- Xymon - Xymon mailman web

Stop Reporting - All Device Become Purple
by zakki.ashidiqi＠indosat.com 07 Mar '06

07 Mar '06

Dear all, My hobbit reported that all the device stopping the report. And the status become purple. If I restart the hobbit process, all device will be in green status. And in the next few hours it will be back to purple again. Any suggestion? Thanks Zakki ================================= scanned by Indosat TM-IMSS System

2 1

[hobbit] ACKs not being accepted.
by neil.camp＠deca.mil 06 Mar '06

06 Mar '06

That makes sense. Under BB a code of 99 tells the server to ACK for all recipients. I tried doing a 99 to make sure the tons of people on the list to be notified did not get a repeat message. --neil ManTech DeCA Operations Systems Administrator (804) 734-8353 neil.camp at deca.mil -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Monday, March 06, 2006 11:54 AM To: hobbit at hswn.dk Subject: Re: [hobbit] ACKs not being accepted. On Mon, Mar 06, 2006 at 11:18:16AM -0500, Camp, Neil D. (ManTech) CTR wrote: > I am trying to ACK alerts using 4.1.2p1 but nothing happens, and I get > the following in the hobbitd.log > > 2006-03-06 11:06:10 Cookie 9679999 not found, dropping ack > 2006-03-06 11:08:59 Cookie 96799 not found, dropping ack > > I can see on previous mailings that version 4.0.2 had ack problems. I > assumed it was fixed by 4.1.2. My question is, I must have misconfigured > something, and was wondering what I should be looking at to fix this? The obvious thing to check is of course the ack code. If you run bb 127.0.0.1 "hobbitdboard host=MYHOST fields=testname,cookie" it will give you a list of the tests and their corresponding ack code ("cookie" in Hobbit terms). So - are you using the right one? I notice your cookies have "99" at the end. I seem to recall that BB did something special with ack-codes that ended with 99; Hobbit doesn't do that. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

ACKs not being accepted.
by neil.camp＠deca.mil 06 Mar '06

06 Mar '06

I am trying to ACK alerts using 4.1.2p1 but nothing happens, and I get the following in the hobbitd.log 2006-03-06 11:06:10 Cookie 9679999 not found, dropping ack 2006-03-06 11:08:59 Cookie 96799 not found, dropping ack I can see on previous mailings that version 4.0.2 had ack problems. I assumed it was fixed by 4.1.2. My question is, I must have misconfigured something, and was wondering what I should be looking at to fix this? --neil ManTech DeCA Operations Systems Administrator (804) 734-8353 neil.camp at deca.mil

2 1

[hobbit] Do not get http notifications
by neil.camp＠deca.mil 06 Mar '06

06 Mar '06

Sorry for bothering, but I think I found my problem. :) --neil ManTech DeCA Operations Systems Administrator (804) 734-8353 neil.camp at deca.mil -----Original Message----- From: Camp, Neil D. (ManTech) CTR Sent: Monday, March 06, 2006 8:34 AM To: hobbit at hswn.dk Subject: [hobbit] Do not get http notifications Hello all, I do not get notifications when http goes red. These are my rules for hobbit-alerts... $USG_MAIL=MAIL ... REPEAT=15m $SA_PAGE=MAIL ... REPEAT=15m $SA_PHONE=MAIL ... REPEAT=15m $DBA_PAGE=MAIL ... REPEAT=15m $DBA_PHONE=MAIL ... REPEAT=15m $HELP_DESK_MAIL=MAIL ... DURATION>15m REPEAT=30m $PROD=%(hq.*|wp.*) $TB=%(dv.*|tb.*|man.*) HOST=$PROD SERVICE=* COLOR=red $HELP_DESK_MAIL $USG_MAIL $SA_PHONE $SA_PAGE Since I have the SERVICE tag set to "*" shouldn't I be getting a notification? The ALLEVENTS log records the red event, but nothing gets sent out. The relavent bb-hosts entry is included for info... subpage AP-PACK Application-Packages group-compress <H3>Application-Packages</H3> 172.16.x.x x.x.x # http://pcrpap-iiu.x.x 172.16.x.x x.x.x # http://pbeaap-iiu.x.x:7003/decaComs/GenMain.jsp 172.16.x.x x.x.x # http://pbeaap-iiu.x.x:7005/avcm These web servers went red this weekend, but I did not get paged. Any help would be greatly appreciated. Thanks! --neil ManTech DeCA Operations Systems Administrator (804) 734-8353 neil.camp at deca.mil To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] HTML Code in Alerts
by Robert.Taylor＠HendrickAuto.com 06 Mar '06

