitor that. Is the XymonDiskPart information used for anything? I mean, can it be used for anything without writing plug-ins? We do not have memory leaks in powershell.exe on these servers (although I think I may have seen it on another server), so the issue above is not related to Alessandro's issue. Thanks again for your help Zak, and I hope this knowledge is of benefit to you or others too. Kind regards, SebA On 14 March 2018 at 09:21, Beck, Zak <zak.beck at accenture.com<mailto:zak.beck at accenture.com>> wrote: Hi Seb I’ve got hundreds of VMs running the Powershell client on Windows Server 2008R2, 2012R2 and 2016 and I don’t see this issue. I just checked a couple of servers, vds.exe is between 2MB and 20MB and around 21 threads. Same version of vds.exe too. I’m wondering if function XymonDiskPart has something to do with it. This only runs on slow scans (every 6 hours-ish by default). This runs ‘diskpart’ and then “list disk” For each disk returned, “select disk {n}” and then “detail disk” Maybe you could try this from the command prompt on a server with vds stopped and see if it restarts it. You could also try commenting out this line (3875, towards the end) in the client and see what happens (insert a # at the beginning of the line): $script:diskpartData = XymonDiskPart Alternatively, it could be the disk utilisation code which is using Windows API calls in kernel32.dll – FindFirstVolume, FindNextVolume, FindVolumeClose, GetVolumeInformation, GetVolumePathNamesForVolumeNameW, GetDiskFreeSpaceEx and GetDriveType. The MSDN documentation for these doesn’t mention the Virtual Disk Service but I guess they could be using it. Zak From: SebA [mailto:spah at syntec.co.uk<mailto:spah at syntec.co.uk>] Sent: Tuesday, 13 March 2018 18:14 To: Beck, Zak <zak.beck at accenture.com<mailto:zak.beck at accenture.com>>; Xymon Mailing List <xymon at xymon.com<mailto:xymon at xymon.com>> Subject: [External] Memory leak in Windows Virtual Disk service caused by Xymon Windows Powershell client I have noticed a memory and thread leak in the Windows Virtual Disk service - or vds.exe from the process list. This service is set to Manual by default and gets started when starting the XymonPSClient service on Windows 2008 R2. It starts off using 32 threads, but grows forever, the virtual memory and physical memory (which starts under 6 MB) used slowly grow too. Has anyone noticed this problem and do they have a solution to it? On Windows Server 2012, the Virtual Disk service does not get started by Xymon Windows Powershell client, so it's obviously not started directly by the client, but by a request for information. I looked into known memory leaks for vds.exe and the one I found was not applicable to 2008 R2, only 2008 and Vista. The version of vds.exe we have is later than the version with the fix: 6.1.7601.17514 from 2010. The quick workaround is simply to stop the Virtual Disk Service - but as soon as the PSclient has used it, it does not stop properly and terminates unexpectedly, so one needs to set it not to restart on crash, or stop it immediately after starting, or to Disabled. But it would be good to know why it is starting, not stopping, and leaking threads / memory! Kind regards, SebA ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com<http://www.accenture.com>

2 1

HELP INSTALLATION-CLIENT (CentOS)
by kern_doe＠yahoo.com 24 Apr '18

24 Apr '18

Hi Pablo,I'm new to Xymon, I've installed Xymon server successfully but am still struggling with Xymon client installation on another host, could you share your steps?Thank you!!Kern -- Let's go GreenThis email contains 100% recycled electrons. On ‎Monday‎, ‎March‎ ‎12‎, ‎2018‎ ‎07‎:‎56‎:‎32‎ ‎PM, Pablo Padilla <pabdoom2011 at hotmail.com> wrote: Can I help with the list of software necessary to comply with all the dependencies and the order of installation-client for Solaris and Centos? Saludos cordiales, Pablo Padilla _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

1 0

Red alerts for "bbd" and "http" -- How to fix these for the client host?
by Phil.Crooker＠orix.com.au 24 Apr '18

