- Xymon - Xymon mailman web

Unable to access the URL "www.xymon.com"
by jayantak007＠gmail.com 03 Oct '12

03 Oct '12

Hi, I am unable to access the URL "www.xymon.com". Its redirect some other site. Kindly let me know how I can access the same. With Thanks & Regards, Jayanta.

3 3

xymon-mailack
by ray.reuter＠gmail.com 03 Oct '12

03 Oct '12

I created the .procmail file as per the man pages, installed procmail but nothing seems to work when replying to the alerts sent by my xymon server. The "Mailbox" in the .procmail file is it a file or a directory? Does anyone who has this working know what the permissions and owner ship of the .procmail file should be? Everyone on this mailing list has been instrumental with helping me through some of the issue I have had. I wish I were more of a Linux guru but I am not and the company I work for does not have a true Linux engineer, he has less experience then I do.

7 26

Is there a way to get DISK analysis.cfg functionality for a custom test?
by betsy.schwartz＠gmail.com 03 Oct '12

03 Oct '12

We've got some storage systems that don't run xymon clients (because they are storage systems and speak their own CLI). I wrote a custom script that runs on the xymon server and connects to these devices to report volume usage. So far so good. But now, I want to add functionality that exists on the built in disk test, like DISK filesystem warnlevel paniclevel GROUP=groupname Is there a way I can write my custom test to take advantage of all the built-in capabilities? Would it make sense to write a script that mimics /home/xymon/client/bin/xymonclient-<os>.sh and kick the results to xymonclient somehow? And if so how? Is there a good generic "os" to use?Will xymon fall over and cry when I don't have all the sorts of information that xymonclient usually has? Or is there a better way to go about this?

2 2

Mismatched colors / confusing alert when test and xymongen both running every 60 seconds
by betsy.schwartz＠gmail.com 03 Oct '12

03 Oct '12

We are running xymon 4.3.7 on a somewhat slow linux box (hope to migrate this week). I've experimented with running xymongen more frequently; xymon fell over when I ran it every 20 seconds so it is currently running once a minute. We have a custom test, GGAdmin, that is ALSO running once a minute and seeing somewhat frequent status changes. Yesterday it was changing from red to green, when the team was paged with this alert message: Sent: Mon 10/1/2012 4:18 PM Subject: Xymon [539804] db4.example.com:GGAdmin CRITICAL (RED) message content included: green Mon Oct 1 16:16:24 2012 <h3 style="color:cyan">Golden Gate Status </h3> &green All Golden Gate Monitors are Green <snip> So that's a red alert page, sent at 4:18 but the contents of the email indicated green at 4:16. I looked at the logs on the client, which are running verbosely. Everything on the client side was correct - sent red status with red content; green status with green content I sent these messages to the xymon server: /export/home/xymon/client/bin/bb 10.100.5.42 'status db4.example.com.GGAdmin red Mon Oct 1 16:14:07 2012 <...snip...> &red GGPROC1 status is STOPPED /export/home/xymon/client/bin/bb 10.100.5.42 'status db4.example.com.GGAdmin green Mon Oct 1 16:15:17 2012 <....snip...> &green All Golden Gate Monitors are Green /export/home/xymon/client/bin/bb 10.100.5.42 'status db4example.com.GGAdmin green Mon Oct 1 16:16:24 2012 <....snip...> &green All Golden Gate Monitors are Green My theory is that we sent status messages so frequently that between the time xymon saw the red dot and grabbed the contents for the message, the color had changed, so the email content came from a later message than the subject. Does this sound possible? We're going to be moving to a faster server, and I cranked the test frequency down to 5 minutes for now, but our new grandboss is pushing us to get the alert time down as fast as possible (and making unfavorable comparisons to Nagios...) so I'd like to get us running at as fast a cycle speed as we can handle. thanks for any thoughts

1 0

xymon-mailack
by ray.reuter＠gmail.com 02 Oct '12

02 Oct '12

I have created the .procmailrc file it looks like this. The file is in /home/xymon 755 permissions and owned by xymon:xymon I tried the ownership as root as well. DEFAULT=$HOME/Mailbox LOGFILE=$HOME/procmail.log :0 | $HOME/server/bin/xymon-mailack --env=/home/xymon/server/etc/xymonserver.cfg When I run it on the CLI using this command ./xymon-mailack --env=/home/xymon/server/etc/xymonserver.cfg --debug I get nothing, it just returns an empty line, and sits there. I must be missing something. I had it working at a previous employer but the Linux guru there got it working for me. I do not have one of them here to lend a hand. I do not see the procmail.log file nor the Mailbox directory the man pages refer to. I may be completely missing something simple here or better yet something like promail is not installed. I do get the alerts via email from the system so that is working. Again thank you for all the help.