06 Mar '06

Chris, I don't believe that Hobbit will send HTML alerts. If you want to do this you will need to use a custom notification script for each test that provides HTML alerts. I use the following script for mine... ############################################################ # The following is an HTML alert script. Place it in your # # ext directory as -email-notification.sh. # ############################################################ sendmail="/usr/sbin/sendmail" bbserveraddress="http://<HOST NAME>" echo $BBCOLORLEVEL echo $RECOVERED echo "$BBALPHAMSG" >$BBTMP/originalmessage.$$ lines=`wc -l $BBTMP/originalmessage.$$ | awk '{print $1}'` rowtail=$(($lines -1)) rowhead=$(($lines -3)) tail -n $rowtail $BBTMP/originalmessage.$$ | head -n $rowhead > $BBTMP/temp.$$ #echo $lines echo "To: $RCPT" >$BBTMP/notification.$$ case $RECOVERED in 0) case $BBCOLORLEVEL in red) echo "Subject: Hobbit [${ACKCODE}] $BBHOSTNAME:$BBSVCNAME CRITICAL (RED)" >>$BBTMP/notification.$$ ;; yellow) echo "Subject: Hobbit [${ACKCODE}] $BBHOSTNAME:$BBSVCNAME warning (YELLOW)" >>$BBTMP/notification.$$ ;; green) echo"Subject: Hobbit [${ACKCODE}] $BBHOSTNAME:$BBSVCNAME okay (GREEN)" >>$BBTMP/notification.$$ ;; esac echo "Content-Type: text/html; charset=\"us-ascii\" <BODY BGCOLOR=\"$BBCOLORLEVEL\" BACKGROUND=\"$bbserveraddress/hobbit/gifs/bkg-$BBCOLORLEVEL.gif\" TEXT=\"#FFFFCC\" LINK=\"#00FFAA\" VLINK=\"#FFFF44\">" >>$BBTMP/notification.$$ ;; 1) echo "Subject: Hobbit $BBHOSTNAME:$BBSVCNAME recovered Content-Type: text/html; charset=\"us-ascii\" <BODY BGCOLOR=\"green\" BACKGROUND=\"$bbserveraddress/hobbit/gifs/bkg-green.gif\" TEXT=\"#FFFFCC\" LINK=\"#00FFAA\" VLINK=\"#FFFF44\">" >>$BBTMP/notification.$$ ;; esac cat $BBTMP/temp.$$ >>$BBTMP/notification.$$ echo "<center> Please see: <a href=\"$bbserveraddress/hobbit-cgi/bb-hostsvc.sh?HOSTSVC=$BBHOSTSVCCOMMAS\">Service Details</a> </center>" >>$BBTMP/notification.$$ $sendmail $RCPT <$BBTMP/notification.$$ rm -rf $BBTMP/*.$$ exit 1 Then put the following in your hobbit-alerts.cfg file HOST=* SERVICE=mrtg RECOVERED COLOR=red SCRIPT /home/hobbit/server/ext/html-email-notification.sh <EMAIL ADDRESS> Also, I typically put the HTML alert tests in the EXSERVICE value of my other alerts. That way it doesn't send out the text alerts and only sends out the HTML ones. I am no programmer so there may be better ways to accomplish what I did, but it works great and I am happy with it. Robert Taylor | Senior Manager of Information Systems | Hendrick Automotive Group Mobile Phone (704) 241-4432 | NC Office (704) 566-3380 | NC Fax (704) 566-3341 -----Original Message----- From: Chris Blank [mailto:CBlank at abcgroup.com] Sent: Monday, March 06, 2006 8:39 AM To: hobbit at hswn.dk Subject: [hobbit] HTML Code in Alerts I am using server custom scripts that return HTML code to the hobbit for displaying. One of which is bbmrtg! I upgraded the latest snapshot because of another e-mail stating that it was patched in RC2. I am still getting the following: red Sun Feb 26 03:12:35 2006 &red<A HREF="http://10.32.1.48/cgi-bin/routers2.cgi?rtr=master.cfg&bars=Cami&pa ge=graph&xgtype=dwmy&xgstyle=l2&if=mrtg.10.32.3.229.mult1&xmtype=options ">Traffic Analysis for Multilink 1 Ranson to Orange:</A> In: 333800 bytes/sec (86.5%) Out: 10590 bytes/sec (2.7%) <CENTER> <A HREF="http://10.32.1.48/cgi-bin/routers2.cgi?rtr=master.cfg&bars=Cami&pa ge=graph&xgtype=dwmy&xgstyle=l2&if=mrtg.10.32.3.229.mult1&xmtype=options "><IMG SRC="http://10.32.1.48/cgi-bin/routers2.cgi?rtr=master.cfg&if=mrtg.10.32 .3.229.mult1&xgtype=d&page=image" ALT="Last 24 Hours" BORDER=0></A> </CENTER> <TABLE BORDER=1 ALIGN=CENTER> <TR> <TH COLSPAN=6>Rules</TH> </TR> <TR> <TD>In</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 60.0%</TD> <TD BGCOLOR=yellow>> 60.0%</TD> <TD BGCOLOR=red>> 80.0%</TD> </TR> <TR> <TD>Out</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 60.0%</TD> <TD BGCOLOR=yellow>> 60.0%</TD> <TD BGCOLOR=red>> 80.0%</TD> </TR> </TABLE> How can I get the Hobbit to send everything as HTML formatted e-mails vice text? Chris Blank Network Engineer AB&C Group (304) 725-7050 x 2221 To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Do not get http notifications
by neil.camp＠deca.mil 06 Mar '06

