March 2019 - Xymon - Xymon mailman web

updating XymonPSClient
by CROBLE＠milwaukee.gov 27 Mar '19

27 Mar '19

Hello, I want to update our clients to the latest build of XymonPSClient. Do I need to follow the uninstall procedure from the documentation or can I just stop the service, and replace XymonPSClient.ps1 with the new one and then startup the service? Trying to go from version 2.37 to 2.41. Thanks. Chris Robles | IT Support Specialist Lead | City of Milwaukee | Information Technology & Management Division | Ph: 414.286.8096 | Chris.Robles at milwaukee.gov<mailto:Chris.Robles at milwaukee.gov> The City of Milwaukee is subject to Wisconsin Statutes related to public records. Unless otherwise exempted from the public records law, senders and receivers of City of Milwaukee e-mail should presume that e-mail is subject to release upon request, and is subject to state records retention requirements. See City of Milwaukee full e-mail disclaimer at www.milwaukee.gov/email_disclaimer

3 3

Installation
by matthew＠adultliteracy.ac.nz 27 Mar '19

27 Mar '19

Hello There I have just installed Xymon on a Ubuntu Server (Google Compute Cloud) but can't see the home page for xymon, I can see the Apache2 test page, is there something I am missing? Matthew Gregory IT Manager Rural Youth & Adult Literacy Trust <http://www.adultliteracy.ac.nz/> www.adultliteracy.ac.nz m: 022 644 9544 t: 0800 891 339 e: <mailto:matthew at adultliteracy.ac.nz> matthew at adultliteracy.ac.nz <https://www.adultliteracy.ac.nz/>

4 5

Merging some add-ons into Xymon source code
by spah＠syntec.co.uk 27 Mar '19

27 Mar '19

I think merging some add-ons into the Xymon source code should be considered where those add-ons would be widely used, subject to licensing restrictions. For example, and I have not yet tested this add-on, but a way to alert on processes using too much memory looks increasingly useful to me (together with graphing of memory for certain processes): http://tools.rebel-it.com.au/xymon-procmem/ Ideally the shell code that add-on uses would be converted to support in the C code so that this could be configured in analysis.cfg rather than hosts.cfg though. Another example is Xymondash: https://github.com/daduke/Xymondash I haven't used it yet either, but it sounds good. Having said that, development on that shouldn't be stymied by locking it to Xymon releases - and it requires Python >= 3.5 (or 3.4). Maybe as a post-installation task Xymon could ask if you wish to install it, check dependencies, ask a few questions, download and install it? It would be good to be able to present a more modern GUI as part of Xymon. Kind regards, SebA

5 7

monitoring display for sub page
by spah＠syntec.co.uk 26 Mar '19

26 Mar '19

On Mon, 18 Mar 2019 at 18:22, Nguyen, ThanNhi via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: "Nguyen, ThanNhi" <thannhi.nguyen at solvay.com> > To: xymon at xymon.com > Cc: > Bcc: > Date: Mon, 18 Mar 2019 13:15:30 -0500 > Subject: monitoring display for sub page > Hello, > > Is there a way for me to pick and choose what to display on a subpage? > > Yes, throw in a group-only or group-except (for example) in your hosts.cfg (search man hosts.cfg for column). Kind regards, SebA > Thank you. > > *Best regards,* > > ThanNhi Nguyen > > Solvay Business Services > > Digital & Information Technologies > > IS MES Design & Support > > T: +713-525-6740 - M: +713-247-9278 > > 3737 Buffalo Speedway > > Houston, TX 77098-3701 > > www.solvay.com > > > [image: SOLVAY] > > Connect with Solvay: > [image: twitter][image: linkedin][image: facebook][image: youtube] > >

1 0

Xymon on the Cloud
by matthew＠adultliteracy.ac.nz 26 Mar '19

26 Mar '19

Morning or Evening, Everyone. I am looking at deploying Xymon, through the Google Cloud Compute service, I sadly have no space for a physical server and was wondering if can Zymon can run on an low amount of ram and CPU. Matthew Gregory IT Manager Rural Youth & Adult Literacy Trust <http://www.adultliteracy.ac.nz/> www.adultliteracy.ac.nz m: 022 644 9544 t: 0800 891 339 e: <mailto:matthew at adultliteracy.ac.nz> matthew at adultliteracy.ac.nz <https://www.adultliteracy.ac.nz/>

7 8

False procs alert
by yyyadvendra＠gmail.com 21 Mar '19

21 Mar '19

Hi Guys I am monitoring sshd and sssd procs, somehow xymon is falsely reporting them It says process missing but both processes are up in the host What I am missing here? Please help Thanks

6 9

strange behavior of xymon client in openSUSE
by metron6＠gmail.com 21 Mar '19

21 Mar '19

>From an opensuse linux, i'm trying to connect to my xymon servers... take a look at this.. in /etc/default/xymon-client This works XYMONSERVERS="10.129.13.2" This works XYMONSERVERS="10.10.100.100" This doesn't XYMONSERVERS="10.10.100.100 10.129.13.2" This works XYMONSERVERS="10.10.100.100" XYMONSERVERS="10.129.13.2" linux:~ # cat /etc/os-release NAME="openSUSE Leap" VERSION="42.3" ID=opensuse ID_LIKE="suse" VERSION_ID="42.3" PRETTY_NAME="openSUSE Leap 42.3" ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:leap:42.3" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org/" -- regards, George Michalopoulos born & raise @ Metron 6 (six) Metron6 at gmail.com

