May 2019 - Xymon - Xymon mailman web

Capture and send data To Elasticsearch and Kibana
by francois.outteryck＠soprasteria.com 27 Sep '22

27 Sep '22

Hi Peter, Examples of task.cfg configuration with status and stachg events : [capture_status] ENVFILE /home/xymon/server/etc/xymonserver.cfg NEED xymond CMD xymond_channel --channel=status /home/xymon/server/ext/capture.sh --log=$XYMONSERVERLOGS/xymond_task_capture.log LOGFILE /var/log/xymon/lunch_capture.log [capture_stachg] ENVFILE /home/xymon/server/etc/xymonserver.cfg NEED xymond CMD xymond_channel --channel=stachg /home/xymon/server/ext/capture.sh --log=$XYMONSERVERLOGS/xymond_task_capture_stachg.log LOGFILE /var/log/xymon/lunch_capture_stachg.log Capture.sh script simple made to call a php script : #!/bin/sh /usr/bin/php /var/www/kibana/capture.php $@ </dev/stdin >>/var/log/xymon/xymond_capture_php.log 2>&1 And capture.php make all job : <?php date_default_timezone_set('Europe/Paris'); $TODO=FALSE; $ARRAY_COLLECTOR=array(); $COLLECTOR=null; while (FALSE !== ($line = fgets(STDIN))) if ($line!='') { $tab=reduce_array($line); if (sizeof($tab)==0) continue; if ($line=="@@\n") { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } } else if (substr($tab[0],0,8)=='@@stachg') { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } /* 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 /* @@stachg#seq|timestamp|sender|origin|hostname|testname|expiretime|color|prevcolor|changetime|disabletime|disablemsg|downtimeactive|clienttstamp|modifiers */ $COLLECTOR='stachg'; $metadata=explode('|',$tab[0]); $sender=$metadata[2]; $hostname=$metadata[3]; $metadata=array( 'Collector'=>$COLLECTOR, 'Sender'=>$metadata[2], 'ServerName'=>$metadata[4], 'Type'=>$metadata[5], 'Status'=>$metadata[7], 'PrevStatus'=>$metadata[8], 'LogTime'=>$metadata[1], 'ValidTime'=>$metadata[6], 'LastChange'=>$metadata[9], 'DisableTime'=>$metadata[10], 'DisableMSg'=>$metadata[11], 'Message'=>'' ); $id=$metadata['ServerName'].'_'.$metadata['Type'].'_'.$meta['LastChange']; $ARRAY_COLLECTOR=null; $ARRAY_COLLECTOR=array(); $TODO=TRUE; } else if (substr($tab[0],0,8)=='@@status') { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } /* 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 /* @@status|timestamp|sender|origin|hostname|testname|expiretime|color|testflags|prevcolor|changetime|ackexpiretime|ackmessage|disableexpiretime|disablemessage|clientmsgtstamp|flapping */ $COLLECTOR='status'; $metadata=explode('|',$tab[0]); $sender=$metadata[2]; $hostname=$metadata[3]; $metadata=array( 'Collector'=>$COLLECTOR, 'Sender'=>$metadata[2], 'ServerName'=>$metadata[4], 'Type'=>$metadata[5], 'Status'=>$metadata[7], 'LogTime'=>$metadata[1], 'ValidTime'=>$metadata[6], 'LastChange'=>$metadata[10], 'DisableTime'=>$metadata[13], 'AckTime'=>$metadata[11], 'DisableMSg'=>$metadata[14], 'Message'=>'' ); $id=$metadata['ServerName'].'.'.$metadata['Type']; $ARRAY_COLLECTOR=null; $ARRAY_COLLECTOR=array(); $TODO=TRUE; } else { if (substr($tab[0],0,2)=='@@') { if ($TODO) { $metadata['Message']=implode('',$ARRAY_COLLECTOR); SendData($id,$metadata,$COLLECTOR); $TODO=FALSE; $COLLECTOR=null; } } if ($TODO) $ARRAY_COLLECTOR[]=$line; } } function CallAPI($method, $url, $data = false) { $curl = curl_init(); switch ($method) { case "POST": curl_setopt($curl, CURLOPT_POST, 1); if ($data) curl_setopt($curl, CURLOPT_POSTFIELDS, $data); break; case "PUT": curl_setopt($curl, CURLOPT_PUT, 1); break; default: if ($data) $url = sprintf("%s?