06 Mar '06

Hello all, I do not get notifications when http goes red. These are my rules for hobbit-alerts... $USG_MAIL=MAIL ... REPEAT=15m $SA_PAGE=MAIL ... REPEAT=15m $SA_PHONE=MAIL ... REPEAT=15m $DBA_PAGE=MAIL ... REPEAT=15m $DBA_PHONE=MAIL ... REPEAT=15m $HELP_DESK_MAIL=MAIL ... DURATION>15m REPEAT=30m $PROD=%(hq.*|wp.*) $TB=%(dv.*|tb.*|man.*) HOST=$PROD SERVICE=* COLOR=red $HELP_DESK_MAIL $USG_MAIL $SA_PHONE $SA_PAGE Since I have the SERVICE tag set to "*" shouldn't I be getting a notification? The ALLEVENTS log records the red event, but nothing gets sent out. The relavent bb-hosts entry is included for info... subpage AP-PACK Application-Packages group-compress <H3>Application-Packages</H3> 172.16.x.x x.x.x # http://pcrpap-iiu.x.x 172.16.x.x x.x.x # http://pbeaap-iiu.x.x:7003/decaComs/GenMain.jsp 172.16.x.x x.x.x # http://pbeaap-iiu.x.x:7005/avcm These web servers went red this weekend, but I did not get paged. Any help would be greatly appreciated. Thanks! --neil ManTech DeCA Operations Systems Administrator (804) 734-8353 neil.camp at deca.mil

1 0

[hobbit] using var in bb-hosts?
by brandste＠hebis.de 06 Mar '06

06 Mar '06

[sorry, columns :(, this morning my input devics are a bit dizzy ] Hi all, maybe a not important question... Using bb-hosts with multiple hosts elongates to quiet a view lines ;-) But using different tests, slas, maintenance windows and stuff easy generates a lot of columns...and the line gets hard to read and to edit. (okok....i know about sed ;-) ) Is there a possibility to use variables as in hobbit-alerts? So one could group: $locationA-sla="DOWNTIME=W:0700:0730 REPORTTIME=W:0731:0659 WARNPCT:95.0" $locationA-service="NK:conn ftp ssh imap otherstuff route:router1,router2,router3" 1.1.1.1 usermonitor # http://www.userurl.com $locationA-sla $locationA-service 1.1.1.2 usermonitor2 # http://www.userurl2.com $locationA-sla $locationA-service ... man for bb-hosts says nothing about it. Best Mathias

4 4

[hobbit] Dropping a filesystem as opposed to entire DISK test
by EES2Y＠hscmail.mcc.virginia.edu 06 Mar '06

