- Xymon - Xymon mailman web

anyone using jmxstat ?
by mgoebel＠emich.edu 25 Feb '21

25 Feb '21

Hello, I tried installing it today and after some fiddling I was able to get some of it to work. But still having some issues trying to query an apache tomcat 8.5.59 server. Any pointers would be greatly appreciated. Warnings etwas.emich.edu could not query attribute activeSessions from mbean Catalina:type=Manager,path=/,host=etwas.emich.edu etwas.emich.edu could not query attribute sessionCounter from mbean Catalina:type=Manager,path=/,host=etwas.emich.edu etwas.emich.edu could not query attribute maxActive from mbean Catalina:type=Manager,path=/,host=etwas.emich.edu etwas.emich.edu could not query attribute sessionMaxAliveTime from mbean Catalina:type=Manager,path=/,host=etwas.emich.edu etwas.emich.edu could not query attribute sessionAverageAliveTime from mbean Catalina:type=Manager,path=/,host=etwas.emich.edu etwas.emich.edu could not query attribute rejectedSessions from mbean Catalina:type=Manager,path=/,host=etwas.emich.edu etwas.emich.edu could not query attribute expiredSessions from mbean Catalina:type=Manager,path=/,host=etwas.emich.edu etwas.emich.edu could not query attribute currentThreadCount from mbean Catalina:type=ThreadPool,name=http-8080 etwas.emich.edu could not query attribute currentThreadsBusy from mbean Catalina:type=ThreadPool,name=http-8080 etwas.emich.edu could not query attribute maxThreads from mbean Catalina:type=ThreadPool,name=http-8080 Thanks, Matt -- Matthew Goebel : m <goebel at emunix.emich.edu>goebel at emich.edu : Unix Jockey @ EMU : Hail Eris Neo-Student, Net Lurker, Donut consumer, and procrastinating medher... "Always with the negative waves, Moriarty" - Oddball "Comfort the troubled, and trouble the comfortable." - Dietrich Bonhoeffer

1 1

XYMON client config files
by emohammed＠FlexiVan.com 22 Feb '21

22 Feb '21

Hi, Can someone share xymon linux client and master config file that I can refer ? I need to monitor http procs , disk space, and files. Appreciate your help. [cid:FlexiVanLogo_45deb83e-dda0-4034-ac40-31a4568e8246.png]<https://www.flexivan.com/> Ehtesham Mohammed Cloud Architect 7320 E. Butherus Dr, Ste 201 Scottsdale, AZ 85260 (o) | (m) emohammed at FlexiVan.com<mailto:emohammed at FlexiVan.com> Confidentiality Notice: The information contained in this email and any attachments may contain confidential and/or proprietary material and is intended solely for the person or entity to which it is addressed. Any unauthorized review disclosure or distribution of this email is strictly prohibited. If you have received this email in error, please notify the sender by reply email and destroy all copies of this email and any attachments.

3 3

XYMON Pre requisites
by emohammed＠FlexiVan.com 12 Feb '21

12 Feb '21

Hi, I'm trying to install XYMON on ubuntu server , Is there any document that can guide me with end to end installation ? I was able to install the server but having hard time to configure the host and what ports to open on firewall side. Please advise Thanks [cid:FlexiVanLogo_45deb83e-dda0-4034-ac40-31a4568e8246.png]<https://www.flexivan.com/> Ehtesham Mohammed Cloud Architect 7320 E. Butherus Dr, Ste 201 Scottsdale, AZ 85260 (o) | (m) emohammed at FlexiVan.com<mailto:emohammed at FlexiVan.com> Confidentiality Notice: The information contained in this email and any attachments may contain confidential and/or proprietary material and is intended solely for the person or entity to which it is addressed. Any unauthorized review disclosure or distribution of this email is strictly prohibited. If you have received this email in error, please notify the sender by reply email and destroy all copies of this email and any attachments.

