August 2020 - Xymon - Xymon mailman web

Feature request (SNMP)
by colin.coe＠gmail.com 24 Aug '20

24 Aug '20

Hi all (particularly the devs) I've set up a new Xymon server running on RHEL8 and found that devmon really doesn't work well at all, so I've been trying hard to get the Xymon native SNMP features working for me. Could there be a "snmpmibs.d" directory? This will be so users can add custom stanzas without having these clobbered if the file snmpmibs.cfg is updated by the Xymon devs? Thanks CC

1 0

Service Unavailable 503
by rodbass63＠gmail.com 21 Aug '20

21 Aug '20

Hi, I typically use my xymon server to test if URLs are up and serving pages and external scripts. I do not have any xymon clients. There is one URL that I test by adding this to the hosts.cfg file, nothing out of ordinary xxx.64.8.xx New-xxxx #xxxx-api xxxxapitest https://xxx-xxxxx.xxxxx.org NOCOLUMNS:info,trends,clientlog,ports,procs,files,inode,conn This site, every now and then, will have issues and customers will get 'Service Unavailable' 503 error. What happens is that after 5 minutes, I will get the white circle but apache is still up and running. I never get alerted because of the white circle. Is xymon able to alert on 'Service Unavailable 503' page either in the hosts.cfg or another file on the xymon server? Thanks in advance. Rod

2 2

how to represent status of something not associated with a single host?
by rlhamil2＠gmail.com 21 Aug '20

21 Aug '20

Let's say I have something, in this case DHCP server failover status, that although the parts of it run on two or more hosts, isn't strictly associated with either one (ideally if both DHCP servers are up, they'd both show the same failover status for each other). It could be some other distributed processing state that doesn't depend on any single system to still be available. Let's say even that I can write a server-side script for it. Where the heck should I show the information? Maybe make up a fake host for global state like that, suppress display of all the usual probes for it, and only show the ones I want?

3 2

Limitation on the number of lines to display on Xymon
by kern_doe＠yahoo.com 21 Aug '20

21 Aug '20

Hello Xymon gurus, What is the limit? What parameter that control this? It looks like my Xymon limits to around 1800 lines, it actually does not send, it fails with this error: /usr/libexec/xymon-client/bb: Argument list too long I have `cat abc.out` in the command, to get around I have to use `head -1800 abc.out` Thank you in advance. Kern --

1 0

Sorry to be a pedant...
by bscott＠bunyatech.com.au 21 Aug '20

21 Aug '20

Hi all, I know this is very minor and wasting your time a little, but: The man page for hosts.cfg lists the tab character as being 8 (back space) rather than 9. My OCD or something has kicked in so here is a diff. Sorry (it does make me feel better though), Brian P.S. Not sure if the man page drives the html version of the other way around. I patched both but expect there is something creating one from the other in the release process.

1 0

grown tests not alerting every 5 minutes
by rodbass63＠gmail.com 20 Aug '20

20 Aug '20

Hi, I wrote a script test and it's not sending the emails every 5 minutes. It sends the first email as soon as I initiate the false positive and it will send the email when it recovers but nothing in between -- sometimes I leave the false positive for 20 minutes. I looked in the mail logs and I see the same thing: the email on the first false positive and the email on the recovery but nothing in between. The default conn test does send the email every 5 minutes as expected but. Here is what my alerts.cfg looks like for that host: HOST=New-xxxxx-Patient-Portal SERVICE=new-xxxx-patient-portal,http,sslcert,conn MAIL rod.xxxxx at xxxxxx.com COLOR=red RECOVERED MAIL rod.xxxxx at xxxxxxx.com COLOR=yellow RECOVERED MAIL nur.xxxxx at xxxxxxx.com COLOR=red RECOVERED MAIL john.xxxxx at xxxxxxx.com COLOR=red RECOVERED MAIL oleg.xxxxxx at xxxxxxx.com COLOR=red RECOVERED MAIL pm_xxxxx at xxxxxxx.com COLOR=yellow RECOVERED Here is the tasks.cfg [new-xxxxxx-patient-portal] ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg CMD /usr/lib/xymon/server/ext/States/nm/xxxxxx.pl LOGFILE /var/log/xymon/xxxxxxx.log INTERVAL 5m Here is the hosts.cfg part: xx.192.160.xx <hostname> # new-xxxxxx-patient-portal sslcert https://xxxxxxxx NOCOLUMNS:info,trends,clientlog,ports,procs,files,inode Any help will be appreciated.

