- Xymon - Xymon mailman web

[hobbit] alerting alternate pagesets
by dstuffle＠deltafaucet.com 07 Mar '05

07 Mar '05

Thanks for the info. Actually, I can see how defining alerts for pagesets could cause page rules to conflict since you could have hosts in multiple pagesets. I don't know, may not even be worth it... BTW, the March archives for this list aren't showing up at http://www.hswn.dk/hobbiton/. Thanks David stuffle -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sunday, March 06, 2005 12:08 PM To: hobbit at hswn.dk Subject: Re: [hobbit] alerting alternate pagesets On Sun, Mar 06, 2005 at 09:04:24AM -0500, Stuffle, David wrote: > From what I can tell, defining alerts such as "PAGE=os/aix SERVICE=*" > does not work for alternate pagesets. Does the "PAGE" keyword in > alert rules only work on pages in the host file and not the alternate > pagesets? Yes, the PAGE setting in hobbit-alerts.cfg uses the default pagename from bb-hosts - it doesn't know about the alternate pagesets. > I have set up alternate pagesets for AIX, Linux, and Windows, and it > would be nice to be able to define alerts based on these pages. So far, the alternate pagesets have been purely a "display" thing - they only exist in the "mind" of bbgen when creating webpages. The hobbit daemon doesn't know about them. So it's not as easy as it seems to implement this. I'll try to come up with a way of doing it, but it definitely will not be in the upcoming release. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

1 0

DOWNTIME in bb-hosts not working for client-based test
by idxman01＠gmail.com 07 Mar '05

07 Mar '05

Hello, So this weekend was the first time I've had hobbit running during a reboot of two monitored servers and while it didn't alert during the specified DOWNTIME for network tests, it started sending purple messages 30m later when the client-based tests weren't reporting. The bb-hosts entry looks something like: ip host # DOWNTIME:0:0400:0445 ftp ssh etc.. The server reboots at 4am and takes about 12-15 minutes to get moving again. (ibm h70) So a cron starts the cluster at 4:30 which in turn starts the bb client. Bug or something to change in my config? Thank You, -r

3 3

[hobbit] DOWNTIME in bb-hosts not working for client-based test
by dhd733＠yahoo.se 07 Mar '05

07 Mar '05

Every evening I shutdown my bb-client server. I disable all tests. This morning I didn't start the machine before the disabletime runout. I thought I should test the DOWNTIME i bb-hosts, so I put this in: DOWNTIME=*:1800:0700 The connectiontests (conn, ftp and telnet) becam blue but the local tests (cpu, disk....) still was purple. I think this is the same as Robert got. Regards Lars Andy France <Andy at zespri.com> wrote: > ---------- > Från: Andy France[SMTP:ANDY at ZESPRI.COM] > Skickat: den 7 mars 2005 02:51:25 > Till: hobbit at hswn.dk > Ämne: Re: [hobbit] DOWNTIME in bb-hosts not working for client-based test > Automatiskt vidarebefordrat av en regel > > > > > > > See comment below... Robert Edeker wrote on 07/03/2005 14:44:26: > Hello, > So this weekend was the first time I've had hobbit running during a > reboot of two monitored servers and while it didn't alert during the > specified DOWNTIME for network tests, it started sending purple > messages 30m later when the client-based tests weren't reporting. > The bb-hosts entry looks something like: > ip host # DOWNTIME:0:0400:0445 ftp ssh etc.. the manpage for bb-hosts says this should read DOWNTIME=0:0400:0445 > The server reboots at 4am and takes about 12-15 minutes to get moving > again. (ibm h70) So a cron starts the cluster at 4:30 which in turn > starts the bb client. > Bug or something to change in my config? > Thank You, > -r HTH, Andy. ##################################################################################### This email is intended for the person to whom it is addressed only. If you are not the intended recipient, do not read, copy or use the contents in any way. The opinions expressed may not necessarily reflect those of ZESPRI Group of Companies ('ZESPRI'). While every effort has been made to verify the information contained herein, ZESPRI does not make any representations as to the accuracy of the information or to the performance of any data, information or the products mentioned herein. ZESPRI will not accept liability for any losses, damage or consequence, however, resulting directly or indirectly from the use of this e-mail/attachments. ##################################################################################### To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] Odd alerts behavior
by Kevin.Hanrahan＠novainfo.com 06 Mar '05

