- Xymon - Xymon mailman web

Changing interval of tests
by jborissr＠gmail.com 11 Apr '16

11 Apr '16

I have searched for changing the interval time between tests. I have a system I need to monitor and they want to have it checked for connectivity every minute. I only need it for that host. I can't find anywhere in the documentation which states how oftent the tests are run or how you change the interval. -- John J. Boris, Sr.

3 3

Disk space test ignored
by Scot.Kreienkamp＠la-z-boy.com 08 Apr '16

08 Apr '16

Hi everyone, I recently upgraded from 4.3.21 to the Terabithia RPM's for 4.3.27. I copied this config file verbatim (except for server name) from my old server to my new server: HOST=innocent.in.hq PORT "LOCAL=%([.:]80)$" MIN=1 TRACK=WWW "TEXT=80-WWW" PORT "LOCAL=%([.:]55000)$" MIN=0 color=red TRACK=RPC_Clients "TEXT=55000-RPC Client Access Sessions" SVC MSExchangeADTopology status=started SVC MSExchangeIS status=started SVC MSExchangeMailboxAssistants status=started SVC MSExchangeRPC status=started SVC MSExchangeSA status=started DISK J 15728640U 10485760U DISK L 15728640U 10485760U DISK M 15728640U 10485760U DISK N 15728640U 10485760U DISK S 15728640U 10485760U DISK T 15728640U 10485760U DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE However, the disk tests are now alerting on 95% full disk instead of on 10 gigs remaining space: M (95% used) has reached the PANIC level (95%) To further troubleshoot I commented out all the disk lines and added this entry: DISK * 15728640U 10485760U That didn't make any difference, the disk is still alerting for 95% full. It is parsing and applying the configuration because the port and SVC information is showing up in the web, so I can't understand why the disk test isn't working. This is a key feature for us as we have many servers with multi-terabyte drives, so alerting at percentages doesn't work nearly as well. The client has not been touched, only the server. Anyone have any ideas? Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy> [cid:lzbVertical_hres.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

3 10

how to write custom script for Xymon
by sirbakash＠gmail.com 08 Apr '16

08 Apr '16

Hello, I will appreaciate it if someone can tell me how to write custom scripts to monitor Linux process through Xymon (i.e) zombie processes, database processes. -Balash

3 2

xymon master-slave server
by cleaver＠terabithia.org 08 Apr '16

08 Apr '16

On Tue, April 5, 2016 10:59 am, eli wrote: > I am planning to build secondary xymon server as backup, is there good > method to sync between them and not both of them not to send alert same > time. if any one implement already I would like to hear feedback. > thanks,Eli There are a few different strategies one can use here, all depending on what kind of internal SLA you're expecting, how much bandwidth you're able to use, and whether you need identical systems or not. The simplest solution (but most bandwidth intensive) is to run the two servers as stacks in parallel and simply not alert on the secondary one. You can use Linux-HA or any of the more advanced cluster software to determine up/down status between the two boxes and take over when the other isn't reachable. You can configure your clients to send reports to both xymon servers at the same time ($XYMONSERVERS) and you've in effect got two complete systems. (xymond_distribute can be used to pass disable/enable messages over). The drawback is a) double the bandwidth use, and b) losing your acknowledgements and alert suppression when the failover occurs. Alternatively, you can keep the second server on a cold standby, regularly getting rsync's from the primary one of the checkpoint files for both xymond and xymond_alert. This has the advantage of the secondary system not being in use when it doesn't need to be. When failover happens, you start up xymond on the slave, it reads from the last checkpoint you'd gotten (I'd advise increasing frequency to something like every few mins, depending on your needs) and starts from there. The drawback there is that you don't have graphing/history at all, and you're missing the last few minutes of changes. If you have heavy network bw available to you, things like DRBD can be used to perform a complete synchronization of *saved* data between the servers. Henrik had proposed a Xymon Swarm concept at http://lists.xymon.com/pipermail/xymon/2015-November/042684.html , which may also help you evaluate your site's needs. Really, there are lots of different ways to conceptualize "high availability" for your monitoring system... I'd advise to keep things as simple as possible so as to eliminate failure points. In our case, we've had two live stacks running in parallel that (mostly) submit into a ticket system, which can de-dupe incoming host+svc alerts automatically, which mostly defines the problem out of existence. The things directly emailed to us were of lower frequency, so we were fine with duplicate emails at first. When that got to be too annoying, we left xymond_alert enabled on the second system but used Linux-HA to simply disable Postfix when it wasn't master. When a failover occurred, the startup script was modified to clear out the local outbound queue before starting the service up. Xymon thus never had to care about whether it was primary/secondary at all. Hope that helps a little bit. Regards, -jc

2 1

TCPtest open connection issue
by Phil.Crooker＠orix.com.au 08 Apr '16

08 Apr '16

I'm having a problem with a spurious error reported by xymonnet on upgrading to 4.3.27: Error output: TCPtest error 1 seen on open connection for zo.cvs TCPtest error 1 seen on open connection for °|.squid TCPtest error 1 seen on open connection for v.squid TCPtest error 1 seen on open connection for s.squid If I substitute an earlier version of xymonnet (4.3.21), the error disappears. I put the 4.3.27 version back in, restart, and the errors return. There is nothing wrong with the hostname and these tests are not producing any 'real' errors. I am testing for a squid service on 5 hosts and cvs on one. This has been reported in the dev forum, but has no published resolution: https://sourceforge.net/p/xymon/mailman/message/34900464 Has anyone else seen this issue? thanks, Phil<mailto:FirstName.LastName at orix.com.au>

