- Xymon - Xymon mailman web

BBWin GUI Version 2.2 released
by sanderson＠CORNETSER.com 27 Apr '12

27 Apr '12

XYmon group, Found a bug in the BBwin Gui where if you download the default configuration from the internet, the code would pre populate the hostname field but unless you made a change to this field manually it would not show in the xml. This was due to a anything changed flag being set after this field was populated instead of before. Craig has corrected this.. Added a new flopper service found and added to "Do you want to skip" when adding bulk services. Added code so when over writing a config file it will create a backup of the file being over written (appending the date/time stamp of the overwrite to the filename) Source is included in the zip release. By the way I will be out at the Kaseya Connect Conference in Vegas next week, If you are out there look for the big guy with the beard and summer cap. Walk up and say hi! Shannon Anderson, MCP, MCP+I, MCSE Support Centre Systems Engineer Corporate Network Services "Count on Us" 20010 Fisher Ave, Suite E Poolesville, MD 20837 main: 240.425.8008 | fax: 301.349.2518 http://www.cornetser.com<http://www.cornetser.com/> Best Place to Work, Alliance for Workplace Excellence - 2006 - 2010; Eco-Leader 2009-2010; Health and Wellness Trailblazer 2010 ...ask me how to better manage your IT costs with [Description: Description: untitled] P Please consider the environment before printing this email

1 0

LDAP performance test
by martin.flemming＠desy.de 27 Apr '12

27 Apr '12

Hi, Buchanan et all ! Got somebody the files for the LDAP-Performance-Test from http://staff.telkomsa.net/~bgmilne/xymon/ol/ Unfortunately the side isn't available anymore :-( Thanks & cheers Martin

1 0

MAXMSG_STATUS and MAXMSG_CLICHG - Long email
by Don.Kuhlman＠schawk.com 26 Apr '12

26 Apr '12

Hi folks. I've been trying to validate that my analysis.cfg and alerts.cfg settings are set up right to get good info for certain ports and services (SQL Ports, and SQL services on windows machines). While tweaking things I noticed my messages may have been truncated, which I believe leads to invalidate status and emails (now using html_mail.pl) I changed the values in xymonserver.cfg as shown below: MAXLINE="32768" MAXMSG_STATUS="384" MAXMSG_CLIENT="1024" MAXMSG_DATA="1024" Are there going to be problems on the xymon server with me making these values larger? Should I add a MAXMSG_CLICHG setting to fix the "Oversize clichg" truncation? Here is a snip from the xymond.log file showing truncated msgs… 012-04-26 13:58:35 Oversize clichg msg from xymond for SERVERNAME truncated (n=3985606, limit=524288) 2012-04-26 13:58:35 Oversize clichg msg from xymond for SERVERNAME truncated (n=3985606, limit=524288) 2012-04-26 16:01:41 Oversize data/client msg from xxx.xx.xx.xx truncated (n=4471230, limit 1048576) 2012-04-26 16:06:48 Oversize data/client msg from xxx.xx.xx.xx truncated (n=4471517, limit 1048576) Should I be doing something else for the analysis.cfg to watch SQL ports and services? I'm sending another email with the analysis.cfg and alerts.cfg settings to keep this from being too long. Any thoughts appreciated. Thanks Don K

2 1

Analysis.cfg settings to monitor Windows SQL services and Ports
by Don.Kuhlman＠schawk.com 26 Apr '12

26 Apr '12

Hi. This is kind of related to the other msg I just sent about the messages getting truncated and whether I should change values in xymonserver.cfg. I'm setting up SQL and MYSQL server monitors for Windows and Linux servers respectively. Here is a snip from the analysis.cfg file for two SQL servers on Windows. HOST=%SQL TIME=W:0800:1600 GROUP=DBA_GROUP SVC ReportServer status=started startup=automatic SVC MSSQLSERVER status=started startup=automatic SVC SQLBrowser status=started startup=automatic SVC SQLSERVERAGENT status=started startup=automatic SVC SQLWriter status=started startup=automatic PORT STATE=LISTEN LOCAL=%[.:](1433)$ MIN=1 TEXT=SQL_Port_1433 PROC ReportingServicesService.exe 1 1 PROC sqlservr.exe 1 1 TEXT=SQLServer Here is the alerts.cfg line for the email for the DBA_GROUP $DBA_GROUP=SCRIPT /home/xymon/server/ext/html_mail.pl don.kuhlman at schawk.com TIME:W:0800:1645 RECOVERED FORMAT=TEXT I'm not getting what I expect in the emails about these and don't know if it's because the messages are being truncated or not (xymond.log shows truncate messages). I'm not getting anything on Port 1433 in the webpages – it's showing Green – Listen (found 33, req. none) Thu Apr 26 17:20:21 2012 - Ports OK [green] Listen (found 33, req. none) Active Connections Any pointers appreciated. Thanks Don K