3 2

Ignoring Veeam Backup filesystems
by jeremy＠laidman.org 09 Feb '21

09 Feb '21

I'm with Robert - simple and good enough is often better than perfect but unfathomable. Consider how likely it is that you would care about a filesystem mounted under /tmp to be full. Here's a slightly more accurate match, but still very simple: DISK %^/tmp/\{.*\} IGNORE This will match any string in the form {*}. Another option is to add "delayred=disk:5" into the hosts.cfg entry for the hosts that get the local backups. This will delay the alert long enough for the filesystem to be un-mounted. However, there's a risk that a genuine alert for another filesystem is delayed by 5 minutes. On Tue, 9 Feb 2021 at 02:44, Damien Martins via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: Damien Martins <damien at makelofine.org> > To: xymon at xymon.com > Cc: > Bcc: > Date: Mon, 8 Feb 2021 16:44:22 +0100 > Subject: Re: [Xymon] Ignoring Veeam Backup filesystems > > Hello Robert, > > If you do not expect to mount something else in /tmp, you may use > something like: > DISK %^/tmp/.* IGNORE > seems easier to read and understand, however may be too wide. > > If you expect to mount something else in /tmp, then your regex seems OK > and unavoidable > Le 08/02/2021 ? 16:38, Robert Herron a ?crit : > > I'm deploying Veeam Backup & Replication to perform systems. I have a few > Linux hosts that require being backed up via the local agent instead of > using a VM-based backup. The backups run in the middle of the night as > you might expect. 2AM Sunday, I received a full filesystem alarm on a > Linux host I'm testing. It cleared in the next test sweep 5 minutes later > but the unnecessarily alarms woke me up. I want to minimize that from > happening. > > The Veeam agent creates and mounts devices under /tmp for the backup. The > df line from the filesystem alarm looks like: > Filesystem 1024-blocks Used Available Capacity Mounted on > /dev/veeamimage7 4128448 4026052 0 100% > /tmp/{16296b8b-8ad4-6614-6da9-aacdc519bd6b} > > The actual filesystem name is different on each host. I assume it's based > on the host's BIOS UUID or the block ID. I don't want to add individual > lines for each host. > > I want to add the following line to my analysis.cfg in the "CLASS=linux" > section: > DISK > %^/tmp/\{[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}\} > IGNORE > > Questions: > 1.) Is this regex valid for the analysis.cfg? > 2.) Is there a better way to handle this? > > Thanks, > --Robert. > > > > Robert Herron > robert.herron at gmail.com > > _______________________________________________ > Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon > > > > > ---------- Forwarded message ---------- > From: Damien Martins via Xymon <xymon at xymon.com> > To: xymon at xymon.com > Cc: > Bcc: > Date: Mon, 8 Feb 2021 16:44:22 +0100 > Subject: Re: [Xymon] Ignoring Veeam Backup filesystems > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

2 1

ACKCODE resets on recover
by Kenneth.Lawson＠fosterfarms.com 08 Feb '21

08 Feb '21

Hello Everyone, I would greatly appreciate it anyone might have some insite. I have setup a python script that through alerts.cfg "SCRIPT", will create incidents/events in PagerDuty. This works as expected and I can pass the ACKCODE and BBNUMERIC in place of a key for the incidents for lookups later. There is a similar process that can be used to resolve those incidents as well, and there is where I am trying to use ACKCODE and/or BBNUMERIC as a means for a key in PagerDuty for find their incident IDs. The issue is that the ACKCODE that is used by Xymon for the initial alert is set to zero when the alert has recovered. Is there a way to change this behavior to send the original ACKCODE or BBNUMERIC code in the recovered alert? Thanks -Ken Lawson Confidentiality Notice: The information contained in this electronic e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and is non- public in nature and should be considered confidential. If any reader of this communication is not the intended recipient, unauthorized use, disclosure, dissemination or copying is strictly prohibited, and may be unlawful. If you have received this communication in error, please immediately notify the sender by return e-mail, and delete the original message and all copies from your system and promptly destroy any copies made of this electronic message.

1 0

Ignoring Veeam Backup filesystems
by robert.herron＠gmail.com 08 Feb '21

08 Feb '21

I'm deploying Veeam Backup & Replication to perform systems. I have a few Linux hosts that require being backed up via the local agent instead of using a VM-based backup. The backups run in the middle of the night as you might expect. 2AM Sunday, I received a full filesystem alarm on a Linux host I'm testing. It cleared in the next test sweep 5 minutes later but the unnecessarily alarms woke me up. I want to minimize that from happening. The Veeam agent creates and mounts devices under /tmp for the backup. The df line from the filesystem alarm looks like: Filesystem 1024-blocks Used Available Capacity Mounted on /dev/veeamimage7 4128448 4026052 0 100% /tmp/{16296b8b-8ad4-6614-6da9-aacdc519bd6b} The actual filesystem name is different on each host. I assume it's based on the host's BIOS UUID or the block ID. I don't want to add individual lines for each host. I want to add the following line to my analysis.cfg in the "CLASS=linux" section: DISK %^/tmp/\{[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}\} IGNORE Questions: 1.) Is this regex valid for the analysis.cfg? 2.) Is there a better way to handle this? Thanks, --Robert. Robert Herron robert.herron at gmail.com

