- Xymon - Xymon mailman web

critical.cfg format
by john.r.rothlisberger＠accenture.com 26 Feb '18

26 Feb '18

After many years of using Xymon I am taking a look at using critical.cfg to make things easier to read (as opposed to the all-nongreen screen). But, I am having trouble getting things to work when I want to use multiple templates for servers. Here is what works (multiple tests): Servername1|disk||||1|Resolver Group|Instructions|<modified by> Servername1|svcs||||2|Resolver Group|Instructions|<modified by> Servername1|msgs||||3|Resolver Group|Instructions|<modified by> This also works: Servername1|=TEMPLATE1 TEMPLATE1|disk||||1|Resolver Group|Instructions|<modified by> Does not work: Servername1|=TEMPLATE1 servername1|=TEMPLATE2 servername1|=TEMPLATE3 TEMPLATE1|disk||||1|Resolver Group|Instructions|<modified by> TEMPLATE2|svcs||||2|Resolver Group|Instructions|<modified by> TEMPLATE3|msgs||||3|Resolver Group|Instructions|<modified by> Also does not work: Servername1|=TEMPLATE1,TEMPLATE2,TEMPLATE3 TEMPLATE1|disk||||1|Resolver Group|Instructions|<modified by> TEMPLATE2|svcs||||2|Resolver Group|Instructions|<modified by> TEMPLATE3|msgs||||3|Resolver Group|Instructions|<modified by> Also does not work: Servername1|=TEMPLATE1 TEMPLATE1|disk,svcs,msgs||||1|Resolver Group|Instructions|<modified by> I have tried multiple combinations using spaces, commas, colons - nothing seems to work. I have tried adding doing cloning via the edit critical systems but that doesn't help either. Can I use regular expressions in critical.cfg to match multiple server names such as Servername*? Thanks, John Upcoming PTO: _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office _____________________________________________________________________ ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com

1 0

Acknowledgement via email not working
by APatel＠kgsalpha.com 22 Feb '18

22 Feb '18

Hello, I recently installed the Terabithia Xymon on CentOS 7 and having no luck to get the acknowledgements via email working. The procmail.log shows the following: >From me at myhost.com Thu Feb 22 09:00:49 2018 Subject: RE: myserver.cpu CRITICAL (RED) XYMON [628942188] Folder: /usr/share/xymon/server/bin/xymon-mailack --env=/usr/share/x 6083 2018-02-22 09:00:49.381891 Whoops ! Failed to send message (Connection failed) 2018-02-22 09:00:49.381979 -> connect to Xymon daemon at mycentosIP:1984 failed (Permission denied) 2018-02-22 09:00:49.381987 -> Recipient 'mycentosIP', timeout 50 2018-02-22 09:00:49.381994 -> 1st line: 'xymondack 628942188 3 --_000_B0101C9B9936244D9191B24572BF76C3012125BA7DKGSMBX1KGSLOC_' This is informational only and is not a solicitation, commitment or confirmation. Transaction details are subject to official confirmation and terms of business. We may make markets, buy/sell as principal or have a position in financial instruments herein. We do not warrant that information is accurate, complete or that any returns will be achieved. Price/availability is subject to change. Changes to assumptions may have a material impact on price/returns. Other than transactions in financial instruments, any agreement KGS enters into must be executed by a KGS authorized signatory. If you received in error, please delete and advise sender. Communications are subject to review and archiving. Changes to assumptions may have material impact on price or returns. For more information, please contact your representative. If you received this message in error, please delete the message and advise the sender. Communications to and from our firm are subject to review and archiving.

