- Xymon - Xymon mailman web

Scan xymon with Coverity
by feld＠feld.me 06 Feb '15

06 Feb '15

Can we get the Xymon project signed up for Coverity and get the source code run through it? It would be nice to see a list of defects so that we can motivate users to start poking at the codebase and get some patches submitted to further solidify Xymon. https://scan.coverity.com/ Thanks!

1 0

Have network tests report yellow instead of red?
by laurent.royer＠autosgm.com 06 Feb '15

06 Feb '15

Hello, What a pitty. Some host like webapps are important but not so much in the IT organisation. So when they go red and propage as red, it's too much comparing the importance of other hosts in the group... Regards, Laurent Royer?

3 2

Nitpicking / minor bug
by mailinglists＠websitemanagers.com.au 06 Feb '15

06 Feb '15

I just noticed (when referring to the xymon man pages that nobody ever reads): https://www.xymon.com/help/manpages/ At the bottom of the page: Miscellaneous programs Running Xymon tasks (xymonlaunch) Xymon communiations program (xymon) Note, the type in the word communiCations Regards, Adam -- Adam Goryachev Website Managers www.websitemanagers.com.au

3 3

NetApp E-Series
by everett.vernon＠gmail.com 06 Feb '15

06 Feb '15

Hi all About to knock together a script to pull some useful info out of the NetApp E-Series (AKA LSI storage) using the Santricity CLI. Before I reinvent the wheel, has anybody done something like this yet and prepared to share their code? If not, anybody interested in this? Regards Vernon -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

2 1

required Information about the Xymon/Hobbit
by deepanshuarya45＠gmail.com 06 Feb '15

06 Feb '15

Hi Team, Greetings for the day! hope you are doing good. I need some information about Xymon/Hobbit before using your product. So please provide the required information about the following points. 1) Ability to monitor cloud servers and virtual machines. 2) Capability of large scale server monitoring 2-3k servers. 3) is it supports to LDAP authentication. 4) Default ports usage and other security compliance 5) Support to SSL and HTTPS encryption 6) Reports download functionality is available or not? 7) Designing of Dashboards, alarms - event opening and event clear alarms is available or not? -- Thanks & Regards, Deepanshu Arya Ph.- +91 9560685006

2 2

$CFID problem
by colin.coe＠gmail.com 06 Feb '15

06 Feb '15

Hi all I;ve been trying to track done why some events cause two identical alerts to be sent. To help debugging, I added the CFID variable to the alerts and the value was 151. Line 151 is the "include" line :) Any chance of getting Xymon to give the line number of the include file? Thanks

2 2

monitoring multiple log files on a single syslog server
by jlaidman＠rebel-it.com.au 06 Feb '15

