- Xymon - Xymon mailman web

Latest OS Versions supported
by White-Tracey＠aramark.com 07 Jun '21

07 Jun '21

What are the latest versions of Linux OS does Xymon support? What is the latest version of Xymon available?

1 0

Inhibited submenus
by jgsuareza1984＠gmail.com 03 Jun '21

03 Jun '21

Hi, my central server suffered a restart and from that moment the subpages are not refreshed and were inhibited, what services do I need to register? -- Saludos, GS

2 1

question about analysis.cfg and central mode for windows clients
by tlwilliams4＠vcu.edu 02 Jun '21

02 Jun '21

David, the cleaner way is to list exceptions on Hosts first, then the default for all Powershell clients. I believe your behaviour is due by Xymon stops parsing on the host name once it matches, then adds the (first) default. In the example below, I have the location of the Xymon client_config identified (has to be in the Client_config file downloaded or local), the WinLogon for PROC, and the RDP port so that the columns are normally Green. The servicecheck for WinCollect is ignored on the server if it doesn't exist. It's purpose is to restart a service if found to be stopped. I believe your SVC " status=started startup=automatic" is legacy in BBWin but doesn't work in PSXymon that way. Here is an Analysis example: HOST=CCSWSUS SVC WsusService status=started SVC WinCollect status=started HOST=CCSSophos SVC Sophos_Management_Service status=started SVC SophosPatchEndpointCommunicator status=started HOST=CCS### SVC MSSQL$SUPERCHARGER status=started SVC WinCollect status=started CLASS=powershell UP 30m Load 90 95 DISK * 85 95 MEMPHYS 70 95 MEMSWAP 60 85 PROC winlogon SVC XymonPSClient status=started SVC CSFalconService status=started SVC SAVService status=started SVC SAVAdminService status=started SVC Sophos_Agent status=started SVC Sophos_AutoUpdate_Service status=started PORT "LOCAL=%([\.:]3389)$" STATE=LISTENING COLOR=YELLOW text=RDP FILE C:\Utils\Xymonclient_config.xml LOG eventlog_application Error|Warning LOG eventlog_application Error IGNORE=[1008],[2004],[1018],[1022],[11],[1524],[1008],[2003],[4099],[8005],[12289],[4879],SAVOnAccessFilter LOG eventlog_system Error IGNORE=[36874],[36871],[1002],[513],[4879],[36888],[157],[140],[50],[58],[137],[6037],[1],DCOM,Print,TermServDevices,SAVOnAccessFilter LOG eventlog_system Warning COLOR=yellow Here is a Client_Config example: clientversion:2.42:http://webserver/pub/XymonPS maxloop:720 xymonlogsend file:c:\utils\Xymonclient_config.xml servicecheck:WinCollect:5 Keep the questions coming, Tim On Wed, Jun 2, 2021 at 11:08 AM David Smith via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: David Smith <david.smith at renfrewshire.gov.uk> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Bcc: > Date: Wed, 2 Jun 2021 15:08:18 +0000 > Subject: question about analysis.cfg and central mode for windows clients > > Hi > > > > I am running Xymon server 4.3.30, and the vast majority of windows clients > using BBwin, and trying xymonpsclient on a couple. > > > > After advise from another users, I could successfully use central mode for > services, which is ok for a couple of clients but then gets quite wieldy > when it is going to be dozens. > > > > I tried the following in analysis.cfg file > > > > I created a regular expression for one pattern of hostnames, and then for > the extra services that differ on certain servers, I added a specific > host/service entry. This works fantastically well. > > > > I then tried to add another regular expression for another pattern of > hostnames, and would similarly try to add in exceptions. > > > > This does not work, the machines with the new pattern are still being > given the services list for the first pattern. What I also tried was > removing the second regular expression and just have a specific > host/service entry. That also does not work, as it still gets the original > services list even though the hostname does not fit the pattern. > > > > See below for excerpt from analysis.cfg > > > > Does anyone have any idea how/if I can do what I am trying? > > > > Regards > > > > David Smith > > > > ##A regular expression here for all the generic stuff on one pattern of > servers > > HOSTS=s[cgjprst][abghlrm]as01 > > ##stuff that is on all old app servers > > #backupexec stuff > > SVC BackupExecAgentAccelerator status=started startup=automatic > > SVC BackupExecAgentBrowser status=started startup=automatic > > SVC BackupExecDeviceMediaService status=started startup=automatic > > SVC BackupExecJobEngine status=started startup=automatic > > > > ##a bit more refined here, to add extra services for specific hosts > > HOST=schas01 > > SVC SibeliusLicenceServerV6 status=started startup=automatic > > > > HOST=sjhas01 > > SVC SibeliusLicenceServerV7 status=started startup=automatic > > > > ######STUFF below here doesnt obey the pattern > > > > ##A regular expression here for generic stuff on another pattern of servers > > HOSTS=[cgjprst][abghlrm]-as1 > > ##stuff that is on all new servers > > SVC BrokerInfrastructure status=started startup=automatic > > SVC IISADMIN status=started startup=automatic > > SVC UALSVC status=started startup=automatic > > SVC W3SVC status=started startup=automatic > > SVC VeeamDeploySvc status=started startup=automatic > > SVC VeeamEndpointBackupSvc status=started startup=automatic > > SVC VeeamTransportSvc status=started startup=automatic > > > > HOST=ndo-as1 > > SVC SibeliusLicenceServerV7 status=started startup=automatic > > > > > > Renfrewshire Council Website -http://www.renfrewshire.gov.uk > > This email and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > If you have received this email in error please notify the system manager. > Renfrewshire Council may, in accordance with the Telecommunications(Lawful > Business Practice) (Interception of Communications) Regulations 2000, > intercept e-mail messages for the purpose of monitoring or keeping a record > of communications on the Council's system. If a message contains > inappropriate dialogue it will automatically be intercepted by the > Council's Internal Audit section who will decide whether or not the e-mail > should be onwardly transmitted to the intended recipient(s). > > > > ---------- Forwarded message ---------- > From: David Smith via Xymon <xymon at xymon.com> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Bcc: > Date: Wed, 2 Jun 2021 15:08:18 +0000 > Subject: [Xymon] question about analysis.cfg and central mode for windows > clients > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