24 Apr '18

bbd only applies to the xymon server, not the client systems for http, put a URL on that host's config line, ie: 1.2.3.4 host.whatever.com # http://host.whatever.com/blah<http://host.whatever.com> hope that helps... ________________________________ From: Xymon <xymon-bounces at xymon.com> on behalf of Kern Doe via Xymon <xymon at xymon.com> Sent: Tuesday, April 24, 2018 5:35:04 AM To: Xymon Mailing List Subject: [Xymon] Red alerts for "bbd" and "http" -- How to fix these for the client host? _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon<http://lists.xymon.com/mailman/listinfo/xymon>

2 1

Red alerts for "bbd" and "http" -- How to fix these for the client host?
by kern_doe＠yahoo.com 23 Apr '18

23 Apr '18

Hello, I'm new to Xymon and on my learning curve, followings I've done:1. Installed Xymon server, http, etc -- I'm able to see the default Xymon monitorings from the browser as see below: bbd clientlog conn cpu disk files http info inode memory msgs ports procs trends xymond xymongen xymonnet 2. Installed Xymon client (on another test host) -- started the client (su - xymon /home/xymon/runclient.sh start), started httpd service. 3. added Xymon client server's ip address to Xymon server (hosts.cfg), and able to see most of the columns above excepts for "bbd" and "http" -- how do I correct these? Thanks in advance for your help.Kern -- Let's go GreenThis email contains 100% recycled electrons.

1 0

sender of Xymon alert emails
by jeremy＠laidman.org 23 Apr '18

23 Apr '18

ThanNhi The alert emails will be sent as the Xymon user. The sender address will be set according to the mail software that is installed on the system. You can probably change the sender address by reconfiguring your mail software. You might also be able to set an environment variable (eg $USER) to affect the sender address. You can also change the MAIL and/or MAILC parameters in xymonserver.cfg to be a mail emulation script that performs the mail transmission as per your requirements. You can also use the SCRIPT mechanism in alerts.cfg to specify a script in a similar way. Some more information about this is in the thread: http://lists.xymon.com/archive/2014-January/038825.html Cheers Jeremy On 4 April 2018 at 01:17, Nguyen, ThanNhi via Xymon <xymon at xymon.com> wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: "Nguyen, ThanNhi" <thannhi.nguyen at solvay.com> > To: xymon at xymon.com > Cc: > Bcc: > Date: Tue, 3 Apr 2018 10:17:49 -0500 > Subject: sender of Xymon alert emails > Hello, > > I am trying to configure emails alert. The server team already was unable > the email service. but I still haven't got any email alert. > > Can anyone tell me where I can find/configure the sender name/address for > these alert? > > Thank you. > > *Best regards,* > > *ThanNhi Nguyen* > > *IS MES Design & Support* > *3737 Buffalo Speedway* > > *Houston, TX 77098-3701T: 1-713-525-6740M: 1-713-247-9278* > > [image: SOLVAY] > > www.solvay.com > > > > > > > *This message and any attachments is intended for the named addressee(s) > only and may contain information that is privileged and/or confidential. If > you receive this message in error, please delete it and immediately notify > the sender. Any copying, dissemination or disclosure, either whole or > partial, by a person who is not the named addressee is prohibited. We use > virus scanning software but disclaim any liability for viruses or other > devices which remain in this message or any > attachments.*******************************Ce message, ainsi que toute > piece jointe, est exclusivement adresse au(x) destinataire(s) nomme(s) et > peut contenir des informations confidentielles. Si vous recevez ce message > par erreur, merci de le detruire et d'en avertir immediatement l'emetteur. > Toute copie, transmission ou divulgation, integrale ou partielle, par une > personne qui n'est pas nommee comme destinataire est interdite. Nous > utilisons un logiciel anti-virus mais nous denions toute responsabilite au > cas ou des virus, ou tout autre procede, seraient contenus dans ce message > ou toute piece jointe.* >

