- Xymon - Xymon mailman web

Multiple RRD and STACK graph
by joel＠carnat.net 08 Aug '12

08 Aug '12

Hi, I have a custom graph definition that takes data (iops) from several RRD files (one file per disk). Because those disks belong to a RAID array, I'd like to STACK their iops values on a single graph. To get an overview of iops over that RAID array. I've tried using a single "STACK:rps at RRDIDX@" directive but I got the following error: "STACK must follow LINE or AREA! command:" So I used "LINE:rps at RRDIDX@#5C7CDA STACK:rps at RRDIDX@#5C7CDA:Read/sec" but this doesn't really stacks every disks value on top of each others. I there a way to tell the graph definition to "stack on previous @RRDFN@" or some way to do the sum calculation on a set of @RRDFN@ at once (like CDEF:sum=rps at RRDIDX@,sum,+)? Or do I have to write a static graph definition using the X disk I want to sum up ? TIA, Jo

2 4

iostat for Linux
by colin.coe＠gmail.com 08 Aug '12

08 Aug '12

Hi all Google knows a lot about $SUBJECT but unfortunately, a lot of the info is conflicting. What's the current wisdom for collecting and graphing iostat info on Linux? Specifically, I'm using RHEL5 and RHEL6. Thanks CC -- RHCE#805007969328369

3 5

Possible Solution to "Segmentation fault" error and failure to load "Info pages"
by Don.Kuhlman＠schawk.com 07 Aug '12

07 Aug '12

Hi folks. Just wanted to share something I discovered today on our XYMON 4.3.7 configuration. Yesterday, I was working to clean up email alerts coming to teams from our server. I modified the alerts.cfg file Added a Macro definition = MAC_SRMDK = script/home/xymon/server/ext/html_mail.pl myemail at company.com FORMAT=TEXT After doing this, and some other changes, I went to the xymon pages and clicked the Info button but then started getting a msg like this: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, root at localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. After checking the /var/log/httpd/error_log file, I saw this: [Tue Aug 07 13:35:19 2012] [error] [client 1.1.x.x] Premature end of script headers: svcstatus.sh, referer: http://xymonserver.company.com/xymon/#servername When trying to run the xymond_alert —test hostname cpu This returned: "Segmentation fault" It turned out that among my changes to alerts.cfg, I left the space " " from between mac_srmdk=script and home/xymon…. So the missing space was causing all this grief and I didn't catch it till I took a long look at the file. Once I put the " " space between the =script /home/xymon… And the script file, it cleared all the errors up. It may be obvious to others, but I was surprised to see a lot of posts in my google searches about these messages, so I thought I would share just in case it happens to anyone else and they can trace it to a simple typo on the cfg file.

1 0

FW: Hobbit [219997] uspvldmz1-DV.pvl.us.dmzrdigest.com:cpu stopped reporting (PURPLE) - NEED HELP
by Ashwin_Agarwal＠consultant.rd.com 07 Aug '12