2 1

RRDTool on RHEL 8
by erik＠schminke.us 18 Aug '20

18 Aug '20

For those of you in the future who may struggle with building Xymon on RHEL 8.. rrdtool-devel is not in the main repositories for RHEL 8. To install you need to enable the "CodeReady Builder for RHEL 8" repository. dnf config-manager --set-enabled codeready-builder-for-rhel-8-x86_64-rpms After doing this, a "dnf install rrdtool-devel" should be successful. Hope this saves someone some time. Erik

1 0

Xymon 4.3.30 Released
by ralphmitchell＠gmail.com 18 Aug '20

18 Aug '20

Is the 4.4 release going to have encrypted communications? I'm not supposed to send plain text over the network, so I've been faking it with curl posting to xymoncgimsg on port 443. It would be really nice to get port 1984 opened and do it properly. Thanks, Ralph Mitchell On Fri, Jul 31, 2020 at 11:33 AM James Louis <jglouisjr at gmail.com> wrote: > Thanks for the update Japheth! > > On Fri, Jul 31, 2020 at 9:27 AM Japheth Cleaver <cleaver at terabithia.org> > wrote: > >> Hi Jim, >> >> I'm looking at the XSS report and sorting through a variety of the >> patches since this release now. >> There will be a 4.3.31 release with this as well as other updates, as >> well as a 4.4 pre-release. Due to there being a longish gap, a maintenance >> release is appropriate. >> >> -jc >> >> >> On 7/31/2020 7:15 AM, James Louis wrote: >> >> Japheth, >> >> Will 4.3.31 be out soon or will it jump to 4.4? >> >> Thanks, >> Jim >> >> On Thu, Sep 5, 2019 at 5:29 PM Japheth Cleaver <cleaver at terabithia.org> >> wrote: >> >>> Xymon 4.3.30 has been released and is now available for download. >>> >>> 4.3.30 is mostly a bug-fix release, quashing issues stemming from the >>> security fixes in 4.3.29, including improperly-tight restrictions on >>> allowed characters in hostname for browsing along with several other >>> parsing errors. Thanks in particular to Tom Schmidt for his assistance >>> in tracking these down. >>> >>> Xymon should also now be more easily buildable on older GCC versions >>> without the diagnostics pragma available. >>> >>> Xymon 4.3.30 is available from the Xymon SourceForge page at >>> https://sourceforge.net/projects/xymon/ >>> >>> As always, thank you to all who have contributed code, ideas, and >>> features >>> to the project! >>> >>> >>> Regards, >>> Japheth "J.C." Cleaver >>> >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >>> >> >> >> -- >> >> >> >> >> >> *Jim Louis \\\\||//// \ ~ ~ / | @ @ | * >> >> >> *--oOo---(_)---oOo-- * >> >> ?It does me no injury for my neighbor to say there are twenty gods, or no >> God. It neither picks my pocket nor breaks my leg.? >> >> ~ Thomas Jefferson >> >> >> > > -- > > > > > > *Jim Louis \\\\||//// \ ~ ~ / | @ @ |* > > > *--oOo---(_)---oOo--* > > ?It does me no injury for my neighbor to say there are twenty gods, or no > God. It neither picks my pocket nor breaks my leg.? > > ~ Thomas Jefferson > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