%s", $url, http_build_query($data)); } curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); $result = curl_exec($curl); curl_close($curl); return $result; } function reduce_array($line) { $tab=explode(' ',$line); $nr=array(); for ($i=0;$i<sizeof($tab);$i++) if (trim($tab[$i])!='') $nr[]=trim($tab[$i]); return $nr; } function SendData($id,$cc,$COLLECTOR=null) { if ($COLLECTOR==null) return; $d=new DateTime(); if ($cc['LastChange']!='') {$d->setTimestamp($cc['LastChange']);$cc['LastChange']=$d->format('c');} else {$cc['LastChange']='NaN';} if ($cc['LogTime']!='') {$d->setTimestamp($cc['LogTime']);$cc['LogTime']=$d->format('c');} else {$cc['LogTime']='NaN';} if ($cc['ValidTime']!='') {$d->setTimestamp($cc['ValidTime']);$cc['ValidTime']=$d->format('c');} else {$cc['ValidTime']='NaN';} if (isset($cc['AckTime'])) { if ($cc['AckTime']!='') {$d->setTimestamp($cc['AckTime']);$cc['AckTime']=$d->format('c');} else {$cc['AckTime']='NaN';} } if ($cc['DisableTime']!='') {$d->setTimestamp($cc['DisableTime']);$cc['DisableTime']=$d->format('c'); } else {$cc['DisableTime']='NaN';} $data = json_encode($cc); $data=str_replace('"NaN"','null',$data); echo $id.'=>'.$data."\n"; $url="http://127.0.0.1:9200/xymon/".$COLLECTOR."/".$id; $res=CallAPI("POST",$url,$data); } ?> De : Peter Welter [mailto:peter.welter at gmail.com] Envoyé : vendredi 23 décembre 2016 14:45 À : OUTTERYCK Francois Cc : xymon at xymon.com Objet : Re: [Xymon] Capture and send data To Elasticsearch and Kibana Hi Francois, Looks good, your sample. I am very interested in your integration efforts. How do you select what is going to be inserted in the ELK stack? All status messages that Xymon receives? And could you provide an example of the xymond_channel block in you task.cfg and the capture.sh? Tasks.cfg probably is something like: [es] ... CMD xymond_channel --channel=status /home/xymon/server/ext/capture.sh ... And the capture.sh contains some curl script to the ELK stack? Regards, Peter 2016-12-14 18:15 GMT+01:00 OUTTERYCK Francois <francois.outteryck at soprasteria.com<mailto:francois.outteryck at soprasteria.com>>: Hello, I just do a small work with Xymon in order to send status data to Elasticsearch. And with Kibana reporting is easy. How it work ? Simple : With capture of status message (xymond_channel --channel=status /home/xymon/server/ext/capture.sh ) script encode status message in json and send as document in elasticSearch. Example of Mapping document status in elasticsearch : "status"=> array( "properties"=>array( "ServerName"=> array("type"=> "string"), "Type"=> array("type"=> "string"), "Status"=> array("type"=> "string"), "LastChange"=> array("type"=> "date","format"=> "strict_date_optional_time"), "LogTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "ValidTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "AckTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "DisableTime"=> array("type"=> "date","format"=> "strict_date_optional_time"), "Sender"=> array("type"=> "string"), "DisableMSg"=> array("type"=> "string"), "Message"=> array("type"=> "string") ) ) All is done with a 130 lines script. So simple to integrate in existing environment and so powerfull usage of Xymon/elasticsearch/Kibana For those who don’t know kibana : https://www.elastic.co/products/kibana [cid:image001.png at 01D25EA3.F74489F0] _______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon

2 1

Xymon and apache 2.4.35 security problem
by dl1025＠att.com 09 Oct '19

09 Oct '19

I recently upgraded to apache 2.4.35 and was having some issues with password file to secure xymon-seccgi. I got not get apache to read the password file. To get it to work I had to change from Require all granted to Require all denied. Now, it works. I get prompted to enter username and password. Here is the section from my httpd.conf file for your reference if you will run into similar problems. ScriptAlias /xymon-seccgi/ "/opt/app/workload/bbapp/bb/cgi-secure/" <Directory "/opt/app/workload/bbapp/bb/cgi-secure"> AllowOverride None Options ExecCGI Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all denied </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Although expected in $XYMONHOME/etc/ by the useradm and chpasswd # scripts, files here can be read with the "config" message type, # which allows status-privileged clients to read arbitrary regular files # from the directory. # # This file should be owned and readable only by the apache server user, # and ideally merely a symlink to a location outside of $XYMONHOME/etc/ # # Create it with: # htpasswd -c /opt/app/workload/bbapp/bb/server/etc/xymonpasswd USERNAME # chown apache:apache /opt/app/workload/bbapp/bb/server/etc/xymonpasswd # chmod 640 /opt/app/workload/bbapp/bb/server/etc/xymonpasswd # Add more users / change passwords with: "htpasswd /opt/app/workload/bbapp/bb/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /opt/app/workload/bbapp/bb/server/etc/xymonpasswd AuthGroupFile /opt/app/workload/bbapp/bb/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> I also enabled the following modules. LoadModule authn_file_module modules/mod_authn_file.so LoadModule authn_dbm_module modules/mod_authn_dbm.so LoadModule authn_anon_module modules/mod_authn_anon.so LoadModule authn_core_module modules/mod_authn_core.so LoadModule authz_host_module modules/mod_authz_host.so LoadModule authz_groupfile_module modules/mod_authz_groupfile.so LoadModule authz_user_module modules/mod_authz_user.so LoadModule authz_core_module modules/mod_authz_core.so LoadModule access_compat_module modules/mod_access_compat.so LoadModule auth_basic_module modules/mod_auth_basic.so LoadModule reqtimeout_module modules/mod_reqtimeout.so LoadModule filter_module modules/mod_filter.so LoadModule mime_module modules/mod_mime.so LoadModule log_config_module modules/mod_log_config.so LoadModule env_module modules/mod_env.so LoadModule headers_module modules/mod_headers.so LoadModule setenvif_module modules/mod_setenvif.so LoadModule version_module modules/mod_version.so LoadModule unixd_module modules/mod_unixd.so LoadModule status_module modules/mod_status.so LoadModule autoindex_module modules/mod_autoindex.so LoadModule cgid_module modules/mod_cgid.so LoadModule dir_module modules/mod_dir.so LoadModule alias_module modules/mod_alias.so LoadModule rewrite_module modules/mod_rewrite.so

2 3

Multiple graphs on one web page - not being shown
by john.horne＠plymouth.ac.uk 30 May '19

30 May '19

Hi, Using the Terabithia RPMs I have created a custom test called 'es' (it's for some stats from an elasticsearch search engine). I created a client-side script to gather the current status and data for the graphs. The 'status' message gets sent okay, and an 'es' column is created and the web page shows a one-line summary of the search engine - e.g. 'It's fine', 'It's not fine' etc. It changes colour depending on the colour being sent by the client-side script. This works too. The 'data' message from the script is also sent okay, and has created 3 RRD files for the host. These are named 'es_heap.rrd', 'es_rates.rrd' and 'es_latency.rrd'. The values within them are being updated, and if I use a crafted URL (using showgraph.sh) I can see that graphs for them are valid. However, what I wanted was all 3 graphs to appear on the 'es' status page. I have added 'es' as a test name to the hosts in the 'hosts.cfg' file. I have also added 'es' to the TEST2RRD definition, but I'm not sure that is needed in this case. I have also added 'GRAPHS_es="es-rates,es-latency,es-heap"' to the 'xymonserver.cfg' file. Within the 'graphs.cfg' file I have created the 3 graph definitions using the 'GRAPHS_es' names. For some reason though the graphs do not appear. We have several custom tests which produce a single graph, but this is the first where we want more than one graph shown. Anyone any ideas about this? As said, the RRD files are created and updated, using a browser I can see the graphs so the definitions are fine. The 'es' status page shows no broken graph link, it just shows the text I expect and then the usual 'Status unchanged' message. Just no graphs. Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK ________________________________ [http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass> This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.