07 Aug '12

Hi Xymon team, Need one help. We are getting ":cpu stopped reporting" for one server. Please let us know how we need to fix this. Thank you very much for your help. Ashwin. -----Original Message----- From: hobbit at radium.reimanpub.com [mailto:hobbit at radium.reimanpub.com] Sent: Tuesday, August 07, 2012 11:24 AM To: RDA-MKE Digital IT WebOps Team Subject: Hobbit [219997] uspvldmz8K01-DV.pvl.us.dmzrdigest.com:cpu stopped reporting (PURPLE) green 2012-Aug-06 23:40:46 [USPVLDMZ1-DV.pvl.us.dmzrdigest.com] up: 16 days, 3 users, 122 procs, load=2% CPU states: total 02% cpu00 2.9% cpu01 0.5% cpu02 2.2% cpu03 0.5% cpu04 0.8% cpu05 0.7% cpu06 1.2% cpu07 0.5% cpu08 2.1% cpu09 1.0% cpu10 5.2% cpu11 3.4% cpu12 3.7% cpu13 0.5% cpu14 1.3% cpu15 0.6% CPU PID Image Name Pri Time Owner MemUsage 0.8% 952 svchost.exe 8 28:24:31 NT AUTHORITY\LOCAL SERVICE 48232k 00.1% 4 System 8 6:32:21 NT AUTHORITY\SYSTEM 56k 00.1% 7660 SyncFiles.exe 8 3:17:19 RDIGEST\sUSMKE_suresync 34820k 00.0% 3760 cqmghost.exe 8 1:06:37 NT AUTHORITY\SYSTEM 12096k 00.0% 1600 Telligent.JobScheduler.Service.exe 8 1:29:39 NT AUTHORITY\NETWORK SERVICE 54836k 00.0% 1280 BBWin.exe 8 0:43:00 NT AUTHORITY\SYSTEM 19524k 00.0% 17248 WmiPrvSE.exe 8 0:19:50 NT AUTHORITY\NETWORK SERVICE 16012k 00.0% 2572 RpmAgent.exe 13 0:34:18 NT AUTHORITY\SYSTEM 158436k 00.0% 1000 svchost.exe 8 0:50:17 NT AUTHORITY\SYSTEM 54460k 00.0% 21844 mmc.exe 8 0:00:02 RDIGEST\vintava 16988k 00.0% 25400 w3wp.exe 8 0:11:12 NT AUTHORITY\NETWORK SERVICE 378356k 00.0% 20780 sppsvc.exe 8 0:00:01 NT AUTHORITY\NETWORK SERVICE 3776k 00.0% 11064 w3wp.exe 8 0:00:41 NT AUTHORITY\NETWORK SERVICE 167976k 00.0% 22076 naPrdMgr.exe 8 0:03:55 NT AUTHORITY\SYSTEM 928k 00.0% 11872 SyncFiles.exe 8 0:22:47 RDIGEST\sUSMKE_suresync 28812k 00.0% 16784 SyncFiles.exe 8 0:25:58 RDIGEST\sUSMKE_suresync 43272k 00.0% 11992 SyncFiles.exe 8 0:23:27 RDIGEST\sUSMKE_suresync 28608k 00.0% 14876 SyncFiles.exe 8 0:24:34 RDIGEST\sUSMKE_suresync 28352k 00.0% 6584 SyncFiles.exe 8 0:25:43 RDIGEST\sUSMKE_suresync 29164k 00.0% 1776 FrameworkService.exe 8 0:12:15 NT AUTHORITY\SYSTEM 12116k 00.0% 27140 conhost.exe 8 0:00:00 RDIGEST\vintava 2452k 00.0% 17952 SyncFiles.exe 8 0:58:08 RDIGEST\sUSMKE_suresync 35856k 00.0% 16260 SyncFiles.exe 8 0:06:45 RDIGEST\sUSMKE_suresync 27064k 00.0% 6816 SyncFiles.exe 8 0:22:59 RDIGEST\sUSMKE_suresync 28144k 00.0% 2896 cqmgstor.exe 8 0:05:03 NT AUTHORITY\SYSTEM 6984k 00.0% 11928 SyncFiles.exe 8 0:18:01 RDIGEST\sUSMKE_suresync 28824k 00.0% 660 lsass.exe 9 0:13:37 NT AUTHORITY\SYSTEM 45212k 00.0% 7980 SyncFiles.exe 8 0:18:31 RDIGEST\sUSMKE_suresync 29440k 00.0% 3648 WmiPrvSE.exe 8 0:08:12 NT AUTHORITY\SYSTEM 11988k 00.0% 452 svchost.exe 8 0:01:43 NT AUTHORITY\SYSTEM 10032k 00.0% 19504 SyncFiles.exe 8 0:05:13 RDIGEST\sUSMKE_suresync 26804k 00.0% 11540 csrss.exe 13 0:00:00 NT AUTHORITY\SYSTEM 3088k 00.0% 652 