- Xymon - Xymon mailman web

RRD - Aberrant Behavior Detection with Holt-Winters Forecasting
by nicolas＠lienard.name 23 Oct '12

23 Oct '12

Hello When devices are too overloaded; we got lot of gap in the graph and it is not very nice. To avoid that, i would like to implement the abberrant behavior detection provided by RRDTOOL. Following http://oss.oetiker.ch/rrdtool/doc/rrdcreate.en.html, i defined a new RRA in ~xymon/server/etc/rrddefinitions.cfg [test_rrd] RRA:AVERAGE:0.5:1:576 RRA:AVERAGE:0.5:6:576 RRA:AVERAGE:0.5:24:576 RRA:AVERAGE:0.5:288:576 # RRA:HWPREDICT:<array length>:<alpha>:<beta>:<period> # enable RRAs for aberrant detection, 1 day seasonal store for 5 day RRA:HWPREDICT:1440:0.1:0.0035:288 <------ new entry i got a simple test script running every 5 mn: sh-3.00$ cat test_rrd.sh #!/bin/sh HOSTNAME="test_device" value=42 $BB $BBDISP "status+200d $HOSTNAME.test_rrd green `date` test: $value" i got ncv conf in xymonserver.cfg, the graph is working fine with this basic definition: [test_rrd] TITLE test RRD YAXIS value DEF:a=test_rrd.rrd:test:AVERAGE LINE2:a#00CC00:test value GPRINT:a:LAST: \: %5.1lf (cur) GPRINT:a:MAX: \: %5.1lf (max) GPRINT:a:MIN: \: %3.1lf (min) GPRINT:a:AVERAGE: \: %5.1lf (avg)\n now, if i add the def: DEF:b=test_rrd.rrd:test:HWPREDICT the graph is not showing anymore [even if i didn t use the new DEF on a LINE] :( if i dump the rrd i can see the RRA : sh-3.00$ rrdtool dump /opt/xymon/data/rrd/test_device/test_rrd.rrd |grep HW <cf> HWPREDICT </cf> any idea is welcome. Thanks. regards Nico

1 0

HTTP tests
by colin.coe＠gmail.com 22 Oct '12

22 Oct '12

Hi all I've added http tests to three hosts. Two of the hosts now have an icon against the http test. The third host still just has a hyphen ('-'). I don't see anything being logged on the webserver nor do I see anything unusual on the Xymon host. Could I get some pointers on debugging this? Thanks CC -- RHCE#805007969328369

1 1

4.3.10 fping4 and fping6 errors
by betsy.schwartz＠gmail.com 21 Oct '12

21 Oct '12

building 4.3.10 on RHEL6 I've got fping in /usr/local/sbin/fping, and the configure.server script found it, so I assume these errors are spurious? chown root /home/xymon/server/bin/fping4 /home/xymon/server/bin/fping6 || echo "Could not make fping4/fping6 owned by root, continuing" chown: cannot access `/home/xymon/server/bin/fping4': No such file or directory chown: cannot access `/home/xymon/server/bin/fping6': No such file or directory Could not make fping4/fping6 owned by root, continuing chmod 4755 /home/xymon/server/bin/fping4 /home/xymon/server/bin/fping6 || echo "Could not make fping4/fping6 suid-root, continuing" chmod: cannot access `/home/xymon/server/bin/fping4': No such file or directory chmod: cannot access `/home/xymon/server/bin/fping6': No such file or directory Could not make fping4/fping6 suid-root, continuing then xymonnet failed with Error output: Could not run the command '/usr/local/bin/fping -Ae' (exec failed) Command '/usr/local/bin/fping' failed: No such file or directory a link fixed that, but I would have expected it to be looking in the correct place

1 0

tar.gz
by lars.ebeling＠leopg9.no-ip.org 21 Oct '12

21 Oct '12

Dear all, anyone here that have a tarball of hobbit 4.2 ? -- Med vänliga hälsningar/Regards Lars Ebeling Rentier http://leopg9.no-ip.org "I am not young enough to know everything." -- Oscar Wilde