2 3

Xymon alert emails....SSH...SQL databases
by sirbakash＠gmail.com 07 Apr '16

07 Apr '16

Hi I'll like to know if Xymon keep a copy of the generated alert messages on the server and where? Also, I'll like to know if I need to create SSH key for Xymon user on the server and the client server. And is there a custom script to monitor SQL databases? Thanks, Bakes

3 2

[PATCH] Fix debian init script problem for Container based virtualization
by ml＠jjim.de 07 Apr '16

07 Apr '16

Hi, I just now submitted a debian bug for this because I hope that it gets fixed in Debian stable, but I also wanted to put this on the list (the bug does not have an ID yet, I will put it in the thread). I post this here, because there is an init-script in the xymon-sources debian/ directory (debian/xymon-client.init). I discovered then when having a debian host where (in my case) LXC virtual machines run, it is impossible to start the xymon-client there, when another xymon-client is already running in one of the containers. This seems to be, because the invocation of start-stop-daemon does only check the process name. The problem can be resolved by adding the --pidfile argument to the start-stop-daemon invocations so that start-stop-daemon does not only check the process name but also the PID. During a quick test, the attached patch was fixing the problem. Kind Regards, /jbn -- Joel Brunenberg - Troisdorf PGP: 0xAD25981C

2 4

status+ in custom tests
by neilsimmonds1808＠gmail.com 07 Apr '16

07 Apr '16

Hi all, Is there any way on the Xymon server to check if any custom tests have a validity timeout that is not default because they have a parameter on the status command setting a custom validity. I'd prefer to do it from the server as it would be very time consuming to have to log onto every client to check it. I know we have some that aren't using the default 30 minutes but I really need to identify them due to other people writing custom scripts and apparently not understanding what status+**** does. Thanks, Neil.

3 3

DNS test interaction with 0.0.0.0
by john.thurston＠alaska.gov 06 Apr '16

06 Apr '16

I have a couple of name servers which are not pingable. I have them in my hosts.cfg as follows: > 10.10.10.10 ns1-int.foo.com # noconn dns=ns1.foo.com > 0.0.0.0 ns2-int.foo.com # noconn dns=ns2.foo.com The first returns a green dns test result. The second returns a red "Service dns on ns2-int.foo.com is not OK : Service unavailable." I can't figure out why. I don't want to embed ip addresses in my hosts.cfg, and I can't think why I should need to. There is nothing telling when I run the test interactively with: xymoncmd xymonnet --no-update --debug ns1-int.foo.com nor for ns2-int.foo.com When I snoop the interface while doing the above tests, the differences are significant: For ns1-int, I see xymon lookup ns1-int on the normal name server. Then I also see it request ns1.foo.com from ns1-int.foo.com and get the correct response. I'm not sure why the reverse lookup is there. > xymona -> d.foo.com DNS C ns1-int.foo.com. Internet Addr ? > d.foo.com -> xymona DNS R ns1-int.foo.com. Internet Addr 10.10.10.10 > xymona -> ns1-int.foo.com DNS C ns1.foo.com. Internet Addr ? > ns1-int.foo.com -> xymona DNS R ns1.foo.com. Internet Addr 192.168.123.1 > xymona -> d.foo.com DNS C 10.10.10.10.in-addr.arpa. Internet PTR ? > d.foo.com -> xymona DNS R 10.10.10.10.in-addr.arpa. Internet PTR ns1-int.foo.com. For ns2-int, however, the result is much simpler. I see xymon lookup ns2-int on the normal name server. . . . and then nothing. > xymona -> d.foo.com DNS C ns2-int.foo.com. Internet Addr ? > d.foo.com -> xymona DNS R ns2-int.foo.com. Internet Addr 10.20.20.20 When I change the line in hosts.cfg for ns2-int from 0.0.0.0 to an ip address, it works fine. What is going on here? Why isn't the DNS test using the address it has obviously retrieved from DNS? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

2 4

adding a SVCS column for non-Windows clients?
by rlhamil2＠gmail.com 06 Apr '16

06 Apr '16

Solaris 10 and later, and Mac OS X have a more or less similar* concept to Windows services: processes that are kept running by svc.startd (Solaris) or launchd (OS X). It seems to me not unreasonable for them to report those in the same column, and to be able to use at least some of the same syntax for the SVC line (status={started|stopped} only, since checking for the equivalent of startup= would be at best unduly tedious; i.e. neither svcs -a (Solaris) nor launchctl list (OS X) actually report whether the setting of a "service" is such that they'll be enabled at next reboot). Here's the thing: I'm not clear what actually evaluates the SVC expression against the client data; does that happen on the server, or on the client? In other words, what magic do I need to know to write a client-side script that will not only report the data, but do whatever its part of the job is in terms of either formatting it so the server can evaluate it, or so the client can obtain the configuration info from the server, as applicable? * I realize Windows services imply a bit more than just processes managed by the OS; but I don't think those differences are relevant to what I'd like to do.

2 1