06 Feb '15

There's always a way (it's open source after all) but nothing simple comes to mind. If it were me, I would create my own log monitoring subsystem and have it report into Xymon after working out $MACHINE from the logfile (or some configuration). You might be able to do this sort of thing using swatch, sawmill or splunk. Another option might be to create a job that runs your own instance of logtetch after setting MACHINE the way you want it. Something like this: #!/bin/sh [ "$XYMON" ] || { echo "Plese run using xymoncmd"; exit 1; } MACHINEDOTS="Server09" LOGFILE="/opt/syslogs/$MACHINE/apache2.error.log" LOGFETCHCFG=/tmp/logfetch.$MACHINE.cfg LOGFETCHSTATUS=/tmp/logfetch.$MACHINE.status { echo "client/apachelog" $MACHINEDOTS.$OSTYPE" echo "[msgs:$LOGFILE]" $XYMONHOME/bin/logfetch $LOGFETCHCFG $LOGFETCHSTATUS > $TEMPFILE } | $XYMON $XYMSRV @ Note that the logfetch config file (/tmp/logfetch.$MACHINE.cfg) is something you'd need to fill out yourself, probably with the relevant entry from your client-local.cfg file. Alternatively, you could create this file dynamically from queries to the server. You can get the "log:" entries for Server09 by issuing the following command (from any Xymon client, not just Server09): $XYMON $XYMSRV "client/bogus Server09.bogos" But first you'd have to have the "log:" entry in client-local.cfg moved from [syslogserver] to a new [Server09] section if it doesn't already exist. >From this, you could (optionally) grep out the "apache2.error.log" entries, drop them directly into $LOGFETCHCFG for the server, and then the logfetch command can go to work. If the Server09 server already has its own entry in client-local.cfg, then you don't want Server09 trying to do the log processing that syslogserver is already doing. So you could create a special entry for [syslogserver-Server09] and adjust the script accordingly. I hope that all makes sense. J On 30 December 2014 at 05:32, usa ims via Xymon <xymon at xymon.com> wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > ---------- Forwarded message ---------- > From: usa ims <usaims at yahoo.com> > To: xymon at xymon.com > Cc: > Date: Mon, 29 Dec 2014 10:29:42 -0800 > Subject: monitoring multiple log files on a single syslog server > Greetings, > > I'm monitoring multiple log files on a single syslog server. > > I have a syslog server that stores the apache error logs in a server named > ‘syslogserver’ looking for the word ‘CurlTransfer’. > When xymon finds the word ‘CurlTransfer’ it sends an alert but it alerts > that it is coming from ‘syslogserver’ and the guys are complaining that > ‘nongreen.html’ is reporting the servername rather than the actual name of > the server where the error originated from. > > Is there a way if xymon finds the word ‘CurlTransfer’ in > ‘/opt/syslogs/Server09/apache2.error.log’, to get it to report in the > ‘msgs’ column that it came from ‘Server09’? > > > Here is my current config for this. > > [syslogserver] > log:/opt/syslogs/Server09/apache2.error.log:4096 > log:/opt/syslogs/Server10/apache2.error.log:4096 > log:/opt/syslogs/Server11/apache2.error.log:4096 > log:/opt/syslogs/Server12/apache2.error.log:4096 > log:/opt/syslogs/Server13/apache2.error.log:4096 > > I have configured my analysis.cfg with: > > HOST= syslogserver > LOG /opt/syslogs/Server09/apache2.error.log CurlTransfer COLOR=red > LOG /opt/syslogs/Server10/apache2.error.log CurlTransfer COLOR=red > LOG /opt/syslogs/Server11/apache2.error.log CurlTransfer COLOR=red > LOG /opt/syslogs/Server12/apache2.error.log CurlTransfer COLOR=red > LOG /opt/syslogs/Server13/apache2.error.log CurlTransfer COLOR=red > > > Thanks in advance. > > usaims > >