1 0

Bug - xymond not displaying user channel
by john.horne＠plymouth.ac.uk 26 Apr '12

26 Apr '12

Hello, I noticed that the 'xymond' web page on our test Xymon (4.3.7) server shows the number of messages and readers for the various channels (status, data, notes etc). However, the 'user' channel is not shown. As an example from the xymon.net web site: http://www.xymon.net/xymon-cgi/svcstatus.sh?HOST=jorn.hswn.dk&SERVICE=xymond Looking at the code in xymond.c, all the required information is there, it's just not shown. I am currently working on using the user channel, so would like the information displayed. Attached is a very short patch which allows the 'user' channel to be shown. Note: Not sure whether this is correctly called the 'user' channel or the 'usermsg' channel. The patch calls it the 'user' channel. John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

1 0

Hobbit default ssl certs
by janford.hof＠cats.usdoj.gov 26 Apr '12

26 Apr '12

I've delved into many files and Internet sites, but cannot find where the global defaults are for WARNDAYS and ALARMDAYS for sslcert. I can modify the parameters for various servers in the bb-hosts file, but I need to find the overall defaults. If they are hidden in a binary coded file, how would I decompile it, or whatever, to find this info? Thanks for any answers. Janford Hof DOJ AFMS Unisys Contractor Floor 5 Rm. 5W.414 145 N Street, NE Washington, DC 20530 Direct: (202) 305 4963 janford.hoff at unisys.com<mailto:janford.hoff at unisys.com> (Alternate e-mail) Confidentiality Notice: This message (including any attachments) contains privileged and confidential information intended for a specific purpose, and is protected by law. If you are not the intended recipient, please notify the sender and permanently delete this message and any attachments immediately. Any disclosure, dissemination, distribution, or copying of this message, or the taking of any action based on it, is strictly prohibited. You should not retain, copy or use this message or any attachments for any purpose, nor disclose all or any part of the contents to any other person.

3 3

Customizing Xymon email formats
by Don.Kuhlman＠schawk.com 25 Apr '12

25 Apr '12

Hi folks. Thought I would share this. I modified the html_mail.pl script to replace hobbit or bb references with xymon references. It was using some older pointers so I replaced that. I also re-formatted the email piece to change the subject line. I don't know if there is any interest in this, but I can share the .pl code if so. I had a question about this though - if I want to keep only the item that has the alert and get rid of all the extra info from $bbalphmsg, is there some way to do that besides using FORMAT=SMS in the alerts.cfg file? When I use FORMAT=SMS, I get a shorter msg, but then lose the other items that are alerting. Regards, Don K Here's a snip of the long email with the Proto listing shortened. I would only like the items with the alert in the email. See http://xymonserver.domain.com/xymon-cgi/svcstatus.sh?HOST=SERVERNAME&SERVIC…<http://srmxymon.ambrosi.com/xymon-cgi/svcstatus.sh?HOST=C3SRMSQL01P&SERVICE…> red Wed Apr 25 14:56:04 2012 - Ports NOT ok [cid:3A143FC6-FC3C-45BF-95B1-B4C2509C3D73] SQL_Port_1433 (found 0, req. 1 or more) [cid:DB9F1850-5AED-4E93-9CA0-7A19E6BC9855] Listen (found 37, req. none) Active Connections Proto Local Address Foreign Address State TCP 0.0.0.0:80 0.0.0.0:0 LISTENING TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:2383 0.0.0.0:0 LISTENING … .. .

1 0

Master slave configuration
by tdiehl＠rogueind.com 25 Apr '12

25 Apr '12

Hi, I have 2 xymon servers that watch the same networks and servers from 2 geographically diverse locations. The idea is that if one of the servers looses connectivity I will get notified from the other system. This seems to almost work OK, except both servers send ALL of the client data they have to the other server. If I click on the xymond icon I see things under Multi-source statuses like system1:smtp reported by 172.25.1.2 and 192.168.0.2. Can someone tell me how to configure the xymon servers to only send client data about themselves to the other server? I would like each server to run and report only its own test results. Is this documented somewhere? My Google foo has not worked very well wrt this question. Regards, -- Tom Diehl tdiehl at rogueind.com Spamtrap address mtd123 at rogueind.com

