May 2020 - Xymon - Xymon mailman web

4.3.30 Proxy server updating to 4.3.21 main server
by Paul.Root＠CenturyLink.com 18 May '20

18 May '20

Yesterday, I tried to swap in a new xymon proxy server running 4.3.30-1 from Terabithia on CentOS 7. It is a hybrid, with the proxy on 1984 and the server on 1985. The URL displayed as expected - with issues aligning with what the temporary IP address could and could not get to. When I swapped in, the primary went purple on the things it can't get to but the proxy can - mostly conn and ntp (i.e. noconn in the hosts.cfg file and ntp not in it, but that is reversed in the proxy). Is there a compatibility issue with 4.3.30 updating 4.3.21? My primary server is CentOS 6 and the xymon is custom built by me. I've moved just about every server to use Terabithia, but not that one. Layout is slightly different, so I'm hesitant to upgrade it right now. Paul Root Lead Operations Engineer - IT Managed Services 390 Commerce Dr Woodbury, Mn 55125 651-312-5207 paul.root at centurylink.com This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

1 0

FW: alerts
by Jean.Hyppolite＠umm.edu 18 May '20

18 May '20

Also To clarify, A lot of alerts we are getting are delayed alerts, alerts that are being sent out hours later From: Hyppolite, Jean Sent: Monday, May 18, 2020 10:09 AM To: xymon at xymon.com Subject: alerts Hello, Our Xymon server is sending out a lot of excess and some false alerts. It seems that when a server is not reachable it sends the alerts out, but when the server recovers it never sends the recovery message, but keeps sending the down critical messages. And idea what may be causing this? Is there a way to look at exactly what alerts are being sent out from the xymon server from xymon? Also is there a way to configure xymon not to send out email alerts on flapping statuses? Our Xymon server version is: Xymon 4.3.30-1.el7.terabithia Thanks Jean This e-mail and any accompanying attachments may be privileged, confidential, contain protected health information about an identified patient or be otherwise protected from disclosure. State and federal law protect the confidentiality of this information. If the reader of this message is not the intended recipient; you are prohibited from using, disclosing, reproducing or distributing this information; you should immediately notify the sender by telephone or e-mail and delete this e-mail.

2 1

alerts
by Jean.Hyppolite＠umm.edu 18 May '20

18 May '20

Hello, Our Xymon server is sending out a lot of excess and some false alerts. It seems that when a server is not reachable it sends the alerts out, but when the server recovers it never sends the recovery message, but keeps sending the down critical messages. And idea what may be causing this? Is there a way to look at exactly what alerts are being sent out from the xymon server from xymon? Also is there a way to configure xymon not to send out email alerts on flapping statuses? Our Xymon server version is: Xymon 4.3.30-1.el7.terabithia Thanks Jean This e-mail and any accompanying attachments may be privileged, confidential, contain protected health information about an identified patient or be otherwise protected from disclosure. State and federal law protect the confidentiality of this information. If the reader of this message is not the intended recipient; you are prohibited from using, disclosing, reproducing or distributing this information; you should immediately notify the sender by telephone or e-mail and delete this e-mail.

1 0

How to view alert thresholds
by Andy.Farrior＠victoriacollege.edu 13 May '20

13 May '20

Greetings, I had someone ask me at what thresholds does Xymon send out a yellow warning or red critical alert for things like cpu and disk for a given server. Does the disk utilization issue a warning at 80% or 90%? Currently I have to look through the analysis.cfg file to determine the thresholds for a server of interest. I was hoping there was a way from the web console a user could see the threshold values for a test or all of the thresholds for a given server. Is it already there and I'm blind or is it on a development wish list somewhere? Thx, Andy Andy Farrior | Director of Technology Services | Victoria College a: 2200 E Red River St, Victoria, TX 77901-4494<https://goo.gl/maps/Vwn4JFapXSdrh4R76> e: andy.farrior at victoriacollege.edu<mailto:andy.farrior at victoriacollege.edu> p: (361) 582-2547 w: victoriacollege.edu<http://victoriacollege.edu/>

2 2

POC Demo
by Jose.Jorge＠westernunion.com 12 May '20

12 May '20

Hi team, One of the team within my organization would like to try XYmom for Active Directory monitoring so I would like to request any POC or Demo you might have for this specific puporse. Thanks Jose Jorge Monitoring Engineer | Enterprise Monitoring Solutions (EMS) [cid:B941A9E5-A54D-417F-BDF1-75B49963494B] Western Union LAROC Costa Rica Centro Empresarial Forum 2, Santa Ana Direct line: CR: +506.2506.0172 jose.jorge at wu.com<mailto:jose.jorge at wu.com> | wu-ems at wu.com<mailto:wu-ems at wu.com> [cid:image002.png at 01D6286F.FCEED600] The information transmitted, including any content in this communication is confidential, is intended only for the use of the intended recipient and is the property of the Western Union Company or its affiliates and subsidiaries. If you are not the intended recipient, you are hereby notified that any use of the information contained in or transmitted with the communication or dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Western Union sender immediately by replying to this message and delete the original message

1 0

Issues with xymonpsclient and Windows 2019
by hcaldwell＠contractor.usgs.gov 12 May '20