1 0

rrd file will not recreate
by Paul.Root＠CenturyLink.com 20 Apr '18

20 Apr '18

Hi all, I'm writing a custom script to monitor a group of run away java scripts memory hog. Anyway, I'm trying to create a graph, which I'm never good at. Anyway, the rrd file was created immediately, when I first put in the entry to TEST2RRD and a NCV_Testname line in xymonserver.cfg. A couple of iterations of the data, changing names etc. I deleted the rrd file (which was updating some data), killed the rrd processes to the xymon server. It didn't recreate the file. So I restarted xymon completely on the server. All I could think of is a process holding on to that old file. So does anyone know the magic to get an RRD file to recreate on the server? BTW, a second server that also has the test, does have the rrd file, and it updates the current data, but no historical data. Thanks Paul. Paul Root Lead Engineer 390 Commerce Dr Woodbury, Mn 55125 651-312-5207 paul.root at centurylink.com This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

2 2

Remotes - group/compress
by john.r.rothlisberger＠accenture.com 18 Apr '18

18 Apr '18

I around 15 remote servers reporting their status back to a main server using the remotes entry in the hosts.cfg file. Although, I can create separate lines of remote servers they still are all listed horizontally across the screen. The now look like this: Remote Status Display Site1 Site2 Site3 Site4 Site5 Site6 Site7 Site8 Site9 Site10 etc Location1 G G R Location2 R Y G R G G G Is there any way to group them like this: Remote Status Location1 Site1 Site2 Site3 Location1 G G R Remote Status Location2 Site4 Site5 Site6 etc Location2 R Y G Thanks, John Upcoming PTO: _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office _____________________________________________________________________ ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com

2 4

TEST2RRD variable too long in xymonserver.cfg file
by jimmy.aulestia＠hotmail.com 17 Apr '18

17 Apr '18

Hi, I have a lot of custom scripts and the line of TEST2RRD is very long, sometimes is hard to find the ncv definitions in the line. Can I split the TEST2RRD in two o more lines? Greetings,

4 5

Support Contacts - Xymon Product Support
by Paul.Jayaraj＠charter.com 11 Apr '18

11 Apr '18

Could someone provide support for Xymon rsvcs.pl - Version 1.7 Status unchanged in 11 hours, 43 minutes Status message received from xymond Client data<http://cdptpa-sysops-xymon-01.cdptpa.rr.com/xymon-cgi/svcstatus.sh?CLIENT=s…> available We're experience issues in Xymon & Xymon hasn't reported / refreshed since past 12 hours. Thank you, Paul J [2211_Email Signature_Logo] Paul Jayaraj | Systems Engineer - APO Legacy Provisioning Systems (BPS) Desk: (720) 699-4080 Charter Communications 6175 S. Willow Drive Greenwood Village, CO 80111 E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.

3 3

Mailing list outage
by josh＠imaginenetworksllc.com 11 Apr '18

11 Apr '18

All good sir :) I know some Xymon users send an email and check that the message made it all the way through (graylists, smtp, pop, imap, etc) and alert if it didn't within say 15 minutes. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Tue, Apr 10, 2018 at 4:44 PM, Henrik Størner via Xymon <xymon at xymon.com> wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: "Henrik Størner" <henrik at hswn.dk> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Bcc: > Date: Tue, 10 Apr 2018 22:44:50 +0200 > Subject: Mailing list outage > Hi, > > my apologies for the mailing list being out of order. It seems that > mailman crashed on April 1st (no, not an April Fools joke) and that caused > messages for the mailing list to just go into a queue without being > processed. > > By virtue of Mr Murphy this coincided with my being almost offline due to > travel and holidays. > > My Xymon process monitoring should have alerted me to this, but apparently > one of the Xymon extensions runs a command containing the word "mailman", > so it didn't spot that this process was missing :-( I'll do some > fine-tuning on the procs check. > > > Regards, > Henrik > > > >

1 0