- Xymon - Xymon mailman web

DNS error
by troy＠athabascau.ca 17 Apr '13

17 Apr '13

This has been happening on many, but not all, of my http tests since 23:49:51 last night. cheers, Troy ----- Original Message ----- From: "Troy Adams" <troy at athabascau.ca> To: "xymon" <xymon at xymon.com> Sent: Tuesday, April 16, 2013 10:40:57 AM GMT -07:00 US/Canada Mountain Subject: DNS error A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! /Troy -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ---

3 3

DNS error
by troy＠athabascau.ca 16 Apr '13

16 Apr '13

A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! / Troy -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ---

2 2

TIME=*:2101:0729 DURATION>5 and MAIL MACRO
by bakgat8＠hotmail.com 16 Apr '13

16 Apr '13

Can anyone shed any light for me? larry:/xymondev/L:=> date -d "Tue Apr 16 22:01:23 EDT 2013" +%s 1366164083 this works: [[note *** Match with '$XCD' ***]] $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD larry:/xymondev/-L:=> gelaptopp conn --duration=6 --time=1366164083 < 00009651 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00009651 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00009651 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134 00009651 2013-04-16 22:01:23 *** Match with '$XCD' *** 00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) this works -- moved only the duration part to be on the line within the HOST paragraph [[*** Match with '$XCD DURATION>5' ***]] $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD DURATION>5 larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164> 00009878 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00009878 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00009878 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134 00009878 2013-04-16 22:01:23 *** Match with '$XCD DURATION>5' *** 00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) If I try and move the TIME as well it fails to match. Why? $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD TIME=*:2101:0729 DURATION>5 larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164> 00010046 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00010046 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00010046 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00010046 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) this does not work either ... $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED DURATION>5 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD TIME=*:2101:0729 00013510 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00013510 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00013510 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00013510 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded)

1 0

Scaling
by bferrell＠baywinds.org 16 Apr '13

16 Apr '13

Hi all, I've been doing systems monitoring for a very long time now... I was early on with BB, used HP openview back in day day, blah blah. Anyway, recently I've been told that in very large installations (multi thousands of devices) things like zabbix are the only thing(s) that will do. What are the groups thoughts on this? What ARE the scaling limits of xymon and can they be overcome somehow?

7 11

Monitoring Multiple Cores
by g.fer.ordas＠unicyber.co.uk 16 Apr '13

16 Apr '13

Hi This a topic I am complete sure was been already discussed, but I have been for hours around the web and I cannot find what I am looking for.... I am trying to monitor every cpu within the server rather than the load average, and I wonder if there anything already done rather than re-inventing the wheel again? maybe something which is already done in relation to monitoring multiple cores? Many thanks to all of you.

4 5

IGNORE for DISK and INODE in analysis.cfg
by novosirj＠umdnj.edu 16 Apr '13

16 Apr '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Quick question: does anyone know of an intelligent way to ignore both the disk and inode tests for a filesystem without adding two lines to analysis.cfg every time? I've noticed that a lot of the FS I excluded from the disk test have now returned (with all of the associated RRD cruft) in the form of the inode test now that I'm running 4.3.10. Thanks in advance for the tips. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlFswUwACgkQmb+gadEcsb52dwCfeFSq7JAh2T24jdY+wN+zIS8t 1wwAoLyGrE0FvOzvvUcNAPdEkKL8oF1b =bG8V -----END PGP SIGNATURE-----

1 0

mails in html format
by deepakdeore2004＠gmail.com 15 Apr '13

15 Apr '13

Can we send xymon alerts in html format? which will give better look to the mails.

3 3

Xymond_history
by majones＠mnsi.net 15 Apr '13

15 Apr '13

On Friday after over 800 days of operation our xymon server is reporting purple status for xymond_history. It says program crashed fatal sig caught. Yet the process is running and nothing shows in the log as a problem. Any ideas where I should start looking? Mark Jones

2 1

la graph autoscale question
by martin.flemming＠desy.de 15 Apr '13

15 Apr '13

Hi ! I've got a little stupid rrd-graphic-question... How can i change the start of y-axis with min value to be at 0 and not be autoscaled ? thanks & cheers Martin

2 2

Monitoring that iptables and SELinux are running / enabled
by spah＠syntec.co.uk 15 Apr '13

15 Apr '13

Is there any code out there to monitor that (a) iptables is running (not just set to everything allowed) (b) SELinux is enabled I've looked on Xymonton, the Xymon archives and Google but not found anything. Obviously, checking that these are running is anywhere between nice and critical if one either has a server exposed to the Internet or need to pass regulatory security checks. The way I would ideally have liked these to work (but beggers can't be choosers!) is that the iptables check would work a bit like the port checks in analysis.cfg so one can check if particular rules are enabled (and the default policy on chains), and SELinux would also be monitored and configured in analysis.cfg with options to go yellow or red depending on the state of the enabled/disabled, permissive/enforcing and targeted/strict toggles. This then allows for sending alerts to managers if someone disables security measures on a server. Kind regards, SebA

2 3