2 1

Bugs in apcsnmp.pl
by ed.eyles＠rothamsted.ac.uk 08 Feb '21

08 Feb '21

I am using Xymon 4.3.28. I've had problems with the script 'server/etc/apcsnmp.pl' attempting to apply SNMP checks to systems where no such checks are defined. For example, the following line in my hosts.cfg: <IP address> xxx-test01.<domain> # NAME:xxx-test01 ...results in the SNMP 'test' check being applied to system xxx-test01, even though no such check is asked for. This appears to be owing to the way hosts.cfg is parsed by apcsnmp.pl: it looks for various strings, such as "test", appearing /anywhere/ within each line of hosts.cfg, not simply as keywords. I have edited my copy of apcsnmp.pl such that it will look for each of these strings only where it is preceded by a space character or a tab character, and only where it ends at a word boundary. (I did not want to use Perl's '\s' regex shorthand in the check for whitespace before the string, because this would also match newlines.) This will prevent checks being applied because their names form part of a larger string. A side-effect of making this change was that the 'volt' checks we had defined for our UPSs stopped working. This was because these checks had been specified as "voltage" in our hosts.cfg. Changing these checks to read "volt" cured this problem. I do not know whether that use of "voltage" in hosts.cfg was a peculiarity of ours, or whether it came from some sort of predefined Xymon configuration. I attach a copy of our revised apcsnmp.pl script, in case you would like to merge this in to your main branch. I also attach a Zip version of it, in case your mail system will not allow Perl scripts as attachments. Regards Ed Rothamsted Research is a company limited by guarantee, registered in England at Harpenden, Hertfordshire, AL5 2JQ under the registration number 2393175 and a not for profit charity number 802038.

1 0

Alerts with changing Page Path
by mail＠jonasw.de 26 Jan '21

26 Jan '21

Hi, we've experienced an issue with xymond_alert, rules based on page position, and a change of this position. Our situation is as follows: * We have alerting rules for hosts on page mmm for test http. * The host X is initially on page aaa. * The check http of X becomes red, no alerts are fired for this host as there are no rules covering this scenario. * The host is relocated (by config change and SIGHUP) to page aaa, staying red. * No alerts are fired for at least a day. The information kept in the runtime state and in the checkpoint file by xymond_alert is apparently not updated when new pages are received from xymond. We suspect this is the cause of our problem. Is this desired behaviour or should this be treated as a bug? Best regards, Jonas Weber

1 0

xymon 4.3.30 on raspbian 10 and support for SSLv3
by christian.becker＠rhein-zeitung.net 26 Jan '21

26 Jan '21

Hello, i've installed xymon 4.3.30 on a raspberry pi 3 running Raspbian 10. This is probably not the best selection of an operating system for running xymon since i'm missing openssl-devel , and i cant't find it for Raspbian 10. I've installed libssl-dev and libssl1.0-dev, but during my configure command before compiling xymon it says Checking for OpenSSL ... Compiling with SSL library works OK Linking with SSL library works OK Checking if your SSL library has SSLv2 enabled SSLv2 support disabled (dont worry, all systems should use SSLv1 or TLS) Checking if your SSL library has SSLv3 enabled SSLv3 support disabled (dont worry, all systems should use SSLv1 or TLS) And this is the reason why i cannot do any https check in xymon (i get a "Bad Request" on a https check and therefore the sslcert check doesn't work). Any idea on how to get openssl-devel installed? Greetings Christian

1 0

bbd and http status tests for xymon server turned purple
by danyiem＠vcu.edu 22 Jan '21

22 Jan '21

Afternoon all, I am having an issue where the bbd, http, and sslcert tests have stopped reporting in for a xymon server after I rebooted it. This is my hosts.cfg entry: <server IP> xymonserver.name.edu # bbd https://<server IP>/ This has not changed and was green before the reboot. All other tests are ok. Any help or ideas would be appreciated! *Eliza Danyi* Operating Systems Analyst VCU Computer Center Phone: 804-827-1132 E-mail: danyiem at vcu.edu *Don't be a phishing victim -- VCU and other reputable organizations will never use email to request that you reply with your password, social security number or confidential personal information. For more details, visit **https://phishing.vcu.edu/* <https://phishing.vcu.edu/>

2 1