services.exe 9 0:04:53 NT AUTHORITY\SYSTEM 13752k 00.0% 20796 explorer.exe 8 0:00:02 RDIGEST\vintava 30208k 00.0% 3040 cpqnimgt.exe 8 0:02:31 NT AUTHORITY\SYSTEM 9560k 00.0% 772 svchost.exe 8 0:04:59 NT AUTHORITY\SYSTEM 8048k 00.0% 460 csrss.exe 13 0:01:18 NT AUTHORITY\SYSTEM 4456k 00.0% 27424 notepad.exe 8 0:00:00 RDIGEST\vintava 2488k 00.0% 21928 cmd.exe 8 0:00:00 RDIGEST\vintava 2128k 00.0% 5540 svchost.exe 8 0:00:30 NT AUTHORITY\NETWORK SERVICE 5820k 00.0% 1828 VsTskMgr.exe 8 0:00:30 NT AUTHORITY\SYSTEM 740k 00.0% 852 svchost.exe 8 0:00:32 NT AUTHORITY\NETWORK SERVICE 10284k 00.0% 580 svchost.exe 8 0:04:06 NT AUTHORITY\NETWORK SERVICE 32028k 00.0% 26108 cpqteam.exe 8 0:00:00 RDIGEST\vintava 3072k 00.0% 25904 ZenaSvcMgr.exe 8 0:00:00 RDIGEST\vintava 2372k 00.0% 24344 shstat.exe 8 0:00:00 RDIGEST\vintava 1040k 00.0% 24044 taskhost.exe 8 0:00:00 RDIGEST\vintava 2928k 00.0% 24028 rdpclip.exe 8 0:00:00 RDIGEST\vintava 2892k 00.0% 23668 winlogon.exe 13 0:00:00 NT AUTHORITY\SYSTEM 3384k 00.0% 22932 vds.exe 8 0:00:11 NT AUTHORITY\SYSTEM 4676k 00.0% 22476 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 20692k 00.0% 19836 dwm.exe 8 0:00:00 RDIGEST\vintava 2384k 00.0% 18668 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 23696k 00.0% 18408 TrustedInstaller.exe 8 0:00:00 NT AUTHORITY\SYSTEM 3152k 00.0% 11144 PresentationFontCache.exe 8 0:00:00 NT AUTHORITY\LOCAL SERVICE 7408k 00.0% 7344 SyncScheduler.exe 8 0:00:37 RDIGEST\sUSMKE_suresync 21648k 00.0% 6644 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 1596k 00.0% 6172 svchost.exe 8 0:00:00 NT AUTHORITY\NETWORK SERVICE 2800k 00.0% 5380 snmptrap.exe 8 0:00:00 NT AUTHORITY\LOCAL SERVICE 3344k 00.0% 4084 cmd.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2136k 00.0% 4068 conhost.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2220k 00.0% 4060 cmd.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2136k 00.0% 4044 hpsmhd.exe 8 0:00:00 NT AUTHORITY\SYSTEM 16124k 00.0% 3992 rotatelogs.exe 8 0:00:00 NT AUTHORITY\SYSTEM 3164k 00.0% 3984 cmd.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2136k 00.0% 3964 rotatelogs.exe 8 0:00:00 NT AUTHORITY\SYSTEM 3168k 00.0% 3952 cmd.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2132k 00.0% 3580 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 29788k 00.0% 3336 conhost.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2104k 00.0% 3328 mfeann.exe 8 0:00:00 NT AUTHORITY\SYSTEM 792k 00.0% 3312 rotatelogs.exe 8 0:00:00 NT AUTHORITY\SYSTEM 3168k 00.0% 3236 rotatelogs.exe 8 0:00:00 NT AUTHORITY\SYSTEM 3168k 00.0% 3228 SPIAgentService.exe 8 0:00:02 NT AUTHORITY\SYSTEM 9128k 00.0% 3168 McShield.exe 13 13:24:27 NT AUTHORITY\SYSTEM 65540k 00.0% 3048 hpsmhd.exe 8 0:00:00 NT AUTHORITY\SYSTEM 11192k 00.0% 3016 svchost.exe 8 0:00:08 NT AUTHORITY\SYSTEM 20740k 00.0% 2964 conhost.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2108k 00.0% 2956 cmd.