- Xymon - Xymon mailman web

what am I missing?
by Galen.Johnson＠sas.com 08 Apr '14

08 Apr '14

I'm sure I'm just missing something simple...I have the following in my xymonserver.cfg file: MAXMSG_STATUS=640 MAXMSG_DATA=640 yet the xymond.log file is complaining that it's receiving an "Oversize data/client msg from 123.123.123.123 truncated (n=551425, limit 524288)". I had set the limit to 512 but then upped it to 640. What did I miss? =G=

2 2

xymondboard & "client data" ?
by jdustin＠usm.maine.edu 08 Apr '14

08 Apr '14

Greetings - I've been searching for a way to use Xymon to retrieve details from the "client data" report for many hosts. XYMONDBOARD looks like it is *close*, but I cannot find the exact syntax required. I'm running v4.3.7 (old, I know). If I click on the "client data available" for a host, I want to retrieve some of the stanzas in that report (client, osversion). But for many hosts, via a CLI. Thanks for any assistance you can pass along. -- Jon Dustin - Network Specialist University of Southern Maine Portland, ME 207-780-4152

3 3

ssh test request
by traxler＠lsu.edu 08 Apr '14

08 Apr '14

In light of the openssl bug today, I took a look at the ssh test and noticed that openssh version listed. Anyone know how we could add openssl version to this test? -- Isaac Traxler AIX,Linux Admin Louisiana State University, LONI traxler at lsu.edu High Performance Computing 225-578-1923 Storage & Infrastructure

1 0

question on DURATION and DOWNSECS in alerts
by Carl.Inglis＠rakon.com 08 Apr '14

08 Apr '14

http://www.xymon.com/xymon/help/manpages/man8/xymond_alert.8.html: "--cfid If this option is present, alert messages will include a line with "cfid:N" where N is the linenumber in the alerts.cfg file that caused this message to be sent." So for example, one of my recent alert messages has this as the subject line: "Xymon [41173] lin-sharepnt-01:disk warning (YELLOW) [cfid:161]" Add --cfid to the CMD in the [alerts] section of tasks.cfg Regards, Carl Carl Inglis Systems Administrator Rakon UK Limited Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom Tel: +44 1522 812630 | Fax: +44 1522 812664 | Mob: +44 7786 552915 Carl.Inglis at rakon.com | www.rakon.com -----Original Message----- From: Kevin VerMeer [mailto:KVerMeer at peoplenetonline.com] Sent: 07 April 2014 17:00 To: Carl Inglis Subject: RE: [Xymon] question on DURATION and DOWNSECS in alerts I checked my alerts.cfg and don't think this is the cause, but it's a good theory. How/where is the --cfid option set? Having this set may lead me closer to the issue. And where is the output sent? Much appreciated. -----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Carl Inglis Sent: Monday, April 07, 2014 10:39 AM To: xymon at xymon.com Subject: Re: [Xymon] question on DURATION and DOWNSECS in alerts I had a similar problem and what helped me track it down was the --cfid option to xymond_alert. I found the rule I thought was firing wasn't the rule that was actually firing - it was a catch-all that I'd left in by mistake. Hope that helps. Carl Carl Inglis Systems Administrator Rakon UK Limited Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom Tel: +44 1522 812630 | Fax: +44 1522 812664 | Mob: +44 7786 552915 Carl.Inglis at rakon.com | www.rakon.com THE QUEENS AWARDS FOR ENTERPRISE 2012 Rakon UK Ltd This message together with any attachments contains confidential information and may be subject to privilege. If you are not the intended recipient you may not distribute it in any way, you must notify the sender immediately and delete any copies of the message along with its attachments. Rakon UK Ltd is a limited company registered in England and Wales. Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS Company Registration Number: 5128090. Please be aware that Rakon UK Limited may monitor email traffic data including the date, time, subject line, sender and recipients for the purposes of security and usage monitoring. Automated monitoring systems may also be applied to ascertain whether incoming/outgoing emails are likely to contain viruses, other destructive devices or inappropriate content. -----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Kevin VerMeer Sent: 07 April 2014 16:23 To: J.C. Cleaver Cc: xymon at xymon.com Subject: Re: [Xymon] question on DURATION and DOWNSECS in alerts We are just starting with our Xymon setup, so I pretty much assume any issues are on our/my end. We are running 4.3.13. It does not appear to be waiting 15m before sending. The default is minutes, correct? -----Original Message----- From: J.C. Cleaver [mailto:cleaver at terabithia.org] Sent: Monday, April 07, 2014 10:01 AM To: Kevin VerMeer Cc: xymon at xymon.com Subject: Re: [Xymon] question on DURATION and DOWNSECS in alerts On Mon, April 7, 2014 5:55 am, Kevin VerMeer wrote: > I have a question on what I am seeing in some of the alerts being > generated. > I have a xymon alert script set up for connection events. > The alert.cfg entry is: > HOST=* SERVICE=conn COLOR=red > SCRIPT /usr/local/xymonutil/alertscripts/noconnectivity.sh > DURATION>15 REPEAT=15 RECOVERED > > To me that says the script should only be invoked if connectivity is > down for 15 minutes, repeat every 15 if still down, and one final time > when connectivity is back up. > > Within the script that gets invoked, a message gets creates like this: > MSG="Xymon is reporting no connectivty to $STATION.\n Current time: > $DATE.\n Number of seconds down: $DOWNSECS. \n Time down: $TIMEDOWN. \n" > > And one MSG that is generated is > Xymon is reporting no connectivty to sta10143. > Current time: 04/06/14 18:00:55. > Number of seconds down: 60. > Time down: 00:01:00. > > I would have expected the $DOWNSECS variable to be the total time > down, even including the original 15 minute DURATION. > Is that thinking correct? Or does DOWNSECS only include the time down > after the DURATION kicks in? > Or am I off base on something else? > Kevin, We're doing something similar and - AFAIK - $DOWNSECS is indeed the total duration of the incident (although this may be subject to any flap detection that's enabled). Q's: What version are you running? and Does it actually wait 15m before sending the first message? Regards, -jc _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

