September 2020 - Xymon - Xymon mailman web

RRD change from 5 minutes to 1 minute
by Scot.Kreienkamp＠la-z-boy.com 24 Sep '20

24 Sep '20

Hi Ralph, The documentation is wrong. I ended up figuring it out after several hours of trial and error. It shows -s 60 should work but the code doesn?t account for the space. It MUST be -s60 (without the space) or it will error out every time. I ended up adding RRA:AVERAGE:0.5:1:3000 to the existing default config which should cover slightly more than two days worth of 1 minute datapoints. That will give the 2 day graphs the detailed resolution I want to see, beyond 2 days the existing config is ok. And yes, you?re right about the existing data. I had to delete all my RRD?s and let xymon create them again and start populating them from scratch. I tried to do the RRD export and import but the changes resulted in an RRD that had no data anyway, so I just went the delete them all route. So far I have 24 hours of data. When I get past 48 hours I should know if there are any repercussions, but since I haven?t modified the existing RRA?s I don?t expect any. Hopefully this will help someone else. Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | ? 734-384-6403 | | ? 1-734-915-1444 | ? Scot.Kreienkamp at la-z-boy.com From: Ralph M <ralphmitchell at gmail.com> Sent: Tuesday, September 22, 2020 11:10 PM To: Scot Kreienkamp <Scot.Kreienkamp at la-z-boy.com> Cc: xymon at xymon.com Subject: Re: [Xymon] RRD change from 5 minutes to 1 minute ATTENTION: This email was sent to La-Z-Boy from an external source. Be vigilant when opening attachments or clicking links. You might be able to use rrdtune to alter the step value, but that may be just the tip of the iceberg. For example, what happens to existing data in the RRD? What about new RRDs created by Xymon? Do the graph definitions need to change for display? &c Ralph Mitchell On Mon, Sep 21, 2020 at 3:34 PM Scot Kreienkamp <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>> wrote: I run most of my tests every 60 seconds. Does anyone know how to change the RRD graph default to accept data every 1 minute instead of every 5 minutes? Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | ? 734-384-6403 | | ? 1-734-915-1444 | ? Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com> www.la-z-boy.com<http://www.la-z-boy.com> | facebook.com/lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<http://twitter.com/lazboy> | youtube.com/lazboy<http://youtube.com/lazboy> [cid:image002.jpg at 01D69137.A3ECEB10] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you. _______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon

2 3

Test for file existence/contents and send contents in alert
by zforray＠vcu.edu 23 Sep '20

23 Sep '20

I have a request to perform the following test and am not sure Xymon can do both parts of the request. If so, can someone show me how? I felt this is a FILE test to see if the file exists and/or is empty. This is their request: *The test should be added as a procruntime test.* *The test should look for the file /home/tomcat/alertbody.txt* *If the file is not present, the test result is OK.* *If the file is present, the test result is CRITICAL, and the contents of alertbody.txt should be sent to alert recipients (if that is possible).* -- *Zoltan Forray* IBM Spectrum Protect (p.k.a. TSM) Administrator VMware Administrator Xymon Monitor Administrator Virginia Commonwealth University UCC/Office of Technology Services www.ucc.vcu.edu zforray at vcu.edu - 804-828-4807 Don't be a phishing victim - VCU and other reputable organizations will never use email to request that you reply with your password, social security number or confidential personal information. For more details visit http://phishing.vcu.edu/ <https://adminmicro2.questionpro.com>

2 1

RRD change from 5 minutes to 1 minute
by Scot.Kreienkamp＠la-z-boy.com 23 Sep '20

23 Sep '20

I run most of my tests every 60 seconds. Does anyone know how to change the RRD graph default to accept data every 1 minute instead of every 5 minutes? Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 1-734-915-1444 | * Scot.Kreienkamp at la-z-boy.com www.la-z-boy.com<http://www.la-z-boy.com> | facebook.com/lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<http://twitter.com/lazboy> | youtube.com/lazboy<http://youtube.com/lazboy> [cid:4C-lzbVertical_Tag_400px_d8b9412e-f3ea-46a1-99dc-a7c57261e11e.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

