- Xymon - Xymon mailman web

BBWin 0.8 - log time error
by rob.macgregor＠gmail.com 12 Aug '06

12 Aug '06

I'm pretty sure it's been there with older releases too (certainly 0.6), but the reporting time is only ever using a 12 hour clock in 24 hour format. For instance: 2006-Aug-12 17:39:20 [fire] yellow syst: warning - 2006/08/12 05:26:30 The actual time the event was logged on the host was 17:26. Obviously, this can get a little confusing :) The host in question is running XP SP2 and is currently reporting to a Hobbit 4.2 system, though I saw the same problem with Hobbit 4.1. -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche

2 2

Still no ghostlist
by brodie＠mcw.edu 12 Aug '06

12 Aug '06

Web page still shows: "failed to retrieve ghostlist from server". Bb commands show (I renamed a host to force a ghost entry to appear): -bash-3.00$ bb 127.0.0.1 ghostlist carrxxx.hmgc.mcw.edu|141.106.224.202|1155352870 -bash-3.00$ bb 127.0.0.1 ping hobbitd 4.2.0 Ideas? -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thursday, August 10, 2006 4:40 PM To: hobbit at hswn.dk Subject: Re: [hobbit] acknowledge with 4.2.0 On Thu, Aug 10, 2006 at 04:28:22PM -0500, Larry Barber wrote: > I just installed the new 4.2.0 release and I have discoved that when trying > to acknowledge alerts, that the ack-alerts page does not seem to be working > for the intermediate pages. When called from the top page you get a list of > all the active alerts, and when called from the lowest level pages you get a > list of alerts on that page (plus one more for some reason), on intermediate > pages though, you just get a "No Active Alerts" message. Is this the way it > is supposed to work. Hmm, no - that doesn't seem right. The culprit is the web/bb-ack.c line 257: sprintf(cmd + strlen(cmd), " page=^%s$", pagename); That's a regular expression for matching the pagename. It should probably just have the '$' at the end removed, so it becomes sprintf(cmd + strlen(cmd), " page=^%s", pagename); Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 2

[hobbit] bb write error while sending message to bbd@hobbit2:1984?
by David.Gore＠VerizonBusiness.com 11 Aug '06

11 Aug '06

What do these bb errors indicate? They are happening quite often. Are we running out of some resource on the host? nmsbb at pdcads04:/var/home/nmsbb/client/logs> cat h*log 2006-08-11 22:00:03 Write error while sending message to bbd at hobbit2:1984 2006-08-11 22:00:03 Whoops ! bb failed to send message - write error 2006-08-11 22:05:06 Write error while sending message to bbd at hobbit2:1984 2006-08-11 22:05:06 Whoops ! bb failed to send message - write error

1 0

Running external tests for multiple hosts
by Stewart_Larsen＠doh.state.fl.us 11 Aug '06

11 Aug '06

I have a large number of devices I would like to query via SNMP. I have multiple items per device that I would like graphed. What is the easiest way to go about this. Are there example scripts out there? Should I use bbhostgrep? -- Stewart Larsen

2 1

Converting NK entries to the new Critical Systems
by rob.macgregor＠gmail.com 11 Aug '06

11 Aug '06

Wanting to avoid manually migrating all my NK hosts/services to the new Critical Systems I've put together a little (420 byte) shell script to do a quick 'n' dirty conversion (it does leave the NK entries in bb-hosts though). Admittedly it took me about the same amount of time as re-entering them all, but hey :) If anybody else wants it then I'll post it to the list. -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche

1 0

[hobbit] Compile on AIX VIO server 5.3
by neil.camp＠deca.mil 11 Aug '06

11 Aug '06

Change the file lib/osdefs.h to have the following (because my HP-UX complained that socklen_t and snprintf were already defined): typedef int hobbit_socklen_t; extern int hobbit_snprintf(char *str, size_t size, const char *format, ...); -----Original Message----- From: Francesco Duranti [mailto:fduranti at q8.it] Sent: Friday, August 11, 2006 12:41 PM To: hobbit at hswn.dk Subject: [hobbit] Compile on AIX VIO server 5.3 I cannot compile hobbit 4.2 on a AIX Virtual IO Server 1.3.0.0 (fixpack8) with gcc installed. I get this error: -bash-3.00$ gmake CC="gcc" CFLAGS="-O -O3 -D_REENTRANT -DAIX -I. -I`pwd`/include -DCLIENTONLY=1" LDFLAGS="" OSDEF="-DAIX" RPATHOPT="" PCREINCDIR="" SSLFLAGS="" SSLINCDIR="" SSLLIBS="" NETLIBS="" BBTOPDIR="/home/bb" BBLOGDIR="" BBHOSTNAME="" BBHOSTIP="10.90.2.10" BBHOSTOS="" LOCALCLIENT="no" gmake -C lib client gmake[1]: Entering directory `/home/bb/src/hobbit-4.2.0/lib' gcc -O -O3 -D_REENTRANT -DAIX -I. -I/home/bb/src/hobbit-4.2.0/include -DCLIENTONLY=1 -I. -I../include -c -o cgiurls.o cgiurls.c In file included from /home/bb/src/hobbit-4.2.0/include/../lib/ipaccess.h:15, from /home/bb/src/hobbit-4.2.0/include/libbbgen.h:58, from cgiurls.c:24: /usr/include/sys/socket.h:87: error: conflicting types for 'socklen_t' /home/bb/src/hobbit-4.2.0/include/../lib/osdefs.h:21: error: previous declaration of 'socklen_t' was here gmake[1]: *** [cgiurls.o] Error 1 gmake[1]: Leaving directory `/home/bb/src/hobbit-4.2.0/lib' gmake: *** [lib-client] Error 2 -bash-3.00$ uname -a AIX itromvio01 3 5 Removing the socklen_t from the osdefs.h let me compile and run the client. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Compile on AIX VIO server 5.3
by fduranti＠q8.it 11 Aug '06