1 0

Configuring alerts
by even.juberg＠artsdatabanken.no 20 Feb '18

20 Feb '18

Hi! I've been trying a few things to get the correct alerts to the correct staff-member, but for some reason I cannot get it to work. In order to find out if I'm doing something wrong within the configuration of Xymon, or if I have to search somewhere else, I'm reaching out here to see if anyone can give me any pointers. The scenario is that I have one particular host, that should be running a specific process. Let's say this process is "notepad.exe" - if "notepad.exe" is not running, John should get an email. What I have done so far is this: 1. Edited the configuration file on my host as follows in the "procs section": <setting name="notepad.exe" rule="=1" comment="Notepad" alarmcolor="red" /> a. My goal here is to check if there is one instance of notepad.exe running - if not, give a "red alert". b. This seems to be working. The host in the web-view of Xymon turns red in the procs column, and notepad.exe is shown as running -1 instance if there is not one running. So far so good! 2. Now I want John to be alerted if notepad is not running so I have edited the alert.cfg in the following way: a. HOST=myhostname(the same as in hosts.cfg NAME:myhostname) SERVICE=notepad.exe MAIL john at testlab.local<mailto:john at testlab.local> DURATION>10 COLOR=red b. As "notepad.exe is not a service, but a process this is not working. AS "procs" is not a valid argument(at least not listed in the documentation, SERVICE was the closest thing that came to mind. So my question is simply, is there a way to filter alerts by the procs column or will I have to attack this in another way? c. I would like to avoid John getting nagged by any other red-alerts from this host, as his responsibility is notepad. :) Any pointers would be highly appreciated! Sicnerely, Even Hauge Juberg Senior Engineer Norwegian Biodiversity Information Centre

3 2

How to setup a back-up xymon server
by wim.nelis＠ziggo.nl 18 Feb '18

18 Feb '18

Xymon is also used to monitor my home-network. One of the clients is a raspberry pi 0 (rpi0, IP address 192.168.178.71), which controls the home ventilation unit and which will monitor more in the near future as sensors are added. Sometimes the Wifi-connection is not operational for some time. The obvious results are that status messages do not reach the xymon server (IP address 192.168.178.72), and that the associated graphs (RRD's) are not updated. I would like to be able to check the graphs once the network connection is operational again. The current solution is to install a (secondary) xymon server, version 4.3.28, on rpi0 as well. (Note that there is no intention to use this xymon server for other purposes: there is no web server active on the rpi0, nor would I like to have a web server on this tiny computer.) The configuration file /etc/default/xymon-client on rpi0, which is included in file /usr/lib/xymon/client/etc/xymonclient.cfg, is modified to contain the addresses of both xymon servers: XYMONSERVERS="127.0.0.1 192.168.178.72" The default section and the host section for rpi0 in configuration file /usr/lib/xymon/server/etc/analysis.cfg is the same on both xymon servers. The client data arrives at the primary xymon server, resulting in tests and their associated graphs. When the need arise, the RRD files are copied from rpi0 to the primary xymon server, and can then be inspected. However, it seems that the data arrives twice at the primary xymon server. Xymond reports: Multi-source statuses rpi0:conn reported by 192.168.178.71 and 127.0.0.1 rpi0:cpu reported by 192.168.178.71 and 127.0.0.1 rpi0:disk reported by 192.168.178.71 and 127.0.0.1 rpi0:files reported by 192.168.178.71 and 127.0.0.1 rpi0:inode reported by 192.168.178.71 and 127.0.0.1 rpi0:memory reported by 192.168.178.71 and 127.0.0.1 rpi0:msgs reported by 192.168.178.71 and 127.0.0.1 rpi0:ports reported by 192.168.178.71 and 127.0.0.1 rpi0:procs reported by 192.168.178.71 and 127.0.0.1 The associated graphs one the primary xymon server are not complete: quite often de measurements of 2 or 3 consecutive periods of 5 minutes are missing. The xymon logfile rrd-status.log shows that multiple RRD updates, with slightly different values at about the same time, are the root cause of the incomplete graphs. In this situation I would like to stop the secondary xymon server from sending the test results to the primary xymon server. How can one achieve that? Regards, Wim Nelis.

2 2

checking on compatibility of XYMON/HOBBIT with Java 8 release 151
by Karthik.Mangu＠karauctionservices.com 15 Feb '18

15 Feb '18

Hello Xymon Team, May I know if XYMONN/HOBBIT are compatible with JAVA 8 release 151 as our security team want to upgrade it to avoid any security vulnerabilities with JAVA Thanks Karthik Mangu WMQ/IIB Administrator Integration Hosting Services KAR Auction Services, Inc. Desk: (317) 843 3175 Cell: (317) 601 9380

3 2

ipconfig:netstat:diskpart|route|ifstat|iis_sites not displaying in the gui
by ian.buckle＠gmail.com 08 Feb '18

08 Feb '18

I have just setup xymonPSClient on a windows server . I have been running it for ages on my unix servers. >From the windows server stuff like [cpu]. [memory] display in my xymon gui but things like the following do not ipconfig netstat diskpart route ifstatiis_sites Any thoughts? cheers Ian