2 1

Double ports bug in xymonclient-linux.sh on RHEL6 RPM
by Scot.Kreienkamp＠la-z-boy.com 23 Sep '20

23 Sep '20

Has anyone noticed their ports information being displayed twice on RHEL/Centos6? I just noticed it tonight on some of my RHEL6 servers. It appears there's a bug in the RHEL6 Terabithia RPMs. >From RHEL6 RPM: echo "[ports]" # For some reason, the option for Wide/unTrimmed display of IPs # changed in netstat versions and no one provided backwards compat, # so exactly ONE of these should work successfully: netstat -antuT 2>/dev/null netstat -antuT 2>/dev/null Same lines from an RHEL7 RPM: # For some reason, the option for Wide/unTrimmed display of IPs # changed in netstat versions and no one provided backwards compat, # so exactly ONE of these should work successfully: netstat -antuW 2>/dev/null netstat -antuT 2>/dev/null Can someone fix and recompile the RHEL6 RPM? Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 1-734-915-1444 | * Scot.Kreienkamp at la-z-boy.com www.la-z-boy.com<http://www.la-z-boy.com> | facebook.com/lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<http://twitter.com/lazboy> | youtube.com/lazboy<http://youtube.com/lazboy> [cid:4C-lzbVertical_Tag_400px_d8b9412e-f3ea-46a1-99dc-a7c57261e11e.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

1 0

Converting a xymon client to a server
by rlhamil2＠gmail.com 22 Sep '20

22 Sep '20

Here's what I did to build the server - on Solaris 11 (SPARC, not that that matters); your details will vary a bit. On Solaris, the default "make" is NOT GNU make, although the latter is available as gmake; that's one thing that may vary; it'd just be "make" on Linux. pcre (perl style regular expression matching library) openssl, and openldap if you want it libraries and include files need to be installed. fping should be installed too, although I think one is included if you don't have it; remember to fix the path below if it's not in /usr/bin. I didn't actually need openldap support, but I may go crazy (for home, that'd be crazy) and set that up one day, so it's there if I want it then. The prerequisite libraries (if shared) need to be on BOTH build system and target server system, if they're not the same machine. export MAKE=gmake ./configure --server --fping /usr/bin/fping --pcreinclude /usr/include/pcre --sslinclude /usr/include/openssl --ldapinclude /usr/include/openldap I built my server ON the server system (in a build directory at the same level as the server directory); if you're not doing that, I suppose you could install it where you build it, and tar up the server directory and startup files and transfer the tar files to the system you want to make into the server. It might be more sensible to have two tar files, one for the startup files (which need to be right for the target distro, if that differs from the build system) with absolute paths, and one for the ~xymon/server directory, which should probably be relative to ~xymon (i.e. just be in ~xymon and tar up the server directory). The startup files have to be installed as root. You'd think the server files could be installed as xymon, but some directories have to have group id and group-writable for the web server, whatever it runs as, so you'll probably have to install them as root too. So either your xymon and web server UIDs and GIDs are the same on