11 Aug '06

I cannot compile hobbit 4.2 on a AIX Virtual IO Server 1.3.0.0 (fixpack8) with gcc installed. I get this error: -bash-3.00$ gmake CC="gcc" CFLAGS="-O -O3 -D_REENTRANT -DAIX -I. -I`pwd`/include -DCLIENTONLY=1" LDFLAGS="" OSDEF="-DAIX" RPATHOPT="" PCREINCDIR="" SSLFLAGS="" SSLINCDIR="" SSLLIBS="" NETLIBS="" BBTOPDIR="/home/bb" BBLOGDIR="" BBHOSTNAME="" BBHOSTIP="10.90.2.10" BBHOSTOS="" LOCALCLIENT="no" gmake -C lib client gmake[1]: Entering directory `/home/bb/src/hobbit-4.2.0/lib' gcc -O -O3 -D_REENTRANT -DAIX -I. -I/home/bb/src/hobbit-4.2.0/include -DCLIENTONLY=1 -I. -I../include -c -o cgiurls.o cgiurls.c In file included from /home/bb/src/hobbit-4.2.0/include/../lib/ipaccess.h:15, from /home/bb/src/hobbit-4.2.0/include/libbbgen.h:58, from cgiurls.c:24: /usr/include/sys/socket.h:87: error: conflicting types for 'socklen_t' /home/bb/src/hobbit-4.2.0/include/../lib/osdefs.h:21: error: previous declaration of 'socklen_t' was here gmake[1]: *** [cgiurls.o] Error 1 gmake[1]: Leaving directory `/home/bb/src/hobbit-4.2.0/lib' gmake: *** [lib-client] Error 2 -bash-3.00$ uname -a AIX itromvio01 3 5 Removing the socklen_t from the osdefs.h let me compile and run the client.

1 0

[hobbit] Hobbit Monitor version 4.2 released
by neil.camp＠deca.mil 11 Aug '06

11 Aug '06

Great work, and thanks for such a great open source tool! -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thursday, August 10, 2006 1:46 AM To: hobbit-announce at hswn.dk; hobbit at hswn.dk Subject: [hobbit] Hobbit Monitor version 4.2 released I am pleased to announce the release of Hobbit version 4.2.0. This release comes after a full year of development since the previous release, and 2 months of dilligent testing by lots of dedicated people on the Hobbit mailing list. It is safe to say that this is the best tested release of Hobbit ever done. This release is very much focused on Hobbit clients. The highlights of this release are: * Full client support. The Hobbit clients now support monitoring of cpu-, disk- and memory-utilisation, as well as system logfiles, network ports and traffic, processes, file- and directory sizes, system clock synchronization, and much more. When a problem is detected on a host, the client data is automatically saved so it is available for later troubleshooting - even if the host has completely crashed. * Pull-style data collection for DMZ hosts. Clients normally connect to the Hobbit server to deliver their data. For DMZ hosts this is often not possible due to firewall restric- tions. For such hosts, Hobbit 4.2 supports server-pulling of the data. * Automatic updates of Hobbit client installations. Client installations of Hobbit 4.2 can be updated automatically without having to physically access the client hosts. Updates can be rolled out automatically from the Hobbit server, to individual clients or all of your monitored systems. * A new "Acknowledgment" webpage lets administrators acknowledge alerts easily, without having to know the ack-code required in previous releases. * A new "Critical systems" webpage allows detailed configuration of critical systems for large-scale operations. A web-based configuration tool enables the monitoring operations staff to easily configure individual hosts and/or services to appear on the Critical Systems view, and allows them to focus on the most important events at any given time. * A new "Metrics report" webpage allows for comparison of trend data across hosts, e.g. to view the effect of loadbalancing a service across multiple hosts. * Several independent projects have sprung up, including a BBWin (a client for MS-Windows based systems); DevMon (a data collection tool for SNMP-enabled devices); and The Shire (a repository for Hobbit add-ons, sample configurations, and other interesting things). Links to these can be found in the "About Hobbit" on-line help. Plus performance improvements, lots of other small enhancements and bugfixes. Hobbit 4.2.0 is available from the Hobbit project page on SourceForge.net: http://sourceforge.net/project/showfiles.php?group_id=128058&package_id= 140220 If you are upgrading from a previous version of Hobbit, please refer to the RELEASENOTES file shipped with Hobbit 4.2.0 for instructions on updating. I hope You will enjoy it. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

