- Xymon - Xymon mailman web

Hobbit Fetch
by Mark_Ellis＠cable.comcast.com 08 Dec '06

08 Dec '06

I am working with the hobbitfetch program. It seems to be working from on the clients. I can run the bb IP "pullclient" command from my hobbit server and I get the data back just fine. Also when I look at the client logs and tmp directory I see things updating normally. The issue I have is I don't see any of the data updating on the Web pages. I have updated the bb-hosts file to have the pulldata tag. What am I missing? Here is what I have in my bb-hosts file, I do have the IP's listed just can't send then out. Display results in another HTML page page cmcrdu CMC Servers group-compress <H3><I>CMC Servers</I></H3> xxx.xxx.xxx.xxx du04-vip # ssh trace xxx.xxx.xxx.xxx du05a # conn disk memory cpu ssh pulldata thank you Mark

6 6

[hobbit] Configuration database backend.
by Thomas.Kern＠hq.doe.gov 08 Dec '06

08 Dec '06

I like the idea of a database for the trends and status. I think once you getinto using a database for that you will look for other parts of hobbit to put there too. One thing that comes to mind is some uer authentication for whatever config editing front-end you do. And I denfinately want to see a front-end for the configs so that the hobbit server admin is not overly burdened with config setup/changes for a growing client population. -------------------------- Thomas Kern 301-903-2211 ----- Original Message ----- From: Stef Coene <stef.coene at docum.org> To: hobbit at hswn.dk <hobbit at hswn.dk> Sent: Thu Dec 07 17:27:08 2006 Subject: Re: [hobbit] Configuration database backend. On Thursday 07 December 2006 23:01, Trent Melcher wrote: > Has anyone thought about or implemented a configuration database backend > for hobbit, primarily a database replacement for the hobbit-clients.cfg > and hobbit-alerts.cfg to start....these are a couple that I would like > to buils a webfront to and be able to give limited access to users so > they could modify thresholds and alerting capabilities when needed. > > I did this about 4 years back for Big Brother using Informix, I was > able to setup thresholds and a replacement for the bb-host file inside a > couple tables in a database. However back then Big Brother was mostly > shell scripts and flat files for all its configuration. So adding hooks > into it for talking to a databse was easy. With hobbit its all compiled > code and Im not sure where to start, plus I don't have access to an > Informix database or the API's for it anymore so Im looking at mysql and > its api's for writing code in C. We are thinking about using mysql for storing trends and status messages. For the configuration, I think mysql is overkill and makes it too complex. I love the simplicity of the config files. I'm more thinking about making a web-based frontend for the config files. The config files can be parsed as ini-files. And for parsing ini-files, perl is perfect. So writing a web-based frontend for the config files in perl, is not that hard. Stef To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

3 2

Multiple Servers
by jkwade＠futurefrontiers.com 07 Dec '06

07 Dec '06

Can someone point me to a doc. that will tell me how to configure multiple servers? I'm moving the primary over to another machine, and I'd like to run them both for a short time. I'm also considering a redundancy check server. ie.one goes down, the other is available. Thanks.James