3 2

Proving that tasks.d/ directory is working
by Martin.Ward＠colt.net 20 Oct '12

20 Oct '12

Hi all, I have a few tasks that I have designed to run on the Xymon server. I have created files in the tasks.d/ subdirectory based on the configs in the tasks.cfg file but they don't seem to be running. One example entry from a file in tasks.d is: # "replicate_ldap" runs the in-house LDAP replication checks. [ldap_replication] ENVFILE /opt/xymon/server/etc/xymonserver.cfg CMD /opt/xymon/server/ext/ldap_check_replication LOGFILE $BBSERVERLOGS/ldap_replication.log INTERVAL 5m It's a simple configuration and the files exist but the log file has not been updated in weeks. I cannot find any log information about the tasks.cfg file or its inclusions, it doesn't seem to be mentioned anywhere in the Xymon log files, can someone give me a clue as to how I can debug this? |\/| [Description: Colt @ 20 email sig]<http://youtu.be/jmmcILTf88I> Martin Ward Manager, Technical Services Service Operations DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net<http://www.colt.net/> Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK. Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt

2 2

Process report tweak? (a request from my boss's boss...)
by betsy.schwartz＠gmail.com 19 Oct '12

19 Oct '12

The process report shows a list of monitored processes at the top, with the missing process having a yellow dot. Is it possible in another release to list the bad process FIRST and SEPARATELY from the others? In email it gets sort of buried when there's a long list of monitored processes: red Fri Oct 12 15:50:56 EDT 2012 - Processes NOT ok &green /usr/sbin/cron (found 1, req. 1 or more) &red httpd (found 0, req. 1 or more) &green nscd (found 1, req. 1 or more) &green java (found 1, req. 1 or more) &red coldfusion8 (found 0, req. 1 or more) &green cron (found 1, req. 1 or more).... If people think this is a good idea, that is thanks Betsy

3 5

Brainstorming - open xymon tickets on *acknowledgement*? (and Xymon talking to Jira and ticket systems) (and a bit of Nagios)
by betsy.schwartz＠gmail.com 19 Oct '12

19 Oct '12

We're using Jira for ticketing, and Xymon for monitoring. Jira allows opening tickets via email, so we have a one-way communication. I've been asked (by someone coming from the world of Nagios) to investigate opening tickets on *ACKNOWLEDGE*. His reasoning is that if a ticket is opened on ACK, it is clear that every acked alert has a ticket and it is clear what ticket goes with the ack, and all tickets will have owners. If we open a ticket via email it might or might not have an owner right away, and there's no way to match the ticket with the dot on the screen. Also if we open tickets via email, we get multiple tickets when a service *flaps*, such as a disk that is cyclically going above the limits. Has anyone else worked with these issues? Thoughts I have so far: 1) process. Make sure that everyone who takes a ticket also acks the alert manually with the ticket number. This is clunky. 2) hook into the email ack (not currently enabled). When procmail parses the ack, trigger the ticket open email. Difficulty: alerts.cfg has logic to control which group gets which tickets; with procmail I am starting from scratch. 3) switch to Nagios (Not a short term project but it's on the table) 4) use a custom alert script that both sends the ticket email and sends an email ack. (difficulty: multiple tickets for a flapping service would do ... what?) (I think this is the most promising idea so far...) Interested in any ideas, thoughts, and ramblings on the subject(s)

2 1

Customising message subject in email alerts
by abs＠shadymint.com 19 Oct '12

19 Oct '12

Hi, This has been talked about a few times before and I am aware that we have the SCRIPT mechanism available for this purpose. However, what I really need to be able to do is annotate the subject line with the page where the object is located. The environment variables do not currently provide this information and I have been playing a little with findhost.cgi to see if it can be used within a script to extract the page. This has not been successful and anyway is flawed because the object may appear on multiple pages. I have even experimented with fetching hosts.cfg and parsing the pages which kindof works, but there must surely be a better way? Anyone had similar problems or got any other suggestions? Thanks -- Andy

2 1

Quick urgent question - *IS* there an issue with combo tests in 4.3.10?
by betsy.schwartz＠gmail.com 19 Oct '12

19 Oct '12

I'm scheduled to upgrade to 4.3.10 this weekend so if there's an issue with combo tests I need to verify that it won't affect us What are people seeing? Working ok for you? Not OK? sign/symptom/test case? thanks so much!!

2 1

Xymon Wiki Pages
by josh＠imaginenetworksllc.com 19 Oct '12

19 Oct '12

Who is responsible for this? http://en.wikibooks.org/wiki/System_Monitoring_with_Xymon I've been trying to make changes to the compiling guide for CentOS and since January I've not gotten my changes reviewed. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

2 3