06 Mar '05

I believe I found it and it was self induced as usual. It was a stinkin typo! I had this: $IDG=%qa-server1|iw-server|econex-dc02|biz-mts-s2|via-ktest-s1|iw-tsite-s1| via-cart-s1 Instead of this: $IDG=%qa-server1|iw-server|econex-dc02|biz-mts-s2|via-ktest-s1|iw-tsite-s1|v ia-cart-s1 That one space at the end did it so my advice to all.....don't do this!! Thanks KEvin -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sunday, March 06, 2005 5:23 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Odd alerts behavior On Sun, Mar 06, 2005 at 05:03:32PM -0500, Kevin.Hanrahan at novainfo.com wrote: > When I get to a certain amount of entries, (I haven't narrowed it down > to how many yet), it appears to double all entries for all servers so > that I now get TWO emails for each event. This is also reflected in > the "Info" area for all servers! > > Is there a diagnostic I can use to see if I am making a syntax or > proceedure error? This is driving me nuts! Add "--cfid" to the hobbitd_alert commandline in hobbitlaunch.cfg. This will add "[cfid:N]" to the e-mail subject; "N" is the linenumber in the config file that triggered the alert. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this email and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this email. If you have received this email in error, please notify us immediately by replying to the message and delete the email from your computer. This e-mail is and any response to it will be unencrypted and, therefore, potentially unsecure. Thank you. NOVA Information Systems, Inc.

1 0

Odd alerts behavior
by Kevin.Hanrahan＠novainfo.com 06 Mar '05

06 Mar '05

I am getting some very odd alerts behavior. I have everything setup using macros like this: $AV=%sserver1|server2|server3|server4|server5 $SYSADMIN=kevin.hanrahan at domain.com HOST=$AV MAIL $SYSADMIN COLOR=red EXSERVICE=msgs,cpu REPEAT=30m RECOVERED MAIL $SYSADMIN COLOR=red SERVICE=cpu DURATION>20 REPEAT=30m RECOVERED MAIL $SYSADMIN COLOR=purple REPEAT=1h RECOVERED I have this repeated for multiple groups of servers. I have been adding one server group in the HOST definitions one by one and all appeared fine. Also checking the "Info" column for each server I saw the proper alerts definition reflected there. When I get to a certain amount of entries, (I haven't narrowed it down to how many yet), it appears to double all entries for all servers so that I now get TWO emails for each event. This is also reflected in the "Info" area for all servers! Is there a diagnostic I can use to see if I am making a syntax or proceedure error? This is driving me nuts! Thanks KEvin Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this email and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this email. If you have received this email in error, please notify us immediately by replying to the message and delete the email from your computer. This e-mail is and any response to it will be unencrypted and, therefore, potentially unsecure. Thank you. NOVA Information Systems, Inc.

2 1

favicon
by discardable1＠gmail.com 06 Mar '05

06 Mar '05

Has anyone concidered making a favicon which reflected the general state of the monitored sites? Robin

1 0

alerting alternate pagesets
by dstuffle＠deltafaucet.com 06 Mar '05

06 Mar '05

Hello, >From what I can tell, defining alerts such as "PAGE=os/aix SERVICE=*" does not work for alternate pagesets. Does the "PAGE" keyword in alert rules only work on pages in the host file and not the alternate pagesets? I have set up alternate pagesets for AIX, Linux, and Windows, and it would be nice to be able to define alerts based on these pages. Thank you DavidThis email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