2 2

ntpd or chronyd
by mkwardle＠gmail.com 29 May '19

29 May '19

How do you setup xymon to monitor host to use chronyd instead of ntpd on Centos 7 systems?

2 1

Devmon template for Cisco ISR4000
by colin.coe＠gmail.com 27 May '19

27 May '19

Hi Just wondering if anyone already has a Devmon template for the ISR4000 series that they'd be willing to share? Thanks

3 3

get server serial no in xymon
by yyyadvendra＠gmail.com 25 May '19

25 May '19

Hi Guys Is there any way to pull out server serial no under info section in xymon? Thanks

4 6

BBWin client not appearing in server
by tlwilliams4＠vcu.edu 24 May '19

24 May '19

I would suggest using a Class statement for the default settings for all clients using the powershell client, using settings Windows understands. One change here applies to all. Individual hosts can be listed to obtain unique settings. HOST=WINDOWS2016 LOAD 95 99 CLASS=powershell UP 30m LOAD 90 95 DISK * 85 95 MEMACT 98 101 MEMPHYS 90 95 MEMSWAP 85 95 LOG eventlog_application Error|Warning IGNORE=[1008],[2004],[1018],[1022],[11],[1524],[1030],[ 2003],[4099],[8005],[12289] LOG eventlog_system Error IGNORE=[36871],[36874],[1002],[513],[4879],[36887],[1030],[36888],[6037],[1],DCOM,Print,TermServDevices LOG eventlog_system Warning COLOR=yellow Tim Williams VCU Computing Center On Wed, May 22, 2019 at 4:02 PM Jaime Kikpole via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: Jaime Kikpole <jkikpole at cairodurham.org> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Bcc: > Date: Wed, 22 May 2019 16:01:58 -0400 > Subject: Re: [Xymon] BBWin client not appearing in server > The PowerShell version turned out to be really easy to use, once I figured > it out. I see why you prefer it. Thanks for the tip! > > I only have two glitches remaining. First, I have a Windows 10 VM that is > giving a yellow alert on MEMSWAP. This is despite changing the > configuration. Here is what it looks like now. > > DEFAULT > > # These are the built-in defaults. You should only modify these > > # lines, not add new ones (no PROC, DISK, LOG ... lines). > > UP 1h > > LOAD 5.0 10.0 > > DISK * 90 95 > > INODE * 70 90 > > MEMPHYS 100 101 > > MEMSWAP 50 80 > > MEMACT 90 97 > > PORT "LOCAL=%([\.:]22)$" STATE=ESTABLISHED min=0 TRACK=ssh > "TEXT=SSH logins" > > PORT "LOCAL=%([\.:]80)$" STATE=ESTABLISHED min=0 TRACK=http > "TEXT=Web Connections" > > > [ ... other hosts here ... ] > > > HOST=host.domain.name > > MEMSWAP 75 85 > > As far as I can tell, the settings for DEFAULT are still in effect for > host.domain.name. (This is not its real FQDN.) It is giving a yellow > alert for 55% utilization. Any suggestions on why it is using the DEFAULT > configuration instead of the HOST=... configuration? > > The second issue is that Xymon keeps giving alerts for CPU > over-utilization when the systems are running just fine. The CPU page for > those hosts will have text like this: > > Wed 22 May 15:54:07 2019 up: 6 days, 0 users, 82 procs, load=6.73% > > If I'm reading this right, the CPU is reporting in percentage instead of > Unix-like "load" numbers, so Xymon is getting confused. Is that right? > Should I just make a new "LOAD 85 95" line in analysis.cfg for those hosts? > > Thanks for all the help. > > > > > Jaime Kikpole > > Director of Technology & Innovations > Cairo-Durham Central School District > (518) 622-8543, x59500 > cairodurham.org <http://www.cairodurham.org> > > Technical Support: > help at cairodurham.org > go.cairodurham.org/techtips > > [image: Google Certified Educator, Level 1] [image: Google Certified > Educator, Level 2] > > > On Tue, May 21, 2019 at 2:17 PM Kris Springer <kspringer at innovateteam.com> > wrote: > >> I would suggest the Powershell client instead of the BBWin client, but >> it's up to you. >> >> Here's my instructions for the BBWin client. >> >> >> >> >> * - Install the BB-Xymon client http://sourceforge.net/projects/bbwin/ >> <http://sourceforge.net/projects/bbwin/> - Configure the client’s config - >> BBWin server address - servername.yourdomain.com >> <http://servername.yourdomain.com> - Hostname - PC-123 (must match the >> Hostname in the server hosts.cfg file) - Mode - local - Services - Add the >> services you want to monitor - Processes - Add the processes you want to >> monitor - XML File tab - Save - Start the BBwin service manually the first >> time - Configure the firewall to allow port 1984 - If you edit the config, >> restart the service - Give it about 30 minutes to clear the red messages >> that will pop up - You can manually edit the BBWin.cfg file and make all >> ‘msgs’ green * >> Also, if using the BBWin client I always use the GUI tool. It just works >> easier to add/remove services and processes to the config. >> https://sourceforge.net/projects/bbwingui/ >> <https://sourceforge.net/projects/bbwingui/files/> >> >> >> If you want to use the Powershell client instead, >> https://www.krisspringer.com/posts/xymon-ps-client.php >> >> Kris Springer >> >> >> >> On 5/21/19 12:00 PM, Root, Paul T wrote: >> >> It is telling you the issue: >> >> >> >> *can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system >> cannot find the file specified.* >> >> >> >> >> >> Seems like a strange place for a config file. >> >> >> >> *From:* Jaime Kikpole <jkikpole at cairodurham.org> >> <jkikpole at cairodurham.org> >> *Sent:* Tuesday, May 21, 2019 12:50 PM >> *To:* xymon at xymon.com >> *Subject:* Re: [Xymon] BBWin client not appearing in server >> >> >> >> I have some additional information. I changed the logging level from 3 >> to 4, restarted the service, and the logs now show the following. >> >> >> >> 2019/05/21 13:45:47 [INFO]: bbwin is started - using central configuration >> 2019/05/21 13:45:47 [DEBUG]: [cpu]: cpu review started >> 2019/05/21 13:45:48 [DEBUG]: [cpu]: cpu review ended >> 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string C:\ >> 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string D:\ >> 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string E:\ >> 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string F:\ >> 2019/05/21 13:45:48 [DEBUG]: [filesystem]: start >> AgentFileSystem::InitCentralMode >> 2019/05/21 13:45:48 [DEBUG]: [filesystem]: checking file C:\Program Files >> (x86)\BBWin\tmp\clientlocal.cfg >> 2019/05/21 13:45:48 [INFO]: [filesystem]: can't open C:\Program Files >> (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. >> 2019/05/21 13:45:48 [DEBUG]: [msgs]: start AgentMsgs::InitCentralMode >> 2019/05/21 13:45:48 [DEBUG]: [msgs]: checking file C:\Program Files >> (x86)\BBWin\tmp\clientlocal.cfg >> 2019/05/21 13:45:48 [INFO]: [msgs]: can't open C:\Program Files >> (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: start AgentSvcs::InitCentralMode >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: checking file C:\Program Files >> (x86)\BBWin\tmp\clientlocal.cfg >> 2019/05/21 13:45:49 [INFO]: [svcs]: can't open C:\Program Files >> (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service BFE >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service Dnscache >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service mpssvc >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service >> SecurityHealthService >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WdNisSvc >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WinDefend >> 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service >> WinHttpAutoProxySvc >> >> >> >> Any tips are greatly appreciated. >> >> >> >> >> >> *Jaime Kikpole* >> >> *Director of Technology & Innovations* >> *Cairo-Durham Central School District* >> (518) 622-8543, x59500 >> cairodurham.org <http://www.cairodurham.org> >> >> *Technical Support:* >> help at cairodurham.org >> go.cairodurham.org/techtips >> >> [image: Google Certified Educator, Level 1] [image: Google Certified >> Educator, Level 2] >> >> >> >> >> >> On Tue, May 21, 2019 at 1:26 PM Jaime Kikpole via Xymon <xymon at xymon.com> >> wrote: >> >> >> >> >> ---------- Forwarded message ---------- >> From: Jaime Kikpole <jkikpole at cairodurham.org> >> To: xymon at xymon.com >> Cc: >> Bcc: >> Date: Tue, 21 May 2019 13:18:56 -0400 >> Subject: BBWin client not appearing in server >> >> I just learned of BBWin last night and have been trying to get it to work >> with my Xymon system. I've got it installed and started, added the system >> to hosts.cfg on the server, and I can now see it on conn, info, and trends, >> but nothing else. I only changed BBWin.cfg enough to set the "mode" to >> "central". >> >> >> >> The