build and target server systems, or you'll have to fix up owner and group after untar-ing the files. Then of course there's the question of setting up the web server process on the xymon server system, with the appropriate additions to a basic Apache (if that's what you're using) config. I'm NOT going to talk about that...except that it makes sense to me that the web server process should start BEFORE the xymon server process. The rest below pertains to the client side. If you use the tar files to distribute the client software (automatically after the first time a client is set up), among other things they should be relative to $XYMONCLIENTHOME; so if ~xymon is /export/home/xymon, then $XYMONCLIENTHOME is probably /export/home/xymon/client. A list of my tar file for Linux looks like: ./ ./runclient.sh ./local/ ./local/README ./tmp/ ./ext/ ./ext/volmgt ./ext/faults ./logs/ ./bin/ ./bin/xymonclient-freebsd.sh ./bin/xymonclient-sunos.sh ./bin/xymonclient-osf1.sh ./bin/logfetch ./bin/xymonclient-sco_sv.sh ./bin/xymon ./bin/xymonclient.sh ./bin/msgcache ./bin/xymonclient-linux.sh ./bin/xymoncfg ./bin/xymonlaunch ./bin/xymonclient-aix.sh ./bin/xymoncmd ./bin/orcaxymon ./bin/xymongrep ./bin/xymonclient-hp-ux.sh ./bin/xymonclient-unixware.sh ./bin/xymonclient-irix.sh ./bin/xymonclient-openbsd.sh ./bin/xymonclient-darwin.sh ./bin/xymonclient-netbsd.sh ./bin/xymondigest ./bin/clientupdate ./etc/ ./etc/clientversion.cfg ./etc/clientlaunch.cfg ./etc/smartctl_disks.cfg ./etc/xymonclient.cfg ./etc/localclient.cfg That means if doing it by hand the first time, you want to do (as xymon): mkdir -p ~/client cd ~/client tar xvf ../OS_CPU_xymonVersion_updateversion.tar I named the tar files something like that to keep them straight, with all the different OS and CPU combos I had; the updateversion part is if I update the tar file say to include a changed ext script, without actually compiling a new version of xymon client. If you do the autoupdate, remember the matching clientversion for a client (in client-local.cfg on the server) has to be the same as the tar file name minus .tar suffix. Note that I had some client side ext scripts; those were included. I created the tar files with logs and tmp directories cleaned out, which is a good idea. Remember what I said, build client software on the client with the OLDEST OS version for a given OS and CPU architecture; most OS's are backwards compatible enough that the older code should run fine on the newer version of the same OS, but code built on a newer OS will usually NOT run on an older one. Of course if you have different OSs (usually different Linux distributions are ok as the same OS) or different CPU architectures (x86 32-bit, x86/64 only, SPARC, ARM, whatever), you need to build for each OS/CPU combination on the oldest OS version. > On Sep 22, 2020, at 08:39, Gabby Gibbons <gabby.gibbons at yahoo.com> wrote: > > So, I am trying to build from source, but basically what I want to do is distribute a pre-installed xymon to multiple computers on a network, and then for the single computer that should be the server I want to be able to write a script to install the extra, server unique, packages. Can I just rerun the configure script and specify server instead and then use make to rebuild? I'm not all that familiar with building packages from source.