Automated Client Updates
by jonescr＠cisco.com 11 Aug '06

11 Aug '06

I'm testing out the client update feature. Here's my experience so far: 1. I read the directions, and prepared a client tarfile and placed it (hobbitclient-420.tar) in the download directory. 2. I added the following to my client-local.cfg: [linux] log:/var/log/messages:10240 ignore MARK * clientversion:hobbitclient-420* 3. I waited awhile (30+ mins) for the clients to update. 4. When I click the info column on some clients, it shows: *Client S/W:hobbitcli* Is it supposed to be truncated like that? Does this indicate that the new client is running? Is there any other way to verify the client version? If not maybe it should be available in the "client data" status somewhere. * *-Charles

4 5

R: [hobbit] log file monitoring issues
by fduranti＠q8.it 11 Aug '06

11 Aug '06

I don't know openbsd... If it work like some linux machine you have to check the script or program that is rotating the logs to make them world readable or group readable and create as the hobbit group. If your system is using logrotate you can try to put the "create mode owner group" directive into the specific logrotate file or change the default one that should be in /etc/logrotate.conf -----Messaggio originale----- Da: Gary B. [mailto:gmbfly98 at gmail.com] Inviato: venerdì 11 agosto 2006 15.21 A: hobbit at hswn.dk Oggetto: Re: [hobbit] log file monitoring issues ...I'm still having issues with "Permission denied" errors from Hobbit in trying to access /var/log/maillog on all my OpenBSD boxes. Apparently, the only way I've been able to get Hobbit to read them is if I set them 644. However, every time OpenBSD rotates the logs, it resets the permissions to 600. Is there any way to get this to work properly without having to run the Hobbit client as root? > You need both. > clients-local.cfg is to tell the client to report on these logs > hobbit-clients.cfg is tell hobbitd to check/alert against log data > reported from clients > > > On 8/9/06, Gary B. <gmbfly98 at gmail.com> wrote: > > > Maybe I'm just missing something in the documentation, but I can't > seem to get the log file monitoring to work properly. In the example > below, I'm trying to look at the "messages" and "maillog" files on > Linux. > > Particularly, I'm trying to EXCLUDE the following "messages" lines: > Aug 9 21:19:45 www upsd[7860]: Connection from 127.0.0.1 Aug 9 > 21:19:45 www upsd[7860]: Client on 127.0.0.1 logged out Aug 9 > 21:19:45 www upsd[7860]: Connection from 127.0.0.1 > > Aug 9 16:44:01 www crond(pam_unix)[5382]: session opened for user > root by (uid=0) Aug 9 16:44:14 www crond(pam_unix)[5382]: session > closed for user root Aug 9 16:45:01 www crond(pam_unix)[5484]: > session opened for user mailman by (uid=0) Aug 9 16:45:01 www > crond(pam_unix)[5484]: session closed for user mailman > > And EXCLUDE the following "maillog" lines: > Aug 6 11:55:02 www sendmail[15076]: k76Ft1pU015076: > from=<mailman at HOSTNAME>, size=576, class=0, nrcpts=1, > msgid=<200608061555.k76Ft1A2015075 at HOSTNAME >, proto=ESMTP, > daemon=MTA, relay=localhost.localdomain [127.0.0.1] > > > Below is the respective lines from the "client-local.cfg" file: > log:/var/log/messages:10240 > ignore upsd* Client|Connection 127.0.0.1 ignore session opened|closed > for user mailman|root log:/var/log/maillog:10240 ignore > relay=localhost.localdomain trigger denied > > And below the specific log entries I'm looking for from " > hobbit-clients.cfg": > LOG /var/log/maillog "relaying denied" color="yellow" > > > Now, the problem I'm having... > The "ignore" line for the /var/log/maillog file appears to be working > correctly, as it does indeed ignore such entries as shown above. Also > working is the "ignore session opened..." line for the > /var/log/messages file. > > What is NOT working is the "ignore" line for the "upsd*" lines in > /var/log/messages. For the life of me, I just can't figure out how to > get that to work properly. That is, two of the three "ignore" lines > are not working, as those lines still show up in the "full log" > output. If anyone has any ideas, let me know. > > I'm also having problems with some logs not showing up on the messages > page. Do you need both a "LOG" entries in the hobbit-clients.cfg AND > client-local.cfg , or will an entry in only client-local.cfg be > sufficient to have it show up on the messages page? > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0