1 0

All network test suddenly purple
by Ralf.Strandell＠silja.com 07 Dec '06

07 Dec '06

Hi I am doing a migration from BigBrother to Hobbit. I have installed Hobbit on a new dedicated Linux server and configured the bb-hosts and started Hobbit. First everything seemed to work. I had nice results from ping, http and dns tests. After that I did not even touch the Hobbit system. Then it all suddenly stopped. All my network tests are purple. Bb-network.log is zero bytes. The ONLY error message that I can find is "df: cannot read table of mounted file systems: Permission denied" and that is not a problem. There's also "hobbitd status-board not available" in the Hobbit server log. I guess something must be wrong with bbtest-net. Any ideas? PID PPID STIME ELAPSED COMMAND 18428 1 Nov30 5-03:06:20 /home/hobbit/server/bin/hobbitlaunch --config=/home/hobbit/server/etc/hobbitlaunch.cfg --env=/h 18429 18428 Nov30 5-03:06:20 hobbitd --pidfile=/var/log/hobbit/hobbitd.pid --restart=/home/hobbit/server/tmp/hobbitd.chk --c 18430 18428 Nov30 5-03:06:15 hobbitd_channel --channel=stachg --log=/var/log/hobbit/history.log hobbitd_history 18431 18430 Nov30 5-03:06:15 hobbitd_history 18432 18428 Nov30 5-03:06:15 hobbitd_channel --channel=clichg --log=/var/log/hobbit/hostdata.log hobbitd_hostdata 18433 18432 Nov30 5-03:06:15 hobbitd_hostdata 18434 18428 Nov30 5-03:06:15 hobbitd_channel --channel=page --log=/var/log/hobbit/page.log hobbitd_alert --checkpoint-file=/ 18435 18434 Nov30 5-03:06:15 hobbitd_alert --checkpoint-file=/home/hobbit/server/tmp/alert.chk --checkpoint-interval=600 18436 18428 Nov30 5-03:06:15 hobbitd_channel --channel=status --log=/var/log/hobbit/rrd-status.log hobbitd_rrd --rrddir=/hom 18437 18428 Nov30 5-03:06:15 hobbitd_channel --channel=data --log=/var/log/hobbit/rrd-data.log hobbitd_rrd --rrddir=/home/ho 18438 18436 Nov30 5-03:06:15 hobbitd_rrd --rrddir=/home/hobbit/data/rrd 18439 18437 Nov30 5-03:06:15 hobbitd_rrd --rrddir=/home/hobbit/data/rrd 18440 18428 Nov30 5-03:06:15 hobbitd_channel --channel=client --log=/var/log/hobbit/clientdata.log hobbitd_client 18441 18440 Nov30 5-03:06:15 hobbitd_client 26129 18428 Dec04 22:35:09 bbtest-net --report --ping --checkresponse 9286 1 14:36 01:24 sh -c vmstat 300 2 1>/home/hobbit/client/tmp/hobbit_vmstat.slfitkusap007.9269 2>&1; mv /home/ho 9287 9286 14:36 01:24 vmstat 300 2

5 11

No Alert
by jkwade＠futurefrontiers.com 07 Dec '06

07 Dec '06

I had a system go red today on disk space, but it didn't alert anyone, not even me, and I'm setup to receive all alerts. This is at the top of hobbit-alerts.cfg HOST=* MAIL me at myemail.com REPEAT=15 COLOR=RED DURATION<30 RECOVERED Here's the DB Folks: HOST=%ddu* SERVICE=conn,disk MAIL DBS at myemail.com REPEAT=15 COLOR=RED DURATION<30 RECOVERED HOST=%dpu* SERVICE=conn,disk MAIL DBS at myemail.com REPEAT=15 COLOR=RED DURATION<30 RECOVERED (The hosts dpu and ddu are database production unix, and database development unix) Anyone have any ideas on were I can track this down at? Why it didn't page anyone. I checked the notification file in /var/log/hobbit, and it showed no page going on. Not sure why. This was a database server, so I've got folks asking why they didn't get notified that the disk was full. I found out when I came in this morning and looked at the Display page. Thanks...James

2 1

shire mailing list
by gjohnson＠trantor.org 07 Dec '06

07 Dec '06

Has anyone else had issues with emails not getting to The Shire's developer list? =G=