1 0

DRBD monitoring
by adam＠websitemanagers.com.au 06 Feb '15

06 Feb '15

I've spent some time using DRBD over the past few years, and have been slowly fixing how Xymon monitors that. I was hoping to share my work on xymonton, but while I've created an account, I'm not familiar with a dokuwiki, or how to create pages/etc. In any case, I'm not finished yet, so I'll post what I have so far, and perhaps someone else can upload for me, and/or discuss specific improvements.... One specific issue is that I am still using "Hobbit", rather than xymon, so a number of variable names, filenames, etc should probably be updated. The first tool I use is a perl script "check-drbd", I think I borrowed this from a nagios plugin or similar, but I have made significant modifications to it since then (see attached) The second tool is a shell script called drbd, this simply calls the check-drbd, and then reports the data back to xymon, as both a status message (to display on screen) as well as a data message (to save into the rrd files). Also, the file for the client to actually run the script clientlaunch_drbd.cfg Finally, on the server side, we have the graph definition for the hobbitgraph.d directory, which allows to see graphs of the data over time (very useful) in the file hobbitgraph_drbd.cfg Some things I would like to change/fix are: 1) to limit the graph to only one drbd device per graph. (There aren't enough colours, and the graphs are too messy to read anyway). 2) be able to graph all drbd devices on one graph, but only one of the values. eg, see all dw values on a single graph 3) be able to graph the sum of all the values, eg, similar to 2 (so only all the dw values at once) but stacked so I can see each individual colour as well as the total I'm not sure the best way to make the above happen. I suppose I could create another dozen graph definitions, but I'm hoping there might be a better way. Finally, now that the data is being added to the rrd, when I eventually upgrade to a current release, I'll be able to do alerts based on the values (eg, oos is too high - or non zero basically, or dw is too high and therefore users will be seeing slow performance, etc). Comments, suggestions, etc, greatly appreciated. If nothing else, I hope this will be useful to someone else. Effectively, this will display the data on the page like this (I have 18 drbd devices configured, 0 to 18 skipping 12): Fri Feb 6 13:27:03 AEDT 2015 DRBD OK 0 [OK], 1 [OK], 2 [OK], 3 [OK], 4 [OK], 5 [OK], 6 [OK], 7 [OK], 8 [OK], 9 [OK], 10 [OK], 11 [OK], 13 [OK], 14 [OK], 15 [OK], 16 [OK], 17 [OK], 18 [OK] drbd0 ns:59995764 nr:587 dw:59996747 dr:13440670 al:4315 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd1 ns:51177927 nr:1147 dw:51179332 dr:50184219 al:10914 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd2 ns:10390318 nr:0 dw:10390318 dr:17007325 al:2637 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd3 ns:473465956 nr:17032 dw:473475648 dr:1713963052 al:1850433 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd4 ns:5958452 nr:124 dw:5958580 dr:5663626 al:212 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd5 ns:413987326 nr:1531 dw:413989393 dr:245985408 al:158935 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd6 ns:17089136 nr:251116 dw:17342180 dr:116599072 al:1211 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd7 ns:0 nr:0 dw:0 dr:5662844 al:0 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd8 ns:63714682 nr:563 dw:63715479 dr:23877551 al:6582 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd9 ns:186293485 nr:362 dw:186293990 dr:480836789 al:59641 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd10 ns:59817651 nr:366 dw:59818057 dr:27584750 al:12039 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd11 ns:0 nr:0 dw:0 dr:664 al:0 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd13 ns:726120198 nr:474 dw:726126470 dr:1029163787 al:3647825 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd14 ns:783916639 nr:676 dw:783924754 dr:1103495545 al:4256267 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd15 ns:166529805 nr:0 dw:166529921 dr:83674337 al:139032 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd16 ns:0 nr:0 dw:0 dr:5661172 al:0 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd17 ns:1625540 nr:0 dw:1625540 dr:6601790 al:82 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 drbd18 ns:56091131 nr:705 dw:56091944 dr:37456802 al:77287 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 oos:0 I was going to include the image, but it is 241k... take a look at: graph image of drbd stats Note, all attachments are tar + bzip2, reducing the original 44k down to 4k... Regards, Adam -- Adam Goryachev Website Managers Ph: +61 2 8304 0000 adam at websitemanagers.com.au Fax: +61 2 8304 0001 www.websitemanagers.com.au