06 Mar '06

No, because the test data will just get regenerated the text time the hobbit client sends data. Assuming you ARE using the hobbit client, you could modify the hobbit-clients.cfg on your display server to not alarm against those mounted filesystems: DISK /mnt/iso 101 102 HOST=myhost Although I'm not entirely certain that it will work with percentages above 100%, but it'd be worth a shot. -Eric > -----Original Message----- > From: Rob Munsch [mailto:rmunsch at solutionsforprogress.com] > Sent: Thursday, March 02, 2006 6:01 PM > To: hobbit at hswn.dk > Subject: [hobbit] Dropping a filesystem as opposed to entire DISK test > > Along the lines of > > ~/server/bin/bb 127.0.0.1 "drop HOSTNAME ftp" to > permanenly remove all traces of a test. > > > from the FAQ, can i do something like > > "drop HOSTNAME disk /file/system/i/dont/care/about" > > to get rid of something goofy causing an alert (in this case, > a mounted > ISO, which is, of course, at 100%...)? > > -- > Rob Munsch > Solutions For Progress IT > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > >

2 1

[hobbit] sshd notification in syslog
by EES2Y＠hscmail.mcc.virginia.edu 06 Mar '06

06 Mar '06

Three posibilities, off the top of my head: On the client side: 1. Install syslog-ng instead of ksyslogd, and filter on the ip address of your hobbit server. 2. Call your logrotate script (assuming you use one) more often, and/or make it compress your old syslog messages. On the hobbit server side: (this is my preferred option) 1. change your bb-services file ($HOBBIT/server/etc/bb-services) so that ssh test sends the version string. I think that will stop your sshd from complaining. ie.: [ssh|ssh1|ssh2] send "SSH-2.0-OpenSSH_4.1\r\n" expect "SSH" options banner port 22 I think if you disconnect after the version exchange, but before the diffie-helman key exchance, sshd wont log anything. Now, if you arent accepting v2 connections on your clients, you'll have to set up a separate [ssh1] stanza that supplies an ssh v1 string (SSH-1.5-OpenSSH_4.2) and change your ssh statement in your bb-hosts to ssh1 for those machines. Otherwise your logs are just going to be filled with protocol mismatch messages instead. HTH, -Eric Schwimmer Network Engineer UVA HSCS Network Engineering > -----Original Message----- > From: thomas.seglard.enata at cnp.fr > [mailto:thomas.seglard.enata at cnp.fr] > Sent: Thursday, March 02, 2006 6:09 AM > To: hobbit at hswn.dk > Subject: [hobbit] sshd notification in syslog > > > Hello, > > since deployment of hobbit's client on 200 servers (hpux, > aix, sun, linux), I got this message in syslog : > > Feb 13 12:05:44 psa089 sshd[9813]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:06:47 psa089 sshd[9980]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:07:49 psa089 sshd[10006]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:08:17 psa089 sshd[10012]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:08:48 psa089 sshd[10078]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:09:52 psa089 sshd[10564]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:10:55 psa089 sshd[10871]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:11:57 psa089 sshd[10987]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:13:00 psa089 sshd[11060]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:13:20 psa089 sshd[11065]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:14:02 psa089 sshd[11166]: Did not receive > identification string from 158.157.156.91 > Feb 13 12:15:06 psa089 sshd[11297]: Did not receive > identification string from 158.157.156.91 > > Ip address is the one from my hobbit's server > (158.157.156.91). This message do not specify that the ssh > test failed, so I'm not worried about this. The main problem > is the size of syslog and /var is growing rapidly ! Anyone > knows how to prevent this message to be display in syslog ? > Thank you ! > > Thomas Seglard > (I'm using Lotus Notes, what a challenge...) > > Ce message (et toutes ses pieces jointes eventuelles) est > confidentiel et etabli a l'intention exclusive de ses destinataires. > Toute utilisation de ce message non conforme a sa > destination, toute diffusion ou toute publication, totale ou > partielle, est > interdite, sauf autorisation expresse. > L'internet ne permettant pas d'assurer l'integrite de ce > message, CNP Assurances et ses filiales declinent toute responsabilite > au titre de ce message, s'il a ete altere, deforme ou falsifie. > > ***** > > This message and any attachments (the "message") are > confidential and intended solely for the addressees. > Any unauthorised use or dissemination is prohibited. > E-mails are susceptible to alteration. > Neither CNP Assurances nor any of its subsidiaries or > affiliates shall be liable for the message if altered, > changed or falsified. > >