2 2

Additional tests from xymon server
by damian.ioan＠gmail.com 25 Apr '12

25 Apr '12

Hi Thank you all for your replies. xymongrep is what I was looking for. Also, Buchan's script was very helpful. I've managed to add the desired checks by adding a new task in $XYMONHOME/servers/etc/tasks.d/domain-checks.cfg like this: [Domain] ENVFILE $XYMONSERVERROOT/server/etc/xymonserver.cfg NEEDS xymond CMD $XYMONSERVERROOT/server/ext/domain_check.pl LOGFILE $XYMONSERVERLOGS/ext-domain_check.log INTERVAL 5m In $XYMONSERVERROOT/server/ext/domain_check.pl I used xymongrep to filter out only the hosts with the domain tag in hosts.cfg and sent the status for each of the hostnames I've found back to xymon. I'm a bit suprised I couldn't find documentation for such endevours more easily. On 4/16/2012 12:25 PM, Buchan Milne wrote: > On Friday, 13 April 2012 19:10:34 Ioan Damian wrote: >> Hi, >> >> I'm trying to add a test to the xymon server. This one has to reside >> server-side because not it does domain checks and not all domains have an >> assigned IP. Also, connectivity is not a concern here. What I'm trying to >> do is add some domain in a subpage and check for changes in their >> nameserver IPs. I've written a perl script that does the job and it takes >> the domain name as a parameter. In practice I'm trying to replicate what >> xymonnet does with the various checks like dns, http, smtp, etc. >> >> I would have something like this hosts.cfg: >> >> page domainchecks<H3>Domain Checks<H3> >> <some IP> <the domain name> # noconn<my_test_name> >> >> I did scrip this to check all domains at once but, that's not a desired >> behavior because I need to xymon to treat them separately and tell me for >> each if something changed or not according to my script. >> >> I setup a test task in tasks.cfg like this: >> >> [Environment] >> ENVFILE /var/lib/xymon/server/etc/xymonserver.cfg >> NEEDS xymond >> CMD $XYMONSERVERROOT/server/ext/env.pl >> LOGFILE $XYMONSERVERLOGS/ext-env.log >> INTERVAL 5m >> >> I've set it up for some hosts to no avail: >> >> <some ip> <hostname> # env >> >> It only shows up for the xymon server, which leads me to think this is more >> cumbersome than I first thought. Has anyone managed to do something like >> this before? > Please find an example attached. If I were to write this script today, I might > rather use a perl module I have that handles the communication with hobbitd. > This one uses 'ol' as the service name, or tag that should be in the hosts.cfg > file. I haven't modified it to run in Xymon 4.3.x, the bbhostgrep, and > possibly $ENV{BB} and $ENV{BBDISP} may need to be changed ... > > I would recommend against using 'env' as a test name though, as some tests > (e.g. Devmon templates) use 'env' for 'environmental monitoring', such as > temperature, humidity etc. > > Regards, > Buchan

2 2

PROC matching failure due to column bloat
by jlaidman＠rebel-it.com.au 24 Apr '12

24 Apr '12

Peeps I have both Solaris and Linux servers where a large or long-running process causes PROC matching to fail. Here are some examples: 7701 1 root Feb 28 S 24 0.0 00:00:00 0.0 572 2692 /sbin/agetty -L 9600 ttyS0 vt102 7702 1 root Feb 28 S 23 0.0 00:00:00 0.0 576 2692 /sbin/agetty -L 9600 ttyS1 vt102 7704 1 named Feb 28 S 18 2.4 1-08:59:39 4.4 270500 412784 /usr/sbin/named -u named -f 26498 3293 root 12:47:46 S 14 0.0 00:00:00 0.0 468 2676 sleep 180 This is on Linux. Note the longer-than-a-day TIME column that pushes the columns after it to the right. The following is on Solaris 9: 11201 11199 n101649 12:38:54 S 59 0.0 0:00 0.0 1000 1144 vmstat 300 2 11202 1 n101649 12:38:54 S 59 0.0 0:00 0.0 968 1104 sh -c iostat -dxsrP 300 2 1>/tmp/xymon_iostatdisk.redacted 3244 2965 root Feb_16 S 59 0.0 5:20 0.1 7104 18736 /opt/OV/lbin/eaagt/opcle -std 3245 2965 root Feb_16 S 59 0.0 1:18 0.1 6376 20960 /opt/OV/lbin/eaagt/opcmona 3253 1 root Feb_16 S 59 0.9 1-10:46:45 0.8 58168 59632 /usr/local/sbin/named -f Solaris "ps" output allows more characters for TIME than Linux. However in this case the memory columns (RSS and VSZ) are larger than expected, pushing a couple of digits over into the process name area. It seems that Xymon is parsing these based on fixed column sizes, defined for each OS. The result of these particular examples is that Xymon fails to match on the process name. Instead, I need to use match strings like so: PROC "%^(\d* |^)/usr/local/sbin/named(\s*$|\s)" 1 1 "TEXT=/usr/local/sbin/named" or PROC "%^(\d* |^)/usr/sbin/named(\s*$|\s)" 1 1 "TEXT=/usr/sbin/named" I guess this email is part "am I doing something wrong", part "does anyone have a better idea", and part feature request (for more awk-like positional matching). Cheers Jeremy

3 2