March 2019 - Xymon - Xymon mailman web

Windows XymonPSClient v2.41
by zak.beck＠accenture.com 19 Mar '19

19 Mar '19

Hi I have committed v2.41 today - bit of a version number jump because we've been testing a number of small fixes internally before releasing. Download from SVN<https://sourceforge.net/p/xymon/code/HEAD/tree/sandbox/WinPSClient/> (the documentation has been updated also, including uninstall instructions). Key changes: * replaced classic event log discovery (Get-EventLog) with Get-WinEvent - this opens up new event logs like Windows Defender etc * removed [EventLogSummary] section - [msgs:EventLogSummary] works * incorporated function XymonEventLogs into core event log processing (function XymonMsgs) - this allows the summary to only contain the logs in eventlogswanted This is the main change, which should not impact but does open up new options. Newer versions of Windows have a new event log format only accessible via Get-WinEvent and there was one place in the code still using the classic commands. This change means you can now specify these new event logs in eventlogswanted, like this: eventlogswanted:application,system,Microsoft-Windows-Windows Defender/Operational:2500000:information,critical,error One side effect of this is that the event log summary now only contains the logs specified in eventlogswanted because there are hundreds of non-classic event logs available on typical installations. * add different status colour options for XymonSendLog (contributed by Andy Smith <abs at shadymint.com>) This is the second key change - the idea is to capture the logs when the client is updated (which occurs on a slowscan). The additions to the xymonlogsend directive allow you to change colour on a slow scan and a client restart, which causes a history change in Xymon - this means you can then view the logs from those changes in the Xymon front end using the history options. Example: xymonlogsend:clear:yellow - send a clear status on a slow scan and a yellow status on a restart - all other logs will be sent with green status. * XymonLog - fix exception when no files match the given filespec * add enablediskpart client-local directive so diskpart can be controlled from server Cheers Zak ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com

2 3

monitoring display for sub page
by thannhi.nguyen＠solvay.com 18 Mar '19

18 Mar '19

Hello, Is there a way for me to pick and choose what to display on a subpage? Thank you. *Best regards,* ThanNhi Nguyen Solvay Business Services Digital & Information Technologies IS MES Design & Support T: +713-525-6740 - M: +713-247-9278 3737 Buffalo Speedway Houston, TX 77098-3701 www.solvay.com [image: SOLVAY] Connect with Solvay: [image: twitter][image: linkedin][image: facebook][image: youtube] -- *This message and any attachments is intended for the named addressee(s) only and may contain information that is privileged and/or confidential. If you receive this message in error, please delete it and immediately notify the sender. Any copying, dissemination or disclosure, either whole or partial, by a person who is not the named addressee is prohibited. We use virus scanning software but disclaim any liability for viruses or other devices which remain in this message or any attachments. ******************************* Ce message, ainsi que toute piece jointe, est exclusivement adresse au(x) destinataire(s) nomme(s) et peut contenir des informations confidentielles. Si vous recevez ce message par erreur, merci de le detruire et d'en avertir immediatement l'emetteur. Toute copie, transmission ou divulgation, integrale ou partielle, par une personne qui n'est pas nommee comme destinataire est interdite. Nous utilisons un logiciel anti-virus mais nous denions toute responsabilite au cas ou des virus, ou tout autre procede, seraient contenus dans ce message ou toute piece jointe.*

1 0

Hello Everyone
by matthew＠adultliteracy.ac.nz 18 Mar '19

18 Mar '19

Hello, I am an IT Manager for a non-profit charity, and am looking at using Zymon, to monitor our servers: . My Terminal Server (same network as the Zymon server) . Web Server on Azure (Windows Server 2019) . Web Server on AWS (Windows Server 2016) All of my servers have fixed external IP addresses, can someone point in the right direction to set everything up with my servers and email notifications. Matthew Gregory IT Manager Rural Youth & Adult Literacy Trust <http://www.adultliteracy.ac.nz/> www.adultliteracy.ac.nz m: 022 644 9544 t: 0800 891 339 e: <mailto:matthew at adultliteracy.ac.nz> matthew at adultliteracy.ac.nz <https://www.adultliteracy.ac.nz/>

5 7

xymon installation on red hat 7
by Konstantin.Milman＠umm.edu 14 Mar '19

14 Mar '19

Hi, Could you please help me? I am trying to install xymon on red hat 7. I google the internet but can't find any support information. Unfortunately the direction for RH6 is not working :( I stopped on this code groupadd xymon useradd -g xymon -m xymon yum install gcc make wget http://fping.org/dist/fping-3.2.tar.gz tar zxf fping-3.2.tar.gz cd fping-3.2 ./configure make && make install cd .. yum install pcre-devel openssl-devel openldap-devel rrdtool-devel cd xymon-4.3.10 <---------------- Stopped -bash: cd: xymon-4.3.10: No such file or directory ./configure -server make && make install Could you please assist me? Thank you Konstantin This e-mail and any accompanying attachments may be privileged, confidential, contain protected health information about an identified patient or be otherwise protected from disclosure. State and federal law protect the confidentiality of this information. If the reader of this message is not the intended recipient; you are prohibited from using, disclosing, reproducing or distributing this information; you should immediately notify the sender by telephone or e-mail and delete this e-mail.