2 1

xymon client host name not including domain name in systemd scripts
by Phil.Crooker＠orix.com.au 05 Feb '18

05 Feb '18

I've this issue with SUSE linux - SUSE just returns the plain hostname without the domain when it uses uname -n -- the xymon client then doesn't match the FQDN in the xymon hosts.cfg file, the entry goes purple and the client ends up in the ghost report. I'm compiling my own client and inserting the xymonlaunch.service file in /etc/systemd/system, etc -- somehow it doesn't send the correct hostname. I tried adding CLIENTNAME=blah.domain.com in xymonlaunch to no effect (also put it in the xymonclient config file, still no good). If I manually run /bin/hostname with the FQDN, that works, but is lost on the next reboot. And yes I ensured the FQDN is in /etc/hostname, etc... I do not want to have to put in a "CLIENT:whatever" statement in hosts.cfg for every host with a client, which works but is inelegant to me. Looking at the old runclient.sh script that comes with the client (and is not used with systemd), the MACHINEDOTS variable is set before launch. In the good ol SYS5 init.d days, I used to insert MACHINEDOTS=`hostname -f` in the runclient.sh script, which worked. So, I found if you run: systemctl edit xymonlaunch.service and add the following, it works: [Service] Environment="MACHINEDOTS=whatever.domain.com" This creates a /etc/systemd/system/xymonlaunch.service.d/override.conf file and all is well. Unfortunately it doesn't work with `hostname -f`. There is a warning that if there is no override.conf in whatever.service.d/ the service won't run. That isn't true with SUSE SLES 12, it works fine w/o it (less the correct name, of course), but YMMV... HTH Someone, Phil Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more visit the Mimecast website.

5 5

State of the art for monitoring ESXi hosts?
by earle＠isolar.DynDNS.ORG 05 Feb '18

05 Feb '18

On 31 Jan 2018, at 11:07 AM, John Thurston <john.thurston at alaska.gov> wrote: > Can anyone offer a 'state of the art' statement regarding Xymon and > VMware ESXi hosts (versions 6.0 and 6.5)? Looking in the archives, I > see > a little content from several years ago. > > It's now 2018. What are y'all monitoring, and how are ya' doing it? We set up our ESXi hosts (all 6.0 at the moment) to point their syslog configs at our central syslog server, and then set up <syslog server>.msgs red & yellow alerts from what we get out of that. Crude but quasi-effective. (In case you've never set it up, ESXi hosts emit a FLOOD of syslog messages.) - Greg

2 1

State of the art for monitoring ESXi hosts?
by john.thurston＠alaska.gov 01 Feb '18

01 Feb '18

Can anyone offer a 'state of the art' statement regarding Xymon and VMWare ESXi hosts (versions 6.0 and 6.5)? Looking in the archives, I see a little content from several years ago. It's now 2018. What are y'all monitoring, and how are ya' doing it? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Department of Administration State of Alaska

6 5

State of the art for monitoring ESXi hosts?
by xymon＠asitshouldbe.com 31 Jan '18

31 Jan '18

I use a custom Perl script that connects to all of my ESXi servers (about 21 of them) and generates a single page that lists each host server, its version, RAM usage, disk space usage per datastore, host uptime, which virtual machines are on them, and the power state of each VM. It flags VMs that are powered off and hosts that have been up for more than 365 days. I'm not sending alerts for these at this time, but the page that is generated points these things out. Actually, the 21 hosts are broken up into three different pages depending on the location of the host. That gives me a pretty quick way to find out which host a particular VM is running on. It uses ssh to connect to each host and run a series of commands on the hosts. Then it processes the results. I'm using it on ESXi 5.0, 5.5, and 6.5. Running all these commands on the hosts is time consuming, so I don't know how scalable this is. Strict environments may have security concerns about having ssh enabled, but it works for me. The attachment is a screen capture of the output. Ron John Thurston <john.thurston at alaska.gov> wrote .. > Can anyone offer a 'state of the art' statement regarding Xymon and > VMWare ESXi hosts (versions 6.0 and 6.5)? Looking in the archives, I see > a little content from several years ago. > > It's now 2018. What are y'all monitoring, and how are ya' doing it? > > -- > Do things because you should, not just because you can. > > John Thurston 907-465-8591 > John.Thurston at alaska.gov > Department of Administration > State of Alaska > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon

1 0