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2148k 00.0% 2948 tsmmgr_agent.exe 8 0:00:01 NT AUTHORITY\SYSTEM 1628k 00.0% 2900 dsmcad.exe 8 0:00:05 NT AUTHORITY\SYSTEM 32116k 00.0% 2872 smhstart.exe 8 0:00:00 NT AUTHORITY\SYSTEM 5144k 00.0% 2844 sysdown.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2180k 00.0% 2676 conhost.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2220k 00.0% 2624 conhost.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2216k 00.0% 2616 snmp.exe 8 0:00:00 NT AUTHORITY\SYSTEM 1048k 00.0% 2524 SPIVssSvc.exe 8 0:00:00 NT AUTHORITY\SYSTEM 13876k 00.0% 2500 snmp.exe 8 0:01:10 NT AUTHORITY\SYSTEM 10020k 00.0% 2484 cqmgserv.exe 8 0:00:26 NT AUTHORITY\SYSTEM 6748k 00.0% 2468 svchost.exe 8 0:00:00 NT AUTHORITY\LOCAL SERVICE 2256k 00.0% 2440 EmailAgent.exe 8 0:00:00 NT AUTHORITY\SYSTEM 1612k 00.0% 2040 memcached.exe 8 0:00:03 NT AUTHORITY\SYSTEM 44240k 00.0% 2016 memcached.exe 8 0:00:02 NT AUTHORITY\SYSTEM 30724k 00.0% 1992 memcached.exe 8 0:00:01 NT AUTHORITY\SYSTEM 25440k 00.0% 1972 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 1592k 00.0% 1952 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 1596k 00.0% 1932 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 5224k 00.0% 1896 memcached.exe 8 0:00:00 NT AUTHORITY\SYSTEM 7280k 00.0% 1756 EngineServer.exe 8 0:00:00 NT AUTHORITY\SYSTEM 444k 00.0% 1584 SMSvcHost.exe 8 0:00:00 NT AUTHORITY\LOCAL SERVICE 11108k 00.0% 1528 inetinfo.exe 8 0:00:00 NT AUTHORITY\SYSTEM 22360k 00.0% 1500 svchost.exe 8 0:00:16 NT AUTHORITY\SYSTEM 10388k 00.0% 1444 mfevtps.exe 8 0:00:00 NT AUTHORITY\SYSTEM 552k 00.0% 1432 AGENTSERVICE.EXE 8 0:00:00 NT AUTHORITY\SYSTEM 1304k 00.0% 1372 vcagent.exe 8 0:00:00 NT AUTHORITY\SYSTEM 5328k 00.0% 1344 cpqrcmc.exe 8 0:00:00 NT AUTHORITY\SYSTEM 2164k 00.0% 1324 CISVC.EXE 8 0:00:00 NT AUTHORITY\SYSTEM 192k 00.0% 1300 cissesrv.exe 8 0:00:01 NT AUTHORITY\SYSTEM 2448k 00.0% 1176 ZenaAgent.exe 8 0:00:23 NT AUTHORITY\SYSTEM 9872k 00.0% 1156 svchost.exe 8 0:00:01 NT AUTHORITY\SYSTEM 7012k 00.0% 1128 spoolsv.exe 8 0:00:07 NT AUTHORITY\SYSTEM 7720k 00.0% 1112 w3wp.exe 8 0:00:16 NT AUTHORITY\NETWORK SERVICE 129580k 00.0% 1080 memcached.exe 8 0:00:04 NT AUTHORITY\SYSTEM 44440k 00.0% 1028 svchost.exe 8 0:00:01 NT AUTHORITY\LOCAL SERVICE 4628k 00.0% 944 LogonUI.exe 13 0:00:00 NT AUTHORITY\SYSTEM 8312k 00.0% 668 lsm.exe 8 0:00:13 NT AUTHORITY\SYSTEM 4356k 00.0% 604 winlogon.exe 13 0:00:00 NT AUTHORITY\SYSTEM 3180k 00.0% 524 wininit.exe 13 0:00:00 NT AUTHORITY\SYSTEM 2504k 00.0% 520 msdtc.exe 8 0:00:00 NT AUTHORITY\NETWORK SERVICE 3680k 00.0% 516 csrss.exe 13 0:00:00 NT AUTHORITY\SYSTEM 2540k 00.0% 364 smss.exe 11 0:00:00 NT AUTHORITY\SYSTEM 1068k 00.0% 236 svchost.exe 8 0:00:07 NT AUTHORITY\LOCAL SERVICE 10388k See http://radium.reimanpub.com/hobbit-cgi/bb-hostsvc.sh?HOSTSVC=uspvldmz1-DV,p…