1 0

[External] Windows XymonPSClient feature request
by zak.beck＠accenture.com 21 Mar '19

21 Mar '19

Hi Interesting, yes, we don’t have any guards against that and it does happen (I've seen it too). Quick dump of my thoughts: Firstly, this should only be an issue for async tasks. The client blocks for sync tasks and so you shouldn't get them stacking up - this is a potential solution for your issue which then becomes why do I have so many purple clients 🙂. However, you might want to add a timeout for sync tasks and the way it's written should make this reasonably easy. For tasks with a maxtime, we're going to need to store the process object along with the start time and duration. In fact to keep things simple, I would suggest storing this anyway even if maxtime = 0 (which I'd use to mean indefinite). One consideration is that by default, the client only runs every five minutes - so the shortest duration we can act on is five minutes or multiples of. For that reason I'd suggest that maxtime should be an integer expressed in minutes without further suffixes. Zak -----Original Message----- From: Andy Smith <abs at shadymint.com> Sent: Thursday, 21 March 2019 13:35 To: xymon at xymon.com Cc: Beck, Zak <zak.beck at accenture.com> Subject: [External] Windows XymonPSClient feature request This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly with links and attachments. Hi Zak and others, I have been discussing a forthcoming implementation with some Windows admins and they already have a bunch of externals which we are talking about scheduling for them via remote client-local.cfg configuration items. They have been bitten previously by some of the scripts hanging on a network response issue and subsequent runs hitting the same fate until the box hangs with memory issues or whatever. I think it would be relatively straight forward to implement something like this that wouldnt break existing configurations :- external:PRIORITY:SCHEDULE:METHOD(|MAXTIME):SCRIPT|HASH|HASHVALUE|PROCESS|ARGUMENTS where the MAXTIME keyword sets a maximum time that the SCRIPT may run; if exceeded, XymonPSClient will kill the SCRIPT. The time is in seconds by default, you can specify minutes, hours or days by adding an "m", "h" or "d" after the number. By default there is no upper limit on how long a SCRIPT may run. [description lifted from tasks.cfg for a Unix client.] I am not a powershell programmer but I would be willing to give it a go if anyone thinks this is the right way forward? -- Andy ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com

1 0

Debian 9 stretch clients - trends netstat graph bug?
by john.horne＠plymouth.ac.uk 21 Mar '19

21 Mar '19

Hi, We have three Debian 9 (stretch) servers running the xymon-client package (version 4.3.28-2). I noticed yesterday that the 'trends' column for these clients was showing a 'TCP/IP statistics' graph, but was only showing values for the 'In' graph. Both the 'Out' and 'Retrans' values were NaN. If anyone else is running the Xymon client on a Debian 9 server, or may be even Debian 8, could they check their 'trends' graphs and see if the same problem exists for them. Thanks. As far as I can tell this started when we upgraded the client server O/S from Debian 7 to 9 (a few months ago now!). It seems there were values for all 3 graph lines when they ran Debian 7. The RRD netstat file, which is used for the statistics graph, shows a 'U' for the 'Out' and 'Retrans' values. Looking at the actual code (in xymond/rrd/do_netstat.c), it seems that the netstat output is expected to be the same for most Linux distributions and versions. It shows: ========= /* This one matches all Linux systems */ static char *netstat_linux_markers[] = { "packets received", "packets sent", "packet receive errors", "active connections openings", "passive connection openings", "failed connection attempts", "connection resets received", "connections established", "", "", "", "", "segments send out", /* Yes, they really do write "send" */ "segments received", "", "segments retransmited", NULL }; ========= However, the netstat output collected by the clients shows, looking at the TCP section: ========= Tcp: 3045575 active connection openings 251770 passive connection openings 9335 failed connection attempts 4520 connection resets received 37 connections established 1359715245 segments received 1330630207 segments sent out 119457 segments retransmitted 10 bad segments received 32339 resets sent InCsumErrors: 2 ========= Some things seem to be wrong: 1) The code looks for 'active connections openings', but netstat shows 'active connection openings'. Singular on the 'connection' word. 2) The code looks for 'segments send out', but netstat shows 'segments sent out'. So despite the comment in the code, the output uses 'sent' rather than 'send'. 3) The code looks for 'segments retransmited', but the netstat output shows 'segments retransmitted'. So there is a double 't' in retransmitted (or 3 all together). 4) The order of the 'segments' lines is different from the code, but I'm not sure if that is important. (Haven't looked at the code that much in depth.) I'm not sure if this is the cause of the TCP/IP stats graph not showing values, but it doesn't seem right. Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK ________________________________ [http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass> This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.

5 7

Feature request: being able to use client certificates for network tests (NOT http)
by spah＠syntec.co.uk 21 Mar '19

21 Mar '19

I want to be able to test a TLS service that use server and client certificates, and the only way seems to be with http, but this is not an http(s) service. It would need to be configurable in protocols.cfg or some other way in hosts.cfg. I tried pretending it was https and it says 'SSL error' in the test output. It doesn't create the sslcert column either, or I could just disable the https test and still get the certificate monitoring, which is what I wanted most anyway. Kind regards, SebA

2 3