4 4

[hobbit] Collecting RRD from custom script, but no graph
by Syms.MS＠forces.gc.ca 03 Mar '06

03 Mar '06

Thanks, this was the problem! S -----Original Message----- From: Dan Vande More [mailto:bigdan at gmail.com] Sent: 3-Mar-06 12:53 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Collecting RRD from custom script, but no graph Usually the magnifying glass link with no graph is a sign that the RRD was unable to generate. This is normally because of a configuration issue, and I seem to get them when my hobbitgraph.cfg section is wrong. I get the impression that your DEF line is incorrect in your hobbitgraph.cfg file. by using DEF:tr=trackoswex.rrd:tracks:AVERAGE, you are telling the grapher to use the trackoswex.rrd file and "tracks" as the name of your datasource. Is your datasource's name really "tracks"? To find the name of your real datasource from a simple rrd file, do this: rrdtool dump /path/to/your.rdd | less Then search for the <RENAMED_ds> tag. (Should be right near the top.) For instance, one of mine says: <RENAMED_ds> <RENAMED_name> procATemp </RENAMED_name> <RENAMED_type> GAUGE </RENAMED_type> <RENAMED_minimal_heartbeat> 600 </RENAMED_minimal_heartbeat> <RENAMED_min> 0.0000000000e+00 </RENAMED_min> <RENAMED_max> NaN </RENAMED_max>  <RENAMED_last_ds> UNKN </RENAMED_last_ds> <RENAMED_value> 6.4550000000e+03 </RENAMED_value> <RENAMED_unknown_sec> 0 </RENAMED_unknown_sec> </RENAMED_ds> So my datasource's name is procATemp. Note that this only works for a simple .rrd file. Some rrds contain several data sources, so don't let this mislead you. HTH, Dan On 3/3/06, Syms.MS at forces.gc.ca <Syms.MS at forces.gc.ca> wrote: > Hi, folks- > > I wrote a custom data collection script to send varying data to hobbit- hobbit receives it ok, displays the status properly and populates an rrd to store the data, but then doesn't graph it. I do get the graph name in a text hyperlink beside the magnifying glass icon, but that's it. > > I've done a similar thing with hobbit on a debian box before without a problem, but now that I'm running it on an aging Redhat Advanced Server 3 box, it's giving me some trouble. > > The configuration bits: I'm running rrdtool 1.0.48, gcc 2.3.3 and Hobbit 4.1.2p1. > > The output line from my script: > ${BB} ${BBDISP} "status ${MACHINE}.trackoswex ${COLOR} `date` > > trackoswex: ${TRACKS} > > " > > In hobbitlaunch.cfg, I'ved added > [trackoswex] > ENVFILE /usr/local/hobbit/client/etc/hobbitclient.cfg > NEEDS hobbitd > CMD /usr/local/hobbit/server/ext/gccs/trackoswex.sh > LOGFILE $BBSERVERLOGS/hobbitclient.log > INTERVAL 30m > > From hobbitgraph.cfg > [trackoswex] > TITLE OSWEX Tracks > YAXIS Number of tracks > DEF:tr=trackoswex.rrd:tracks:AVERAGE > AREA:tr#00CCCC:Tracks > COMMENT:These are the number of tracks received in the last 120 minutes.\n > GPRINT:tr:LAST: \: %5.1lf (cur) > GPRINT:tr:MAX: \: %5.1lf (max) > GPRINT:tr:MIN: \: %5.1lf (min) > GPRINT:tr:AVERAGE: \: %5.1lf (avg)\n > > > From hobbitserver.cfg > TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tcp,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sendmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,trackoswex=ncv" > > # This defines which RRD files to include on the "trends" column webpage, > # and the order in which they appear. > GRAPHS="la,disk,inode,qtree,memory,users,vmstat,iostat,tcp.http,tcp,netstat,mrtg::1,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,trackoswex" > > NCV_trackoswex="trackoswex:GAUGE" > > > Any help would be appreciated! > > tks > > S > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0