3 3

Devmon graphs on status pages
by jlaidman＠rebel-it.com.au 07 Aug '12

07 Aug '12

On 3 August 2012 19:55, Buchan Milne <bgmilne at staff.telkomsa.net> wrote: Well, you just told Xymon to not use the devmon collector, which you require > to actually collect the data. > OK, but it still collected the data. > Unfortunately, there are now 2 toggles which actually have 3 meanings, so > there is some overloading, and one configuration you can't attain, and it > isn't very clear ... > Thanks for the explanation. I'm glad I wasn't confused about something simple. I've reverted the change (now TEST2RRD includes "temp=devmon") and I think I'll just leave it alone. Cheers Jeremy

1 0

devmon : No matching templates for device
by akshar.bhosale＠gmail.com 07 Aug '12

07 Aug '12

---------- Forwarded message ---------- From: akshar bhosale <akshar.bhosale at gmail.com> Date: Mon, 6 Aug 2012 01:11:04 +0530 Subject: [Xymon] (no subject) To: "xymon at xymon.com" <xymon at xymon.com> i am getting following error on rhel 5.2 server running xymon 4.2.2 and now devmon-0.3.1-beta1 for the first time ./devmon --readbbhosts [12-08-06 at 01:01:43] No matching templates for device: svr2-test if i do snmpwalk -v2c -c public svr2-test ,i get SNMPv2-MIB::sysDescr.0 = STRING: Linux svr2-test 2.6.18-128.el5 #1 SMP Wed Dec 17 11:41:38 EST 2008 x86_64 i hv created one template file cat templates/svr2-test vendor : HP model : HP server snmpver : 2 sysdesc : 2.6.18-128.el5 following is bb-hosts entry.. 192.168.0.110 svr2-test #ssh DEVMON:cid(public) pl let me know wt is wrong? _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

3 2

Email alert clarifications
by Don.Kuhlman＠schawk.com 06 Aug '12

06 Aug '12

Hi folks. I'm trying to clean up some of our alerts and need a bit of help with my configurations. In our webpage for a host, under the Info page, I see the configuration below for emails. cpu infrastructure at company.com (R) - - 30m W:0800:1600 purple,yellow,red appsupport at company.com (R) - - 30m W:0800:1600 purple,yellow,red appsupport at company.com - - 30m - purple,yellow,red The way I'm reading this, is that we have the CPU alerts set for any non green condition for this host to send an email to the infrastructure team every 30 minutes between 8 AM and 4PM weekdays. There are two places telling it to send the appsupport team an email every 30 minutes for any non-green condition. However, one is at any time, the other is weekdays 8AM – 4PM First question, why is there an "R" in parentheses behind the first two alerts? Second question, where can I find the source of my duplicated "appsupport" email ? Thanks Don K