3 2

[hobbit] Log sizes
by Kevin.Hanrahan＠novainfo.com 06 Mar '05

06 Mar '05

Nice! I will check it out...and I may have a few questions later. Thanks KEvin -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sunday, March 06, 2005 12:02 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Log sizes On Sun, Mar 06, 2005 at 11:41:46AM -0500, Kevin Hanrahan wrote: > OK, but I thought I saw a reference in a past mail to something called > pagesets. Is this something that I can use to build different > views...say, for instance, an executive view to show critical apps > that would take systems previously defined under other system-subsets > and combine them for an overall application view? Is there info in the > man pages? Yes, the idea with pagesets is that you can group your hosts any way you like - so that the view people have of the hosts is customized to the way they work, instead of having a single view of all hosts. E.g. where I work there is one view where we group servers by customer - this is used by the people responsible for the customer contact - and another view where the servers are grouped by OS - this is used by our second-line support group. Pagesets have existed for a long time, and are handled entirely by the bbgen tool. There's a description of this in the bbgen man-page (look for the "Building alternate pagesets" section. Regards, Henrik > > KEvin > > -----Original Message----- > From: Henrik Stoerner [mailto:henrik at hswn.dk] > Sent: Sunday, March 06, 2005 11:22 AM > To: hobbit at hswn.dk > Subject: Re: [hobbit] Log sizes > Importance: Low > > On Sun, Mar 06, 2005 at 11:14:28AM -0500, Kevin Hanrahan wrote: > > I can probably say it is no bug. I do have a few hosts listed > > twice. > > I was trying to build different views for different departments. I now > > think this is the wrong approach and I am supposed to use pagesets??...is > that correct? > > It's allright to have hosts listed twice, as long as only one host has > the network definitions set. > > I don't know how well tools like "bb-fetch" handles hosts that are > defined twice; perhaps they will pull the status twice and send both > reports off to Hobbit, which would also trigger this message. > > > Henrik > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > -- Henrik Storner To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this email and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this email. If you have received this email in error, please notify us immediately by replying to the message and delete the email from your computer. This e-mail is and any response to it will be unencrypted and, therefore, potentially unsecure. Thank you. NOVA Information Systems, Inc.

1 0

[hobbit] Log sizes
by Kevin＠ewormhole.com 06 Mar '05

06 Mar '05

OK, but I thought I saw a reference in a past mail to something called pagesets. Is this something that I can use to build different views...say, for instance, an executive view to show critical apps that would take systems previously defined under other system-subsets and combine them for an overall application view? Is there info in the man pages? KEvin -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sunday, March 06, 2005 11:22 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Log sizes Importance: Low On Sun, Mar 06, 2005 at 11:14:28AM -0500, Kevin Hanrahan wrote: > I can probably say it is no bug. I do have a few hosts listed twice. > I was trying to build different views for different departments. I now > think this is the wrong approach and I am supposed to use pagesets??...is that correct? It's allright to have hosts listed twice, as long as only one host has the network definitions set. I don't know how well tools like "bb-fetch" handles hosts that are defined twice; perhaps they will pull the status twice and send both reports off to Hobbit, which would also trigger this message. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

[hobbit] Log sizes
by Kevin＠ewormhole.com 06 Mar '05

06 Mar '05

Thanks, I can probably say it is no bug. I do have a few hosts listed twice. I was trying to build different views for different departments. I now think this is the wrong approach and I am supposed to use pagesets??...is that correct? KEvin -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sunday, March 06, 2005 1:46 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Log sizes Importance: Low On Sat, Mar 05, 2005 at 06:02:24PM -0500, Kevin.Hanrahan at novainfo.com wrote: > Henrik, > I was looking at the size of the logs and some of them are quite > large. The largest is the larrd-status.log which has lots of entries like this: > > 2005-03-05 17:53:37 RRD error updating > /home/hobbit/data/rrd/satlcwr01/disk,E.rrd: illegal attempt to update > using time 1110063217 when last update time is 1110063217 (minimum one > second > step) > 1) what does this mean? This means that an update of the RRD file failed. The actual text describing the error is provided by the rrdtool library - in this case, it refused to update the file because it's been less than one second since the last update. So how can it happen that it tries to update the same RRD file twice in a second ? I've seen it mostly with data from network tests, e.g. if you happen to have the same host or test listed twice in your bb-hosts file. With client reports (cpu, disk, ..) it can happen if you have two clients reporting with the same name. Or it may be a bug in the hobbit larrd handler, so it mistakenly sees the same data twice. > 2) Other than troubleshooting, are the logs used for any other function? No. > Can I delete them? Yes, but they are kept open by the various hobbitd* processes running. hobbitlaunch and hobbitd will re-open the logs when you send them a SIGHUP, but the various hobbitd_* modules don't. I'll get that fixed. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1