June 2026 - Xymon - Xymon mailman web

List archive up and running - with the old archive included - and an anniversary
by Henrik Juul Størner 24 Jun '26

24 Jun '26

1 0

None
by None 24 Jun '26

24 Jun '26

by default, if Safari, Konqueror and Chrom(ium) disable it via the KHTML in the User-Agent and Firefox doesn't work with usemultipart=0. The attached patch against 4.3.30 is attached, which solves the problems for me using Firefox, it should also work with 4.4. Greetings Roland

1 0

None
by None 24 Jun '26

24 Jun '26

bottom? I'm sure they would want to know about the 404 as well. John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK ________________________________ [http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass> This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.

1 0

None
by None 24 Jun '26

24 Jun '26

should trigger an alert if the size is greater than zero and not only if the size is greater than one. It though also could be viewed as the latter cited documentation is correct (compared to the implementation) and the example is wrong. But that means that the implemented and documented syntax is so utterly inituitive that even the official examples get it wrong. So please fix this properly by correcting the unintuitive implementation. If that may take a while, please update for the next 4.x.y release at least the example and add a note that despite ">" is written, "?" (or ">=") is meant and that this issue will be fixed in a later release. P.S.: I ran into this issue with the (security-patched) Xymon 4.3.28 version in Debian 10 Buster (current stable), but was also able to reproduce this on a test machine with Debian Unstable and Xymon 4.3.30 (as packaged by Debian), so the issue still seems to be present. Kind regards, Axel -- PGP: 2FF9CD59612616B5 /~\ Plain Text Ribbon Campaign, http://arc.pasp.de/ Mail: abe at deuxchevaux.org \ / Say No to HTML in E-Mail and Usenet Mail+Jabber: abe at noone.org X https://axel.beckert.ch/ / \ I love long mails: https://email.is-not-s.ms/

1 0

None
by None 24 Jun '26

24 Jun '26

beginning of analysis.cfg (emphasis with "^^^" is mine): # Example: Check that the /var/log/messages file is not empty and was updated ^^^^^^^^^^^^ # within the past 10 minutes, and go yellow if either fails: # FILE /var/log/messages SIZE>0 MTIME<600 yellow ^^^^^^ So I had this in my analysis.cfg: FILE /var/backups/mysql.0 SIZE>0 MTIME<86400 yellow I then did the following on the monitored machine: # mv -i /var/backups/mysql.0 /var/backups/mysql.0.BACKUP # touch /var/backups/mysql.0 # service xymon-client restart The check still stayed green despite /var/backups/mysql.0 clearly was an empty file. At some point I read the non-example documentation further up and there is written: # - "SIZE<max.size" and "SIZE>min.size" triggers a warning it the file # size is greater than "max.size" or less than "min.size", respectively. Note that there is written "SIZE>min.size" and "less than" and not "less or equal than" despite the negation of ">" is "?" and not "<". So I changed "SIZE>0" to "SIZE>1" and I got the expected alert.

1 0

None
by None 24 Jun '26

24 Jun '26

download FILENAME Download a file from the Xymon server’s download directory. Looking at the xymond code (I’m hoping this is the right place): sprintf(fullfn, "%s/download/%s", xgetenv("XYMONHOME"), fn) so I think the download directory should be under your XYMONHOME and the path in the bb: url is relative to that. You will not be able to download from an absolute path per your config currently. I guess you might want to create an updates directory e.g. $XYMONHOME/download/updates/, put your new client files there and your bb url will be bb://updates. Zak From: Xymon <xymon-bounces at xymon.com> On Behalf Of Timothy Williams Sent: Wednesday, 6 February 2019 16:54 To: xymon at xymon.com Subject: [External] [Xymon] XymonPS upgrade source In our main 'regular' server environment we have a web server that holds the newest XymonPS client for successful self-upgrading on slow scan. However, in our restrictive PCI environment, the Windows servers are not permitted to access the outside web folder or even other servers in the environment excepting WSUS, antivirus, etc on specific ports. They do send and receive files on port 1984 to Xymon server. 2019-02-05 14:11:23 Main and optional tests finished. 2019-02-05 14:11:23 Sending to server 2019-02-05 14:11:23 Using UTF8 encoding 2019-02-05 14:11:23 Connecting to host 192.168.47.233 2019-02-05 14:11:23 Sent 69413 bytes to server 2019-02-05 14:11:23 Received 107 bytes from server I have tried to use the bb: pseudo-URL to access the download folder on the Xymon (3.28) Linux server. World Read permissions have been verified. From the client logs, it appears to find the file and initiates a download, but the new file has zero bytes. The upgrade process continues to restart the service, but obviously hangs as there is now no script file. I have tried both ASCII and UTF8 encoding. 2019-02-05 14:11:23 Found a command: clientversion:2.35:bb://usr/local/xymon/server/download .. 2019-02-05 14:11:23 Executing XymonCheckUpdate 2019-02-05 14:11:24 Running version 2.28; config version 2.35; attempting upgrade 2019-02-05 14:11:24 XymonDownloadFromServer - Downloading usr/local/xymon/server/download/xymonclient_2.35.ps1 to C:\Utils\xymonclient_2.35.ps1 2019-02-05 14:11:24 Using UTF8 encoding 2019-02-05 14:11:24 Connecting to host 192.168.47.233 2019-02-05 14:11:24 Sent 62 bytes to server 2019-02-05 14:11:24 Wrote 0 bytes from server to C:\Utils\xymonclient_2.35.ps1 2019-02-05 14:11:24 Launching update 2019-02-05 14:11:24 Upgrading C:\Utils\xymonclient.ps1 to C:\Utils\xymonclient_2.35.ps1 2019-02-05 14:11:24 Restarting service... The error message on the XymonD process indicates that the file was not found. Latest error messages: Download file usr/local/xymon/server/xymonclient_2.35.ps1 not found Anybody have ideas about where the fault lies? Using file share or https is beyond where InfoSec wants to go. We currently manually copy in new clients to each PCI server, I'd like to have self-upgrading working. Tim Williams Virginia Commonwealth University Computer Center ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com