1 0

FW: [hobbit] NCV rrd help
by Alun.Watson＠fp.co.nz 07 Dec '06

07 Dec '06

Wow ... don't I feel like a boob. Thanks Dan you were right I've changed the squid and squidclients to this and it works. [squid] TITLE Squid IN-OUT YAXIS # bits DEF:serverhttpbitsin=squid.rrd:serverhttpbitsin:AVERAGE DEF:serverhttpbitsout=squid.rrd:serverhttpbitsout:AVERAGE LINE2:serverhttpbitsin#555555:IN_Traffic LINE2:serverhttpbitsout#880000:OUT_Traffic COMMENT:\n GPRINT:serverhttpbitsin:LAST:IN_Traffic \: %5.1lf%s (cur) GPRINT:serverhttpbitsin:MAX: \: %5.1lf%s (max) GPRINT:serverhttpbitsin:MIN: \: %5.1lf%s (min) GPRINT:serverhttpbitsin:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:serverhttpbitsout:LAST:OUT_Traffic \: %5.1lf%s (cur) GPRINT:serverhttpbitsout:MAX: \: %5.1lf%s (max) GPRINT:serverhttpbitsout:MIN: \: %5.1lf%s (min) GPRINT:serverhttpbitsout:AVERAGE: \: %5.1lf%s (avg)\n [squidclients] TITLE Squid Clients YAXIS # count DEF:numberofclients=squidclients.rrd:numberofclients:AVERAGE LINE2:numberofclients#880000:Number_of_clients COMMENT:\n GPRINT:numberofclients:LAST:Number_of_clients \: %5.1lf%s (cur) GPRINT:numberofclients:MAX: \: %5.1lf%s (max) GPRINT:numberofclients:MIN: \: %5.1lf%s (min) GPRINT:numberofclients:AVERAGE: \: %5.1lf%s (avg)\n ________________________________ From: Dan Vande More [mailto:bigdan at gmail.com] Sent: Thursday, 7 December 2006 12:02 To: hobbit at hswn.dk Subject: Re: [hobbit] NCV rrd help Ok, that looks good. This might be stupid, but according to this: http://oss.oetiker.ch/rrdtool/tut/cdeftutorial.en.html Your DEF lines should be of the format: DEF:var_name_1= some.rrd:ds_name:CF But in your case you have: DEF:serverhttpbitsin=squid.rrd:IN:AVERAGE DEF:serverhttpbitsout=squid.rrd:OUT:AVERAGE DEF:numberofclients=squidclients.rrd:clients:AVERAGE Where you seem to have an odd $ds_name Where did IN, OUT, and clients come from? Your rrds says your ds names are numberofclients, serverhttpbitsin, serverhttpbitsout. It seems this is your problem. Forgive me if it's not, I've only recently gained a rudimentary understanding of how CDEFs work, their complexity has overwhelmed me far too long than I care to admit. Dan

1 0

NCV rrd help
by Alun.Watson＠fp.co.nz 06 Dec '06

06 Dec '06

Hello, I was hoping that you guy's might be able to suggest why my NCV is not displaying. I get links on the both the trends webpage and the new report page. I've set up script that reports squid serverhttpbitsin : 38871.2 serverhttpbitsout : 8186.26 and squidclients numberofclients:28 I've entered into "hobbitserver.cfg" TEST2RRD="cpu=la<snip>,squid=ncv,squidclients=ncv" GRAPHS="la,<snip>,ncv,squid,squidclients" NCV_squid="serverhttpbitsin:GAUGE,serverhttpbitsout:GAUGE,*:NONE" NCV_squidclients="numberofclients:GAUGE,*:NONE" "hobbitgraph.cfg" [squid] TITLE Squid IN-OUT YAXIS # bits DEF:serverhttpbitsin=squid.rrd:IN:AVERAGE DEF:serverhttpbitsout=squid.rrd:OUT:AVERAGE LINE2:IN#555555:IN_Traffic LINE2:OUT#880000:OUT_Traffic COMMENT:\n GPRINT:IN:LAST:IN_Traffic \: %5.1lf%s (cur) GPRINT:IN:MAX: \: %5.1lf%s (max) GPRINT:IN:MIN: \: %5.1lf%s (min) GPRINT:IN:AVERAGE: \: %5.1lf%s (avg)\n GPRINT:OUT:LAST:OUT_Traffic \: %5.1lf%s (cur) GPRINT:OUT:MAX: \: %5.1lf%s (max) GPRINT:OUT:MIN: \: %5.1lf%s (min) GPRINT:OUT:AVERAGE: \: %5.1lf%s (avg)\n [squidclients] TITLE Squid Clients YAXIS # count DEF:numberofclients=squidclients.rrd:clients:AVERAGE LINE2:clients#880000:Number_of_clients COMMENT:\n GPRINT:clients:LAST:Number_of_clients \: %5.1lf%s (cur) GPRINT:clients:MAX: \: %5.1lf%s (max) GPRINT:clients:MIN: \: %5.1lf%s (min) GPRINT:clients:AVERAGE: \: %5.1lf%s (avg)\n