1 0

question about analysis.cfg and central mode for windows clients
by jeremy＠laidman.org 02 Jun '21

02 Jun '21

David HOSTS=... is incorrect. Try HOST=... I suspect the first list of hosts is being included by default so it looks like they're matching the first regexp but actually aren't. The second group of hosts is also being included by default along with the first. Cheers Jeremy On Thu, 3 Jun 2021 at 01:08, David Smith via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: David Smith <david.smith at renfrewshire.gov.uk> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Bcc: > Date: Wed, 2 Jun 2021 15:08:18 +0000 > Subject: question about analysis.cfg and central mode for windows clients > > Hi > > > > I am running Xymon server 4.3.30, and the vast majority of windows clients > using BBwin, and trying xymonpsclient on a couple. > > > > After advise from another users, I could successfully use central mode for > services, which is ok for a couple of clients but then gets quite wieldy > when it is going to be dozens. > > > > I tried the following in analysis.cfg file > > > > I created a regular expression for one pattern of hostnames, and then for > the extra services that differ on certain servers, I added a specific > host/service entry. This works fantastically well. > > > > I then tried to add another regular expression for another pattern of > hostnames, and would similarly try to add in exceptions. > > > > This does not work, the machines with the new pattern are still being > given the services list for the first pattern. What I also tried was > removing the second regular expression and just have a specific > host/service entry. That also does not work, as it still gets the original > services list even though the hostname does not fit the pattern. > > > > See below for excerpt from analysis.cfg > > > > Does anyone have any idea how/if I can do what I am trying? > > > > Regards > > > > David Smith > > > > ##A regular expression here for all the generic stuff on one pattern of > servers > > HOSTS=s[cgjprst][abghlrm]as01 > > ##stuff that is on all old app servers > > #backupexec stuff > > SVC BackupExecAgentAccelerator status=started startup=automatic > > SVC BackupExecAgentBrowser status=started startup=automatic > > SVC BackupExecDeviceMediaService status=started startup=automatic > > SVC BackupExecJobEngine status=started startup=automatic > > > > ##a bit more refined here, to add extra services for specific hosts > > HOST=schas01 > > SVC SibeliusLicenceServerV6 status=started startup=automatic > > > > HOST=sjhas01 > > SVC SibeliusLicenceServerV7 status=started startup=automatic > > > > ######STUFF below here doesnt obey the pattern > > > > ##A regular expression here for generic stuff on another pattern of servers > > HOSTS=[cgjprst][abghlrm]-as1 > > ##stuff that is on all new servers > > SVC BrokerInfrastructure status=started startup=automatic > > SVC IISADMIN status=started startup=automatic > > SVC UALSVC status=started startup=automatic > > SVC W3SVC status=started startup=automatic > > SVC VeeamDeploySvc status=started startup=automatic > > SVC VeeamEndpointBackupSvc status=started startup=automatic > > SVC VeeamTransportSvc status=started startup=automatic > > > > HOST=ndo-as1 > > SVC SibeliusLicenceServerV7 status=started startup=automatic > > > > > > Renfrewshire Council Website -http://www.renfrewshire.gov.uk > > This email and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > If you have received this email in error please notify the system manager. > Renfrewshire Council may, in accordance with the Telecommunications(Lawful > Business Practice) (Interception of Communications) Regulations 2000, > intercept e-mail messages for the purpose of monitoring or keeping a record > of communications on the Council's system. If a message contains > inappropriate dialogue it will automatically be intercepted by the > Council's Internal Audit section who will decide whether or not the e-mail > should be onwardly transmitted to the intended recipient(s). > > > > ---------- Forwarded message ---------- > From: David Smith via Xymon <xymon at xymon.com> > To: "xymon at xymon.com" <xymon at xymon.com> > Cc: > Bcc: > Date: Wed, 2 Jun 2021 15:08:18 +0000 > Subject: [Xymon] question about analysis.cfg and central mode for windows > clients > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

