- Xymon - Xymon mailman web

Large Log Files
by jkwade＠futurefrontiers.com 30 Nov '06

30 Nov '06

I'm having problems monitoring a large LOG file and can use some assistance. I've tried several entries in the client-local.cfg file, but the results have not been great. Basically, the developers want to monitor a web server log file which is in debug mode. The file fills up to 10mb, then rotates to a date/time stamp. They want to monitor for specific strings. Example: J2CA0056I The problem is that if Hobbit is checking every 5 minutes, or even every 1 or 2 minutes, the error can feed by to fast for Hobbit to detect. I tried using the trigger function, (See Below), but it didn't seem to work. We entered the string into the file manually, and Hobbit gave no errors. One question I have is the MAX size variable. How does this relate to the file size? As you can see below, I increased the MAX size variable. I've put my client-local.cfg entry below. Any suggestions would be appreciated. [server10] log:/var/adm/messages:10240 log:/logs/server10/SystemOut.log:40960 trigger J2CA0056I log:/logs/server10/SystemErr.log:40960 log:`ls /logs/server10/SystemErr_*`:40960 log:`ls /logs/server10/SystemOut_*`:40960 The last two entries, I'm trying to monitor the rollup files as well in case the log rolls over before Hobbit has a chance to see the error. However, this didn't seem to work to effectively either. Thanks.....James

3 2

Need Hobbit Clients for Sparc Solaris
by johnellallen＠gmail.com 30 Nov '06

30 Nov '06

I'm planning to monitor Sparc Solaris machines, version ranging SunOS4.1.3to Solaris 10, but my pre-compiled client from Solaris 10 didn't work on lower solaris versions Hope you could send me your pre-compiled clients on all or any sparc solaris clients you have. Just send me the tar of !HOBBITHOME/client. Thanks a lot in advance. - Johnell

5 6

SMTP and FTP Services Red
by geoff.hallford＠gmail.com 29 Nov '06

29 Nov '06

Hello, On a few of our servers the SMTP and FTP services are RED but when I telnet to them, they do show the proper 220 status good. They are quite slow to respond though, taking sometimes 10-15 seconds. Is there anyway to get Hobbit to pause and wait for this? If not, how long does it wait before it shows a red status? Thank you very much for your help. Geoff Hallford

1 0

Superimposing rrd graphs
by grsamy＠yahoo.com 29 Nov '06

29 Nov '06

Is it possible to combine the history graph in to one graph by selectively superimposing historical graphs? For example: I would like to see the TCP/IP statistics for last 24 hours and TCP/IP statistics for the previous 24 hours appear on the same graph (with different colors, not as a continous line) so that I can compare them easily. Thanks Ram ____________________________________________________________________________________ Want to start your own business? Learn how on Yahoo! Small Business. http://smallbusiness.yahoo.com/r-index

1 0

Logfile not accessible
by jkwade＠futurefrontiers.com 29 Nov '06

29 Nov '06

I'm monitoring about 8 log files on a system, and on some of them, I'm getting a "Logfile not accessible" . I can login to the box as the hobbit user and cat the files out just fine. The privileges all match up with the other logfiles that are working just fine. Manually, I can see the files just fine. How does Hobbit try to read the log files? I would appreciate any suggestions. Thanks.James

4 5

Default Tests will not run (Solaris)
by stefan.freisler＠aspect-online.de 29 Nov '06

29 Nov '06

Hi, the default Tests (disk, cpu, memory) on our Solaris server don't run only external Test like mailq works perfect. I got this error: http://www.hswn.dk/hobbit/help/known-issues.html#solarislinker but with: crle -c /var/ld/ld.config -l /usr/lib:/usr/lib/secure:/usr/local/lib i get an other error: 2006-11-29 16:54:19 Failed to get a message, terminating what can i do? I migrade from BigBrother to Hobbit and the Solaris server is an client of hobbit. mfg Stefan

1 0

GROUP/EXGROUP going nuts ?
by jjj863＠gmail.com 29 Nov '06

29 Nov '06

if I have a alert rule as below in hobbit-alerts.cfg, every alerts will match the GROUP rule, plus EXGROUP doesn't seem to be effective either. Such behavior was observed from the real email received as well as by the insightful "bbcmd hobbitd_alert --test". Only one group is defined. GROUP=junkgroup MAIL junkgroup at my.domain color=red HOST=* EXGROUP=junkgroup MAIL realdeal at my.domain color=yellow It is the same case if the group named in hobbit-alerts.cfg is bogus, aka, not defined in hobbit-clients.cfg. Only one group is defined in hobbit-clients.cfg, as listed below: log /tmp/junkgroup.log %(?-i)USER-ID:|EXCEPTION: IGNORE=kilobyte group=junkgroup In case it matters, this is the only Hobbit server running on CentOS 4.3/i386. Version==4.2RC1-20060712

1 1

[hobbit] AIX memory check
by massimo.morsiani＠gilbarco.com 29 Nov '06

29 Nov '06

Hi all, we have Hobbit 4.2.0 up and running (very well!) and we have BBWin client installed on our Windows servers. We started to install hobbit client on our AIX server (AIX 5.2) using this pre-built package http://rpm.razorsedge.org/aix-5.2/RE/ppc/hobbit-client-4.2.0-4.aix5.2.re .ppc.rpm and it works fine. But I noticed different memory reporting between AIX topas command and Hobbit web page, as follows === Topas output === Real,MB 8191 % Comp 49.3 % Noncomp 51.6 % Client 51.8 PAGING SPACE Size,MB 7680 % Used 20.5 % Free 79.4 === Hobbit web output === Memory Used Total Percentage green Physical 8189M 8192M 99% green Swap 1612M 7680M 20% While Total memory (8192MB) and Swap (7680MB, 20%) values are correct, reported Physical memory value is incorrect. Right value is % Comp 49.3 NOT 99%. Is there anything I can change to have the right value? Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.p.a. via de' Cattani, 220/G 50145 Firenze tel: +39-055-30941 fax: +39-055-318603 email: massimo.morsiani at gilbarco.com web: http://www.gilbarco.it This message (including any attachments) contains confidential and/or proprietary information intended only for the addressee. Any unauthorized disclosure, copying, distribution or reliance on the contents of this information is strictly prohibited and may constitute a violation of law. If you are not the intended recipient, please notify the sender immediately by responding to this e-mail, and delete the message from your system. If you have any questions about this e-mail please notify the sender immediately.

5 7

Log File Monitoring Problem
by jkwade＠futurefrontiers.com 29 Nov '06

29 Nov '06

I'm monitoring a logfile for "Incompatible Types" error. However, recently, one of the log files came up with the error, and Hobbit didn't detect it. Here's what I'm looking for: (Note: Code can be different) CWWBE0085E: Incompatible types This is what my log description looks like: LOG /opt/log/SystemOut.log %J2CA0056I|J2CA0020E|Incompatible Types|Assertion COLOR=RED Does it have to be lower case? Incompatible types Thanks.James

2 1

Number of Open Connections per Process
by jkwade＠futurefrontiers.com 29 Nov '06

29 Nov '06

Is there a way to track the number of open connections to a process? For example, the default ulimit is normally 1024. Is there a way to track if a particular process has over 1000 open connections with Hobbit? I can do a listing with lsof as an example. Thanks.James

2 1