5 4

Is the xymon Dead? Future
by felipe＠redix.com.br 14 Mar '19

14 Mar '19

Hello, I'm working on a company that uses xymon for almost the beggining. We enjoy the view that xymon can provid us, using html plugin, we could make some very good sensors. But, we are afraid mainly cause the last update whore on 2017, and we don't know for how long it will be compatible with clients. So, my questions are, what's next? There's something going on with the project? It'll someday gain an MYSQL historic ? Or, even there's some monitoring system that you are looking at with the same organized visual aspect (Page -> Group -> Host -> Plugin) ?

13 34

HPE BL460c Gen9 SNMP tests going clear
by colin.coe＠gmail.com 14 Mar '19

14 Mar '19

Hi all All of our Gen9 servers are flicking between green and clear for Devmon SNMP tests. (Posting here as Devmon seems a dead project.) The attached screen region grab shows what I'm trying to say. I've updated the firmware (including iLO) on one server and it made no difference. Anyone else seen this? Thanks CC

3 6

HPE BL460c Gen9 SNMP tests going clear
by colin.coe＠gmail.com 14 Mar '19

14 Mar '19

Sorry, I had meant to add that all our HPE Proliant Gen7s are reporting fine, its only the Gen9 servers that have this problem. On Thu, Mar 14, 2019 at 8:11 AM Colin Coe <colin.coe at gmail.com> wrote: > Hi Jeremy > > Looks like I've had similar issues in the past that I'd completely > forgotten about... I've already got > "$SNMP_Session::default_avoid_negative_request_ids = 1;" > in /usr/share/perl5/SNMP_Session.pm > > While multiple servers are affected, they don't always go clear at the > same time. > > I've changed the snmpver from 2 to 1 but that didn't improve things. > having tcpdump running in another ssh session, I can see that requests are > being send and responses are being received. I see no negative requests, > and ofen the Devmon tests go clear even though SNMP data is received. The > devmon.log file reflects devmon's view, not the reality of the SNMP > responses. > > I'm thinking about using the baked in Xymon SNMP tests but how would I > translate the Proliant server tests, for example > "compaq-servernohspare/raid"? > > Thanks for the pointers > > CC > > On Wed, Mar 13, 2019 at 6:38 PM Jeremy Laidman <jeremy at laidman.org> wrote: > >> Colin >> >> Are all your different servers losing numbers all around the same time? >> The fact that both Windows and Linux systems (with probably different snmpd >> code) are having the same issues, suggests that it's a devmon problem. >> >> It's been a while since I did any devmon stuff (mine has been running for >> years but a low node/OID count seems to keep it humming along), but I seem >> to recall there was some issue with 32-bit vs 64-bit SNMP request/response >> IDs. What can happen is that a negative 32-bit request ID gets turned into >> a positive and large 64-bit response ID that is actually the same, but >> parsed as different by the SNMP library used by devmon. This might be a >> problem only where there is a 32-bit SNMP library installed on a 64-bit OS, >> or that might just be a red herring. >> >> If this is a problem, a "tcpdump" with "-v" will show request/response >> IDs, and you can confirm if you only get responses for positive request IDs. >> >> There's an SNMP_Session API variable you can set in the devmon script to >> avoid negative request IDs. See >> https://lists.oetiker.ch/pipermail/mrtg-developers/2002-September/000103.ht… >> and >> https://xymon.xymon.narkive.com/6ltXE2nB/devmon-tests-clear-but-snmpwalk-wo… >> . >> >> Another issue might be the use of SNMPBulkGet, which results in lots of >> packets in the response, all fragments of a large datagram. One day to >> disable Bulk requests is to set SNMP version (snmpver) to 1 in your >> devmon/templates/<devtype>/specs file. Most templates have "snmpver : 2". >> >> The last time I tried to add a bunch of hosts to devmon, it failed, not >> only for the hosts I added, but also for the hosts that were there before >> the addition. I ended up reverse-engineering the as-yet-undocumented Xymon >> SNMP features, and it seems to work well enough. I do sometimes get no >> response from some hosts from time to time, but it's better than nothing. >> >> In case you wanted to go down this path, it's just a matter of adding >> entries into /etc/xymon/snmphosts.cfg like this: >> >> [hostname.example.net] >> version=2 >> community=secret >> ip=192.0.2.19 >> systemmib >> ifmib=(*) >> icmpmib >> hrsystem >> hrstorage=(*) >> >> The entries after "ip=" line are references to stanzas in the >> /etc/xymon/snmpmibs.cfg file. There's special black magic in the >> snmpmibs.cfg file that I haven't worked out, and probably needs code >> inspection to understand, so I haven't dared to touch this file, with the >> exception of one apparent typo; diff to fix it is here: >> >> [hrstorage] >> # storage has data for both memory- and disk-storage >> keyidx (HOST-RESOURCES-MIB::hrStorageDescr) >> - keyidx [(HOST-RESOURCES-MIB::hrStorageType] >> + keyidx [HOST-RESOURCES-MIB::hrStorageType] >> Type = HOST-RESOURCES-MIB::hrStorageType >> Description = HOST-RESOURCES-MIB::hrStorageDescr >> Units = HOST-RESOURCES-MIB::hrStorageAllocationUnits >> /rrd:GAUGE >> >> Hmm, perhaps I should try setting "version=1" and see if that helps my >> occasional missing data... >> >> J >> >> >> On Wed, 13 Mar 2019 at 17:12, Colin Coe <colin.coe at gmail.com> wrote: >> >>> Hi Bruce and thanks for the quick response. >>> >>> These Gen9's are a mix of RHEL6 and Windows 2016, and interestingly, >>> both behave the same. The RHEL boxen are running 'net-snmp' and for >>> Windows 2016 it's the stock WIndows SNMP service. We don't do SNMP traps. >>> These machines also have the HP Service Pack for Proliant installed. The >>> RHEL config can be summarized as: >>> --- >>> cat /etc/snmp/snmpd.conf >>> dlmod cmaX /usr/lib64/libcmaX64.so >>> rocommunity secret >>> --- >>> >>> Thanks again >>> >>> On Wed, Mar 13, 2019 at 2:02 PM Bruce Ferrell <bferrell at baywinds.org> >>> wrote: >>> >>>> >>>> On 3/12/19 9:58 PM, Colin Coe wrote: >>>> > Hi all >>>> > >>>> > All of our Gen9 servers are flicking between green and clear for >>>> Devmon SNMP tests. (Posting here as Devmon seems a dead project.) >>>> > >>>> > The attached screen region grab shows what I'm trying to say. >>>> > >>>> > I've updated the firmware (including iLO) on one server and it made >>>> no difference. >>>> > >>>> > Anyone else seen this? >>>> > >>>> > Thanks >>>> > >>>> > CC >>>> > >>>> > _______________________________________________ >>>> > Xymon mailing list >>>> > Xymon at xymon.com >>>> > http://lists.xymon.com/mailman/listinfo/xymon >>>> I see a lot of odd things with devmon. I have seen an issue something >>>> like on my Dell R710 with OMSA. It patches itself into snmpd via a loaded >>>> library to report on Dell storage >>>> and sometimes the response from that get's really slow and blocks >>>> response to devmon. An update a while back to OMSA cleared that up. >>>> >>>> I also have to run a cron job that does a kill -9 on it every two hours >>>> and then restart it... It likes to gobble memory like it's going out of >>>> style. >>>> >>>> People DO respond on the devmon list, just a little slowly. >>>> >>>> I run my devmon in multi node mode with MySQL backing. when I do see >>>> gross errors like this I turn on debug and watch the devmon log to see what >>>> errors are thrown. >>>> >>>> What OS and SNMPD is running on the HP? Especially the SNMPD... It >>>> matters. OS X and pFSense don't report some OIDs correctly due to the >>>> snmpd they run. It's one of those >>>> "snmpd/ya just gotta know about it" things. >>>> >>>> >>>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >>> >>