1 0

Converting a xymon client to a server
by rlhamil2＠gmail.com 22 Sep '20

22 Sep '20

I think that might be influenced by whether they're prepackaged, or whether you're compiling yourself. Prepackaged, go with however the packages do it (probably separate). DIY, do what you want. While it's possible to have each launched separately, it saves at least one process if the client is NOT launched separately on the server, but the server is configured to also launch its own client processes. As I read it, by default the server tasks.cfg launches the client processes for itself too. So that assumes that installing server also installs (ideally matching) client. If you use the ability of the server to distribute client side updates, you need to prepare one tar bundle per OS/CPU architecture combo, compiled on the OLDEST representative OS version. I have both CentOS and Ubuntu happily using the same tar file; Solaris 10, 11.3, and 11.4 (x86) happily using their own, MacOS 10.6, 10.14, and 10.15 using one, and SPARC Solaris 9, 10, and 11.3 using one, all by in each case, building the tar bundle on the oldest for that OS/CPU architecture combo. And those go in the downloads directory, and client-local.cfg needs to define classes (and sometimes to define per-system overrides, I needed that with the Solaris SPARC vs x86, or was it that one dang SPARC Linux that had to be done separately I had in addition to two CentOS/x86-64 and one Ubuntu/ x86-64), with the tar file minus .tar identified as clientversion in client-local.cfg (server). It mostly works well; you just build the new tar bundles, put them in downloads on the server, and update the affected clientversion lines in clients-local.cfg. But if you get it wrong, it'll whack some of the clients by "updating" them to the wrong version; done that...now I think about it, it was the SPARC Linux that I had to fool with to keep that from happening. One cool thing about having it distribute the updates and defining clientversion, is that the client version is shown, I think in the raw clientlog column at or near the bottom. So that serves as a reminder to keep them up to date. You do NOT have to keep them perfectly in sync with the server, it's harmless enough (give or take security updates!) if they're a bit different. For clients that are UP ONLY, the following script will retrieve that info if it exists (clientlog is not kept for those that are not up, so for those or clients that don't actually report but only are probed by server, the version will be blank): #! /bin/bash server=xymon.example.com # update this! while read ip name junk do case "${ip}" in [0-9]*) vers="$(${HOME}/server/bin/xymoncmd ${HOME}/server/bin/xymon ${server} "clientlog ${name} section=clientversion"|fgrep -v '[clientversion]')" printf "%-15s %s\n" "${name}" "${vers}" ;; sac done <${HOME}/server/etc/hosts.cfg IF there's a tag on all hosts of interest, xymongrep might be a better source for such a script than reading hosts.cfg directly, esp. if there are includes in hosts.cfg. QUESTION FOR THE MAINTAINERS: why isn't there an --all option for xymongrep, such that no tag is needed then (but other options like --no-down still apply)? That would make such a script clean, in that it wouldn't matter whether some one specific tag was on all hosts of interest. > On Sep 21, 2020, at 14:43, Gabby Gibbons via Xymon <xymon at xymon.com> wrote: > > > From: Gabby Gibbons <gabby.gibbons at yahoo.com> > Subject: Converting a xymon client to a server > Date: September 21, 2020 at 14:43:20 EDT > To: "xymon at xymon.com" <xymon at xymon.com> > > > Hello, > > I'm wondering if it is possible to convert a xymon client into a server? It seems like a server is just a client with an added on server directory which was making me wonder if this is possible? If not, what would be the best way, just uninstall the client and then reinstall as a server? > > Thanks > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon

1 1

Converting a xymon client to a server
by gabby.gibbons＠yahoo.com 21 Sep '20

21 Sep '20

Hello, I'm wondering if it is possible to convert a xymon client into a server? It seems like a server is just a client with an added on server directory which was making me wonder if this is possible? If not, what would be the best way, just uninstall the client and then reinstall as a server? Thanks

1 0

Weird problem with PORTS and PROCS false positives
by rodrigoborgespereira＠gmail.com 21 Sep '20

21 Sep '20

Hello, I'm finding that on occasion Xymon issues false positives for PORTS or PROCS. On closer inspection, it's possible to identify in those alerts that the recorded client data is correct, containing the netstat and ps listings with the expected ports and processes. However, Xymon will still alert. When this happens, it will happen for a bunch of hosts at the same time. There's no specific pattern. It's not very frequent (maybe twice a week), but enough to be annoying, as it can affect a few dozens of hosts. Given that the client data seems complete, it doesn't seem to be a buffer issue (at least not a configurable one), so I'm at a loss at what may be the issue here. Also, there's been no version change, (still) running 4.3.27, or any other major change to the system (it's a CentOS 7 VM). I welcome any hints/speculations about what could be causing this! Thanks everyone.

1 0

Making xymon.html update more frequently
by john.thurston＠alaska.gov 18 Sep '20

18 Sep '20

On 9/18/2020 4:51 AM, Eric Robert via Xymon wrote: > II've noticed that sometimes I can click into a test and see that the > status is something different than what is showing on the front page > (xymon.html). The front page can take over a minute to update even if I > can manually see that the status has changed already. Is there any way > to make that front page update more frequently? Xymon is not of this century. It works like a web app from the '90s, by batch updates. Hit F5 all you want, and it still won't affect the contents of the web page. If you want the contents of that page to update more frequently, you need to run xymongen more frequently. Look in your tasks.cfg and change the INTERVAL on xymongen -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Department of Administration State of Alaska

1 0

Making xymon.html update more frequently
by erobertt30＠yahoo.com 18 Sep '20

18 Sep '20

Hello, II've noticed that sometimes I can click into a test and see that the status is something different than what is showing on the front page (xymon.html). The front page can take over a minute to update even if I can manually see that the status has changed already. Is there any way to make that front page update more frequently?

1 0