1 0

Contents of root's crontab in ps list?
by jlaidman＠rebel-it.com.au 05 Feb '15

05 Feb '15

On 05/02/2015 2:30 PM, "John Palys" <johnpalys at schoolpathways.com> wrote: > A simple script. Same script is running on all servers, only some have the issue reported. Probably because its only sometimes that the xymon client script runs at the same time as the cron job. You'll probably find that they drift out of sync over time, and different servers will be showing this phenomenon at different times, because the xymon client script runs slightly later each time (ie not exactly every 5 minutes). > LOGFILE=/tmp/cron_list.log > > cat /var/spool/cron/root > /tmp/cron_list.log snip (why not use $LOGFILE here) > cat /var/spool/cron/cworks >> /tmp/cron_list.log > RESULT=`cat $LOGFILE` > > > LINE="status $MACHINE.$TEST $COLOR `date` > > $RESULT" > > $XYMON $XYMSRV "$LINE" This is the problem. The contents of cron_list.log (ie a copy of the crontab) is put into $RESULT and in turn into $LINE. Then the text is given to the xymon command as a parameter, for all to see in ps output. As soon as you use backticks, you're going to get into trouble. You can't do anything useful with $RESULT without its contents appearing on a command line in ps output, should it happen to run at the same time. Instead, use the alternative form of running xymon, by specifying a parameter of "@" and feeding the message on stdin. Like so: LINE="status $MACHINE.$TEST $COLOR `date` { echo "$LINE"; echo; cat $LOGFILE; } | $XYMON $XYMSRV "@" And get rid of the line that sets $RESULT cos you don't need it anymore. J Jeremy, A simple script. Same script is running on all servers, only some have the issue reported. The xymon ../ext/crontab.sh which sends the output TO the xymon server is identical to the mis-behaving servers. -------------------- #!/bin/bash LOGFILE=/tmp/cron_list.log cat /var/spool/cron/root > /tmp/cron_list.log if [ -f /var/spool/cron/cworks ]; then echo "================================" >> /tmp/cron_list.log cat /var/spool/cron/cworks >> /tmp/cron_list.log else echo "" fi ----------------------- #!/bin/sh # # Standard XYMON stuff # if [ "$XYMONHOME" = "" ]; then echo "XYMONHOME is not set... exiting" exit 1 fi if [ ! "$XYMONTMP" ]; then . $XYMONHOME/etc/bbdef.sh fi #----------------------- # EDIT Variables here #----------------------- TEST=crontab COLOR=green LOGFILE=/tmp/cron_list.log TMPFILE=$XYMONHOME/tmp/$TEST.tmp RESULT=`cat $LOGFILE` LINE="status $MACHINE.$TEST $COLOR `date` $RESULT" $XYMON $XYMSRV "$LINE" #rm -f $BBTMP/$TEST.tmp #rm -f $TMPFILE ------------------------------------- On Wed, Feb 4, 2015 at 6:54 PM, Jeremy Laidman <jlaidman at rebel-it.com.au> wrote: > Ben > > On 5 February 2015 at 13:03, Benjamin Smith <lists at benjamindsmith.com> > wrote: > > >> # cat crontab files to /tmp/cron_list.log for xymon crontab.sh >> 0 * * * * /root/bin/std/show_crontab.sh??#XYMON?#? >> > > What does this script (show_crontab.sh) do? > > Cheers > Jeremy > -- John Palys School Pathways, Inc. 866-200-6936 #2010 * Office*

1 0

Contents of root's crontab in ps list?
by lists＠benjamindsmith.com 05 Feb '15

05 Feb '15

So this one has me scratching my head... Noticing that ntpd wasn't running on a secondary server and that xymon didn't notice. Looking at the xymon procs page for the host, I notice that the entire contents of root's crontab is somehow on the ps list! Here's what the offending line in the output looks like. 19130 19120 562 01:46:38 S 19 0.0 00:00:00 0.0 600 8360 ../bin/xymon 173.166.236.101 status nye,schoolpathways,com.crontab green Thu Feb 5 01:46:39 UTC 2015??# min hour dofmonth month dow?1 * * * * wget --quiet http://alpha.schoolpathways.com/.hidden/croncheck.php?hostname=`hostname` -O /dev/null?1 1 * * * /root/bin/std/checkyum.php -e?2 3 * * * /root/bin/std/ntpdate.update.sh?1 10 * * * /root/bin/std/fscheck.php check???#SPFS ?1 2 * * * /sis/lr444/bin/scrublogs.php COMMIT?2 3 * * * /sis/lr444/bin/clean_data.php?3 4 * * * /sis/lr444/bin/spfs_clean_temp.sh delete?1 2 * * * /sis/mr-refactor-333/bin/scrublogs.php COMMIT?2 3 * * * /sis/mr-refactor-333/bin/clean_data.php?3 4 * * * /sis/mr- refactor-333/bin/spfs_clean_temp.sh delete???# zfs ?# */5 * * * * /root/zfs.usage.php?1 1 * * 1 /sbin/zpool scrub spfstank?1 5 * * * /sis/lr444/bin/zfs.snapshot.php nightly?1 10 * * * /sis/mr- refactor-333/bin/zfs.snapshot.php nightly??# cat crontab files to /tmp/cron_list.log for xymon crontab.sh?0 * * * * /root/bin/std/show_crontab.sh??#XYMON?#?30 * * * * /root/bin/std/smart_chk.sh 2>/dev/null Yes, that's the entirety of root's crontab, your standard assortment of admin and maintenance scripts... I have no idea how this is even possible, as xymon has no read access to root's cron script. I've tried running ~xymonclient/client/bin/xymonclient-linux.sh (as user xymonclient) and it doesn't put out any line like above. Also, I notice that 562 is the "user" even though /etc/passwd has an entry for 562 being xymonclient. Environment: CentOS 6 xymon-4.3.7 What else can I provide to help diagnose? Ben

3 2