4 5

alerts.cfg GROUP not matching
by Tim.James＠navient.com 17 Aug '20

17 Aug '20

I had all of this working and "something" changed and now the majority of my groups defined in my analysis.cfg file no longer alert. I'm hoping it wasn't when I upgraded from 4.3.28 to 4.3.30 but I'm not ruling anything out. I have sanitized the server name to foo.bar.com Analysis.cfg snippet: HOST=foo* DISK /opt/sas 90 95 GROUP=sas_support DISK /opt/sas/9.4 90 95 GROUP=sas_support DISK /opt/sas/9.4/depot2 90 95 GROUP=sas_support DISK /opt/sas/saslanding 90 95 GROUP=sas_support DISK /opt/sas/saslanding/in 90 95 GROUP=sas_support DISK /opt/sas/saslanding/out 90 95 GROUP=sas_support DISK /opt/sas/sasmain 90 99 GROUP=sas_support DISK /opt/sas/sassecure 90 99 GROUP=sas_support DISK /opt/sas/sassecure/modelingcrm 95 98 GROUP=sas_support DISK /opt/sas/sassecure/servicing 95 99 GROUP=sas_support DISK /opt/sas/sassecure/servicing/SCRA/MOENDs 90 95 GROUP=sas_support DISK /opt/sas/saswork 50 70 GROUP=sas_support Alerts.cfg snippet: GROUP=sas_support SERVICE=disk COLOR=red # SAS Application support team SCRIPT /usr/local/xymon-server/server/ext/Create_SN_Ticket_From_Xymon-YP2-RP1.sh sas_support FORMAT=SMS DURATION>30 REPEAT=24h stop GROUP=sas_support SERVICE=disk COLOR=yellow # SAS Application support team MAIL helpdesk at foo.com FORMAT=SMS DURATION<20 REPEAT=24h stop Obligatory test from the terminal: [/usr/local/xymon-server/server/etc] --> ../bin/xymoncmd xymond_alert --test foo.bar.com disk --color=yellow --group=sas_support 00103435 2020-08-14 23:11:06 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 165 00103435 2020-08-14 23:11:06 Failed 'GROUP=sas_support SERVICE=disk COLOR=red' (group not in include list) 00103435 2020-08-14 23:11:06 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 168 00103435 2020-08-14 23:11:06 Failed 'GROUP=sas_support SERVICE=disk COLOR=yellow' (group not in include list) --> ../bin/xymoncmd xymond_alert --test foo.bar.com disk --group=sas_support 00104898 2020-08-14 23:26:59 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 165 00104898 2020-08-14 23:26:59 Failed 'GROUP=sas_support SERVICE=disk COLOR=red' (group not in include list) 00104898 2020-08-14 23:26:59 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 168 00104898 2020-08-14 23:26:59 Failed 'GROUP=sas_support SERVICE=disk COLOR=yellow' (group not in include list) However the "red" second test, does match further along in the alerts file, just not with a GROUP definition, and the failure there is expected as I didn't specify the duration. 00104898 2020-08-14 23:26:59 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 304 00104898 2020-08-14 23:26:59 *** Match with 'HOST=%^.* SERVICE=disk COLOR=red' *** 00104898 2020-08-14 23:26:59 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 305 00104898 2020-08-14 23:26:59 Failed 'SCRIPT /usr/local/xymon-server/server/ext/Create_SN_Ticket_From_Xymon-YP2-RP1.sh UNIX FORMAT=SMS DURATION>5 REPEAT=25h' (min. duration 0<301) Now get this. Here are two more examples from the alerts.cfg file: GROUP=satellite SERVICE=disk #test comment MAIL coworker at foo.com FORMAT=SCRIPT stop GROUP=unix # Linux Team support (default contact) MAIL unix-alert at lists.foo.com FORMAT=SMS DURATION<20 stop And the respective tests from the terminal: ../bin/xymoncmd xymond_alert --test foo.bar.com disk --color=yellow --group=satellite 00104439 2020-08-14 23:21:49 Matching host:service:dgroup:page foo.bar.com:disk:NONE:PROD/PSAS' against rule line 147 00104439 2020-08-14 23:21:49 Failed 'GROUP=satellite SERVICE=disk' (group not in include list) ../bin/xymoncmd xymond_alert --test foo.bar.com disk --color=yellow --group=unix 00104535 2020-08-14 23:23:08 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 150 00104535 2020-08-14 23:23:08 *** Match with 'GROUP=unix' *** 00104535 2020-08-14 23:23:08 Matching host:service:dgroup:page 'foo.bar.com:disk:NONE:PROD/PSAS' against rule line 151 00104535 2020-08-14 23:23:08 *** Match with 'MAIL unix-alert at lists.foo.com FORMAT=SMS DURATION<20 stop' *** 00104535 2020-08-14 23:23:08 Mail alert with command 'mail unix-alert at lists.foo.com I'm stumped. Anyone out there have any idea what might be incorrect? Tim James Senior System Administrator Navient

1 1

No service to check.
by zahir.au＠gmail.com 17 Aug '20

17 Aug '20

Hi, I have recently set upped xymon. Everything looks okay except the svcs. Which do not list any services. The page is always green no matter what and shows following message ?No service to check?. I have added to monitor for SQL service under analysis.d but it does nothing. Please help. Regards Zahirul Alam

2 1