1 0

question about analysis.cfg and central mode for windows clients
by david.smith＠renfrewshire.gov.uk 02 Jun '21

02 Jun '21

Hi I am running Xymon server 4.3.30, and the vast majority of windows clients using BBwin, and trying xymonpsclient on a couple. After advise from another users, I could successfully use central mode for services, which is ok for a couple of clients but then gets quite wieldy when it is going to be dozens. I tried the following in analysis.cfg file I created a regular expression for one pattern of hostnames, and then for the extra services that differ on certain servers, I added a specific host/service entry. This works fantastically well. I then tried to add another regular expression for another pattern of hostnames, and would similarly try to add in exceptions. This does not work, the machines with the new pattern are still being given the services list for the first pattern. What I also tried was removing the second regular expression and just have a specific host/service entry. That also does not work, as it still gets the original services list even though the hostname does not fit the pattern. See below for excerpt from analysis.cfg Does anyone have any idea how/if I can do what I am trying? Regards David Smith ##A regular expression here for all the generic stuff on one pattern of servers HOSTS=s[cgjprst][abghlrm]as01 ##stuff that is on all old app servers #backupexec stuff SVC BackupExecAgentAccelerator status=started startup=automatic SVC BackupExecAgentBrowser status=started startup=automatic SVC BackupExecDeviceMediaService status=started startup=automatic SVC BackupExecJobEngine status=started startup=automatic ##a bit more refined here, to add extra services for specific hosts HOST=schas01 SVC SibeliusLicenceServerV6 status=started startup=automatic HOST=sjhas01 SVC SibeliusLicenceServerV7 status=started startup=automatic ######STUFF below here doesnt obey the pattern ##A regular expression here for generic stuff on another pattern of servers HOSTS=[cgjprst][abghlrm]-as1 ##stuff that is on all new servers SVC BrokerInfrastructure status=started startup=automatic SVC IISADMIN status=started startup=automatic SVC UALSVC status=started startup=automatic SVC W3SVC status=started startup=automatic SVC VeeamDeploySvc status=started startup=automatic SVC VeeamEndpointBackupSvc status=started startup=automatic SVC VeeamTransportSvc status=started startup=automatic HOST=ndo-as1 SVC SibeliusLicenceServerV7 status=started startup=automatic Renfrewshire Council Website -http://www.renfrewshire.gov.uk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s).

1 0

more questions about xymonpsclient
by david.smith＠renfrewshire.gov.uk 01 Jun '21

01 Jun '21

Hello More questions with respect to xymonpsclient I am running Xymon 4.3.30 on a linux server Running xymonpsclient v2.42 What I would like, is to make the displayed values on the xymon web page look as similar to those of the old bbwin client, so ideally I don't want to see any buttons on display for files, ports, procruntime or procs Services is useful, as is timediff, who and uptime I had received advice regards "watching" services, for using the analysis.cfg, which works great now thanks I have amended client-local.cfg, as I hoped that slimmode would exclude all the sections except who, I also though this would run my external script named winupd.ps1 ( which runs fine with BBwin) To this [HOST=MYCLIENTHERE] external:slowscan:winupd.ps1 slimmode services:SEEMISproxy sections:who The result seems to be it has stopped ports & xymonlog being sent Services seems to work as I expect The external script does not seem run Yet again any help/advice will be much appreciated David Smith Renfrewshire Council Website -http://www.renfrewshire.gov.uk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s).