3 10

xymon-mailack
by ray.reuter＠gmail.com 02 Oct '12

02 Oct '12

SUBJECT: Xymon [216807] lvhwebappold:disk CRITICAL (RED) test . 250 2.0.0 Ok: queued as D522A52F9 This is from another linux machine that I ran the telnet command from. On Tue, Oct 2, 2012 at 11:44 AM, Andrew Rakowski <landrew at pnnl.gov> wrote: > Hi Ray, > > To follow the SMTP protocol, I believe you need to add a "data" command > after your "rcpt to", then you can enter the "subject:" line (and any > other headers), followed by a blank line, then the body of the message. > > I think postfix is complaining that it doesn't know what the "SUBJECT: > xxx" command is... > > Cheers, > > -Andrew > > > ------------------------------------------------------------------------------ > Andrew Rakowski | Voice: 509.371.6465 | Email: > landrew at pnnl.gov > [CISSP] Infrastructure System Administration [GPG key: > 43994A12] > Environmental Molecular Sciences Lab | Pacific Northwest National > Laboratories > P.O. Box 999 | Mailstop K8-83 | Richland, WA 99352 [USA] > > ------------------------------------------------------------------------------ > > On Tue, 2 Oct 2012, Ray Reuter wrote: > > } Well we are getting closer. I am now able to telnet to the server. I > tried to send mail to > } the server but kicked off every time i try to do the subject line. > } [root at xxxcacti2 ~]# telnet XXXXXXXX.xxx.com 25 > } Trying 10.1.72.168... > } Connected to XXXXXXXXX.xxx.com (xx.xx.x.x). > } Escape character is '^]'. > } 220 XXXXXXXXX.lvh.com ESMTP Postfix > } helo XXXXXXXXXX.lvh.com > } 250 XXXXXXX.lvh.com > } MAIL FROM: raymond.reuter at xxx.com > } 250 2.1.0 Ok > } RCPT TO: xymon at xxxxxxx.xxx.com > } 250 2.1.5 Ok > } "SUBJECT: Xymon" > } 221 2.7.0 Error: I can break rules, too. Goodbye. > } Connection closed by foreign host. > } > } I have the .procmailrc file set up as per the xymon man page, still not > sure if the "Mailbox" > } is a directory or file. and the directory structure of the xymon home > directory looks like > } this. > } > } drwxr-xr-x. 2 xymon xymon 4096 Oct 2 11:02 Mailbox > } -rw-r--r--. 1 xymon xymon 0 Oct 1 12:15 procmail.log > } -rwxr-xr-x. 1 xymon xymon 124 Oct 2 11:04 .procmailrc > } > } This feature is one of the most important to the company I work for and > have been trying to > } get it to work for a couple of days now. We even added an MX record for > the server so mail > } can be delivered to it directly. Telnet works locally and remote. > } > } Any recommendations would be greatly appreciated, you have all been a > huge help so far and > } this monitoring tool has done wonders for this company. > } > } > } > } > } > } > } On Tue, Oct 2, 2012 at 1:58 AM, Jeremy Laidman <jlaidman at rebel-it.com.au> > wrote: > } On 2 October 2012 02:46, Ray Reuter <ray.reuter at gmail.com> wrote: > } I am using Centos 6.2 > } > } > } By default Centos (aka Red Hat) v6 boxes run postfix (rather than > Sendmail). > } > } During my install I do not remember installing anything as the mail > } transport, but the alerting was working right out of the box from > day one. > } > } > } Initially, postfix is configured so it won't accept SMTP connections > from off the box. > } So outbound emails will get sent OK, but incoming emails will not get > delivered to the > } Xymon server. > } > } Test this by attempting to telnet to the Xymon server on port 25 from > another device, > } such as a Windows PC, with "telnet xymon.server.name 25". If you get a > "connection > } refused" or similar message, than you need to reconfigure Postfix to > accept remote > } connections. > } > } I followed the man page for the mailack and created everything as > per the > } instructions, but I am not even sure the mail is reaching the > server at > } this point. > } > } > } Probably not. Have a look at the "STANDARD_CONFIGURATION_README" file > that came with > } Postfix for instructions on setting things up, particularly the "Postfix > on a local > } network" section. > } > } J > } > } > } > } >