1 0

What does the 'dns' test do?
by john.horne＠plymouth.ac.uk 12 Mar '19

12 Mar '19

Hi, Using the 4.3.28 Terabithia RPMs, can someone tell me what the 'dns' test actually does? We actually negate the test ('!dns'), and run a client-side dns test ('dnsr') to check that resolution is working. As far as I remember the standard 'dns' test checks that the client DNS service can resolve something. This will always fail in our case as the client DNS service is always restricted to just the local host. (No querying allowed from an external server.) I'm trying to work out why most of our servers are taking less than a second - giving a 'Server unavailable' reply, but others are taking around 20 seconds for a 'Timeout' reply. I know why the timeout is 20 seconds, I'm just wondering why it's not giving a 'Server unavailable' reply. Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK ________________________________ [http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass> This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.

6 9

Alerts STOP command not working
by josh＠imaginenetworksllc.com 12 Mar '19

12 Mar '19

Does anyone have a working example of STOP? The man page says: # STOP - Valid for a recipient: If this recipient gets an # alert, recipients further down in alerts.cfg # are ignored. This doesn't seem to be the case, though. The second and third statements are happening even though the first has a STOP. HOST=windows10.imaignenetworksllc.com MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>60m REPEAT=60 RECOVERED STOP HOST=%.*\.imaginenetworksllc\.com MAIL 1231231234 at vtext.com COLOR=RED DURATION>15m RECOVERED FORMAT=SMS HOST=* MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>5m REPEAT=60 RECOVERED Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

3 7

enhancement request: memory usage in real values
by stef.coene＠docum.org 07 Mar '19

07 Mar '19

Hi, We need an historic graph of the real values of Physical, Actual and Swap memory usage. But only the percent values are stored in the rrd files. Has someone already patched the sources to create rrd files with the real values? If so, can I have the patch :) Otherwise I have to brush up my C knowledge and do it myself. Stef

2 3