2 1

proper upgrade method from 4.3.27 to 4.3.30
by kspringer＠innovateteam.com 01 Jun '21

01 Jun '21

One of my Xymon servers is running Ubuntu v16.04 and Xymon Server v4.3.27 I was gonna build a brand new VM and install the Xymon v4.3.30 and go through all the config edits, but if I can just upgrade Xymon instead that will save me a lot of time, but I'm unclear on the correct method.? I'd like all the configs and paths to stay intact. Is it as simple as unzipping the 4.3.30.tar.gz and running ./configure ? I will of course be snapshoting my server prior to trying this, but I thought I'd ask if anyone has attempted this and run into any issues they could share. -- Kris Springer

3 4

xymonnet additional capability -- pause
by hobbit＠elyograg.org 30 May '21

30 May '21

Over ten years ago, I asked on this list how I could get rid of the "incorrect pipelining message" logged by postfix every time the smtp, smtps, or submission tests are done. https://lists.xymon.com/oldarchive/2010/11/msg00207.html The fix that I claim worked (multiple send commands) was for a job I had at the time. Now I am have a personal mail server (that also runs xymon) and that fix I mentioned so long ago is not working. I tweaked the code to allow a "pause" action in protocols.cfg and after modifying protocols.cfg to utilize it, I have eliminated the "incorrect command pipelining" message in mail.log. Here's the patch: --- xymon-4.3.28/lib/netservices.c 2017-01-05 19:00:06.000000000 -0700 +++ pause-xymon-4.3.28/lib/netservices.c 2021-05-29 12:51:09.717461323 -0600 @@ -259,6 +259,10 @@ } } } + else if (strncmp(l, "pause ", 6) == 0) { + int pausetime = atoi(skipwhitespace(l+5)); + sleep(pausetime); + } } if (fd) stackfclose(fd); Here's the new definitions I created in protocols.cfg: [smtp] pause 2 send "ehlo xymonnet.localdomain\r\n" pause 2 send "mail\r\n" pause 2 send "quit\r\n" expect "220" options banner port 25 [smtps] pause 2 send "ehlo xymonnet.localdomain\r\n" pause 2 send "mail\r\n" pause 2 send "quit\r\n" expect "220" options ssl,banner # No default port-number assignment for smtps - nonstandard according to IANA [submission|msa] pause 2 send "ehlo xymonnet.localdomain\r\n" pause 2 send "mail\r\n" pause 2 send "quit\r\n" expect "220" options banner port 587 And this is now what I see in mail.log (testing smtps and submission: May 29 13:51:15 bilbo postfix/submission/smtpd[16324]: connect from bilbo.elyograg.org[172.31.8.104] May 29 13:51:15 bilbo postfix/submission/smtpd[16324]: disconnect from bilbo.elyograg.org[172.31.8.104] quit=1 commands=1 May 29 13:51:15 bilbo postfix/smtps/smtpd[16325]: connect from bilbo.elyograg.org[172.31.8.104] May 29 13:51:15 bilbo postfix/smtps/smtpd[16325]: disconnect from bilbo.elyograg.org[172.31.8.104] quit=1 commands=1 Interesting thing here is that it's not actually pausing. Which probably means that I implemented it incorrectly. My training on C is ancient and I'm very rusty. But even though it doesn't pause, the error is gone, simply because each smtp command is now sent in a separate packet, which appears to *sometimes* be enough "delay" for postfix to not complain about pipelining. What happens now is occasionally I will get a yellow status on smtps with the xymon UI saying "Service smtps on bilbo.elyograg.org is not OK : Unexpected service response". So I think what I will do before submitting a patch is implement a "null" action (which will do nothing) as well as a "pause" action, and get some help from the real C developers here for making "pause" behave as advertised. Can somebody point me to some instructions on properly creating and submitting a patch? Also, if I could get some info on any other files I need to modify (man pages, readme files, etc), I would really appreciate it. Thanks, Shawn

4 4

PS Client in "local mode"?
by john.thurston＠alaska.gov 28 May '21

28 May '21

The old BB and Xymon clients for Windows rely on ancient libraries, so I'm looking at my options. It appears to me that the Powershell client is the only thing out there. Is there the correct location for the most recent? https://github.com/svn2github/xymon And can anyone tell me if it can be run in "local config mode", wherein the evaluation of red/green occurs on the host (rather than the server)? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Department of Administration State of Alaska

2 3

assistance with xymonPSclient
by kspringer＠innovateteam.com 28 May '21

28 May '21

client-local.cfg is for other things.? Check services using the analysis.cfg file.? Like this. HOST=your.hosts.name ??????? SVC???? SEEMISproxy Kris Springer On 5/28/21 10:34 AM, David Smith via Xymon wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon

1 0