C:\Program Files (x86)\BBWin\logs\BBWin.log file shows these messages >> every 5 minutes: >> >> [filesystem]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg >> : The system cannot find the file specified. >> >> [msgs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The >> system cannot find the file specified. >> >> [svcs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The >> system cannot find the file specified. >> >> >> >> I've also found the following error when I restart the BBWin service: >> >> [filesystem]: failed to load logfetch status C:\Program Files >> (x86)\BBWin\tmp\logfetch.status : The system cannot find the file specified. >> >> >> >> I confirmed that these files are missing, but the "tmp" folder exists. >> >> >> >> Any thoughts on what I've missed? >> >> >> >> >> >> >> >> *Jaime Kikpole* >> >> *Director of Technology & Innovations* >> *Cairo-Durham Central School District* >> (518) 622-8543, x59500 >> cairodurham.org <http://www.cairodurham.org> >> >> *Technical Support:* >> help at cairodurham.org >> go.cairodurham.org/techtips >> >> [image: Google Certified Educator, Level 1] [image: Google Certified >> Educator, Level 2] >> >> >> This electronic message and any attachment(s) may contain confidential or >> legally privileged information protected by law from further disclosure and >> is intended only for the individual or entity identified above as the >> addressee. If you are not the addressee (or the employee or agency >> responsible to deliver it to the addressee), or if this message has been >> addressed to you in error, you are hereby notified that you may not copy, >> forward, disclose or use any part of this message or any attachment(s). >> Please notify the sender immediately by return email or telephone and >> permanently delete this message and attachment(s) from your system. >> >> >> ---------- Forwarded message ---------- >> From: Jaime Kikpole via Xymon <xymon at xymon.com> >> To: xymon at xymon.com >> Cc: >> Bcc: >> Date: Tue, 21 May 2019 13:18:56 -0400 >> Subject: [Xymon] BBWin client not appearing in server >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> >> This electronic message and any attachment(s) may contain confidential or >> legally privileged information protected by law from further disclosure and >> is intended only for the individual or entity identified above as the >> addressee. If you are not the addressee (or the employee or agency >> responsible to deliver it to the addressee), or if this message has been >> addressed to you in error, you are hereby notified that you may not copy, >> forward, disclose or use any part of this message or any attachment(s). >> Please notify the sender immediately by return email or telephone and >> permanently delete this message and attachment(s) from your system. >> This communication is the property of CenturyLink and may contain >> confidential or privileged information. Unauthorized use of this >> communication is strictly prohibited and may be unlawful. If you have >> received this communication in error, please immediately notify the sender >> by reply e-mail and destroy all copies of the communication and any >> attachments. >> >> _______________________________________________ >> Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon >> >> >> > This electronic message and any attachment(s) may contain confidential or > legally privileged information protected by law from further disclosure and > is intended only for the individual or entity identified above as the > addressee. If you are not the addressee (or the employee or agency > responsible to deliver it to the addressee), or if this message has been > addressed to you in error, you are hereby notified that you may not copy, > forward, disclose or use any part of this message or any attachment(s). > Please notify the sender immediately by return email or telephone and > permanently delete this message and attachment(s) from your system. > > > ---------- Forwarded message ---------- > From: Jaime Kikpole via Xymon <xymon at xymon.com> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Bcc: > Date: Wed, 22 May 2019 16:01:58 -0400 > Subject: Re: [Xymon] BBWin client not appearing in server > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