2 1

Multiple RRD graphs and text instance
by joel＠carnat.net 06 Aug '12

06 Aug '12

Hi, When creating custom graph from multiple RRD, every GPRINT and COMMENT are repeated for each FNPATTERN. Is there a way to have text only written once. Something like: (...) COMMENT:@RRDPARAM@ title GPRINT:val at RRDIDX@:LAST:%4.0lf GPRINT:val at RRDIDX@:MIN:%4.0lf GPRINT:val at RRDIDX@:MAX:%4.0lf GPRINT:val at RRDIDX@:AVERAGE:%4.0lf\l COMMENT:Last comment written only once That will graph: param0 title 0 0 0 0 param1 title 0 0 0 0 param2 title 0 0 0 0 Last comment written only once TIA, Jo

2 2

OverSize status message and network tests
by joea＠j4computers.com 06 Aug '12

06 Aug '12

Recently moved to xymon 4.3.7 from hobbit 4.2 All seems reasonable except for two things. - Due to firewall issues, some net tests do not work. The firewall lets the "old" IP thru, but not the new servers IP. Go an answer to this some weeks back, which stated change ~server/etc/tasks.cfg to specify --source-ip=old.ip. This I took to go in [xymonnet] as an add on to the CMD line. retired old box and added IP to new box, as secondary IP, edited the file and restarted xymon server. No go. I can ping the destination successfully by telling ping to use the added IP as its source IP. I can see tcpdump tell me the source is still the original for the new server. ?? Th - While looking for clues, stumbled upon a oversize status message in xymond.log. It is oversize (!), but is being sent in the form (echo "status . . blah"; cat mymessage_file | blah formatting stuff | /home/xymon/client/bin/xymon my_server_name "@" -- Which someone on this list (Henrik ?) turned me on to a year or so ago. Anyway . . . Some assistance?

3 10

Problem with bbwin and purple
by me＠tdiehl.org 06 Aug '12

06 Aug '12

Hi, I have bbwin 0.13 running in central mode on several boxes talking to xymon 4.3.7. Most of the boxes are reporting as advertised. I have 3 of them that intermittently stop reporting and turn purple. The servers still seem to be talking to xymon but I get the following errors in the eventvwr: BBWin failed to send the client data successfully to the Xymon server. The error was : Can't send message : An existing connection was forcibly closed by the remote host.. BBWin failed to send the client data successfully to the Xymon server. The error was : Can't send message : The operation completed successfully.. The above errors are from 2 different machines. tcpdump shows that the client and server are communicating. There is nothing in the xymon logs that gives any hints. The bbwin.cfg is as follows: <?xml version="1.0" encoding="utf-8" ?> <configuration> <bbwin> <setting name="bbdisplay" value="my.xymon.ip" /> <setting name="bbdisplay" value="my.other.xymon.ip" />      <setting name="mode" value="central" /> <setting name="configclass" value="win32" /> <setting name="autoreload" value="true" /> <setting name="timer" value="5m" /> <load name="bbwinupdate" value="bbwinupdate.dll"/> <load name="cpu" value="cpu.dll"/> <load name="disk" value="disk.dll"/> <load name="externals" value="externals.dll"/> <load name="filesystem" value="filesystem.dll"/> <load name="memory" value="memory.dll"/> <load name="msgs" value="msgs.dll"/> <load name="procs" value="procs.dll"/> <load name="stats" value="stats.dll"/> <load name="svcs" value="svcs.dll"/> <load name="uptime" value="uptime.dll"/> <load name="who" value="who.dll"/> <setting name="loglevel" value="3" /> <setting name="logpath" value="..\logs\BBWin.log"/>  <setting name="logreportfailure" value="false" /> </bbwin> </configuration> I have the following in analysis.cfg: CLASS=win32 LOAD 80 90 # Load threholds are in % MEMPHYS 99 101 MEMSWAP 90 97 MEMACT 97 99 SVC Dhcp startup=automatic status=started PROC svchost.exe 3 PORT STATE=LISTENING MIN=0 TRACK=Listen TEXT=Listen Does anyone have any ideas how to troubleshoot this problem? -- Tom me at tdiehl.org Spamtrap address me123 at tdiehl.org

3 4