1 0

getting xymon to work with win2008r2 clents in centralmode
by tomas.andersson＠sca.com 02 Oct '12

02 Oct '12

Hi there ! Has anybody got xymon to function properly with windows 2008r2 clients in central mode ?? I get it to function properly using local mode but I want to use central mode usinf the latest BBwin 0.13. When we tried to specify central mode we found that there was some problem for the BBWin to create the logfile to be sent to the xymon server Apparently since the bbwin was installed in the ...Program files (x86) folder and after quoting the Path parameter in the bbwin config file It suddenly started creating a huge 67 MB ! file to send (included all event error and application logs ...). So we then configured the client-local.cfg on the xymon server to try to ignore those. Unfortunately the xymon server did not send the client-local.cfg to the client. Qestions: the file client-local.cfg on the server where you specify what log files should be sent back to the server and what text matching you want the syntax is like: [win32] eventlog:Security:10240 ignore Success eventlog:System:10240 ignore Information eventlog:Application:10240 ignore Information [freebsd] log:/var/log/messages:10240 [netbsd] log:/var/log/messages:10240 ... The OS-name whithin brackets [ ] is this name win32 for windows 2008r2 also or should this "OS-name" (uname on all unixlike machines) be specified to something else like win64 on windows 2008r2 machines or ?? Is there a command that xymon uses to figure out the os type on windows server or how does this function ?? Is it possible to specify [] or [*] as a default entry in the client-local.cfg on the xymon server ??? Best Regards, /Tomas Andersson Unix System Admin/Tech/Dev SCA IT Services Tel. +46 31 7460313 Mob. +46 703 610313 This message may contain confidential, proprietary or legally privileged information and is intended for the addressee's use only. Any usage, disclosure, distribution, print or copying of any part of this message is prohibited unless you are the intended recipient. If you receive this message in error, please delete it from any computer and notify the sender. If you suspect that this message may have been altered, please notify the sender. SCA has taken every reasonable precaution to ensure that this e-mail and any attachments to this e-mail has been scanned for viruses. However, SCA does not accept liability for any damage caused by software viruses brought to you by this mail.

3 2

[SOLVED] Problem with the smtps test (unspecified SSL error)
by novosirj＠umdnj.edu 02 Oct '12

02 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 10/02/2012 02:22 AM, Jeremy Laidman wrote: > On 2 October 2012 13:18, Novosielski, Ryan <novosirj at umdnj.edu > > Agreed. Although that post was from 7 years ago, and a lot has > happened since then. For instance, STARTTLS is supported for > LDAPv3, so perhaps support for SMTP/STARTTLS is nigh. > > At some point, Henrik has to draw a line at the depth of > multi-layer protocols he supports. Perhaps it's time for an > external test script instead. You can then add a bunch of other > email tests such as anti-relay, anti-virus, bogus sender domain, > etc. While that is true (that one must draw the line somewhere), I think STARTTLS is a common enough one-layer-deep protocol that is pretty reasonable to support as it's used by a variety of things. Not worth the amount of effort it sounded like was described in the earlier post, but something to look toward when parts get rewritten I think. Anyways, thanks so much for your pointers. Those couple of tests were sitting broken for quite awhile, and I even had the OpenSSL output (it appeared in the bbd test for my network machine), but for some reason the fact that telnetting to the port and getting readable stuff back very much implied no SSL escaped me earlier. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBql9QACgkQmb+gadEcsb7lugCfSZBZ5yfWco8wqyA/bV2FR0fC nGEAn0uosXIJHh5zRhA4Bf93r1ZBcgro =oynN -----END PGP SIGNATURE-----