2 3

BBWin client not appearing in server
by jkikpole＠cairodurham.org 22 May '19

22 May '19

I have some additional information. I changed the logging level from 3 to 4, restarted the service, and the logs now show the following. 2019/05/21 13:45:47 [INFO]: bbwin is started - using central configuration 2019/05/21 13:45:47 [DEBUG]: [cpu]: cpu review started 2019/05/21 13:45:48 [DEBUG]: [cpu]: cpu review ended 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string C:\ 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string D:\ 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string E:\ 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string F:\ 2019/05/21 13:45:48 [DEBUG]: [filesystem]: start AgentFileSystem::InitCentralMode 2019/05/21 13:45:48 [DEBUG]: [filesystem]: checking file C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg 2019/05/21 13:45:48 [INFO]: [filesystem]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. 2019/05/21 13:45:48 [DEBUG]: [msgs]: start AgentMsgs::InitCentralMode 2019/05/21 13:45:48 [DEBUG]: [msgs]: checking file C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg 2019/05/21 13:45:48 [INFO]: [msgs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. 2019/05/21 13:45:49 [DEBUG]: [svcs]: start AgentSvcs::InitCentralMode 2019/05/21 13:45:49 [DEBUG]: [svcs]: checking file C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg 2019/05/21 13:45:49 [INFO]: [svcs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service BFE 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service Dnscache 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service mpssvc 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service SecurityHealthService 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WdNisSvc 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WinDefend 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WinHttpAutoProxySvc Any tips are greatly appreciated. Jaime Kikpole Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org> Technical Support: help at cairodurham.org go.cairodurham.org/techtips [image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2] On Tue, May 21, 2019 at 1:26 PM Jaime Kikpole via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: Jaime Kikpole <jkikpole at cairodurham.org> > To: xymon at xymon.com > Cc: > Bcc: > Date: Tue, 21 May 2019 13:18:56 -0400 > Subject: BBWin client not appearing in server > I just learned of BBWin last night and have been trying to get it to work > with my Xymon system. I've got it installed and started, added the system > to hosts.cfg on the server, and I can now see it on conn, info, and trends, > but nothing else. I only changed BBWin.cfg enough to set the "mode" to > "central". > > The C:\Program Files (x86)\BBWin\logs\BBWin.log file shows these messages > every 5 minutes: > [filesystem]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg > : The system cannot find the file specified. > [msgs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The > system cannot find the file specified. > [svcs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The > system cannot find the file specified. > > I've also found the following error when I restart the BBWin service: > [filesystem]: failed to load logfetch status C:\Program Files > (x86)\BBWin\tmp\logfetch.status : The system cannot find the file specified. > > I confirmed that these files are missing, but the "tmp" folder exists. > > Any thoughts on what I've missed? > > > > > Jaime Kikpole > > Director of Technology & Innovations > Cairo-Durham Central School District > (518) 622-8543, x59500 > cairodurham.org <http://www.cairodurham.org> > > Technical Support: > help at cairodurham.org > go.cairodurham.org/techtips > > [image: Google Certified Educator, Level 1] [image: Google Certified > Educator, Level 2] > > This electronic message and any attachment(s) may contain confidential or > legally privileged information protected by law from further disclosure and > is intended only for the individual or entity identified above as the > addressee. If you are not the addressee (or the employee or agency > responsible to deliver it to the addressee), or if this message has been > addressed to you in error, you are hereby notified that you may not copy, > forward, disclose or use any part of this message or any attachment(s). > Please notify the sender immediately by return email or telephone and > permanently delete this message and attachment(s) from your system. > > > ---------- Forwarded message ---------- > From: Jaime Kikpole via Xymon <xymon at xymon.com> > To: xymon at xymon.com > Cc: > Bcc: > Date: Tue, 21 May 2019 13:18:56 -0400 > Subject: [Xymon] BBWin client not appearing in server > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > -- This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.