2 3

hobbit-alerts.cfg regex/MACRO problem - need help
by jonescr＠cisco.com 06 Dec '06

06 Dec '06

I am trying to use a regex macro to exclude a number of hosts from an alert. Here is the one I was using at first: $UNUSED_PROD=%prod-app-(2|3|4|5|6|7|8|9|10|11|12|18|20|21|22|23|24)|prod-web-(1|2|3|4|9|10|11) Here is how I am using it for the actual alert definition: HOST=%(prod-.*) SERVICE=* EXHOST=$UNUSED_PROD MAIL $PRIMARY color=red REPEAT=60 RECOVERED NOTICE format=sms MAIL $SECONDARY color=red DURATION>20 REPEAT=60 RECOVERED NOTICE format=sms I ran into a problem with the host "prod-app-12" matching the regex. I realized this was because I was not terminating the numbers, so I changed my variable to: $UNUSED_PROD=%prod-app-(2|3|4|5|6|7|8|9|10|11|12|18|20|21|22|23|24)$|prod-web-(1|2|3|4|9|10|11)$ This SHOULD work according to online regex testing tools, and I also at Henriks advice, verified it using "pcretest": $ pcretest PCRE version 6.6 06-Feb-2006 re> /prod-app-(2|3|4|5|6|7|8|9|10|11|12|18|20|21|22|23|24)$|prod-web-(1|2|3|4|9|10|11)$/ data> prod-web-12 No match data> prod-web-11 0: prod-web-11 1: <unset> 2: 11 data> As seen above, the host "prod-web-12" does NOT match, but "prod-web-11" DOES, which is exactly how I want it. *However, when I use this in hobbit-alerts.cfg. I do not get the expected behavior. Instead, ALL hosts match, according to pages sent out and from viewing the "info" section. *The strange thing is, according to hobbitd_alert --test, the hostname was successfully excluded, but clicking on the "info" column for hosts that are supposed to be excluded reveals that they are still configured to alert. ../bin/hobbitd_alert --test prod-web-11 procs --color-red 00009993 2006-11-09 21:48:30 send_alert prod-web-11:procs state Paging 00009993 2006-11-09 21:48:30 *** Match with 'HOST=%(prod-.*) SERVICE=*' *** 00009993 2006-11-09 21:48:30 Matching host:service:page 'prod-web-11:procs:PROD/PRODWEB' against rule line 170 00009993 2006-11-09 21:48:30 *** Match with 'MAIL $PRIMARY color=red REPEAT=60 RECOVERED NOTICE format=sms' *** 00009993 2006-11-09 21:48:30 Mail alert with command 'mail xxxxx at cingularme.com' 00009993 2006-11-09 21:48:30 Failed 'MAIL $SECONDARY color=red DURATION>20 REPEAT=60 RECOVERED NOTICE format=sms' (min. duration 0<1200) ... 00009993 2006-11-09 21:48:30 Failed 'HOST=* SERVICE=* EXHOST=$UNUSED_PROD' (hostname excluded) * Another thing, when I do the same test as above, using hostname "prod-web-12", which is a host that should NOT be excluded, hobbitd_alert still says that it was excluded (same last line of output as the prod-web-11 test above). I have also tried enclosing the regex in quotes, which didn't work either. If anyone has any insight, please let me know. I have contacted Henrik about this, but I believe he misread my email, as he suggested that I add $ to the regex, which I had already tried...so now I am hoping that he or someone else sees this message and can see what Im doing wrong. -Charles

3 8

Running Hobbit on custom apache port
by jonescr＠cisco.com 06 Dec '06

06 Dec '06

Im running my Hobbit apache on a custom port. At the bottom of alerts, it does not specify the port number, and also does not use the FQDN: "See http://hobbitserver/hobbit-cgi/bb-hostsvc.sh?HOST=somehost&SERVICE=cpu" Where can I make a change so that instead I get the FQDN, and the port, like: "See http://hobbitserver.mydomain.com:8000/hobbit-cgi/bb-hostsvc.sh?HOST=somehos…" -Charles

3 5