1 0

None
by None 24 Jun '26

24 Jun '26

[date] Fri 01 Feb 16:26:39 2019 ------------- That log was from v.2.28. I think tried with v2.34 and it had the same behaviour but the time on the Xymon server for the uptime report was 25 seconds before I manually ran the xymonclient.ps1 script. However, there was no other way it could have been reported to the server and time of the servers are in sync. So, I don't know how that happened unless it is using the time from a file that it is sending using externaldatalocation - except those files don't have seconds in the time. They are sent earlier than the main report though. Kind regards, SebA On Thu, 31 Jan 2019 at 09:42, Beck, Zak <zak.beck at accenture.com<mailto:zak.beck at accenture.com>> wrote: Hi Seb I can’t replicate this one. What do you have in analysis.cfg for UP? UP bootlimit toolonglimit [color] The cpu status goes yellow/red if the system has been up for less than "bootlimit" time, or longer than "toolonglimit". The time is in minutes, or you can add h/d/w for hours/days/weeks - eg. "2h" for two hours, or "4w" for 4 weeks. Defaults: bootlimit=1h, toolonglimit=-1 (infinite), color=yellow. Secondly, on a server where this happens, can you open an administrator powershell prompt and try this: Stop-Service xymonpsclient cd "c:\program files\xymon" .\xymonclient.ps1 And press ctrl-c when you see this line: 2019-01-31 09:24:19 Delaying until next run: 30 seconds Then open c:\xymon-lastcollect.txt and tell me what you get under [uptime] – here’s an example: [uptime] sec: 408029 4 days 17 hours 20 minutes 29 seconds Bootup: 20190126160344.494100+000 You can then go back to powershell and Start-Service xymonpsclient Paths above subject to where you have installed the client. Thanks Zak From: Xymon <xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>> On Behalf Of SebA Sent: Wednesday, 30 January 2019 18:19 To: Xymon Mailing List <xymon at xymon.com<mailto:xymon at xymon.com>> Subject: [External] [Xymon] Xymon WinPSclient uptime bug I've noticed a minor bug in the Xymon WinPSclient uptime report - after stopping and starting the service it says " Machine recently rebooted " in the uptime column on the Xymon server display. I don't mind it going yellow - arguably a warning might be in order here, but if so, it should say 'Xymon client recently started'. Once the client has been running for a bit, it reports the correct uptime. Kind regards, SebA ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com<http://www.accenture.com>

1 0

None
by None 24 Jun '26

24 Jun '26

ipconfig netstat diskpart route ifstatiis_sites Any thoughts? cheers Ian ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com

1 0

None
by None 24 Jun '26

24 Jun '26

Tue Mar 28 05:31:28 2017 ServerA.disk (IP) disk_warn 1490697082 100 <- warning sets a repeat time of 1 day Tue Mar 28 05:53:32 2017 ServerA.disk (IP) disk_alert 1490698405 100 <- minutes later it goes red (red repeat time is 15 minutes but no further alerts are generated) Next alert comes out 1 day after the above warning: Wed Mar 29 05:31:31 2017 ServerA.disk (IP) disk_alert 1490783486 100 <- 1 day after previous warning. This should have been repeated every 15 minutes. Wed Mar 29 05:46:40 2017 ServerA.disk (IP) disk_alert 1490784394 100 <- now, the repeat time is 15 minutes … <- and continues every 15 minutes. This alert went a full 24 hours with only a single notification. ☹ I have seen this before (not always) where the repeat time in a warning overrides a follow up alert until the warning repeat time has expired. Alert rules: SCRIPT /home/xymon/server/ext/pg/exwarn_SCRIPT disk_warn DURATION>30 REPEAT=1d COLOR=yellow SERVICE=disk FORMAT=TEXT UNMATCHED SCRIPT /home/xymon/server/ext/pg/exalert_SCRIPT disk_alert DURATION>20 REPEAT=15 COLOR=red SERVICE=disk FORMAT=TEXT UNMATCHED Ideas/thoughts? Thanks, John Upcoming PTO: 4/3 _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136<tel:(312)%20693-3136> office _____________________________________________________________________ ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com<http://www.accenture.com> _______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon<https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xymon.com_mailman…>