4 6

BBWin client not appearing in server
by jkikpole＠cairodurham.org 21 May '19

21 May '19

I just learned of BBWin last night and have been trying to get it to work with my Xymon system. I've got it installed and started, added the system to hosts.cfg on the server, and I can now see it on conn, info, and trends, but nothing else. I only changed BBWin.cfg enough to set the "mode" to "central". The C:\Program Files (x86)\BBWin\logs\BBWin.log file shows these messages every 5 minutes: [filesystem]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. [msgs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. [svcs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. I've also found the following error when I restart the BBWin service: [filesystem]: failed to load logfetch status C:\Program Files (x86)\BBWin\tmp\logfetch.status : The system cannot find the file specified. I confirmed that these files are missing, but the "tmp" folder exists. Any thoughts on what I've missed? Jaime Kikpole Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org> Technical Support: help at cairodurham.org go.cairodurham.org/techtips [image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2] -- This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.

1 0

Issue with macro expansion in alerts.cfg and "SCRIPT" inside the macro
by abe＠deuxchevaux.org 21 May '19

21 May '19

Hi, from my alerts.cfg: ---------------------------------------------------------------------- $TGSEND=/usr/local/bin/xymon-telegram-bot-send-to $AXELTG=365653126 HOST=mehari EXSERVICE=libs,dirtyvcs,sftbnc,misc SCRIPT $TGSEND $AXELTG DURATION>15 RECOVERED REPEAT=24h COLOR=red,yellow FORMAT=TEXT SCRIPT $TGSEND $AXELTG RECOVERED REPEAT=24h COLOR=purple FORMAT=TEXT ---------------------------------------------------------------------- This works and already uses wormacros. After reading "In fact, you can put an entire line into a macro" on https://www.xymon.com/help/xymon-alerts.html#scripts I tried this: ---------------------------------------------------------------------- $TGSEND=SCRIPT /usr/local/bin/xymon-telegram-bot-send-to $AXELTG=365653126 HOST=mehari EXSERVICE=libs,dirtyvcs,sftbnc,misc $TGSEND $AXELTG DURATION>15 RECOVERED REPEAT=24h COLOR=red,yellow FORMAT=TEXT $TGSEND $AXELTG RECOVERED REPEAT=24h COLOR=purple FORMAT=TEXT ---------------------------------------------------------------------- But it silently failed to send out any alert. Nothing in /var/log/xymon/alert.log nor in /var/log/xymon/notifications.log. And I don't understand why. Is this a bug in macro expansion? Or do macros only work for either complete lines or single words, but not multiple words? Kind regards, Axel -- PGP: 2FF9CD59612616B5 /~\ Plain Text Ribbon Campaign, http://arc.pasp.de/ Mail: abe at deuxchevaux.org \ / Say No to HTML in E-Mail and Usenet Mail+Jabber: abe at noone.org X https://axel.beckert.ch/ / \ I love long mails: https://email.is-not-s.ms/

1 0