1 0

Problem with alerts on a DS value
by greg.shea＠emc.com 02 Oct '12

02 Oct '12

Hi all, Xymon 4.3.7, testing cpu load from vmstat rrd file works great except for the actual alert. I was expecting the string 'CPU Idle load Normal at &V%" HOST=%^hostprd0' to appear in the alert but it doesn't. The Subject line in email shows the correct color (YELLOW), but the body says green. The text string doesn't show up in BBALPHAMSG. Any suggestions? analysis.cfg # Use in RRD dataset from vmstat DS cpu vmstat.rrd:cpu_idl >=10 COLOR=green "TEXT=CPU Idle load Normal at &V%" HOST=%^hostprd0.* DS cpu vmstat.rrd:cpu_idl <10 COLOR=yellow "TEXT=CPU Idle load High at &V%" HOST=%^hostprd0.* DS cpu vmstat.rrd:cpu_idl <=5 COLOR=red "TEXT=CPU Idle load Critical at &V%" HOST=%^hostprd0.* alerts.cfg HOST=%^hostprd0.* MAIL greg.shea at emc.com<mailto:greg.shea at emc.com> REPEAT=30m RECOVERED SERVICE=cpu COLOR=red,yellow email notification -----Original Message----- From: Xymon Admin Dur1 Account [mailto:xymon at emc.com] Sent: Thursday, September 27, 2012 4:45 PM To: shea, greg Subject: Xymon [186647] sabbeaprd02:cpu warning (YELLOW) [cfid:1304] green Thu Sep 27 16:44:30 EDT 2012 up: 12 days, 0 users, 123 procs, load=11.10 System clock is 0 seconds off top - 16:44:32 up 12 days, 8:29, 0 users, load average: 13.66, 11.28, 10.39 Tasks: 121 total, 2 running, 119 sleeping, 0 stopped, 0 zombie Cpu(s): 27.7%us, 1.7%sy, 0.1%ni, 69.1%id, 0.1%wa, 0.2%hi, 1.2%si, 0.0%st Mem: 8175452k total, 7177740k used, 997712k free, 53092k buffers Swap: 4192956k total, 930596k used, 3262360k free, 534092k cached ..snip.. Xymon environment variables RECIPIENT= BBCOLORLEVEL=yellow BBALPHAMSG=sabbeaprd02:cpu yellow [186647] green Thu Sep 27 16:44:30 EDT 2012 up: 12 days, 0 users, 123 procs, load=11.10 System clock is 0 seconds off top - 16:44:32 up 12 days, 8:29, 0 users, load average: 13.66, 11.28, 10.39 Tasks: 121 total, 2 running, 119 sleeping, 0 stopped, 0 zombie Cpu(s): 27.7%us, 1.7%sy, 0.1%ni, 69.1%id, 0.1%wa, 0.2%hi, 1.2%si, 0.0%st Mem: 8175452k total, 7177740k used, 997712k free, 53092k buffers Swap: 4192956k total, 930596k used, 3262360k free, 534092k cached ..snip..

2 1

Problem with the smtps test (unspecified SSL error)
by novosirj＠umdnj.edu 02 Oct '12

02 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Xymon 4.2.3 here still. For some reason, smtps doesn't test properly. I see the notes that smtps doesn't have a defined port. So, I started off trying smtps:587:s in bb-hosts. That didn't work. Then I tried adding the port to bb-services (normally that service has no port listed). Nothing seems to change the response I get -- a yellow test result with this phrase: Service smtps on mail.umdnj.edu is not OK : Unexpected service response ...and this in bb-network.log: 2012-09-27 16:22:39 Unspecified SSL error in SSL_connect to submission (19202/tcp) on host 10.32.15.162: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol I don't know why there should be any problem here. Any idea what I might do to dig deeper? The OpenSSL version I'm using is 0.9.8p and works for everything else just fine. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBktyAACgkQmb+gadEcsb7LCwCeIy6e5kYi0PpcConGsdoytezj 7Z0An1e5Xp3IqHhmOJtG784uK/PFnkkw =JKRn -----END PGP SIGNATURE-----

2 2