1 0

None
by None 24 Jun '26

24 Jun '26

FILE CONFIGURATION ENTRIES A file monitoring entry is used to watch the meta-data of a file: Owner, group, size, permis- sions, checksum etc. It looks like this: file:/var/log/messages[:HASH] The file:FILENAME line defines the filename of the file to monitor. As with the "log:" entries, a filename enclosed in backticks means a command which will generate the filenames dynamically. The optional [:HASH] setting defines what type of hash to compute for the file: md5, sha1 or rmd160. By default, no hash is calculated. NOTE: If you want to check multiple files using a wildcard, you must use a command to gener- ate the filenames. Putting wildcards directly into the file: entry will not work. So unless you are dynamically generating the file name client side, which would at least require PS client since BBWin doesn't support it, that is the issue to solve, or else monitor the folder if that can be done. David > Thanks > > CC > > On Mon, Apr 18, 2016 at 8:40 AM, David Baldwin > <david.baldwin at ausport.gov.au <mailto:david.baldwin at ausport.gov.au>> > wrote: > > On 18/04/2016 9:42 am, Colin Coe wrote: >> Hi all >> >> I'm trying to monitor some log files on Windows 7 clients. I >> have this in the analysis.cfg file: >> --- >> HOST=%client.* >> FILE "C:\users\user\Documents\ClientTiming*log" SIZE<500M >> yellow TRACK >> FILE "C:\users\user\Documents\ClientTiming*log" SIZE<1G red TRACK >> FILE "C:\users\user\Documents\ClientTrace*log" SIZE<500M >> yellow TRACK >> FILE "C:\users\user\Documents\ClientTrace*log" SIZE<1G red TRACK >> --- >> >> The files are displayed but regardless of the file size, the test >> stays green. >> >> I want the test to go red when the files exceed 1GB and yellow >> when greater than 500MB. >> >> Any ideas where I'm going wrong? >> > Is your filename supposed to be a regex? Wildcard matching isn't > builtin. > > Try: > > FILE "%C:\users\user\Documents\ClientTiming.*log" SIZE<500M yellow > TRACK > > For starters. > > Also, have you checked the file data is in your client data report > to match? Note that client-local.cfg only supports explicit > filenames unless this is an extension for whatever Windows Xymon > client you are using. > > An alternative approach is to monitor the size of the folder > containing the log files. OK if only a few designated logs in > there. Not so good if you've got unlimited history, etc. > > I have the following for my Windows clients: > > (in /etc/client-local.cfg) > > [win32] > dir:C:\inetpub > dir:C:\ProgramData\Microsoft\Windows\WER > dir:C:\Windows\Logs\CBS > dir:C:\Windows\Temp > > (in analysis.cfg) > DIR C:\Windows\Logs\CBS yellow SIZE<200000 TRACK=C-CBS > DIR C:\Windows\Logs\CBS red SIZE<500000 > DIR C:\ProgramData\Microsoft\Windows\WER yellow > SIZE<200000 TRACK=C-WER > DIR C:\ProgramData\Microsoft\Windows\WER red SIZE<500000 > DIR C:\Windows\Temp yellow SIZE<200000 > TRACK=C-Windows-Temp EXHOST=%(sccm) > DIR C:\Windows\Temp red SIZE<500000 EXHOST=%(sccm) > > > David. > > -- > David Baldwin - Senior Systems Administrator (Datacentres + Networks) > Digital Information Management and Technology > Australian Sports Commission http://ausport.gov.au > Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 > david.baldwin at ausport.gov.au <mailto:david.baldwin at ausport.gov.au> 1 Leverrier Street Bruce ACT 2617 > Our Values: RESPECT + INTEGRITY + TEAMWORK + EXCELLENCE > > > ------------------------------------------------------------------------ > Keep up to date with what's happening in Australian sport visit > www.ausport.gov.au <http://www.ausport.gov.au> > > This message is intended for the addressee named and may contain > confidential and privileged information. If you are not the > intended recipient please note that any form of distribution, > copying or use of this communication or the information in it is > strictly prohibited and may be unlawful. If you receive this > message in error, please delete it and notify the sender. > ------------------------------------------------------------------------ > > -- David Baldwin - Senior Systems Administrator (Datacentres + Networks) Digital Information Management and Technology Australian Sports Commission http://ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au 1 Leverrier Street Bruce ACT 2617 Our Values: RESPECT + INTEGRITY + TEAMWORK + EXCELLENCE

1 0