2 3

Xymon 4.3.17 - Remote Status Display
by cure4all＠gmail.com 07 Apr '14

07 Apr '14

I have 1 xymon server version 4.3.13 and the other is 4.3.17. From the server 4.3.13 I can see the "Remote Status Display" list, but nothing on 4.3.17. There is no error showing in the logs also. Thank you. >From hosts.cfg; summary xymon.All 10.10.10.10 http://xymon.something.com/xymon/ Rey

1 0

question on DURATION and DOWNSECS in alerts
by KVerMeer＠peoplenetonline.com 07 Apr '14

07 Apr '14

I have a question on what I am seeing in some of the alerts being generated. I have a xymon alert script set up for connection events. The alert.cfg entry is: HOST=* SERVICE=conn COLOR=red SCRIPT /usr/local/xymonutil/alertscripts/noconnectivity.sh DURATION>15 REPEAT=15 RECOVERED To me that says the script should only be invoked if connectivity is down for 15 minutes, repeat every 15 if still down, and one final time when connectivity is back up. Within the script that gets invoked, a message gets creates like this: MSG="Xymon is reporting no connectivty to $STATION.\n Current time: $DATE.\n Number of seconds down: $DOWNSECS. \n Time down: $TIMEDOWN. \n" And one MSG that is generated is Xymon is reporting no connectivty to sta10143. Current time: 04/06/14 18:00:55. Number of seconds down: 60. Time down: 00:01:00. I would have expected the $DOWNSECS variable to be the total time down, even including the original 15 minute DURATION. Is that thinking correct? Or does DOWNSECS only include the time down after the DURATION kicks in? Or am I off base on something else? Appreciate any thoughts on this. Thanks. Kevin

3 4

Issues with web menu display
by skadz＠skadz.com 04 Apr '14

04 Apr '14

I've upgraded a couple of my Xymon servers this week (to make sure I was seeing this issue on both) to 4.3.17. Both installed from RPMs I built, which have worked for many years. After this upgrade, I'm seeing some strangeness with the web menus. I dont' see this on the main Xymon page, but when I go to look at details of a test, I see the menu showing up like the attached picture. Both systems are 64bit CentOS 5. I looked at the source and see some stray code: /acknowledge.sh">Acknowledge alert</a><span class="invis"> | </span> (and one or two other times). I looked around and don't seem to see to be able to find anywhere in a text file that I could look to see if I could fix this. Can anyone give me a clue of where I should be looking to figure this out? I've also attached the full html where you can see the stray lines. Thanks! Skadz

2 2

alert script timing issue?
by KVerMeer＠peoplenetonline.com 04 Apr '14

04 Apr '14

I have set up a SCRIPT in alerts.cfg that runs when connectivity to any monitored client goes red. HOST=* SERVICE=conn COLOR=red SCRIPT /usr/local/xymonutil/alertscripts/noconnectivity.sh DURATION>15 REPEAT=15 RECOVERED Inside the script, it does a few things, one of which is to get the NAME associated with the client reporting the issue. It does this by: STATION=`$XYMON $XYMONSERVERHOSTNAME "hostinfo host=$BBHOSTNAME" | $SED -e 's/|/\n/g' | $GREP NAME | $CUT -d: -f2` I have seen instances where connectivity is lost to several clients at the same time, and it appears that this STATION value is getting the same value for different lost connections. For example, if there are 2 clients, with NAME value of STATION1 and STATION2, and connectivity is lost to both clients at the same time, the SCRIPT is run two times, but each run of the script will get STATION2 as the result of the above command. As there anything wrong with my logic? Is there a better/different way to approach this? Any thoughts or suggestions are appreciated. Thanks. Kevin

2 1

test of pultiple ports for same service on same host
by xymon＠elysiria.fr 04 Apr '14

04 Apr '14

Hello! I would like to monitor the same TCP service, on the same host, but running on 2 different ports. In fact, I run an MX server and it should be opened on port 25 (of course), and also on port 587 (for local network authenticated submissions). So I would like to monitor, on the same host, SMTP on port 25 and on port 587. If I write "0.0.0.0 myhost # smtp smtp:587" in "bb-hosts", it does not work and only the last directive ("smtp:587") is taken into account. What should I do? Create a new service in file "bb-services" called maybe "smtp-submission", cloning the "smtp" one and adding the 587 port? Or does somebody have another solution in mind? Thanks. -- Christian

4 4

increasing the timeout value
by bb4＠richter-it.net 04 Apr '14

04 Apr '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi fellows, we have some servers at a customers location that we have to monitor. Unfortunately the network connection is not very fast and so I am seeing a lot of timeout messages in xymonclient.log on these machines. Is it possible to increase the value of 15 seconds with a config file entry or do I have to change it in the source code and recompile or is it not possible at all? TIA Torsten - -- +---------------------------------------------------------+ | E-mail : bb4 [at] richter-it.net | | | | Homepage: http://www.richter-it.net/ | +---------------------------------------------------------+ Download my public key from: http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iEYEARECAAYFAlM9ftcACgkQ7DlmxomQk6yrVwCg3hY/4z4rCNCf62ThvzZIGDsz pXQAn2d44QSxxQAk+FTjq9Lx1s7U7Lw9 =8rwf -----END PGP SIGNATURE-----

2 1