12 May '20

We've run into an issue with the windowspsclient and nssm on Windows 2019 servers. The service is constantly bouncing on 2019 servers causing performance issues. Have their been any other reported issues with xymonpsclient on Windows 2019? Here is an example of the issues we're seeing in our application logs. Log Name: Application Source: nssm Date: 5/4/2020 11:31:37 AM Event ID: 1008 Task Category: None Level: Information Keywords: Classic User: N/A Computer: server.domain Description: Started C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy RemoteSigned -NoLogo -NonInteractive -NoProfile -WindowStyle Hidden -File "C:\program files\xymon\xymonclient.ps1" for service XymonPSClient in C:\Windows\System32\WindowsPowerShell\v1.0. Log Name: Application Source: nssm Date: 5/4/2020 11:31:38 AM Event ID: 1013 Task Category: None Level: Information Keywords: Classic User: N/A Computer: server.domain Description: Program C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe for service XymonPSClient exited with return code 1. Log Name: Application Source: nssm Date: 5/4/2020 11:31:38 AM Event ID: 1023 Task Category: None Level: Information Keywords: Classic User: N/A Computer: server.domain Description: Killing process tree of process 933840 for service XymonPSClient with exit code 1 Log Name: Application Source: nssm Date: 5/4/2020 11:31:38 AM Event ID: 1027 Task Category: None Level: Information Keywords: Classic User: N/A Computer: server.domain Description: Killing PID 933840 in process tree of PID 933840 because service XymonPSClient is stopping. Log Name: Application Source: nssm Date: 5/4/2020 11:31:38 AM Event ID: 1014 Task Category: None Level: Information Keywords: Classic User: N/A Computer: server.domain Description: Service XymonPSClient action for exit code 1 is Restart. Attempting to restart C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe. Hugh Caldwell NatWeb Systems Administrator Contractor for ANJV In Support of the United States Geological Survey 703-648-6812 (Office) 703-598-3472 (Cellular) hcaldwell at contractor.usgs.gov<mailto:hcaldwell at usgs.gov> Room 4A220

2 2

Where are xymonproxy errors?!
by rodrigoborgespereira＠gmail.com 12 May '20

12 May '20

Hi there, So, I'm trying to run xymonproxy as a standalone daemon, to facilitate the broadcast of status messages to multiple xymon servers with a single local machine listener. And that is working very well, I must say. But.. if one of the xymon servers is unreachable.. (I'm testing with an iptables DROP on the server side) I don't see any errors at all from xymonproxy. Even running it in foreground in the shell, nada. I've looked at the code on GitHub, and I do see some errprintf calls I would expect would result in some output in this type of situation. Am I missing something? Appreciate any pointers, thanks in advance. Rodrigo

1 0

Acknowledgment of criticals log location
by Kenneth.Lawson＠fosterfarms.com 08 May '20

08 May '20

Hello everyone, We have recently switched from BigBrother to Xymon. World of difference in terms of things we can now do. Great work DEV team. The one thing we are making use of now is the acknowledgment feature that allows our Service Desk to be required to monitor the "Critical View". However, for the life of me, I cannot find where that information is logged. '/var/log/xymon/acknowledge.log' contains ACKS from the "non-green" page, but none from critical. So where is that information stored? I would have thought that the configuration '/var/lib/xymon/acks' would be storing all that information. Also, why is when a critical ACK is made, the non-green is never updated? Is there a way so that when the Critical page is ack'd that no other page that that one is updated? Any help is greatly appreciated. Thanks, Ken Lawson Senior Systems Engineer Foster Poultry Farms Confidentiality Notice: The information contained in this electronic e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and is non- public in nature and should be considered confidential. If any reader of this communication is not the intended recipient, unauthorized use, disclosure, dissemination or copying is strictly prohibited, and may be unlawful. If you have received this communication in error, please immediately notify the sender by return e-mail, and delete the original message and all copies from your system and promptly destroy any copies made of this electronic message.

1 0

Google Kubernetes - anyone monitoring?
by john.r.rothlisberger＠accenture.com 07 May '20

07 May '20

Is anyone monitoring containers etc in Google Cloud? If so, how are you doing it? Thanks, John Upcoming PTO: _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office _____________________________________________________________________ ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com

1 0

False alarm on proc
by ralphmitchell＠gmail.com 06 May '20

06 May '20

Take a look at the Client Log that the Xymon server received. It could be the report has grown to the point where not all of it is being delivered. The process list may be being truncated. The last thing in the report should be the [clock] section: [clientversion] Xymon version 4.3.30 [clock] epoch: 1588807860.530185 local: 2020-05-06 19:31:00 EDT UTC: 2020-05-06 23:31:00 GMT Ralph Mitchell On Wed, May 6, 2020 at 4:00 PM Jaime Kikpole via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: Jaime Kikpole <jkikpole at cairodurham.org> > To: xymon at xymon.com > Cc: > Bcc: > Date: Wed, 6 May 2020 15:52:08 -0400 > Subject: False alarm on proc > My xymon system has been running well for years and it just started > showing a red alarm on one of my host's processes list. It claims that > there are 0 (zero) instances of every process it is checking for, but I can > still ssh over to that host and see the processes in a ps command. > > I'm honestly at a loss. I'm not sure how to troubleshoot this. Any > advice? > > > > > Jaime Kikpole > > Director of Technology & Innovations > Cairo-Durham Central School District > (518) 622-8543, x59500 > cairodurham.org <http://www.cairodurham.org> > > Technical Support: > help at cairodurham.org > go.cairodurham.org/techtips > > <https://www.credential.net/d24m9rrp> > > This electronic message and any attachment(s) may contain confidential or > legally privileged information protected by law from further disclosure and > is intended only for the individual or entity identified above as the > addressee. If you are not the addressee (or the employee or agency > responsible to deliver it to the addressee), or if this message has been > addressed to you in error, you are hereby notified that you may not copy, > forward, disclose or use any part of this message or any attachment(s). > Please notify the sender immediately by return email or telephone and > permanently delete this message and attachment(s) from your system. > > > ---------- Forwarded message ---------- > From: Jaime Kikpole via Xymon <xymon at xymon.com> > To: xymon at xymon.com > Cc: > Bcc: > Date: Wed, 6 May 2020 15:52:08 -0400 > Subject: [Xymon] False alarm on proc > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

1 0